PERFORCE change 52095 for review
Robert Watson
rwatson at FreeBSD.org
Sun May 2 20:17:42 GMT 2004
http://perforce.freebsd.org/chv.cgi?CH=52095
Change 52095 by rwatson at rwatson_paprika on 2004/05/02 13:17:19
Add some tasks.
Affected files ...
.. //depot/projects/trustedbsd/mac/TODO#2 edit
Differences ...
==== //depot/projects/trustedbsd/mac/TODO#2 (text+ko) ====
@@ -1,3 +1,27 @@
-Date Added Task Description
----------- ---- -----------
+Date Task Description
+-------- ---- -----------
+20040502 P_SUGID.optional Currently, policies can cause the
+ setting of P_SUGID on processes when
+ they manipulate the credential.
+ However, this may be inappropriate
+ for policies that track information
+ flow control in an advisory form.
+ The MAC Framework should make the
+ decision to set P_SUGID explicit
+ rather than implicit.
+
+20040502 netinet6.support Currently, TCP/IP with IPv4 is
+ fully supported; however, IPv6 is
+ not as a number of components do
+ not properly propagate labels across
+ mbuf alloc/copy operations, proper
+ checks may not occur in socket
+ delivery, etc.
+
+20040502 netatalk.support Currently, netatalk is poorly
+ supported under MAC, as most I/O
+ operations are performed using
+ socket labels rather than DDP
+ PCBs as found in IPv4.
+
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message
More information about the trustedbsd-cvs
mailing list