aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_policy.h
Commit message (Expand)AuthorAgeFilesLines
* kern: mac: bump the MAC_VERSION for 16.xKyle Evans2026-04-231-1/+2
* kern: mac: sprinkle a bit of const correctnessKyle Evans2026-04-231-3/+3
* kern: vfs: add MAC checks for mount/unmount/updateKyle Evans2026-04-231-0/+12
* kern: mac: add a prison_cleanup entry pointKyle Evans2026-02-141-0/+3
* mac_set_fd(3): add support for jail descriptorsKyle Evans2026-01-161-0/+3
* kern: mac: add various jail MAC hooksKyle Evans2026-01-161-0/+25
* kern: mac: add a MAC label to struct prisonKyle Evans2026-01-161-0/+20
* MAC: Rename mac_cred_create_swapper to mac_cred_create_kproc0John Baldwin2025-12-041-2/+2
* New setcred() system call and associated MAC hooksOlivier Certner2024-12-161-1/+9
* MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodesOlivier Certner2024-12-161-0/+15
* sys: Remove $FreeBSD$: two-line .h patternWarner Losh2023-08-161-2/+0
* mac_ipacl: new MAC policy module to limit jail/vnet IP configurationShivank Garg2023-07-261-0/+12
* Bump MAC_VERSION to 5Allan Jude2022-10-071-1/+2
* mac: kdb/ddb framework hooksMitchell Horne2022-07-181-0/+17
* Remove AppleTalk support.Gleb Smirnoff2014-03-141-6/+0
* Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.Konstantin Belousov2013-08-211-0/+8
* Correct several issues in the integration of POSIX shared memory objectsRobert Watson2011-09-021-2/+6
* Add the fo_chown and fo_chmod methods to struct fileops and use themKonstantin Belousov2011-08-161-0/+16
* Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson2009-03-081-3/+2
* Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson2009-03-081-32/+35
* Rather than having MAC policies explicitly declare what object typesRobert Watson2009-01-101-30/+3
* Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala2008-10-281-2/+5
* Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson2008-10-281-6/+6
* Add a MAC label, MAC Framework, and MAC policy entry points for IPv6Robert Watson2008-10-261-1/+21
* Add mac_inpcb_check_visible MAC Framework entry point, which is similarBjoern A. Zeeb2008-10-171-0/+3
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-8/+37
* Rework the lifetime management of the kernel implementation of POSIXJohn Baldwin2008-06-271-6/+13
* Remove the posixsem_check_destroy() MAC check. It is semantically identicalJohn Baldwin2008-06-231-3/+0
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson2008-06-131-6/+5
* Make naming of include guards for MAC Framework include files moreRobert Watson2008-04-131-3/+3
* Add a new file descriptor type for IPC shared memory objects and use it toJohn Baldwin2008-01-081-0/+28
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson2007-10-281-5/+0
* Continue to move from generic network entry points in the TrustedBSD MACRobert Watson2007-10-281-5/+9
* Move towards more explicit support for various network protocol stacksRobert Watson2007-10-281-5/+21
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson2007-10-261-5/+5
* Sort entry points in mac_framework.h and mac_policy.h alphabetically byRobert Watson2007-10-251-439/+399
* Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson2007-10-251-8/+8
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moveRobert Watson2007-10-251-2/+2
* Further MAC Framework cleanup: normalize some local variable names andRobert Watson2007-10-251-3/+3
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-422/+422
* Bump MAC_VERSION to 4 and add an 8.x line in the version table. Version 4Robert Watson2007-10-231-1/+2
* Canonicalize naming of local variables for struct ksem and associatedRobert Watson2007-10-211-7/+7
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson2007-09-101-5/+5
* Fix a bunch of warnings due to a missing forward declaration of a struct.Peter Wemm2007-07-051-0/+1
* Add a new MAC framework and policy entry point,Robert Watson2007-06-261-0/+3
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-231-6/+6
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-221-144/+142
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-221-9/+5
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-221-8/+0
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-211-0/+14