index
:
FreeBSD-src
RELENG_2_2
RELENG_2_3
RELENG_2_3_0
RELENG_2_3_1
RELENG_2_3_2
RELENG_2_3_3
RELENG_2_3_4
RELENG_2_4
RELENG_2_4_4
RELENG_2_4_OLD
devel
devel-11
releng/10.1
releng/10.3
releng/11.0
releng/11.1
stable/10
stable/11
Raptor Engineering's fork of pfsense FreeBSD src with pfSense changes
Raptor Engineering, LLC
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
sys
/
security
Commit message (
Expand
)
Author
Age
Files
Lines
*
Regularize the vop_stdlock'ing protocol across all the filesystems
mckusick
2002-10-14
1
-4
/
+4
*
Integrate mac_check_socket_send() and mac_check_socket_receive()
rwatson
2002-10-06
10
-0
/
+280
*
Trim accidentally introduced trailing whitespace.
rwatson
2002-10-06
1
-1
/
+1
*
Sync from MAC tree: break out the single mmap entry point into
rwatson
2002-10-06
15
-200
/
+647
*
Modify label allocation semantics for sockets: pass in soalloc's malloc
rwatson
2002-10-05
15
-120
/
+570
*
Implement mac_create_devfs_symlink() for policies that interact with
rwatson
2002-10-05
5
-0
/
+55
*
Integrate a devfs/MAC fix from the MAC tree: avoid a race condition during
rwatson
2002-10-05
10
-0
/
+110
*
Merge implementation of mpo_check_vnode_link() for various appropriate
rwatson
2002-10-05
6
-0
/
+113
*
Merge support for mac_check_vnode_link(), a MAC framework/policy entry
rwatson
2002-10-05
10
-0
/
+246
*
While the MAC API has supported the ability to handle M_NOWAIT passed
rwatson
2002-10-05
8
-24
/
+88
*
Rearrange object and label init/destroy functions to match the
rwatson
2002-10-05
8
-808
/
+808
*
Sync to MAC tree: use 'flag' instead of 'how' for mac_init_mbuf();
rwatson
2002-10-05
8
-24
/
+24
*
Another big diff, little functional change: move label internalization,
rwatson
2002-10-05
8
-520
/
+520
*
Move all object label init/destroy routines to the head of the
rwatson
2002-10-05
8
-2280
/
+2280
*
Synch from TrustedBSD MAC tree:
rwatson
2002-10-05
8
-24
/
+200
*
Cosmetic line wrap synchronization.
rwatson
2002-10-05
8
-16
/
+32
*
Push the debugging obect label counters into security.mac.debug.counters
rwatson
2002-10-05
8
-88
/
+128
*
Begin another merge from the TrustedBSD MAC branch:
rwatson
2002-10-05
14
-1422
/
+1107
*
Add a new MAC entry point, mac_thread_userret(td), which permits policy
rwatson
2002-10-02
10
-0
/
+92
*
Remember to include "opt_devfs.h" so we get any relevant changes
phk
2002-10-01
8
-0
/
+8
*
Improve locking of pipe mutexes in the context of MAC:
rwatson
2002-10-01
8
-0
/
+272
*
Push 'security.mac.debug_label_fallback' behind options MAC_DEBUG.
rwatson
2002-10-01
8
-80
/
+112
*
Add tunables for the existing sysctl twiddles for pipe and vm
rwatson
2002-09-30
8
-0
/
+16
*
- Use vrefcnt() instead of v_usecount.
jeff
2002-09-25
1
-4
/
+4
*
Remove another missed trailing space.
rwatson
2002-09-21
1
-1
/
+1
*
Trim trailing whitespace from the ends of lines.
rwatson
2002-09-21
2
-23
/
+23
*
Continue cleanup and sync of mac_biba and mac_mls policies to the
rwatson
2002-09-21
2
-26
/
+0
*
Remove mac_biba_high_single() check for interface renaming: we now
rwatson
2002-09-21
1
-12
/
+0
*
As INVARIANTS isn't supported for code that loads only as a kernel
rwatson
2002-09-21
2
-4
/
+4
*
Remove un-needed stack variable 'ops'.
rwatson
2002-09-18
8
-24
/
+16
*
Add a toggle to disable VM enforcement.
rwatson
2002-09-18
8
-0
/
+56
*
At the cost of seeming a little gauche, make use of more traditional
rwatson
2002-09-18
8
-32
/
+32
*
Remove all use of vnode->v_tag, replacing with appropriate substitutes.
njl
2002-09-14
10
-34
/
+34
*
Include <sys/malloc.h> instead of depending on namespace pollution 2
bde
2002-09-10
2
-0
/
+2
*
Add security.mac.mmap_revocation, a flag indicating whether we
rwatson
2002-09-09
8
-0
/
+64
*
Minor code sync to MAC tree: push Giant locking up from
rwatson
2002-09-09
8
-16
/
+16
*
Re-insert TUNABLE() export of MAC Biba and MAC MLS module 'enabled'
rwatson
2002-09-05
2
-0
/
+2
*
Include <sys/malloc.h> instead of depending on namespace pollution 2
bde
2002-09-05
8
-48
/
+40
*
Prefer NULL to 0 when passing a NULL pointer.
rwatson
2002-08-20
2
-2
/
+2
*
Provide stub mpo_syscall() implementations for mac_none and mac_test.
rwatson
2002-08-20
3
-0
/
+27
*
Close a race in process label changing opened due to dropping the
rwatson
2002-08-19
8
-56
/
+80
*
Pass active_cred and file_cred into the MAC framework explicitly
rwatson
2002-08-19
16
-156
/
+229
*
Provide an implementation of mac_syscall() so that security modules
rwatson
2002-08-19
10
-1
/
+318
*
Break out mac_check_pipe_op() into component check entry points:
rwatson
2002-08-19
15
-97
/
+618
*
Break out mac_check_vnode_op() into three seperate checks:
rwatson
2002-08-19
15
-148
/
+678
*
Assert process locks in proces-related access control checks.
rwatson
2002-08-19
8
-0
/
+48
*
Add a missing vnode assertion for the exec() check.
rwatson
2002-08-19
8
-0
/
+16
*
Keep a copy of the credential used to mount filesystems around so
phk
2002-08-19
1
-1
/
+1
*
Wrap maintenance of varios nmac{objectname} counters in MAC_DEBUG so we
rwatson
2002-08-16
8
-0
/
+368
*
Rename mac_check_socket_receive() to mac_check_socket_deliver() so that
rwatson
2002-08-15
8
-32
/
+32
[next]