summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Introduce a new sysctl variable:csjp2005-12-311-1/+6
* Normalize a significant number of kernel malloc type names:rwatson2005-10-312-2/+2
* Lock object while we iterate through it's backing objects.csjp2005-10-091-6/+7
* Use the correct object's backing_object_offset while calculating offsets.csjp2005-10-041-1/+4
* Standard Giant push down operations for the Mandatory Access Control (MAC)csjp2005-10-042-68/+54
* Conditionally pickup Giant in mac_cred_mmapped_drop_perms_recurse socsjp2005-10-041-2/+6
* Complete removal of mac_create_root_mount/mpo_create_root_mount MACrwatson2005-10-022-3/+0
* Allow the root user to be aware of other credentials by virtuetrhodes2005-09-301-2/+12
* Add #include <sys/sx.h>, devfs is going to require this shortly.phk2005-09-197-0/+7
* Remove mac_create_root_mount() and mpo_create_root_mount(), whichrwatson2005-09-196-69/+0
* Insert a series of place-holder function pointers in mac_policy.h forrwatson2005-08-081-0/+25
* If a "hole" opens up in the ruleset (i.e.: remove 5), do not returntrhodes2005-07-281-5/+2
* Remove duplicate initialization of mpo_create_stub pointer.rwatson2005-07-211-1/+0
* Bump the module versions of the MAC Framework and MAC policy modulesrwatson2005-07-143-3/+11
* When devfs cloning takes place, provide access to the credential of therwatson2005-07-148-15/+27
* Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which isrwatson2005-07-058-102/+12
* Add MAC Framework and MAC policy entry point mac_check_socket_create(),rwatson2005-07-054-0/+40
* Correct grammar error in commentcsjp2005-06-101-1/+1
* Gratuitous renaming of four System V Semaphore MAC Framework entryrwatson2005-06-077-56/+56
* Introduce MAC Framework and MAC Policy entry points to label and controlrwatson2005-05-047-0/+462
* Get the directory structure correct in a comment.trhodes2005-04-222-2/+4
* Add locking support to mac_bsdextended:trhodes2005-04-221-37/+67
* Introduce p_canwait() and MAC Framework and MAC Policy entry pointsrwatson2005-04-185-0/+37
* Introduce three additional MAC Framework and MAC Policy entry points torwatson2005-04-165-8/+166
* In mac_get_fd(), remove unconditional acquisition of Giant around copyingrwatson2005-04-162-18/+14
* Introduce new MAC Framework and MAC Policy entry points to control the userwatson2005-04-165-0/+337
* Move MAC check_vnode_mmap entry point out from being exclusive tocsjp2005-04-148-12/+16
* Remove an accidental clearing of the new label pointer on a system Vrwatson2005-02-241-1/+0
* Synchronize HEAD copyright/license with RELENG_5 copyright/license:rwatson2005-02-131-5/+5
* Update copyright for NETA->McAfee.rwatson2005-01-301-5/+5
* Remove policy references to mpo_check_vnode_mprotect(), which isrwatson2005-01-265-54/+2
* Remove an obsoleted comment about struct versions.rwatson2005-01-231-1/+0
* Update mac_test for MAC Framework policy entry points System V IPCrwatson2005-01-221-0/+378
* Update mac_stub for MAC Framework policy entry points System V IPCrwatson2005-01-221-5/+213
* Implement MLS confidentiality protection for System V IPC objectsrwatson2005-01-221-5/+391
* Implement Biba integrity protection for System V IPC objects (messagerwatson2005-01-221-5/+394
* Exempt the superuser from mac_seeotheruids checks.rwatson2005-01-031-0/+3
* Add a new sysctl/tunable to mac_portacl:rwatson2004-12-081-0/+23
* Switch from using an sx lock to a mutex for the mac_portacl rule chain:rwatson2004-12-061-26/+19
* Implement MAC entry points relating to System V IPC, calling into therwatson2004-11-173-0/+592
* Define new MAC framework and policy entry points for System V IPCrwatson2004-11-172-1/+129
* Bump MAC Framework version to 2 in preparation for the upcoming API/ABIrwatson2004-11-093-3/+3
* Disable use of synchronization early in the boot by the MAC Framework;rwatson2004-10-302-0/+42
* /%x/%s/ -- mismerged DEBUGGER() printf() format stirng from therwatson2004-10-231-1/+1
* Expand comments on various sections of the MAC Framework Policy API,rwatson2004-10-221-4/+15
* Replace direct reference to kdb_enter() with a DEBUGGER() macro thatrwatson2004-10-221-28/+34
* Minor white space synchronization and line wrapping.rwatson2004-10-222-1/+3
* In the MAC label zone destructor, assert that the label is onlyrwatson2004-10-221-1/+3
* Remove extern declaration of mac_enforce_sysv, as it's not present inrwatson2004-10-221-1/+0
* Bump copyright dates for NETA on these files.rwatson2004-10-212-2/+2
OpenPOWER on IntegriCloud