| Commit message (Expand) | Author | Age | Files | Lines |
* | Remove 'MPSAFE' annotations from the comments above most system calls: all | rwatson | 2007-03-04 | 3 | -47/+0 |
* | More unnecessary include reduction. | rwatson | 2007-02-23 | 7 | -90/+12 |
* | Remove many unneeded includes, update copyright. | rwatson | 2007-02-23 | 1 | -29/+2 |
* | Remove empty entry point functions (init, destroy, syscall) from | rwatson | 2007-02-23 | 2 | -32/+0 |
* | mac_none sample policy has nothing to enforce, so remove sysctls. | rwatson | 2007-02-23 | 1 | -9/+0 |
* | Update auditing of socket information for the inpcb new world order: | rwatson | 2007-02-20 | 1 | -6/+4 |
* | Move mapping of MBI_APPEND to MBI_WRITE from inside the rule loop in | rwatson | 2007-02-20 | 1 | -9/+8 |
* | Do allow bypass of mac_seeotheruids in jail in order to be consistent | rwatson | 2007-02-19 | 1 | -1/+2 |
* | In mac_biba_check_system_swapoff(), don't extract the object label since | rwatson | 2007-02-10 | 1 | -2/+1 |
* | Print intptr_t values by first casting to intmax_t and then printing with | rwatson | 2007-02-06 | 1 | -1/+1 |
* | Introduce accessor functions mac_label_get() and mac_label_set() to replace | rwatson | 2007-02-06 | 9 | -69/+107 |
* | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | rwatson | 2007-02-06 | 21 | -19/+10 |
* | When returning early from audit_arg_file() due to so->so_pcb being NULL | rwatson | 2007-01-06 | 1 | -2/+3 |
* | Teach the stub policy about some of the more recent entry points that have | csjp | 2007-01-01 | 1 | -0/+57 |
* | Remove conditional return of 1. For the MAC_STATIC case at this point in | csjp | 2007-01-01 | 1 | -3/+0 |
* | Only signal the CV indicating that the MAC Framework is available for | rwatson | 2006-12-31 | 1 | -6/+23 |
* | Slightly resort functions in file so that no forward function prototypes | rwatson | 2006-12-29 | 1 | -49/+46 |
* | Re-add include of opt_mac.h in mac_framework.c, which was improperly | rwatson | 2006-12-29 | 1 | -0/+2 |
* | Remove two XXX comments that no longer apply. | rwatson | 2006-12-29 | 1 | -5/+0 |
* | Use p_cansee() to check that a target process for an audit state | rwatson | 2006-12-29 | 1 | -3/+9 |
* | Add a witness sleep warning to canon_path(), which invokes vput() and hence | rwatson | 2006-12-29 | 2 | -3/+3 |
* | Add missing include guards to mac_internal.h, update include guards in | rwatson | 2006-12-28 | 2 | -3/+8 |
* | Update a number of comments: | rwatson | 2006-12-28 | 4 | -23/+22 |
* | Remove XXX comments about EA transaction support and provide a more | rwatson | 2006-12-28 | 1 | -6/+11 |
* | Remove an inaccurate comment I added regarding storage for mbuf tag | rwatson | 2006-12-28 | 1 | -7/+0 |
* | In mac_inpcb_sosetlabel(), assert the socket lock rather than commenting | rwatson | 2006-12-28 | 1 | -1/+1 |
* | Centralize definition of MAC_VERSION in mac_policy.h, as it defines the | rwatson | 2006-12-28 | 3 | -6/+19 |
* | Move mac_init_label() and mac_destroy_label() from mac_framework.c to | rwatson | 2006-12-28 | 2 | -29/+31 |
* | Trim unneeded includes. | rwatson | 2006-12-28 | 2 | -48/+0 |
* | Break contents of kern_mac.c out into two files following a repo-copy: | rwatson | 2006-12-28 | 2 | -1209/+0 |
* | Update MAC Framework general comments, referencing various interfaces it | rwatson | 2006-12-28 | 2 | -24/+80 |
* | Re-wrap comments following de-indentation. | rwatson | 2006-12-23 | 1 | -13/+11 |
* | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | rwatson | 2006-12-22 | 25 | -43/+25 |
* | Minor style fixes. | rwatson | 2006-12-21 | 4 | -20/+20 |
* | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | rwatson | 2006-12-21 | 14 | -397/+2 |
* | Comment LABEL_TO_SLOT() macro, including observing that we'd like to improve | rwatson | 2006-12-20 | 1 | -0/+8 |
* | Trim trailing white space, clean up comment line wrapping and formatting. | rwatson | 2006-12-20 | 1 | -10/+21 |
* | Trim trailing white space. | rwatson | 2006-12-20 | 2 | -7/+7 |
* | Document socket labeling model. | rwatson | 2006-12-20 | 1 | -15/+27 |
* | Clean up comment white space and line wrapping. | rwatson | 2006-12-20 | 1 | -15/+14 |
* | Additional comments regarding the interaction between the kernel privilege | rwatson | 2006-12-20 | 1 | -0/+18 |
* | Document that we could allocate the mbuf label as part of the tag rather | rwatson | 2006-12-20 | 1 | -8/+26 |
* | Staticize and comment zone_label. | rwatson | 2006-12-20 | 1 | -1/+7 |
* | Clean up comments, trailing white space. | rwatson | 2006-12-20 | 1 | -17/+27 |
* | Re-wrap comment at 77 character columns. | rwatson | 2006-12-20 | 1 | -7/+7 |
* | Comment and white space cleanup. | rwatson | 2006-12-20 | 1 | -15/+17 |
* | Externalize local stack copy of the ifnet label, rather than the copy on | rwatson | 2006-12-20 | 1 | -2/+2 |
* | Expand commenting on label slots, justification for the MAC Framework locking | rwatson | 2006-12-20 | 2 | -108/+158 |
* | Teach the MAC policies which utilize mbuf labeling the new syncache | csjp | 2006-12-13 | 3 | -0/+75 |
* | Fix LOR between the syncache and inpcb locks when MAC is present in the | csjp | 2006-12-13 | 3 | -0/+68 |