| Commit message (Expand) | Author | Age | Files | Lines |
* | Reimplement sysctls handling by MAC framework. | pjd | 2004-02-22 | 1 | -2/+2 |
* | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 1 | -2/+2 |
* | Coalesce pipe allocations and frees. Previously, the pipe code | rwatson | 2004-02-01 | 1 | -8/+8 |
* | Switch TCP over to using the inpcb label when responding in timed | rwatson | 2003-12-17 | 1 | -0/+10 |
* | interpvnodelabel can be NULL in mac_test_execve_transition(). This | rwatson | 2003-12-10 | 1 | -1/+3 |
* | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | rwatson | 2003-12-06 | 1 | -9/+9 |
* | Introduce a MAC label reference in 'struct inpcb', which caches | rwatson | 2003-11-18 | 1 | -0/+71 |
* | Implement sockets support for __mac_get_fd() and __mac_set_fd() | rwatson | 2003-11-16 | 1 | -0/+9 |
* | Implement mpo_copy_{mbuf,pipe,vnode}_label() entry points for | rwatson | 2003-11-16 | 1 | -0/+27 |
* | mac_relabel_cred() accepts two cred labels, not a cred label and a | rwatson | 2003-11-15 | 1 | -1/+1 |
* | Remove extraneous & to fix compile. | jhb | 2003-11-12 | 1 | -1/+1 |
* | Modify the MAC Framework so that instead of embedding a (struct label) | rwatson | 2003-11-12 | 1 | -91/+91 |
* | Correct typo introduced during manual merge: hook up the reflect_tcp | rwatson | 2003-08-22 | 1 | -1/+1 |
* | Retrofit of mac_test regression and consistency test module for MAC | rwatson | 2003-08-21 | 1 | -1/+379 |
* | Remove trailing whitespace. | rwatson | 2003-07-05 | 1 | -1/+1 |
* | Redesign the externalization APIs from the MAC Framework to | rwatson | 2003-06-23 | 1 | -1/+1 |
* | Modify mac_test policy to invoke WITNESS_WARN() when a potentially | rwatson | 2003-04-15 | 1 | -0/+29 |
* | Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Test | rwatson | 2003-04-15 | 1 | -1/+1 |
* | Trim "trustedbsd_" from the front of the policy module "short names"; | rwatson | 2003-03-27 | 1 | -1/+1 |
* | Modify the mac_init_ipq() MAC Framework entry point to accept an | rwatson | 2003-03-26 | 1 | -2/+3 |
* | Update the MAC regression test policy to include stubs and testing | rwatson | 2003-03-25 | 1 | -0/+155 |
* | Default policies to on: if you load them or compile them into your | rwatson | 2002-12-10 | 1 | -1/+1 |
* | Remove dm_root entry from struct devfs_mount. It's never set, and is | rwatson | 2002-12-09 | 1 | -8/+10 |
* | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | rwatson | 2002-11-12 | 1 | -8/+0 |
* | Update MAC modules for changes in arguments for exec MAC policy | rwatson | 2002-11-08 | 1 | -3/+5 |
* | Update policy modules for changes in arguments associated with support | rwatson | 2002-11-05 | 1 | -3/+5 |
* | License and wording updates: NAI has authorized the removal of clause | rwatson | 2002-11-04 | 1 | -7/+4 |
* | Move to C99 sparse structure initialization for the mac_policy_ops | rwatson | 2002-10-30 | 1 | -266/+135 |
* | Various minor type, prototype tweaks -- clean up cruft due to lack of | rwatson | 2002-10-30 | 1 | -2/+2 |
* | While 'mode_t' seemed like a good idea for the access mode argument for | rwatson | 2002-10-30 | 1 | -2/+2 |
* | Slightly change the semantics of vnode labels for MAC: rather than | rwatson | 2002-10-26 | 1 | -40/+43 |
* | Adapt MAC policies for the new user API changes; teach policies how | rwatson | 2002-10-22 | 1 | -39/+37 |
* | Sync from MAC tree: break out the single mmap entry point into | rwatson | 2002-10-06 | 1 | -2/+22 |
* | Modify label allocation semantics for sockets: pass in soalloc's malloc | rwatson | 2002-10-05 | 1 | -4/+6 |
* | Implement mac_create_devfs_symlink() for policies that interact with | rwatson | 2002-10-05 | 1 | -0/+9 |
* | Merge implementation of mpo_check_vnode_link() for various appropriate | rwatson | 2002-10-05 | 1 | -0/+11 |
* | Begin another merge from the TrustedBSD MAC branch: | rwatson | 2002-10-05 | 1 | -84/+140 |
* | Provide stub mpo_syscall() implementations for mac_none and mac_test. | rwatson | 2002-08-20 | 1 | -0/+9 |
* | Pass active_cred and file_cred into the MAC framework explicitly | rwatson | 2002-08-19 | 1 | -8/+8 |
* | Break out mac_check_pipe_op() into component check entry points: | rwatson | 2002-08-19 | 1 | -4/+34 |
* | Break out mac_check_vnode_op() into three seperate checks: | rwatson | 2002-08-19 | 1 | -0/+30 |
* | Rename mac_check_socket_receive() to mac_check_socket_deliver() so that | rwatson | 2002-08-15 | 1 | -6/+6 |
* | Introduce support for Mandatory Access Control and extensible | rwatson | 2002-07-31 | 1 | -0/+1311 |