aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_inet.c
Commit message (Expand)AuthorAgeFilesLines
* MAC: improve consistency in error handlingMichael Tuexen2024-10-311-0/+1
* sys: Remove $FreeBSD$: one-line .c patternWarner Losh2023-08-161-2/+0
* mac_ipacl: new MAC policy module to limit jail/vnet IP configurationShivank Garg2023-07-261-0/+11
* IfAPI: Add if_get/setmaclabel() and use it.Justin Hibbits2023-01-311-4/+4
* tcp_input/syncache: acquire only read lock on PCB for SYN,!ACK packetsGleb Smirnoff2021-04-121-1/+1
* When MAC is enabled and a policy module is loaded, don't unconditionallyRobert Watson2019-05-031-5/+7
* Fix improper use of "its".Bryan Drewery2016-11-081-1/+1
* - For kernel compiled only with KDTRACE_HOOKS and not any lock debuggingAttilio Rao2013-11-251-1/+0
* Continue work to optimize performance of "options MAC" when no MAC policyRobert Watson2009-06-031-0/+46
* Rename MAC Framework-internal macros used to invoke policy entry points:Robert Watson2009-05-011-32/+39
* Rework MAC Framework synchronization in a number of ways in order toRobert Watson2009-03-141-28/+45
* Add static DTrace probes for MAC Framework access control checks andRobert Watson2009-03-081-1/+14
* Add mac_inpcb_check_visible MAC Framework entry point, which is similarBjoern A. Zeeb2008-10-171-0/+12
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-28/+46
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson2008-06-131-14/+14
* Plug a memory leak which can occur when multiple MAC policies are loadedChristian S.J. Peron2008-05-271-0/+4
* When propagating a MAC label from an inpcb to an mbuf, allow read andRobert Watson2008-04-191-1/+1
* Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros toRobert Watson2008-04-171-3/+3
* Continue to move from generic network entry points in the TrustedBSD MACRobert Watson2007-10-281-2/+29
* Move towards more explicit support for various network protocol stacksRobert Watson2007-10-281-1/+25
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson2007-10-261-2/+2
* Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson2007-10-251-8/+8
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-33/+36
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-221-23/+21
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-061-1/+0
* In mac_inpcb_sosetlabel(), assert the socket lock rather than commentingRobert Watson2006-12-281-1/+1
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-2/+1
* Remove mac_enforce_subsystem debugging sysctls. Enforcement onRobert Watson2006-12-211-3/+0
* Re-wrap comment at 77 character columns.Robert Watson2006-12-201-7/+7
* Fix LOR between the syncache and inpcb locks when MAC is present in theChristian S.J. Peron2006-12-131-0/+54
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson2006-10-221-0/+1
* Remove MAC_DEBUG label counters, which were used to debug leaks andRobert Watson2006-09-201-13/+0
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointChristian S.J. Peron2006-09-121-0/+10
* Move inet and inet6 related MAC Framework entry points from mac_net.cRobert Watson2004-02-261-0/+292
generated by cgit v1.2.3 (git 2.25.1) at 2026-03-24 06:13:02 +0000