summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Trim "trustedbsd_" from the front of the policy module "short names";rwatson2003-03-279-10/+10
* Modify the mac_init_ipq() MAC Framework entry point to accept anrwatson2003-03-2616-41/+106
* Update the MAC regression test policy to include stubs and testingrwatson2003-03-251-0/+155
* Update MAC "none" stub policy to include stubs for the followingrwatson2003-03-252-0/+196
* Expand scope of the MLS policy to include a new entry point availablerwatson2003-03-251-0/+20
* Expand scope of the BSD extended "file system firewall" policy torwatson2003-03-251-0/+17
* Expand scope of the Biba policy to include some of the new entryrwatson2003-03-251-0/+40
* Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE,rwatson2003-03-231-8/+0
* Including <sys/stdint.h> is (almost?) universally only to be able to usephk2003-03-181-1/+0
* Do not depend on namespace pollution, explicitly include sys/sx.hkan2003-03-121-0/+1
* Instrument sysarch() MD privileged I/O access interfaces with a MACrwatson2003-03-0610-0/+98
* Provide a mac_check_system_swapoff() entry point, which permits MACrwatson2003-03-0510-0/+115
* Replace calls to WITNESS_SLEEP() and witness_list() with equivalent callsjhb2003-03-048-16/+24
* A cute yet small MAC policy that provides a simple ACL mechanism torwatson2003-03-021-0/+485
* Back out M_* changes, per decision of the TRB.imp2003-02-1912-277/+277
* Move a bunch of flags from the KSE to the thread.julian2003-02-171-1/+1
* Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Bibarwatson2003-02-041-0/+39
* Place more stringent checks on process credential relabeling for the Bibarwatson2003-02-042-12/+21
* Rename the variable 'grade' to 'type' in interface parsing andrwatson2003-02-042-12/+12
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.alfred2003-01-2112-277/+277
* Bow to the whining masses and change a union back into void *. Retaindillon2003-01-138-32/+32
* Change struct file f_data to un_data, a union of the correct structdillon2003-01-128-32/+32
* Fix warnings on 64bits architectures.mux2003-01-061-2/+1
* Map VAPPEND to VWRITE since the ugidfw rule syntax doesn't specificallyrwatson2002-12-281-0/+9
* SCARGS removal take II.alfred2002-12-148-40/+40
* Backout removal SCARGS, the code freeze is only "selectively" over.alfred2002-12-138-40/+40
* Remove SCARGS.alfred2002-12-138-40/+40
* Default policies to on: if you load them or compile them into yourrwatson2002-12-107-7/+7
* Remove dm_root entry from struct devfs_mount. It's never set, and isrwatson2002-12-0916-131/+164
* Remove a const that generates a warning: the const isn't strictlyrwatson2002-12-041-1/+1
* License tweak: remove clause 3 per permission of NAI.rwatson2002-12-032-6/+0
* Unhook the old LOMAC module, now replaced with mac_lomac.rwatson2002-12-0327-6787/+0
* Correct two warnings by staticizing a function and removing an unusedrwatson2002-11-261-11/+1
* Import an implementation of LOMAC (Low-Watermark Mandatory Accessrwatson2002-11-262-0/+2842
* Un-staticize mac_cred_mmapped_drop_perms() so that it may be usedrwatson2002-11-269-8/+9
* Introduce p_label, extensible security label storage for the MAC frameworkrwatson2002-11-2010-8/+204
* Merge kld access control checks from the MAC tree: these access controlrwatson2002-11-1910-0/+375
* Introduce a condition variable to avoid returning EBUSY whenrwatson2002-11-138-232/+416
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sincerwatson2002-11-1215-108/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform arwatson2002-11-118-16/+0
* Update MAC modules for changes in arguments for exec MAC policyrwatson2002-11-087-14/+68
* Add an explicit execlabel argument to exec-related MAC policy entryrwatson2002-11-089-27/+36
* Update policy modules for changes in arguments associated with supportrwatson2002-11-056-12/+18
* Bring in two sets of changes:rwatson2002-11-0510-55/+467
* Since neither the Biba policy nor the MLS policy make use ofrwatson2002-11-052-46/+0
* Assert that appropriate vnodes are locked in mac_execve_will_transition().rwatson2002-11-058-0/+64
* Implement mpo_check_system_acct and mpo_check_system_settime() for Biba:rwatson2002-11-041-0/+46
* Correct use of mac_biba_subject_privileged() in swapon() code.rwatson2002-11-041-2/+4
* Permit MAC policies to instrument the access control decisions forrwatson2002-11-0410-0/+253
* Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MACrwatson2002-11-048-48/+0
OpenPOWER on IntegriCloud