In the kernel-only portionss of System V IPC objects (messages,

message queues, shared memory segments, and semaphores), add a struct
label pointer, which will hold the MAC labels for the objects.  As a
result of recent work to separate kernel and user space ABIs, this
should not break the ABI for applications using System V IPC, but will
require a rebuild of the ipcs monitoring tool.

Submitted by:	Dandekar Hrishikesh <rishi_dandekar at sbcglobal dot net>
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, SPAWAR, McAfee Research

1 files changed, 1 insertions, 0 deletions

diff --git a/sys/sys/shm.h b/sys/sys/shm.h
index 07ae3a6..0595782 100644
--- a/sys/sys/shm.h
+++ b/sys/sys/shm.h
@@ -90,6 +90,7 @@ struct shminfo {
  */
 struct shmid_kernel {
 	struct shmid_ds u;
+	struct label *label;	/* MAC label */
 };
 
 extern struct shminfo	shminfo;