PERFORCE change 18806 for review
Robert Watson
rwatson at freebsd.org
Sun Oct 6 14:21:58 GMT 2002
My commit message wasn't quite accurate. What we were not enforcing was
socket i/o via fo_read/fo_write -- we were enforcing sendfile(), send(),
recv(), etc.
Robert N M Watson FreeBSD Core Team, TrustedBSD Projects
robert at fledge.watson.org Network Associates Laboratories
On Sun, 6 Oct 2002, Robert Watson wrote:
> http://people.freebsd.org/~peter/p4db/chv.cgi?CH=18806
>
> Change 18806 by rwatson at rwatson_tislabs on 2002/10/06 06:59:19
>
> MAC checks in sys_socket.c will work much better if we include
> opt_mac.h. We weren't enforcing file-descriptor driven sends
> and receives.
>
> Affected files ...
>
> .. //depot/projects/trustedbsd/mac/sys/kern/sys_socket.c#16 edit
>
> Differences ...
>
> ==== //depot/projects/trustedbsd/mac/sys/kern/sys_socket.c#16 (text+ko) ====
>
> @@ -34,9 +34,12 @@
> * $FreeBSD: src/sys/kern/sys_socket.c,v 1.45 2002/10/03 02:12:58 truckman Exp $
> */
>
> +#include "opt_mac.h"
> +
> #include <sys/param.h>
> #include <sys/systm.h>
> #include <sys/file.h>
> +#include <sys/mac.h>
> #include <sys/protosw.h>
> #include <sys/socket.h>
> #include <sys/socketvar.h>
>
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list