aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac_mls
Commit message (Expand)AuthorAgeFilesLines
* Implementations of mpo_check_vnode_deleteextattr() andRobert Watson2003-08-211-0/+39
* Improve consistency with the Biba policy -- renameRobert Watson2003-07-311-23/+10
* Redesign the externalization APIs from the MAC Framework toRobert Watson2003-06-231-26/+14
* Use mac_biba_label_copy() and mac_mls_label_copy() to implement theRobert Watson2003-06-021-0/+1
* Rewrite Biba and MLS label externalization code to use sbufs insteadRobert Watson2003-05-311-53/+50
* Make sure all character pointers are properly initialized; this wasRobert Watson2003-05-301-4/+5
* Use strsep() in preference to manual string parsing for Biba and MLSRobert Watson2003-05-291-48/+39
* Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and TestRobert Watson2003-04-151-1/+1
* Trim "trustedbsd_" from the front of the policy module "short names";Robert Watson2003-03-271-1/+1
* Modify the mac_init_ipq() MAC Framework entry point to accept anRobert Watson2003-03-261-1/+1
* Expand scope of the MLS policy to include a new entry point availableRobert Watson2003-03-251-0/+20
* Back out M_* changes, per decision of the TRB.Warner Losh2003-02-191-1/+1
* Place more stringent checks on process credential relabeling for the BibaRobert Watson2003-02-041-6/+11
* Rename the variable 'grade' to 'type' in interface parsing andRobert Watson2003-02-041-5/+5
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.Alfred Perlstein2003-01-211-1/+1
* Default policies to on: if you load them or compile them into yourRobert Watson2002-12-101-1/+1
* Remove dm_root entry from struct devfs_mount. It's never set, and isRobert Watson2002-12-091-8/+10
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sinceRobert Watson2002-11-121-12/+0
* Update MAC modules for changes in arguments for exec MAC policyRobert Watson2002-11-081-2/+16
* Update policy modules for changes in arguments associated with supportRobert Watson2002-11-051-1/+1
* Since neither the Biba policy nor the MLS policy make use ofRobert Watson2002-11-051-23/+0
* License and wording updates: NAI has authorized the removal of clauseRobert Watson2002-11-042-14/+8
* Fix some warnings on 64 bit architectures. The vn_extattr_get()Maxime Henrion2002-11-021-2/+1
* Move to C99 sparse structure initialization for the mac_policy_opsRobert Watson2002-10-301-259/+130
* While 'mode_t' seemed like a good idea for the access mode argument forRobert Watson2002-10-301-1/+1
* Correct a typo in a previously commented include entry that was madeRobert Watson2002-10-281-1/+1
* Remove all reference to 'struct oldmac', since it's no longer requiredRobert Watson2002-10-281-0/+32
* Slightly change the semantics of vnode labels for MAC: rather thanRobert Watson2002-10-261-61/+98
* Style fix: space between 'switch' and '('.Robert Watson2002-10-221-1/+1
* s/mls/biba/ in a copy+paste error for a printf.Robert Watson2002-10-221-1/+1
* Adapt MAC policies for the new user API changes; teach policies howRobert Watson2002-10-222-17/+292
* Introduce mac_biba_copy() and mac_mls_copy(), which conditionallyRobert Watson2002-10-211-8/+24
* Add compartment support to Biba and MLS policies. The logic of theRobert Watson2002-10-212-16/+68
* More in the way of minor consistency improvements: trim 'mac_mls_'Robert Watson2002-10-211-8/+7
* Demote sockets to single-label objects rather than maintaining aRobert Watson2002-10-211-16/+0
* White space nit the crept in during merge.Robert Watson2002-10-211-1/+1
* Since the Biba and MLS access checks are identical to the open checks,Robert Watson2002-10-211-12/+1
* Cleanup of relabel authorization checks -- almost identical logic,Robert Watson2002-10-211-59/+203
* Add a twiddle to create PTY's with a biba/equal or mls/equal labelRobert Watson2002-10-211-0/+9
* Sync from MAC tree: break out the single mmap entry point intoRobert Watson2002-10-061-22/+32
* Modify label allocation semantics for sockets: pass in soalloc's mallocRobert Watson2002-10-051-2/+2
* Implement mac_create_devfs_symlink() for policies that interact withRobert Watson2002-10-051-0/+14
* Merge implementation of mpo_check_vnode_link() for various appropriateRobert Watson2002-10-051-0/+25
* Begin another merge from the TrustedBSD MAC branch:Robert Watson2002-10-051-205/+58
* Trim trailing whitespace from the ends of lines.Robert Watson2002-09-211-10/+10
* Continue cleanup and sync of mac_biba and mac_mls policies to theRobert Watson2002-09-211-13/+0
* As INVARIANTS isn't supported for code that loads only as a kernelRobert Watson2002-09-211-2/+2
* Include <sys/malloc.h> instead of depending on namespace pollution 2Bruce Evans2002-09-101-0/+1
* Re-insert TUNABLE() export of MAC Biba and MAC MLS module 'enabled'Robert Watson2002-09-051-0/+1
* Pass active_cred and file_cred into the MAC framework explicitlyRobert Watson2002-08-191-12/+12