| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Add hierarchical jails. A jail may further virtualize its environment | jamie | 2009-05-27 | 1 | -2/+2 |
| * | Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhat | trasz | 2009-03-29 | 1 | -2/+2 |
| * | Mark the bsdextended rules sysctl as being mpsafe. | csjp | 2009-03-09 | 1 | -2/+2 |
| * | Remove 'uio' argument from MAC Framework and MAC policy entry points for | rwatson | 2009-03-08 | 2 | -8/+4 |
| * | Rather than having MAC policies explicitly declare what object types | rwatson | 2009-01-10 | 1 | -1/+1 |
| * | MFp4: | bz | 2008-11-29 | 1 | -0/+1 |
| * | The V* flags passed using an accmode_t to the access() and open() | rwatson | 2008-10-30 | 3 | -12/+26 |
| * | Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary | trasz | 2008-10-28 | 2 | -6/+14 |
| * | When the mac_bsdextended policy is unloaded, free rule memory. | rwatson | 2008-10-27 | 1 | -0/+5 |
| * | Add TrustedBSD credit to new ugidfw_internal.h file. | rwatson | 2008-10-27 | 1 | -0/+2 |
| * | Break mac_bsdextended.c out into multiple .c files, with the base access | rwatson | 2008-10-27 | 4 | -1451/+149 |
| * | Copy mac_bsdextended.c to two object-specific files as a prototype for how | rwatson | 2008-10-27 | 2 | -0/+1536 |
| * | Fix a number of style issues in the MALLOC / FREE commit. I've tried to | des | 2008-10-23 | 1 | -1/+2 |
| * | Retire the MALLOC and FREE macros. They are an abomination unto style(9). | des | 2008-10-23 | 1 | -3/+2 |
| * | Remove the suser(9) interface from the kernel. It has been replaced from | attilio | 2008-09-17 | 1 | -8/+24 |
| * | Remove VSVTX, VSGID and VSUID. This should be a no-op, | trasz | 2008-09-10 | 1 | -2/+3 |
| * | Decontextualize the couplet VOP_GETATTR / VOP_SETATTR as the passed thread | attilio | 2008-08-28 | 1 | -1/+1 |
| * | Introduce two related changes to the TrustedBSD MAC Framework: | rwatson | 2008-08-23 | 1 | -1/+1 |
| * | In mac_bsdextended's auditctl and acct policy access control checks, | rwatson | 2008-07-31 | 1 | -11/+8 |
| * | Resort TrustedBSD MAC Framework policy entry point implementations and | rwatson | 2007-10-29 | 1 | -0/+4 |
| * | Consistently name functions for mac_<policy> as <policy>_whatever rather | rwatson | 2007-10-25 | 1 | -133/+131 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -58/+62 |
| * | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | rwatson | 2007-09-10 | 1 | -14/+14 |
| * | In preparation for 7.0 privilege cleanup, clean up style: | rwatson | 2007-07-05 | 2 | -87/+32 |
| * | Include priv.h to pick up suser(9) definitions, missed in an earlier | rwatson | 2007-06-13 | 1 | -0/+1 |
| * | Apply variable name normalization to MAC policies: adopt global conventions | rwatson | 2007-04-23 | 1 | -32/+35 |
| * | Allow MAC policy modules to control access to audit configuration system | rwatson | 2007-04-21 | 1 | -0/+27 |
| * | More unnecessary include reduction. | rwatson | 2007-02-23 | 1 | -17/+2 |
| * | Move mapping of MBI_APPEND to MBI_WRITE from inside the rule loop in | rwatson | 2007-02-20 | 1 | -9/+8 |
| * | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | rwatson | 2007-02-06 | 1 | -1/+0 |
| * | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | rwatson | 2006-12-22 | 1 | -2/+1 |
| * | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -0/+3 |
| * | Add some new options to mac_bsdestended. We can now match on: | dwmalone | 2006-04-23 | 2 | -35/+210 |
| * | Create a mac_bsdextended_check_vp function that takes a cred, a | dwmalone | 2006-03-04 | 1 | -280/+43 |
| * | Fix potential overrun of static stack allocated array which stores | csjp | 2006-01-15 | 1 | -1/+1 |
| * | If a "hole" opens up in the ruleset (i.e.: remove 5), do not return | trhodes | 2005-07-28 | 1 | -5/+2 |
| * | Add locking support to mac_bsdextended: | trhodes | 2005-04-22 | 1 | -37/+67 |
| * | Minor white space synchronization and line wrapping. | rwatson | 2004-10-22 | 1 | -0/+1 |
| * | Bump copyright dates for NETA on these files. | rwatson | 2004-10-21 | 2 | -2/+2 |
| * | Modify mac_bsdextended policy so that it defines its own vnode access | rwatson | 2004-10-21 | 2 | -33/+74 |
| * | Remove the debugging tunable, it was not being used. | trhodes | 2004-09-10 | 1 | -10/+1 |
| * | Allow mac_bsdextended(4) to log failed attempts to syslog's AUTHPRIV | trhodes | 2004-08-21 | 1 | -5/+19 |
| * | Give the mac_bsdextended(4) policy the ability to match and apply on a first | trhodes | 2004-08-21 | 1 | -2/+21 |
| * | Allow an effective uid of root to bypass mac_bsdextended rules; the MAC | rwatson | 2004-07-23 | 1 | -0/+3 |
| * | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 2 | -4/+4 |
| * | Implementations of mpo_check_vnode_deleteextattr() and | rwatson | 2003-08-21 | 1 | -1/+35 |
| * | Remove trailing whitespace. | rwatson | 2003-07-05 | 1 | -3/+3 |
| * | Trim "trustedbsd_" from the front of the policy module "short names"; | rwatson | 2003-03-27 | 1 | -1/+1 |
| * | Expand scope of the BSD extended "file system firewall" policy to | rwatson | 2003-03-25 | 1 | -0/+17 |
| * | Back out M_* changes, per decision of the TRB. | imp | 2003-02-19 | 1 | -1/+1 |
