summaryrefslogtreecommitdiffstats
path: root/sys/security/mac_mls
Commit message (Expand)AuthorAgeFilesLines
* Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Testrwatson2003-04-151-1/+1
* Trim "trustedbsd_" from the front of the policy module "short names";rwatson2003-03-271-1/+1
* Modify the mac_init_ipq() MAC Framework entry point to accept anrwatson2003-03-261-1/+1
* Expand scope of the MLS policy to include a new entry point availablerwatson2003-03-251-0/+20
* Back out M_* changes, per decision of the TRB.imp2003-02-191-1/+1
* Place more stringent checks on process credential relabeling for the Bibarwatson2003-02-041-6/+11
* Rename the variable 'grade' to 'type' in interface parsing andrwatson2003-02-041-5/+5
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-211-1/+1
* Default policies to on: if you load them or compile them into yourrwatson2002-12-101-1/+1
* Remove dm_root entry from struct devfs_mount. It's never set, and isrwatson2002-12-091-8/+10
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sincerwatson2002-11-121-12/+0
* Update MAC modules for changes in arguments for exec MAC policyrwatson2002-11-081-2/+16
* Update policy modules for changes in arguments associated with supportrwatson2002-11-051-1/+1
* Since neither the Biba policy nor the MLS policy make use ofrwatson2002-11-051-23/+0
* License and wording updates: NAI has authorized the removal of clauserwatson2002-11-042-14/+8
* Fix some warnings on 64 bit architectures. The vn_extattr_get()mux2002-11-021-2/+1
* Move to C99 sparse structure initialization for the mac_policy_opsrwatson2002-10-301-260/+131
* While 'mode_t' seemed like a good idea for the access mode argument forrwatson2002-10-301-1/+1
* Correct a typo in a previously commented include entry that was maderwatson2002-10-281-1/+1
* Remove all reference to 'struct oldmac', since it's no longer requiredrwatson2002-10-281-0/+32
* Slightly change the semantics of vnode labels for MAC: rather thanrwatson2002-10-261-61/+98
* Style fix: space between 'switch' and '('.rwatson2002-10-221-1/+1
* s/mls/biba/ in a copy+paste error for a printf.rwatson2002-10-221-1/+1
* Adapt MAC policies for the new user API changes; teach policies howrwatson2002-10-222-17/+292
* Introduce mac_biba_copy() and mac_mls_copy(), which conditionallyrwatson2002-10-211-8/+24
* Add compartment support to Biba and MLS policies. The logic of therwatson2002-10-212-16/+68
* More in the way of minor consistency improvements: trim 'mac_mls_'rwatson2002-10-211-8/+7
* Demote sockets to single-label objects rather than maintaining arwatson2002-10-211-16/+0
* White space nit the crept in during merge.rwatson2002-10-211-1/+1
* Since the Biba and MLS access checks are identical to the open checks,rwatson2002-10-211-12/+1
* Cleanup of relabel authorization checks -- almost identical logic,rwatson2002-10-211-60/+204
* Add a twiddle to create PTY's with a biba/equal or mls/equal labelrwatson2002-10-211-0/+9
* Sync from MAC tree: break out the single mmap entry point intorwatson2002-10-061-22/+32
* Modify label allocation semantics for sockets: pass in soalloc's mallocrwatson2002-10-051-2/+2
* Implement mac_create_devfs_symlink() for policies that interact withrwatson2002-10-051-0/+14
* Merge implementation of mpo_check_vnode_link() for various appropriaterwatson2002-10-051-0/+25
* Begin another merge from the TrustedBSD MAC branch:rwatson2002-10-051-205/+58
* Trim trailing whitespace from the ends of lines.rwatson2002-09-211-10/+10
* Continue cleanup and sync of mac_biba and mac_mls policies to therwatson2002-09-211-13/+0
* As INVARIANTS isn't supported for code that loads only as a kernelrwatson2002-09-211-2/+2
* Include <sys/malloc.h> instead of depending on namespace pollution 2bde2002-09-101-0/+1
* Re-insert TUNABLE() export of MAC Biba and MAC MLS module 'enabled'rwatson2002-09-051-0/+1
* Pass active_cred and file_cred into the MAC framework explicitlyrwatson2002-08-191-12/+12
* Break out mac_check_pipe_op() into component check entry points:rwatson2002-08-191-18/+66
* Break out mac_check_vnode_op() into three seperate checks:rwatson2002-08-191-32/+60
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatrwatson2002-08-151-3/+3
* Introduce support for Mandatory Access Control and extensiblerwatson2002-07-312-0/+2238
OpenPOWER on IntegriCloud