summaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_system.c
Commit message (Expand)AuthorAgeFilesLines
...
* Introduce a condition variable to avoid returning EBUSY whenRobert Watson2002-11-131-29/+52
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sinceRobert Watson2002-11-121-7/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform aRobert Watson2002-11-111-2/+0
* Add an explicit execlabel argument to exec-related MAC policy entryRobert Watson2002-11-081-3/+4
* Bring in two sets of changes:Robert Watson2002-11-051-6/+56
* Assert that appropriate vnodes are locked in mac_execve_will_transition().Robert Watson2002-11-051-0/+8
* Permit MAC policies to instrument the access control decisions forRobert Watson2002-11-041-0/+31
* Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MACRobert Watson2002-11-041-6/+0
* License clarification and wording changes: NAI has approved removal ofRobert Watson2002-11-041-7/+4
* Introduce mac_check_system_settime(), a MAC check allowing policies toRobert Watson2002-11-031-0/+13
* Add MAC checks for various kenv() operations: dump, get, set, unset,Robert Watson2002-11-011-0/+52
* Move to C99 sparse structure initialization for the mac_policy_opsRobert Watson2002-10-301-583/+0
* While 'mode_t' seemed like a good idea for the access mode argument forRobert Watson2002-10-301-3/+3
* An inappropriate ASSERT slipped in during the recent merge of theRobert Watson2002-10-281-2/+0
* Centrally manage enforcement of {reboot,swapon,sysctl} using theRobert Watson2002-10-271-13/+9
* Implement mac_check_system_sysctl(), a MAC Framework entry point toRobert Watson2002-10-271-0/+28
* Hook up mac_check_system_reboot(), a MAC Framework entry point thatRobert Watson2002-10-271-0/+23
* Merge from MAC tree: rename mac_check_vnode_swapon() toRobert Watson2002-10-271-18/+18
* Slightly change the semantics of vnode labels for MAC: rather thanRobert Watson2002-10-261-485/+89
* Comment describing the semantics of mac_late.Robert Watson2002-10-251-1/+6
* Introduce MAC_CHECK_VNODE_SWAPON, which permits MAC policies toRobert Watson2002-10-221-0/+22
* Missed in previous merge: export sizeof(struct oldmac) rather thanRobert Watson2002-10-221-1/+1
* Support the new MAC user API in kernel: modify existing system callsRobert Watson2002-10-221-169/+917
* Use if_printf(ifp, "blah") instead ofBrooks Davis2002-10-211-2/+1
* If MAC_MAX_POLICIES isn't defined, don't try to define it, just let theRobert Watson2002-10-201-3/+1
* Make sure to clear the 'registered' flag for MAC policies when theyRobert Watson2002-10-191-0/+1
* Integrate mac_check_socket_send() and mac_check_socket_receive()Robert Watson2002-10-061-0/+34
* Sync from MAC tree: break out the single mmap entry point intoRobert Watson2002-10-061-18/+63
* Modify label allocation semantics for sockets: pass in soalloc's mallocRobert Watson2002-10-051-13/+69
* Integrate a devfs/MAC fix from the MAC tree: avoid a race condition duringRobert Watson2002-10-051-0/+13
* Merge support for mac_check_vnode_link(), a MAC framework/policy entryRobert Watson2002-10-051-0/+30
* While the MAC API has supported the ability to handle M_NOWAIT passedRobert Watson2002-10-051-3/+11
* Rearrange object and label init/destroy functions to match theRobert Watson2002-10-051-101/+101
* Sync to MAC tree: use 'flag' instead of 'how' for mac_init_mbuf();Robert Watson2002-10-051-3/+3
* Another big diff, little functional change: move label internalization,Robert Watson2002-10-051-65/+65
* Move all object label init/destroy routines to the head of theRobert Watson2002-10-051-285/+285
* Synch from TrustedBSD MAC tree:Robert Watson2002-10-051-3/+25
* Cosmetic line wrap synchronization.Robert Watson2002-10-051-2/+4
* Push the debugging obect label counters into security.mac.debug.countersRobert Watson2002-10-051-11/+16
* Begin another merge from the TrustedBSD MAC branch:Robert Watson2002-10-051-68/+86
* Add a new MAC entry point, mac_thread_userret(td), which permits policyRobert Watson2002-10-021-0/+11
* Remember to include "opt_devfs.h" so we get any relevant changesPoul-Henning Kamp2002-10-011-0/+1
* Improve locking of pipe mutexes in the context of MAC:Robert Watson2002-10-011-0/+34
* Push 'security.mac.debug_label_fallback' behind options MAC_DEBUG.Robert Watson2002-10-011-10/+14
* Add tunables for the existing sysctl twiddles for pipe and vmRobert Watson2002-09-301-0/+2
* Remove un-needed stack variable 'ops'.Robert Watson2002-09-181-3/+2
* Add a toggle to disable VM enforcement.Robert Watson2002-09-181-0/+7
* At the cost of seeming a little gauche, make use of more traditionalRobert Watson2002-09-181-4/+4
* Remove all use of vnode->v_tag, replacing with appropriate substitutes.Nate Lawson2002-09-141-4/+4
* Add security.mac.mmap_revocation, a flag indicating whether weRobert Watson2002-09-091-0/+8
generated by cgit v1.3 (git 2.53.0) at 2026-04-18 23:55:29 +0000