| Commit message (Expand) | Author | Age | Files | Lines |
| * | New setcred() system call and associated MAC hooks | Olivier Certner | 2025-04-03 | 1 | -1/+5 |
| * | sys: Remove $FreeBSD$: two-line .h pattern | Warner Losh | 2023-08-16 | 1 | -2/+0 |
| * | mac_ipacl: new MAC policy module to limit jail/vnet IP configuration | Shivank Garg | 2023-07-26 | 1 | -0/+9 |
| * | kdb: Modify securelevel policy | Mark Johnston | 2023-03-30 | 1 | -0/+1 |
| * | mac: cheaper check for mac_pipe_check_read | Mateusz Guzik | 2022-08-17 | 1 | -1/+16 |
| * | mac: s/0/false/ in macros denoting probe enablement | Mateusz Guzik | 2022-08-11 | 1 | -14/+14 |
| * | mac: kdb/ddb framework hooks | Mitchell Horne | 2022-07-18 | 1 | -0/+10 |
| * | mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmit | Mateusz Guzik | 2021-06-29 | 1 | -2/+32 |
| * | mac: cheaper check for mac_vnode_check_readlink | Mateusz Guzik | 2021-01-08 | 1 | -1/+16 |
| * | pipe: allow for lockless pipe_stat | Mateusz Guzik | 2020-11-19 | 1 | -2/+23 |
| * | mac_framework.h: fix build with DEBUG_VFS_LOCKS and !MAC | Andriy Gapon | 2020-09-03 | 1 | -1/+1 |
| * | mac: even up all entry points to the same scheme | Mateusz Guzik | 2020-08-06 | 1 | -7/+38 |
| * | vfs: add a cheaper entry for mac_vnode_check_access | Mateusz Guzik | 2020-08-05 | 1 | -1/+13 |
| * | Fix tinderbox build after r363714 | Mateusz Guzik | 2020-07-30 | 1 | -0/+8 |
| * | vfs: elide MAC-induced locking on rename if there are no relevant hoooks | Mateusz Guzik | 2020-07-29 | 1 | -0/+4 |
| * | vfs: add the infrastructure for lockless lookup | Mateusz Guzik | 2020-07-25 | 1 | -1/+2 |
| * | vfs: fix vn_poll performance with either MAC or AUDIT | Mateusz Guzik | 2020-07-16 | 1 | -0/+4 |
| * | vfs: fix MAC/AUDIT mismatch in vn_poll | Mateusz Guzik | 2020-07-16 | 1 | -0/+10 |
| * | vfs: use mac fastpath for lookup, open, read, write, mmap | Mateusz Guzik | 2020-02-13 | 1 | -9/+89 |
| * | mac: implement fast path for checks | Mateusz Guzik | 2020-02-13 | 1 | -2/+21 |
| * | Remove AppleTalk support. | Gleb Smirnoff | 2014-03-14 | 1 | -2/+0 |
| * | Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd. | Konstantin Belousov | 2013-08-21 | 1 | -0/+4 |
| * | Correct several issues in the integration of POSIX shared memory objects | Robert Watson | 2011-09-02 | 1 | -2/+4 |
| * | Add the fo_chown and fo_chmod methods to struct fileops and use them | Konstantin Belousov | 2011-08-16 | 1 | -0/+8 |
| * | Remove 'uio' argument from MAC Framework and MAC policy entry points for | Robert Watson | 2009-03-08 | 1 | -3/+2 |
| * | Improve the consistency of MAC Framework and MAC policy entry point | Robert Watson | 2009-03-08 | 1 | -23/+20 |
| * | Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary | Edward Tomasz Napierala | 2008-10-28 | 1 | -2/+3 |
| * | Rename mac_cred_mmapped_drop_perms(), which revokes access to virtual | Robert Watson | 2008-10-28 | 1 | -2/+1 |
| * | Rename three MAC entry points from _proc_ to _cred_ to reflect the fact | Robert Watson | 2008-10-28 | 1 | -3/+3 |
| * | Add a MAC label, MAC Framework, and MAC policy entry points for IPv6 | Robert Watson | 2008-10-26 | 1 | -1/+9 |
| * | Add mac_inpcb_check_visible MAC Framework entry point, which is similar | Bjoern A. Zeeb | 2008-10-17 | 1 | -0/+1 |
| * | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson | 2008-08-23 | 1 | -6/+4 |
| * | Rework the lifetime management of the kernel implementation of POSIX | John Baldwin | 2008-06-27 | 1 | -3/+8 |
| * | Remove the posixsem_check_destroy() MAC check. It is semantically identical | John Baldwin | 2008-06-23 | 1 | -1/+0 |
| * | The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the | Robert Watson | 2008-06-13 | 1 | -6/+6 |
| * | Make naming of include guards for MAC Framework include files more | Robert Watson | 2008-04-13 | 1 | -3/+3 |
| * | Add a new file descriptor type for IPC shared memory objects and use it to | John Baldwin | 2008-01-08 | 1 | -0/+13 |
| * | Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Framework | Robert Watson | 2007-10-28 | 1 | -2/+0 |
| * | Continue to move from generic network entry points in the TrustedBSD MAC | Robert Watson | 2007-10-28 | 1 | -2/+3 |
| * | Move towards more explicit support for various network protocol stacks | Robert Watson | 2007-10-28 | 1 | -2/+7 |
| * | Update comment following MAC Framework entry point renaming and | Robert Watson | 2007-10-26 | 1 | -1/+6 |
| * | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | Robert Watson | 2007-10-26 | 1 | -2/+2 |
| * | Sort entry points in mac_framework.h and mac_policy.h alphabetically by | Robert Watson | 2007-10-25 | 1 | -190/+175 |
| * | Normalize TCP syncache-related MAC Framework entry points to match most | Robert Watson | 2007-10-25 | 1 | -4/+4 |
| * | Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and move | Robert Watson | 2007-10-25 | 1 | -1/+1 |
| * | Further MAC Framework cleanup: normalize some local variable names and | Robert Watson | 2007-10-25 | 1 | -2/+2 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson | 2007-10-24 | 1 | -193/+192 |
| * | Canonicalize naming of local variables for struct ksem and associated | Robert Watson | 2007-10-21 | 1 | -7/+7 |
| * | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | Robert Watson | 2007-09-10 | 1 | -2/+2 |
| * | Add a new MAC framework and policy entry point, | Robert Watson | 2007-06-26 | 1 | -0/+3 |