freebsd-src/sys/security
Robert Watson 9b6dd12e5d Correct several issues in the integration of POSIX shared memory objects
and the new setmode and setowner fileops in FreeBSD 9.0:

- Add new MAC Framework entry point mac_posixshm_check_create() to allow
  MAC policies to authorise shared memory use.  Provide a stub policy and
  test policy templates.

- Add missing Biba and MLS implementations of mac_posixshm_check_setmode()
  and mac_posixshm_check_setowner().

- Add 'accmode' argument to mac_posixshm_check_open() -- unlike the
  mac_posixsem_check_open() entry point it was modeled on, the access mode
  is required as shared memory access can be read-only as well as writable;
  this isn't true of POSIX semaphores.

- Implement full range of POSIX shared memory entry points for Biba and MLS.

Sponsored by:   Google Inc.
Obtained from:	TrustedBSD Project
Approved by:    re (kib)
2011-09-02 17:40:39 +00:00
..
audit Fix a deficiency in the selinfo interface: 2011-08-25 15:51:54 +00:00
mac Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_biba Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_bsdextended Add hierarchical jails. A jail may further virtualize its environment 2009-05-27 14:11:23 +00:00
mac_ifoff Rather than having MAC policies explicitly declare what object types 2009-01-10 10:58:41 +00:00
mac_lomac Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-style 2010-03-02 15:05:48 +00:00
mac_mls Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_none Rather than having MAC policies explicitly declare what object types 2009-01-10 10:58:41 +00:00
mac_partition Rather than having MAC policies explicitly declare what object types 2009-01-10 10:58:41 +00:00
mac_portacl Fix typos. 2010-11-09 10:59:09 +00:00
mac_seeotheruids sysctl(9) cleanup checkpoint: amd64 GENERIC builds cleanly. 2011-01-12 19:54:14 +00:00
mac_stub Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_test Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00