summaryrefslogtreecommitdiffstats
path: root/sys/security/mac/mac_syscalls.c
Commit message (Expand)AuthorAgeFilesLines
...
* Merge support for mac_check_vnode_link(), a MAC framework/policy entryrwatson2002-10-051-0/+30
* While the MAC API has supported the ability to handle M_NOWAIT passedrwatson2002-10-051-3/+11
* Rearrange object and label init/destroy functions to match therwatson2002-10-051-101/+101
* Sync to MAC tree: use 'flag' instead of 'how' for mac_init_mbuf();rwatson2002-10-051-3/+3
* Another big diff, little functional change: move label internalization,rwatson2002-10-051-65/+65
* Move all object label init/destroy routines to the head of therwatson2002-10-051-285/+285
* Synch from TrustedBSD MAC tree:rwatson2002-10-051-3/+25
* Cosmetic line wrap synchronization.rwatson2002-10-051-2/+4
* Push the debugging obect label counters into security.mac.debug.countersrwatson2002-10-051-11/+16
* Begin another merge from the TrustedBSD MAC branch:rwatson2002-10-051-68/+86
* Add a new MAC entry point, mac_thread_userret(td), which permits policyrwatson2002-10-021-0/+11
* Remember to include "opt_devfs.h" so we get any relevant changesphk2002-10-011-0/+1
* Improve locking of pipe mutexes in the context of MAC:rwatson2002-10-011-0/+34
* Push 'security.mac.debug_label_fallback' behind options MAC_DEBUG.rwatson2002-10-011-10/+14
* Add tunables for the existing sysctl twiddles for pipe and vmrwatson2002-09-301-0/+2
* Remove un-needed stack variable 'ops'.rwatson2002-09-181-3/+2
* Add a toggle to disable VM enforcement.rwatson2002-09-181-0/+7
* At the cost of seeming a little gauche, make use of more traditionalrwatson2002-09-181-4/+4
* Remove all use of vnode->v_tag, replacing with appropriate substitutes.njl2002-09-141-4/+4
* Add security.mac.mmap_revocation, a flag indicating whether werwatson2002-09-091-0/+8
* Minor code sync to MAC tree: push Giant locking up fromrwatson2002-09-091-2/+2
* Include <sys/malloc.h> instead of depending on namespace pollution 2bde2002-09-051-6/+5
* Close a race in process label changing opened due to dropping therwatson2002-08-191-7/+10
* Pass active_cred and file_cred into the MAC framework explicitlyrwatson2002-08-191-12/+20
* Provide an implementation of mac_syscall() so that security modulesrwatson2002-08-191-0/+38
* Break out mac_check_pipe_op() into component check entry points:rwatson2002-08-191-4/+46
* Break out mac_check_vnode_op() into three seperate checks:rwatson2002-08-191-10/+57
* Assert process locks in proces-related access control checks.rwatson2002-08-191-0/+6
* Add a missing vnode assertion for the exec() check.rwatson2002-08-191-0/+2
* Wrap maintenance of varios nmac{objectname} counters in MAC_DEBUG so werwatson2002-08-161-0/+46
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatrwatson2002-08-151-10/+10
* Sync to trustedbsd_mac tree: default to sigsegv rather than copy-on-writerwatson2002-08-151-1/+1
* Declare a module service "kernel_mac_support" when MAC support isrwatson2002-08-121-0/+8
* - Replace v_flag with v_iflag and v_vflagjeff2002-08-041-5/+7
* Include file cleanup; mac.h and malloc.h at one point had orderingrwatson2002-08-011-0/+1
* Begin committing support for Mandatory Access Control and extensiblerwatson2002-07-301-0/+3016
* Stubs for the TrustedBSD MAC system calls to permit TrustedBSD MACrwatson2002-07-301-0/+93
OpenPOWER on IntegriCloud