| Commit message (Expand) | Author | Age | Files | Lines |
* | Pull in r267961 and r267973 again. Fix for issues reported will follow. | hselasky | 2014-06-28 | 1 | -2/+1 |
* | Revert r267961, r267973: | gjb | 2014-06-27 | 1 | -1/+2 |
* | Extend the meaning of the CTLFLAG_TUN flag to automatically check if | hselasky | 2014-06-27 | 1 | -2/+1 |
* | Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs. | ed | 2011-11-07 | 1 | -2/+2 |
* | Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs. | ed | 2011-11-07 | 1 | -1/+2 |
* | Add hierarchical jails. A jail may further virtualize its environment | jamie | 2009-05-27 | 1 | -2/+2 |
* | Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhat | trasz | 2009-03-29 | 1 | -2/+2 |
* | Mark the bsdextended rules sysctl as being mpsafe. | csjp | 2009-03-09 | 1 | -2/+2 |
* | Remove 'uio' argument from MAC Framework and MAC policy entry points for | rwatson | 2009-03-08 | 2 | -8/+4 |
* | Rather than having MAC policies explicitly declare what object types | rwatson | 2009-01-10 | 1 | -1/+1 |
* | MFp4: | bz | 2008-11-29 | 1 | -0/+1 |
* | The V* flags passed using an accmode_t to the access() and open() | rwatson | 2008-10-30 | 3 | -12/+26 |
* | Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary | trasz | 2008-10-28 | 2 | -6/+14 |
* | When the mac_bsdextended policy is unloaded, free rule memory. | rwatson | 2008-10-27 | 1 | -0/+5 |
* | Add TrustedBSD credit to new ugidfw_internal.h file. | rwatson | 2008-10-27 | 1 | -0/+2 |
* | Break mac_bsdextended.c out into multiple .c files, with the base access | rwatson | 2008-10-27 | 4 | -1451/+149 |
* | Copy mac_bsdextended.c to two object-specific files as a prototype for how | rwatson | 2008-10-27 | 2 | -0/+1536 |
* | Fix a number of style issues in the MALLOC / FREE commit. I've tried to | des | 2008-10-23 | 1 | -1/+2 |
* | Retire the MALLOC and FREE macros. They are an abomination unto style(9). | des | 2008-10-23 | 1 | -3/+2 |
* | Remove the suser(9) interface from the kernel. It has been replaced from | attilio | 2008-09-17 | 1 | -8/+24 |
* | Remove VSVTX, VSGID and VSUID. This should be a no-op, | trasz | 2008-09-10 | 1 | -2/+3 |
* | Decontextualize the couplet VOP_GETATTR / VOP_SETATTR as the passed thread | attilio | 2008-08-28 | 1 | -1/+1 |
* | Introduce two related changes to the TrustedBSD MAC Framework: | rwatson | 2008-08-23 | 1 | -1/+1 |
* | In mac_bsdextended's auditctl and acct policy access control checks, | rwatson | 2008-07-31 | 1 | -11/+8 |
* | Resort TrustedBSD MAC Framework policy entry point implementations and | rwatson | 2007-10-29 | 1 | -0/+4 |
* | Consistently name functions for mac_<policy> as <policy>_whatever rather | rwatson | 2007-10-25 | 1 | -133/+131 |
* | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -58/+62 |
* | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | rwatson | 2007-09-10 | 1 | -14/+14 |
* | In preparation for 7.0 privilege cleanup, clean up style: | rwatson | 2007-07-05 | 2 | -87/+32 |
* | Include priv.h to pick up suser(9) definitions, missed in an earlier | rwatson | 2007-06-13 | 1 | -0/+1 |
* | Apply variable name normalization to MAC policies: adopt global conventions | rwatson | 2007-04-23 | 1 | -32/+35 |
* | Allow MAC policy modules to control access to audit configuration system | rwatson | 2007-04-21 | 1 | -0/+27 |
* | More unnecessary include reduction. | rwatson | 2007-02-23 | 1 | -17/+2 |
* | Move mapping of MBI_APPEND to MBI_WRITE from inside the rule loop in | rwatson | 2007-02-20 | 1 | -9/+8 |
* | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | rwatson | 2007-02-06 | 1 | -1/+0 |
* | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | rwatson | 2006-12-22 | 1 | -2/+1 |
* | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -0/+3 |
* | Add some new options to mac_bsdestended. We can now match on: | dwmalone | 2006-04-23 | 2 | -35/+210 |
* | Create a mac_bsdextended_check_vp function that takes a cred, a | dwmalone | 2006-03-04 | 1 | -280/+43 |
* | Fix potential overrun of static stack allocated array which stores | csjp | 2006-01-15 | 1 | -1/+1 |
* | If a "hole" opens up in the ruleset (i.e.: remove 5), do not return | trhodes | 2005-07-28 | 1 | -5/+2 |
* | Add locking support to mac_bsdextended: | trhodes | 2005-04-22 | 1 | -37/+67 |
* | Minor white space synchronization and line wrapping. | rwatson | 2004-10-22 | 1 | -0/+1 |
* | Bump copyright dates for NETA on these files. | rwatson | 2004-10-21 | 2 | -2/+2 |
* | Modify mac_bsdextended policy so that it defines its own vnode access | rwatson | 2004-10-21 | 2 | -33/+74 |
* | Remove the debugging tunable, it was not being used. | trhodes | 2004-09-10 | 1 | -10/+1 |
* | Allow mac_bsdextended(4) to log failed attempts to syslog's AUTHPRIV | trhodes | 2004-08-21 | 1 | -5/+19 |
* | Give the mac_bsdextended(4) policy the ability to match and apply on a first | trhodes | 2004-08-21 | 1 | -2/+21 |
* | Allow an effective uid of root to bypass mac_bsdextended rules; the MAC | rwatson | 2004-07-23 | 1 | -0/+3 |
* | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 2 | -4/+4 |