index
:
FreeBSD-src
RELENG_2_2
RELENG_2_3
RELENG_2_3_0
RELENG_2_3_1
RELENG_2_3_2
RELENG_2_3_3
RELENG_2_3_4
RELENG_2_4
RELENG_2_4_4
RELENG_2_4_OLD
devel
devel-11
releng/10.1
releng/10.3
releng/11.0
releng/11.1
stable/10
stable/11
Raptor Engineering's fork of pfsense FreeBSD src with pfSense changes
Raptor Engineering, LLC
summary
refs
log
tree
commit
diff
stats
log msg
author
committer
range
path:
root
/
sys
/
security
Commit message (
Expand
)
Author
Age
Files
Lines
*
Trim "trustedbsd_" from the front of the policy module "short names";
rwatson
2003-03-27
9
-10
/
+10
*
Modify the mac_init_ipq() MAC Framework entry point to accept an
rwatson
2003-03-26
16
-41
/
+106
*
Update the MAC regression test policy to include stubs and testing
rwatson
2003-03-25
1
-0
/
+155
*
Update MAC "none" stub policy to include stubs for the following
rwatson
2003-03-25
2
-0
/
+196
*
Expand scope of the MLS policy to include a new entry point available
rwatson
2003-03-25
1
-0
/
+20
*
Expand scope of the BSD extended "file system firewall" policy to
rwatson
2003-03-25
1
-0
/
+17
*
Expand scope of the Biba policy to include some of the new entry
rwatson
2003-03-25
1
-0
/
+40
*
Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE,
rwatson
2003-03-23
1
-8
/
+0
*
Including <sys/stdint.h> is (almost?) universally only to be able to use
phk
2003-03-18
1
-1
/
+0
*
Do not depend on namespace pollution, explicitly include sys/sx.h
kan
2003-03-12
1
-0
/
+1
*
Instrument sysarch() MD privileged I/O access interfaces with a MAC
rwatson
2003-03-06
10
-0
/
+98
*
Provide a mac_check_system_swapoff() entry point, which permits MAC
rwatson
2003-03-05
10
-0
/
+115
*
Replace calls to WITNESS_SLEEP() and witness_list() with equivalent calls
jhb
2003-03-04
8
-16
/
+24
*
A cute yet small MAC policy that provides a simple ACL mechanism to
rwatson
2003-03-02
1
-0
/
+485
*
Back out M_* changes, per decision of the TRB.
imp
2003-02-19
12
-277
/
+277
*
Move a bunch of flags from the KSE to the thread.
julian
2003-02-17
1
-1
/
+1
*
Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba
rwatson
2003-02-04
1
-0
/
+39
*
Place more stringent checks on process credential relabeling for the Biba
rwatson
2003-02-04
2
-12
/
+21
*
Rename the variable 'grade' to 'type' in interface parsing and
rwatson
2003-02-04
2
-12
/
+12
*
Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.
alfred
2003-01-21
12
-277
/
+277
*
Bow to the whining masses and change a union back into void *. Retain
dillon
2003-01-13
8
-32
/
+32
*
Change struct file f_data to un_data, a union of the correct struct
dillon
2003-01-12
8
-32
/
+32
*
Fix warnings on 64bits architectures.
mux
2003-01-06
1
-2
/
+1
*
Map VAPPEND to VWRITE since the ugidfw rule syntax doesn't specifically
rwatson
2002-12-28
1
-0
/
+9
*
SCARGS removal take II.
alfred
2002-12-14
8
-40
/
+40
*
Backout removal SCARGS, the code freeze is only "selectively" over.
alfred
2002-12-13
8
-40
/
+40
*
Remove SCARGS.
alfred
2002-12-13
8
-40
/
+40
*
Default policies to on: if you load them or compile them into your
rwatson
2002-12-10
7
-7
/
+7
*
Remove dm_root entry from struct devfs_mount. It's never set, and is
rwatson
2002-12-09
16
-131
/
+164
*
Remove a const that generates a warning: the const isn't strictly
rwatson
2002-12-04
1
-1
/
+1
*
License tweak: remove clause 3 per permission of NAI.
rwatson
2002-12-03
2
-6
/
+0
*
Unhook the old LOMAC module, now replaced with mac_lomac.
rwatson
2002-12-03
27
-6787
/
+0
*
Correct two warnings by staticizing a function and removing an unused
rwatson
2002-11-26
1
-11
/
+1
*
Import an implementation of LOMAC (Low-Watermark Mandatory Access
rwatson
2002-11-26
2
-0
/
+2842
*
Un-staticize mac_cred_mmapped_drop_perms() so that it may be used
rwatson
2002-11-26
9
-8
/
+9
*
Introduce p_label, extensible security label storage for the MAC framework
rwatson
2002-11-20
10
-8
/
+204
*
Merge kld access control checks from the MAC tree: these access control
rwatson
2002-11-19
10
-0
/
+375
*
Introduce a condition variable to avoid returning EBUSY when
rwatson
2002-11-13
8
-232
/
+416
*
Garbage collect mac_create_devfs_vnode() -- it hasn't been used since
rwatson
2002-11-12
15
-108
/
+0
*
Garbage collect definition of M_MACOPVEC -- we no longer perform a
rwatson
2002-11-11
8
-16
/
+0
*
Update MAC modules for changes in arguments for exec MAC policy
rwatson
2002-11-08
7
-14
/
+68
*
Add an explicit execlabel argument to exec-related MAC policy entry
rwatson
2002-11-08
9
-27
/
+36
*
Update policy modules for changes in arguments associated with support
rwatson
2002-11-05
6
-12
/
+18
*
Bring in two sets of changes:
rwatson
2002-11-05
10
-55
/
+467
*
Since neither the Biba policy nor the MLS policy make use of
rwatson
2002-11-05
2
-46
/
+0
*
Assert that appropriate vnodes are locked in mac_execve_will_transition().
rwatson
2002-11-05
8
-0
/
+64
*
Implement mpo_check_system_acct and mpo_check_system_settime() for Biba:
rwatson
2002-11-04
1
-0
/
+46
*
Correct use of mac_biba_subject_privileged() in swapon() code.
rwatson
2002-11-04
1
-2
/
+4
*
Permit MAC policies to instrument the access control decisions for
rwatson
2002-11-04
10
-0
/
+253
*
Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MAC
rwatson
2002-11-04
8
-48
/
+0
[next]