aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac
Commit message (Expand)AuthorAgeFilesLines
* sys: Remove $FreeBSD$: two-line .h patternWarner Losh2023-08-163-6/+0
* mac_ipacl: new MAC policy module to limit jail/vnet IP configurationShivank Garg2023-07-264-0/+43
* mac: Honor order when registering MAC modules.Steve Kiernan2023-04-181-22/+16
* kdb: Modify securelevel policyMark Johnston2023-03-302-0/+10
* IfAPI: Add if_get/setmaclabel() and use it.Justin Hibbits2023-01-313-18/+18
* vfs: stop using NDFREEMateusz Guzik2022-12-191-3/+4
* Bump MAC_VERSION to 5Allan Jude2022-10-071-1/+2
* vfs: introduce V_PCATCH to stop abusing PCATCHMateusz Guzik2022-09-171-2/+2
* protosw: refactor protosw and domain static declaration and loadGleb Smirnoff2022-08-171-2/+2
* mac: cheaper check for mac_pipe_check_readMateusz Guzik2022-08-173-2/+20
* mac: s/0/false/ in macros denoting probe enablementMateusz Guzik2022-08-111-14/+14
* mac: kdb/ddb framework hooksMitchell Horne2022-07-183-0/+96
* sysent: Get rid of bogus sys/sysent.h include.Dmitry Chagin2022-05-281-1/+0
* vfs: remove the unused thread argument from NDINIT*Mateusz Guzik2021-11-251-2/+2
* mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmitMateusz Guzik2021-06-293-10/+40
* tcp_input/syncache: acquire only read lock on PCB for SYN,!ACK packetsGleb Smirnoff2021-04-121-1/+1
* Add a comment on why the call to mac_vnode_relabel() might be in the wrongRobert Watson2021-02-271-3/+12
* Convert remaining cap_rights_init users to cap_rights_init_oneMateusz Guzik2021-01-121-2/+4
* mac: cheaper check for mac_vnode_check_readlinkMateusz Guzik2021-01-083-2/+20
* cache: combine fast path enabled status into one flagMateusz Guzik2021-01-061-0/+3
* pipe: allow for lockless pipe_statMateusz Guzik2020-11-193-3/+30
* mac_framework.h: fix build with DEBUG_VFS_LOCKS and !MACAndriy Gapon2020-09-031-1/+1
* security: clean up empty lines in .c and .h filesMateusz Guzik2020-09-013-3/+1
* mac: even up all entry points to the same schemeMateusz Guzik2020-08-061-7/+38
* vfs: add a cheaper entry for mac_vnode_check_accessMateusz Guzik2020-08-053-2/+17
* Fix tinderbox build after r363714Mateusz Guzik2020-07-301-0/+8
* vfs: elide MAC-induced locking on rename if there are no relevant hoooksMateusz Guzik2020-07-292-0/+7
* vfs: add the infrastructure for lockless lookupMateusz Guzik2020-07-251-1/+2
* vfs: fix vn_poll performance with either MAC or AUDITMateusz Guzik2020-07-162-1/+16
* vfs: fix MAC/AUDIT mismatch in vn_pollMateusz Guzik2020-07-161-0/+10
* mac_policy: Remove mac_policy_sxJason A. Harmening2020-04-041-8/+3
* Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki2020-02-261-1/+1
* vfs: use mac fastpath for lookup, open, read, write, mmapMateusz Guzik2020-02-133-15/+124
* mac: implement fast path for checksMateusz Guzik2020-02-133-4/+118
* vfs: drop the mostly unused flags argument from VOP_UNLOCKMateusz Guzik2020-01-032-4/+4
* mac: use a sleepable rmlock instead of an sx lockMateusz Guzik2019-12-271-2/+6
* Instead of looking up a predecessor or successor to the current mapDoug Moore2019-11-201-4/+5
* Define wrapper functions vm_map_entry_{succ,pred} to act as wrappersDoug Moore2019-11-131-1/+2
* Define macro VM_MAP_ENTRY_FOREACH for enumerating the entries in a vm_map.Doug Moore2019-10-081-1/+1
* vm_map_simplify_entry considers merging an entry with its twoDoug Moore2019-08-251-1/+1
* When MAC is enabled and a policy module is loaded, don't unconditionallyRobert Watson2019-05-033-26/+51
* mac: reduce pessimization of sdt probe handlingMateusz Guzik2018-12-191-12/+16
* Remove unused argument to priv_check_cred.Mateusz Guzik2018-12-111-1/+1
* Require that MAC label buffers be able to store a non-empty string.Mark Johnston2018-08-011-1/+3
* Use an accessor function to access ifr_data.Brooks Davis2018-03-301-2/+2
* Reduce duplication in __mac_*_(file|link)(2) implementation.Brooks Davis2018-02-151-97/+27
* Do pass removing some write-only variables from the kernel.Alexander Kabaev2017-12-251-2/+0
* Fix improper use of "its".Bryan Drewery2016-11-081-1/+1
* sys/security: minor spelling fixes.Pedro F. Giffuni2016-05-062-2/+2
* Fix style issues around existing SDT probes.Mark Johnston2015-12-162-22/+22
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-17 02:12:56 +0000