aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* MFC mac_bsdextended.c:1.10:Robert Watson2002-12-311-0/+9
* This commit was manufactured by cvs2svn to create branch 'RELENG_5_0'.cvs2svn2002-12-1311-31275/+0
* Default policies to on: if you load them or compile them into yourRobert Watson2002-12-107-7/+7
* Remove dm_root entry from struct devfs_mount. It's never set, and isRobert Watson2002-12-0916-131/+164
* Remove a const that generates a warning: the const isn't strictlyRobert Watson2002-12-041-1/+1
* License tweak: remove clause 3 per permission of NAI.Robert Watson2002-12-032-6/+0
* Unhook the old LOMAC module, now replaced with mac_lomac.Robert Watson2002-12-0327-6787/+0
* Correct two warnings by staticizing a function and removing an unusedRobert Watson2002-11-261-11/+1
* Import an implementation of LOMAC (Low-Watermark Mandatory AccessRobert Watson2002-11-262-0/+2842
* Un-staticize mac_cred_mmapped_drop_perms() so that it may be usedRobert Watson2002-11-269-8/+9
* Introduce p_label, extensible security label storage for the MAC frameworkRobert Watson2002-11-2010-8/+204
* Merge kld access control checks from the MAC tree: these access controlRobert Watson2002-11-1910-0/+375
* Introduce a condition variable to avoid returning EBUSY whenRobert Watson2002-11-138-232/+416
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sinceRobert Watson2002-11-1215-108/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform aRobert Watson2002-11-118-16/+0
* Update MAC modules for changes in arguments for exec MAC policyRobert Watson2002-11-087-14/+68
* Add an explicit execlabel argument to exec-related MAC policy entryRobert Watson2002-11-089-27/+36
* Update policy modules for changes in arguments associated with supportRobert Watson2002-11-056-12/+18
* Bring in two sets of changes:Robert Watson2002-11-0510-55/+467
* Since neither the Biba policy nor the MLS policy make use ofRobert Watson2002-11-052-46/+0
* Assert that appropriate vnodes are locked in mac_execve_will_transition().Robert Watson2002-11-058-0/+64
* Implement mpo_check_system_acct and mpo_check_system_settime() for Biba:Robert Watson2002-11-041-0/+46
* Correct use of mac_biba_subject_privileged() in swapon() code.Robert Watson2002-11-041-2/+4
* Permit MAC policies to instrument the access control decisions forRobert Watson2002-11-0410-0/+253
* Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MACRobert Watson2002-11-048-48/+0
* License and wording updates: NAI has authorized the removal of clauseRobert Watson2002-11-0413-91/+52
* License clarification and wording changes: NAI has approved removal ofRobert Watson2002-11-0410-70/+40
* Introduce mac_check_system_settime(), a MAC check allowing policies toRobert Watson2002-11-0310-0/+106
* Change privilege model for mac_partition such that BSD superuser can changeRobert Watson2002-11-031-6/+4
* Fix some warnings on 64 bit architectures. The vn_extattr_get()Maxime Henrion2002-11-022-4/+2
* Add MAC checks for various kenv() operations: dump, get, set, unset,Robert Watson2002-11-0110-0/+425
* Move to C99 sparse structure initialization for the mac_policy_opsRobert Watson2002-10-3018-6258/+729
* Various minor type, prototype tweaks -- clean up cruft due to lack ofRobert Watson2002-10-305-10/+10
* While 'mode_t' seemed like a good idea for the access mode argument forRobert Watson2002-10-3016-41/+41
* Try again to fix the KASSERT.Robert Watson2002-10-301-1/+1
* Fix a KASSERT bug that showed up only in the LINT build, not theRobert Watson2002-10-301-1/+1
* Hook up no-op stubs for reboot, swapon, sysctl entry points.Robert Watson2002-10-292-0/+58
* Implement Biba policy entry points for mac_check_system_swapon()Robert Watson2002-10-291-0/+59
* Require Biba privilege to relabel a network interface.Robert Watson2002-10-291-0/+7
* Correct a typo in a previously commented include entry that was madeRobert Watson2002-10-281-1/+1
* Remove all reference to 'struct oldmac', since it's no longer requiredRobert Watson2002-10-283-49/+61
* Add a return type for mac_biba_high_single(), apparently lost in anRobert Watson2002-10-281-0/+1
* Rename mac_biba_subject_equal_ok() to mac_biba_subject_privileged()Robert Watson2002-10-281-6/+6
* Zero the trusted_interface buffer before starting parsing.Robert Watson2002-10-281-0/+6
* An inappropriate ASSERT slipped in during the recent merge of theRobert Watson2002-10-288-16/+0
* Centrally manage enforcement of {reboot,swapon,sysctl} using theRobert Watson2002-10-278-104/+72
* Implement mac_check_system_sysctl(), a MAC Framework entry point toRobert Watson2002-10-2710-0/+231
* Hook up mac_check_system_reboot(), a MAC Framework entry point thatRobert Watson2002-10-2710-0/+187
* Merge from MAC tree: rename mac_check_vnode_swapon() toRobert Watson2002-10-2710-148/+148
* Slightly change the semantics of vnode labels for MAC: rather thanRobert Watson2002-10-2615-4151/+1091
generated by cgit v1.3 (git 2.53.0) at 2026-05-19 14:10:52 +0000