mac_ddb: add some validation functions
ClosedPublic
Actions

Authored by mhorne on May 31 2022, 6:08 PM.

Tags

None

Referenced Files

	F151169959: D35372.id106517.diff
	Mon, Apr 6, 1:50 PM

	Unknown Object (File)
	Wed, Apr 1, 2:26 AM

	Unknown Object (File)
	Sat, Mar 28, 6:14 AM

	Unknown Object (File)
	Tue, Mar 17, 11:12 PM

	Unknown Object (File)
	Sun, Mar 15, 3:49 AM

	Unknown Object (File)
	Fri, Mar 13, 9:07 PM

	Unknown Object (File)
	Mar 4 2026, 10:22 PM

	Unknown Object (File)
	Feb 28 2026, 9:12 PM

Subscribers

Details

Reviewers

jhb
markj
stevek

Commits

rG4e2121c10afc: mac_ddb: add some validation functions

Summary

These global objects are easy to validate, so provide the helper
functions to do so and include these commands in the allow lists.

Diff Detail

Repository

rS FreeBSD src repository - subversion

Lint

Lint Passed

Unit

No Test Coverage

Build Status

Buildable 46391
Build 43280: arc lint + arc unit

Event Timeline

mhorne created this revision.May 31 2022, 6:08 PM

Herald added a subscriber: imp. · View Herald TranscriptMay 31 2022, 6:08 PM

mhorne requested review of this revision.May 31 2022, 6:08 PM

Harbormaster completed remote builds in B45797: Diff 106517.May 31 2022, 6:08 PM

mhorne added a parent revision: D35371: mac: add new mac_ddb(4) policy.May 31 2022, 6:08 PM

Rebase.

Harbormaster completed remote builds in B46391: Diff 108076.Jul 12 2022, 6:59 PM

What happens if a validator triggers a page fault? Does DDB handle the trap as it would normally?

This revision is now accepted and ready to land.Jul 13 2022, 2:43 PM

Closed by commit rG4e2121c10afc: mac_ddb: add some validation functions (authored by mhorne, committed by allanjude). · Explain WhyJul 18 2022, 10:08 PM

This revision was automatically updated to reflect the committed changes.

allanjude added a commit: rG4e2121c10afc: mac_ddb: add some validation functions.

Revision Contents
Changeset List

Path

Size

sys/

security/

mac_ddb/

mac_ddb.c

101 lines

Diff 108076

View Options

sys/security/mac_ddb/mac_ddb.c

mac_ddb: add some validation functionsClosedPublicActions