summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Do the dreaded s/dev_t/struct cdev */phk2004-06-168-8/+9
* Socket MAC labels so_label and so_peerlabel are now protected byrwatson2004-06-131-8/+57
* add missing #include <sys/module.h>phk2004-05-302-0/+2
* Remove dead code. (This loop counted the number of rules, but the countcperciva2004-05-151-7/+0
* Improve consistency of include file guards in src/sys/sys by terminatingrwatson2004-05-102-6/+6
* If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tagrwatson2004-05-031-1/+4
* Add /* !MAC */ to final #endif.rwatson2004-05-032-2/+2
* Update copyright.rwatson2004-05-031-1/+1
* When performing label assertions on an mbuf header label in mac_test,rwatson2004-05-031-2/+3
* Bump copyright date for NETA to 2004.rwatson2004-05-032-2/+2
* Add MAC_STATIC, a kernel option that disables internal MAC Frameworkrwatson2004-05-032-0/+50
* Define BPFD_LOCK_ASSERT() to assert the BPF descriptor lock.rwatson2004-02-291-0/+4
* Forward declare struct proc, struct sockaddr, and struct thread, whichrwatson2004-02-261-0/+3
* Forward declare struct bpf_d, struct ifnet, struct image_params, andrwatson2004-02-261-1/+5
* Move inet and inet6 related MAC Framework entry points from mac_net.crwatson2004-02-264-655/+807
* Reimplement sysctls handling by MAC framework.pjd2004-02-227-36/+26
* Update my personal copyrights and NETA copyrights in the kernelrwatson2004-02-2223-46/+46
* Commit file missed in last pass: MAC api uses 'struct pipepair', notrwatson2004-02-011-8/+8
* Coalesce pipe allocations and frees. Previously, the pipe coderwatson2004-02-019-93/+95
* Pay attention to mac_portacl_enabled.rwatson2004-01-201-1/+5
* Switch TCP over to using the inpcb label when responding in timedrwatson2003-12-178-0/+72
* interpvnodelabel can be NULL in mac_test_execve_transition(). Thisrwatson2003-12-101-1/+3
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),rwatson2003-12-069-68/+26
* Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9).rwatson2003-11-182-12/+12
* Introduce a MAC label reference in 'struct inpcb', which cachesrwatson2003-11-189-1/+362
* Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as theyrwatson2003-11-173-21/+0
* Implement sockets support for __mac_get_fd() and __mac_set_fd()rwatson2003-11-1610-7/+92
* Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET andrwatson2003-11-161-0/+1
* Abstract the label checking and setting logic fromrwatson2003-11-162-13/+24
* Implement mpo_copy_{mbuf,pipe,vnode}_label() entry points forrwatson2003-11-162-0/+36
* Reduce gratuitous redundancy and length in function names:rwatson2003-11-162-8/+6
* Whitespace fix.rwatson2003-11-161-2/+2
* mac_relabel_cred() accepts two cred labels, not a cred label and arwatson2003-11-151-1/+1
* Reduced prequisites by only using MALLOC_DECLARE() if it is defined.bde2003-11-141-0/+4
* Mark __mac_get_pid() as MPSAFE in the comment, as it runs withoutrwatson2003-11-122-74/+30
* Remove extraneous & to fix compile.jhb2003-11-121-1/+1
* Remove extraneous fullpath variable, which broke lint build. Thisrwatson2003-11-122-2/+2
* GC prototype for mac_destroy_vnode_label(), missed in last commit.rwatson2003-11-121-1/+0
* Modify the MAC Framework so that instead of embedding a (struct label)rwatson2003-11-1215-644/+864
* Whitespace sync to MAC branch, expand comment at the head of the file.rwatson2003-11-112-6/+18
* Replace a '-' with a ')'. Update copyright.rwatson2003-11-081-2/+2
* When allocation of a socket peer label fails, scrub what wasrwatson2003-11-071-1/+1
* Trim trailing whitespace.rwatson2003-11-071-2/+2
* Remove the flags argument from mac_externalize_*_label(), as it's notrwatson2003-11-067-24/+24
* Replace the if_name and if_unit members of struct ifnet with new membersbrooks2003-10-312-8/+4
* Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the objectrwatson2003-10-255-15/+15
* Sort type declarations together.rwatson2003-10-251-6/+1
* mac_Finish break-out of kern_mac.c into parts:rwatson2003-10-222-5512/+10
* Variable cleanup following break-out of kern_mac.c into sys/security/mac:rwatson2003-10-222-32/+20
* Rename error_select() to mac_error_select(), and unstaticize so itrwatson2003-10-222-10/+8
OpenPOWER on IntegriCloud