aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac
Commit message (Expand)AuthorAgeFilesLines
* Require that MAC label buffers be able to store a non-empty string.Mark Johnston2018-08-011-1/+3
* Use an accessor function to access ifr_data.Brooks Davis2018-03-301-2/+2
* Reduce duplication in __mac_*_(file|link)(2) implementation.Brooks Davis2018-02-151-97/+27
* Do pass removing some write-only variables from the kernel.Alexander Kabaev2017-12-251-2/+0
* Fix improper use of "its".Bryan Drewery2016-11-081-1/+1
* sys/security: minor spelling fixes.Pedro F. Giffuni2016-05-062-2/+2
* Fix style issues around existing SDT probes.Mark Johnston2015-12-162-22/+22
* cred: add proc_set_cred helperMateusz Guzik2015-03-161-1/+1
* Update kernel inclusions of capability.h to use capsicum.h instead; someRobert Watson2014-03-161-1/+1
* Remove AppleTalk support.Gleb Smirnoff2014-03-143-81/+0
* As constantly reported during kernel compilation, m_buflen is unsigned soBjoern A. Zeeb2013-12-251-2/+1
* dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINEAndriy Gapon2013-11-262-27/+27
* - For kernel compiled only with KDTRACE_HOOKS and not any lock debuggingAttilio Rao2013-11-2516-17/+0
* Fix some typos that were causing probe argument types to show up as unknown.Mark Johnston2013-10-014-4/+4
* Make the mac_policy_rm lock recursable, which allows reentrance intoKonstantin Belousov2013-09-291-1/+2
* Change the cap_rights_t type from uint64_t to a structure that we can extendPawel Jakub Dawidek2013-09-051-2/+4
* Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.Konstantin Belousov2013-08-213-0/+46
* Relax the vm object locking in mac_proc_vm_revoke_recurse(). A read lockAlan Cox2013-06-041-4/+4
* Switch the vm_object mutex to be a rwlock. This will enable in theAttilio Rao2013-03-091-7/+7
* Remove the support for using non-mpsafe filesystem modules.Konstantin Belousov2012-10-222-29/+12
* When allocation of labels on files is implicitly disabled due to MACRobert Watson2012-04-081-14/+27
* - Improve BPF locking model.Alexander V. Chernikov2012-04-061-0/+2
* Revert the approach for skipping lockstat_probe_func call when doingAttilio Rao2011-12-121-1/+0
* put sys/systm.h at its proper place or add it if missingAndriy Gapon2011-12-122-1/+2
* In order to maximize the re-usability of kernel code in user space thisKip Macy2011-09-161-20/+20
* Correct several issues in the integration of POSIX shared memory objectsRobert Watson2011-09-023-10/+31
* Add the fo_chown and fo_chmod methods to struct fileops and use themKonstantin Belousov2011-08-164-0/+88
* Second-to-last commit implementing Capsicum capabilities in the FreeBSDRobert Watson2011-08-111-2/+3
* - Add a FEATURE for capsicum (security_capabilities).Alexander Leidinger2011-03-041-1/+1
* Add some FEATURE macros for various features (AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/Alexander Leidinger2011-02-251-0/+3
* Unless "cnt" exceeds MAX_COMMIT_COUNT, nfsrv_commit() and nfsvno_fsync() areAlan Cox2011-02-051-5/+2
* sysctl(9) cleanup checkpoint: amd64 GENERIC builds cleanly.Matthew D Fleming2011-01-121-1/+1
* Add missing DTrace probe invocation to mac_vnode_check_open; the probeRobert Watson2010-10-231-0/+2
* Add an extra comment to the SDT probes definition. This allows us to getRui Paulo2010-08-222-13/+15
* Add one further check with mac_policy_count to an mbuf copying caseRobert Watson2009-06-031-0/+3
* Continue work to optimize performance of "options MAC" when no MAC policyRobert Watson2009-06-035-63/+92
* Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings thatRobert Watson2009-06-021-2/+2
* Add internal 'mac_policy_count' counter to the MAC Framework, which is aRobert Watson2009-06-023-22/+70
* Make the rmlock(9) interface a bit more like the rwlock(9) interface:Robert Watson2009-05-291-1/+1
* Convert the MAC Framework from using rwlocks to rmlocks to stabilizeRobert Watson2009-05-272-21/+32
* Rename MAC Framework-internal macros used to invoke policy entry points:Robert Watson2009-05-0118-304/+339
* Rework MAC Framework synchronization in a number of ways in order toRobert Watson2009-03-1420-327/+410
* Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson2009-03-083-10/+8
* Rename 'ucred' argument to mac_socket_check_bind() to 'cred' to matchRobert Watson2009-03-081-3/+3
* Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson2009-03-086-215/+196
* Add static DTrace probes for MAC Framework access control checks andRobert Watson2009-03-0817-14/+660
* Reduce the verbosity of SDT trace points for DTrace by defining severalRobert Watson2009-03-031-12/+3
* Use vm_map_entry_t instead of explicit struct vm_map_entry *.Konstantin Belousov2009-02-241-1/+1
* Use __FBSDID() for $FreeBSD$ version strings in .c files.Robert Watson2009-01-242-4/+6
* Begin to add SDT tracing of the MAC Framework: add policy modevent,Robert Watson2009-01-241-1/+24
generated by cgit v1.2.3 (git 2.25.1) at 2026-03-19 01:43:43 +0000