aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_framework.c
Commit message (Expand)AuthorAgeFilesLines
* Copy releng/8.2 to release/8.2.0 for 8.2-RELEASE.release/8.2.0_cvsKen Smith2011-02-161-1/+1
* Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings thatRobert Watson2009-06-021-2/+2
* Add internal 'mac_policy_count' counter to the MAC Framework, which is aRobert Watson2009-06-021-5/+11
* Make the rmlock(9) interface a bit more like the rwlock(9) interface:Robert Watson2009-05-291-1/+1
* Convert the MAC Framework from using rwlocks to rmlocks to stabilizeRobert Watson2009-05-271-11/+11
* Rework MAC Framework synchronization in a number of ways in order toRobert Watson2009-03-141-112/+73
* Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson2009-03-081-0/+3
* Add static DTrace probes for MAC Framework access control checks andRobert Watson2009-03-081-1/+3
* Reduce the verbosity of SDT trace points for DTrace by defining severalRobert Watson2009-03-031-12/+3
* Begin to add SDT tracing of the MAC Framework: add policy modevent,Robert Watson2009-01-241-1/+24
* Rather than having MAC policies explicitly declare what object typesRobert Watson2009-01-101-7/+45
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-29/+14
* Remove conditional return of 1. For the MAC_STATIC case at this point inChristian S.J. Peron2007-01-011-3/+0
* Only signal the CV indicating that the MAC Framework is available forRobert Watson2006-12-311-6/+23
* Slightly resort functions in file so that no forward function prototypesRobert Watson2006-12-291-49/+46
* Re-add include of opt_mac.h in mac_framework.c, which was improperlyRobert Watson2006-12-291-0/+2
* Centralize definition of MAC_VERSION in mac_policy.h, as it defines theRobert Watson2006-12-281-4/+3
* Move mac_init_label() and mac_destroy_label() from mac_framework.c toRobert Watson2006-12-281-19/+0
* Trim unneeded includes.Robert Watson2006-12-281-28/+0
* Break contents of kern_mac.c out into two files following a repo-copy:Robert Watson2006-12-281-672/+0
* Update MAC Framework general comments, referencing various interfaces itRobert Watson2006-12-281-12/+40
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-2/+1
* Remove mac_enforce_subsystem debugging sysctls. Enforcement onRobert Watson2006-12-211-3/+1
* Expand commenting on label slots, justification for the MAC Framework lockingRobert Watson2006-12-201-54/+79
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson2006-10-221-1/+2
* Remove MAC_DEBUG label counters, which were used to debug leaks andRobert Watson2006-09-201-11/+0
* Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists inPoul-Henning Kamp2006-07-171-1/+0
* Don't call vn_finished_write() if vn_start_write() failed.Tor Egge2006-03-191-4/+6
* Standard Giant push down operations for the Mandatory Access Control (MAC)Christian S.J. Peron2005-10-041-34/+27
* Bump the module versions of the MAC Framework and MAC policy modulesRobert Watson2005-07-141-1/+5
* Get the directory structure correct in a comment.Tom Rhodes2005-04-221-1/+2
* In mac_get_fd(), remove unconditional acquisition of Giant around copyingRobert Watson2005-04-161-9/+7
* Bump MAC Framework version to 2 in preparation for the upcoming API/ABIRobert Watson2004-11-091-1/+1
* Disable use of synchronization early in the boot by the MAC Framework;Robert Watson2004-10-301-0/+21
* Do a pass over all modules in the kernel and make them return EOPNOTSUPPPoul-Henning Kamp2004-07-151-0/+1
* Add /* !MAC */ to final #endif.Robert Watson2004-05-031-1/+1
* Bump copyright date for NETA to 2004.Robert Watson2004-05-031-1/+1
* Add MAC_STATIC, a kernel option that disables internal MAC FrameworkRobert Watson2004-05-031-0/+25
* Update my personal copyrights and NETA copyrights in the kernelRobert Watson2004-02-221-2/+2
* Coalesce pipe allocations and frees. Previously, the pipe codeRobert Watson2004-02-011-3/+3
* Implement sockets support for __mac_get_fd() and __mac_set_fd()Robert Watson2003-11-161-0/+30
* Mark __mac_get_pid() as MPSAFE in the comment, as it runs withoutRobert Watson2003-11-121-37/+15
* Modify the MAC Framework so that instead of embedding a (struct label)Robert Watson2003-11-121-62/+57
* Whitespace sync to MAC branch, expand comment at the head of the file.Robert Watson2003-11-111-3/+9
* Remove the flags argument from mac_externalize_*_label(), as it's notRobert Watson2003-11-061-6/+6
* mac_Finish break-out of kern_mac.c into parts:Robert Watson2003-10-221-2756/+5
* Variable cleanup following break-out of kern_mac.c into sys/security/mac:Robert Watson2003-10-221-16/+10
* Rename error_select() to mac_error_select(), and unstaticize so itRobert Watson2003-10-221-5/+4
* If the struct mac copied into the kernel has a negative length, returnRobert Watson2003-09-291-1/+2
* Fix a mac_policy_list reference to be a mac_static_policy_listRobert Watson2003-08-261-1/+1