K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2004-06-13T02:50:07.000000Z
K 7
svn:log
V 394
Socket MAC labels so_label and so_peerlabel are now protected by
SOCK_LOCK(so):

- Hold socket lock over calls to MAC entry points reading or
  manipulating socket labels.

- Assert socket lock in MAC entry point implementations.

- When externalizing the socket label, first make a thread-local
  copy while holding the socket lock, then release the socket lock
  to externalize to userspace.

END