PERFORCE change 70720 for review

[Andrew Reisse]

http://perforce.freebsd.org/chv.cgi?CH=70720

Change 70720 by areisse at areisse_tislabs on 2005/02/09 20:14:35

	SEBSD policy:
	Change the ordering of capability permissions to match the 
	in-kernel CAP_* values. 

Affected files ...

.. //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/flask/access_vectors#8 edit

Differences ...

==== //depot/projects/trustedbsd/sebsd/contrib/sebsd/policy/flask/access_vectors#8 (text+ko) ====

@@ -336,23 +336,11 @@
 	fowner          
 	fsetid          
 	kill
-	link_dir
 	setfcap            
 	setgid           
 	setuid 
-	mac_downgrade
-	mac_read
-	mac_relabel_subj
-	mac_upgrade
-	mac_write
-	inf_nofloat_obj
-	inf_nofloat_subj
-	inf_relabel_obj
-	inf_relabel_subj
 	audit_control
 	audit_write        
-	setpcap
-	xxx_invalid1          
 	linux_immutable  
 	net_bind_service 
 	net_broadcast    
@@ -372,7 +360,6 @@
 	sys_time         
 	sys_tty_config  
 	mknod
-	lease
 }
 
 
To Unsubscribe: send mail to majordomo at trustedbsd.org
with "unsubscribe trustedbsd-cvs" in the body of the message