| Commit message (Expand) | Author | Age | Files | Lines |
| * | Merge fixes to properly propagate labels across some mbuf copy | Robert Watson | 2003-06-02 | 3 | -0/+3 |
| * | Merge from HEAD to RELENG_5_1 (MFC?): | Robert Watson | 2003-05-31 | 2 | -105/+99 |
| * | This commit was manufactured by cvs2svn to create branch 'RELENG_5_1'. | cvs2svn | 2003-05-31 | 11 | -33728/+0 |
| * | Make sure all character pointers are properly initialized; this was | Robert Watson | 2003-05-30 | 1 | -4/+5 |
| * | Use strsep() in preference to manual string parsing for Biba and MLS | Robert Watson | 2003-05-29 | 2 | -97/+80 |
| * | Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables and | Robert Watson | 2003-05-08 | 8 | -64/+64 |
| * | Clean up locking for the MAC Framework: | Robert Watson | 2003-05-07 | 8 | -624/+1440 |
| * | - Acquire the vm_object's lock when performing vm_object_page_clean(). | Alan Cox | 2003-04-24 | 8 | -0/+16 |
| * | Rather than check for M_PKTHDR and conditionally perform access control, | Robert Watson | 2003-04-18 | 1 | -4/+3 |
| * | Update NAI copyright to 2003, missed in earlier commits and merges. | Robert Watson | 2003-04-18 | 10 | -10/+10 |
| * | Modify mac_test policy to invoke WITNESS_WARN() when a potentially | Robert Watson | 2003-04-15 | 1 | -0/+29 |
| * | Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and Test | Robert Watson | 2003-04-15 | 4 | -4/+4 |
| * | mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, so | Robert Watson | 2003-04-15 | 8 | -24/+16 |
| * | Move MAC label storage for mbufs into m_tags from the m_pkthdr structure, | Robert Watson | 2003-04-14 | 10 | -138/+952 |
| * | Abstract access to the mbuf header label behind a new function, | Robert Watson | 2003-04-14 | 8 | -200/+640 |
| * | Introduce an M_ASSERTPKTHDR() macro which performs the very common task | Dag-Erling Smørgrav | 2003-04-08 | 8 | -16/+16 |
| * | Trim "trustedbsd_" from the front of the policy module "short names"; | Robert Watson | 2003-03-27 | 9 | -10/+10 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | Robert Watson | 2003-03-26 | 16 | -41/+106 |
| * | Update the MAC regression test policy to include stubs and testing | Robert Watson | 2003-03-25 | 1 | -0/+155 |
| * | Update MAC "none" stub policy to include stubs for the following | Robert Watson | 2003-03-25 | 2 | -0/+196 |
| * | Expand scope of the MLS policy to include a new entry point available | Robert Watson | 2003-03-25 | 1 | -0/+20 |
| * | Expand scope of the BSD extended "file system firewall" policy to | Robert Watson | 2003-03-25 | 1 | -0/+17 |
| * | Expand scope of the Biba policy to include some of the new entry | Robert Watson | 2003-03-25 | 1 | -0/+40 |
| * | Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE, | Robert Watson | 2003-03-23 | 1 | -8/+0 |
| * | Including <sys/stdint.h> is (almost?) universally only to be able to use | Poul-Henning Kamp | 2003-03-18 | 1 | -1/+0 |
| * | Do not depend on namespace pollution, explicitly include sys/sx.h | Alexander Kabaev | 2003-03-12 | 1 | -0/+1 |
| * | Instrument sysarch() MD privileged I/O access interfaces with a MAC | Robert Watson | 2003-03-06 | 10 | -0/+98 |
| * | Provide a mac_check_system_swapoff() entry point, which permits MAC | Robert Watson | 2003-03-05 | 10 | -0/+115 |
| * | Replace calls to WITNESS_SLEEP() and witness_list() with equivalent calls | John Baldwin | 2003-03-04 | 8 | -16/+24 |
| * | A cute yet small MAC policy that provides a simple ACL mechanism to | Robert Watson | 2003-03-02 | 1 | -0/+485 |
| * | Back out M_* changes, per decision of the TRB. | Warner Losh | 2003-02-19 | 12 | -277/+277 |
| * | Move a bunch of flags from the KSE to the thread. | Julian Elischer | 2003-02-17 | 1 | -1/+1 |
| * | Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba | Robert Watson | 2003-02-04 | 1 | -0/+39 |
| * | Place more stringent checks on process credential relabeling for the Biba | Robert Watson | 2003-02-04 | 2 | -12/+21 |
| * | Rename the variable 'grade' to 'type' in interface parsing and | Robert Watson | 2003-02-04 | 2 | -12/+12 |
| * | Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. | Alfred Perlstein | 2003-01-21 | 12 | -277/+277 |
| * | Bow to the whining masses and change a union back into void *. Retain | Matthew Dillon | 2003-01-13 | 8 | -32/+32 |
| * | Change struct file f_data to un_data, a union of the correct struct | Matthew Dillon | 2003-01-12 | 8 | -32/+32 |
| * | Fix warnings on 64bits architectures. | Maxime Henrion | 2003-01-06 | 1 | -2/+1 |
| * | Map VAPPEND to VWRITE since the ugidfw rule syntax doesn't specifically | Robert Watson | 2002-12-28 | 1 | -0/+9 |
| * | SCARGS removal take II. | Alfred Perlstein | 2002-12-14 | 8 | -40/+40 |
| * | Backout removal SCARGS, the code freeze is only "selectively" over. | Alfred Perlstein | 2002-12-13 | 8 | -40/+40 |
| * | Remove SCARGS. | Alfred Perlstein | 2002-12-13 | 8 | -40/+40 |
| * | Default policies to on: if you load them or compile them into your | Robert Watson | 2002-12-10 | 7 | -7/+7 |
| * | Remove dm_root entry from struct devfs_mount. It's never set, and is | Robert Watson | 2002-12-09 | 16 | -131/+164 |
| * | Remove a const that generates a warning: the const isn't strictly | Robert Watson | 2002-12-04 | 1 | -1/+1 |
| * | License tweak: remove clause 3 per permission of NAI. | Robert Watson | 2002-12-03 | 2 | -6/+0 |
| * | Unhook the old LOMAC module, now replaced with mac_lomac. | Robert Watson | 2002-12-03 | 27 | -6787/+0 |
| * | Correct two warnings by staticizing a function and removing an unused | Robert Watson | 2002-11-26 | 1 | -11/+1 |
| * | Import an implementation of LOMAC (Low-Watermark Mandatory Access | Robert Watson | 2002-11-26 | 2 | -0/+2842 |