summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Remove un-needed stack variable 'ops'.rwatson2002-09-188-24/+16
* Add a toggle to disable VM enforcement.rwatson2002-09-188-0/+56
* At the cost of seeming a little gauche, make use of more traditionalrwatson2002-09-188-32/+32
* Remove all use of vnode->v_tag, replacing with appropriate substitutes.njl2002-09-1410-34/+34
* Include <sys/malloc.h> instead of depending on namespace pollution 2bde2002-09-102-0/+2
* Add security.mac.mmap_revocation, a flag indicating whether werwatson2002-09-098-0/+64
* Minor code sync to MAC tree: push Giant locking up fromrwatson2002-09-098-16/+16
* Re-insert TUNABLE() export of MAC Biba and MAC MLS module 'enabled'rwatson2002-09-052-0/+2
* Include <sys/malloc.h> instead of depending on namespace pollution 2bde2002-09-058-48/+40
* Prefer NULL to 0 when passing a NULL pointer.rwatson2002-08-202-2/+2
* Provide stub mpo_syscall() implementations for mac_none and mac_test.rwatson2002-08-203-0/+27
* Close a race in process label changing opened due to dropping therwatson2002-08-198-56/+80
* Pass active_cred and file_cred into the MAC framework explicitlyrwatson2002-08-1916-156/+229
* Provide an implementation of mac_syscall() so that security modulesrwatson2002-08-1910-1/+318
* Break out mac_check_pipe_op() into component check entry points:rwatson2002-08-1915-97/+618
* Break out mac_check_vnode_op() into three seperate checks:rwatson2002-08-1915-148/+678
* Assert process locks in proces-related access control checks.rwatson2002-08-198-0/+48
* Add a missing vnode assertion for the exec() check.rwatson2002-08-198-0/+16
* Keep a copy of the credential used to mount filesystems around sophk2002-08-191-1/+1
* Wrap maintenance of varios nmac{objectname} counters in MAC_DEBUG so werwatson2002-08-168-0/+368
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatrwatson2002-08-158-32/+32
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatrwatson2002-08-158-80/+80
* Sync to trustedbsd_mac tree: default to sigsegv rather than copy-on-writerwatson2002-08-158-8/+8
* Define 'struct label' in _label.h rather than mac.h, which will permitrwatson2002-08-131-18/+2
* Declare a module service "kernel_mac_support" when MAC support isrwatson2002-08-129-0/+65
* - Replace v_flag with v_iflag and v_vflagjeff2002-08-0413-55/+72
* Improve ordering of MAC entry points in mac_policy_op structure.rwatson2002-08-021-6/+6
* Include file cleanup; mac.h and malloc.h at one point had orderingrwatson2002-08-018-0/+8
* Change macop_t to const, use macop_t in MAC policy entry point definitionrwatson2002-08-011-2/+2
* Introduce support for Mandatory Access Control and extensiblerwatson2002-07-3111-0/+9207
* Reduce the memory footprint of MAC in the base system by halvingrwatson2002-07-311-1/+1
* Begin committing support for Mandatory Access Control and extensiblerwatson2002-07-308-0/+24128
* Begin committing support for Mandatory Access Control and extensiblerwatson2002-07-302-0/+898
* Stubs for the TrustedBSD MAC system calls to permit TrustedBSD MACrwatson2002-07-308-0/+744
* Get rid of warnings, there's no need to do preprocessor concatination ofalfred2002-06-011-2/+2
* Back out my lats commit of locking down a socket, it conflicts with hsu's work.tanimura2002-05-312-57/+16
* Check for defined(__i386__) instead of just defined(i386) since the compileralfred2002-05-301-1/+1
* Lock down a socket, milestone 1.tanimura2002-05-202-16/+57
* Change p_can{debug,see,sched,signal}()'s first argument to be a threadjhb2002-05-191-4/+2
* More s/file system/filesystem/gtrhodes2002-05-162-4/+4
* Use the proc lock to protect p_ucred while we read a few items from it.jhb2002-04-111-3/+10
* Change the suser() API to take advantage of td_ucred as well as do ajhb2002-04-012-3/+3
* DBA update: pick the right DBA for various LOMAC copyrights.rwatson2002-03-1327-27/+27
* Simple p_ucred -> td_ucred changes to start using the per-thread ucredjhb2002-02-273-6/+5
* Introduce a version field to `struct xucred' in place of one of thedd2002-02-271-5/+1
* Part I: Update extended attribute API and ABI:rwatson2002-02-101-1/+2
* Replace a few more lines of code orphaned by MFREE going away.mjacob2002-02-071-2/+2
* Pre-KSE/M3 commit.julian2002-02-071-1/+1
* s/sonewconn3/sonewconn/ forgotten by the modifier.green2001-12-261-1/+1
* Split out NAI Labs license and BSD license to prevent the accidentalgreen2001-12-032-9/+80
OpenPOWER on IntegriCloud