aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_framework.h
Commit message (Expand)AuthorAgeFilesLines
* Remove AppleTalk support.Gleb Smirnoff2014-03-141-2/+0
* Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.Konstantin Belousov2013-08-211-0/+4
* Correct several issues in the integration of POSIX shared memory objectsRobert Watson2011-09-021-2/+4
* Add the fo_chown and fo_chmod methods to struct fileops and use themKonstantin Belousov2011-08-161-0/+8
* Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson2009-03-081-3/+2
* Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson2009-03-081-23/+20
* Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala2008-10-281-2/+3
* Rename mac_cred_mmapped_drop_perms(), which revokes access to virtualRobert Watson2008-10-281-2/+1
* Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson2008-10-281-3/+3
* Add a MAC label, MAC Framework, and MAC policy entry points for IPv6Robert Watson2008-10-261-1/+9
* Add mac_inpcb_check_visible MAC Framework entry point, which is similarBjoern A. Zeeb2008-10-171-0/+1
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-6/+4
* Rework the lifetime management of the kernel implementation of POSIXJohn Baldwin2008-06-271-3/+8
* Remove the posixsem_check_destroy() MAC check. It is semantically identicalJohn Baldwin2008-06-231-1/+0
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson2008-06-131-6/+6
* Make naming of include guards for MAC Framework include files moreRobert Watson2008-04-131-3/+3
* Add a new file descriptor type for IPC shared memory objects and use it toJohn Baldwin2008-01-081-0/+13
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson2007-10-281-2/+0
* Continue to move from generic network entry points in the TrustedBSD MACRobert Watson2007-10-281-2/+3
* Move towards more explicit support for various network protocol stacksRobert Watson2007-10-281-2/+7
* Update comment following MAC Framework entry point renaming andRobert Watson2007-10-261-1/+6
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson2007-10-261-2/+2
* Sort entry points in mac_framework.h and mac_policy.h alphabetically byRobert Watson2007-10-251-190/+175
* Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson2007-10-251-4/+4
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moveRobert Watson2007-10-251-1/+1
* Further MAC Framework cleanup: normalize some local variable names andRobert Watson2007-10-251-2/+2
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-193/+192
* Canonicalize naming of local variables for struct ksem and associatedRobert Watson2007-10-211-7/+7
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson2007-09-101-2/+2
* Add a new MAC framework and policy entry point,Robert Watson2007-06-261-0/+3
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-231-3/+3
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-221-60/+59
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-221-4/+0
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-211-0/+6
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-061-2/+1
* Comment and white space cleanup.Robert Watson2006-12-201-15/+17
* Fix LOR between the syncache and inpcb locks when MAC is present in theChristian S.J. Peron2006-12-131-0/+4
* Add a new priv(9) kernel interface for checking the availability ofRobert Watson2006-11-061-0/+2
* Remove extra _MAC_ from #ifdef guard.Robert Watson2006-10-251-1/+1
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson2006-10-221-73/+13
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointChristian S.J. Peron2006-09-121-0/+1
* Introduce a new MAC entry point for label initialization of the NFS daemon'sChristian S.J. Peron2006-04-061-0/+1
* Complete removal of mac_create_root_mount/mpo_create_root_mount MACRobert Watson2005-10-021-1/+0
* When devfs cloning takes place, provide access to the credential of theRobert Watson2005-07-141-2/+2
* Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which isRobert Watson2005-07-051-1/+1
* Add MAC Framework and MAC policy entry point mac_check_socket_create(),Robert Watson2005-07-051-0/+6
* Gratuitous renaming of four System V Semaphore MAC Framework entryRobert Watson2005-06-071-4/+4
* Introduce MAC Framework and MAC Policy entry points to label and controlRobert Watson2005-05-041-0/+15
* Introduce p_canwait() and MAC Framework and MAC Policy entry pointsRobert Watson2005-04-181-0/+1
* Introduce three additional MAC Framework and MAC Policy entry points toRobert Watson2005-04-161-1/+5