| Commit message (Expand) | Author | Age | Files | Lines |
* | sys/security: minor spelling fixes. | pfg | 2016-05-06 | 1 | -1/+1 |
* | Fix style issues around existing SDT probes. | markj | 2015-12-16 | 1 | -6/+6 |
* | As constantly reported during kernel compilation, m_buflen is unsigned so | bz | 2013-12-25 | 1 | -2/+1 |
* | dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE | avg | 2013-11-26 | 1 | -3/+3 |
* | - For kernel compiled only with KDTRACE_HOOKS and not any lock debugging | attilio | 2013-11-25 | 1 | -1/+0 |
* | Fix some typos that were causing probe argument types to show up as unknown. | markj | 2013-10-01 | 1 | -1/+1 |
* | Make the mac_policy_rm lock recursable, which allows reentrance into | kib | 2013-09-29 | 1 | -1/+2 |
* | put sys/systm.h at its proper place or add it if missing | avg | 2011-12-12 | 1 | -1/+1 |
* | sysctl(9) cleanup checkpoint: amd64 GENERIC builds cleanly. | mdf | 2011-01-12 | 1 | -1/+1 |
* | Add an extra comment to the SDT probes definition. This allows us to get | rpaulo | 2010-08-22 | 1 | -3/+5 |
* | Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings that | rwatson | 2009-06-02 | 1 | -2/+2 |
* | Add internal 'mac_policy_count' counter to the MAC Framework, which is a | rwatson | 2009-06-02 | 1 | -5/+11 |
* | Make the rmlock(9) interface a bit more like the rwlock(9) interface: | rwatson | 2009-05-29 | 1 | -1/+1 |
* | Convert the MAC Framework from using rwlocks to rmlocks to stabilize | rwatson | 2009-05-27 | 1 | -11/+11 |
* | Rework MAC Framework synchronization in a number of ways in order to | rwatson | 2009-03-14 | 1 | -112/+73 |
* | Improve the consistency of MAC Framework and MAC policy entry point | rwatson | 2009-03-08 | 1 | -0/+3 |
* | Add static DTrace probes for MAC Framework access control checks and | rwatson | 2009-03-08 | 1 | -1/+3 |
* | Reduce the verbosity of SDT trace points for DTrace by defining several | rwatson | 2009-03-03 | 1 | -12/+3 |
* | Begin to add SDT tracing of the MAC Framework: add policy modevent, | rwatson | 2009-01-24 | 1 | -1/+24 |
* | Rather than having MAC policies explicitly declare what object types | rwatson | 2009-01-10 | 1 | -7/+45 |
* | Introduce two related changes to the TrustedBSD MAC Framework: | rwatson | 2008-08-23 | 1 | -29/+14 |
* | Remove conditional return of 1. For the MAC_STATIC case at this point in | csjp | 2007-01-01 | 1 | -3/+0 |
* | Only signal the CV indicating that the MAC Framework is available for | rwatson | 2006-12-31 | 1 | -6/+23 |
* | Slightly resort functions in file so that no forward function prototypes | rwatson | 2006-12-29 | 1 | -49/+46 |
* | Re-add include of opt_mac.h in mac_framework.c, which was improperly | rwatson | 2006-12-29 | 1 | -0/+2 |
* | Centralize definition of MAC_VERSION in mac_policy.h, as it defines the | rwatson | 2006-12-28 | 1 | -4/+3 |
* | Move mac_init_label() and mac_destroy_label() from mac_framework.c to | rwatson | 2006-12-28 | 1 | -19/+0 |
* | Trim unneeded includes. | rwatson | 2006-12-28 | 1 | -28/+0 |
* | Break contents of kern_mac.c out into two files following a repo-copy: | rwatson | 2006-12-28 | 1 | -672/+0 |
* | Update MAC Framework general comments, referencing various interfaces it | rwatson | 2006-12-28 | 1 | -12/+40 |
* | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | rwatson | 2006-12-22 | 1 | -2/+1 |
* | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | rwatson | 2006-12-21 | 1 | -3/+1 |
* | Expand commenting on label slots, justification for the MAC Framework locking | rwatson | 2006-12-20 | 1 | -54/+79 |
* | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -1/+2 |
* | Remove MAC_DEBUG label counters, which were used to debug leaks and | rwatson | 2006-09-20 | 1 | -11/+0 |
* | Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists in | phk | 2006-07-17 | 1 | -1/+0 |
* | Don't call vn_finished_write() if vn_start_write() failed. | tegge | 2006-03-19 | 1 | -4/+6 |
* | Standard Giant push down operations for the Mandatory Access Control (MAC) | csjp | 2005-10-04 | 1 | -34/+27 |
* | Bump the module versions of the MAC Framework and MAC policy modules | rwatson | 2005-07-14 | 1 | -1/+5 |
* | Get the directory structure correct in a comment. | trhodes | 2005-04-22 | 1 | -1/+2 |
* | In mac_get_fd(), remove unconditional acquisition of Giant around copying | rwatson | 2005-04-16 | 1 | -9/+7 |
* | Bump MAC Framework version to 2 in preparation for the upcoming API/ABI | rwatson | 2004-11-09 | 1 | -1/+1 |
* | Disable use of synchronization early in the boot by the MAC Framework; | rwatson | 2004-10-30 | 1 | -0/+21 |
* | Do a pass over all modules in the kernel and make them return EOPNOTSUPP | phk | 2004-07-15 | 1 | -0/+1 |
* | Add /* !MAC */ to final #endif. | rwatson | 2004-05-03 | 1 | -1/+1 |
* | Bump copyright date for NETA to 2004. | rwatson | 2004-05-03 | 1 | -1/+1 |
* | Add MAC_STATIC, a kernel option that disables internal MAC Framework | rwatson | 2004-05-03 | 1 | -0/+25 |
* | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 1 | -2/+2 |
* | Coalesce pipe allocations and frees. Previously, the pipe code | rwatson | 2004-02-01 | 1 | -3/+3 |
* | Implement sockets support for __mac_get_fd() and __mac_set_fd() | rwatson | 2003-11-16 | 1 | -0/+30 |