summaryrefslogtreecommitdiffstats
path: root/sys/security/mac/mac_policy.h
Commit message (Expand)AuthorAgeFilesLines
* Modify the mac_init_ipq() MAC Framework entry point to accept anrwatson2003-03-261-1/+1
* Instrument sysarch() MD privileged I/O access interfaces with a MACrwatson2003-03-061-0/+1
* Provide a mac_check_system_swapoff() entry point, which permits MACrwatson2003-03-051-0/+2
* Remove dm_root entry from struct devfs_mount. It's never set, and isrwatson2002-12-091-6/+9
* Introduce p_label, extensible security label storage for the MAC frameworkrwatson2002-11-201-0/+2
* Merge kld access control checks from the MAC tree: these access controlrwatson2002-11-191-0/+4
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sincerwatson2002-11-121-3/+0
* Add an explicit execlabel argument to exec-related MAC policy entryrwatson2002-11-081-3/+4
* Bring in two sets of changes:rwatson2002-11-051-3/+7
* Permit MAC policies to instrument the access control decisions forrwatson2002-11-041-0/+3
* License clarification and wording changes: NAI has approved removal ofrwatson2002-11-041-7/+4
* Introduce mac_check_system_settime(), a MAC check allowing policies torwatson2002-11-031-0/+1
* Add MAC checks for various kenv() operations: dump, get, set, unset,rwatson2002-11-011-0/+5
* Move to C99 sparse structure initialization for the mac_policy_opsrwatson2002-10-301-155/+4
* While 'mode_t' seemed like a good idea for the access mode argument forrwatson2002-10-301-2/+2
* Implement mac_check_system_sysctl(), a MAC Framework entry point torwatson2002-10-271-0/+4
* Hook up mac_check_system_reboot(), a MAC Framework entry point thatrwatson2002-10-271-0/+2
* Merge from MAC tree: rename mac_check_vnode_swapon() torwatson2002-10-271-3/+3
* Slightly change the semantics of vnode labels for MAC: rather thanrwatson2002-10-261-24/+23
* Introduce MAC_CHECK_VNODE_SWAPON, which permits MAC policies torwatson2002-10-221-0/+3
* Revised APIs for user process label management; the existing APIs reliedrwatson2002-10-221-10/+49
* Integrate mac_check_socket_send() and mac_check_socket_receive()rwatson2002-10-061-0/+6
* Sync from MAC tree: break out the single mmap entry point intorwatson2002-10-061-3/+9
* Modify label allocation semantics for sockets: pass in soalloc's mallocrwatson2002-10-051-2/+2
* Integrate a devfs/MAC fix from the MAC tree: avoid a race condition duringrwatson2002-10-051-0/+4
* Merge support for mac_check_vnode_link(), a MAC framework/policy entryrwatson2002-10-051-0/+4
* Begin another merge from the TrustedBSD MAC branch:rwatson2002-10-051-50/+53
* Add a new MAC entry point, mac_thread_userret(td), which permits policyrwatson2002-10-021-0/+2
* Pass active_cred and file_cred into the MAC framework explicitlyrwatson2002-08-191-4/+8
* Provide an implementation of mac_syscall() so that security modulesrwatson2002-08-191-0/+8
* Break out mac_check_pipe_op() into component check entry points:rwatson2002-08-191-3/+12
* Break out mac_check_vnode_op() into three seperate checks:rwatson2002-08-191-3/+9
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatrwatson2002-08-151-4/+4
* Declare a module service "kernel_mac_support" when MAC support isrwatson2002-08-121-0/+1
* Improve ordering of MAC entry points in mac_policy_op structure.rwatson2002-08-021-6/+6
* Change macop_t to const, use macop_t in MAC policy entry point definitionrwatson2002-08-011-2/+2
* Begin committing support for Mandatory Access Control and extensiblerwatson2002-07-301-0/+491
OpenPOWER on IntegriCloud