src/sys/security/mac/mac_sysv_msg.c, branch release/7.0.0_cvs

This commit was manufactured by cvs2svn to create tag

2008-02-24T05:45:17+00:00

'RELENG_7_0_0_RELEASE'.

This commit was manufactured to restore the state of the 7.0-RELEASE image.

Continue 7-CURRENT MAC Framework rearrangement and cleanup:

2007-02-06T10:59:23+00:00

Don't perform a nested include of _label.h in mac.h, as mac.h now
describes only  the user API to MAC, and _label.h defines the in-kernel
representation of MAC labels.

Remove mac.h includes from policies and MAC framework components that do
not use userspace MAC API definitions.

Add _KERNEL inclusion checks to mac_internal.h and mac_policy.h, as these
are kernel-only include files

Obtained from:	TrustedBSD Project

Move src/sys/sys/mac_policy.h, the kernel interface between the MAC

2006-12-22T23:34:47+00:00

Framework and security modules, to src/sys/security/mac/mac_policy.h,
completing the removal of kernel-only MAC Framework include files from
src/sys/sys.  Update the MAC Framework and MAC policy modules.  Delete
the old mac_policy.h.

Third party policy modules will need similar updating.

Obtained from:	TrustedBSD Project

Minor style fixes.

2006-12-21T09:58:02+00:00

Remove mac_enforce_subsystem debugging sysctls. Enforcement on

2006-12-21T09:51:34+00:00

subsystems will be a property of policy modules, which may require
access control check entry points to be invoked even when not actively
enforcing (i.e., to track information flow without providing
protection).

Obtained from:	TrustedBSD Project
Suggested by:	Christopher dot Vance at sparta dot com

Trim trailing white space.

2006-12-20T23:17:34+00:00

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22T11:52:19+00:00

begun with a repo-copy of mac.h to mac_framework.h.  sys/mac.h now
contains the userspace and user<->kernel API and definitions, with all
in-kernel interfaces moved to mac_framework.h, which is now included
across most of the kernel instead.

This change is the first step in a larger cleanup and sweep of MAC
Framework interfaces in the kernel, and will not be MFC'd.

Obtained from:	TrustedBSD Project
Sponsored by:	SPARTA

Remove MAC_DEBUG label counters, which were used to debug leaks and

2006-09-20T13:33:41+00:00

other problems while labels were first being added to various kernel
objects.  They have outlived their usefulness.

MFC after:	1 month
Suggested by:	Christopher dot Vance at SPARTA dot com
Obtained from:	TrustedBSD Project

Remove an accidental clearing of the new label pointer on a system V

2005-02-24T16:08:41+00:00

message queue, which was introduced during the merge process.

Submitted by:	Andrew Reisse

Implement MAC entry points relating to System V IPC, calling into the

2004-11-17T13:14:24+00:00

MAC policies to perform object life cycle operations and access
control checks.

Submitted by:	Dandekar Hrishikesh 
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, SPAWAR, McAfee Research