PERFORCE change 40194 for review
Robert Watson
rwatson at FreeBSD.org
Wed Oct 22 20:12:03 GMT 2003
http://perforce.freebsd.org/chv.cgi?CH=40194
Change 40194 by rwatson at rwatson_paprika on 2003/10/22 13:11:47
Remove accidentally retained duplicate vm enforcement toggle,
vm revocation toggles. These are also in mac_process.c.
Affected files ...
.. //depot/projects/trustedbsd/mac/sys/security/mac/mac_vfs.c#2 edit
Differences ...
==== //depot/projects/trustedbsd/mac/sys/security/mac/mac_vfs.c#2 (text+ko) ====
@@ -80,21 +80,6 @@
&mac_enforce_fs, 0, "Enforce MAC policy on file system objects");
TUNABLE_INT("security.mac.enforce_fs", &mac_enforce_fs);
-static int mac_enforce_vm = 1;
-SYSCTL_INT(_security_mac, OID_AUTO, enforce_vm, CTLFLAG_RW,
- &mac_enforce_vm, 0, "Enforce MAC policy on vm operations");
-TUNABLE_INT("security.mac.enforce_vm", &mac_enforce_vm);
-
-static int mac_mmap_revocation = 0;
-SYSCTL_INT(_security_mac, OID_AUTO, mmap_revocation, CTLFLAG_RW,
- &mac_mmap_revocation, 0, "Revoke mmap access to files on subject "
- "relabel");
-
-static int mac_mmap_revocation_via_cow = 1;
-SYSCTL_INT(_security_mac, OID_AUTO, mmap_revocation_via_cow, CTLFLAG_RW,
- &mac_mmap_revocation_via_cow, 0, "Revoke mmap access to files via "
- "copy-on-write semantics, or by removing all write access");
-
#ifdef MAC_DEBUG
static int mac_debug_label_fallback = 0;
SYSCTL_INT(_security_mac_debug, OID_AUTO, label_fallback, CTLFLAG_RW,
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list