| Commit message (Expand) | Author | Age | Files | Lines |
* | cred: add proc_set_cred helper | mjg | 2015-03-16 | 1 | -1/+1 |
* | Adjust printf format specifiers for dev_t and ino_t in kernel. | gleb | 2014-12-17 | 1 | -2/+2 |
* | Pull in r267961 and r267973 again. Fix for issues reported will follow. | hselasky | 2014-06-28 | 1 | -11/+5 |
* | Revert r267961, r267973: | gjb | 2014-06-27 | 1 | -5/+11 |
* | Extend the meaning of the CTLFLAG_TUN flag to automatically check if | hselasky | 2014-06-27 | 1 | -11/+5 |
* | Remove AppleTalk support. | glebius | 2014-03-14 | 1 | -14/+0 |
* | Remove IPX support. | glebius | 2014-03-14 | 1 | -2/+0 |
* | Remove direct access to si_name. | ed | 2012-02-10 | 1 | -8/+10 |
* | Use strchr() and strrchr(). | ed | 2012-01-02 | 1 | -5/+5 |
* | Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs. | ed | 2011-11-07 | 1 | -1/+1 |
* | Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs. | ed | 2011-11-07 | 1 | -1/+1 |
* | Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-style | rwatson | 2010-03-02 | 1 | -0/+1 |
* | Make mac_lomac(4) able to interpret NFSv4 access bits. | trasz | 2010-01-03 | 1 | -1/+1 |
* | Implement global and per-uid accounting of the anonymous memory. Add | kib | 2009-06-23 | 1 | -0/+2 |
* | Chase the removal of PRIV_TTY_PRISON in the mac(9) modules. | ed | 2009-06-20 | 1 | -1/+0 |
* | Continue work to optimize performance of "options MAC" when no MAC policy | rwatson | 2009-06-03 | 1 | -9/+37 |
* | Remove 'uio' argument from MAC Framework and MAC policy entry points for | rwatson | 2009-03-08 | 1 | -2/+1 |
* | Rather than having MAC policies explicitly declare what object types | rwatson | 2009-01-10 | 1 | -22/+1 |
* | Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather than | rwatson | 2009-01-10 | 1 | -0/+1 |
* | Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary | trasz | 2008-10-28 | 1 | -2/+2 |
* | Rename mac_cred_mmapped_drop_perms(), which revokes access to virtual | rwatson | 2008-10-28 | 1 | -4/+4 |
* | Rename three MAC entry points from _proc_ to _cred_ to reflect the fact | rwatson | 2008-10-28 | 1 | -24/+25 |
* | Implement MAC policy support for IPv6 fragment reassembly queues, | rwatson | 2008-10-26 | 1 | -1/+53 |
* | Retire the MALLOC and FREE macros. They are an abomination unto style(9). | des | 2008-10-23 | 1 | -1/+1 |
* | Add a mac_inpcb_check_visible implementation to all MAC policies | bz | 2008-10-17 | 1 | -0/+19 |
* | Decontextualize the couplet VOP_GETATTR / VOP_SETATTR as the passed thread | attilio | 2008-08-28 | 1 | -2/+1 |
* | Introduce two related changes to the TrustedBSD MAC Framework: | rwatson | 2008-08-23 | 1 | -1/+21 |
* | Minor style tweaks. | rwatson | 2008-08-02 | 1 | -4/+3 |
* | The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the | rwatson | 2008-06-13 | 1 | -11/+11 |
* | Resort TrustedBSD MAC Framework policy entry point implementations and | rwatson | 2007-10-29 | 1 | -861/+868 |
* | Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Framework | rwatson | 2007-10-28 | 1 | -14/+0 |
* | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 1 | -13/+26 |
* | Move towards more explicit support for various network protocol stacks | rwatson | 2007-10-28 | 1 | -14/+49 |
* | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 1 | -4/+4 |
* | Normalize TCP syncache-related MAC Framework entry points to match most | rwatson | 2007-10-25 | 1 | -6/+6 |
* | Consistently name functions for mac_<policy> as <policy>_whatever rather | rwatson | 2007-10-25 | 1 | -634/+614 |
* | Further MAC Framework cleanup: normalize some local variable names and | rwatson | 2007-10-25 | 1 | -4/+4 |
* | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -214/+219 |
* | - Move all of the PS_ flags into either p_flag or td_flags. | jeff | 2007-09-17 | 1 | -2/+1 |
* | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | rwatson | 2007-09-10 | 1 | -25/+25 |
* | Commit 14/14 of sched_lock decomposition. | jeff | 2007-06-05 | 1 | -2/+2 |
* | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | rwatson | 2007-04-23 | 1 | -4/+4 |
* | Apply variable name normalization to MAC policies: adopt global conventions | rwatson | 2007-04-23 | 1 | -202/+199 |
* | In the MAC Framework implementation, file systems have two per-mountpoint | rwatson | 2007-04-22 | 1 | -12/+8 |
* | Remove MAC Framework access control check entry points made redundant with | rwatson | 2007-04-22 | 1 | -17/+192 |
* | Allow MAC policy modules to control access to audit configuration system | rwatson | 2007-04-21 | 1 | -1/+63 |
* | Introduce accessor functions mac_label_get() and mac_label_set() to replace | rwatson | 2007-02-06 | 1 | -4/+4 |
* | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | rwatson | 2006-12-22 | 1 | -2/+1 |
* | Teach the MAC policies which utilize mbuf labeling the new syncache | csjp | 2006-12-13 | 1 | -0/+25 |
* | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 1 | -1/+4 |