summaryrefslogtreecommitdiffstats
path: root/sys/security/mac_biba/mac_biba.c
Commit message (Expand)AuthorAgeFilesLines
...
* Move to C99 sparse structure initialization for the mac_policy_opsrwatson2002-10-301-264/+133
* Various minor type, prototype tweaks -- clean up cruft due to lack ofrwatson2002-10-301-4/+4
* While 'mode_t' seemed like a good idea for the access mode argument forrwatson2002-10-301-1/+1
* Try again to fix the KASSERT.rwatson2002-10-301-1/+1
* Fix a KASSERT bug that showed up only in the LINT build, not therwatson2002-10-301-1/+1
* Implement Biba policy entry points for mac_check_system_swapon()rwatson2002-10-291-0/+59
* Require Biba privilege to relabel a network interface.rwatson2002-10-291-0/+7
* Add a return type for mac_biba_high_single(), apparently lost in anrwatson2002-10-281-0/+1
* Rename mac_biba_subject_equal_ok() to mac_biba_subject_privileged()rwatson2002-10-281-6/+6
* Zero the trusted_interface buffer before starting parsing.rwatson2002-10-281-0/+6
* Slightly change the semantics of vnode labels for MAC: rather thanrwatson2002-10-261-61/+120
* Style fix: space between 'switch' and '('.rwatson2002-10-221-1/+1
* Don't enforce MAC Biba policy for socket visibility if Biba is notrwatson2002-10-221-0/+3
* Adapt MAC policies for the new user API changes; teach policies howrwatson2002-10-221-16/+288
* Introduce mac_biba_copy() and mac_mls_copy(), which conditionallyrwatson2002-10-211-9/+25
* Add compartment support to Biba and MLS policies. The logic of therwatson2002-10-211-16/+58
* Demote sockets to single-label objects rather than maintaining arwatson2002-10-211-16/+0
* Synchonize variable spelling with the MAC tree: we shortened some ofrwatson2002-10-211-9/+8
* Since the Biba and MLS access checks are identical to the open checks,rwatson2002-10-211-12/+1
* Cleanup of relabel authorization checks -- almost identical logic,rwatson2002-10-211-56/+205
* Add a twiddle to create PTY's with a biba/equal or mls/equal labelrwatson2002-10-211-0/+9
* Trim accidentally introduced trailing whitespace.rwatson2002-10-061-1/+1
* Sync from MAC tree: break out the single mmap entry point intorwatson2002-10-061-22/+32
* Modify label allocation semantics for sockets: pass in soalloc's mallocrwatson2002-10-051-2/+2
* Implement mac_create_devfs_symlink() for policies that interact withrwatson2002-10-051-0/+14
* Merge implementation of mpo_check_vnode_link() for various appropriaterwatson2002-10-051-0/+26
* Begin another merge from the TrustedBSD MAC branch:rwatson2002-10-051-205/+58
* Remove another missed trailing space.rwatson2002-09-211-1/+1
* Trim trailing whitespace from the ends of lines.rwatson2002-09-211-13/+13
* Continue cleanup and sync of mac_biba and mac_mls policies to therwatson2002-09-211-13/+0
* Remove mac_biba_high_single() check for interface renaming: we nowrwatson2002-09-211-12/+0
* As INVARIANTS isn't supported for code that loads only as a kernelrwatson2002-09-211-2/+2
* Include <sys/malloc.h> instead of depending on namespace pollution 2bde2002-09-101-0/+1
* Re-insert TUNABLE() export of MAC Biba and MAC MLS module 'enabled'rwatson2002-09-051-0/+1
* Pass active_cred and file_cred into the MAC framework explicitlyrwatson2002-08-191-12/+12
* Break out mac_check_pipe_op() into component check entry points:rwatson2002-08-191-18/+66
* Break out mac_check_vnode_op() into three seperate checks:rwatson2002-08-191-32/+60
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatrwatson2002-08-151-3/+3
* Introduce support for Mandatory Access Control and extensiblerwatson2002-07-311-0/+2226
OpenPOWER on IntegriCloud