summaryrefslogtreecommitdiffstats
path: root/sys/kern/kern_mac.c
Commit message (Expand)AuthorAgeFilesLines
* Implement sockets support for __mac_get_fd() and __mac_set_fd()rwatson2003-11-161-0/+30
* Mark __mac_get_pid() as MPSAFE in the comment, as it runs withoutrwatson2003-11-121-37/+15
* Modify the MAC Framework so that instead of embedding a (struct label)rwatson2003-11-121-62/+57
* Whitespace sync to MAC branch, expand comment at the head of the file.rwatson2003-11-111-3/+9
* Remove the flags argument from mac_externalize_*_label(), as it's notrwatson2003-11-061-6/+6
* mac_Finish break-out of kern_mac.c into parts:rwatson2003-10-221-2756/+5
* Variable cleanup following break-out of kern_mac.c into sys/security/mac:rwatson2003-10-221-16/+10
* Rename error_select() to mac_error_select(), and unstaticize so itrwatson2003-10-221-5/+4
* If the struct mac copied into the kernel has a negative length, returnrwatson2003-09-291-1/+2
* Fix a mac_policy_list reference to be a mac_static_policy_listrwatson2003-08-261-1/+1
* Introduce two new MAC Framework and MAC policy entry points:rwatson2003-08-211-0/+19
* Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr():rwatson2003-08-211-0/+32
* Remove about 40 lines of #ifdef/#endif by using new macrosrwatson2003-08-201-70/+31
* Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF.rwatson2003-08-011-28/+18
* Redesign the externalization APIs from the MAC Framework torwatson2003-06-231-40/+20
* Add a f_vnode field to struct file.phk2003-06-221-2/+2
* Use __FBSDID().obrien2003-06-111-4/+4
* Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables andrwatson2003-05-081-8/+8
* Clean up locking for the MAC Framework:rwatson2003-05-071-78/+180
* - Acquire the vm_object's lock when performing vm_object_page_clean().alc2003-04-241-0/+2
* Update NAI copyright to 2003, missed in earlier commits and merges.rwatson2003-04-181-1/+1
* mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, sorwatson2003-04-151-3/+2
* Move MAC label storage for mbufs into m_tags from the m_pkthdr structure,rwatson2003-04-141-17/+118
* Abstract access to the mbuf header label behind a new function,rwatson2003-04-141-25/+80
* Introduce an M_ASSERTPKTHDR() macro which performs the very common taskdes2003-04-081-2/+2
* Modify the mac_init_ipq() MAC Framework entry point to accept anrwatson2003-03-261-4/+12
* Instrument sysarch() MD privileged I/O access interfaces with a MACrwatson2003-03-061-0/+12
* Provide a mac_check_system_swapoff() entry point, which permits MACrwatson2003-03-051-0/+14
* Replace calls to WITNESS_SLEEP() and witness_list() with equivalent callsjhb2003-03-041-2/+3
* Back out M_* changes, per decision of the TRB.imp2003-02-191-34/+34
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-211-34/+34
* Bow to the whining masses and change a union back into void *. Retaindillon2003-01-131-4/+4
* Change struct file f_data to un_data, a union of the correct structdillon2003-01-121-4/+4
* SCARGS removal take II.alfred2002-12-141-5/+5
* Backout removal SCARGS, the code freeze is only "selectively" over.alfred2002-12-131-5/+5
* Remove SCARGS.alfred2002-12-131-5/+5
* Remove dm_root entry from struct devfs_mount. It's never set, and isrwatson2002-12-091-9/+11
* Un-staticize mac_cred_mmapped_drop_perms() so that it may be usedrwatson2002-11-261-1/+1
* Introduce p_label, extensible security label storage for the MAC frameworkrwatson2002-11-201-1/+25
* Merge kld access control checks from the MAC tree: these access controlrwatson2002-11-191-0/+46
* Introduce a condition variable to avoid returning EBUSY whenrwatson2002-11-131-29/+52
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sincerwatson2002-11-121-7/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform arwatson2002-11-111-2/+0
* Add an explicit execlabel argument to exec-related MAC policy entryrwatson2002-11-081-3/+4
* Bring in two sets of changes:rwatson2002-11-051-6/+56
* Assert that appropriate vnodes are locked in mac_execve_will_transition().rwatson2002-11-051-0/+8
* Permit MAC policies to instrument the access control decisions forrwatson2002-11-041-0/+31
* Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MACrwatson2002-11-041-6/+0
* License clarification and wording changes: NAI has approved removal ofrwatson2002-11-041-7/+4
* Introduce mac_check_system_settime(), a MAC check allowing policies torwatson2002-11-031-0/+13
OpenPOWER on IntegriCloud