On Tue, 25 Feb 2003, Daniel C. Sobral wrote: > Robert Watson wrote: > > Ok, I've committed it. Saw your other panic message, hope to look more > > closely today. > > > > BTW, you might consider running with the mac_test module, as it's intended > > to help diagnose label problems through additional assertions. > > Oh. That was not clear to me. I thought it was a module you used for > tests, not something which _helped_ debug other mac policies.
Well, it helps debug the MAC Framework's handling of labels by testing lots of assertions about how labels are handled by the framework. It doesn't specifically exercise other policies, but it can generate useful fail-stop behavior for some well-defined failure modes. I.e., it tests that uninitialized labels aren't passed to various entry points, that labels aren't destroyed more than once, etc. Robert N M Watson FreeBSD Core Team, TrustedBSD Projects [EMAIL PROTECTED] Network Associates Laboratories To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-current" in the body of the message
