summaryrefslogtreecommitdiff
path: root/sys/kern/kern_mac.c
Commit message (Expand)AuthorAgeFilesLines
* Instrument sysarch() MD privileged I/O access interfaces with a MACRobert Watson2003-03-061-0/+12
* Provide a mac_check_system_swapoff() entry point, which permits MACRobert Watson2003-03-051-0/+14
* Replace calls to WITNESS_SLEEP() and witness_list() with equivalent callsJohn Baldwin2003-03-041-2/+3
* Back out M_* changes, per decision of the TRB.Warner Losh2003-02-191-34/+34
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.Alfred Perlstein2003-01-211-34/+34
* Bow to the whining masses and change a union back into void *. RetainMatthew Dillon2003-01-131-4/+4
* Change struct file f_data to un_data, a union of the correct structMatthew Dillon2003-01-121-4/+4
* SCARGS removal take II.Alfred Perlstein2002-12-141-5/+5
* Backout removal SCARGS, the code freeze is only "selectively" over.Alfred Perlstein2002-12-131-5/+5
* Remove SCARGS.Alfred Perlstein2002-12-131-5/+5
* Remove dm_root entry from struct devfs_mount. It's never set, and isRobert Watson2002-12-091-9/+11
* Un-staticize mac_cred_mmapped_drop_perms() so that it may be usedRobert Watson2002-11-261-1/+1
* Introduce p_label, extensible security label storage for the MAC frameworkRobert Watson2002-11-201-1/+25
* Merge kld access control checks from the MAC tree: these access controlRobert Watson2002-11-191-0/+46
* Introduce a condition variable to avoid returning EBUSY whenRobert Watson2002-11-131-29/+52
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sinceRobert Watson2002-11-121-7/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform aRobert Watson2002-11-111-2/+0
* Add an explicit execlabel argument to exec-related MAC policy entryRobert Watson2002-11-081-3/+4
* Bring in two sets of changes:Robert Watson2002-11-051-6/+56
* Assert that appropriate vnodes are locked in mac_execve_will_transition().Robert Watson2002-11-051-0/+8
* Permit MAC policies to instrument the access control decisions forRobert Watson2002-11-041-0/+31
* Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MACRobert Watson2002-11-041-6/+0
* License clarification and wording changes: NAI has approved removal ofRobert Watson2002-11-041-7/+4
* Introduce mac_check_system_settime(), a MAC check allowing policies toRobert Watson2002-11-031-0/+13
* Add MAC checks for various kenv() operations: dump, get, set, unset,Robert Watson2002-11-011-0/+52
* Move to C99 sparse structure initialization for the mac_policy_opsRobert Watson2002-10-301-583/+0
* While 'mode_t' seemed like a good idea for the access mode argument forRobert Watson2002-10-301-3/+3
* An inappropriate ASSERT slipped in during the recent merge of theRobert Watson2002-10-281-2/+0
* Centrally manage enforcement of {reboot,swapon,sysctl} using theRobert Watson2002-10-271-13/+9
* Implement mac_check_system_sysctl(), a MAC Framework entry point toRobert Watson2002-10-271-0/+28
* Hook up mac_check_system_reboot(), a MAC Framework entry point thatRobert Watson2002-10-271-0/+23
* Merge from MAC tree: rename mac_check_vnode_swapon() toRobert Watson2002-10-271-18/+18
* Slightly change the semantics of vnode labels for MAC: rather thanRobert Watson2002-10-261-486/+90
* Comment describing the semantics of mac_late.Robert Watson2002-10-251-1/+6
* Introduce MAC_CHECK_VNODE_SWAPON, which permits MAC policies toRobert Watson2002-10-221-0/+22
* Missed in previous merge: export sizeof(struct oldmac) rather thanRobert Watson2002-10-221-1/+1
* Support the new MAC user API in kernel: modify existing system callsRobert Watson2002-10-221-169/+917
* Use if_printf(ifp, "blah") instead ofBrooks Davis2002-10-211-2/+1
* If MAC_MAX_POLICIES isn't defined, don't try to define it, just let theRobert Watson2002-10-201-3/+1
* Make sure to clear the 'registered' flag for MAC policies when theyRobert Watson2002-10-191-0/+1
* Integrate mac_check_socket_send() and mac_check_socket_receive()Robert Watson2002-10-061-0/+34
* Sync from MAC tree: break out the single mmap entry point intoRobert Watson2002-10-061-18/+63
* Modify label allocation semantics for sockets: pass in soalloc's mallocRobert Watson2002-10-051-13/+69
* Integrate a devfs/MAC fix from the MAC tree: avoid a race condition duringRobert Watson2002-10-051-0/+13
* Merge support for mac_check_vnode_link(), a MAC framework/policy entryRobert Watson2002-10-051-0/+30
* While the MAC API has supported the ability to handle M_NOWAIT passedRobert Watson2002-10-051-3/+11
* Rearrange object and label init/destroy functions to match theRobert Watson2002-10-051-101/+101
* Sync to MAC tree: use 'flag' instead of 'how' for mac_init_mbuf();Robert Watson2002-10-051-3/+3
* Another big diff, little functional change: move label internalization,Robert Watson2002-10-051-65/+65
* Move all object label init/destroy routines to the head of theRobert Watson2002-10-051-285/+285
generated by cgit v1.2.3 (git 2.25.1) at 2025-11-29 00:43:43 +0000