| Commit message (Collapse) | Author | Age | Files | Lines |
... | |
|
|
|
|
|
|
|
|
| |
and acl_calc_mask(3) return error instead of crashing when acl passed
to them is NULL.
Submitted by: markus
Reviewed by: rwatson
MFC after: 3 days
|
| |
|
|
|
|
|
|
| |
accurately reflect the last ten years of work.
Approved by: re (kib)
|
|
|
|
| |
Approved by: re (kib)
|
|
|
|
| |
anything about _PC_ACL_NFS4.
|
| |
|
|
|
|
| |
contents.
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
This adds the following functions to the acl(3) API: acl_add_flag_np,
acl_clear_flags_np, acl_create_entry_np, acl_delete_entry_np,
acl_delete_flag_np, acl_get_extended_np, acl_get_flag_np, acl_get_flagset_np,
acl_set_extended_np, acl_set_flagset_np, acl_to_text_np, acl_is_trivial_np,
acl_strip_np, acl_get_brand_np. Most of them are similar to what Darwin
does. There are no backward-incompatible changes.
Approved by: rwatson@
|
|
|
|
|
| |
Reviewed by: rwatson@
MFC after: 2 weeks
|
|
|
|
| |
Submitted by: rwatson@
|
|
|
|
| |
Reviewed by: rwatson (earlier version)
|
|
|
|
|
|
| |
compatibility interfaces in both kernel and libc.
Reviewed by: rwatson
|
|
|
|
|
|
|
| |
xref libbsm(3).
Submitted by: rwatson
MFC after: 3 days
|
| |
|
|
|
|
| |
Approved by: jedgar@
|
|
|
|
|
|
|
|
|
|
| |
This change removes the requirement that an ACL contain no ACL_USER
entries with a uid the same as those of a file, or ACL_GROUP entries
with a gid the same as those of a file. This requirement is not in the
specification, and not enforced by the kernel's ACL implementation.
Reported by: Iustin Pop <iusty at k1024 dot org>
MFC after: 1 week
|
|
|
|
| |
MFC after: 3 days
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
net: endhostdnsent is named _endhostdnsent and is
private to netdb family of functions.
posix1e: acl_size.c has been never compiled in,
so there's no "acl_size".
rpc: "getnetid" is a static function.
stdtime: "gtime" is #ifdef'ed out in the source.
some symbols are specific only to some architectures,
e.g., ___tls_get_addr is only defined on i386.
__htonl, __htons, __ntohl and __ntohs are no longer
functions, they are now (internal) defines in
<machine/endian.h>.
Submitted by: ru
|
| |
|
|
|
|
|
|
|
|
|
| |
acl_from_text.c. Since acl_from_text.c is the only place it
is used, we can now make this internal utility function "static."
As a bonus, acl_set_fd() no longer pulls in getpwuid() for no reason.
MFC after: 7 days
|
| |
|
|
|
|
|
|
|
| |
old file, update references, etc. The C function is already named
mac_is_present().
Obtained from: TrustedBSD Project
|
| |
|
|
|
|
| |
Reviewed by: davidxu
|
| |
|
| |
|
|
|
|
| |
the function definition.
|
|
|
|
|
|
|
|
| |
that have at least 3 characters.
MFC after: 1 week
Thanks to: Music band ``Chingon''
for keeping me company while searching for these.
|
|
|
|
|
| |
Submitted by: Wojciech A. Koszek [dunstan at freebsd czest pl]
Approved by: re (hrs)
|
| |
|
|
|
|
| |
MFC after: 3 days
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
is supported.
-Document the new more preferred syntax
-Add examples for the new syntax
-Add a note that the old syntax will be deprecated in the future.
Reviewed by: rwatson
|
| |
|
| |
|
| |
|
| |
|
|
|
|
| |
mac_get_link() and mac_set_link() were added.
|
|
|
|
| |
Submitted by: Stefan Farfeleder <stefan@fafoe.narf.at>
|
|
|
|
| |
foo[i] = bar[++i]; /* Which operator [] will be evaluated first? */
|
| |
|
|
|
|
|
| |
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
|
|
|
|
|
|
|
|
| |
context of sockets, and document EINVAL as a possible failure mode
based on the object selected, not just the label provided.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
SO_PEERLABEL. This provides an interface to query the label of a
socket peer without embedding implementation details of mac_t in
the application. Previously, sizeof(*mac_t) had to be specified
by an application when performing getsockopt().
Document mac_get_peer(3), and expand documentation of the other
mac_get(3) functions. Note that it's possible to get EINVAL back
from mac_get_fd(3) when pointing it at an inappropriate object.
NOTE: mac_get_fd() and mac_set_fd() support for sockets will
follow shortly, so the documentation is slightly ahead of the
code.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
|
|
|
|
|
|
|
|
| |
mac_free(3), which is used only for variables of type mac_t in
the FreeBSD implementation.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
is accessed for the first time as a result of an application looking
up label configuration information. Previously, the check and read
were kicked off by mac_prepare_(typename)() functions; since
mac_prepare_type() may now be directly employed by a user process,
push the check and initialization into that function.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
|