src/sys/security/mac, branch releng/12.4

Require that MAC label buffers be able to store a non-empty string.

2018-08-01T03:46:07Z

The buffer size may be used to initialize an sbuf in MAC_POLICY_EXTERNALIZE, and without this constraint it's possible to trigger an assertion failure in the sbuf code. With INVARIANTS disabled, the first attempt to write to the sbuf will fail. Reported by: pho Reviewed by: delphij MFC after: 1 week Differential Revision: https://reviews.freebsd.org/D16527

Use an accessor function to access ifr_data.

2018-03-30T18:50:13Z

This fixes 32-bit compat (no ioctl command defintions are required as struct ifreq is the same size). This is believed to be sufficent to fully support ifconfig on 32-bit systems. Reviewed by: kib Obtained from: CheriBSD MFC after: 1 week Relnotes: yes Sponsored by: DARPA, AFRL Differential Revision: https://reviews.freebsd.org/D14900

Reduce duplication in __mac_*_(file|link)(2) implementation.

2018-02-15T18:57:22Z

Reviewed by: rwatson Obtained from: CheriBSD Sponsored by: DARPA, AFRL Differential Revision: https://reviews.freebsd.org/D14175

Do pass removing some write-only variables from the kernel.

2017-12-25T04:48:39Z

This reduces noise when kernel is compiled by newer GCC versions, such as one used by external toolchain ports. Reviewed by: kib, andrew(sys/arm and sys/arm64), emaste(partial), erj(partial) Reviewed by: jhb (sys/dev/pci/* sys/kern/vfs_aio.c and sys/kern/kern_synch.c) Differential Revision: https://reviews.freebsd.org/D10385

Fix improper use of "its".

2016-11-08T23:59:41Z

sys/security: minor spelling fixes.

2016-05-06T16:59:04Z

No functional change.

Fix style issues around existing SDT probes.

2015-12-16T23:39:27Z

- Use SDT_PROBE() instead of SDT_PROBE(). This has no functional effect at the moment, but will be needed for some future changes. - Don't hardcode the module component of the probe identifier. This is set automatically by the SDT framework. MFC after: 1 week

cred: add proc_set_cred helper

2015-03-16T00:10:03Z

The goal here is to provide one place altering process credentials. This eases debugging and opens up posibilities to do additional work when such an action is performed.

Update kernel inclusions of capability.h to use capsicum.h instead; some

2014-03-16T10:55:57Z

further refinement is required as some device drivers intended to be portable over FreeBSD versions rely on __FreeBSD_version to decide whether to include capability.h. MFC after: 3 weeks

Remove AppleTalk support.

2014-03-14T06:29:43Z

AppleTalk was a network transport protocol for Apple Macintosh devices in 80s and then 90s. Starting with Mac OS X in 2000 the AppleTalk was a legacy protocol and primary networking protocol is TCP/IP. The last Mac OS X release to support AppleTalk happened in 2009. The same year routing equipment vendors (namely Cisco) end their support. Thus, AppleTalk won't be supported in FreeBSD 11.0-RELEASE.