| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Rather than having MAC policies explicitly declare what object types | rwatson | 2009-01-10 | 1 | -30/+3 |
| * | Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary | trasz | 2008-10-28 | 1 | -2/+5 |
| * | Rename three MAC entry points from _proc_ to _cred_ to reflect the fact | rwatson | 2008-10-28 | 1 | -6/+6 |
| * | Add a MAC label, MAC Framework, and MAC policy entry points for IPv6 | rwatson | 2008-10-26 | 1 | -1/+21 |
| * | Add mac_inpcb_check_visible MAC Framework entry point, which is similar | bz | 2008-10-17 | 1 | -0/+3 |
| * | Introduce two related changes to the TrustedBSD MAC Framework: | rwatson | 2008-08-23 | 1 | -8/+37 |
| * | Rework the lifetime management of the kernel implementation of POSIX | jhb | 2008-06-27 | 1 | -6/+13 |
| * | Remove the posixsem_check_destroy() MAC check. It is semantically identical | jhb | 2008-06-23 | 1 | -3/+0 |
| * | The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the | rwatson | 2008-06-13 | 1 | -6/+5 |
| * | Make naming of include guards for MAC Framework include files more | rwatson | 2008-04-13 | 1 | -3/+3 |
| * | Add a new file descriptor type for IPC shared memory objects and use it to | jhb | 2008-01-08 | 1 | -0/+28 |
| * | Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Framework | rwatson | 2007-10-28 | 1 | -5/+0 |
| * | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 1 | -5/+9 |
| * | Move towards more explicit support for various network protocol stacks | rwatson | 2007-10-28 | 1 | -5/+21 |
| * | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 1 | -5/+5 |
| * | Sort entry points in mac_framework.h and mac_policy.h alphabetically by | rwatson | 2007-10-25 | 1 | -439/+399 |
| * | Normalize TCP syncache-related MAC Framework entry points to match most | rwatson | 2007-10-25 | 1 | -8/+8 |
| * | Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and move | rwatson | 2007-10-25 | 1 | -2/+2 |
| * | Further MAC Framework cleanup: normalize some local variable names and | rwatson | 2007-10-25 | 1 | -3/+3 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -422/+422 |
| * | Bump MAC_VERSION to 4 and add an 8.x line in the version table. Version 4 | rwatson | 2007-10-23 | 1 | -1/+2 |
| * | Canonicalize naming of local variables for struct ksem and associated | rwatson | 2007-10-21 | 1 | -7/+7 |
| * | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | rwatson | 2007-09-10 | 1 | -5/+5 |
| * | Fix a bunch of warnings due to a missing forward declaration of a struct. | peter | 2007-07-05 | 1 | -0/+1 |
| * | Add a new MAC framework and policy entry point, | rwatson | 2007-06-26 | 1 | -0/+3 |
| * | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | rwatson | 2007-04-23 | 1 | -6/+6 |
| * | Normalize variable naming in the MAC Framework by adopting the normal | rwatson | 2007-04-22 | 1 | -144/+142 |
| * | In the MAC Framework implementation, file systems have two per-mountpoint | rwatson | 2007-04-22 | 1 | -9/+5 |
| * | Remove MAC Framework access control check entry points made redundant with | rwatson | 2007-04-22 | 1 | -8/+0 |
| * | Allow MAC policy modules to control access to audit configuration system | rwatson | 2007-04-21 | 1 | -0/+14 |
| * | Introduce accessor functions mac_label_get() and mac_label_set() to replace | rwatson | 2007-02-06 | 1 | -7/+3 |
| * | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | rwatson | 2007-02-06 | 1 | -0/+6 |
| * | Add missing include guards to mac_internal.h, update include guards in | rwatson | 2006-12-28 | 1 | -3/+3 |
| * | Centralize definition of MAC_VERSION in mac_policy.h, as it defines the | rwatson | 2006-12-28 | 1 | -1/+16 |
| * | Re-wrap comments following de-indentation. | rwatson | 2006-12-23 | 1 | -13/+11 |
| * | Comment LABEL_TO_SLOT() macro, including observing that we'd like to improve | rwatson | 2006-12-20 | 1 | -0/+8 |
| * | Fix LOR between the syncache and inpcb locks when MAC is present in the | csjp | 2006-12-13 | 1 | -0/+10 |
| * | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -0/+4 |
| * | Forward declare struct cdev, since arguments of this type are used in | rwatson | 2006-10-30 | 1 | -0/+1 |
| * | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -0/+2 |
| * | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 1 | -0/+3 |
| * | Add struct msg to the forwarded declared data structures in mac_policy.h. | rwatson | 2006-09-09 | 1 | -0/+1 |
| * | Make mpo_associate_nfsd_label() return void, not int, to match | rwatson | 2006-08-06 | 1 | -1/+1 |
| * | Reconstitute struct mac_policy_ops by breaking out individual function | rwatson | 2006-04-26 | 1 | -296/+575 |
| * | Introduce a new MAC entry point for label initialization of the NFS daemon's | csjp | 2006-04-06 | 1 | -0/+1 |
| * | Complete removal of mac_create_root_mount/mpo_create_root_mount MAC | rwatson | 2005-10-02 | 1 | -2/+0 |
| * | Insert a series of place-holder function pointers in mac_policy.h for | rwatson | 2005-08-08 | 1 | -0/+25 |
| * | Bump the module versions of the MAC Framework and MAC policy modules | rwatson | 2005-07-14 | 1 | -1/+1 |
| * | When devfs cloning takes place, provide access to the credential of the | rwatson | 2005-07-14 | 1 | -1/+5 |
| * | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | rwatson | 2005-07-05 | 1 | -3/+0 |
