aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Remove extra tabs indenting MAC library calls; they were there toRobert Watson2003-08-291-21/+20
* Fix a mac_policy_list reference to be a mac_static_policy_listRobert Watson2003-08-268-8/+8
* Make the elements argument to mac_prepare() be const.Robert Watson2003-08-221-1/+1
* Add prototype for new libc function mac_prepare_type().Robert Watson2003-08-221-0/+1
* Correct typo introduced during manual merge: hook up the reflect_tcpRobert Watson2003-08-221-1/+1
* Introduce two new MAC Framework and MAC policy entry points:Robert Watson2003-08-2110-0/+157
* Correct logic for filling out a "new" label during a credentialRobert Watson2003-08-211-7/+29
* Retrofit of mac_test regression and consistency test module for MACRobert Watson2003-08-211-1/+379
* Add stub entries for new MAC framework entry points:Robert Watson2003-08-211-0/+32
* Generally rename things to represent the fact that this is now theRobert Watson2003-08-211-268/+270
* mac_none is now the null policy, not a stub policy, so remove theRobert Watson2003-08-211-1031/+5
* Implementations of mpo_check_vnode_deleteextattr() andRobert Watson2003-08-213-1/+112
* Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr():Robert Watson2003-08-2110-0/+265
* Remove about 40 lines of #ifdef/#endif by using new macrosRobert Watson2003-08-208-560/+248
* Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF.Robert Watson2003-08-018-224/+144
* Improve consistency with the Biba policy -- renameRobert Watson2003-07-311-23/+10
* Remove a suser() check in the mac_biba policy: the MAC Framework itselfRobert Watson2003-07-311-19/+0
* Remove trailing whitespace.Robert Watson2003-07-054-6/+6
* Redesign the externalization APIs from the MAC Framework toRobert Watson2003-06-2316-495/+271
* Forward declare a boatload of structures referenced in the MACRobert Watson2003-06-221-0/+12
* Add a f_vnode field to struct file.Poul-Henning Kamp2003-06-228-16/+16
* Use __FBSDID().David E. O'Brien2003-06-118-32/+32
* Also implement mpo_copy_mbuf_label() for mac_lomac, or labels mayRobert Watson2003-06-021-0/+1
* Use mac_biba_label_copy() and mac_mls_label_copy() to implement theRobert Watson2003-06-022-0/+2
* Remove double return()Poul-Henning Kamp2003-05-311-2/+0
* Rewrite Biba and MLS label externalization code to use sbufs insteadRobert Watson2003-05-312-105/+99
* Make sure all character pointers are properly initialized; this wasRobert Watson2003-05-301-4/+5
* Use strsep() in preference to manual string parsing for Biba and MLSRobert Watson2003-05-292-97/+80
* Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables andRobert Watson2003-05-088-64/+64
* Clean up locking for the MAC Framework:Robert Watson2003-05-078-624/+1440
* - Acquire the vm_object's lock when performing vm_object_page_clean().Alan Cox2003-04-248-0/+16
* Rather than check for M_PKTHDR and conditionally perform access control,Robert Watson2003-04-181-4/+3
* Update NAI copyright to 2003, missed in earlier commits and merges.Robert Watson2003-04-1810-10/+10
* Modify mac_test policy to invoke WITNESS_WARN() when a potentiallyRobert Watson2003-04-151-0/+29
* Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and TestRobert Watson2003-04-154-4/+4
* mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, soRobert Watson2003-04-158-24/+16
* Move MAC label storage for mbufs into m_tags from the m_pkthdr structure,Robert Watson2003-04-1410-138/+952
* Abstract access to the mbuf header label behind a new function,Robert Watson2003-04-148-200/+640
* Introduce an M_ASSERTPKTHDR() macro which performs the very common taskDag-Erling Smørgrav2003-04-088-16/+16
* Trim "trustedbsd_" from the front of the policy module "short names";Robert Watson2003-03-279-10/+10
* Modify the mac_init_ipq() MAC Framework entry point to accept anRobert Watson2003-03-2616-41/+106
* Update the MAC regression test policy to include stubs and testingRobert Watson2003-03-251-0/+155
* Update MAC "none" stub policy to include stubs for the followingRobert Watson2003-03-252-0/+196
* Expand scope of the MLS policy to include a new entry point availableRobert Watson2003-03-251-0/+20
* Expand scope of the BSD extended "file system firewall" policy toRobert Watson2003-03-251-0/+17
* Expand scope of the Biba policy to include some of the new entryRobert Watson2003-03-251-0/+40
* Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE,Robert Watson2003-03-231-8/+0
* Including <sys/stdint.h> is (almost?) universally only to be able to usePoul-Henning Kamp2003-03-181-1/+0
* Do not depend on namespace pollution, explicitly include sys/sx.hAlexander Kabaev2003-03-121-0/+1
* Instrument sysarch() MD privileged I/O access interfaces with a MACRobert Watson2003-03-0610-0/+98