| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Continue work to optimize performance of "options MAC" when no MAC policy | rwatson | 2009-06-03 | 1 | -0/+79 |
| * | Remove 'uio' argument from MAC Framework and MAC policy entry points for | rwatson | 2009-03-08 | 1 | -4/+2 |
| * | Improve the consistency of MAC Framework and MAC policy entry point | rwatson | 2009-03-08 | 1 | -100/+103 |
| * | Rather than having MAC policies explicitly declare what object types | rwatson | 2009-01-10 | 1 | -22/+1 |
| * | Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather than | rwatson | 2009-01-10 | 1 | -0/+1 |
| * | Commit part of accmode_t changes that I missed in previous commit. | trasz | 2008-10-28 | 1 | -1/+1 |
| * | Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary | trasz | 2008-10-28 | 1 | -1/+1 |
| * | Rename three MAC entry points from _proc_ to _cred_ to reflect the fact | rwatson | 2008-10-28 | 1 | -21/+21 |
| * | Improve alphabetical sort order of stub entry points. | rwatson | 2008-10-28 | 1 | -32/+32 |
| * | Implement MAC policy support for IPv6 fragment reassembly queues, | rwatson | 2008-10-26 | 1 | -1/+37 |
| * | Add a mac_inpcb_check_visible implementation to all MAC policies | bz | 2008-10-17 | 1 | -0/+9 |
| * | Introduce two related changes to the TrustedBSD MAC Framework: | rwatson | 2008-08-23 | 1 | -1/+22 |
| * | Rework the lifetime management of the kernel implementation of POSIX | jhb | 2008-06-27 | 1 | -6/+15 |
| * | Remove the posixsem_check_destroy() MAC check. It is semantically identical | jhb | 2008-06-23 | 1 | -9/+0 |
| * | The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the | rwatson | 2008-06-13 | 1 | -8/+8 |
| * | Add a new file descriptor type for IPC shared memory objects and use it to | jhb | 2008-01-08 | 1 | -0/+56 |
| * | Resort TrustedBSD MAC Framework policy entry point implementations and | rwatson | 2007-10-29 | 1 | -478/+491 |
| * | Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Framework | rwatson | 2007-10-28 | 1 | -9/+0 |
| * | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 1 | -12/+22 |
| * | Move towards more explicit support for various network protocol stacks | rwatson | 2007-10-28 | 1 | -8/+32 |
| * | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 1 | -4/+4 |
| * | Normalize TCP syncache-related MAC Framework entry points to match most | rwatson | 2007-10-25 | 1 | -6/+6 |
| * | Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and move | rwatson | 2007-10-25 | 1 | -7/+7 |
| * | Consistently name functions for mac_<policy> as <policy>_whatever rather | rwatson | 2007-10-25 | 1 | -2/+2 |
| * | Further MAC Framework cleanup: normalize some local variable names and | rwatson | 2007-10-25 | 1 | -5/+5 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 1 | -369/+369 |
| * | Canonicalize naming of local variables for struct ksem and associated | rwatson | 2007-10-21 | 1 | -14/+14 |
| * | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | rwatson | 2007-09-10 | 1 | -10/+10 |
| * | Add a new MAC framework and policy entry point, | rwatson | 2007-06-26 | 1 | -0/+8 |
| * | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | rwatson | 2007-04-23 | 1 | -4/+4 |
| * | Apply variable name normalization to MAC policies: adopt global conventions | rwatson | 2007-04-23 | 1 | -141/+138 |
| * | In the MAC Framework implementation, file systems have two per-mountpoint | rwatson | 2007-04-22 | 1 | -7/+5 |
| * | Remove MAC Framework access control check entry points made redundant with | rwatson | 2007-04-22 | 1 | -32/+0 |
| * | Allow MAC policy modules to control access to audit configuration system | rwatson | 2007-04-21 | 1 | -4/+45 |
| * | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | rwatson | 2007-02-06 | 1 | -1/+0 |
| * | Teach the stub policy about some of the more recent entry points that have | csjp | 2007-01-01 | 1 | -0/+57 |
| * | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | rwatson | 2006-12-22 | 1 | -1/+1 |
| * | Merge posix4/* into normal kernel hierarchy. | trhodes | 2006-11-11 | 1 | -2/+1 |
| * | Add stub entry point implementations of mpo_priv_check and mpo_priv_grant to | rwatson | 2006-11-06 | 1 | -0/+16 |
| * | Add #include <sys/sx.h>, devfs is going to require this shortly. | phk | 2005-09-19 | 1 | -0/+1 |
| * | Remove mac_create_root_mount() and mpo_create_root_mount(), which | rwatson | 2005-09-19 | 1 | -8/+0 |
| * | Remove duplicate initialization of mpo_create_stub pointer. | rwatson | 2005-07-21 | 1 | -1/+0 |
| * | When devfs cloning takes place, provide access to the credential of the | rwatson | 2005-07-14 | 1 | -2/+2 |
| * | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | rwatson | 2005-07-05 | 1 | -9/+0 |
| * | Add MAC Framework and MAC policy entry point mac_check_socket_create(), | rwatson | 2005-07-05 | 1 | -0/+13 |
| * | Gratuitous renaming of four System V Semaphore MAC Framework entry | rwatson | 2005-06-07 | 1 | -6/+6 |
| * | Introduce MAC Framework and MAC Policy entry points to label and control | rwatson | 2005-05-04 | 1 | -0/+66 |
| * | Introduce p_canwait() and MAC Framework and MAC Policy entry points | rwatson | 2005-04-18 | 1 | -0/+8 |
| * | Introduce three additional MAC Framework and MAC Policy entry points to | rwatson | 2005-04-16 | 1 | -0/+44 |
| * | Introduce new MAC Framework and MAC Policy entry points to control the use | rwatson | 2005-04-16 | 1 | -0/+75 |
