| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | - If vn_lock fails with the LK_INTERLOCK flag set, interlock will not be | jeff | 2002-08-21 | 1 | -2/+3 |
| * | - Add two new debugging macros: ASSERT_VI_LOCKED and ASSERT_VI_UNLOCKED | jeff | 2002-08-21 | 2 | -8/+65 |
| * | - Hold the vnode lock across unlink() so that the v_vflag check is safe. | jeff | 2002-08-21 | 2 | -30/+40 |
| * | Close a race in process label changing opened due to dropping the | rwatson | 2002-08-19 | 1 | -7/+10 |
| * | Regen. | rwatson | 2002-08-19 | 2 | -3/+3 |
| * | mac_syscall is now implemented, switch to MSTD. | rwatson | 2002-08-19 | 1 | -1/+1 |
| * | Pass active_cred and file_cred into the MAC framework explicitly | rwatson | 2002-08-19 | 6 | -32/+57 |
| * | Provide an implementation of mac_syscall() so that security modules | rwatson | 2002-08-19 | 1 | -0/+38 |
| * | Break out mac_check_pipe_op() into component check entry points: | rwatson | 2002-08-19 | 2 | -8/+50 |
| * | Break out mac_check_vnode_op() into three seperate checks: | rwatson | 2002-08-19 | 6 | -37/+74 |
| * | Assert process locks in proces-related access control checks. | rwatson | 2002-08-19 | 1 | -0/+6 |
| * | Add a missing vnode assertion for the exec() check. | rwatson | 2002-08-19 | 1 | -0/+2 |
| * | Keep a copy of the credential used to mount filesystems around so | phk | 2002-08-19 | 1 | -3/+7 |
| * | A side effect of some debugging: prototypify and deregister. | phk | 2002-08-18 | 1 | -45/+18 |
| * | Increase size of ifnet.if_flags from 16 bits (short) to 32 bits (int). To avoid | sobomax | 2002-08-18 | 1 | -5/+5 |
| * | In continuation of early fileop credential changes, modify fo_ioctl() to | rwatson | 2002-08-17 | 6 | -20/+26 |
| * | Further improved the performance of sbreserve() by moving the calculation | dg | 2002-08-16 | 2 | -10/+52 |
| * | Wrap maintenance of varios nmac{objectname} counters in MAC_DEBUG so we | rwatson | 2002-08-16 | 1 | -0/+46 |
| * | Correct white space nits that crept in during my recent merges of | rwatson | 2002-08-16 | 2 | -3/+3 |
| * | Make similar changes to fo_stat() and fo_poll() as made earlier to | rwatson | 2002-08-16 | 9 | -56/+71 |
| * | Rewrote the space check algorithm in sbreserve() so that the extremely | dg | 2002-08-16 | 2 | -2/+2 |
| * | In order to better support flexible and extensible access control, | rwatson | 2002-08-15 | 14 | -62/+91 |
| * | Rename mac_check_socket_receive() to mac_check_socket_deliver() so that | rwatson | 2002-08-15 | 1 | -10/+10 |
| * | Fix return case for negative namelen by jumping to normal exit processing | rwatson | 2002-08-15 | 1 | -2/+4 |
| * | Make m_flags an int instead of a short, this is consistent with the | bmilekic | 2002-08-15 | 1 | -1/+1 |
| * | Sync to trustedbsd_mac tree: default to sigsegv rather than copy-on-write | rwatson | 2002-08-15 | 1 | -1/+1 |
| * | return foo -> return (foo) | alfred | 2002-08-15 | 1 | -22/+22 |
| * | Moved sf_buf_alloc and sf_buf_free function declarations to sys/socketvar.h | dg | 2002-08-13 | 2 | -4/+0 |
| * | Remove obsolete comment about sf_buf_* functions being static. They were | dg | 2002-08-13 | 1 | -3/+0 |
| * | Remember to unlock the (optional) vnode in vfs_stdextattrctl(). Failing | phk | 2002-08-13 | 1 | -0/+2 |
| * | Add a #include for <sys/mount.h> | phk | 2002-08-13 | 1 | -0/+1 |
| * | Make SYSVSEM mpsafe. Each semaphore set gets its own lock, however | alfred | 2002-08-13 | 1 | -87/+172 |
| * | Make SYSVMSG mpsafe. Right now there is a global lock over the | alfred | 2002-08-13 | 1 | -19/+31 |
| * | - Hold the vnode lock throughout execve. | jeff | 2002-08-13 | 3 | -25/+39 |
| * | - Extend the vnode_free_list_mtx to cover numvnodes and freevnodes. This | jeff | 2002-08-13 | 1 | -3/+15 |
| * | Introduce support for labeling and access control of pipe objects | rwatson | 2002-08-13 | 1 | -0/+60 |
| * | Use the credential authorizing the socket creation operation to perform | rwatson | 2002-08-12 | 1 | -2/+2 |
| * | Enforce MAC policy in cttyread() as well as the other operations | rwatson | 2002-08-12 | 1 | -1/+6 |
| * | Implement IO_NOMACCHECK in vn_rdwr() -- perform MAC checks (assuming | rwatson | 2002-08-12 | 1 | -4/+17 |
| * | Declare a module service "kernel_mac_support" when MAC support is | rwatson | 2002-08-12 | 1 | -0/+8 |
| * | Fix sendfile(), who was calling vn_rdwr() without aresid parameter and | semenu | 2002-08-11 | 1 | -2/+2 |
| * | o Make a correction to the last change: In aio_cancel(2) return AIO_ALLDONE | alc | 2002-08-11 | 1 | -2/+2 |
| * | Make kern.log_console_output a tuneable aswell as a sysctl. | dwmalone | 2002-08-11 | 1 | -0/+1 |
| * | Fix typos; each file has at least one s/seperat/separat/ | schweikh | 2002-08-11 | 1 | -5/+5 |
| * | o In aio_cancel(2), make sure that p->p_aioinfo isn't NULL before | alc | 2002-08-11 | 1 | -0/+2 |
| * | - Introduce a new struct xvfsconf, the userland version of struct vfsconf. | mux | 2002-08-10 | 1 | -17/+57 |
| * | Introduce a new sysctl flag, CTLFLAG_SKIP, which will cause | mux | 2002-08-10 | 1 | -0/+3 |
| * | While we're at it, add range checks similar to those in previous commit to | nectar | 2002-08-09 | 1 | -0/+8 |
| * | Add additional range checks for copyout targets. | rwatson | 2002-08-09 | 1 | -0/+2 |
| * | Only my brain can fart while fixing a previous brain fart. | bmilekic | 2002-08-08 | 1 | -2/+1 |
