summaryrefslogtreecommitdiffstats
path: root/sys/kern/kern_mac.c
Commit message (Expand)AuthorAgeFilesLines
* Modify the mac_init_ipq() MAC Framework entry point to accept anrwatson2003-03-261-4/+12
* Instrument sysarch() MD privileged I/O access interfaces with a MACrwatson2003-03-061-0/+12
* Provide a mac_check_system_swapoff() entry point, which permits MACrwatson2003-03-051-0/+14
* Replace calls to WITNESS_SLEEP() and witness_list() with equivalent callsjhb2003-03-041-2/+3
* Back out M_* changes, per decision of the TRB.imp2003-02-191-34/+34
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-211-34/+34
* Bow to the whining masses and change a union back into void *. Retaindillon2003-01-131-4/+4
* Change struct file f_data to un_data, a union of the correct structdillon2003-01-121-4/+4
* SCARGS removal take II.alfred2002-12-141-5/+5
* Backout removal SCARGS, the code freeze is only "selectively" over.alfred2002-12-131-5/+5
* Remove SCARGS.alfred2002-12-131-5/+5
* Remove dm_root entry from struct devfs_mount. It's never set, and isrwatson2002-12-091-9/+11
* Un-staticize mac_cred_mmapped_drop_perms() so that it may be usedrwatson2002-11-261-1/+1
* Introduce p_label, extensible security label storage for the MAC frameworkrwatson2002-11-201-1/+25
* Merge kld access control checks from the MAC tree: these access controlrwatson2002-11-191-0/+46
* Introduce a condition variable to avoid returning EBUSY whenrwatson2002-11-131-29/+52
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sincerwatson2002-11-121-7/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform arwatson2002-11-111-2/+0
* Add an explicit execlabel argument to exec-related MAC policy entryrwatson2002-11-081-3/+4
* Bring in two sets of changes:rwatson2002-11-051-6/+56
* Assert that appropriate vnodes are locked in mac_execve_will_transition().rwatson2002-11-051-0/+8
* Permit MAC policies to instrument the access control decisions forrwatson2002-11-041-0/+31
* Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MACrwatson2002-11-041-6/+0
* License clarification and wording changes: NAI has approved removal ofrwatson2002-11-041-7/+4
* Introduce mac_check_system_settime(), a MAC check allowing policies torwatson2002-11-031-0/+13
* Add MAC checks for various kenv() operations: dump, get, set, unset,rwatson2002-11-011-0/+52
* Move to C99 sparse structure initialization for the mac_policy_opsrwatson2002-10-301-583/+0
* While 'mode_t' seemed like a good idea for the access mode argument forrwatson2002-10-301-3/+3
* An inappropriate ASSERT slipped in during the recent merge of therwatson2002-10-281-2/+0
* Centrally manage enforcement of {reboot,swapon,sysctl} using therwatson2002-10-271-13/+9
* Implement mac_check_system_sysctl(), a MAC Framework entry point torwatson2002-10-271-0/+28
* Hook up mac_check_system_reboot(), a MAC Framework entry point thatrwatson2002-10-271-0/+23
* Merge from MAC tree: rename mac_check_vnode_swapon() torwatson2002-10-271-18/+18
* Slightly change the semantics of vnode labels for MAC: rather thanrwatson2002-10-261-486/+90
* Comment describing the semantics of mac_late.rwatson2002-10-251-1/+6
* Introduce MAC_CHECK_VNODE_SWAPON, which permits MAC policies torwatson2002-10-221-0/+22
* Missed in previous merge: export sizeof(struct oldmac) rather thanrwatson2002-10-221-1/+1
* Support the new MAC user API in kernel: modify existing system callsrwatson2002-10-221-169/+917
* Use if_printf(ifp, "blah") instead ofbrooks2002-10-211-2/+1
* If MAC_MAX_POLICIES isn't defined, don't try to define it, just let therwatson2002-10-201-3/+1
* Make sure to clear the 'registered' flag for MAC policies when theyrwatson2002-10-191-0/+1
* Integrate mac_check_socket_send() and mac_check_socket_receive()rwatson2002-10-061-0/+34
* Sync from MAC tree: break out the single mmap entry point intorwatson2002-10-061-18/+63
* Modify label allocation semantics for sockets: pass in soalloc's mallocrwatson2002-10-051-13/+69
* Integrate a devfs/MAC fix from the MAC tree: avoid a race condition duringrwatson2002-10-051-0/+13
* Merge support for mac_check_vnode_link(), a MAC framework/policy entryrwatson2002-10-051-0/+30
* While the MAC API has supported the ability to handle M_NOWAIT passedrwatson2002-10-051-3/+11
* Rearrange object and label init/destroy functions to match therwatson2002-10-051-101/+101
* Sync to MAC tree: use 'flag' instead of 'how' for mac_init_mbuf();rwatson2002-10-051-3/+3
* Another big diff, little functional change: move label internalization,rwatson2002-10-051-65/+65
OpenPOWER on IntegriCloud