| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on | Robert Watson | 2004-06-24 | 1 | -0/+1 |
| * | Do the dreaded s/dev_t/struct cdev */ | Poul-Henning Kamp | 2004-06-16 | 1 | -1/+1 |
| * | Reimplement sysctls handling by MAC framework. | Pawel Jakub Dawidek | 2004-02-22 | 1 | -2/+2 |
| * | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson | 2004-02-22 | 1 | -2/+2 |
| * | Commit file missed in last pass: MAC api uses 'struct pipepair', not | Robert Watson | 2004-02-01 | 1 | -8/+8 |
| * | Switch TCP over to using the inpcb label when responding in timed | Robert Watson | 2003-12-17 | 1 | -0/+8 |
| * | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | Robert Watson | 2003-12-06 | 1 | -7/+1 |
| * | Introduce a MAC label reference in 'struct inpcb', which caches | Robert Watson | 2003-11-18 | 1 | -0/+28 |
| * | Implement sockets support for __mac_get_fd() and __mac_set_fd() | Robert Watson | 2003-11-16 | 1 | -0/+1 |
| * | Implement mpo_copy_{mbuf,pipe,vnode}_label() entry points for | Robert Watson | 2003-11-16 | 1 | -0/+9 |
| * | Add stub entries for new MAC framework entry points: | Robert Watson | 2003-08-21 | 1 | -0/+32 |
| * | Generally rename things to represent the fact that this is now the | Robert Watson | 2003-08-21 | 1 | -268/+270 |
| * | Redesign the externalization APIs from the MAC Framework to | Robert Watson | 2003-06-23 | 1 | -1/+1 |
| * | Trim "trustedbsd_" from the front of the policy module "short names"; | Robert Watson | 2003-03-27 | 1 | -1/+1 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | Robert Watson | 2003-03-26 | 1 | -1/+1 |
| * | Update MAC "none" stub policy to include stubs for the following | Robert Watson | 2003-03-25 | 1 | -0/+98 |
| * | Default policies to on: if you load them or compile them into your | Robert Watson | 2002-12-10 | 1 | -1/+1 |
| * | Remove dm_root entry from struct devfs_mount. It's never set, and is | Robert Watson | 2002-12-09 | 1 | -8/+10 |
| * | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | Robert Watson | 2002-11-12 | 1 | -8/+0 |
| * | Update MAC modules for changes in arguments for exec MAC policy | Robert Watson | 2002-11-08 | 1 | -3/+5 |
| * | Update policy modules for changes in arguments associated with support | Robert Watson | 2002-11-05 | 1 | -3/+5 |
| * | License and wording updates: NAI has authorized the removal of clause | Robert Watson | 2002-11-04 | 1 | -7/+4 |
| * | Move to C99 sparse structure initialization for the mac_policy_ops | Robert Watson | 2002-10-30 | 1 | -271/+136 |
| * | Various minor type, prototype tweaks -- clean up cruft due to lack of | Robert Watson | 2002-10-30 | 1 | -1/+1 |
| * | While 'mode_t' seemed like a good idea for the access mode argument for | Robert Watson | 2002-10-30 | 1 | -2/+2 |
| * | Hook up no-op stubs for reboot, swapon, sysctl entry points. | Robert Watson | 2002-10-29 | 1 | -0/+29 |
| * | Slightly change the semantics of vnode labels for MAC: rather than | Robert Watson | 2002-10-26 | 1 | -39/+43 |
| * | Adapt MAC policies for the new user API changes; teach policies how | Robert Watson | 2002-10-22 | 1 | -11/+36 |
| * | mac_none is a stub policy without any functional implementation. | Robert Watson | 2002-10-21 | 1 | -7/+7 |
| * | Sync from MAC tree: break out the single mmap entry point into | Robert Watson | 2002-10-06 | 1 | -2/+22 |
| * | Modify label allocation semantics for sockets: pass in soalloc's malloc | Robert Watson | 2002-10-05 | 1 | -2/+2 |
| * | Implement mac_create_devfs_symlink() for policies that interact with | Robert Watson | 2002-10-05 | 1 | -0/+9 |
| * | Merge implementation of mpo_check_vnode_link() for various appropriate | Robert Watson | 2002-10-05 | 1 | -0/+11 |
| * | Begin another merge from the TrustedBSD MAC branch: | Robert Watson | 2002-10-05 | 1 | -167/+55 |
| * | Prefer NULL to 0 when passing a NULL pointer. | Robert Watson | 2002-08-20 | 1 | -1/+1 |
| * | Provide stub mpo_syscall() implementations for mac_none and mac_test. | Robert Watson | 2002-08-20 | 1 | -0/+9 |
| * | Pass active_cred and file_cred into the MAC framework explicitly | Robert Watson | 2002-08-19 | 1 | -8/+8 |
| * | Break out mac_check_pipe_op() into component check entry points: | Robert Watson | 2002-08-19 | 1 | -4/+34 |
| * | Break out mac_check_vnode_op() into three seperate checks: | Robert Watson | 2002-08-19 | 1 | -0/+30 |
| * | Rename mac_check_socket_receive() to mac_check_socket_deliver() so that | Robert Watson | 2002-08-15 | 1 | -6/+6 |
| * | Introduce support for Mandatory Access Control and extensible | Robert Watson | 2002-07-31 | 1 | -0/+1105 |
