aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_policy.h
Commit message (Expand)AuthorAgeFilesLines
* Correct several issues in the integration of POSIX shared memory objectsRobert Watson2011-09-021-2/+6
* Add the fo_chown and fo_chmod methods to struct fileops and use themKonstantin Belousov2011-08-161-0/+16
* Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson2009-03-081-3/+2
* Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson2009-03-081-32/+35
* Rather than having MAC policies explicitly declare what object typesRobert Watson2009-01-101-30/+3
* Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala2008-10-281-2/+5
* Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson2008-10-281-6/+6
* Add a MAC label, MAC Framework, and MAC policy entry points for IPv6Robert Watson2008-10-261-1/+21
* Add mac_inpcb_check_visible MAC Framework entry point, which is similarBjoern A. Zeeb2008-10-171-0/+3
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-8/+37
* Rework the lifetime management of the kernel implementation of POSIXJohn Baldwin2008-06-271-6/+13
* Remove the posixsem_check_destroy() MAC check. It is semantically identicalJohn Baldwin2008-06-231-3/+0
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson2008-06-131-6/+5
* Make naming of include guards for MAC Framework include files moreRobert Watson2008-04-131-3/+3
* Add a new file descriptor type for IPC shared memory objects and use it toJohn Baldwin2008-01-081-0/+28
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson2007-10-281-5/+0
* Continue to move from generic network entry points in the TrustedBSD MACRobert Watson2007-10-281-5/+9
* Move towards more explicit support for various network protocol stacksRobert Watson2007-10-281-5/+21
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson2007-10-261-5/+5
* Sort entry points in mac_framework.h and mac_policy.h alphabetically byRobert Watson2007-10-251-439/+399
* Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson2007-10-251-8/+8
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moveRobert Watson2007-10-251-2/+2
* Further MAC Framework cleanup: normalize some local variable names andRobert Watson2007-10-251-3/+3
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-422/+422
* Bump MAC_VERSION to 4 and add an 8.x line in the version table. Version 4Robert Watson2007-10-231-1/+2
* Canonicalize naming of local variables for struct ksem and associatedRobert Watson2007-10-211-7/+7
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson2007-09-101-5/+5
* Fix a bunch of warnings due to a missing forward declaration of a struct.Peter Wemm2007-07-051-0/+1
* Add a new MAC framework and policy entry point,Robert Watson2007-06-261-0/+3
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-231-6/+6
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-221-144/+142
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-221-9/+5
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-221-8/+0
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-211-0/+14
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-061-7/+3
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-061-0/+6
* Add missing include guards to mac_internal.h, update include guards inRobert Watson2006-12-281-3/+3
* Centralize definition of MAC_VERSION in mac_policy.h, as it defines theRobert Watson2006-12-281-1/+16
* Re-wrap comments following de-indentation.Robert Watson2006-12-231-13/+11
* Comment LABEL_TO_SLOT() macro, including observing that we'd like to improveRobert Watson2006-12-201-0/+8
* Fix LOR between the syncache and inpcb locks when MAC is present in theChristian S.J. Peron2006-12-131-0/+10
* Sweep kernel replacing suser(9) calls with priv(9) calls, assigningRobert Watson2006-11-061-0/+4
* Forward declare struct cdev, since arguments of this type are used inRobert Watson2006-10-301-0/+1
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson2006-10-221-0/+2
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointChristian S.J. Peron2006-09-121-0/+3
* Add struct msg to the forwarded declared data structures in mac_policy.h.Robert Watson2006-09-091-0/+1
* Make mpo_associate_nfsd_label() return void, not int, to matchRobert Watson2006-08-061-1/+1
* Reconstitute struct mac_policy_ops by breaking out individual functionRobert Watson2006-04-261-296/+575
* Introduce a new MAC entry point for label initialization of the NFS daemon'sChristian S.J. Peron2006-04-061-0/+1
* Complete removal of mac_create_root_mount/mpo_create_root_mount MACRobert Watson2005-10-021-2/+0
generated by cgit v1.3 (git 2.53.0) at 2026-08-01 07:58:29 +0000