summaryrefslogtreecommitdiff
path: root/sys/security/mac
Commit message (Expand)AuthorAgeFilesLines
* Merge mac_posix_sem.c:1.1.2.1 from HEAD to RELENG_6_3:Robert Watson2007-12-221-0/+1
* MFC the firewall labeling changes.Christian S.J. Peron2006-09-191-0/+10
* MFC revision 1.99 nfs_srvsock.cChristian S.J. Peron2006-09-021-0/+7
* MFC: Eliminate a deadlock when creating snapshots. BlockingTor Egge2006-03-091-0/+3
* MFC revision 1.111Christian S.J. Peron2005-11-221-5/+13
* Merge init_main.c:1.258, mac_vfs.c:1.110, mac_biba.c:1.89,Robert Watson2005-10-051-8/+0
* Merge two sets of changes relating to devfs device node cloning fromRobert Watson2005-08-131-2/+7
* This commit was manufactured by cvs2svn to create branch 'RELENG_6'.cvs2svn2005-07-114-3611/+0
* Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which isRobert Watson2005-07-053-16/+12
* Add MAC Framework and MAC policy entry point mac_check_socket_create(),Robert Watson2005-07-053-0/+27
* Correct grammar error in commentChristian S.J. Peron2005-06-101-1/+1
* Gratuitous renaming of four System V Semaphore MAC Framework entryRobert Watson2005-06-073-20/+20
* Introduce MAC Framework and MAC Policy entry points to label and controlRobert Watson2005-05-043-0/+217
* Get the directory structure correct in a comment.Tom Rhodes2005-04-222-2/+4
* Introduce p_canwait() and MAC Framework and MAC Policy entry pointsRobert Watson2005-04-183-0/+18
* Introduce three additional MAC Framework and MAC Policy entry points toRobert Watson2005-04-163-7/+61
* In mac_get_fd(), remove unconditional acquisition of Giant around copyingRobert Watson2005-04-162-18/+14
* Introduce new MAC Framework and MAC Policy entry points to control the useRobert Watson2005-04-163-0/+169
* Move MAC check_vnode_mmap entry point out from being exclusive toChristian S.J. Peron2005-04-143-4/+5
* Remove an accidental clearing of the new label pointer on a system VRobert Watson2005-02-241-1/+0
* Update copyright for NETA->McAfee.Robert Watson2005-01-301-5/+5
* Implement MAC entry points relating to System V IPC, calling into theRobert Watson2004-11-173-0/+592
* Define new MAC framework and policy entry points for System V IPCRobert Watson2004-11-172-1/+129
* Bump MAC Framework version to 2 in preparation for the upcoming API/ABIRobert Watson2004-11-093-3/+3
* Disable use of synchronization early in the boot by the MAC Framework;Robert Watson2004-10-302-0/+42
* Expand comments on various sections of the MAC Framework Policy API,Robert Watson2004-10-221-4/+15
* In the MAC label zone destructor, assert that the label is onlyRobert Watson2004-10-221-1/+3
* Remove extern declaration of mac_enforce_sysv, as it's not present inRobert Watson2004-10-221-1/+0
* * Add a "how" argument to uma_zone constructors and initialization functionsBrian Feldman2004-08-021-3/+4
* Do a pass over all modules in the kernel and make them return EOPNOTSUPPPoul-Henning Kamp2004-07-152-0/+2
* Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels onRobert Watson2004-06-242-0/+40
* Do the dreaded s/dev_t/struct cdev */Poul-Henning Kamp2004-06-163-3/+4
* Socket MAC labels so_label and so_peerlabel are now protected byRobert Watson2004-06-131-8/+57
* add missing #include <sys/module.h>Poul-Henning Kamp2004-05-302-0/+2
* Improve consistency of include file guards in src/sys/sys by terminatingRobert Watson2004-05-102-6/+6
* If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tagRobert Watson2004-05-031-1/+4
* Add /* !MAC */ to final #endif.Robert Watson2004-05-032-2/+2
* Bump copyright date for NETA to 2004.Robert Watson2004-05-032-2/+2
* Add MAC_STATIC, a kernel option that disables internal MAC FrameworkRobert Watson2004-05-032-0/+50
* Define BPFD_LOCK_ASSERT() to assert the BPF descriptor lock.Robert Watson2004-02-291-0/+4
* Forward declare struct proc, struct sockaddr, and struct thread, whichRobert Watson2004-02-261-0/+3
* Forward declare struct bpf_d, struct ifnet, struct image_params, andRobert Watson2004-02-261-1/+5
* Move inet and inet6 related MAC Framework entry points from mac_net.cRobert Watson2004-02-264-655/+807
* Reimplement sysctls handling by MAC framework.Pawel Jakub Dawidek2004-02-223-10/+12
* Update my personal copyrights and NETA copyrights in the kernelRobert Watson2004-02-228-16/+16
* Coalesce pipe allocations and frees. Previously, the pipe codeRobert Watson2004-02-015-63/+65
* Switch TCP over to using the inpcb label when responding in timedRobert Watson2003-12-173-0/+15
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),Robert Watson2003-12-063-5/+5
* Introduce a MAC label reference in 'struct inpcb', which cachesRobert Watson2003-11-183-1/+115
* Implement sockets support for __mac_get_fd() and __mac_set_fd()Robert Watson2003-11-165-7/+79