| Commit message (Expand) | Author | Age | Files | Lines |
* | SCARGS removal take II. | alfred | 2002-12-14 | 8 | -40/+40 |
* | Backout removal SCARGS, the code freeze is only "selectively" over. | alfred | 2002-12-13 | 8 | -40/+40 |
* | Remove SCARGS. | alfred | 2002-12-13 | 8 | -40/+40 |
* | Remove dm_root entry from struct devfs_mount. It's never set, and is | rwatson | 2002-12-09 | 10 | -83/+104 |
* | Un-staticize mac_cred_mmapped_drop_perms() so that it may be used | rwatson | 2002-11-26 | 9 | -8/+9 |
* | Introduce p_label, extensible security label storage for the MAC framework | rwatson | 2002-11-20 | 10 | -8/+204 |
* | Merge kld access control checks from the MAC tree: these access control | rwatson | 2002-11-19 | 10 | -0/+375 |
* | Introduce a condition variable to avoid returning EBUSY when | rwatson | 2002-11-13 | 8 | -232/+416 |
* | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | rwatson | 2002-11-12 | 10 | -60/+0 |
* | Garbage collect definition of M_MACOPVEC -- we no longer perform a | rwatson | 2002-11-11 | 8 | -16/+0 |
* | Add an explicit execlabel argument to exec-related MAC policy entry | rwatson | 2002-11-08 | 9 | -27/+36 |
* | Bring in two sets of changes: | rwatson | 2002-11-05 | 10 | -55/+467 |
* | Assert that appropriate vnodes are locked in mac_execve_will_transition(). | rwatson | 2002-11-05 | 8 | -0/+64 |
* | Permit MAC policies to instrument the access control decisions for | rwatson | 2002-11-04 | 10 | -0/+253 |
* | Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MAC | rwatson | 2002-11-04 | 8 | -48/+0 |
* | License clarification and wording changes: NAI has approved removal of | rwatson | 2002-11-04 | 10 | -70/+40 |
* | Introduce mac_check_system_settime(), a MAC check allowing policies to | rwatson | 2002-11-03 | 10 | -0/+106 |
* | Add MAC checks for various kenv() operations: dump, get, set, unset, | rwatson | 2002-11-01 | 10 | -0/+425 |
* | Move to C99 sparse structure initialization for the mac_policy_ops | rwatson | 2002-10-30 | 9 | -4819/+4 |
* | While 'mode_t' seemed like a good idea for the access mode argument for | rwatson | 2002-10-30 | 10 | -28/+28 |
* | Remove all reference to 'struct oldmac', since it's no longer required | rwatson | 2002-10-28 | 1 | -49/+2 |
* | An inappropriate ASSERT slipped in during the recent merge of the | rwatson | 2002-10-28 | 8 | -16/+0 |
* | Centrally manage enforcement of {reboot,swapon,sysctl} using the | rwatson | 2002-10-27 | 8 | -104/+72 |
* | Implement mac_check_system_sysctl(), a MAC Framework entry point to | rwatson | 2002-10-27 | 10 | -0/+231 |
* | Hook up mac_check_system_reboot(), a MAC Framework entry point that | rwatson | 2002-10-27 | 10 | -0/+187 |
* | Merge from MAC tree: rename mac_check_vnode_swapon() to | rwatson | 2002-10-27 | 10 | -148/+148 |
* | Slightly change the semantics of vnode labels for MAC: rather than | rwatson | 2002-10-26 | 10 | -3919/+752 |
* | Comment describing the semantics of mac_late. | rwatson | 2002-10-25 | 8 | -8/+48 |
* | Remove the mac_te policy bits from 'struct oldmac' -- we're not going | rwatson | 2002-10-22 | 1 | -6/+0 |
* | Introduce MAC_CHECK_VNODE_SWAPON, which permits MAC policies to | rwatson | 2002-10-22 | 10 | -0/+180 |
* | Missed in previous merge: export sizeof(struct oldmac) rather than | rwatson | 2002-10-22 | 8 | -8/+8 |
* | Support the new MAC user API in kernel: modify existing system calls | rwatson | 2002-10-22 | 8 | -1352/+7336 |
* | Revised APIs for user process label management; the existing APIs relied | rwatson | 2002-10-22 | 2 | -97/+108 |
* | Add compartment support to Biba and MLS policies. The logic of the | rwatson | 2002-10-21 | 1 | -0/+4 |
* | Use if_printf(ifp, "blah") instead of | brooks | 2002-10-21 | 8 | -16/+8 |
* | If MAC_MAX_POLICIES isn't defined, don't try to define it, just let the | rwatson | 2002-10-20 | 8 | -24/+8 |
* | Make sure to clear the 'registered' flag for MAC policies when they | rwatson | 2002-10-19 | 8 | -0/+8 |
* | Integrate mac_check_socket_send() and mac_check_socket_receive() | rwatson | 2002-10-06 | 10 | -0/+280 |
* | Sync from MAC tree: break out the single mmap entry point into | rwatson | 2002-10-06 | 10 | -150/+517 |
* | Modify label allocation semantics for sockets: pass in soalloc's malloc | rwatson | 2002-10-05 | 10 | -108/+556 |
* | Integrate a devfs/MAC fix from the MAC tree: avoid a race condition during | rwatson | 2002-10-05 | 10 | -0/+110 |
* | Merge support for mac_check_vnode_link(), a MAC framework/policy entry | rwatson | 2002-10-05 | 10 | -0/+246 |
* | While the MAC API has supported the ability to handle M_NOWAIT passed | rwatson | 2002-10-05 | 8 | -24/+88 |
* | Rearrange object and label init/destroy functions to match the | rwatson | 2002-10-05 | 8 | -808/+808 |
* | Sync to MAC tree: use 'flag' instead of 'how' for mac_init_mbuf(); | rwatson | 2002-10-05 | 8 | -24/+24 |
* | Another big diff, little functional change: move label internalization, | rwatson | 2002-10-05 | 8 | -520/+520 |
* | Move all object label init/destroy routines to the head of the | rwatson | 2002-10-05 | 8 | -2280/+2280 |
* | Synch from TrustedBSD MAC tree: | rwatson | 2002-10-05 | 8 | -24/+200 |
* | Cosmetic line wrap synchronization. | rwatson | 2002-10-05 | 8 | -16/+32 |
* | Push the debugging obect label counters into security.mac.debug.counters | rwatson | 2002-10-05 | 8 | -88/+128 |