| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Add stub entries for new MAC framework entry points: | rwatson | 2003-08-21 | 1 | -0/+32 |
* | Generally rename things to represent the fact that this is now the | rwatson | 2003-08-21 | 1 | -269/+271 |
* | mac_none is now the null policy, not a stub policy, so remove the | rwatson | 2003-08-21 | 1 | -1031/+5 |
* | Implementations of mpo_check_vnode_deleteextattr() and | rwatson | 2003-08-21 | 3 | -1/+112 |
* | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | rwatson | 2003-08-21 | 10 | -0/+265 |
* | Remove about 40 lines of #ifdef/#endif by using new macros | rwatson | 2003-08-20 | 8 | -560/+248 |
* | Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF. | rwatson | 2003-08-01 | 8 | -224/+144 |
* | Improve consistency with the Biba policy -- rename | rwatson | 2003-07-31 | 1 | -23/+10 |
* | Remove a suser() check in the mac_biba policy: the MAC Framework itself | rwatson | 2003-07-31 | 1 | -19/+0 |
* | Remove trailing whitespace. | rwatson | 2003-07-05 | 4 | -6/+6 |
* | Redesign the externalization APIs from the MAC Framework to | rwatson | 2003-06-23 | 16 | -495/+271 |
* | Forward declare a boatload of structures referenced in the MAC | rwatson | 2003-06-22 | 1 | -0/+12 |
* | Add a f_vnode field to struct file. | phk | 2003-06-22 | 8 | -16/+16 |
* | Use __FBSDID(). | obrien | 2003-06-11 | 8 | -32/+32 |
* | Also implement mpo_copy_mbuf_label() for mac_lomac, or labels may | rwatson | 2003-06-02 | 1 | -0/+1 |
* | Use mac_biba_label_copy() and mac_mls_label_copy() to implement the | rwatson | 2003-06-02 | 2 | -0/+2 |
* | Remove double return() | phk | 2003-05-31 | 1 | -2/+0 |
* | Rewrite Biba and MLS label externalization code to use sbufs instead | rwatson | 2003-05-31 | 2 | -105/+99 |
* | Make sure all character pointers are properly initialized; this was | rwatson | 2003-05-30 | 1 | -4/+5 |
* | Use strsep() in preference to manual string parsing for Biba and MLS | rwatson | 2003-05-29 | 2 | -97/+80 |
* | Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables and | rwatson | 2003-05-08 | 8 | -64/+64 |
* | Clean up locking for the MAC Framework: | rwatson | 2003-05-07 | 8 | -624/+1440 |
* | - Acquire the vm_object's lock when performing vm_object_page_clean(). | alc | 2003-04-24 | 8 | -0/+16 |
* | Rather than check for M_PKTHDR and conditionally perform access control, | rwatson | 2003-04-18 | 1 | -4/+3 |
* | Update NAI copyright to 2003, missed in earlier commits and merges. | rwatson | 2003-04-18 | 10 | -10/+10 |
* | Modify mac_test policy to invoke WITNESS_WARN() when a potentially | rwatson | 2003-04-15 | 1 | -0/+29 |
* | Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Test | rwatson | 2003-04-15 | 4 | -4/+4 |
* | mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, so | rwatson | 2003-04-15 | 8 | -24/+16 |
* | Move MAC label storage for mbufs into m_tags from the m_pkthdr structure, | rwatson | 2003-04-14 | 10 | -138/+952 |
* | Abstract access to the mbuf header label behind a new function, | rwatson | 2003-04-14 | 8 | -200/+640 |
* | Introduce an M_ASSERTPKTHDR() macro which performs the very common task | des | 2003-04-08 | 8 | -16/+16 |
* | Trim "trustedbsd_" from the front of the policy module "short names"; | rwatson | 2003-03-27 | 9 | -10/+10 |
* | Modify the mac_init_ipq() MAC Framework entry point to accept an | rwatson | 2003-03-26 | 16 | -41/+106 |
* | Update the MAC regression test policy to include stubs and testing | rwatson | 2003-03-25 | 1 | -0/+155 |
* | Update MAC "none" stub policy to include stubs for the following | rwatson | 2003-03-25 | 2 | -0/+196 |
* | Expand scope of the MLS policy to include a new entry point available | rwatson | 2003-03-25 | 1 | -0/+20 |
* | Expand scope of the BSD extended "file system firewall" policy to | rwatson | 2003-03-25 | 1 | -0/+17 |
* | Expand scope of the Biba policy to include some of the new entry | rwatson | 2003-03-25 | 1 | -0/+40 |
* | Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE, | rwatson | 2003-03-23 | 1 | -8/+0 |
* | Including <sys/stdint.h> is (almost?) universally only to be able to use | phk | 2003-03-18 | 1 | -1/+0 |
* | Do not depend on namespace pollution, explicitly include sys/sx.h | kan | 2003-03-12 | 1 | -0/+1 |
* | Instrument sysarch() MD privileged I/O access interfaces with a MAC | rwatson | 2003-03-06 | 10 | -0/+98 |
* | Provide a mac_check_system_swapoff() entry point, which permits MAC | rwatson | 2003-03-05 | 10 | -0/+115 |
* | Replace calls to WITNESS_SLEEP() and witness_list() with equivalent calls | jhb | 2003-03-04 | 8 | -16/+24 |
* | A cute yet small MAC policy that provides a simple ACL mechanism to | rwatson | 2003-03-02 | 1 | -0/+485 |
* | Back out M_* changes, per decision of the TRB. | imp | 2003-02-19 | 12 | -277/+277 |
* | Move a bunch of flags from the KSE to the thread. | julian | 2003-02-17 | 1 | -1/+1 |
* | Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba | rwatson | 2003-02-04 | 1 | -0/+39 |
* | Place more stringent checks on process credential relabeling for the Biba | rwatson | 2003-02-04 | 2 | -12/+21 |
* | Rename the variable 'grade' to 'type' in interface parsing and | rwatson | 2003-02-04 | 2 | -12/+12 |