| Commit message (Expand) | Author | Age | Files | Lines |
* | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 1 | -0/+12 |
* | Make mpo_associate_nfsd_label() return void, not int, to match | rwatson | 2006-08-06 | 1 | -2/+1 |
* | Implement mpo_associate_nfsd_label entry point for the BIBA security policy, | csjp | 2006-07-10 | 1 | -0/+13 |
* | Introduce a new sysctl variable: | csjp | 2005-12-31 | 1 | -1/+6 |
* | Add #include <sys/sx.h>, devfs is going to require this shortly. | phk | 2005-09-19 | 1 | -0/+1 |
* | Remove mac_create_root_mount() and mpo_create_root_mount(), which | rwatson | 2005-09-19 | 1 | -14/+0 |
* | When devfs cloning takes place, provide access to the credential of the | rwatson | 2005-07-14 | 1 | -2/+2 |
* | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | rwatson | 2005-07-05 | 1 | -22/+0 |
* | Gratuitous renaming of four System V Semaphore MAC Framework entry | rwatson | 2005-06-07 | 1 | -6/+6 |
* | Introduce MAC Framework and MAC Policy entry points to label and control | rwatson | 2005-05-04 | 1 | -0/+59 |
* | Move MAC check_vnode_mmap entry point out from being exclusive to | csjp | 2005-04-14 | 1 | -2/+3 |
* | Remove policy references to mpo_check_vnode_mprotect(), which is | rwatson | 2005-01-26 | 1 | -1/+0 |
* | Implement Biba integrity protection for System V IPC objects (message | rwatson | 2005-01-22 | 1 | -5/+394 |
* | Minor white space synchronization and line wrapping. | rwatson | 2004-10-22 | 1 | -1/+2 |
* | Introduce SLOT_SET macro and use it in place of casts as lvalues. | kan | 2004-07-28 | 1 | -3/+4 |
* | Rename Biba and MLS _single label elements to _effective, which more | rwatson | 2004-07-16 | 2 | -180/+180 |
* | Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on | rwatson | 2004-06-24 | 1 | -0/+1 |
* | Do the dreaded s/dev_t/struct cdev */ | phk | 2004-06-16 | 1 | -1/+1 |
* | Reimplement sysctls handling by MAC framework. | pjd | 2004-02-22 | 1 | -11/+5 |
* | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 2 | -4/+4 |
* | Coalesce pipe allocations and frees. Previously, the pipe code | rwatson | 2004-02-01 | 1 | -8/+8 |
* | Switch TCP over to using the inpcb label when responding in timed | rwatson | 2003-12-17 | 1 | -0/+13 |
* | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | rwatson | 2003-12-06 | 1 | -13/+1 |
* | Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9). | rwatson | 2003-11-18 | 1 | -6/+6 |
* | Introduce a MAC label reference in 'struct inpcb', which caches | rwatson | 2003-11-18 | 1 | -0/+45 |
* | Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as they | rwatson | 2003-11-17 | 1 | -7/+0 |
* | Implement sockets support for __mac_get_fd() and __mac_set_fd() | rwatson | 2003-11-16 | 1 | -0/+1 |
* | Remove extraneous fullpath variable, which broke lint build. This | rwatson | 2003-11-12 | 1 | -1/+1 |
* | Modify the MAC Framework so that instead of embedding a (struct label) | rwatson | 2003-11-12 | 1 | -68/+68 |
* | Replace the if_name and if_unit members of struct ifnet with new members | brooks | 2003-10-31 | 1 | -4/+2 |
* | Implementations of mpo_check_vnode_deleteextattr() and | rwatson | 2003-08-21 | 1 | -0/+38 |
* | Remove a suser() check in the mac_biba policy: the MAC Framework itself | rwatson | 2003-07-31 | 1 | -19/+0 |
* | Redesign the externalization APIs from the MAC Framework to | rwatson | 2003-06-23 | 1 | -26/+14 |
* | Use mac_biba_label_copy() and mac_mls_label_copy() to implement the | rwatson | 2003-06-02 | 1 | -0/+1 |
* | Rewrite Biba and MLS label externalization code to use sbufs instead | rwatson | 2003-05-31 | 1 | -52/+49 |
* | Use strsep() in preference to manual string parsing for Biba and MLS | rwatson | 2003-05-29 | 1 | -49/+41 |
* | Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Test | rwatson | 2003-04-15 | 1 | -1/+1 |
* | Trim "trustedbsd_" from the front of the policy module "short names"; | rwatson | 2003-03-27 | 1 | -1/+1 |
* | Modify the mac_init_ipq() MAC Framework entry point to accept an | rwatson | 2003-03-26 | 1 | -1/+1 |
* | Expand scope of the Biba policy to include some of the new entry | rwatson | 2003-03-25 | 1 | -0/+40 |
* | Back out M_* changes, per decision of the TRB. | imp | 2003-02-19 | 1 | -1/+1 |
* | Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba | rwatson | 2003-02-04 | 1 | -0/+39 |
* | Place more stringent checks on process credential relabeling for the Biba | rwatson | 2003-02-04 | 1 | -6/+10 |
* | Rename the variable 'grade' to 'type' in interface parsing and | rwatson | 2003-02-04 | 1 | -7/+7 |
* | Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. | alfred | 2003-01-21 | 1 | -1/+1 |
* | Default policies to on: if you load them or compile them into your | rwatson | 2002-12-10 | 1 | -1/+1 |
* | Remove dm_root entry from struct devfs_mount. It's never set, and is | rwatson | 2002-12-09 | 1 | -8/+10 |
* | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | rwatson | 2002-11-12 | 1 | -12/+0 |
* | Update MAC modules for changes in arguments for exec MAC policy | rwatson | 2002-11-08 | 1 | -2/+16 |
* | Update policy modules for changes in arguments associated with support | rwatson | 2002-11-05 | 1 | -1/+1 |