| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Implementations of mpo_check_vnode_deleteextattr() and | rwatson | 2003-08-21 | 1 | -0/+38 |
| * | Remove a suser() check in the mac_biba policy: the MAC Framework itself | rwatson | 2003-07-31 | 1 | -19/+0 |
| * | Redesign the externalization APIs from the MAC Framework to | rwatson | 2003-06-23 | 1 | -26/+14 |
| * | Use mac_biba_label_copy() and mac_mls_label_copy() to implement the | rwatson | 2003-06-02 | 1 | -0/+1 |
| * | Rewrite Biba and MLS label externalization code to use sbufs instead | rwatson | 2003-05-31 | 1 | -52/+49 |
| * | Use strsep() in preference to manual string parsing for Biba and MLS | rwatson | 2003-05-29 | 1 | -49/+41 |
| * | Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Test | rwatson | 2003-04-15 | 1 | -1/+1 |
| * | Trim "trustedbsd_" from the front of the policy module "short names"; | rwatson | 2003-03-27 | 1 | -1/+1 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | rwatson | 2003-03-26 | 1 | -1/+1 |
| * | Expand scope of the Biba policy to include some of the new entry | rwatson | 2003-03-25 | 1 | -0/+40 |
| * | Back out M_* changes, per decision of the TRB. | imp | 2003-02-19 | 1 | -1/+1 |
| * | Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba | rwatson | 2003-02-04 | 1 | -0/+39 |
| * | Place more stringent checks on process credential relabeling for the Biba | rwatson | 2003-02-04 | 1 | -6/+10 |
| * | Rename the variable 'grade' to 'type' in interface parsing and | rwatson | 2003-02-04 | 1 | -7/+7 |
| * | Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. | alfred | 2003-01-21 | 1 | -1/+1 |
| * | Default policies to on: if you load them or compile them into your | rwatson | 2002-12-10 | 1 | -1/+1 |
| * | Remove dm_root entry from struct devfs_mount. It's never set, and is | rwatson | 2002-12-09 | 1 | -8/+10 |
| * | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | rwatson | 2002-11-12 | 1 | -12/+0 |
| * | Update MAC modules for changes in arguments for exec MAC policy | rwatson | 2002-11-08 | 1 | -2/+16 |
| * | Update policy modules for changes in arguments associated with support | rwatson | 2002-11-05 | 1 | -1/+1 |
| * | Since neither the Biba policy nor the MLS policy make use of | rwatson | 2002-11-05 | 1 | -23/+0 |
| * | Implement mpo_check_system_acct and mpo_check_system_settime() for Biba: | rwatson | 2002-11-04 | 1 | -0/+46 |
| * | Correct use of mac_biba_subject_privileged() in swapon() code. | rwatson | 2002-11-04 | 1 | -2/+4 |
| * | License and wording updates: NAI has authorized the removal of clause | rwatson | 2002-11-04 | 2 | -14/+8 |
| * | Fix some warnings on 64 bit architectures. The vn_extattr_get() | mux | 2002-11-02 | 1 | -2/+1 |
| * | Move to C99 sparse structure initialization for the mac_policy_ops | rwatson | 2002-10-30 | 1 | -264/+133 |
| * | Various minor type, prototype tweaks -- clean up cruft due to lack of | rwatson | 2002-10-30 | 1 | -4/+4 |
| * | While 'mode_t' seemed like a good idea for the access mode argument for | rwatson | 2002-10-30 | 1 | -1/+1 |
| * | Try again to fix the KASSERT. | rwatson | 2002-10-30 | 1 | -1/+1 |
| * | Fix a KASSERT bug that showed up only in the LINT build, not the | rwatson | 2002-10-30 | 1 | -1/+1 |
| * | Implement Biba policy entry points for mac_check_system_swapon() | rwatson | 2002-10-29 | 1 | -0/+59 |
| * | Require Biba privilege to relabel a network interface. | rwatson | 2002-10-29 | 1 | -0/+7 |
| * | Remove all reference to 'struct oldmac', since it's no longer required | rwatson | 2002-10-28 | 1 | -0/+27 |
| * | Add a return type for mac_biba_high_single(), apparently lost in an | rwatson | 2002-10-28 | 1 | -0/+1 |
| * | Rename mac_biba_subject_equal_ok() to mac_biba_subject_privileged() | rwatson | 2002-10-28 | 1 | -6/+6 |
| * | Zero the trusted_interface buffer before starting parsing. | rwatson | 2002-10-28 | 1 | -0/+6 |
| * | Slightly change the semantics of vnode labels for MAC: rather than | rwatson | 2002-10-26 | 1 | -61/+120 |
| * | Style fix: space between 'switch' and '('. | rwatson | 2002-10-22 | 1 | -1/+1 |
| * | Don't enforce MAC Biba policy for socket visibility if Biba is not | rwatson | 2002-10-22 | 1 | -0/+3 |
| * | Adapt MAC policies for the new user API changes; teach policies how | rwatson | 2002-10-22 | 2 | -16/+290 |
| * | Introduce mac_biba_copy() and mac_mls_copy(), which conditionally | rwatson | 2002-10-21 | 1 | -9/+25 |
| * | Add compartment support to Biba and MLS policies. The logic of the | rwatson | 2002-10-21 | 2 | -16/+68 |
| * | Demote sockets to single-label objects rather than maintaining a | rwatson | 2002-10-21 | 1 | -16/+0 |
| * | Synchonize variable spelling with the MAC tree: we shortened some of | rwatson | 2002-10-21 | 1 | -9/+8 |
| * | Since the Biba and MLS access checks are identical to the open checks, | rwatson | 2002-10-21 | 1 | -12/+1 |
| * | Cleanup of relabel authorization checks -- almost identical logic, | rwatson | 2002-10-21 | 1 | -56/+205 |
| * | Add a twiddle to create PTY's with a biba/equal or mls/equal label | rwatson | 2002-10-21 | 1 | -0/+9 |
| * | Trim accidentally introduced trailing whitespace. | rwatson | 2002-10-06 | 1 | -1/+1 |
| * | Sync from MAC tree: break out the single mmap entry point into | rwatson | 2002-10-06 | 1 | -22/+32 |
| * | Modify label allocation semantics for sockets: pass in soalloc's malloc | rwatson | 2002-10-05 | 1 | -2/+2 |
