| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Update policy modules for changes in arguments associated with support | Robert Watson | 2002-11-05 | 6 | -12/+18 |
| * | Bring in two sets of changes: | Robert Watson | 2002-11-05 | 10 | -55/+467 |
| * | Since neither the Biba policy nor the MLS policy make use of | Robert Watson | 2002-11-05 | 2 | -46/+0 |
| * | Assert that appropriate vnodes are locked in mac_execve_will_transition(). | Robert Watson | 2002-11-05 | 8 | -0/+64 |
| * | Implement mpo_check_system_acct and mpo_check_system_settime() for Biba: | Robert Watson | 2002-11-04 | 1 | -0/+46 |
| * | Correct use of mac_biba_subject_privileged() in swapon() code. | Robert Watson | 2002-11-04 | 1 | -2/+4 |
| * | Permit MAC policies to instrument the access control decisions for | Robert Watson | 2002-11-04 | 10 | -0/+253 |
| * | Remove mac_cache_fslabel_in_vnode sysctl -- with the new VFS/MAC | Robert Watson | 2002-11-04 | 8 | -48/+0 |
| * | License and wording updates: NAI has authorized the removal of clause | Robert Watson | 2002-11-04 | 13 | -91/+52 |
| * | License clarification and wording changes: NAI has approved removal of | Robert Watson | 2002-11-04 | 10 | -70/+40 |
| * | Introduce mac_check_system_settime(), a MAC check allowing policies to | Robert Watson | 2002-11-03 | 10 | -0/+106 |
| * | Change privilege model for mac_partition such that BSD superuser can change | Robert Watson | 2002-11-03 | 1 | -6/+4 |
| * | Fix some warnings on 64 bit architectures. The vn_extattr_get() | Maxime Henrion | 2002-11-02 | 2 | -4/+2 |
| * | Add MAC checks for various kenv() operations: dump, get, set, unset, | Robert Watson | 2002-11-01 | 10 | -0/+425 |
| * | Move to C99 sparse structure initialization for the mac_policy_ops | Robert Watson | 2002-10-30 | 18 | -6258/+729 |
| * | Various minor type, prototype tweaks -- clean up cruft due to lack of | Robert Watson | 2002-10-30 | 5 | -10/+10 |
| * | While 'mode_t' seemed like a good idea for the access mode argument for | Robert Watson | 2002-10-30 | 16 | -41/+41 |
| * | Try again to fix the KASSERT. | Robert Watson | 2002-10-30 | 1 | -1/+1 |
| * | Fix a KASSERT bug that showed up only in the LINT build, not the | Robert Watson | 2002-10-30 | 1 | -1/+1 |
| * | Hook up no-op stubs for reboot, swapon, sysctl entry points. | Robert Watson | 2002-10-29 | 2 | -0/+58 |
| * | Implement Biba policy entry points for mac_check_system_swapon() | Robert Watson | 2002-10-29 | 1 | -0/+59 |
| * | Require Biba privilege to relabel a network interface. | Robert Watson | 2002-10-29 | 1 | -0/+7 |
| * | Correct a typo in a previously commented include entry that was made | Robert Watson | 2002-10-28 | 1 | -1/+1 |
| * | Remove all reference to 'struct oldmac', since it's no longer required | Robert Watson | 2002-10-28 | 3 | -49/+61 |
| * | Add a return type for mac_biba_high_single(), apparently lost in an | Robert Watson | 2002-10-28 | 1 | -0/+1 |
| * | Rename mac_biba_subject_equal_ok() to mac_biba_subject_privileged() | Robert Watson | 2002-10-28 | 1 | -6/+6 |
| * | Zero the trusted_interface buffer before starting parsing. | Robert Watson | 2002-10-28 | 1 | -0/+6 |
| * | An inappropriate ASSERT slipped in during the recent merge of the | Robert Watson | 2002-10-28 | 8 | -16/+0 |
| * | Centrally manage enforcement of {reboot,swapon,sysctl} using the | Robert Watson | 2002-10-27 | 8 | -104/+72 |
| * | Implement mac_check_system_sysctl(), a MAC Framework entry point to | Robert Watson | 2002-10-27 | 10 | -0/+231 |
| * | Hook up mac_check_system_reboot(), a MAC Framework entry point that | Robert Watson | 2002-10-27 | 10 | -0/+187 |
| * | Merge from MAC tree: rename mac_check_vnode_swapon() to | Robert Watson | 2002-10-27 | 10 | -148/+148 |
| * | Slightly change the semantics of vnode labels for MAC: rather than | Robert Watson | 2002-10-26 | 15 | -4151/+1091 |
| * | Comment describing the semantics of mac_late. | Robert Watson | 2002-10-25 | 8 | -8/+48 |
| * | Provide a simple sample labeled access control policy, mac_partition. | Robert Watson | 2002-10-23 | 2 | -0/+337 |
| * | Style fix: space between 'switch' and '('. | Robert Watson | 2002-10-22 | 2 | -2/+2 |
| * | s/mls/biba/ in a copy+paste error for a printf. | Robert Watson | 2002-10-22 | 1 | -1/+1 |
| * | Remove the mac_te policy bits from 'struct oldmac' -- we're not going | Robert Watson | 2002-10-22 | 1 | -6/+0 |
| * | Don't enforce MAC Biba policy for socket visibility if Biba is not | Robert Watson | 2002-10-22 | 1 | -0/+3 |
| * | Introduce MAC_CHECK_VNODE_SWAPON, which permits MAC policies to | Robert Watson | 2002-10-22 | 10 | -0/+180 |
| * | Missed in previous merge: export sizeof(struct oldmac) rather than | Robert Watson | 2002-10-22 | 8 | -8/+8 |
| * | Adapt MAC policies for the new user API changes; teach policies how | Robert Watson | 2002-10-22 | 7 | -94/+691 |
| * | Support the new MAC user API in kernel: modify existing system calls | Robert Watson | 2002-10-22 | 8 | -1352/+7336 |
| * | Revised APIs for user process label management; the existing APIs relied | Robert Watson | 2002-10-22 | 2 | -97/+108 |
| * | mac_none is a stub policy without any functional implementation. | Robert Watson | 2002-10-21 | 2 | -14/+14 |
| * | Introduce mac_biba_copy() and mac_mls_copy(), which conditionally | Robert Watson | 2002-10-21 | 2 | -17/+49 |
| * | Add compartment support to Biba and MLS policies. The logic of the | Robert Watson | 2002-10-21 | 5 | -32/+140 |
| * | More in the way of minor consistency improvements: trim 'mac_mls_' | Robert Watson | 2002-10-21 | 1 | -8/+7 |
| * | Demote sockets to single-label objects rather than maintaining a | Robert Watson | 2002-10-21 | 2 | -32/+0 |
| * | Synchonize variable spelling with the MAC tree: we shortened some of | Robert Watson | 2002-10-21 | 1 | -9/+8 |
