| Commit message (Expand) | Author | Age | Files | Lines |
| * | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | Robert Watson | 2007-04-23 | 1 | -4/+5 |
| * | Apply variable name normalization to MAC policies: adopt global conventions | Robert Watson | 2007-04-23 | 1 | -216/+213 |
| * | In the MAC Framework implementation, file systems have two per-mountpoint | Robert Watson | 2007-04-22 | 1 | -12/+8 |
| * | Allow MAC policy modules to control access to audit configuration system | Robert Watson | 2007-04-21 | 1 | -0/+40 |
| * | Introduce accessor functions mac_label_get() and mac_label_set() to replace | Robert Watson | 2007-02-06 | 1 | -2/+2 |
| * | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | Robert Watson | 2007-02-06 | 1 | -1/+0 |
| * | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | Robert Watson | 2006-12-22 | 1 | -2/+1 |
| * | Teach the MAC policies which utilize mbuf labeling the new syncache | Christian S.J. Peron | 2006-12-13 | 1 | -0/+25 |
| * | Merge posix4/* into normal kernel hierarchy. | Tom Rhodes | 2006-11-11 | 1 | -2/+1 |
| * | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | Christian S.J. Peron | 2006-09-12 | 1 | -0/+12 |
| * | Fix panic associated with file creation via RPC/NFS when the MLS policy | Christian S.J. Peron | 2006-08-26 | 1 | -0/+12 |
| * | Add #include <sys/sx.h>, devfs is going to require this shortly. | Poul-Henning Kamp | 2005-09-19 | 1 | -0/+1 |
| * | Remove mac_create_root_mount() and mpo_create_root_mount(), which | Robert Watson | 2005-09-19 | 1 | -14/+0 |
| * | When devfs cloning takes place, provide access to the credential of the | Robert Watson | 2005-07-14 | 1 | -2/+2 |
| * | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | Robert Watson | 2005-07-05 | 1 | -22/+0 |
| * | Gratuitous renaming of four System V Semaphore MAC Framework entry | Robert Watson | 2005-06-07 | 1 | -6/+6 |
| * | Introduce MAC Framework and MAC Policy entry points to label and control | Robert Watson | 2005-05-04 | 1 | -0/+59 |
| * | Move MAC check_vnode_mmap entry point out from being exclusive to | Christian S.J. Peron | 2005-04-14 | 1 | -2/+3 |
| * | Remove policy references to mpo_check_vnode_mprotect(), which is | Robert Watson | 2005-01-26 | 1 | -1/+0 |
| * | Implement MLS confidentiality protection for System V IPC objects | Robert Watson | 2005-01-22 | 1 | -5/+391 |
| * | Introduce SLOT_SET macro and use it in place of casts as lvalues. | Alexander Kabaev | 2004-07-28 | 1 | -3/+4 |
| * | Rename Biba and MLS _single label elements to _effective, which more | Robert Watson | 2004-07-16 | 1 | -168/+168 |
| * | Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on | Robert Watson | 2004-06-24 | 1 | -0/+1 |
| * | Do the dreaded s/dev_t/struct cdev */ | Poul-Henning Kamp | 2004-06-16 | 1 | -1/+1 |
| * | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson | 2004-02-22 | 1 | -2/+2 |
| * | Coalesce pipe allocations and frees. Previously, the pipe code | Robert Watson | 2004-02-01 | 1 | -8/+8 |
| * | Switch TCP over to using the inpcb label when responding in timed | Robert Watson | 2003-12-17 | 1 | -0/+13 |
| * | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | Robert Watson | 2003-12-06 | 1 | -13/+1 |
| * | Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9). | Robert Watson | 2003-11-18 | 1 | -6/+6 |
| * | Introduce a MAC label reference in 'struct inpcb', which caches | Robert Watson | 2003-11-18 | 1 | -0/+45 |
| * | Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as they | Robert Watson | 2003-11-17 | 1 | -7/+0 |
| * | Implement sockets support for __mac_get_fd() and __mac_set_fd() | Robert Watson | 2003-11-16 | 1 | -0/+1 |
| * | Remove extraneous fullpath variable, which broke lint build. This | Robert Watson | 2003-11-12 | 1 | -1/+1 |
| * | Modify the MAC Framework so that instead of embedding a (struct label) | Robert Watson | 2003-11-12 | 1 | -61/+61 |
| * | Implementations of mpo_check_vnode_deleteextattr() and | Robert Watson | 2003-08-21 | 1 | -0/+39 |
| * | Improve consistency with the Biba policy -- rename | Robert Watson | 2003-07-31 | 1 | -23/+10 |
| * | Redesign the externalization APIs from the MAC Framework to | Robert Watson | 2003-06-23 | 1 | -26/+14 |
| * | Use mac_biba_label_copy() and mac_mls_label_copy() to implement the | Robert Watson | 2003-06-02 | 1 | -0/+1 |
| * | Rewrite Biba and MLS label externalization code to use sbufs instead | Robert Watson | 2003-05-31 | 1 | -53/+50 |
| * | Make sure all character pointers are properly initialized; this was | Robert Watson | 2003-05-30 | 1 | -4/+5 |
| * | Use strsep() in preference to manual string parsing for Biba and MLS | Robert Watson | 2003-05-29 | 1 | -48/+39 |
| * | Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Test | Robert Watson | 2003-04-15 | 1 | -1/+1 |
| * | Trim "trustedbsd_" from the front of the policy module "short names"; | Robert Watson | 2003-03-27 | 1 | -1/+1 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | Robert Watson | 2003-03-26 | 1 | -1/+1 |
| * | Expand scope of the MLS policy to include a new entry point available | Robert Watson | 2003-03-25 | 1 | -0/+20 |
| * | Back out M_* changes, per decision of the TRB. | Warner Losh | 2003-02-19 | 1 | -1/+1 |
| * | Place more stringent checks on process credential relabeling for the Biba | Robert Watson | 2003-02-04 | 1 | -6/+11 |
| * | Rename the variable 'grade' to 'type' in interface parsing and | Robert Watson | 2003-02-04 | 1 | -5/+5 |
| * | Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. | Alfred Perlstein | 2003-01-21 | 1 | -1/+1 |
| * | Default policies to on: if you load them or compile them into your | Robert Watson | 2002-12-10 | 1 | -1/+1 |