aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_process.c
Commit message (Expand)AuthorAgeFilesLines
* Rename MAC Framework-internal macros used to invoke policy entry points:Robert Watson2009-05-011-7/+7
* Rework MAC Framework synchronization in a number of ways in order toRobert Watson2009-03-141-5/+5
* Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson2009-03-081-148/+0
* Add static DTrace probes for MAC Framework access control checks andRobert Watson2009-03-081-1/+57
* Use vm_map_entry_t instead of explicit struct vm_map_entry *.Konstantin Belousov2009-02-241-1/+1
* Make preparations for resurrecting shared/read locks on vm maps:Alan Cox2008-12-221-4/+2
* Break out strictly credential-related portions of mac_process.c into aRobert Watson2008-10-281-141/+0
* Rename mac_cred_mmapped_drop_perms(), which revokes access to virtualRobert Watson2008-10-281-5/+12
* Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson2008-10-281-34/+34
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-6/+40
* VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used inAttilio Rao2008-01-131-2/+2
* vn_lock() is currently only used with the 'curthread' passed as argument.Attilio Rao2008-01-101-2/+2
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moveRobert Watson2007-10-251-0/+16
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-50/+54
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-221-35/+40
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-2/+1
* Remove mac_enforce_subsystem debugging sysctls. Enforcement onRobert Watson2006-12-211-57/+0
* Clean up comment white space and line wrapping.Robert Watson2006-12-201-15/+14
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson2006-10-221-0/+1
* Remove MAC_DEBUG label counters, which were used to debug leaks andRobert Watson2006-09-201-12/+0
* Eliminate a deadlock when creating snapshots. Blocking vn_start_write() mustTor Egge2006-03-021-0/+3
* Lock object while we iterate through it's backing objects.Christian S.J. Peron2005-10-091-6/+7
* Use the correct object's backing_object_offset while calculating offsets.Christian S.J. Peron2005-10-041-1/+4
* Conditionally pickup Giant in mac_cred_mmapped_drop_perms_recurse soChristian S.J. Peron2005-10-041-2/+6
* Introduce p_canwait() and MAC Framework and MAC Policy entry pointsRobert Watson2005-04-181-0/+15
* Introduce new MAC Framework and MAC Policy entry points to control the useRobert Watson2005-04-161-0/+137
* Update my personal copyrights and NETA copyrights in the kernelRobert Watson2004-02-221-2/+2
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),Robert Watson2003-12-061-2/+2
* Modify the MAC Framework so that instead of embedding a (struct label)Robert Watson2003-11-121-21/+43
* Remove the flags argument from mac_externalize_*_label(), as it's notRobert Watson2003-11-061-1/+1
* Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the objectRobert Watson2003-10-251-2/+2
* Remove non-credential/process-related bits from mac_process.c. Leave:Robert Watson2003-10-221-3473/+8
* If the struct mac copied into the kernel has a negative length, returnRobert Watson2003-09-291-1/+2
* Fix a mac_policy_list reference to be a mac_static_policy_listRobert Watson2003-08-261-1/+1
* Introduce two new MAC Framework and MAC policy entry points:Robert Watson2003-08-211-0/+19
* Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr():Robert Watson2003-08-211-0/+32
* Remove about 40 lines of #ifdef/#endif by using new macrosRobert Watson2003-08-201-70/+31
* Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF.Robert Watson2003-08-011-28/+18
* Redesign the externalization APIs from the MAC Framework toRobert Watson2003-06-231-40/+20
* Add a f_vnode field to struct file.Poul-Henning Kamp2003-06-221-2/+2
* Use __FBSDID().David E. O'Brien2003-06-111-4/+4
* Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables andRobert Watson2003-05-081-8/+8
* Clean up locking for the MAC Framework:Robert Watson2003-05-071-78/+180
* - Acquire the vm_object's lock when performing vm_object_page_clean().Alan Cox2003-04-241-0/+2
* Update NAI copyright to 2003, missed in earlier commits and merges.Robert Watson2003-04-181-1/+1
* mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, soRobert Watson2003-04-151-3/+2
* Move MAC label storage for mbufs into m_tags from the m_pkthdr structure,Robert Watson2003-04-141-17/+118
* Abstract access to the mbuf header label behind a new function,Robert Watson2003-04-141-25/+80
* Introduce an M_ASSERTPKTHDR() macro which performs the very common taskDag-Erling Smørgrav2003-04-081-2/+2
* Modify the mac_init_ipq() MAC Framework entry point to accept anRobert Watson2003-03-261-4/+12
generated by cgit v1.2.3 (git 2.25.1) at 2026-02-25 23:01:31 +0000