| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | MAC: syscalls: mac_label_copyin(): 32-bit compatibility | Olivier Certner | 2025-01-16 | 1 | -6/+44 |
| * | MAC: syscalls: Split mac_set_proc() into reusable pieces | Olivier Certner | 2025-01-16 | 1 | -20/+95 |
| * | MAC: syscalls: Factor out common label copy-in code | Olivier Certner | 2025-01-16 | 1 | -118/+83 |
| * | sys: Remove $FreeBSD$: one-line .c pattern | Warner Losh | 2023-08-16 | 1 | -2/+0 |
| * | vfs: stop using NDFREE | Mateusz Guzik | 2022-12-19 | 1 | -3/+4 |
| * | vfs: introduce V_PCATCH to stop abusing PCATCH | Mateusz Guzik | 2022-09-17 | 1 | -2/+2 |
| * | sysent: Get rid of bogus sys/sysent.h include. | Dmitry Chagin | 2022-05-28 | 1 | -1/+0 |
| * | vfs: remove the unused thread argument from NDINIT* | Mateusz Guzik | 2021-11-25 | 1 | -2/+2 |
| * | Convert remaining cap_rights_init users to cap_rights_init_one | Mateusz Guzik | 2021-01-12 | 1 | -2/+4 |
| * | vfs: drop the mostly unused flags argument from VOP_UNLOCK | Mateusz Guzik | 2020-01-03 | 1 | -2/+2 |
| * | Reduce duplication in __mac_*_(file|link)(2) implementation. | Brooks Davis | 2018-02-15 | 1 | -97/+27 |
| * | Do pass removing some write-only variables from the kernel. | Alexander Kabaev | 2017-12-25 | 1 | -2/+0 |
| * | cred: add proc_set_cred helper | Mateusz Guzik | 2015-03-16 | 1 | -1/+1 |
| * | Update kernel inclusions of capability.h to use capsicum.h instead; some | Robert Watson | 2014-03-16 | 1 | -1/+1 |
| * | Change the cap_rights_t type from uint64_t to a structure that we can extend | Pawel Jakub Dawidek | 2013-09-05 | 1 | -2/+4 |
| * | Remove the support for using non-mpsafe filesystem modules. | Konstantin Belousov | 2012-10-22 | 1 | -23/+10 |
| * | When allocation of labels on files is implicitly disabled due to MAC | Robert Watson | 2012-04-08 | 1 | -14/+27 |
| * | In order to maximize the re-usability of kernel code in user space this | Kip Macy | 2011-09-16 | 1 | -20/+20 |
| * | Second-to-last commit implementing Capsicum capabilities in the FreeBSD | Robert Watson | 2011-08-11 | 1 | -2/+3 |
| * | - Add a FEATURE for capsicum (security_capabilities). | Alexander Leidinger | 2011-03-04 | 1 | -1/+1 |
| * | Add some FEATURE macros for various features (AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/ | Alexander Leidinger | 2011-02-25 | 1 | -0/+3 |
| * | Rework MAC Framework synchronization in a number of ways in order to | Robert Watson | 2009-03-14 | 1 | -4/+8 |
| * | Rename mac_cred_mmapped_drop_perms(), which revokes access to virtual | Robert Watson | 2008-10-28 | 1 | -9/+1 |
| * | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson | 2008-08-23 | 1 | -0/+28 |
| * | Add the support for the AT_FDCWD and fd-relative name lookups to the | Konstantin Belousov | 2008-03-31 | 1 | -0/+1 |
| * | VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used in | Attilio Rao | 2008-01-13 | 1 | -2/+2 |
| * | vn_lock() is currently only used with the 'curthread' passed as argument. | Attilio Rao | 2008-01-10 | 1 | -2/+2 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson | 2007-10-24 | 1 | -20/+20 |
| * | Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which | Robert Watson | 2007-08-06 | 1 | -4/+0 |
| * | Remove 'MPSAFE' annotations from the comments above most system calls: all | Robert Watson | 2007-03-04 | 1 | -30/+0 |
| * | Trim unneeded includes. | Robert Watson | 2006-12-28 | 1 | -20/+0 |
| * | Break contents of kern_mac.c out into two files following a repo-copy: | Robert Watson | 2006-12-28 | 1 | -537/+0 |
| * | Update MAC Framework general comments, referencing various interfaces it | Robert Watson | 2006-12-28 | 1 | -12/+40 |
| * | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | Robert Watson | 2006-12-22 | 1 | -2/+1 |
| * | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | Robert Watson | 2006-12-21 | 1 | -3/+1 |
| * | Expand commenting on label slots, justification for the MAC Framework locking | Robert Watson | 2006-12-20 | 1 | -54/+79 |
| * | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | Robert Watson | 2006-10-22 | 1 | -1/+2 |
| * | Remove MAC_DEBUG label counters, which were used to debug leaks and | Robert Watson | 2006-09-20 | 1 | -11/+0 |
| * | Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists in | Poul-Henning Kamp | 2006-07-17 | 1 | -1/+0 |
| * | Don't call vn_finished_write() if vn_start_write() failed. | Tor Egge | 2006-03-19 | 1 | -4/+6 |
| * | Standard Giant push down operations for the Mandatory Access Control (MAC) | Christian S.J. Peron | 2005-10-04 | 1 | -34/+27 |
| * | Bump the module versions of the MAC Framework and MAC policy modules | Robert Watson | 2005-07-14 | 1 | -1/+5 |
| * | Get the directory structure correct in a comment. | Tom Rhodes | 2005-04-22 | 1 | -1/+2 |
| * | In mac_get_fd(), remove unconditional acquisition of Giant around copying | Robert Watson | 2005-04-16 | 1 | -9/+7 |
| * | Bump MAC Framework version to 2 in preparation for the upcoming API/ABI | Robert Watson | 2004-11-09 | 1 | -1/+1 |
| * | Disable use of synchronization early in the boot by the MAC Framework; | Robert Watson | 2004-10-30 | 1 | -0/+21 |
| * | Do a pass over all modules in the kernel and make them return EOPNOTSUPP | Poul-Henning Kamp | 2004-07-15 | 1 | -0/+1 |
| * | Add /* !MAC */ to final #endif. | Robert Watson | 2004-05-03 | 1 | -1/+1 |
| * | Bump copyright date for NETA to 2004. | Robert Watson | 2004-05-03 | 1 | -1/+1 |
| * | Add MAC_STATIC, a kernel option that disables internal MAC Framework | Robert Watson | 2004-05-03 | 1 | -0/+25 |
