summaryrefslogtreecommitdiffstats
path: root/lib/libugidfw/ugidfw.c
Commit message (Collapse)AuthorAgeFilesLines
* Fixed misspellings of 0 as NULL.bde2004-03-111-3/+2
|
* Add bsde_add_rule(), which is similar to bsde_set_rule() except thatrwatson2004-02-251-1/+42
| | | | | | | | the caller does not specify the rule number -- instead, the kernel module is probed for the next available rule, which is then used. Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research
* License and blurb update authorized by Network Associates.rwatson2002-11-071-7/+4
|
* Use size_t instead of int for len variables passed in/out of sysctl.rwatson2002-09-271-2/+3
| | | | Pointed out by: jake
* Use "ugidfw.h" rather than <ugidfw.h> so that mkdep can find it.rwatson2002-08-141-1/+1
| | | | Suggested by: mike
* Introduce support for Mandatory Access Control and extensiblerwatson2002-08-021-0/+712
kernel access control. Provide a library to manage user file system firewall-like rules supported by the mac_bsdextended.ko security model. The kernel module exports the current rule set using sysctl, and this library provides a front end that includes support for retrieving and setting rules, as well as printing and parsing them. Note: as with other userland components, this is a WIP. However, when used in combination with the soon-to-be-committed ugidfw, it can actually be quite useful in multi-user environments to allow the administrator to limit inter-user file operations without resorting to heavier weight labeled security policies. Obtained form: TrustedBSD Project Sponsored by: DARPA, NAI Labs
OpenPOWER on IntegriCloud