| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Re-wrap comment at 77 character columns. | rwatson | 2006-12-20 | 1 | -7/+7 |
* | Comment and white space cleanup. | rwatson | 2006-12-20 | 1 | -15/+17 |
* | Externalize local stack copy of the ifnet label, rather than the copy on | rwatson | 2006-12-20 | 1 | -2/+2 |
* | Expand commenting on label slots, justification for the MAC Framework locking | rwatson | 2006-12-20 | 2 | -108/+158 |
* | Fix LOR between the syncache and inpcb locks when MAC is present in the | csjp | 2006-12-13 | 3 | -0/+68 |
* | Merge posix4/* into normal kernel hierarchy. | trhodes | 2006-11-11 | 1 | -2/+1 |
* | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 3 | -4/+15 |
* | Add a new priv(9) kernel interface for checking the availability of | rwatson | 2006-11-06 | 3 | -0/+100 |
* | Forward declare struct cdev, since arguments of this type are used in | rwatson | 2006-10-30 | 1 | -0/+1 |
* | Remove extra _MAC_ from #ifdef guard. | rwatson | 2006-10-25 | 1 | -1/+1 |
* | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 16 | -75/+31 |
* | Remove MAC_DEBUG label counters, which were used to debug leaks and | rwatson | 2006-09-20 | 13 | -161/+0 |
* | Declare security and security.bsd sysctl hierarchies in sysctl.h along | rwatson | 2006-09-17 | 1 | -1/+0 |
* | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 3 | -0/+14 |
* | Add struct msg to the forwarded declared data structures in mac_policy.h. | rwatson | 2006-09-09 | 1 | -0/+1 |
* | Make mpo_associate_nfsd_label() return void, not int, to match | rwatson | 2006-08-06 | 1 | -1/+1 |
* | Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists in | phk | 2006-07-17 | 3 | -3/+0 |
* | Reconstitute struct mac_policy_ops by breaking out individual function | rwatson | 2006-04-26 | 1 | -296/+575 |
* | Introduce a new MAC entry point for label initialization of the NFS daemon's | csjp | 2006-04-06 | 3 | -0/+9 |
* | Don't call vn_finished_write() if vn_start_write() failed. | tegge | 2006-03-19 | 2 | -8/+12 |
* | Eliminate a deadlock when creating snapshots. Blocking vn_start_write() must | tegge | 2006-03-02 | 1 | -0/+3 |
* | Lock object while we iterate through it's backing objects. | csjp | 2005-10-09 | 1 | -6/+7 |
* | Use the correct object's backing_object_offset while calculating offsets. | csjp | 2005-10-04 | 1 | -1/+4 |
* | Standard Giant push down operations for the Mandatory Access Control (MAC) | csjp | 2005-10-04 | 2 | -68/+54 |
* | Conditionally pickup Giant in mac_cred_mmapped_drop_perms_recurse so | csjp | 2005-10-04 | 1 | -2/+6 |
* | Complete removal of mac_create_root_mount/mpo_create_root_mount MAC | rwatson | 2005-10-02 | 2 | -3/+0 |
* | Remove mac_create_root_mount() and mpo_create_root_mount(), which | rwatson | 2005-09-19 | 1 | -8/+0 |
* | Insert a series of place-holder function pointers in mac_policy.h for | rwatson | 2005-08-08 | 1 | -0/+25 |
* | Bump the module versions of the MAC Framework and MAC policy modules | rwatson | 2005-07-14 | 3 | -3/+11 |
* | When devfs cloning takes place, provide access to the credential of the | rwatson | 2005-07-14 | 3 | -5/+14 |
* | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | rwatson | 2005-07-05 | 3 | -16/+12 |
* | Add MAC Framework and MAC policy entry point mac_check_socket_create(), | rwatson | 2005-07-05 | 3 | -0/+27 |
* | Correct grammar error in comment | csjp | 2005-06-10 | 1 | -1/+1 |
* | Gratuitous renaming of four System V Semaphore MAC Framework entry | rwatson | 2005-06-07 | 3 | -20/+20 |
* | Introduce MAC Framework and MAC Policy entry points to label and control | rwatson | 2005-05-04 | 3 | -0/+217 |
* | Get the directory structure correct in a comment. | trhodes | 2005-04-22 | 2 | -2/+4 |
* | Introduce p_canwait() and MAC Framework and MAC Policy entry points | rwatson | 2005-04-18 | 3 | -0/+18 |
* | Introduce three additional MAC Framework and MAC Policy entry points to | rwatson | 2005-04-16 | 3 | -7/+61 |
* | In mac_get_fd(), remove unconditional acquisition of Giant around copying | rwatson | 2005-04-16 | 2 | -18/+14 |
* | Introduce new MAC Framework and MAC Policy entry points to control the use | rwatson | 2005-04-16 | 3 | -0/+169 |
* | Move MAC check_vnode_mmap entry point out from being exclusive to | csjp | 2005-04-14 | 3 | -4/+5 |
* | Remove an accidental clearing of the new label pointer on a system V | rwatson | 2005-02-24 | 1 | -1/+0 |
* | Update copyright for NETA->McAfee. | rwatson | 2005-01-30 | 1 | -5/+5 |
* | Implement MAC entry points relating to System V IPC, calling into the | rwatson | 2004-11-17 | 3 | -0/+592 |
* | Define new MAC framework and policy entry points for System V IPC | rwatson | 2004-11-17 | 2 | -1/+129 |
* | Bump MAC Framework version to 2 in preparation for the upcoming API/ABI | rwatson | 2004-11-09 | 3 | -3/+3 |
* | Disable use of synchronization early in the boot by the MAC Framework; | rwatson | 2004-10-30 | 2 | -0/+42 |
* | Expand comments on various sections of the MAC Framework Policy API, | rwatson | 2004-10-22 | 1 | -4/+15 |
* | In the MAC label zone destructor, assert that the label is only | rwatson | 2004-10-22 | 1 | -1/+3 |
* | Remove extern declaration of mac_enforce_sysv, as it's not present in | rwatson | 2004-10-22 | 1 | -1/+0 |