| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Rename MAC Framework-internal macros used to invoke policy entry points: | Robert Watson | 2009-05-01 | 1 | -11/+12 |
| * | Rework MAC Framework synchronization in a number of ways in order to | Robert Watson | 2009-03-14 | 1 | -7/+7 |
| * | Add static DTrace probes for MAC Framework access control checks and | Robert Watson | 2009-03-08 | 1 | -1/+46 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson | 2007-10-24 | 1 | -26/+30 |
| * | Normalize variable naming in the MAC Framework by adopting the normal | Robert Watson | 2007-04-22 | 1 | -1/+1 |
| * | Remove MAC Framework access control check entry points made redundant with | Robert Watson | 2007-04-22 | 1 | -47/+16 |
| * | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | Robert Watson | 2007-02-06 | 1 | -1/+0 |
| * | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | Robert Watson | 2006-12-22 | 1 | -2/+1 |
| * | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | Robert Watson | 2006-12-21 | 1 | -55/+0 |
| * | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | Robert Watson | 2006-11-06 | 1 | -0/+6 |
| * | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | Robert Watson | 2006-10-22 | 1 | -0/+1 |
| * | Correct grammar error in comment | Christian S.J. Peron | 2005-06-10 | 1 | -1/+1 |
| * | add missing #include <sys/module.h> | Poul-Henning Kamp | 2004-05-30 | 1 | -0/+1 |
| * | Reimplement sysctls handling by MAC framework. | Pawel Jakub Dawidek | 2004-02-22 | 1 | -4/+3 |
| * | Modify the MAC Framework so that instead of embedding a (struct label) | Robert Watson | 2003-11-12 | 1 | -4/+4 |
| * | Remove non-system bits from mac_system.c. Leave: | Robert Watson | 2003-10-22 | 1 | -3692/+2 |
| * | If the struct mac copied into the kernel has a negative length, return | Robert Watson | 2003-09-29 | 1 | -1/+2 |
| * | Fix a mac_policy_list reference to be a mac_static_policy_list | Robert Watson | 2003-08-26 | 1 | -1/+1 |
| * | Introduce two new MAC Framework and MAC policy entry points: | Robert Watson | 2003-08-21 | 1 | -0/+19 |
| * | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | Robert Watson | 2003-08-21 | 1 | -0/+32 |
| * | Remove about 40 lines of #ifdef/#endif by using new macros | Robert Watson | 2003-08-20 | 1 | -70/+31 |
| * | Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF. | Robert Watson | 2003-08-01 | 1 | -28/+18 |
| * | Redesign the externalization APIs from the MAC Framework to | Robert Watson | 2003-06-23 | 1 | -40/+20 |
| * | Add a f_vnode field to struct file. | Poul-Henning Kamp | 2003-06-22 | 1 | -2/+2 |
| * | Use __FBSDID(). | David E. O'Brien | 2003-06-11 | 1 | -4/+4 |
| * | Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables and | Robert Watson | 2003-05-08 | 1 | -8/+8 |
| * | Clean up locking for the MAC Framework: | Robert Watson | 2003-05-07 | 1 | -78/+180 |
| * | - Acquire the vm_object's lock when performing vm_object_page_clean(). | Alan Cox | 2003-04-24 | 1 | -0/+2 |
| * | Update NAI copyright to 2003, missed in earlier commits and merges. | Robert Watson | 2003-04-18 | 1 | -1/+1 |
| * | mac_init_mbuf_tag() accepts malloc flags, not mbuf allocator flags, so | Robert Watson | 2003-04-15 | 1 | -3/+2 |
| * | Move MAC label storage for mbufs into m_tags from the m_pkthdr structure, | Robert Watson | 2003-04-14 | 1 | -17/+118 |
| * | Abstract access to the mbuf header label behind a new function, | Robert Watson | 2003-04-14 | 1 | -25/+80 |
| * | Introduce an M_ASSERTPKTHDR() macro which performs the very common task | Dag-Erling Smørgrav | 2003-04-08 | 1 | -2/+2 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | Robert Watson | 2003-03-26 | 1 | -4/+12 |
| * | Instrument sysarch() MD privileged I/O access interfaces with a MAC | Robert Watson | 2003-03-06 | 1 | -0/+12 |
| * | Provide a mac_check_system_swapoff() entry point, which permits MAC | Robert Watson | 2003-03-05 | 1 | -0/+14 |
| * | Replace calls to WITNESS_SLEEP() and witness_list() with equivalent calls | John Baldwin | 2003-03-04 | 1 | -2/+3 |
| * | Back out M_* changes, per decision of the TRB. | Warner Losh | 2003-02-19 | 1 | -34/+34 |
| * | Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0. | Alfred Perlstein | 2003-01-21 | 1 | -34/+34 |
| * | Bow to the whining masses and change a union back into void *. Retain | Matthew Dillon | 2003-01-13 | 1 | -4/+4 |
| * | Change struct file f_data to un_data, a union of the correct struct | Matthew Dillon | 2003-01-12 | 1 | -4/+4 |
| * | SCARGS removal take II. | Alfred Perlstein | 2002-12-14 | 1 | -5/+5 |
| * | Backout removal SCARGS, the code freeze is only "selectively" over. | Alfred Perlstein | 2002-12-13 | 1 | -5/+5 |
| * | Remove SCARGS. | Alfred Perlstein | 2002-12-13 | 1 | -5/+5 |
| * | Remove dm_root entry from struct devfs_mount. It's never set, and is | Robert Watson | 2002-12-09 | 1 | -9/+11 |
| * | Un-staticize mac_cred_mmapped_drop_perms() so that it may be used | Robert Watson | 2002-11-26 | 1 | -1/+1 |
| * | Introduce p_label, extensible security label storage for the MAC framework | Robert Watson | 2002-11-20 | 1 | -1/+25 |
| * | Merge kld access control checks from the MAC tree: these access control | Robert Watson | 2002-11-19 | 1 | -0/+46 |
| * | Introduce a condition variable to avoid returning EBUSY when | Robert Watson | 2002-11-13 | 1 | -29/+52 |
| * | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | Robert Watson | 2002-11-12 | 1 | -7/+0 |
