src/sys/security, branch release/7.0.0_cvs FreeBSD source tree This commit was manufactured by cvs2svn to create tag 2008-02-24T05:45:17+00:00 cvs2svn cvs2svn@FreeBSD.org 2008-02-24T05:45:17+00:00 a9c219fa3cec18ef9f30edec6fa106bf0e2d423d 'RELENG_7_0_0_RELEASE'. This commit was manufactured to restore the state of the 7.0-RELEASE image. 
'RELENG_7_0_0_RELEASE'.

This commit was manufactured to restore the state of the 7.0-RELEASE image.
MFC revision 1.23 2008-02-05T14:36:41+00:00 Christian S.J. Peron csjp@FreeBSD.org 2008-02-05T14:36:41+00:00 0f93896fb469131242f98ef85404ba6da6e697aa Make sure we handle listen() and eliminate console messages for unknown event types. Approved by: re@ (kensmith) 
Make sure we handle listen() and eliminate console messages for unknown
event types.

Approved by:	re@ (kensmith)
Merge mac_posix_sem.c:1.12 from HEAD to RELENG_7: 2007-12-21T14:32:04+00:00 Robert Watson rwatson@FreeBSD.org 2007-12-21T14:32:04+00:00 2b72de12e75df59571f0ea5cdf1224633b266c61 Fix a MAC label leak for POSIX semaphores, in which per-policy labels would be properly disposed of, but the global label structure for the semaphore wouldn't be freed. Reported by: tanyong <tanyong at ercist dot iscas dot ac dot cn>, zhouzhouyi Approved by: re (kensmith) 
  Fix a MAC label leak for POSIX semaphores, in which per-policy labels
  would be properly disposed of, but the global label structure for the
  semaphore wouldn't be freed.

  Reported by:    tanyong <tanyong at ercist dot iscas dot ac dot cn>,
                  zhouzhouyi

Approved by:	re (kensmith)
Merge mac_framework.h:1.85, mac_policy.h:1.95, mac_posix_sem.c:1.10, 2007-11-06T14:46:59+00:00 Robert Watson rwatson@FreeBSD.org 2007-11-06T14:46:59+00:00 58ba3925605ccfcafb1acbb82de65b584fbc92f2 mac_biba.c:1.108, mac_mls.c:1.89, mac_stub.c:1.69, mac_test.c:1.79 from HEAD to RELENG_7: Canonicalize naming of local variables for struct ksem and associated labels to 'ks' and 'kslabel' to reflect the convention in posix_sem.c. Obtained from: TrustedBSD Project Approved by: re (kensmith) 
mac_biba.c:1.108, mac_mls.c:1.89, mac_stub.c:1.69, mac_test.c:1.79 from
HEAD to RELENG_7:

  Canonicalize naming of local variables for struct ksem and associated
  labels to 'ks' and 'kslabel' to reflect the convention in posix_sem.c.

  Obtained from:	TrustedBSD Project

Approved by:	re (kensmith)
MFC revision 1.13 2007-11-04T16:44:48+00:00 Christian S.J. Peron csjp@FreeBSD.org 2007-11-04T16:44:48+00:00 9731ff5b8b75694564413526e3a405aee36d21a9 Make sure we are incrementing read counters Approved by: re@ (kensmith) 
Make sure we are incrementing read counters

Approved by:	re@ (kensmith)
Merge audit.c:1.35, audit_bsm_klib.c:1.8 from HEAD to RELENG_7: 2007-11-02T09:53:32+00:00 Robert Watson rwatson@FreeBSD.org 2007-11-02T09:53:32+00:00 89ee7c98a791a27c0eaaed761312aaeebfb389fb Replace use of AU_NULL with 0 when no audit classes are in use; this supports the removal of hard-coded audit class constants in OpenBSM 1.0. All audit classes are now dynamically configured via the audit_class database. Obtained from: TrustedBSD Project Approved by: re (kensmith) 
  Replace use of AU_NULL with 0 when no audit classes are in use; this
  supports the removal of hard-coded audit class constants in OpenBSM
  1.0.  All audit classes are now dynamically configured via the
  audit_class database.

  Obtained from:  TrustedBSD Project

Approved by:	re (kensmith)
MFC revision 1.21, use extended process tokens by default 2007-11-01T19:03:03+00:00 Christian S.J. Peron csjp@FreeBSD.org 2007-11-01T19:03:03+00:00 267c460267f9682d68b6673171dac6e3285bf108 Approved by: re@ (kensmith) 
Approved by:	re@ (kensmith)
MFC audit_pipe.c revision 1.12 2007-10-20T15:11:00+00:00 Christian S.J. Peron csjp@FreeBSD.org 2007-10-20T15:11:00+00:00 a3bcc961627a8fb0c01f258dcaa2ce8952d2db9b Approved by: re@ (kensmith) 
Approved by:	re@ (kensmith)
- Move all of the PS_ flags into either p_flag or td_flags. 2007-09-17T05:31:39+00:00 Jeff Roberson jeff@FreeBSD.org 2007-09-17T05:31:39+00:00 b61ce5b0e6aad0a00038c9c40f29a7de3646e3fe - p_sflag was mostly protected by PROC_LOCK rather than the PROC_SLOCK or previously the sched_lock. These bugs have existed for some time. - Allow swapout to try each thread in a process individually and then swapin the whole process if any of these fail. This allows us to move most scheduler related swap flags into td_flags. - Keep ki_sflag for backwards compat but change all in source tools to use the new and more correct location of P_INMEM. Reported by: pho Reviewed by: attilio, kib Approved by: re (kensmith) 
 - p_sflag was mostly protected by PROC_LOCK rather than the PROC_SLOCK or
   previously the sched_lock.  These bugs have existed for some time.
 - Allow swapout to try each thread in a process individually and then
   swapin the whole process if any of these fail.  This allows us to move
   most scheduler related swap flags into td_flags.
 - Keep ki_sflag for backwards compat but change all in source tools to
   use the new and more correct location of P_INMEM.

Reported by:	pho
Reviewed by:	attilio, kib
Approved by:	re (kensmith)
Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry 2007-09-10T00:00:18+00:00 Robert Watson rwatson@FreeBSD.org 2007-09-10T00:00:18+00:00 45e0f3d63d90c6f80f3f231f3f8e185e644c70e9 point to mac_check_vnode_unlink(), reflecting UNIX naming conventions. This is the first of several commits to synchronize the MAC Framework in FreeBSD 7.0 with the MAC Framework as it will appear in Mac OS X Leopard. Reveiwed by: csjp, Samy Bahra <sbahra at gwu dot edu> Submitted by: Jacques Vidrine <nectar at apple dot com> Obtained from: Apple Computer, Inc. Sponsored by: SPARTA, SPAWAR Approved by: re (bmah) 
point to mac_check_vnode_unlink(), reflecting UNIX naming conventions.

This is the first of several commits to synchronize the MAC Framework
in FreeBSD 7.0 with the MAC Framework as it will appear in Mac OS X
Leopard.

Reveiwed by:    csjp, Samy Bahra <sbahra at gwu dot edu>
Submitted by:   Jacques Vidrine <nectar at apple dot com>
Obtained from:  Apple Computer, Inc.
Sponsored by:   SPARTA, SPAWAR
Approved by:    re (bmah)