| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Introduce two new MAC Framework and MAC policy entry points: | rwatson | 2003-08-21 | 1 | -0/+3 |
| * | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | rwatson | 2003-08-21 | 1 | -0/+5 |
| * | Redesign the externalization APIs from the MAC Framework to | rwatson | 2003-06-23 | 1 | -12/+7 |
| * | Forward declare a boatload of structures referenced in the MAC | rwatson | 2003-06-22 | 1 | -0/+12 |
| * | Update NAI copyright to 2003, missed in earlier commits and merges. | rwatson | 2003-04-18 | 1 | -1/+1 |
| * | Move MAC label storage for mbufs into m_tags from the m_pkthdr structure, | rwatson | 2003-04-14 | 1 | -0/+3 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | rwatson | 2003-03-26 | 1 | -1/+1 |
| * | Instrument sysarch() MD privileged I/O access interfaces with a MAC | rwatson | 2003-03-06 | 1 | -0/+1 |
| * | Provide a mac_check_system_swapoff() entry point, which permits MAC | rwatson | 2003-03-05 | 1 | -0/+2 |
| * | Remove dm_root entry from struct devfs_mount. It's never set, and is | rwatson | 2002-12-09 | 1 | -6/+9 |
| * | Introduce p_label, extensible security label storage for the MAC framework | rwatson | 2002-11-20 | 1 | -0/+2 |
| * | Merge kld access control checks from the MAC tree: these access control | rwatson | 2002-11-19 | 1 | -0/+4 |
| * | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | rwatson | 2002-11-12 | 1 | -3/+0 |
| * | Add an explicit execlabel argument to exec-related MAC policy entry | rwatson | 2002-11-08 | 1 | -3/+4 |
| * | Bring in two sets of changes: | rwatson | 2002-11-05 | 1 | -3/+7 |
| * | Permit MAC policies to instrument the access control decisions for | rwatson | 2002-11-04 | 1 | -0/+3 |
| * | License clarification and wording changes: NAI has approved removal of | rwatson | 2002-11-04 | 1 | -7/+4 |
| * | Introduce mac_check_system_settime(), a MAC check allowing policies to | rwatson | 2002-11-03 | 1 | -0/+1 |
| * | Add MAC checks for various kenv() operations: dump, get, set, unset, | rwatson | 2002-11-01 | 1 | -0/+5 |
| * | Move to C99 sparse structure initialization for the mac_policy_ops | rwatson | 2002-10-30 | 1 | -155/+4 |
| * | While 'mode_t' seemed like a good idea for the access mode argument for | rwatson | 2002-10-30 | 1 | -2/+2 |
| * | Implement mac_check_system_sysctl(), a MAC Framework entry point to | rwatson | 2002-10-27 | 1 | -0/+4 |
| * | Hook up mac_check_system_reboot(), a MAC Framework entry point that | rwatson | 2002-10-27 | 1 | -0/+2 |
| * | Merge from MAC tree: rename mac_check_vnode_swapon() to | rwatson | 2002-10-27 | 1 | -3/+3 |
| * | Slightly change the semantics of vnode labels for MAC: rather than | rwatson | 2002-10-26 | 1 | -24/+23 |
| * | Introduce MAC_CHECK_VNODE_SWAPON, which permits MAC policies to | rwatson | 2002-10-22 | 1 | -0/+3 |
| * | Revised APIs for user process label management; the existing APIs relied | rwatson | 2002-10-22 | 1 | -10/+49 |
| * | Integrate mac_check_socket_send() and mac_check_socket_receive() | rwatson | 2002-10-06 | 1 | -0/+6 |
| * | Sync from MAC tree: break out the single mmap entry point into | rwatson | 2002-10-06 | 1 | -3/+9 |
| * | Modify label allocation semantics for sockets: pass in soalloc's malloc | rwatson | 2002-10-05 | 1 | -2/+2 |
| * | Integrate a devfs/MAC fix from the MAC tree: avoid a race condition during | rwatson | 2002-10-05 | 1 | -0/+4 |
| * | Merge support for mac_check_vnode_link(), a MAC framework/policy entry | rwatson | 2002-10-05 | 1 | -0/+4 |
| * | Begin another merge from the TrustedBSD MAC branch: | rwatson | 2002-10-05 | 1 | -50/+53 |
| * | Add a new MAC entry point, mac_thread_userret(td), which permits policy | rwatson | 2002-10-02 | 1 | -0/+2 |
| * | Pass active_cred and file_cred into the MAC framework explicitly | rwatson | 2002-08-19 | 1 | -4/+8 |
| * | Provide an implementation of mac_syscall() so that security modules | rwatson | 2002-08-19 | 1 | -0/+8 |
| * | Break out mac_check_pipe_op() into component check entry points: | rwatson | 2002-08-19 | 1 | -3/+12 |
| * | Break out mac_check_vnode_op() into three seperate checks: | rwatson | 2002-08-19 | 1 | -3/+9 |
| * | Rename mac_check_socket_receive() to mac_check_socket_deliver() so that | rwatson | 2002-08-15 | 1 | -4/+4 |
| * | Declare a module service "kernel_mac_support" when MAC support is | rwatson | 2002-08-12 | 1 | -0/+1 |
| * | Improve ordering of MAC entry points in mac_policy_op structure. | rwatson | 2002-08-02 | 1 | -6/+6 |
| * | Change macop_t to const, use macop_t in MAC policy entry point definition | rwatson | 2002-08-01 | 1 | -2/+2 |
| * | Begin committing support for Mandatory Access Control and extensible | rwatson | 2002-07-30 | 1 | -0/+491 |
