summaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Merge mac_test.c:1.49-1.50 from HEAD to RELENG_5:Robert Watson2005-02-131-28/+34
* Minor white space synchronization between RELENG_5 and HEAD for mac_biba.c.Robert Watson2005-02-131-1/+2
* Merge mac_bsdextended.c:1.22-1.23 and mac_bsdextended.h:1.4-1.5 from HEADRobert Watson2005-01-292-35/+76
* Merge mac_biba.c:1.83, mac_lomac.c:1.33, mac_mls.c:1.68, mac_stub.c:1.44,Robert Watson2005-01-296-80/+28
* Merge mac_label.c:1.3 from HEAD to RELENG_5:Robert Watson2005-01-291-1/+3
* Merge mac_internal.h:1.112 from HEAD to RELENG_5:Robert Watson2005-01-291-1/+0
* Merge mac_lomac.h:1.4 from HEAD to RELENG_5:Robert Watson2005-01-261-1/+0
* Merge mac_seeotheruids.c:1.7 from HEAD to RELENG_5:Robert Watson2005-01-221-0/+3
* Merge mac_portacl.c:1.7 from HEAD to RELENG_5:Robert Watson2004-12-221-0/+23
* Merge mac_portacl.c:1.5 from HEAD to RELENG_5:Robert Watson2004-12-221-26/+19
* MT5 or whatever: Set the first match ability as the default and remove theTom Rhodes2004-09-131-10/+1
* MT5: 1.20 Allow mac_bsdextended(4) to log policy violations viaTom Rhodes2004-08-311-5/+19
* MT5: 1.19 The ability to match first rule in place of all rules.Tom Rhodes2004-08-311-2/+21
* This commit was manufactured by cvs2svn to create branch 'RELENG_5'.cvs2svn2004-08-184-3345/+0
* * Add a "how" argument to uma_zone constructors and initialization functionsBrian Feldman2004-08-021-3/+4
* Introduce SLOT_SET macro and use it in place of casts as lvalues.Alexander Kabaev2004-07-283-12/+16
* Allow an effective uid of root to bypass mac_bsdextended rules; the MACRobert Watson2004-07-231-0/+3
* Rename Biba and MLS _single label elements to _effective, which moreRobert Watson2004-07-164-353/+353
* Do a pass over all modules in the kernel and make them return EOPNOTSUPPPoul-Henning Kamp2004-07-152-0/+2
* Update for the KDB framework:Marcel Moolenaar2004-07-101-28/+29
* Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels onRobert Watson2004-06-247-0/+53
* Do the dreaded s/dev_t/struct cdev */Poul-Henning Kamp2004-06-168-8/+9
* Socket MAC labels so_label and so_peerlabel are now protected byRobert Watson2004-06-131-8/+57
* add missing #include <sys/module.h>Poul-Henning Kamp2004-05-302-0/+2
* Remove dead code. (This loop counted the number of rules, but the countColin Percival2004-05-151-7/+0
* Improve consistency of include file guards in src/sys/sys by terminatingRobert Watson2004-05-102-6/+6
* If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tagRobert Watson2004-05-031-1/+4
* Add /* !MAC */ to final #endif.Robert Watson2004-05-032-2/+2
* Update copyright.Robert Watson2004-05-031-1/+1
* When performing label assertions on an mbuf header label in mac_test,Robert Watson2004-05-031-2/+3
* Bump copyright date for NETA to 2004.Robert Watson2004-05-032-2/+2
* Add MAC_STATIC, a kernel option that disables internal MAC FrameworkRobert Watson2004-05-032-0/+50
* Define BPFD_LOCK_ASSERT() to assert the BPF descriptor lock.Robert Watson2004-02-291-0/+4
* Forward declare struct proc, struct sockaddr, and struct thread, whichRobert Watson2004-02-261-0/+3
* Forward declare struct bpf_d, struct ifnet, struct image_params, andRobert Watson2004-02-261-1/+5
* Move inet and inet6 related MAC Framework entry points from mac_net.cRobert Watson2004-02-264-655/+807
* Reimplement sysctls handling by MAC framework.Pawel Jakub Dawidek2004-02-227-36/+26
* Update my personal copyrights and NETA copyrights in the kernelRobert Watson2004-02-2223-46/+46
* Commit file missed in last pass: MAC api uses 'struct pipepair', notRobert Watson2004-02-011-8/+8
* Coalesce pipe allocations and frees. Previously, the pipe codeRobert Watson2004-02-019-93/+95
* Pay attention to mac_portacl_enabled.Robert Watson2004-01-201-1/+5
* Switch TCP over to using the inpcb label when responding in timedRobert Watson2003-12-178-0/+72
* interpvnodelabel can be NULL in mac_test_execve_transition(). ThisRobert Watson2003-12-101-1/+3
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),Robert Watson2003-12-069-68/+26
* Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9).Robert Watson2003-11-182-12/+12
* Introduce a MAC label reference in 'struct inpcb', which cachesRobert Watson2003-11-189-1/+362
* Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as theyRobert Watson2003-11-173-21/+0
* Implement sockets support for __mac_get_fd() and __mac_set_fd()Robert Watson2003-11-1610-7/+92
* Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET andRobert Watson2003-11-161-0/+1
* Abstract the label checking and setting logic fromRobert Watson2003-11-162-13/+24
generated by cgit v1.3 (git 2.53.0) at 2026-04-08 23:29:31 +0000