| Commit message (Expand) | Author | Age | Files | Lines |
* | Comment and white space cleanup. | rwatson | 2006-12-20 | 1 | -15/+17 |
* | Fix LOR between the syncache and inpcb locks when MAC is present in the | csjp | 2006-12-13 | 1 | -0/+4 |
* | Add a new priv(9) kernel interface for checking the availability of | rwatson | 2006-11-06 | 1 | -0/+2 |
* | Remove extra _MAC_ from #ifdef guard. | rwatson | 2006-10-25 | 1 | -1/+1 |
* | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -73/+13 |
* | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 1 | -0/+1 |
* | Introduce a new MAC entry point for label initialization of the NFS daemon's | csjp | 2006-04-06 | 1 | -0/+1 |
* | Complete removal of mac_create_root_mount/mpo_create_root_mount MAC | rwatson | 2005-10-02 | 1 | -1/+0 |
* | When devfs cloning takes place, provide access to the credential of the | rwatson | 2005-07-14 | 1 | -2/+2 |
* | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | rwatson | 2005-07-05 | 1 | -1/+1 |
* | Add MAC Framework and MAC policy entry point mac_check_socket_create(), | rwatson | 2005-07-05 | 1 | -0/+6 |
* | Gratuitous renaming of four System V Semaphore MAC Framework entry | rwatson | 2005-06-07 | 1 | -4/+4 |
* | Introduce MAC Framework and MAC Policy entry points to label and control | rwatson | 2005-05-04 | 1 | -0/+15 |
* | Introduce p_canwait() and MAC Framework and MAC Policy entry points | rwatson | 2005-04-18 | 1 | -0/+1 |
* | Introduce three additional MAC Framework and MAC Policy entry points to | rwatson | 2005-04-16 | 1 | -1/+5 |
* | Introduce new MAC Framework and MAC Policy entry points to control the use | rwatson | 2005-04-16 | 1 | -0/+18 |
* | Move MAC check_vnode_mmap entry point out from being exclusive to | csjp | 2005-04-14 | 1 | -1/+1 |
* | Define new MAC framework and policy entry points for System V IPC | rwatson | 2004-11-17 | 1 | -0/+64 |
* | Do the dreaded s/dev_t/struct cdev */ | phk | 2004-06-16 | 1 | -1/+2 |
* | Improve consistency of include file guards in src/sys/sys by terminating | rwatson | 2004-05-10 | 1 | -3/+3 |
* | Reimplement sysctls handling by MAC framework. | pjd | 2004-02-22 | 1 | -3/+4 |
* | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 1 | -2/+2 |
* | Coalesce pipe allocations and frees. Previously, the pipe code | rwatson | 2004-02-01 | 1 | -10/+10 |
* | Switch TCP over to using the inpcb label when responding in timed | rwatson | 2003-12-17 | 1 | -0/+1 |
* | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | rwatson | 2003-12-06 | 1 | -1/+1 |
* | Introduce a MAC label reference in 'struct inpcb', which caches | rwatson | 2003-11-18 | 1 | -0/+7 |
* | Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET and | rwatson | 2003-11-16 | 1 | -0/+1 |
* | Reduce gratuitous redundancy and length in function names: | rwatson | 2003-11-16 | 1 | -3/+3 |
* | GC prototype for mac_destroy_vnode_label(), missed in last commit. | rwatson | 2003-11-12 | 1 | -1/+0 |
* | Modify the MAC Framework so that instead of embedding a (struct label) | rwatson | 2003-11-12 | 1 | -4/+7 |
* | Use __BEGIN_DECLS and __END_DECLS around userland function prototypes | rwatson | 2003-10-02 | 1 | -0/+2 |
* | Remove extra tabs indenting MAC library calls; they were there to | rwatson | 2003-08-29 | 1 | -21/+20 |
* | Make the elements argument to mac_prepare() be const. | rwatson | 2003-08-22 | 1 | -1/+1 |
* | Add prototype for new libc function mac_prepare_type(). | rwatson | 2003-08-22 | 1 | -0/+1 |
* | Introduce two new MAC Framework and MAC policy entry points: | rwatson | 2003-08-21 | 1 | -0/+2 |
* | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | rwatson | 2003-08-21 | 1 | -0/+4 |
* | Update NAI copyright to 2003, missed in earlier commits and merges. | rwatson | 2003-04-18 | 1 | -1/+1 |
* | Move MAC label storage for mbufs into m_tags from the m_pkthdr structure, | rwatson | 2003-04-14 | 1 | -2/+5 |
* | Modify the mac_init_ipq() MAC Framework entry point to accept an | rwatson | 2003-03-26 | 1 | -1/+1 |
* | Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE, | rwatson | 2003-03-23 | 1 | -8/+0 |
* | Instrument sysarch() MD privileged I/O access interfaces with a MAC | rwatson | 2003-03-06 | 1 | -0/+1 |
* | Provide a mac_check_system_swapoff() entry point, which permits MAC | rwatson | 2003-03-05 | 1 | -0/+1 |
* | Remove dm_root entry from struct devfs_mount. It's never set, and is | rwatson | 2002-12-09 | 1 | -5/+7 |
* | Un-staticize mac_cred_mmapped_drop_perms() so that it may be used | rwatson | 2002-11-26 | 1 | -0/+1 |
* | Introduce p_label, extensible security label storage for the MAC framework | rwatson | 2002-11-20 | 1 | -0/+2 |
* | Merge kld access control checks from the MAC tree: these access control | rwatson | 2002-11-19 | 1 | -0/+3 |
* | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | rwatson | 2002-11-12 | 1 | -1/+0 |
* | Bring in two sets of changes: | rwatson | 2002-11-05 | 1 | -4/+12 |
* | Permit MAC policies to instrument the access control decisions for | rwatson | 2002-11-04 | 1 | -0/+2 |
* | License clarification and wording changes: NAI has approved removal of | rwatson | 2002-11-04 | 1 | -7/+4 |