Improve ordering of MAC entry points in mac_policy_op structure.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs

Change macop_t to const, use macop_t in MAC policy entry point definition
structure. This prevents a boatload of warnings in the MAC modules,
so we can hook them up to the build.

Obtained from: Tru

Change macop_t to const, use macop_t in MAC policy entry point definition
structure. This prevents a boatload of warnings in the MAC modules,
so we can hook them up to the build.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs

show more ...

Begin committing support for Mandatory Access Control and extensible
kernel access control. The MAC framework permits loadable kernel
modules to link to the kernel at compile-time, boot-time, or run

Begin committing support for Mandatory Access Control and extensible
kernel access control. The MAC framework permits loadable kernel
modules to link to the kernel at compile-time, boot-time, or run-time,
and augment the system security policy. This commit includes the
initial kernel implementation, although the interface with the userland
components of the oeprating system is still under work, and not all
kernel subsystems are supported. Later in this commit sequence,
documentation of which kernel subsystems will not work correctly with
a kernel compiled with MAC support will be added.

Include files to declare MAC userland interface (mac.h), MAC subsystem
entry points (mac.h), and MAC policy entry points (mac_policy.h). These
files define the interface between the kernel and the MAC framework,
and between the MAC framework and each registered policy module. These
APIs and ABIs may not be assumed to be stable until following FreeBSD
5.1-RELEASE.

Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs

show more ...