PERFORCE change 100636 for review

[Robert Watson]

http://perforce.freebsd.org/chv.cgi?CH=100636

Change 100636 by rwatson at rwatson_zoo on 2006/07/05 16:10:19

	Start dropping in the basics of the new entry point naming scheme.
	Much to be fleshed out.

Affected files ...

.. //depot/projects/trustedbsd/mac2/sys/sys/mac_policy.h#2 edit

Differences ...

==== //depot/projects/trustedbsd/mac2/sys/sys/mac_policy.h#2 (text+ko) ====

@@ -54,6 +54,24 @@
  *
  * Operations are sorted first by general class of operation, then
  * alphabetically.
+ *
+ * XXX: New World Order
+ *
+ * MAC entry points are generally named using the following template:
+ *
+ *   mpo_<object>_<method>()
+ *
+ * or:
+ *
+ *   mpo_<object>_check_<method>()
+ *
+ * Entry points are sorted by object type; when a single method refers to
+ * more than one object type, one is considered the "primary" according to
+ * the following sort order:
+ *
+ *   inpcb > socket > mbuf
+ *   bpfdesc > ifnet > mbuf
+ *   * > cred
  */
 struct acl;
 struct bpf_d;