summaryrefslogtreecommitdiff
path: root/sys/security/mac_mls/mac_mls.c
Commit message (Expand)AuthorAgeFilesLines
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-231-4/+5
* Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson2007-04-231-216/+213
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-221-12/+8
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-211-0/+40
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-061-2/+2
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-061-1/+0
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-2/+1
* Teach the MAC policies which utilize mbuf labeling the new syncacheChristian S.J. Peron2006-12-131-0/+25
* Merge posix4/* into normal kernel hierarchy.Tom Rhodes2006-11-111-2/+1
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointChristian S.J. Peron2006-09-121-0/+12
* Fix panic associated with file creation via RPC/NFS when the MLS policyChristian S.J. Peron2006-08-261-0/+12
* Add #include <sys/sx.h>, devfs is going to require this shortly.Poul-Henning Kamp2005-09-191-0/+1
* Remove mac_create_root_mount() and mpo_create_root_mount(), whichRobert Watson2005-09-191-14/+0
* When devfs cloning takes place, provide access to the credential of theRobert Watson2005-07-141-2/+2
* Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which isRobert Watson2005-07-051-22/+0
* Gratuitous renaming of four System V Semaphore MAC Framework entryRobert Watson2005-06-071-6/+6
* Introduce MAC Framework and MAC Policy entry points to label and controlRobert Watson2005-05-041-0/+59
* Move MAC check_vnode_mmap entry point out from being exclusive toChristian S.J. Peron2005-04-141-2/+3
* Remove policy references to mpo_check_vnode_mprotect(), which isRobert Watson2005-01-261-1/+0
* Implement MLS confidentiality protection for System V IPC objectsRobert Watson2005-01-221-5/+391
* Introduce SLOT_SET macro and use it in place of casts as lvalues.Alexander Kabaev2004-07-281-3/+4
* Rename Biba and MLS _single label elements to _effective, which moreRobert Watson2004-07-161-168/+168
* Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels onRobert Watson2004-06-241-0/+1
* Do the dreaded s/dev_t/struct cdev */Poul-Henning Kamp2004-06-161-1/+1
* Update my personal copyrights and NETA copyrights in the kernelRobert Watson2004-02-221-2/+2
* Coalesce pipe allocations and frees. Previously, the pipe codeRobert Watson2004-02-011-8/+8
* Switch TCP over to using the inpcb label when responding in timedRobert Watson2003-12-171-0/+13
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),Robert Watson2003-12-061-13/+1
* Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9).Robert Watson2003-11-181-6/+6
* Introduce a MAC label reference in 'struct inpcb', which cachesRobert Watson2003-11-181-0/+45
* Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as theyRobert Watson2003-11-171-7/+0
* Implement sockets support for __mac_get_fd() and __mac_set_fd()Robert Watson2003-11-161-0/+1
* Remove extraneous fullpath variable, which broke lint build. ThisRobert Watson2003-11-121-1/+1
* Modify the MAC Framework so that instead of embedding a (struct label)Robert Watson2003-11-121-61/+61
* Implementations of mpo_check_vnode_deleteextattr() andRobert Watson2003-08-211-0/+39
* Improve consistency with the Biba policy -- renameRobert Watson2003-07-311-23/+10
* Redesign the externalization APIs from the MAC Framework toRobert Watson2003-06-231-26/+14
* Use mac_biba_label_copy() and mac_mls_label_copy() to implement theRobert Watson2003-06-021-0/+1
* Rewrite Biba and MLS label externalization code to use sbufs insteadRobert Watson2003-05-311-53/+50
* Make sure all character pointers are properly initialized; this wasRobert Watson2003-05-301-4/+5
* Use strsep() in preference to manual string parsing for Biba and MLSRobert Watson2003-05-291-48/+39
* Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and TestRobert Watson2003-04-151-1/+1
* Trim "trustedbsd_" from the front of the policy module "short names";Robert Watson2003-03-271-1/+1
* Modify the mac_init_ipq() MAC Framework entry point to accept anRobert Watson2003-03-261-1/+1
* Expand scope of the MLS policy to include a new entry point availableRobert Watson2003-03-251-0/+20
* Back out M_* changes, per decision of the TRB.Warner Losh2003-02-191-1/+1
* Place more stringent checks on process credential relabeling for the BibaRobert Watson2003-02-041-6/+11
* Rename the variable 'grade' to 'type' in interface parsing andRobert Watson2003-02-041-5/+5
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.Alfred Perlstein2003-01-211-1/+1
* Default policies to on: if you load them or compile them into yourRobert Watson2002-12-101-1/+1