summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Modify mac_test policy to invoke WITNESS_WARN() when a potentiallyrwatson2003-04-151-0/+29
* Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Testrwatson2003-04-154-4/+4
* mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, sorwatson2003-04-158-24/+16
* Move MAC label storage for mbufs into m_tags from the m_pkthdr structure,rwatson2003-04-1410-138/+952
* Abstract access to the mbuf header label behind a new function,rwatson2003-04-148-200/+640
* Introduce an M_ASSERTPKTHDR() macro which performs the very common taskdes2003-04-088-16/+16
* Trim "trustedbsd_" from the front of the policy module "short names";rwatson2003-03-279-10/+10
* Modify the mac_init_ipq() MAC Framework entry point to accept anrwatson2003-03-2616-41/+106
* Update the MAC regression test policy to include stubs and testingrwatson2003-03-251-0/+155
* Update MAC "none" stub policy to include stubs for the followingrwatson2003-03-252-0/+196
* Expand scope of the MLS policy to include a new entry point availablerwatson2003-03-251-0/+20
* Expand scope of the BSD extended "file system firewall" policy torwatson2003-03-251-0/+17
* Expand scope of the Biba policy to include some of the new entryrwatson2003-03-251-0/+40
* Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE,rwatson2003-03-231-8/+0
* Including <sys/stdint.h> is (almost?) universally only to be able to usephk2003-03-181-1/+0
* Do not depend on namespace pollution, explicitly include sys/sx.hkan2003-03-121-0/+1
* Instrument sysarch() MD privileged I/O access interfaces with a MACrwatson2003-03-0610-0/+98
* Provide a mac_check_system_swapoff() entry point, which permits MACrwatson2003-03-0510-0/+115
* Replace calls to WITNESS_SLEEP() and witness_list() with equivalent callsjhb2003-03-048-16/+24
* A cute yet small MAC policy that provides a simple ACL mechanism torwatson2003-03-021-0/+485
* Back out M_* changes, per decision of the TRB.imp2003-02-1912-277/+277
* Move a bunch of flags from the KSE to the thread.julian2003-02-171-1/+1
* Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Bibarwatson2003-02-041-0/+39
* Place more stringent checks on process credential relabeling for the Bibarwatson2003-02-042-12/+21
* Rename the variable 'grade' to 'type' in interface parsing andrwatson2003-02-042-12/+12
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-2112-277/+277
* Bow to the whining masses and change a union back into void *. Retaindillon2003-01-138-32/+32
* Change struct file f_data to un_data, a union of the correct structdillon2003-01-128-32/+32
* Fix warnings on 64bits architectures.mux2003-01-061-2/+1
* Map VAPPEND to VWRITE since the ugidfw rule syntax doesn't specificallyrwatson2002-12-281-0/+9
* SCARGS removal take II.alfred2002-12-148-40/+40
* Backout removal SCARGS, the code freeze is only "selectively" over.alfred2002-12-138-40/+40
* Remove SCARGS.alfred2002-12-138-40/+40
* Default policies to on: if you load them or compile them into yourrwatson2002-12-107-7/+7
* Remove dm_root entry from struct devfs_mount. It's never set, and isrwatson2002-12-0916-131/+164
* Remove a const that generates a warning: the const isn't strictlyrwatson2002-12-041-1/+1
* License tweak: remove clause 3 per permission of NAI.rwatson2002-12-032-6/+0
* Unhook the old LOMAC module, now replaced with mac_lomac.rwatson2002-12-0327-6787/+0
* Correct two warnings by staticizing a function and removing an unusedrwatson2002-11-261-11/+1
* Import an implementation of LOMAC (Low-Watermark Mandatory Accessrwatson2002-11-262-0/+2842
* Un-staticize mac_cred_mmapped_drop_perms() so that it may be usedrwatson2002-11-269-8/+9
* Introduce p_label, extensible security label storage for the MAC frameworkrwatson2002-11-2010-8/+204
* Merge kld access control checks from the MAC tree: these access controlrwatson2002-11-1910-0/+375
* Introduce a condition variable to avoid returning EBUSY whenrwatson2002-11-138-232/+416
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sincerwatson2002-11-1215-108/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform arwatson2002-11-118-16/+0
* Update MAC modules for changes in arguments for exec MAC policyrwatson2002-11-087-14/+68
* Add an explicit execlabel argument to exec-related MAC policy entryrwatson2002-11-089-27/+36
* Update policy modules for changes in arguments associated with supportrwatson2002-11-056-12/+18
* Bring in two sets of changes:rwatson2002-11-0510-55/+467
OpenPOWER on IntegriCloud