Introduce support for Mandatory Access Control and extensible

kernel access control.

Extensions to libc to provide basic MAC label manipulation facilities
for userland.  These interface will be replaced in the next month
or two with more flexible interfaces, but provide sufficient support
to allow use of the Biba and MLS policies for user applications.

libc_r wrappers to follow.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs

1 files changed, 25 insertions, 2 deletions

diff --git a/lib/libc/posix1e/Makefile.inc b/lib/libc/posix1e/Makefile.inc
index f042e6d..abac906 100644
--- a/lib/libc/posix1e/Makefile.inc
+++ b/lib/libc/posix1e/Makefile.inc
@@ -18,7 +18,16 @@ SRCS+=	acl_calc_mask.c			\
 	acl_support.c			\
 	acl_to_text.c			\
 	acl_valid.c			\
-	extattr.c
+	extattr.c			\
+	mac_biba.c			\
+	mac_free.c			\
+	mac_is_present_np.c		\
+	mac_get.c			\
+	mac_mls.c			\
+	mac_sebsd.c			\
+	mac_set.c			\
+	mac_te.c			\
+	mac_text.c
 
 .if ${LIB} == "c"
 
@@ -48,6 +57,12 @@ MAN+=	acl.3				\
 	acl_to_text.3			\
 	acl_valid.3			\
 	extattr.3			\
+	mac.3				\
+	mac_free.3			\
+	mac_is_present_np.3		\
+	mac_get.3			\
+	mac_set.3			\
+	mac_text.3			\
 	posix1e.3
 
 MLINKS+=acl_delete.3 acl_delete_def_file.3	\
@@ -62,6 +77,14 @@ MLINKS+=acl_delete.3 acl_delete_def_file.3	\
 	acl_valid.3 acl_valid_file_np.3		\
 	acl_valid.3 acl_valid_fd_np.3		\
 	extattr.3 extattr_namespace_to_string.3	\
-	extattr.3 extattr_string_to_namespace.3
+	extattr.3 extattr_string_to_namespace.3 \
+	mac_get.3 mac_get_fd.3			\
+	mac_get.3 mac_get_file.3		\
+	mac_get.3 mac_get_proc.3		\
+	mac_set.3 mac_set_fd.3			\
+	mac_set.3 mac_set_file.3		\
+	mac_set.3 mac_set_proc.3		\
+	mac_text.3 mac_from_text.3		\
+	mac_text.3 mac_to_text.3
 
 .endif