summaryrefslogtreecommitdiffstats
path: root/sys/security/mac/mac_process.c
Commit message (Expand)AuthorAgeFilesLines
* Unless "cnt" exceeds MAX_COMMIT_COUNT, nfsrv_commit() and nfsvno_fsync() arealc2011-02-051-5/+2
* Rename MAC Framework-internal macros used to invoke policy entry points:rwatson2009-05-011-7/+7
* Rework MAC Framework synchronization in a number of ways in order torwatson2009-03-141-5/+5
* Improve the consistency of MAC Framework and MAC policy entry pointrwatson2009-03-081-148/+0
* Add static DTrace probes for MAC Framework access control checks andrwatson2009-03-081-1/+57
* Use vm_map_entry_t instead of explicit struct vm_map_entry *.kib2009-02-241-1/+1
* Make preparations for resurrecting shared/read locks on vm maps:alc2008-12-221-4/+2
* Break out strictly credential-related portions of mac_process.c into arwatson2008-10-281-141/+0
* Rename mac_cred_mmapped_drop_perms(), which revokes access to virtualrwatson2008-10-281-5/+12
* Rename three MAC entry points from _proc_ to _cred_ to reflect the factrwatson2008-10-281-34/+34
* Introduce two related changes to the TrustedBSD MAC Framework:rwatson2008-08-231-6/+40
* VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used inattilio2008-01-131-2/+2
* vn_lock() is currently only used with the 'curthread' passed as argument.attilio2008-01-101-2/+2
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moverwatson2007-10-251-0/+16
* Merge first in a series of TrustedBSD MAC Framework KPI changesrwatson2007-10-241-50/+54
* Normalize variable naming in the MAC Framework by adopting the normalrwatson2007-04-221-35/+40
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACrwatson2006-12-221-2/+1
* Remove mac_enforce_subsystem debugging sysctls. Enforcement onrwatson2006-12-211-57/+0
* Clean up comment white space and line wrapping.rwatson2006-12-201-15/+14
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hrwatson2006-10-221-0/+1
* Remove MAC_DEBUG label counters, which were used to debug leaks andrwatson2006-09-201-12/+0
* Eliminate a deadlock when creating snapshots. Blocking vn_start_write() musttegge2006-03-021-0/+3
* Lock object while we iterate through it's backing objects.csjp2005-10-091-6/+7
* Use the correct object's backing_object_offset while calculating offsets.csjp2005-10-041-1/+4
* Conditionally pickup Giant in mac_cred_mmapped_drop_perms_recurse socsjp2005-10-041-2/+6
* Introduce p_canwait() and MAC Framework and MAC Policy entry pointsrwatson2005-04-181-0/+15
* Introduce new MAC Framework and MAC Policy entry points to control the userwatson2005-04-161-0/+137
* Update my personal copyrights and NETA copyrights in the kernelrwatson2004-02-221-2/+2
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),rwatson2003-12-061-2/+2
* Modify the MAC Framework so that instead of embedding a (struct label)rwatson2003-11-121-21/+43
* Remove the flags argument from mac_externalize_*_label(), as it's notrwatson2003-11-061-1/+1
* Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the objectrwatson2003-10-251-2/+2
* Remove non-credential/process-related bits from mac_process.c. Leave:rwatson2003-10-221-3473/+8
* If the struct mac copied into the kernel has a negative length, returnrwatson2003-09-291-1/+2
* Fix a mac_policy_list reference to be a mac_static_policy_listrwatson2003-08-261-1/+1
* Introduce two new MAC Framework and MAC policy entry points:rwatson2003-08-211-0/+19
* Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr():rwatson2003-08-211-0/+32
* Remove about 40 lines of #ifdef/#endif by using new macrosrwatson2003-08-201-70/+31
* Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF.rwatson2003-08-011-28/+18
* Redesign the externalization APIs from the MAC Framework torwatson2003-06-231-40/+20
* Add a f_vnode field to struct file.phk2003-06-221-2/+2
* Use __FBSDID().obrien2003-06-111-4/+4
* Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables andrwatson2003-05-081-8/+8
* Clean up locking for the MAC Framework:rwatson2003-05-071-78/+180
* - Acquire the vm_object's lock when performing vm_object_page_clean().alc2003-04-241-0/+2
* Update NAI copyright to 2003, missed in earlier commits and merges.rwatson2003-04-181-1/+1
* mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, sorwatson2003-04-151-3/+2
* Move MAC label storage for mbufs into m_tags from the m_pkthdr structure,rwatson2003-04-141-17/+118
* Abstract access to the mbuf header label behind a new function,rwatson2003-04-141-25/+80
* Introduce an M_ASSERTPKTHDR() macro which performs the very common taskdes2003-04-081-2/+2
OpenPOWER on IntegriCloud