summaryrefslogtreecommitdiffstats
path: root/sys/security/mac_biba
Commit message (Expand)AuthorAgeFilesLines
* Implementations of mpo_check_vnode_deleteextattr() andrwatson2003-08-211-0/+38
* Remove a suser() check in the mac_biba policy: the MAC Framework itselfrwatson2003-07-311-19/+0
* Redesign the externalization APIs from the MAC Framework torwatson2003-06-231-26/+14
* Use mac_biba_label_copy() and mac_mls_label_copy() to implement therwatson2003-06-021-0/+1
* Rewrite Biba and MLS label externalization code to use sbufs insteadrwatson2003-05-311-52/+49
* Use strsep() in preference to manual string parsing for Biba and MLSrwatson2003-05-291-49/+41
* Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Testrwatson2003-04-151-1/+1
* Trim "trustedbsd_" from the front of the policy module "short names";rwatson2003-03-271-1/+1
* Modify the mac_init_ipq() MAC Framework entry point to accept anrwatson2003-03-261-1/+1
* Expand scope of the Biba policy to include some of the new entryrwatson2003-03-251-0/+40
* Back out M_* changes, per decision of the TRB.imp2003-02-191-1/+1
* Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Bibarwatson2003-02-041-0/+39
* Place more stringent checks on process credential relabeling for the Bibarwatson2003-02-041-6/+10
* Rename the variable 'grade' to 'type' in interface parsing andrwatson2003-02-041-7/+7
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-211-1/+1
* Default policies to on: if you load them or compile them into yourrwatson2002-12-101-1/+1
* Remove dm_root entry from struct devfs_mount. It's never set, and isrwatson2002-12-091-8/+10
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sincerwatson2002-11-121-12/+0
* Update MAC modules for changes in arguments for exec MAC policyrwatson2002-11-081-2/+16
* Update policy modules for changes in arguments associated with supportrwatson2002-11-051-1/+1
* Since neither the Biba policy nor the MLS policy make use ofrwatson2002-11-051-23/+0
* Implement mpo_check_system_acct and mpo_check_system_settime() for Biba:rwatson2002-11-041-0/+46
* Correct use of mac_biba_subject_privileged() in swapon() code.rwatson2002-11-041-2/+4
* License and wording updates: NAI has authorized the removal of clauserwatson2002-11-042-14/+8
* Fix some warnings on 64 bit architectures. The vn_extattr_get()mux2002-11-021-2/+1
* Move to C99 sparse structure initialization for the mac_policy_opsrwatson2002-10-301-264/+133
* Various minor type, prototype tweaks -- clean up cruft due to lack ofrwatson2002-10-301-4/+4
* While 'mode_t' seemed like a good idea for the access mode argument forrwatson2002-10-301-1/+1
* Try again to fix the KASSERT.rwatson2002-10-301-1/+1
* Fix a KASSERT bug that showed up only in the LINT build, not therwatson2002-10-301-1/+1
* Implement Biba policy entry points for mac_check_system_swapon()rwatson2002-10-291-0/+59
* Require Biba privilege to relabel a network interface.rwatson2002-10-291-0/+7
* Remove all reference to 'struct oldmac', since it's no longer requiredrwatson2002-10-281-0/+27
* Add a return type for mac_biba_high_single(), apparently lost in anrwatson2002-10-281-0/+1
* Rename mac_biba_subject_equal_ok() to mac_biba_subject_privileged()rwatson2002-10-281-6/+6
* Zero the trusted_interface buffer before starting parsing.rwatson2002-10-281-0/+6
* Slightly change the semantics of vnode labels for MAC: rather thanrwatson2002-10-261-61/+120
* Style fix: space between 'switch' and '('.rwatson2002-10-221-1/+1
* Don't enforce MAC Biba policy for socket visibility if Biba is notrwatson2002-10-221-0/+3
* Adapt MAC policies for the new user API changes; teach policies howrwatson2002-10-222-16/+290
* Introduce mac_biba_copy() and mac_mls_copy(), which conditionallyrwatson2002-10-211-9/+25
* Add compartment support to Biba and MLS policies. The logic of therwatson2002-10-212-16/+68
* Demote sockets to single-label objects rather than maintaining arwatson2002-10-211-16/+0
* Synchonize variable spelling with the MAC tree: we shortened some ofrwatson2002-10-211-9/+8
* Since the Biba and MLS access checks are identical to the open checks,rwatson2002-10-211-12/+1
* Cleanup of relabel authorization checks -- almost identical logic,rwatson2002-10-211-56/+205
* Add a twiddle to create PTY's with a biba/equal or mls/equal labelrwatson2002-10-211-0/+9
* Trim accidentally introduced trailing whitespace.rwatson2002-10-061-1/+1
* Sync from MAC tree: break out the single mmap entry point intorwatson2002-10-061-22/+32
* Modify label allocation semantics for sockets: pass in soalloc's mallocrwatson2002-10-051-2/+2
OpenPOWER on IntegriCloud