summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Back out M_* changes, per decision of the TRB.imp2003-02-1912-277/+277
* Move a bunch of flags from the KSE to the thread.julian2003-02-171-1/+1
* Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Bibarwatson2003-02-041-0/+39
* Place more stringent checks on process credential relabeling for the Bibarwatson2003-02-042-12/+21
* Rename the variable 'grade' to 'type' in interface parsing andrwatson2003-02-042-12/+12
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-2112-277/+277
* Bow to the whining masses and change a union back into void *. Retaindillon2003-01-138-32/+32
* Change struct file f_data to un_data, a union of the correct structdillon2003-01-128-32/+32
* Fix warnings on 64bits architectures.mux2003-01-061-2/+1
* Map VAPPEND to VWRITE since the ugidfw rule syntax doesn't specificallyrwatson2002-12-281-0/+9
* SCARGS removal take II.alfred2002-12-148-40/+40
* Backout removal SCARGS, the code freeze is only "selectively" over.alfred2002-12-138-40/+40
* Remove SCARGS.alfred2002-12-138-40/+40
* Default policies to on: if you load them or compile them into yourrwatson2002-12-107-7/+7
* Remove dm_root entry from struct devfs_mount. It's never set, and isrwatson2002-12-0916-131/+164
* Remove a const that generates a warning: the const isn't strictlyrwatson2002-12-041-1/+1
* License tweak: remove clause 3 per permission of NAI.rwatson2002-12-032-6/+0
* Unhook the old LOMAC module, now replaced with mac_lomac.rwatson2002-12-0327-6787/+0
* Correct two warnings by staticizing a function and removing an unusedrwatson2002-11-261-11/+1
* Import an implementation of LOMAC (Low-Watermark Mandatory Accessrwatson2002-11-262-0/+2842
* Un-staticize mac_cred_mmapped_drop_perms() so that it may be usedrwatson2002-11-269-8/+9
* Introduce p_label, extensible security label storage for the MAC frameworkrwatson2002-11-2010-8/+204
* Merge kld access control checks from the MAC tree: these access controlrwatson2002-11-1910-0/+375
* Introduce a condition variable to avoid returning EBUSY whenrwatson2002-11-138-232/+416
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sincerwatson2002-11-1215-108/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform arwatson2002-11-118-16/+0
* Update MAC modules for changes in arguments for exec MAC policyrwatson2002-11-087-14/+68
* Add an explicit execlabel argument to exec-related MAC policy entryrwatson2002-11-089-27/+36
* Update policy modules for changes in arguments associated with supportrwatson2002-11-056-12/+18
* Bring in two sets of changes:rwatson2002-11-0510-55/+467
* Since neither the Biba policy nor the MLS policy make use ofrwatson2002-11-052-46/+0
* Assert that appropriate vnodes are locked in mac_execve_will_transition().rwatson2002-11-058-0/+64
* Implement mpo_check_system_acct and mpo_check_system_settime() for Biba:rwatson2002-11-041-0/+46
* Correct use of mac_biba_subject_privileged() in swapon() code.rwatson2002-11-041-2/+4
* Permit MAC policies to instrument the access control decisions forrwatson2002-11-0410-0/+253
* Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MACrwatson2002-11-048-48/+0
* License and wording updates: NAI has authorized the removal of clauserwatson2002-11-0413-91/+52
* License clarification and wording changes: NAI has approved removal ofrwatson2002-11-0410-70/+40
* Introduce mac_check_system_settime(), a MAC check allowing policies torwatson2002-11-0310-0/+106
* Change privilege model for mac_partition such that BSD superuser can changerwatson2002-11-031-6/+4
* Fix some warnings on 64 bit architectures. The vn_extattr_get()mux2002-11-022-4/+2
* Add MAC checks for various kenv() operations: dump, get, set, unset,rwatson2002-11-0110-0/+425
* Move to C99 sparse structure initialization for the mac_policy_opsrwatson2002-10-3018-6263/+734
* Various minor type, prototype tweaks -- clean up cruft due to lack ofrwatson2002-10-305-10/+10
* While 'mode_t' seemed like a good idea for the access mode argument forrwatson2002-10-3016-41/+41
* Try again to fix the KASSERT.rwatson2002-10-301-1/+1
* Fix a KASSERT bug that showed up only in the LINT build, not therwatson2002-10-301-1/+1
* Hook up no-op stubs for reboot, swapon, sysctl entry points.rwatson2002-10-292-0/+58
* Implement Biba policy entry points for mac_check_system_swapon()rwatson2002-10-291-0/+59
* Require Biba privilege to relabel a network interface.rwatson2002-10-291-0/+7
OpenPOWER on IntegriCloud