summaryrefslogtreecommitdiffstats
path: root/sys/kern/kern_mac.c
Commit message (Expand)AuthorAgeFilesLines
* Redesign the externalization APIs from the MAC Framework torwatson2003-06-231-40/+20
* Add a f_vnode field to struct file.phk2003-06-221-2/+2
* Use __FBSDID().obrien2003-06-111-4/+4
* Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables andrwatson2003-05-081-8/+8
* Clean up locking for the MAC Framework:rwatson2003-05-071-78/+180
* - Acquire the vm_object's lock when performing vm_object_page_clean().alc2003-04-241-0/+2
* Update NAI copyright to 2003, missed in earlier commits and merges.rwatson2003-04-181-1/+1
* mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, sorwatson2003-04-151-3/+2
* Move MAC label storage for mbufs into m_tags from the m_pkthdr structure,rwatson2003-04-141-17/+118
* Abstract access to the mbuf header label behind a new function,rwatson2003-04-141-25/+80
* Introduce an M_ASSERTPKTHDR() macro which performs the very common taskdes2003-04-081-2/+2
* Modify the mac_init_ipq() MAC Framework entry point to accept anrwatson2003-03-261-4/+12
* Instrument sysarch() MD privileged I/O access interfaces with a MACrwatson2003-03-061-0/+12
* Provide a mac_check_system_swapoff() entry point, which permits MACrwatson2003-03-051-0/+14
* Replace calls to WITNESS_SLEEP() and witness_list() with equivalent callsjhb2003-03-041-2/+3
* Back out M_* changes, per decision of the TRB.imp2003-02-191-34/+34
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-211-34/+34
* Bow to the whining masses and change a union back into void *. Retaindillon2003-01-131-4/+4
* Change struct file f_data to un_data, a union of the correct structdillon2003-01-121-4/+4
* SCARGS removal take II.alfred2002-12-141-5/+5
* Backout removal SCARGS, the code freeze is only "selectively" over.alfred2002-12-131-5/+5
* Remove SCARGS.alfred2002-12-131-5/+5
* Remove dm_root entry from struct devfs_mount. It's never set, and isrwatson2002-12-091-9/+11
* Un-staticize mac_cred_mmapped_drop_perms() so that it may be usedrwatson2002-11-261-1/+1
* Introduce p_label, extensible security label storage for the MAC frameworkrwatson2002-11-201-1/+25
* Merge kld access control checks from the MAC tree: these access controlrwatson2002-11-191-0/+46
* Introduce a condition variable to avoid returning EBUSY whenrwatson2002-11-131-29/+52
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sincerwatson2002-11-121-7/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform arwatson2002-11-111-2/+0
* Add an explicit execlabel argument to exec-related MAC policy entryrwatson2002-11-081-3/+4
* Bring in two sets of changes:rwatson2002-11-051-6/+56
* Assert that appropriate vnodes are locked in mac_execve_will_transition().rwatson2002-11-051-0/+8
* Permit MAC policies to instrument the access control decisions forrwatson2002-11-041-0/+31
* Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MACrwatson2002-11-041-6/+0
* License clarification and wording changes: NAI has approved removal ofrwatson2002-11-041-7/+4
* Introduce mac_check_system_settime(), a MAC check allowing policies torwatson2002-11-031-0/+13
* Add MAC checks for various kenv() operations: dump, get, set, unset,rwatson2002-11-011-0/+52
* Move to C99 sparse structure initialization for the mac_policy_opsrwatson2002-10-301-583/+0
* While 'mode_t' seemed like a good idea for the access mode argument forrwatson2002-10-301-3/+3
* An inappropriate ASSERT slipped in during the recent merge of therwatson2002-10-281-2/+0
* Centrally manage enforcement of {reboot,swapon,sysctl} using therwatson2002-10-271-13/+9
* Implement mac_check_system_sysctl(), a MAC Framework entry point torwatson2002-10-271-0/+28
* Hook up mac_check_system_reboot(), a MAC Framework entry point thatrwatson2002-10-271-0/+23
* Merge from MAC tree: rename mac_check_vnode_swapon() torwatson2002-10-271-18/+18
* Slightly change the semantics of vnode labels for MAC: rather thanrwatson2002-10-261-486/+90
* Comment describing the semantics of mac_late.rwatson2002-10-251-1/+6
* Introduce MAC_CHECK_VNODE_SWAPON, which permits MAC policies torwatson2002-10-221-0/+22
* Missed in previous merge: export sizeof(struct oldmac) rather thanrwatson2002-10-221-1/+1
* Support the new MAC user API in kernel: modify existing system callsrwatson2002-10-221-169/+917
* Use if_printf(ifp, "blah") instead ofbrooks2002-10-211-2/+1
OpenPOWER on IntegriCloud