PERFORCE change 17426 for review

[Robert Watson]

http://people.freebsd.org/~peter/p4db/chv.cgi?CH=17426

Change 17426 by rwatson at rwatson_paprika on 2002/09/12 18:57:59

	Provide static linking options for most policies.  This means
	that when we build NOTES/LINT, we'll get INVARIANTS support;
	also, that users can statically link security modules if the
	risks of loadable modules concern them, or their environment
	does not support klds.

Affected files ...

.. //depot/projects/trustedbsd/mac/sys/conf/NOTES#16 edit
.. //depot/projects/trustedbsd/mac/sys/conf/files#48 edit
.. //depot/projects/trustedbsd/mac/sys/conf/options#27 edit

Differences ...

==== //depot/projects/trustedbsd/mac/sys/conf/NOTES#16 (text+ko) ====

@@ -729,8 +729,16 @@
 
 # Support for Mandatory Access Control (MAC)
 options 	MAC
+options 	MAC_BIBA
+options		MAC_BSDEXTENDED
 options 	MAC_DEBUG
-#options 	MAC_NONE		# Statically link mac_none policy
+options 	MAC_IFOFF
+options 	MAC_MLS
+options 	MAC_NONE
+options 	MAC_PARTITION
+options 	MAC_SEEOTHERUIDS
+options 	MAC_TE
+options 	MAC_TEST
 
 
 #####################################################################

==== //depot/projects/trustedbsd/mac/sys/conf/files#48 (text+ko) ====

@@ -1356,9 +1356,17 @@
 posix4/ksched.c	optional _kposix_priority_scheduling
 posix4/p1003_1b.c	standard
 posix4/posix4_mib.c	standard
-security/mac_none/mac_none.c	optional mac_none
+security/mac_biba/mac_biba.c	optional mac_biba
+security/mac_bsdextended/mac_bsdextended.c	optional mac_bsdextended
+security/mac_ifoff/mac_ifoff.c	optional mac_ifoff
 security/mac_lomac/mac_lomac.c	optional mac_lomac
 security/mac_lomac/kernel_plm.c	optional mac_lomac
+security/mac_mls/mac_mls.c	optional mac_mls
+security/mac_none/mac_none.c	optional mac_none
+security/mac_partition/mac_partition.c	optional mac_partition
+security/mac_seeotheruids/mac_seeotheruids.c	optional mac_seeotheruids
+security/mac_te/mac_te.c	optional mac_te
+security/mac_test/mac_test.c	optional mac_test
 ufs/ffs/ffs_alloc.c	optional ffs
 ufs/ffs/ffs_balloc.c	optional ffs
 ufs/ffs/ffs_inode.c	optional ffs

==== //depot/projects/trustedbsd/mac/sys/conf/options#27 (text+ko) ====

@@ -125,9 +125,17 @@
 
 # Support for Mandatory Access Control (MAC)
 MAC		opt_mac.h
+MAC_BIBA	opt_dontuse.h
+MAC_BSDEXTENDED	opt_dontuse.h
 MAC_DEBUG	opt_mac.h
+MAC_IFOFF	opt_dontuse.h
 MAC_LOMAC	opt_dontuse.h
+MAC_MLS		opt_dontuse.h
 MAC_NONE	opt_dontuse.h
+MAC_PARTITION	opt_dontuse.h
+MAC_SEEOTHERUIDS	opt_dontuse.h
+MAC_TE		opt_dontuse.h
+MAC_TEST	opt_dontuse.h
 
 # Do we want the config file compiled into the kernel?
 INCLUDE_CONFIG_FILE	opt_config.h
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message