aboutsummaryrefslogtreecommitdiff
path: root/sys/kern/kern_mac.c
Commit message (Expand)AuthorAgeFilesLines
* Remove un-needed stack variable 'ops'.Robert Watson2002-09-181-3/+2
* Add a toggle to disable VM enforcement.Robert Watson2002-09-181-0/+7
* At the cost of seeming a little gauche, make use of more traditionalRobert Watson2002-09-181-4/+4
* Remove all use of vnode->v_tag, replacing with appropriate substitutes.Nate Lawson2002-09-141-4/+4
* Add security.mac.mmap_revocation, a flag indicating whether weRobert Watson2002-09-091-0/+8
* Minor code sync to MAC tree: push Giant locking up fromRobert Watson2002-09-091-2/+2
* Include <sys/malloc.h> instead of depending on namespace pollution 2Bruce Evans2002-09-051-6/+5
* Close a race in process label changing opened due to dropping theRobert Watson2002-08-191-7/+10
* Pass active_cred and file_cred into the MAC framework explicitlyRobert Watson2002-08-191-12/+20
* Provide an implementation of mac_syscall() so that security modulesRobert Watson2002-08-191-0/+38
* Break out mac_check_pipe_op() into component check entry points:Robert Watson2002-08-191-4/+46
* Break out mac_check_vnode_op() into three seperate checks:Robert Watson2002-08-191-10/+57
* Assert process locks in proces-related access control checks.Robert Watson2002-08-191-0/+6
* Add a missing vnode assertion for the exec() check.Robert Watson2002-08-191-0/+2
* Wrap maintenance of varios nmac{objectname} counters in MAC_DEBUG so weRobert Watson2002-08-161-0/+46
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatRobert Watson2002-08-151-10/+10
* Sync to trustedbsd_mac tree: default to sigsegv rather than copy-on-writeRobert Watson2002-08-151-1/+1
* Declare a module service "kernel_mac_support" when MAC support isRobert Watson2002-08-121-0/+8
* - Replace v_flag with v_iflag and v_vflagJeff Roberson2002-08-041-5/+7
* Include file cleanup; mac.h and malloc.h at one point had orderingRobert Watson2002-08-011-0/+1
* Begin committing support for Mandatory Access Control and extensibleRobert Watson2002-07-301-0/+3016
* Stubs for the TrustedBSD MAC system calls to permit TrustedBSD MACRobert Watson2002-07-301-0/+93