| Commit message (Expand) | Author | Age | Files | Lines |
* | Make preparations for resurrecting shared/read locks on vm maps: | alc | 2008-12-22 | 1 | -4/+2 |
* | Break out strictly credential-related portions of mac_process.c into a | rwatson | 2008-10-28 | 1 | -141/+0 |
* | Rename mac_cred_mmapped_drop_perms(), which revokes access to virtual | rwatson | 2008-10-28 | 1 | -5/+12 |
* | Rename three MAC entry points from _proc_ to _cred_ to reflect the fact | rwatson | 2008-10-28 | 1 | -34/+34 |
* | Introduce two related changes to the TrustedBSD MAC Framework: | rwatson | 2008-08-23 | 1 | -6/+40 |
* | VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used in | attilio | 2008-01-13 | 1 | -2/+2 |
* | vn_lock() is currently only used with the 'curthread' passed as argument. | attilio | 2008-01-10 | 1 | -2/+2 |
* | Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and move | rwatson | 2007-10-25 | 1 | -0/+16 |
* | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -50/+54 |
* | Normalize variable naming in the MAC Framework by adopting the normal | rwatson | 2007-04-22 | 1 | -35/+40 |
* | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | rwatson | 2006-12-22 | 1 | -2/+1 |
* | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | rwatson | 2006-12-21 | 1 | -57/+0 |
* | Clean up comment white space and line wrapping. | rwatson | 2006-12-20 | 1 | -15/+14 |
* | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -0/+1 |
* | Remove MAC_DEBUG label counters, which were used to debug leaks and | rwatson | 2006-09-20 | 1 | -12/+0 |
* | Eliminate a deadlock when creating snapshots. Blocking vn_start_write() must | tegge | 2006-03-02 | 1 | -0/+3 |
* | Lock object while we iterate through it's backing objects. | csjp | 2005-10-09 | 1 | -6/+7 |
* | Use the correct object's backing_object_offset while calculating offsets. | csjp | 2005-10-04 | 1 | -1/+4 |
* | Conditionally pickup Giant in mac_cred_mmapped_drop_perms_recurse so | csjp | 2005-10-04 | 1 | -2/+6 |
* | Introduce p_canwait() and MAC Framework and MAC Policy entry points | rwatson | 2005-04-18 | 1 | -0/+15 |
* | Introduce new MAC Framework and MAC Policy entry points to control the use | rwatson | 2005-04-16 | 1 | -0/+137 |
* | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 1 | -2/+2 |
* | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | rwatson | 2003-12-06 | 1 | -2/+2 |
* | Modify the MAC Framework so that instead of embedding a (struct label) | rwatson | 2003-11-12 | 1 | -21/+43 |
* | Remove the flags argument from mac_externalize_*_label(), as it's not | rwatson | 2003-11-06 | 1 | -1/+1 |
* | Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the object | rwatson | 2003-10-25 | 1 | -2/+2 |
* | Remove non-credential/process-related bits from mac_process.c. Leave: | rwatson | 2003-10-22 | 1 | -3473/+8 |
* | If the struct mac copied into the kernel has a negative length, return | rwatson | 2003-09-29 | 1 | -1/+2 |
* | Fix a mac_policy_list reference to be a mac_static_policy_list | rwatson | 2003-08-26 | 1 | -1/+1 |
* | Introduce two new MAC Framework and MAC policy entry points: | rwatson | 2003-08-21 | 1 | -0/+19 |
* | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | rwatson | 2003-08-21 | 1 | -0/+32 |
* | Remove about 40 lines of #ifdef/#endif by using new macros | rwatson | 2003-08-20 | 1 | -70/+31 |
* | Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF. | rwatson | 2003-08-01 | 1 | -28/+18 |
* | Redesign the externalization APIs from the MAC Framework to | rwatson | 2003-06-23 | 1 | -40/+20 |
* | Add a f_vnode field to struct file. | phk | 2003-06-22 | 1 | -2/+2 |
* | Use __FBSDID(). | obrien | 2003-06-11 | 1 | -4/+4 |
* | Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables and | rwatson | 2003-05-08 | 1 | -8/+8 |
* | Clean up locking for the MAC Framework: | rwatson | 2003-05-07 | 1 | -78/+180 |
* | - Acquire the vm_object's lock when performing vm_object_page_clean(). | alc | 2003-04-24 | 1 | -0/+2 |
* | Update NAI copyright to 2003, missed in earlier commits and merges. | rwatson | 2003-04-18 | 1 | -1/+1 |
* | mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, so | rwatson | 2003-04-15 | 1 | -3/+2 |
* | Move MAC label storage for mbufs into m_tags from the m_pkthdr structure, | rwatson | 2003-04-14 | 1 | -17/+118 |
* | Abstract access to the mbuf header label behind a new function, | rwatson | 2003-04-14 | 1 | -25/+80 |
* | Introduce an M_ASSERTPKTHDR() macro which performs the very common task | des | 2003-04-08 | 1 | -2/+2 |
* | Modify the mac_init_ipq() MAC Framework entry point to accept an | rwatson | 2003-03-26 | 1 | -4/+12 |
* | Instrument sysarch() MD privileged I/O access interfaces with a MAC | rwatson | 2003-03-06 | 1 | -0/+12 |
* | Provide a mac_check_system_swapoff() entry point, which permits MAC | rwatson | 2003-03-05 | 1 | -0/+14 |
* | Replace calls to WITNESS_SLEEP() and witness_list() with equivalent calls | jhb | 2003-03-04 | 1 | -2/+3 |
* | Back out M_* changes, per decision of the TRB. | imp | 2003-02-19 | 1 | -34/+34 |
* | Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. | alfred | 2003-01-21 | 1 | -34/+34 |