aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Trim "trustedbsd_" from the front of the policy module "short names";Robert Watson2003-03-279-10/+10
* Modify the mac_init_ipq() MAC Framework entry point to accept anRobert Watson2003-03-2616-41/+106
* Update the MAC regression test policy to include stubs and testingRobert Watson2003-03-251-0/+155
* Update MAC "none" stub policy to include stubs for the followingRobert Watson2003-03-252-0/+196
* Expand scope of the MLS policy to include a new entry point availableRobert Watson2003-03-251-0/+20
* Expand scope of the BSD extended "file system firewall" policy toRobert Watson2003-03-251-0/+17
* Expand scope of the Biba policy to include some of the new entryRobert Watson2003-03-251-0/+40
* Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE,Robert Watson2003-03-231-8/+0
* Including <sys/stdint.h> is (almost?) universally only to be able to usePoul-Henning Kamp2003-03-181-1/+0
* Do not depend on namespace pollution, explicitly include sys/sx.hAlexander Kabaev2003-03-121-0/+1
* Instrument sysarch() MD privileged I/O access interfaces with a MACRobert Watson2003-03-0610-0/+98
* Provide a mac_check_system_swapoff() entry point, which permits MACRobert Watson2003-03-0510-0/+115
* Replace calls to WITNESS_SLEEP() and witness_list() with equivalent callsJohn Baldwin2003-03-048-16/+24
* A cute yet small MAC policy that provides a simple ACL mechanism toRobert Watson2003-03-021-0/+485
* Back out M_* changes, per decision of the TRB.Warner Losh2003-02-1912-277/+277
* Move a bunch of flags from the KSE to the thread.Julian Elischer2003-02-171-1/+1
* Implement mpo_check_kld_load() and mpo_check_kld_unload() for the BibaRobert Watson2003-02-041-0/+39
* Place more stringent checks on process credential relabeling for the BibaRobert Watson2003-02-042-12/+21
* Rename the variable 'grade' to 'type' in interface parsing andRobert Watson2003-02-042-12/+12
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.Alfred Perlstein2003-01-2112-277/+277
* Bow to the whining masses and change a union back into void *. RetainMatthew Dillon2003-01-138-32/+32
* Change struct file f_data to un_data, a union of the correct structMatthew Dillon2003-01-128-32/+32
* Fix warnings on 64bits architectures.Maxime Henrion2003-01-061-2/+1
* Map VAPPEND to VWRITE since the ugidfw rule syntax doesn't specificallyRobert Watson2002-12-281-0/+9
* SCARGS removal take II.Alfred Perlstein2002-12-148-40/+40
* Backout removal SCARGS, the code freeze is only "selectively" over.Alfred Perlstein2002-12-138-40/+40
* Remove SCARGS.Alfred Perlstein2002-12-138-40/+40
* Default policies to on: if you load them or compile them into yourRobert Watson2002-12-107-7/+7
* Remove dm_root entry from struct devfs_mount. It's never set, and isRobert Watson2002-12-0916-131/+164
* Remove a const that generates a warning: the const isn't strictlyRobert Watson2002-12-041-1/+1
* License tweak: remove clause 3 per permission of NAI.Robert Watson2002-12-032-6/+0
* Unhook the old LOMAC module, now replaced with mac_lomac.Robert Watson2002-12-0327-6787/+0
* Correct two warnings by staticizing a function and removing an unusedRobert Watson2002-11-261-11/+1
* Import an implementation of LOMAC (Low-Watermark Mandatory AccessRobert Watson2002-11-262-0/+2842
* Un-staticize mac_cred_mmapped_drop_perms() so that it may be usedRobert Watson2002-11-269-8/+9
* Introduce p_label, extensible security label storage for the MAC frameworkRobert Watson2002-11-2010-8/+204
* Merge kld access control checks from the MAC tree: these access controlRobert Watson2002-11-1910-0/+375
* Introduce a condition variable to avoid returning EBUSY whenRobert Watson2002-11-138-232/+416
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sinceRobert Watson2002-11-1215-108/+0
* Garbage collect definition of M_MACOPVEC -- we no longer perform aRobert Watson2002-11-118-16/+0
* Update MAC modules for changes in arguments for exec MAC policyRobert Watson2002-11-087-14/+68
* Add an explicit execlabel argument to exec-related MAC policy entryRobert Watson2002-11-089-27/+36
* Update policy modules for changes in arguments associated with supportRobert Watson2002-11-056-12/+18
* Bring in two sets of changes:Robert Watson2002-11-0510-55/+467
* Since neither the Biba policy nor the MLS policy make use ofRobert Watson2002-11-052-46/+0
* Assert that appropriate vnodes are locked in mac_execve_will_transition().Robert Watson2002-11-058-0/+64
* Implement mpo_check_system_acct and mpo_check_system_settime() for Biba:Robert Watson2002-11-041-0/+46
* Correct use of mac_biba_subject_privileged() in swapon() code.Robert Watson2002-11-041-2/+4
* Permit MAC policies to instrument the access control decisions forRobert Watson2002-11-0410-0/+253
* Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MACRobert Watson2002-11-048-48/+0
generated by cgit v1.3 (git 2.53.0) at 2026-07-30 17:02:38 +0000