summaryrefslogtreecommitdiff
path: root/sys/security/mac
Commit message (Expand)AuthorAgeFilesLines
* This commit was manufactured by cvs2svn to create branch 'RELENG_5'.cvs2svn2004-08-184-3345/+0
* * Add a "how" argument to uma_zone constructors and initialization functionsBrian Feldman2004-08-021-3/+4
* Do a pass over all modules in the kernel and make them return EOPNOTSUPPPoul-Henning Kamp2004-07-152-0/+2
* Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels onRobert Watson2004-06-242-0/+40
* Do the dreaded s/dev_t/struct cdev */Poul-Henning Kamp2004-06-163-3/+4
* Socket MAC labels so_label and so_peerlabel are now protected byRobert Watson2004-06-131-8/+57
* add missing #include <sys/module.h>Poul-Henning Kamp2004-05-302-0/+2
* Improve consistency of include file guards in src/sys/sys by terminatingRobert Watson2004-05-102-6/+6
* If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tagRobert Watson2004-05-031-1/+4
* Add /* !MAC */ to final #endif.Robert Watson2004-05-032-2/+2
* Bump copyright date for NETA to 2004.Robert Watson2004-05-032-2/+2
* Add MAC_STATIC, a kernel option that disables internal MAC FrameworkRobert Watson2004-05-032-0/+50
* Define BPFD_LOCK_ASSERT() to assert the BPF descriptor lock.Robert Watson2004-02-291-0/+4
* Forward declare struct proc, struct sockaddr, and struct thread, whichRobert Watson2004-02-261-0/+3
* Forward declare struct bpf_d, struct ifnet, struct image_params, andRobert Watson2004-02-261-1/+5
* Move inet and inet6 related MAC Framework entry points from mac_net.cRobert Watson2004-02-264-655/+807
* Reimplement sysctls handling by MAC framework.Pawel Jakub Dawidek2004-02-223-10/+12
* Update my personal copyrights and NETA copyrights in the kernelRobert Watson2004-02-228-16/+16
* Coalesce pipe allocations and frees. Previously, the pipe codeRobert Watson2004-02-015-63/+65
* Switch TCP over to using the inpcb label when responding in timedRobert Watson2003-12-173-0/+15
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),Robert Watson2003-12-063-5/+5
* Introduce a MAC label reference in 'struct inpcb', which cachesRobert Watson2003-11-183-1/+115
* Implement sockets support for __mac_get_fd() and __mac_set_fd()Robert Watson2003-11-165-7/+79
* Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET andRobert Watson2003-11-161-0/+1
* Abstract the label checking and setting logic fromRobert Watson2003-11-162-13/+24
* Reduce gratuitous redundancy and length in function names:Robert Watson2003-11-162-8/+6
* Whitespace fix.Robert Watson2003-11-161-2/+2
* Reduced prequisites by only using MALLOC_DECLARE() if it is defined.Bruce Evans2003-11-141-0/+4
* Mark __mac_get_pid() as MPSAFE in the comment, as it runs withoutRobert Watson2003-11-122-74/+30
* GC prototype for mac_destroy_vnode_label(), missed in last commit.Robert Watson2003-11-121-1/+0
* Modify the MAC Framework so that instead of embedding a (struct label)Robert Watson2003-11-1210-359/+579
* Whitespace sync to MAC branch, expand comment at the head of the file.Robert Watson2003-11-112-6/+18
* When allocation of a socket peer label fails, scrub what wasRobert Watson2003-11-071-1/+1
* Trim trailing whitespace.Robert Watson2003-11-071-2/+2
* Remove the flags argument from mac_externalize_*_label(), as it's notRobert Watson2003-11-067-24/+24
* Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the objectRobert Watson2003-10-255-15/+15
* Sort type declarations together.Robert Watson2003-10-251-6/+1
* mac_Finish break-out of kern_mac.c into parts:Robert Watson2003-10-222-5512/+10
* Variable cleanup following break-out of kern_mac.c into sys/security/mac:Robert Watson2003-10-222-32/+20
* Rename error_select() to mac_error_select(), and unstaticize so itRobert Watson2003-10-222-10/+8
* Remove non-VFS related code from mac_vfs.c. Leave:Robert Watson2003-10-221-2987/+5
* Remove non-system bits from mac_system.c. Leave:Robert Watson2003-10-221-3692/+2
* Remove non-credential/process-related bits from mac_process.c. Leave:Robert Watson2003-10-221-3473/+8
* Remove non-pipe code from mac_pipe.c. Leave:Robert Watson2003-10-221-3712/+5
* Remove non-network related contents from mac_net.c. Leave:Robert Watson2003-10-221-3027/+3
* The following shared types/constants/interfaces/... are requiredRobert Watson2003-10-221-3756/+70
* Use __BEGIN_DECLS and __END_DECLS around userland function prototypesRobert Watson2003-10-021-0/+2
* If the struct mac copied into the kernel has a negative length, returnRobert Watson2003-09-298-8/+16
* Remove extra tabs indenting MAC library calls; they were there toRobert Watson2003-08-291-21/+20
* Fix a mac_policy_list reference to be a mac_static_policy_listRobert Watson2003-08-268-8/+8