summaryrefslogtreecommitdiff
path: root/sys/security/mac
Commit message (Expand)AuthorAgeFilesLines
* This commit was manufactured by cvs2svn to create branch 'RELENG_5_2'.cvs2svn2003-12-074-3275/+0
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),Robert Watson2003-12-063-5/+5
* Introduce a MAC label reference in 'struct inpcb', which cachesRobert Watson2003-11-183-1/+115
* Implement sockets support for __mac_get_fd() and __mac_set_fd()Robert Watson2003-11-165-7/+79
* Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET andRobert Watson2003-11-161-0/+1
* Abstract the label checking and setting logic fromRobert Watson2003-11-162-13/+24
* Reduce gratuitous redundancy and length in function names:Robert Watson2003-11-162-8/+6
* Whitespace fix.Robert Watson2003-11-161-2/+2
* Reduced prequisites by only using MALLOC_DECLARE() if it is defined.Bruce Evans2003-11-141-0/+4
* Mark __mac_get_pid() as MPSAFE in the comment, as it runs withoutRobert Watson2003-11-122-74/+30
* GC prototype for mac_destroy_vnode_label(), missed in last commit.Robert Watson2003-11-121-1/+0
* Modify the MAC Framework so that instead of embedding a (struct label)Robert Watson2003-11-1210-359/+579
* Whitespace sync to MAC branch, expand comment at the head of the file.Robert Watson2003-11-112-6/+18
* When allocation of a socket peer label fails, scrub what wasRobert Watson2003-11-071-1/+1
* Trim trailing whitespace.Robert Watson2003-11-071-2/+2
* Remove the flags argument from mac_externalize_*_label(), as it's notRobert Watson2003-11-067-24/+24
* Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the objectRobert Watson2003-10-255-15/+15
* Sort type declarations together.Robert Watson2003-10-251-6/+1
* mac_Finish break-out of kern_mac.c into parts:Robert Watson2003-10-222-5512/+10
* Variable cleanup following break-out of kern_mac.c into sys/security/mac:Robert Watson2003-10-222-32/+20
* Rename error_select() to mac_error_select(), and unstaticize so itRobert Watson2003-10-222-10/+8
* Remove non-VFS related code from mac_vfs.c. Leave:Robert Watson2003-10-221-2987/+5
* Remove non-system bits from mac_system.c. Leave:Robert Watson2003-10-221-3692/+2
* Remove non-credential/process-related bits from mac_process.c. Leave:Robert Watson2003-10-221-3473/+8
* Remove non-pipe code from mac_pipe.c. Leave:Robert Watson2003-10-221-3712/+5
* Remove non-network related contents from mac_net.c. Leave:Robert Watson2003-10-221-3027/+3
* The following shared types/constants/interfaces/... are requiredRobert Watson2003-10-221-3756/+70
* Use __BEGIN_DECLS and __END_DECLS around userland function prototypesRobert Watson2003-10-021-0/+2
* If the struct mac copied into the kernel has a negative length, returnRobert Watson2003-09-298-8/+16
* Remove extra tabs indenting MAC library calls; they were there toRobert Watson2003-08-291-21/+20
* Fix a mac_policy_list reference to be a mac_static_policy_listRobert Watson2003-08-268-8/+8
* Make the elements argument to mac_prepare() be const.Robert Watson2003-08-221-1/+1
* Add prototype for new libc function mac_prepare_type().Robert Watson2003-08-221-0/+1
* Introduce two new MAC Framework and MAC policy entry points:Robert Watson2003-08-2110-0/+157
* Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr():Robert Watson2003-08-2110-0/+265
* Remove about 40 lines of #ifdef/#endif by using new macrosRobert Watson2003-08-208-560/+248
* Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF.Robert Watson2003-08-018-224/+144
* Redesign the externalization APIs from the MAC Framework toRobert Watson2003-06-239-332/+167
* Forward declare a boatload of structures referenced in the MACRobert Watson2003-06-221-0/+12
* Add a f_vnode field to struct file.Poul-Henning Kamp2003-06-228-16/+16
* Use __FBSDID().David E. O'Brien2003-06-118-32/+32
* Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables andRobert Watson2003-05-088-64/+64
* Clean up locking for the MAC Framework:Robert Watson2003-05-078-624/+1440
* - Acquire the vm_object's lock when performing vm_object_page_clean().Alan Cox2003-04-248-0/+16
* Update NAI copyright to 2003, missed in earlier commits and merges.Robert Watson2003-04-1810-10/+10
* mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, soRobert Watson2003-04-158-24/+16
* Move MAC label storage for mbufs into m_tags from the m_pkthdr structure,Robert Watson2003-04-1410-138/+952
* Abstract access to the mbuf header label behind a new function,Robert Watson2003-04-148-200/+640
* Introduce an M_ASSERTPKTHDR() macro which performs the very common taskDag-Erling Smørgrav2003-04-088-16/+16
* Modify the mac_init_ipq() MAC Framework entry point to accept anRobert Watson2003-03-2610-34/+98