summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Add a new sysctl/tunable to mac_portacl:rwatson2004-12-081-0/+23
* Switch from using an sx lock to a mutex for the mac_portacl rule chain:rwatson2004-12-061-26/+19
* Implement MAC entry points relating to System V IPC, calling into therwatson2004-11-173-0/+592
* Define new MAC framework and policy entry points for System V IPCrwatson2004-11-172-1/+129
* Bump MAC Framework version to 2 in preparation for the upcoming API/ABIrwatson2004-11-093-3/+3
* Disable use of synchronization early in the boot by the MAC Framework;rwatson2004-10-302-0/+42
* /%x/%s/ -- mismerged DEBUGGER() printf() format stirng from therwatson2004-10-231-1/+1
* Expand comments on various sections of the MAC Framework Policy API,rwatson2004-10-221-4/+15
* Replace direct reference to kdb_enter() with a DEBUGGER() macro thatrwatson2004-10-221-28/+34
* Minor white space synchronization and line wrapping.rwatson2004-10-222-1/+3
* In the MAC label zone destructor, assert that the label is onlyrwatson2004-10-221-1/+3
* Remove extern declaration of mac_enforce_sysv, as it's not present inrwatson2004-10-221-1/+0
* Bump copyright dates for NETA on these files.rwatson2004-10-212-2/+2
* Modify mac_bsdextended policy so that it defines its own vnode accessrwatson2004-10-212-33/+74
* Remove the debugging tunable, it was not being used.trhodes2004-09-101-10/+1
* Allow mac_bsdextended(4) to log failed attempts to syslog's AUTHPRIVtrhodes2004-08-211-5/+19
* Give the mac_bsdextended(4) policy the ability to match and apply on a firsttrhodes2004-08-211-2/+21
* * Add a "how" argument to uma_zone constructors and initialization functionsgreen2004-08-021-3/+4
* Introduce SLOT_SET macro and use it in place of casts as lvalues.kan2004-07-283-12/+16
* Allow an effective uid of root to bypass mac_bsdextended rules; the MACrwatson2004-07-231-0/+3
* Rename Biba and MLS _single label elements to _effective, which morerwatson2004-07-164-353/+353
* Do a pass over all modules in the kernel and make them return EOPNOTSUPPphk2004-07-152-0/+2
* Update for the KDB framework:marcel2004-07-101-28/+29
* Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels onrwatson2004-06-247-0/+53
* Do the dreaded s/dev_t/struct cdev */phk2004-06-168-8/+9
* Socket MAC labels so_label and so_peerlabel are now protected byrwatson2004-06-131-8/+57
* add missing #include <sys/module.h>phk2004-05-302-0/+2
* Remove dead code. (This loop counted the number of rules, but the countcperciva2004-05-151-7/+0
* Improve consistency of include file guards in src/sys/sys by terminatingrwatson2004-05-102-6/+6
* If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tagrwatson2004-05-031-1/+4
* Add /* !MAC */ to final #endif.rwatson2004-05-032-2/+2
* Update copyright.rwatson2004-05-031-1/+1
* When performing label assertions on an mbuf header label in mac_test,rwatson2004-05-031-2/+3
* Bump copyright date for NETA to 2004.rwatson2004-05-032-2/+2
* Add MAC_STATIC, a kernel option that disables internal MAC Frameworkrwatson2004-05-032-0/+50
* Define BPFD_LOCK_ASSERT() to assert the BPF descriptor lock.rwatson2004-02-291-0/+4
* Forward declare struct proc, struct sockaddr, and struct thread, whichrwatson2004-02-261-0/+3
* Forward declare struct bpf_d, struct ifnet, struct image_params, andrwatson2004-02-261-1/+5
* Move inet and inet6 related MAC Framework entry points from mac_net.crwatson2004-02-264-655/+807
* Reimplement sysctls handling by MAC framework.pjd2004-02-227-36/+26
* Update my personal copyrights and NETA copyrights in the kernelrwatson2004-02-2223-46/+46
* Commit file missed in last pass: MAC api uses 'struct pipepair', notrwatson2004-02-011-8/+8
* Coalesce pipe allocations and frees. Previously, the pipe coderwatson2004-02-019-93/+95
* Pay attention to mac_portacl_enabled.rwatson2004-01-201-1/+5
* Switch TCP over to using the inpcb label when responding in timedrwatson2003-12-178-0/+72
* interpvnodelabel can be NULL in mac_test_execve_transition(). Thisrwatson2003-12-101-1/+3
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),rwatson2003-12-069-68/+26
* Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9).rwatson2003-11-182-12/+12
* Introduce a MAC label reference in 'struct inpcb', which cachesrwatson2003-11-189-1/+362
* Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as theyrwatson2003-11-173-21/+0
OpenPOWER on IntegriCloud