aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_inet.c
Commit message (Expand)AuthorAgeFilesLines
* Continue work to optimize performance of "options MAC" when no MAC policyRobert Watson2009-06-031-0/+46
* Rename MAC Framework-internal macros used to invoke policy entry points:Robert Watson2009-05-011-32/+39
* Rework MAC Framework synchronization in a number of ways in order toRobert Watson2009-03-141-28/+45
* Add static DTrace probes for MAC Framework access control checks andRobert Watson2009-03-081-1/+14
* Add mac_inpcb_check_visible MAC Framework entry point, which is similarBjoern A. Zeeb2008-10-171-0/+12
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-28/+46
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson2008-06-131-14/+14
* Plug a memory leak which can occur when multiple MAC policies are loadedChristian S.J. Peron2008-05-271-0/+4
* When propagating a MAC label from an inpcb to an mbuf, allow read andRobert Watson2008-04-191-1/+1
* Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros toRobert Watson2008-04-171-3/+3
* Continue to move from generic network entry points in the TrustedBSD MACRobert Watson2007-10-281-2/+29
* Move towards more explicit support for various network protocol stacksRobert Watson2007-10-281-1/+25
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson2007-10-261-2/+2
* Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson2007-10-251-8/+8
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-33/+36
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-221-23/+21
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-061-1/+0
* In mac_inpcb_sosetlabel(), assert the socket lock rather than commentingRobert Watson2006-12-281-1/+1
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-2/+1
* Remove mac_enforce_subsystem debugging sysctls. Enforcement onRobert Watson2006-12-211-3/+0
* Re-wrap comment at 77 character columns.Robert Watson2006-12-201-7/+7
* Fix LOR between the syncache and inpcb locks when MAC is present in theChristian S.J. Peron2006-12-131-0/+54
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson2006-10-221-0/+1
* Remove MAC_DEBUG label counters, which were used to debug leaks andRobert Watson2006-09-201-13/+0
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointChristian S.J. Peron2006-09-121-0/+10
* Move inet and inet6 related MAC Framework entry points from mac_net.cRobert Watson2004-02-261-0/+292