| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | cred: add proc_set_cred helper | mjg | 2015-03-16 | 1 | -1/+1 |
| * | Update kernel inclusions of capability.h to use capsicum.h instead; some | rwatson | 2014-03-16 | 1 | -1/+1 |
| * | Change the cap_rights_t type from uint64_t to a structure that we can extend | pjd | 2013-09-05 | 1 | -2/+4 |
| * | Remove the support for using non-mpsafe filesystem modules. | kib | 2012-10-22 | 1 | -23/+10 |
| * | When allocation of labels on files is implicitly disabled due to MAC | rwatson | 2012-04-08 | 1 | -14/+27 |
| * | In order to maximize the re-usability of kernel code in user space this | kmacy | 2011-09-16 | 1 | -20/+20 |
| * | Second-to-last commit implementing Capsicum capabilities in the FreeBSD | rwatson | 2011-08-11 | 1 | -2/+3 |
| * | - Add a FEATURE for capsicum (security_capabilities). | netchild | 2011-03-04 | 1 | -1/+1 |
| * | Add some FEATURE macros for various features (AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/ | netchild | 2011-02-25 | 1 | -0/+3 |
| * | Rework MAC Framework synchronization in a number of ways in order to | rwatson | 2009-03-14 | 1 | -4/+8 |
| * | Rename mac_cred_mmapped_drop_perms(), which revokes access to virtual | rwatson | 2008-10-28 | 1 | -9/+1 |
| * | Introduce two related changes to the TrustedBSD MAC Framework: | rwatson | 2008-08-23 | 1 | -0/+28 |
| * | Add the support for the AT_FDCWD and fd-relative name lookups to the | kib | 2008-03-31 | 1 | -0/+1 |
| * | VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used in | attilio | 2008-01-13 | 1 | -2/+2 |
| * | vn_lock() is currently only used with the 'curthread' passed as argument. | attilio | 2008-01-10 | 1 | -2/+2 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -20/+20 |
| * | Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which | rwatson | 2007-08-06 | 1 | -4/+0 |
| * | Remove 'MPSAFE' annotations from the comments above most system calls: all | rwatson | 2007-03-04 | 1 | -30/+0 |
| * | Trim unneeded includes. | rwatson | 2006-12-28 | 1 | -20/+0 |
| * | Break contents of kern_mac.c out into two files following a repo-copy: | rwatson | 2006-12-28 | 1 | -537/+0 |
| * | Update MAC Framework general comments, referencing various interfaces it | rwatson | 2006-12-28 | 1 | -12/+40 |
| * | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | rwatson | 2006-12-22 | 1 | -2/+1 |
| * | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | rwatson | 2006-12-21 | 1 | -3/+1 |
| * | Expand commenting on label slots, justification for the MAC Framework locking | rwatson | 2006-12-20 | 1 | -54/+79 |
| * | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 1 | -1/+2 |
| * | Remove MAC_DEBUG label counters, which were used to debug leaks and | rwatson | 2006-09-20 | 1 | -11/+0 |
| * | Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists in | phk | 2006-07-17 | 1 | -1/+0 |
| * | Don't call vn_finished_write() if vn_start_write() failed. | tegge | 2006-03-19 | 1 | -4/+6 |
| * | Standard Giant push down operations for the Mandatory Access Control (MAC) | csjp | 2005-10-04 | 1 | -34/+27 |
| * | Bump the module versions of the MAC Framework and MAC policy modules | rwatson | 2005-07-14 | 1 | -1/+5 |
| * | Get the directory structure correct in a comment. | trhodes | 2005-04-22 | 1 | -1/+2 |
| * | In mac_get_fd(), remove unconditional acquisition of Giant around copying | rwatson | 2005-04-16 | 1 | -9/+7 |
| * | Bump MAC Framework version to 2 in preparation for the upcoming API/ABI | rwatson | 2004-11-09 | 1 | -1/+1 |
| * | Disable use of synchronization early in the boot by the MAC Framework; | rwatson | 2004-10-30 | 1 | -0/+21 |
| * | Do a pass over all modules in the kernel and make them return EOPNOTSUPP | phk | 2004-07-15 | 1 | -0/+1 |
| * | Add /* !MAC */ to final #endif. | rwatson | 2004-05-03 | 1 | -1/+1 |
| * | Bump copyright date for NETA to 2004. | rwatson | 2004-05-03 | 1 | -1/+1 |
| * | Add MAC_STATIC, a kernel option that disables internal MAC Framework | rwatson | 2004-05-03 | 1 | -0/+25 |
| * | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 1 | -2/+2 |
| * | Coalesce pipe allocations and frees. Previously, the pipe code | rwatson | 2004-02-01 | 1 | -3/+3 |
| * | Implement sockets support for __mac_get_fd() and __mac_set_fd() | rwatson | 2003-11-16 | 1 | -0/+30 |
| * | Mark __mac_get_pid() as MPSAFE in the comment, as it runs without | rwatson | 2003-11-12 | 1 | -37/+15 |
| * | Modify the MAC Framework so that instead of embedding a (struct label) | rwatson | 2003-11-12 | 1 | -62/+57 |
| * | Whitespace sync to MAC branch, expand comment at the head of the file. | rwatson | 2003-11-11 | 1 | -3/+9 |
| * | Remove the flags argument from mac_externalize_*_label(), as it's not | rwatson | 2003-11-06 | 1 | -6/+6 |
| * | mac_Finish break-out of kern_mac.c into parts: | rwatson | 2003-10-22 | 1 | -2756/+5 |
| * | Variable cleanup following break-out of kern_mac.c into sys/security/mac: | rwatson | 2003-10-22 | 1 | -16/+10 |
| * | Rename error_select() to mac_error_select(), and unstaticize so it | rwatson | 2003-10-22 | 1 | -5/+4 |
| * | If the struct mac copied into the kernel has a negative length, return | rwatson | 2003-09-29 | 1 | -1/+2 |
| * | Fix a mac_policy_list reference to be a mac_static_policy_list | rwatson | 2003-08-26 | 1 | -1/+1 |
