aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Regularize the vop_stdlock'ing protocol across all the filesystemsKirk McKusick2002-10-141-4/+4
* Integrate mac_check_socket_send() and mac_check_socket_receive()Robert Watson2002-10-0610-0/+280
* Trim accidentally introduced trailing whitespace.Robert Watson2002-10-061-1/+1
* Sync from MAC tree: break out the single mmap entry point intoRobert Watson2002-10-0615-200/+647
* Modify label allocation semantics for sockets: pass in soalloc's mallocRobert Watson2002-10-0515-120/+570
* Implement mac_create_devfs_symlink() for policies that interact withRobert Watson2002-10-055-0/+55
* Integrate a devfs/MAC fix from the MAC tree: avoid a race condition duringRobert Watson2002-10-0510-0/+110
* Merge implementation of mpo_check_vnode_link() for various appropriateRobert Watson2002-10-056-0/+113
* Merge support for mac_check_vnode_link(), a MAC framework/policy entryRobert Watson2002-10-0510-0/+246
* While the MAC API has supported the ability to handle M_NOWAIT passedRobert Watson2002-10-058-24/+88
* Rearrange object and label init/destroy functions to match theRobert Watson2002-10-058-808/+808
* Sync to MAC tree: use 'flag' instead of 'how' for mac_init_mbuf();Robert Watson2002-10-058-24/+24
* Another big diff, little functional change: move label internalization,Robert Watson2002-10-058-520/+520
* Move all object label init/destroy routines to the head of theRobert Watson2002-10-058-2280/+2280
* Synch from TrustedBSD MAC tree:Robert Watson2002-10-058-24/+200
* Cosmetic line wrap synchronization.Robert Watson2002-10-058-16/+32
* Push the debugging obect label counters into security.mac.debug.countersRobert Watson2002-10-058-88/+128
* Begin another merge from the TrustedBSD MAC branch:Robert Watson2002-10-0514-1422/+1107
* Add a new MAC entry point, mac_thread_userret(td), which permits policyRobert Watson2002-10-0210-0/+92
* Remember to include "opt_devfs.h" so we get any relevant changesPoul-Henning Kamp2002-10-018-0/+8
* Improve locking of pipe mutexes in the context of MAC:Robert Watson2002-10-018-0/+272
* Push 'security.mac.debug_label_fallback' behind options MAC_DEBUG.Robert Watson2002-10-018-80/+112
* Add tunables for the existing sysctl twiddles for pipe and vmRobert Watson2002-09-308-0/+16
* - Use vrefcnt() instead of v_usecount.Jeff Roberson2002-09-251-4/+4
* Remove another missed trailing space.Robert Watson2002-09-211-1/+1
* Trim trailing whitespace from the ends of lines.Robert Watson2002-09-212-23/+23
* Continue cleanup and sync of mac_biba and mac_mls policies to theRobert Watson2002-09-212-26/+0
* Remove mac_biba_high_single() check for interface renaming: we nowRobert Watson2002-09-211-12/+0
* As INVARIANTS isn't supported for code that loads only as a kernelRobert Watson2002-09-212-4/+4
* Remove un-needed stack variable 'ops'.Robert Watson2002-09-188-24/+16
* Add a toggle to disable VM enforcement.Robert Watson2002-09-188-0/+56
* At the cost of seeming a little gauche, make use of more traditionalRobert Watson2002-09-188-32/+32
* Remove all use of vnode->v_tag, replacing with appropriate substitutes.Nate Lawson2002-09-1410-34/+34
* Include <sys/malloc.h> instead of depending on namespace pollution 2Bruce Evans2002-09-102-0/+2
* Add security.mac.mmap_revocation, a flag indicating whether weRobert Watson2002-09-098-0/+64
* Minor code sync to MAC tree: push Giant locking up fromRobert Watson2002-09-098-16/+16
* Re-insert TUNABLE() export of MAC Biba and MAC MLS module 'enabled'Robert Watson2002-09-052-0/+2
* Include <sys/malloc.h> instead of depending on namespace pollution 2Bruce Evans2002-09-058-48/+40
* Prefer NULL to 0 when passing a NULL pointer.Robert Watson2002-08-202-2/+2
* Provide stub mpo_syscall() implementations for mac_none and mac_test.Robert Watson2002-08-203-0/+27
* Close a race in process label changing opened due to dropping theRobert Watson2002-08-198-56/+80
* Pass active_cred and file_cred into the MAC framework explicitlyRobert Watson2002-08-1916-156/+229
* Provide an implementation of mac_syscall() so that security modulesRobert Watson2002-08-1910-1/+318
* Break out mac_check_pipe_op() into component check entry points:Robert Watson2002-08-1915-97/+618
* Break out mac_check_vnode_op() into three seperate checks:Robert Watson2002-08-1915-148/+678
* Assert process locks in proces-related access control checks.Robert Watson2002-08-198-0/+48
* Add a missing vnode assertion for the exec() check.Robert Watson2002-08-198-0/+16
* Keep a copy of the credential used to mount filesystems around soPoul-Henning Kamp2002-08-191-1/+1
* Wrap maintenance of varios nmac{objectname} counters in MAC_DEBUG so weRobert Watson2002-08-168-0/+368
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatRobert Watson2002-08-158-32/+32
generated by cgit v1.3 (git 2.53.0) at 2026-08-04 21:38:01 +0000