| Commit message (Expand) | Author | Age | Files | Lines |
| * | Add an extra comment to the SDT probes definition. This allows us to get | Rui Paulo | 2010-08-22 | 1 | -10/+10 |
| * | Add internal 'mac_policy_count' counter to the MAC Framework, which is a | Robert Watson | 2009-06-02 | 1 | -0/+1 |
| * | Convert the MAC Framework from using rwlocks to rmlocks to stabilize | Robert Watson | 2009-05-27 | 1 | -10/+21 |
| * | Rename MAC Framework-internal macros used to invoke policy entry points: | Robert Watson | 2009-05-01 | 1 | -32/+32 |
| * | Rework MAC Framework synchronization in a number of ways in order to | Robert Watson | 2009-03-14 | 1 | -19/+80 |
| * | Add static DTrace probes for MAC Framework access control checks and | Robert Watson | 2009-03-08 | 1 | -1/+70 |
| * | Rather than having MAC policies explicitly declare what object types | Robert Watson | 2009-01-10 | 1 | -0/+29 |
| * | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson | 2008-08-23 | 1 | -3/+5 |
| * | Make naming of include guards for MAC Framework include files more | Robert Watson | 2008-04-13 | 1 | -3/+3 |
| * | Move towards more explicit support for various network protocol stacks | Robert Watson | 2007-10-28 | 1 | -0/+4 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson | 2007-10-24 | 1 | -15/+19 |
| * | Introduce accessor functions mac_label_get() and mac_label_set() to replace | Robert Watson | 2007-02-06 | 1 | -1/+18 |
| * | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | Robert Watson | 2007-02-06 | 1 | -0/+4 |
| * | Add missing include guards to mac_internal.h, update include guards in | Robert Watson | 2006-12-28 | 1 | -0/+5 |
| * | Centralize definition of MAC_VERSION in mac_policy.h, as it defines the | Robert Watson | 2006-12-28 | 1 | -1/+0 |
| * | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | Robert Watson | 2006-12-21 | 1 | -4/+0 |
| * | Clean up comments, trailing white space. | Robert Watson | 2006-12-20 | 1 | -17/+27 |
| * | Add a new priv(9) kernel interface for checking the availability of | Robert Watson | 2006-11-06 | 1 | -0/+34 |
| * | Remove MAC_DEBUG label counters, which were used to debug leaks and | Robert Watson | 2006-09-20 | 1 | -16/+0 |
| * | Declare security and security.bsd sysctl hierarchies in sysctl.h along | Robert Watson | 2006-09-17 | 1 | -1/+0 |
| * | Remove extern declaration of mac_enforce_sysv, as it's not present in | Robert Watson | 2004-10-22 | 1 | -1/+0 |
| * | Move inet and inet6 related MAC Framework entry points from mac_net.c | Robert Watson | 2004-02-26 | 1 | -1/+5 |
| * | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson | 2004-02-22 | 1 | -2/+2 |
| * | Implement sockets support for __mac_get_fd() and __mac_set_fd() | Robert Watson | 2003-11-16 | 1 | -0/+6 |
| * | Abstract the label checking and setting logic from | Robert Watson | 2003-11-16 | 1 | -0/+3 |
| * | Reduced prequisites by only using MALLOC_DECLARE() if it is defined. | Bruce Evans | 2003-11-14 | 1 | -0/+4 |
| * | Modify the MAC Framework so that instead of embedding a (struct label) | Robert Watson | 2003-11-12 | 1 | -5/+9 |
| * | Trim trailing whitespace. | Robert Watson | 2003-11-07 | 1 | -2/+2 |
| * | Remove the flags argument from mac_externalize_*_label(), as it's not | Robert Watson | 2003-11-06 | 1 | -3/+3 |
| * | Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the object | Robert Watson | 2003-10-25 | 1 | -4/+4 |
| * | Sort type declarations together. | Robert Watson | 2003-10-25 | 1 | -6/+1 |
| * | The following shared types/constants/interfaces/... are required | Robert Watson | 2003-10-22 | 1 | -3756/+70 |
| * | If the struct mac copied into the kernel has a negative length, return | Robert Watson | 2003-09-29 | 1 | -1/+2 |
| * | Fix a mac_policy_list reference to be a mac_static_policy_list | Robert Watson | 2003-08-26 | 1 | -1/+1 |
| * | Introduce two new MAC Framework and MAC policy entry points: | Robert Watson | 2003-08-21 | 1 | -0/+19 |
| * | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | Robert Watson | 2003-08-21 | 1 | -0/+32 |
| * | Remove about 40 lines of #ifdef/#endif by using new macros | Robert Watson | 2003-08-20 | 1 | -70/+31 |
| * | Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF. | Robert Watson | 2003-08-01 | 1 | -28/+18 |
| * | Redesign the externalization APIs from the MAC Framework to | Robert Watson | 2003-06-23 | 1 | -40/+20 |
| * | Add a f_vnode field to struct file. | Poul-Henning Kamp | 2003-06-22 | 1 | -2/+2 |
| * | Use __FBSDID(). | David E. O'Brien | 2003-06-11 | 1 | -4/+4 |
| * | Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables and | Robert Watson | 2003-05-08 | 1 | -8/+8 |
| * | Clean up locking for the MAC Framework: | Robert Watson | 2003-05-07 | 1 | -78/+180 |
| * | - Acquire the vm_object's lock when performing vm_object_page_clean(). | Alan Cox | 2003-04-24 | 1 | -0/+2 |
| * | Update NAI copyright to 2003, missed in earlier commits and merges. | Robert Watson | 2003-04-18 | 1 | -1/+1 |
| * | mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, so | Robert Watson | 2003-04-15 | 1 | -3/+2 |
| * | Move MAC label storage for mbufs into m_tags from the m_pkthdr structure, | Robert Watson | 2003-04-14 | 1 | -17/+118 |
| * | Abstract access to the mbuf header label behind a new function, | Robert Watson | 2003-04-14 | 1 | -25/+80 |
| * | Introduce an M_ASSERTPKTHDR() macro which performs the very common task | Dag-Erling Smørgrav | 2003-04-08 | 1 | -2/+2 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | Robert Watson | 2003-03-26 | 1 | -4/+12 |