head	1.4;
access;
symbols
	RELENG_5_2_1_RELEASE:1.3
	RELENG_5_2_0_RELEASE:1.3
	RELENG_5_2:1.3.0.2
	RELENG_5_2_BP:1.3
	RELENG_5_1_0_RELEASE:1.1
	RELENG_5_1:1.1.0.2
	RELENG_5_1_BP:1.1;
locks; strict;
comment	@# @;


1.4
date	2004.08.03.19.24.54;	author markm;	state dead;
branches;
next	1.3;

1.3
date	2003.11.18.00.52.30;	author rwatson;	state Exp;
branches;
next	1.2;

1.2
date	2003.11.18.00.39.03;	author rwatson;	state Exp;
branches;
next	1.1;

1.1
date	2003.02.27.18.08.44;	author markm;	state Exp;
branches;
next	;


desc
@@


1.4
log
@Making a loadable null.ko for /dev/(null|zero) proved rather
unpopular, so remove this (mis)feature.

Encouragement provided by:	jhb (and others)
@
text
@# $FreeBSD: src/sys/modules/null/Makefile,v 1.3 2003/11/18 00:52:30 rwatson Exp $

.PATH: ${.CURDIR}/../../dev/null

KMOD=	null
SRCS=	null.c
SRCS+=	bus_if.h device_if.h vnode_if.h

.include <bsd.kmod.mk>
@


1.3
log
@Revert a NOOP change to Makefile that slipped into the last commit.

Pointed out by:	tjr
@
text
@d1 1
a1 1
# $FreeBSD$
@


1.2
log
@Introduce a MAC label reference in 'struct inpcb', which caches
the   MAC label referenced from 'struct socket' in the IPv4 and
IPv6-based protocols.  This permits MAC labels to be checked during
network delivery operations without dereferencing inp->inp_socket
to get to so->so_label, which will eventually avoid our having to
grab the socket lock during delivery at the network layer.

This change introduces 'struct inpcb' as a labeled object to the
MAC Framework, along with the normal circus of entry points:
initialization, creation from socket, destruction, as well as a
delivery access control check.

For most policies, the inpcb label will simply be a cache of the
socket label, so a new protocol switch method is introduced,
pr_sosetlabel() to notify protocols that the socket layer label
has been updated so that the cache can be updated while holding
appropriate locks.  Most protocols implement this using
pru_sosetlabel_null(), but IPv4/IPv6 protocols using inpcbs use
the the worker function in_pcbsosetlabel(), which calls into the
MAC Framework to perform a cache update.

Biba, LOMAC, and MLS implement these entry points, as do the stub
policy, and test policy.

Reviewed by:	sam, bms
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
@
text
@a7 1
SRCS+=	#opt_ddb.h
@


1.1
log
@This is not going to win prizes for the most useful module ever,
but it is useful to me for some testing and warns-fixing.
@
text
@d8 1
@

