Robert Watson 4c64787a5b Expand scope of the MLS policy to include a new entry point available ... for enforcement: mac_mls_check_system_swapon() - Require that the subject and the swapfile target vnode labels dominate one another. An additional check is probably needed here to require that the swapfile target has a label of mls/high to prevent information leakage through swapfiles. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2003-03-25 01:16:10 +00:00
..
mac_mls.c	Expand scope of the MLS policy to include a new entry point available	2003-03-25 01:16:10 +00:00
mac_mls.h	License and wording updates: NAI has authorized the removal of clause	2002-11-04 01:53:12 +00:00