summaryrefslogtreecommitdiffstats
path: root/sys/security/mac_mls
Commit message (Expand)AuthorAgeFilesLines
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,rwatson2007-04-231-4/+5
* Apply variable name normalization to MAC policies: adopt global conventionsrwatson2007-04-231-216/+213
* In the MAC Framework implementation, file systems have two per-mountpointrwatson2007-04-221-12/+8
* Allow MAC policy modules to control access to audit configuration systemrwatson2007-04-211-0/+40
* Introduce accessor functions mac_label_get() and mac_label_set() to replacerwatson2007-02-061-2/+2
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:rwatson2007-02-061-1/+0
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACrwatson2006-12-221-2/+1
* Teach the MAC policies which utilize mbuf labeling the new syncachecsjp2006-12-131-0/+25
* Merge posix4/* into normal kernel hierarchy.trhodes2006-11-111-2/+1
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointcsjp2006-09-121-0/+12
* Fix panic associated with file creation via RPC/NFS when the MLS policycsjp2006-08-261-0/+12
* Add #include <sys/sx.h>, devfs is going to require this shortly.phk2005-09-191-0/+1
* Remove mac_create_root_mount() and mpo_create_root_mount(), whichrwatson2005-09-191-14/+0
* When devfs cloning takes place, provide access to the credential of therwatson2005-07-141-2/+2
* Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which isrwatson2005-07-051-22/+0
* Gratuitous renaming of four System V Semaphore MAC Framework entryrwatson2005-06-071-6/+6
* Introduce MAC Framework and MAC Policy entry points to label and controlrwatson2005-05-041-0/+59
* Move MAC check_vnode_mmap entry point out from being exclusive tocsjp2005-04-141-2/+3
* Remove policy references to mpo_check_vnode_mprotect(), which isrwatson2005-01-261-1/+0
* Implement MLS confidentiality protection for System V IPC objectsrwatson2005-01-221-5/+391
* Introduce SLOT_SET macro and use it in place of casts as lvalues.kan2004-07-281-3/+4
* Rename Biba and MLS _single label elements to _effective, which morerwatson2004-07-162-173/+173
* Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels onrwatson2004-06-241-0/+1
* Do the dreaded s/dev_t/struct cdev */phk2004-06-161-1/+1
* Update my personal copyrights and NETA copyrights in the kernelrwatson2004-02-222-4/+4
* Coalesce pipe allocations and frees. Previously, the pipe coderwatson2004-02-011-8/+8
* Switch TCP over to using the inpcb label when responding in timedrwatson2003-12-171-0/+13
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),rwatson2003-12-061-13/+1
* Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9).rwatson2003-11-181-6/+6
* Introduce a MAC label reference in 'struct inpcb', which cachesrwatson2003-11-181-0/+45
* Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as theyrwatson2003-11-171-7/+0
* Implement sockets support for __mac_get_fd() and __mac_set_fd()rwatson2003-11-161-0/+1
* Remove extraneous fullpath variable, which broke lint build. Thisrwatson2003-11-121-1/+1
* Modify the MAC Framework so that instead of embedding a (struct label)rwatson2003-11-121-61/+61
* Implementations of mpo_check_vnode_deleteextattr() andrwatson2003-08-211-0/+39
* Improve consistency with the Biba policy -- renamerwatson2003-07-311-23/+10
* Redesign the externalization APIs from the MAC Framework torwatson2003-06-231-26/+14
* Use mac_biba_label_copy() and mac_mls_label_copy() to implement therwatson2003-06-021-0/+1
* Rewrite Biba and MLS label externalization code to use sbufs insteadrwatson2003-05-311-53/+50
* Make sure all character pointers are properly initialized; this wasrwatson2003-05-301-4/+5
* Use strsep() in preference to manual string parsing for Biba and MLSrwatson2003-05-291-48/+39
* Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Testrwatson2003-04-151-1/+1
* Trim "trustedbsd_" from the front of the policy module "short names";rwatson2003-03-271-1/+1
* Modify the mac_init_ipq() MAC Framework entry point to accept anrwatson2003-03-261-1/+1
* Expand scope of the MLS policy to include a new entry point availablerwatson2003-03-251-0/+20
* Back out M_* changes, per decision of the TRB.imp2003-02-191-1/+1
* Place more stringent checks on process credential relabeling for the Bibarwatson2003-02-041-6/+11
* Rename the variable 'grade' to 'type' in interface parsing andrwatson2003-02-041-5/+5
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-211-1/+1
* Default policies to on: if you load them or compile them into yourrwatson2002-12-101-1/+1
OpenPOWER on IntegriCloud