| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Rework the lifetime management of the kernel implementation of POSIX | jhb | 2008-06-27 | 3 | -15/+45 |
| * | Remove the posixsem_check_destroy() MAC check. It is semantically identical | jhb | 2008-06-23 | 3 | -14/+0 |
| * | The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the | rwatson | 2008-06-13 | 3 | -26/+25 |
| * | Plug a memory leak which can occur when multiple MAC policies are loaded | csjp | 2008-05-27 | 1 | -0/+4 |
| * | When propagating a MAC label from an inpcb to an mbuf, allow read and | rwatson | 2008-04-19 | 1 | -1/+1 |
| * | Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros to | rwatson | 2008-04-17 | 1 | -3/+3 |
| * | Make naming of include guards for MAC Framework include files more | rwatson | 2008-04-13 | 3 | -9/+9 |
| * | Add the support for the AT_FDCWD and fd-relative name lookups to the | kib | 2008-03-31 | 1 | -0/+1 |
| * | VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used in | attilio | 2008-01-13 | 2 | -4/+4 |
| * | vn_lock() is currently only used with the 'curthread' passed as argument. | attilio | 2008-01-10 | 2 | -4/+4 |
| * | Add a new file descriptor type for IPC shared memory objects and use it to | jhb | 2008-01-08 | 3 | -0/+187 |
| * | Fix a MAC label leak for POSIX semaphores, in which per-policy labels | rwatson | 2007-12-17 | 1 | -0/+1 |
| * | Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Framework | rwatson | 2007-10-28 | 3 | -22/+0 |
| * | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 4 | -20/+41 |
| * | Move towards more explicit support for various network protocol stacks | rwatson | 2007-10-28 | 7 | -23/+188 |
| * | Update comment following MAC Framework entry point renaming and | rwatson | 2007-10-26 | 1 | -1/+6 |
| * | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 4 | -11/+11 |
| * | Sort entry points in mac_framework.h and mac_policy.h alphabetically by | rwatson | 2007-10-25 | 2 | -629/+574 |
| * | Normalize TCP syncache-related MAC Framework entry points to match most | rwatson | 2007-10-25 | 3 | -20/+20 |
| * | Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and move | rwatson | 2007-10-25 | 4 | -19/+19 |
| * | Further MAC Framework cleanup: normalize some local variable names and | rwatson | 2007-10-25 | 3 | -21/+22 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 16 | -1150/+1193 |
| * | Bump MAC_VERSION to 4 and add an 8.x line in the version table. Version 4 | rwatson | 2007-10-23 | 1 | -1/+2 |
| * | Canonicalize naming of local variables for struct ksem and associated | rwatson | 2007-10-21 | 3 | -34/+33 |
| * | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | rwatson | 2007-09-10 | 3 | -21/+21 |
| * | Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which | rwatson | 2007-08-06 | 1 | -4/+0 |
| * | Fix a bunch of warnings due to a missing forward declaration of a struct. | peter | 2007-07-05 | 1 | -0/+1 |
| * | Add a new MAC framework and policy entry point, | rwatson | 2007-06-26 | 3 | -0/+16 |
| * | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | rwatson | 2007-04-23 | 3 | -21/+19 |
| * | Normalize variable naming in the MAC Framework by adopting the normal | rwatson | 2007-04-22 | 8 | -395/+384 |
| * | In the MAC Framework implementation, file systems have two per-mountpoint | rwatson | 2007-04-22 | 2 | -42/+16 |
| * | Remove MAC Framework access control check entry points made redundant with | rwatson | 2007-04-22 | 3 | -59/+16 |
| * | Allow MAC policy modules to control access to audit configuration system | rwatson | 2007-04-21 | 3 | -0/+121 |
| * | Remove 'MPSAFE' annotations from the comments above most system calls: all | rwatson | 2007-03-04 | 1 | -30/+0 |
| * | Introduce accessor functions mac_label_get() and mac_label_set() to replace | rwatson | 2007-02-06 | 4 | -10/+46 |
| * | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | rwatson | 2007-02-06 | 11 | -9/+10 |
| * | Remove conditional return of 1. For the MAC_STATIC case at this point in | csjp | 2007-01-01 | 1 | -3/+0 |
| * | Only signal the CV indicating that the MAC Framework is available for | rwatson | 2006-12-31 | 1 | -6/+23 |
| * | Slightly resort functions in file so that no forward function prototypes | rwatson | 2006-12-29 | 1 | -49/+46 |
| * | Re-add include of opt_mac.h in mac_framework.c, which was improperly | rwatson | 2006-12-29 | 1 | -0/+2 |
| * | Add missing include guards to mac_internal.h, update include guards in | rwatson | 2006-12-28 | 2 | -3/+8 |
| * | Remove XXX comments about EA transaction support and provide a more | rwatson | 2006-12-28 | 1 | -6/+11 |
| * | Remove an inaccurate comment I added regarding storage for mbuf tag | rwatson | 2006-12-28 | 1 | -7/+0 |
| * | In mac_inpcb_sosetlabel(), assert the socket lock rather than commenting | rwatson | 2006-12-28 | 1 | -1/+1 |
| * | Centralize definition of MAC_VERSION in mac_policy.h, as it defines the | rwatson | 2006-12-28 | 3 | -6/+19 |
| * | Move mac_init_label() and mac_destroy_label() from mac_framework.c to | rwatson | 2006-12-28 | 2 | -29/+31 |
| * | Trim unneeded includes. | rwatson | 2006-12-28 | 2 | -48/+0 |
| * | Break contents of kern_mac.c out into two files following a repo-copy: | rwatson | 2006-12-28 | 2 | -1209/+0 |
| * | Update MAC Framework general comments, referencing various interfaces it | rwatson | 2006-12-28 | 2 | -24/+80 |
| * | Re-wrap comments following de-indentation. | rwatson | 2006-12-23 | 1 | -13/+11 |
