Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | Correct a couple small typos. | chris | 2003-01-07 | 1 | -2/+2 |
| | | | | Submitted by: Attila Nagy <bra@fsn.hu> | ||||
* | Document the file system firewall interface library functions. | chris | 2003-01-07 | 6 | -0/+515 |
| | | | | Sponsored by: DARPA, Network Associates Laboratories | ||||
* | License and blurb update authorized by Network Associates. | rwatson | 2002-11-07 | 2 | -14/+8 |
| | |||||
* | Zap now-unused SHLIB_MINOR | peter | 2002-09-28 | 1 | -1/+0 |
| | |||||
* | Use size_t instead of int for len variables passed in/out of sysctl. | rwatson | 2002-09-27 | 2 | -3/+4 |
| | | | | Pointed out by: jake | ||||
* | Use "ugidfw.h" rather than <ugidfw.h> so that mkdep can find it. | rwatson | 2002-08-14 | 1 | -1/+1 |
| | | | | Suggested by: mike | ||||
* | De-gccize CFLAGS by removing it. | rwatson | 2002-08-02 | 1 | -2/+0 |
| | | | | | | NOMAN is no longer required when a man page is not yet present. Submitted by: ru | ||||
* | Introduce support for Mandatory Access Control and extensible | rwatson | 2002-08-02 | 3 | -0/+785 |
kernel access control. Provide a library to manage user file system firewall-like rules supported by the mac_bsdextended.ko security model. The kernel module exports the current rule set using sysctl, and this library provides a front end that includes support for retrieving and setting rules, as well as printing and parsing them. Note: as with other userland components, this is a WIP. However, when used in combination with the soon-to-be-committed ugidfw, it can actually be quite useful in multi-user environments to allow the administrator to limit inter-user file operations without resorting to heavier weight labeled security policies. Obtained form: TrustedBSD Project Sponsored by: DARPA, NAI Labs |