summaryrefslogtreecommitdiffstats
path: root/sys/security/mac_biba/mac_biba.c
Commit message (Expand)AuthorAgeFilesLines
* Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.kib2013-08-211-0/+38
* Remove direct access to si_name.ed2012-02-101-7/+9
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.ed2011-11-071-1/+1
* Correct several issues in the integration of POSIX shared memory objectsrwatson2011-09-021-1/+203
* Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-stylerwatson2010-03-021-0/+1
* Implement global and per-uid accounting of the anonymous memory. Addkib2009-06-231-0/+2
* Chase the removal of PRIV_TTY_PRISON in the mac(9) modules.ed2009-06-201-1/+0
* Continue work to optimize performance of "options MAC" when no MAC policyrwatson2009-06-031-9/+38
* By default, label all network interfaces as biba/equal on attach. Thisrwatson2009-06-031-1/+1
* Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhattrasz2009-03-291-2/+2
* Remove 'uio' argument from MAC Framework and MAC policy entry points forrwatson2009-03-081-4/+2
* Rather than having MAC policies explicitly declare what object typesrwatson2009-01-101-22/+1
* Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather thanrwatson2009-01-101-0/+1
* Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessarytrasz2008-10-281-3/+3
* Rename three MAC entry points from _proc_ to _cred_ to reflect the factrwatson2008-10-281-38/+38
* Implement MAC policy support for IPv6 fragment reassembly queues,rwatson2008-10-261-1/+53
* Add a mac_inpcb_check_visible implementation to all MAC policiesbz2008-10-171-0/+19
* Introduce two related changes to the TrustedBSD MAC Framework:rwatson2008-08-231-1/+21
* Minor style tweaks.rwatson2008-08-021-11/+8
* Rework the lifetime management of the kernel implementation of POSIXjhb2008-06-271-6/+25
* Remove the posixsem_check_destroy() MAC check. It is semantically identicaljhb2008-06-231-1/+0
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is therwatson2008-06-131-10/+10
* Resort TrustedBSD MAC Framework policy entry point implementations andrwatson2007-10-291-1120/+1128
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Frameworkrwatson2007-10-281-14/+0
* Continue to move from generic network entry points in the TrustedBSD MACrwatson2007-10-281-13/+26
* Move towards more explicit support for various network protocol stacksrwatson2007-10-281-12/+48
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asrwatson2007-10-261-6/+6
* Normalize TCP syncache-related MAC Framework entry points to match mostrwatson2007-10-251-6/+6
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moverwatson2007-10-251-12/+12
* Consistently name functions for mac_<policy> as <policy>_whatever ratherrwatson2007-10-251-736/+726
* Merge first in a series of TrustedBSD MAC Framework KPI changesrwatson2007-10-241-303/+308
* Canonicalize naming of local variables for struct ksem and associatedrwatson2007-10-211-9/+9
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryrwatson2007-09-101-25/+25
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,rwatson2007-04-231-4/+4
* Apply variable name normalization to MAC policies: adopt global conventionsrwatson2007-04-231-213/+209
* In the MAC Framework implementation, file systems have two per-mountpointrwatson2007-04-221-12/+8
* Remove MAC Framework access control check entry points made redundant withrwatson2007-04-221-39/+179
* Allow MAC policy modules to control access to audit configuration systemrwatson2007-04-211-0/+46
* More unnecessary include reduction.rwatson2007-02-231-2/+0
* In mac_biba_check_system_swapoff(), don't extract the object label sincerwatson2007-02-101-2/+1
* Introduce accessor functions mac_label_get() and mac_label_set() to replacerwatson2007-02-061-3/+3
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:rwatson2007-02-061-1/+0
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACrwatson2006-12-221-2/+1
* Teach the MAC policies which utilize mbuf labeling the new syncachecsjp2006-12-131-0/+25
* Merge posix4/* into normal kernel hierarchy.trhodes2006-11-111-2/+1
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointcsjp2006-09-121-0/+12
* Make mpo_associate_nfsd_label() return void, not int, to matchrwatson2006-08-061-2/+1
* Implement mpo_associate_nfsd_label entry point for the BIBA security policy,csjp2006-07-101-0/+13
* Introduce a new sysctl variable:csjp2005-12-311-1/+6
* Add #include <sys/sx.h>, devfs is going to require this shortly.phk2005-09-191-0/+1
OpenPOWER on IntegriCloud