| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Implement MAC entry points relating to System V IPC, calling into the | rwatson | 2004-11-17 | 3 | -0/+592 |
| * | Define new MAC framework and policy entry points for System V IPC | rwatson | 2004-11-17 | 2 | -1/+129 |
| * | Bump MAC Framework version to 2 in preparation for the upcoming API/ABI | rwatson | 2004-11-09 | 3 | -3/+3 |
| * | Disable use of synchronization early in the boot by the MAC Framework; | rwatson | 2004-10-30 | 2 | -0/+42 |
| * | Expand comments on various sections of the MAC Framework Policy API, | rwatson | 2004-10-22 | 1 | -4/+15 |
| * | In the MAC label zone destructor, assert that the label is only | rwatson | 2004-10-22 | 1 | -1/+3 |
| * | Remove extern declaration of mac_enforce_sysv, as it's not present in | rwatson | 2004-10-22 | 1 | -1/+0 |
| * | * Add a "how" argument to uma_zone constructors and initialization functions | green | 2004-08-02 | 1 | -3/+4 |
| * | Do a pass over all modules in the kernel and make them return EOPNOTSUPP | phk | 2004-07-15 | 2 | -0/+2 |
| * | Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on | rwatson | 2004-06-24 | 2 | -0/+40 |
| * | Do the dreaded s/dev_t/struct cdev */ | phk | 2004-06-16 | 3 | -3/+4 |
| * | Socket MAC labels so_label and so_peerlabel are now protected by | rwatson | 2004-06-13 | 1 | -8/+57 |
| * | add missing #include <sys/module.h> | phk | 2004-05-30 | 2 | -0/+2 |
| * | Improve consistency of include file guards in src/sys/sys by terminating | rwatson | 2004-05-10 | 2 | -6/+6 |
| * | If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tag | rwatson | 2004-05-03 | 1 | -1/+4 |
| * | Add /* !MAC */ to final #endif. | rwatson | 2004-05-03 | 2 | -2/+2 |
| * | Bump copyright date for NETA to 2004. | rwatson | 2004-05-03 | 2 | -2/+2 |
| * | Add MAC_STATIC, a kernel option that disables internal MAC Framework | rwatson | 2004-05-03 | 2 | -0/+50 |
| * | Define BPFD_LOCK_ASSERT() to assert the BPF descriptor lock. | rwatson | 2004-02-29 | 1 | -0/+4 |
| * | Forward declare struct proc, struct sockaddr, and struct thread, which | rwatson | 2004-02-26 | 1 | -0/+3 |
| * | Forward declare struct bpf_d, struct ifnet, struct image_params, and | rwatson | 2004-02-26 | 1 | -1/+5 |
| * | Move inet and inet6 related MAC Framework entry points from mac_net.c | rwatson | 2004-02-26 | 4 | -655/+807 |
| * | Reimplement sysctls handling by MAC framework. | pjd | 2004-02-22 | 3 | -10/+12 |
| * | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 8 | -16/+16 |
| * | Coalesce pipe allocations and frees. Previously, the pipe code | rwatson | 2004-02-01 | 5 | -63/+65 |
| * | Switch TCP over to using the inpcb label when responding in timed | rwatson | 2003-12-17 | 3 | -0/+15 |
| * | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | rwatson | 2003-12-06 | 3 | -5/+5 |
| * | Introduce a MAC label reference in 'struct inpcb', which caches | rwatson | 2003-11-18 | 3 | -1/+115 |
| * | Implement sockets support for __mac_get_fd() and __mac_set_fd() | rwatson | 2003-11-16 | 5 | -7/+79 |
| * | Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET and | rwatson | 2003-11-16 | 1 | -0/+1 |
| * | Abstract the label checking and setting logic from | rwatson | 2003-11-16 | 2 | -13/+24 |
| * | Reduce gratuitous redundancy and length in function names: | rwatson | 2003-11-16 | 2 | -8/+6 |
| * | Whitespace fix. | rwatson | 2003-11-16 | 1 | -2/+2 |
| * | Reduced prequisites by only using MALLOC_DECLARE() if it is defined. | bde | 2003-11-14 | 1 | -0/+4 |
| * | Mark __mac_get_pid() as MPSAFE in the comment, as it runs without | rwatson | 2003-11-12 | 2 | -74/+30 |
| * | GC prototype for mac_destroy_vnode_label(), missed in last commit. | rwatson | 2003-11-12 | 1 | -1/+0 |
| * | Modify the MAC Framework so that instead of embedding a (struct label) | rwatson | 2003-11-12 | 10 | -359/+579 |
| * | Whitespace sync to MAC branch, expand comment at the head of the file. | rwatson | 2003-11-11 | 2 | -6/+18 |
| * | When allocation of a socket peer label fails, scrub what was | rwatson | 2003-11-07 | 1 | -1/+1 |
| * | Trim trailing whitespace. | rwatson | 2003-11-07 | 1 | -2/+2 |
| * | Remove the flags argument from mac_externalize_*_label(), as it's not | rwatson | 2003-11-06 | 7 | -24/+24 |
| * | Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the object | rwatson | 2003-10-25 | 5 | -15/+15 |
| * | Sort type declarations together. | rwatson | 2003-10-25 | 1 | -6/+1 |
| * | mac_Finish break-out of kern_mac.c into parts: | rwatson | 2003-10-22 | 2 | -5512/+10 |
| * | Variable cleanup following break-out of kern_mac.c into sys/security/mac: | rwatson | 2003-10-22 | 2 | -32/+20 |
| * | Rename error_select() to mac_error_select(), and unstaticize so it | rwatson | 2003-10-22 | 2 | -10/+8 |
| * | Remove non-VFS related code from mac_vfs.c. Leave: | rwatson | 2003-10-22 | 1 | -2987/+5 |
| * | Remove non-system bits from mac_system.c. Leave: | rwatson | 2003-10-22 | 1 | -3692/+2 |
| * | Remove non-credential/process-related bits from mac_process.c. Leave: | rwatson | 2003-10-22 | 1 | -3473/+8 |
| * | Remove non-pipe code from mac_pipe.c. Leave: | rwatson | 2003-10-22 | 1 | -3712/+5 |
