aboutsummaryrefslogtreecommitdiff
path: root/lib/libc/posix1e
Commit message (Collapse)AuthorAgeFilesLines
* Minor white space tweak.Robert Watson2005-01-231-1/+1
| | | | | | | MFC after: 3 days Notes: svn path=/head/; revision=140664
* Sort sections.Ruslan Ermilov2005-01-202-10/+10
| | | | Notes: svn path=/head/; revision=140505
* Fixed markup bug.Ruslan Ermilov2005-01-151-10/+22
| | | | Notes: svn path=/head/; revision=140288
* Scheduled mdoc(7) sweep.Ruslan Ermilov2005-01-111-1/+2
| | | | Notes: svn path=/head/; revision=140081
* -Add a note that currently two syntax styles for label element declarationChristian S.J. Peron2004-11-181-3/+16
| | | | | | | | | | | | is supported. -Document the new more preferred syntax -Add examples for the new syntax -Add a note that the old syntax will be deprecated in the future. Reviewed by: rwatson Notes: svn path=/head/; revision=137865
* Fix the NAME section making whatis(1) happy in particular.Ruslan Ermilov2004-07-051-1/+1
| | | | Notes: svn path=/head/; revision=131635
* Eliminate double whitespace.Ruslan Ermilov2004-07-031-1/+1
| | | | Notes: svn path=/head/; revision=131539
* Mechanically kill hard sentence breaks.Ruslan Ermilov2004-07-0215-43/+87
| | | | Notes: svn path=/head/; revision=131504
* Markup, grammar, and spelling fixes.Ruslan Ermilov2004-06-302-3/+5
| | | | Notes: svn path=/head/; revision=131365
* Add reference to mac_get_link() in man page, which was omitted whenRobert Watson2004-06-172-1/+10
| | | | | | | mac_get_link() and mac_set_link() were added. Notes: svn path=/head/; revision=130636
* Adjust for brain outage that affected the previous commit.Jacques Vidrine2004-01-061-1/+1
| | | | | | | Submitted by: Stefan Farfeleder <stefan@fafoe.narf.at> Notes: svn path=/head/; revision=124193
* Avoid undefined behavior:Jacques Vidrine2004-01-061-2/+2
| | | | | | | foo[i] = bar[++i]; /* Which operator [] will be evaluated first? */ Notes: svn path=/head/; revision=124176
* Remove unused variables and function declarations. Add missing headers.Jacques Vidrine2004-01-061-1/+2
| | | | Notes: svn path=/head/; revision=124174
* Staticize label_default_head to prevent it from leaking out of mac.c.Robert Watson2003-11-171-1/+1
| | | | | | | | Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=122868
* Update mac_set.3 to account for new behavior of mac_set_fd() in theRobert Watson2003-11-161-5/+7
| | | | | | | | | | | context of sockets, and document EINVAL as a possible failure mode based on the object selected, not just the label provided. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=122811
* Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET andRobert Watson2003-11-162-26/+43
| | | | | | | | | | | | | | | | | | | | | SO_PEERLABEL. This provides an interface to query the label of a socket peer without embedding implementation details of mac_t in the application. Previously, sizeof(*mac_t) had to be specified by an application when performing getsockopt(). Document mac_get_peer(3), and expand documentation of the other mac_get(3) functions. Note that it's possible to get EINVAL back from mac_get_fd(3) when pointing it at an inappropriate object. NOTE: mac_get_fd() and mac_set_fd() support for sockets will follow shortly, so the documentation is slightly ahead of the code. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=122810
* Memory allocated by mac_to_text() must be freed using free(3) notRobert Watson2003-11-161-2/+15
| | | | | | | | | | | mac_free(3), which is used only for variables of type mac_t in the FreeBSD implementation. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=122777
* Remove debugging printf that crept into the last commit.Robert Watson2003-11-151-1/+0
| | | | Notes: svn path=/head/; revision=122735
* /etc/mac.conf is implicitly read and parsed when the MAC configurationRobert Watson2003-11-151-20/+6
