From 86902a1ff292f4dfa3f1e7fefb962065c8942927 Mon Sep 17 00:00:00 2001 From: rwatson Date: Tue, 30 Jul 2002 23:03:29 +0000 Subject: Introduce support for Mandatory Access Control and extensible kernel access control. Label BPF descriptor objects, permitting security features to be maintained on those objects. bd_label will be used to authorize data flow from network interfaces to user processes. BPF labels are protected using the same synchronization model as other mutable data in the BPF descriptor. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs --- sys/net/bpfdesc.h | 2 ++ 1 file changed, 2 insertions(+) (limited to 'sys/net/bpfdesc.h') diff --git a/sys/net/bpfdesc.h b/sys/net/bpfdesc.h index 7db4193..a4c03a8 100644 --- a/sys/net/bpfdesc.h +++ b/sys/net/bpfdesc.h @@ -44,6 +44,7 @@ #define _NET_BPFDESC_H_ #include +#include #include /* @@ -92,6 +93,7 @@ struct bpf_d { #endif struct mtx bd_mtx; /* mutex for this descriptor */ struct callout bd_callout; /* for BPF timeouts with select */ + struct label bd_label; /* MAC label for descriptor */ }; /* Values for bd_state */ -- cgit v1.1