diff options
| author | Mitchell Horne <mhorne@FreeBSD.org> | 2022-07-18 21:23:16 +0000 |
|---|---|---|
| committer | Allan Jude <allanjude@FreeBSD.org> | 2022-07-18 22:06:13 +0000 |
| commit | 2449b9e5fe565be757a4b29093fd1c9c6ffcf3c9 (patch) | |
| tree | 305ce3103d0aff04757876d9e78ca2b5591636d2 /sys/conf/files | |
| parent | a305b20ead13bb29880e15ff20c3bb83b5397a82 (diff) | |
| download | src-2449b9e5fe565be757a4b29093fd1c9c6ffcf3c9.tar.gz src-2449b9e5fe565be757a4b29093fd1c9c6ffcf3c9.zip | |
mac: kdb/ddb framework hooks
Add three simple hooks to the debugger allowing for a loaded MAC policy
to intervene if desired:
1. Before invoking the kdb backend
2. Before ddb command registration
3. Before ddb command execution
We extend struct db_command with a private pointer and two flag bits
reserved for policy use.
Reviewed by: markj
Sponsored by: Juniper Networks, Inc.
Sponsored by: Klara, Inc.
Differential Revision: https://reviews.freebsd.org/D35370
Diffstat (limited to 'sys/conf/files')
| -rw-r--r-- | sys/conf/files | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/sys/conf/files b/sys/conf/files index 30cd9eb7e741..4e1279adc073 100644 --- a/sys/conf/files +++ b/sys/conf/files @@ -5118,6 +5118,7 @@ security/audit/bsm_socket_type.c optional audit security/audit/bsm_token.c optional audit security/mac/mac_audit.c optional mac audit security/mac/mac_cred.c optional mac +security/mac/mac_kdb.c optional mac security/mac/mac_framework.c optional mac security/mac/mac_inet.c optional mac inet | mac inet6 security/mac/mac_inet6.c optional mac inet6 |