| | | | | | | | | | | | | | is accessed for the first time as a result of an application looking up label configuration information. Previously, the check and read were kicked off by mac_prepare_(typename)() functions; since mac_prepare_type() may now be directly employed by a user process, push the check and initialization into that function. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=122732
* When printing ACLs, truncate user and group names if they're too long,Robert Watson2003-11-031-3/+5
| | | | | | | | | | | | rather than generating an error. This is consistent with other tools printing user and group names, and means you can read the ACL using our tools rather than being up a creek. PR: 56991 Submitted by: Michael Bretterklieber <mbretter@a-quadrat.at> Notes: svn path=/head/; revision=121975
* mdoc(7): Fix common mistakes made in the SEE ALSO section.Ruslan Ermilov2003-09-121-1/+1
| | | | Notes: svn path=/head/; revision=120010
* Return (-1) not (ENOENT) for mac_prepare_type(), and set errno toRobert Watson2003-08-301-1/+2
| | | | | | | | | | ENOENT instead. Reported by: "Kenneth D. Merry" <ken@kdm.org> Submitted by: Bryan Liesner <bleez@comcast.net> Notes: svn path=/head/; revision=119588
* Add HISTORY sections to the remaining MAC library man pages.Robert Watson2003-08-226-0/+36
| | | | | | | | Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=119321
* Update the mac_prepare(3) man page to reflect changes to theRobert Watson2003-08-221-8/+43
| | | | | | | | | | | | mac_prepare() APIs. Add a HISTORY section. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=119320
* Make the elements argument to mac_prepare() be const.Robert Watson2003-08-221-1/+1
| | | | | | | | Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=119317
* As new objects begin to support new labels, start to generalizeRobert Watson2003-08-221-86/+192
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the default label support in /etc/mac.conf. Rather than maintain each default label type in an explicit global variable in mac.c, keep a list of defaults loaded from the configuration file. Generalize the parsing so that we support both the older: default_file_labels foo default_ifnet_labels foo default_process_labels foo And also a new: default_labels file foo default_labels ifnet foo default_labels process foo We now accept arbitrary object classes in the first argument. If the same object is specified more than once, we discard the earlier definition in favor of the later one. Add a new API, mac_prepare_type(), which accepts a mac_t to prepare, as well as an object name in the second argument, which will pull a default label set for the object out of the configuration loaded by mac_init_internal(). This permits the libc to adapt to new objects known about by applications but not by libc at compile-time. Also liberalize the error handling a bit: if we're using implicit initialization (i.e., the application didn't explicitly initialize the MAC code), ignore syntax errors and only use valid lines. In the future, we may want to add explicit warnings and do this a bit more consistently. While here, add support for a MAC_CONFFILE environmental variable, which may be used to specify an alternative mac.conf configuration file if the application isn't running with modified privilege (issetugid()). Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=119314
* Print group name in getfacl output when calculating an effectiveRobert Watson2003-07-241-2/+3
| | | | | | | | | permission set based on a more restrictive mask. Submitted by: Glen Gibb <grg@ridley.unimelb.edu.au> Notes: svn path=/head/; revision=117982
* mdoc(7) fixes.Ruslan Ermilov2003-05-241-6/+5
| | | | | | | Approved by: re (blanket) Notes: svn path=/head/; revision=115288
* Assorted mdoc(7) fixes.Ruslan Ermilov2003-05-221-1/+1
| | | | | | | Approved by: re (blanket) Notes: svn path=/head/; revision=115225
