diff options
author | rwatson <rwatson@FreeBSD.org> | 2009-01-10 10:58:41 +0000 |
---|---|---|
committer | rwatson <rwatson@FreeBSD.org> | 2009-01-10 10:58:41 +0000 |
commit | 5743072acfd292c98911ffb9ccbb0889d58912a6 (patch) | |
tree | a09d92856c004db2e7784d8452b80357e3fc5d22 /sys/security/mac_bsdextended/mac_bsdextended.c | |
parent | aeaccdebe1a1d60a30f576f94448e6d0bb078a93 (diff) | |
download | FreeBSD-src-5743072acfd292c98911ffb9ccbb0889d58912a6.zip FreeBSD-src-5743072acfd292c98911ffb9ccbb0889d58912a6.tar.gz |
Rather than having MAC policies explicitly declare what object types
they label, derive that information implicitly from the set of label
initializers in their policy operations set. This avoids a possible
class of programmer errors, while retaining the structure that
allows us to avoid allocating labels for objects that don't need
them. As before, we regenerate a global mask of labeled objects
each time a policy is loaded or unloaded, stored in mac_labeled.
Discussed with: csjp
Suggested by: Jacques Vidrine <nectar at apple.com>
Obtained from: TrustedBSD Project
Sponsored by: Apple, Inc.
Diffstat (limited to 'sys/security/mac_bsdextended/mac_bsdextended.c')
-rw-r--r-- | sys/security/mac_bsdextended/mac_bsdextended.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/sys/security/mac_bsdextended/mac_bsdextended.c b/sys/security/mac_bsdextended/mac_bsdextended.c index b30b214..fa64011 100644 --- a/sys/security/mac_bsdextended/mac_bsdextended.c +++ b/sys/security/mac_bsdextended/mac_bsdextended.c @@ -523,4 +523,4 @@ static struct mac_policy_ops ugidfw_ops = }; MAC_POLICY_SET(&ugidfw_ops, mac_bsdextended, "TrustedBSD MAC/BSD Extended", - MPC_LOADTIME_FLAG_UNLOADOK, NULL, 0); + MPC_LOADTIME_FLAG_UNLOADOK, NULL); |