aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac
Commit message (Expand)AuthorAgeFilesLines
* Remove un-needed stack variable 'ops'.Robert Watson2002-09-188-24/+16
* Add a toggle to disable VM enforcement.Robert Watson2002-09-188-0/+56
* At the cost of seeming a little gauche, make use of more traditionalRobert Watson2002-09-188-32/+32
* Remove all use of vnode->v_tag, replacing with appropriate substitutes.Nate Lawson2002-09-148-32/+32
* Add security.mac.mmap_revocation, a flag indicating whether weRobert Watson2002-09-098-0/+64
* Minor code sync to MAC tree: push Giant locking up fromRobert Watson2002-09-098-16/+16
* Include <sys/malloc.h> instead of depending on namespace pollution 2Bruce Evans2002-09-058-48/+40
* Close a race in process label changing opened due to dropping theRobert Watson2002-08-198-56/+80
* Pass active_cred and file_cred into the MAC framework explicitlyRobert Watson2002-08-1910-104/+176
* Provide an implementation of mac_syscall() so that security modulesRobert Watson2002-08-1910-1/+318
* Break out mac_check_pipe_op() into component check entry points:Robert Watson2002-08-1910-49/+384
* Break out mac_check_vnode_op() into three seperate checks:Robert Watson2002-08-1910-84/+468
* Assert process locks in proces-related access control checks.Robert Watson2002-08-198-0/+48
* Add a missing vnode assertion for the exec() check.Robert Watson2002-08-198-0/+16
* Wrap maintenance of varios nmac{objectname} counters in MAC_DEBUG so weRobert Watson2002-08-168-0/+368
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatRobert Watson2002-08-152-5/+5
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatRobert Watson2002-08-158-80/+80
* Sync to trustedbsd_mac tree: default to sigsegv rather than copy-on-writeRobert Watson2002-08-158-8/+8
* Define 'struct label' in _label.h rather than mac.h, which will permitRobert Watson2002-08-131-18/+2
* Declare a module service "kernel_mac_support" when MAC support isRobert Watson2002-08-129-0/+65
* - Replace v_flag with v_iflag and v_vflagJeff Roberson2002-08-048-40/+56
* Improve ordering of MAC entry points in mac_policy_op structure.Robert Watson2002-08-021-6/+6
* Include file cleanup; mac.h and malloc.h at one point had orderingRobert Watson2002-08-018-0/+8
* Change macop_t to const, use macop_t in MAC policy entry point definitionRobert Watson2002-08-011-2/+2
* Reduce the memory footprint of MAC in the base system by halvingRobert Watson2002-07-311-1/+1
* Begin committing support for Mandatory Access Control and extensibleRobert Watson2002-07-308-0/+24128
* Begin committing support for Mandatory Access Control and extensibleRobert Watson2002-07-302-0/+898
* Stubs for the TrustedBSD MAC system calls to permit TrustedBSD MACRobert Watson2002-07-308-0/+744
generated by cgit v1.3 (git 2.53.0) at 2026-08-01 01:11:25 +0000