* Add some strategic whitespace.Robert Watson2003-04-261-0/+1
| | | | Notes: svn path=/head/; revision=114051
* Add FILES section to mac.3 and mac.conf.5. Properly Xref mac.conf.5Robert Watson2003-04-203-1/+22
| | | | | | | | | | from mac.3; likewise, mac.conf.5 from mac_prepare.3. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=113741
* Add a man page for the mac.conf MAC library configuration file.Robert Watson2003-04-202-0/+105
| | | | | | | | Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=113737
* Add the mac_prepare{,_*}() functions to the high-level function listRobert Watson2003-04-201-0/+11
| | | | | | | | | | | in the mac.3 library man page. They were already cross-referenced at the end of the man page, just not explicitly listed here. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=113732
* Clarify the relationship between the MAC library APIs and POSIX.1e:Robert Watson2003-04-161-2/+6
| | | | | | | | | | | they resemble one another, but POSIX.1e interfaces were not sufficiently expressive to do what we needed. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=113578
* Eliminate 19 warnings in libc (at level WARNS=2) of theJacques Vidrine2003-02-271-0/+5
| | | | | | | `implicit declaration of function' variety. Notes: svn path=/head/; revision=111618
* mdoc(7) police: Scheduled sweep.Ruslan Ermilov2003-02-241-11/+14
| | | | Notes: svn path=/head/; revision=111447
* mdoc(7) police: kill self-xref.Ruslan Ermilov2003-02-231-1/+0
| | | | Notes: svn path=/head/; revision=111282
* Punctuation.Ruslan Ermilov2003-02-231-1/+1
| | | | Notes: svn path=/head/; revision=111281
* Typo.Ruslan Ermilov2003-02-231-1/+1
| | | | Notes: svn path=/head/; revision=111280
* Grammar.Ruslan Ermilov2003-02-231-0/+1
| | | | Notes: svn path=/head/; revision=111278
* Whack 28 unused variables.Jacques Vidrine2003-02-181-8/+1
| | | | Notes: svn path=/head/; revision=111082
* Eliminate 61 warnings emitted at WARNS=2 (leaving 53 to go).Jacques Vidrine2003-02-162-0/+9
| | | | | | | | | | Only warnings that could be fixed without changing the generated object code and without restructuring the source code have been handled. Reviewed by: /sbin/md5 Notes: svn path=/head/; revision=111010
* The .Fn functionPhilippe Charnier2003-02-063-6/+11
| | | | Notes: svn path=/head/; revision=110440
* Actually add mac_prepare.3.Chris Costello2003-01-151-0/+85
| | | | | | | Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=109274
* Cross-reference mac(4)Chris Costello2003-01-155-0/+5
| | | | | | | Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=109273
* s/SEE_ALSO/SEE ALSO/Chris Costello2003-01-152-2/+5
| | | | | | | | | Cross-reference mac(4) and mac(9) Sponsored by: DARPA, Network Associates Laboratories Notes: svn path=/head/; revision=109272
* o Document mac_prepare() and associated functionsChris Costello2003-01-158-33/+61
| | | | | | | | | | | | | o Link mac_get_pid.3 to mac_get.3 o Update SEE ALSO to refer to mac_prepare, and added missing references o Remove clause #3 on my work o Update mac_get.3 for the updated MAC API Sponsored by: DARPA, Network Associates Laboratories Obtained from: TrustedBSD Project Notes: svn path=/head/; revision=109263
* o Remove clause #3Chris Costello2003-01-141-5/+9
| | | | | | | | | o Document mac_set_link(). Sponsored by: DARPA, Network Associates Labs Notes: svn path=/head/; revision=109260
* Remove BUGS section indicating that these calls are unimplemented.Robert Watson2002-12-295-15/+15
| | | | | | | | | Update copyrights. Obtained from: TrustedBSD Project Notes: svn path=/head/; revision=108412
* Update acl_set.3, missed in last round:Robert Watson2002-12-291-11/+19
| | | | | | | | | | | - Update BUGS: this stuff is implemented. - Update last modified date. - Document acl_set_link_np() call. Obtained from: TrustedBSD Project Notes: svn path=/head/; revision=108411