| Commit message (Expand) | Author | Age | Files | Lines |
* | Allow mac_bsdextended(4) to log failed attempts to syslog's AUTHPRIV | trhodes | 2004-08-21 | 1 | -5/+19 |
* | Give the mac_bsdextended(4) policy the ability to match and apply on a first | trhodes | 2004-08-21 | 1 | -2/+21 |
* | * Add a "how" argument to uma_zone constructors and initialization functions | green | 2004-08-02 | 1 | -3/+4 |
* | Introduce SLOT_SET macro and use it in place of casts as lvalues. | kan | 2004-07-28 | 3 | -12/+16 |
* | Allow an effective uid of root to bypass mac_bsdextended rules; the MAC | rwatson | 2004-07-23 | 1 | -0/+3 |
* | Rename Biba and MLS _single label elements to _effective, which more | rwatson | 2004-07-16 | 4 | -353/+353 |
* | Do a pass over all modules in the kernel and make them return EOPNOTSUPP | phk | 2004-07-15 | 2 | -0/+2 |
* | Update for the KDB framework: | marcel | 2004-07-10 | 1 | -28/+29 |
* | Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on | rwatson | 2004-06-24 | 7 | -0/+53 |
* | Do the dreaded s/dev_t/struct cdev */ | phk | 2004-06-16 | 8 | -8/+9 |
* | Socket MAC labels so_label and so_peerlabel are now protected by | rwatson | 2004-06-13 | 1 | -8/+57 |
* | add missing #include <sys/module.h> | phk | 2004-05-30 | 2 | -0/+2 |
* | Remove dead code. (This loop counted the number of rules, but the count | cperciva | 2004-05-15 | 1 | -7/+0 |
* | Improve consistency of include file guards in src/sys/sys by terminating | rwatson | 2004-05-10 | 2 | -6/+6 |
* | If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tag | rwatson | 2004-05-03 | 1 | -1/+4 |
* | Add /* !MAC */ to final #endif. | rwatson | 2004-05-03 | 2 | -2/+2 |
* | Update copyright. | rwatson | 2004-05-03 | 1 | -1/+1 |
* | When performing label assertions on an mbuf header label in mac_test, | rwatson | 2004-05-03 | 1 | -2/+3 |
* | Bump copyright date for NETA to 2004. | rwatson | 2004-05-03 | 2 | -2/+2 |
* | Add MAC_STATIC, a kernel option that disables internal MAC Framework | rwatson | 2004-05-03 | 2 | -0/+50 |
* | Define BPFD_LOCK_ASSERT() to assert the BPF descriptor lock. | rwatson | 2004-02-29 | 1 | -0/+4 |
* | Forward declare struct proc, struct sockaddr, and struct thread, which | rwatson | 2004-02-26 | 1 | -0/+3 |
* | Forward declare struct bpf_d, struct ifnet, struct image_params, and | rwatson | 2004-02-26 | 1 | -1/+5 |
* | Move inet and inet6 related MAC Framework entry points from mac_net.c | rwatson | 2004-02-26 | 4 | -655/+807 |
* | Reimplement sysctls handling by MAC framework. | pjd | 2004-02-22 | 7 | -36/+26 |
* | Update my personal copyrights and NETA copyrights in the kernel | rwatson | 2004-02-22 | 23 | -46/+46 |
* | Commit file missed in last pass: MAC api uses 'struct pipepair', not | rwatson | 2004-02-01 | 1 | -8/+8 |
* | Coalesce pipe allocations and frees. Previously, the pipe code | rwatson | 2004-02-01 | 9 | -93/+95 |
* | Pay attention to mac_portacl_enabled. | rwatson | 2004-01-20 | 1 | -1/+5 |
* | Switch TCP over to using the inpcb label when responding in timed | rwatson | 2003-12-17 | 8 | -0/+72 |
* | interpvnodelabel can be NULL in mac_test_execve_transition(). This | rwatson | 2003-12-10 | 1 | -1/+3 |
* | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | rwatson | 2003-12-06 | 9 | -68/+26 |
* | Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9). | rwatson | 2003-11-18 | 2 | -12/+12 |
* | Introduce a MAC label reference in 'struct inpcb', which caches | rwatson | 2003-11-18 | 9 | -1/+362 |
* | Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as they | rwatson | 2003-11-17 | 3 | -21/+0 |
* | Implement sockets support for __mac_get_fd() and __mac_set_fd() | rwatson | 2003-11-16 | 10 | -7/+92 |
* | Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET and | rwatson | 2003-11-16 | 1 | -0/+1 |
* | Abstract the label checking and setting logic from | rwatson | 2003-11-16 | 2 | -13/+24 |
* | Implement mpo_copy_{mbuf,pipe,vnode}_label() entry points for | rwatson | 2003-11-16 | 2 | -0/+36 |
* | Reduce gratuitous redundancy and length in function names: | rwatson | 2003-11-16 | 2 | -8/+6 |
* | Whitespace fix. | rwatson | 2003-11-16 | 1 | -2/+2 |
* | mac_relabel_cred() accepts two cred labels, not a cred label and a | rwatson | 2003-11-15 | 1 | -1/+1 |
* | Reduced prequisites by only using MALLOC_DECLARE() if it is defined. | bde | 2003-11-14 | 1 | -0/+4 |
* | Mark __mac_get_pid() as MPSAFE in the comment, as it runs without | rwatson | 2003-11-12 | 2 | -74/+30 |
* | Remove extraneous & to fix compile. | jhb | 2003-11-12 | 1 | -1/+1 |
* | Remove extraneous fullpath variable, which broke lint build. This | rwatson | 2003-11-12 | 2 | -2/+2 |
* | GC prototype for mac_destroy_vnode_label(), missed in last commit. | rwatson | 2003-11-12 | 1 | -1/+0 |
* | Modify the MAC Framework so that instead of embedding a (struct label) | rwatson | 2003-11-12 | 15 | -644/+864 |
* | Whitespace sync to MAC branch, expand comment at the head of the file. | rwatson | 2003-11-11 | 2 | -6/+18 |
* | Replace a '-' with a ')'. Update copyright. | rwatson | 2003-11-08 | 1 | -2/+2 |