summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Remove 'MPSAFE' annotations from the comments above most system calls: allrwatson2007-03-043-47/+0
* More unnecessary include reduction.rwatson2007-02-237-90/+12
* Remove many unneeded includes, update copyright.rwatson2007-02-231-29/+2
* Remove empty entry point functions (init, destroy, syscall) fromrwatson2007-02-232-32/+0
* mac_none sample policy has nothing to enforce, so remove sysctls.rwatson2007-02-231-9/+0
* Update auditing of socket information for the inpcb new world order:rwatson2007-02-201-6/+4
* Move mapping of MBI_APPEND to MBI_WRITE from inside the rule loop inrwatson2007-02-201-9/+8
* Do allow bypass of mac_seeotheruids in jail in order to be consistentrwatson2007-02-191-1/+2
* In mac_biba_check_system_swapoff(), don't extract the object label sincerwatson2007-02-101-2/+1
* Print intptr_t values by first casting to intmax_t and then printing withrwatson2007-02-061-1/+1
* Introduce accessor functions mac_label_get() and mac_label_set() to replacerwatson2007-02-069-69/+107
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:rwatson2007-02-0621-19/+10
* When returning early from audit_arg_file() due to so->so_pcb being NULLrwatson2007-01-061-2/+3
* Teach the stub policy about some of the more recent entry points that havecsjp2007-01-011-0/+57
* Remove conditional return of 1. For the MAC_STATIC case at this point incsjp2007-01-011-3/+0
* Only signal the CV indicating that the MAC Framework is available forrwatson2006-12-311-6/+23
* Slightly resort functions in file so that no forward function prototypesrwatson2006-12-291-49/+46
* Re-add include of opt_mac.h in mac_framework.c, which was improperlyrwatson2006-12-291-0/+2
* Remove two XXX comments that no longer apply.rwatson2006-12-291-5/+0
* Use p_cansee() to check that a target process for an audit staterwatson2006-12-291-3/+9
* Add a witness sleep warning to canon_path(), which invokes vput() and hencerwatson2006-12-292-3/+3
* Add missing include guards to mac_internal.h, update include guards inrwatson2006-12-282-3/+8
* Update a number of comments:rwatson2006-12-284-23/+22
* Remove XXX comments about EA transaction support and provide a morerwatson2006-12-281-6/+11
* Remove an inaccurate comment I added regarding storage for mbuf tagrwatson2006-12-281-7/+0
* In mac_inpcb_sosetlabel(), assert the socket lock rather than commentingrwatson2006-12-281-1/+1
* Centralize definition of MAC_VERSION in mac_policy.h, as it defines therwatson2006-12-283-6/+19
* Move mac_init_label() and mac_destroy_label() from mac_framework.c torwatson2006-12-282-29/+31
* Trim unneeded includes.rwatson2006-12-282-48/+0
* Break contents of kern_mac.c out into two files following a repo-copy:rwatson2006-12-282-1209/+0
* Update MAC Framework general comments, referencing various interfaces itrwatson2006-12-282-24/+80
* Re-wrap comments following de-indentation.rwatson2006-12-231-13/+11
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACrwatson2006-12-2225-43/+25
* Minor style fixes.rwatson2006-12-214-20/+20
* Remove mac_enforce_subsystem debugging sysctls. Enforcement onrwatson2006-12-2114-397/+2
* Comment LABEL_TO_SLOT() macro, including observing that we'd like to improverwatson2006-12-201-0/+8
* Trim trailing white space, clean up comment line wrapping and formatting.rwatson2006-12-201-10/+21
* Trim trailing white space.rwatson2006-12-202-7/+7
* Document socket labeling model.rwatson2006-12-201-15/+27
* Clean up comment white space and line wrapping.rwatson2006-12-201-15/+14
* Additional comments regarding the interaction between the kernel privilegerwatson2006-12-201-0/+18
* Document that we could allocate the mbuf label as part of the tag ratherrwatson2006-12-201-8/+26
* Staticize and comment zone_label.rwatson2006-12-201-1/+7
* Clean up comments, trailing white space.rwatson2006-12-201-17/+27
* Re-wrap comment at 77 character columns.rwatson2006-12-201-7/+7
* Comment and white space cleanup.rwatson2006-12-201-15/+17
* Externalize local stack copy of the ifnet label, rather than the copy onrwatson2006-12-201-2/+2
* Expand commenting on label slots, justification for the MAC Framework lockingrwatson2006-12-202-108/+158
* Teach the MAC policies which utilize mbuf labeling the new syncachecsjp2006-12-133-0/+75
* Fix LOR between the syncache and inpcb locks when MAC is present in thecsjp2006-12-133-0/+68
OpenPOWER on IntegriCloud