PERFORCE change 19906 for review
Robert Watson
rwatson at freebsd.org
Tue Oct 22 17:17:09 GMT 2002
http://perforce.freebsd.org/chv.cgi?CH=19906
Change 19906 by rwatson at rwatson_tislabs on 2002/10/22 10:17:08
By popular request, remove mac_te, the experimental type
enforcement policy. SEBSD does a much better job of TE,
and this experimental policy never really got off the ground
(but did cause a lot of work to be done every time we
modified the framework :-).
Affected files ...
.. //depot/projects/trustedbsd/mac/MACREADME#23 edit
.. //depot/projects/trustedbsd/mac/sys/conf/NOTES#27 edit
.. //depot/projects/trustedbsd/mac/sys/conf/files#63 edit
.. //depot/projects/trustedbsd/mac/sys/conf/options#37 edit
.. //depot/projects/trustedbsd/mac/sys/modules/mac_te/Makefile#2 delete
.. //depot/projects/trustedbsd/mac/sys/security/mac_te/mac_te.c#90 delete
.. //depot/projects/trustedbsd/mac/sys/security/mac_te/mac_te.h#13 delete
Differences ...
==== //depot/projects/trustedbsd/mac/MACREADME#23 (text+ko) ====
@@ -29,7 +29,6 @@
mac_none_load="NO" # Null MAC policy
mac_partition_load="NO" # Partition MAC policy
mac_seeotheruids_load="NO" # UID visbility MAC policy
-mac_te_load="NO" # Type Enforcement policy (boot only)
sebsd_load="NO" # Port of SELinux/FLASK (boot only)
==== //depot/projects/trustedbsd/mac/sys/conf/NOTES#27 (text+ko) ====
@@ -768,7 +768,6 @@
options MAC_NONE
options MAC_PARTITION
options MAC_SEEOTHERUIDS
-options MAC_TE
options MAC_TEST
==== //depot/projects/trustedbsd/mac/sys/conf/files#63 (text+ko) ====
@@ -1502,7 +1502,6 @@
security/mac_none/mac_none.c optional mac_none
security/mac_partition/mac_partition.c optional mac_partition
security/mac_seeotheruids/mac_seeotheruids.c optional mac_seeotheruids
-security/mac_te/mac_te.c optional mac_te
security/mac_test/mac_test.c optional mac_test
security/sebsd/sebsd.c optional sebsd
security/sebsd/sebsd_syscall.c optional sebsd
==== //depot/projects/trustedbsd/mac/sys/conf/options#37 (text+ko) ====
@@ -154,7 +154,6 @@
MAC_NONE opt_dontuse.h
MAC_PARTITION opt_dontuse.h
MAC_SEEOTHERUIDS opt_dontuse.h
-MAC_TE opt_dontuse.h
MAC_TEST opt_dontuse.h
SEBSD opt_dontuse.h
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list