summaryrefslogtreecommitdiff
path: root/sys/security/mac
Commit message (Expand)AuthorAgeFilesLines
...
* Remove the posixsem_check_destroy() MAC check. It is semantically identicalJohn Baldwin2008-06-233-14/+0
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson2008-06-133-26/+25
* Plug a memory leak which can occur when multiple MAC policies are loadedChristian S.J. Peron2008-05-271-0/+4
* When propagating a MAC label from an inpcb to an mbuf, allow read andRobert Watson2008-04-191-1/+1
* Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros toRobert Watson2008-04-171-3/+3
* Make naming of include guards for MAC Framework include files moreRobert Watson2008-04-133-9/+9
* Add the support for the AT_FDCWD and fd-relative name lookups to theKonstantin Belousov2008-03-311-0/+1
* VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used inAttilio Rao2008-01-132-4/+4
* vn_lock() is currently only used with the 'curthread' passed as argument.Attilio Rao2008-01-102-4/+4
* Add a new file descriptor type for IPC shared memory objects and use it toJohn Baldwin2008-01-083-0/+187
* Fix a MAC label leak for POSIX semaphores, in which per-policy labelsRobert Watson2007-12-171-0/+1
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson2007-10-283-22/+0
* Continue to move from generic network entry points in the TrustedBSD MACRobert Watson2007-10-284-20/+41
* Move towards more explicit support for various network protocol stacksRobert Watson2007-10-287-23/+188
* Update comment following MAC Framework entry point renaming andRobert Watson2007-10-261-1/+6
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson2007-10-264-11/+11
* Sort entry points in mac_framework.h and mac_policy.h alphabetically byRobert Watson2007-10-252-629/+574
* Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson2007-10-253-20/+20
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moveRobert Watson2007-10-254-19/+19
* Further MAC Framework cleanup: normalize some local variable names andRobert Watson2007-10-253-21/+22
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-2416-1150/+1193
* Bump MAC_VERSION to 4 and add an 8.x line in the version table. Version 4Robert Watson2007-10-231-1/+2
* Canonicalize naming of local variables for struct ksem and associatedRobert Watson2007-10-213-34/+33
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson2007-09-103-21/+21
* Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, whichRobert Watson2007-08-061-4/+0
* Fix a bunch of warnings due to a missing forward declaration of a struct.Peter Wemm2007-07-051-0/+1
* Add a new MAC framework and policy entry point,Robert Watson2007-06-263-0/+16
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-233-21/+19
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-228-395/+384
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-222-42/+16
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-223-59/+16
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-213-0/+121
* Remove 'MPSAFE' annotations from the comments above most system calls: allRobert Watson2007-03-041-30/+0
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-064-10/+46
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-0611-9/+10
* Remove conditional return of 1. For the MAC_STATIC case at this point inChristian S.J. Peron2007-01-011-3/+0
* Only signal the CV indicating that the MAC Framework is available forRobert Watson2006-12-311-6/+23
* Slightly resort functions in file so that no forward function prototypesRobert Watson2006-12-291-49/+46
* Re-add include of opt_mac.h in mac_framework.c, which was improperlyRobert Watson2006-12-291-0/+2
* Add missing include guards to mac_internal.h, update include guards inRobert Watson2006-12-282-3/+8
* Remove XXX comments about EA transaction support and provide a moreRobert Watson2006-12-281-6/+11
* Remove an inaccurate comment I added regarding storage for mbuf tagRobert Watson2006-12-281-7/+0
* In mac_inpcb_sosetlabel(), assert the socket lock rather than commentingRobert Watson2006-12-281-1/+1
* Centralize definition of MAC_VERSION in mac_policy.h, as it defines theRobert Watson2006-12-283-6/+19
* Move mac_init_label() and mac_destroy_label() from mac_framework.c toRobert Watson2006-12-282-29/+31
* Trim unneeded includes.Robert Watson2006-12-282-48/+0
* Break contents of kern_mac.c out into two files following a repo-copy:Robert Watson2006-12-282-1209/+0
* Update MAC Framework general comments, referencing various interfaces itRobert Watson2006-12-282-24/+80
* Re-wrap comments following de-indentation.Robert Watson2006-12-231-13/+11
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-2214-27/+14
generated by cgit v1.3 (git 2.53.0) at 2026-05-12 12:42:54 +0000