index
:
FreeBSD-src
RELENG_2_2
RELENG_2_3
RELENG_2_3_0
RELENG_2_3_1
RELENG_2_3_2
RELENG_2_3_3
RELENG_2_3_4
RELENG_2_4
RELENG_2_4_4
RELENG_2_4_OLD
devel
devel-11
releng/10.1
releng/10.3
releng/11.0
releng/11.1
stable/10
stable/11
Raptor Engineering's fork of pfsense FreeBSD src with pfSense changes
Raptor Engineering, LLC
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
sys
/
security
/
mac_biba
Commit message (
Expand
)
Author
Age
Files
Lines
*
Remove dm_root entry from struct devfs_mount. It's never set, and is
rwatson
2002-12-09
1
-8
/
+10
*
Garbage collect mac_create_devfs_vnode() -- it hasn't been used since
rwatson
2002-11-12
1
-12
/
+0
*
Update MAC modules for changes in arguments for exec MAC policy
rwatson
2002-11-08
1
-2
/
+16
*
Update policy modules for changes in arguments associated with support
rwatson
2002-11-05
1
-1
/
+1
*
Since neither the Biba policy nor the MLS policy make use of
rwatson
2002-11-05
1
-23
/
+0
*
Implement mpo_check_system_acct and mpo_check_system_settime() for Biba:
rwatson
2002-11-04
1
-0
/
+46
*
Correct use of mac_biba_subject_privileged() in swapon() code.
rwatson
2002-11-04
1
-2
/
+4
*
License and wording updates: NAI has authorized the removal of clause
rwatson
2002-11-04
2
-14
/
+8
*
Fix some warnings on 64 bit architectures. The vn_extattr_get()
mux
2002-11-02
1
-2
/
+1
*
Move to C99 sparse structure initialization for the mac_policy_ops
rwatson
2002-10-30
1
-264
/
+133
*
Various minor type, prototype tweaks -- clean up cruft due to lack of
rwatson
2002-10-30
1
-4
/
+4
*
While 'mode_t' seemed like a good idea for the access mode argument for
rwatson
2002-10-30
1
-1
/
+1
*
Try again to fix the KASSERT.
rwatson
2002-10-30
1
-1
/
+1
*
Fix a KASSERT bug that showed up only in the LINT build, not the
rwatson
2002-10-30
1
-1
/
+1
*
Implement Biba policy entry points for mac_check_system_swapon()
rwatson
2002-10-29
1
-0
/
+59
*
Require Biba privilege to relabel a network interface.
rwatson
2002-10-29
1
-0
/
+7
*
Remove all reference to 'struct oldmac', since it's no longer required
rwatson
2002-10-28
1
-0
/
+27
*
Add a return type for mac_biba_high_single(), apparently lost in an
rwatson
2002-10-28
1
-0
/
+1
*
Rename mac_biba_subject_equal_ok() to mac_biba_subject_privileged()
rwatson
2002-10-28
1
-6
/
+6
*
Zero the trusted_interface buffer before starting parsing.
rwatson
2002-10-28
1
-0
/
+6
*
Slightly change the semantics of vnode labels for MAC: rather than
rwatson
2002-10-26
1
-61
/
+120
*
Style fix: space between 'switch' and '('.
rwatson
2002-10-22
1
-1
/
+1
*
Don't enforce MAC Biba policy for socket visibility if Biba is not
rwatson
2002-10-22
1
-0
/
+3
*
Adapt MAC policies for the new user API changes; teach policies how
rwatson
2002-10-22
2
-16
/
+290
*
Introduce mac_biba_copy() and mac_mls_copy(), which conditionally
rwatson
2002-10-21
1
-9
/
+25
*
Add compartment support to Biba and MLS policies. The logic of the
rwatson
2002-10-21
2
-16
/
+68
*
Demote sockets to single-label objects rather than maintaining a
rwatson
2002-10-21
1
-16
/
+0
*
Synchonize variable spelling with the MAC tree: we shortened some of
rwatson
2002-10-21
1
-9
/
+8
*
Since the Biba and MLS access checks are identical to the open checks,
rwatson
2002-10-21
1
-12
/
+1
*
Cleanup of relabel authorization checks -- almost identical logic,
rwatson
2002-10-21
1
-56
/
+205
*
Add a twiddle to create PTY's with a biba/equal or mls/equal label
rwatson
2002-10-21
1
-0
/
+9
*
Trim accidentally introduced trailing whitespace.
rwatson
2002-10-06
1
-1
/
+1
*
Sync from MAC tree: break out the single mmap entry point into
rwatson
2002-10-06
1
-22
/
+32
*
Modify label allocation semantics for sockets: pass in soalloc's malloc
rwatson
2002-10-05
1
-2
/
+2
*
Implement mac_create_devfs_symlink() for policies that interact with
rwatson
2002-10-05
1
-0
/
+14
*
Merge implementation of mpo_check_vnode_link() for various appropriate
rwatson
2002-10-05
1
-0
/
+26
*
Begin another merge from the TrustedBSD MAC branch:
rwatson
2002-10-05
1
-205
/
+58
*
Remove another missed trailing space.
rwatson
2002-09-21
1
-1
/
+1
*
Trim trailing whitespace from the ends of lines.
rwatson
2002-09-21
1
-13
/
+13
*
Continue cleanup and sync of mac_biba and mac_mls policies to the
rwatson
2002-09-21
1
-13
/
+0
*
Remove mac_biba_high_single() check for interface renaming: we now
rwatson
2002-09-21
1
-12
/
+0
*
As INVARIANTS isn't supported for code that loads only as a kernel
rwatson
2002-09-21
1
-2
/
+2
*
Include <sys/malloc.h> instead of depending on namespace pollution 2
bde
2002-09-10
1
-0
/
+1
*
Re-insert TUNABLE() export of MAC Biba and MAC MLS module 'enabled'
rwatson
2002-09-05
1
-0
/
+1
*
Pass active_cred and file_cred into the MAC framework explicitly
rwatson
2002-08-19
1
-12
/
+12
*
Break out mac_check_pipe_op() into component check entry points:
rwatson
2002-08-19
1
-18
/
+66
*
Break out mac_check_vnode_op() into three seperate checks:
rwatson
2002-08-19
1
-32
/
+60
*
Rename mac_check_socket_receive() to mac_check_socket_deliver() so that
rwatson
2002-08-15
1
-3
/
+3
*
Introduce support for Mandatory Access Control and extensible
rwatson
2002-07-31
2
-0
/
+2287