aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac
Commit message (Expand)AuthorAgeFilesLines
* This commit was manufactured by cvs2svn to create tagrelease/7.0.0_cvscvs2svn2008-02-2419-19/+19
* Merge mac_posix_sem.c:1.12 from HEAD to RELENG_7:Robert Watson2007-12-211-0/+1
* Merge mac_framework.h:1.85, mac_policy.h:1.95, mac_posix_sem.c:1.10,Robert Watson2007-11-063-34/+33
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson2007-09-103-21/+21
* Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, whichRobert Watson2007-08-061-4/+0
* Fix a bunch of warnings due to a missing forward declaration of a struct.Peter Wemm2007-07-051-0/+1
* Add a new MAC framework and policy entry point,Robert Watson2007-06-263-0/+16
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-233-21/+19
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-228-395/+384
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-222-42/+16
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-223-59/+16
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-213-0/+121
* Remove 'MPSAFE' annotations from the comments above most system calls: allRobert Watson2007-03-041-30/+0
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-064-10/+46
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-0611-9/+10
* Remove conditional return of 1. For the MAC_STATIC case at this point inChristian S.J. Peron2007-01-011-3/+0
* Only signal the CV indicating that the MAC Framework is available forRobert Watson2006-12-311-6/+23
* Slightly resort functions in file so that no forward function prototypesRobert Watson2006-12-291-49/+46
* Re-add include of opt_mac.h in mac_framework.c, which was improperlyRobert Watson2006-12-291-0/+2
* Add missing include guards to mac_internal.h, update include guards inRobert Watson2006-12-282-3/+8
* Remove XXX comments about EA transaction support and provide a moreRobert Watson2006-12-281-6/+11
* Remove an inaccurate comment I added regarding storage for mbuf tagRobert Watson2006-12-281-7/+0
* In mac_inpcb_sosetlabel(), assert the socket lock rather than commentingRobert Watson2006-12-281-1/+1
* Centralize definition of MAC_VERSION in mac_policy.h, as it defines theRobert Watson2006-12-283-6/+19
* Move mac_init_label() and mac_destroy_label() from mac_framework.c toRobert Watson2006-12-282-29/+31
* Trim unneeded includes.Robert Watson2006-12-282-48/+0
* Break contents of kern_mac.c out into two files following a repo-copy:Robert Watson2006-12-282-1209/+0
* Update MAC Framework general comments, referencing various interfaces itRobert Watson2006-12-282-24/+80
* Re-wrap comments following de-indentation.Robert Watson2006-12-231-13/+11
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-2214-27/+14
* Minor style fixes.Robert Watson2006-12-214-20/+20
* Remove mac_enforce_subsystem debugging sysctls. Enforcement onRobert Watson2006-12-2114-397/+2
* Comment LABEL_TO_SLOT() macro, including observing that we'd like to improveRobert Watson2006-12-201-0/+8
* Trim trailing white space, clean up comment line wrapping and formatting.Robert Watson2006-12-201-10/+21
* Trim trailing white space.Robert Watson2006-12-202-7/+7
* Document socket labeling model.Robert Watson2006-12-201-15/+27
* Clean up comment white space and line wrapping.Robert Watson2006-12-201-15/+14
* Additional comments regarding the interaction between the kernel privilegeRobert Watson2006-12-201-0/+18
* Document that we could allocate the mbuf label as part of the tag ratherRobert Watson2006-12-201-8/+26
* Staticize and comment zone_label.Robert Watson2006-12-201-1/+7
* Clean up comments, trailing white space.Robert Watson2006-12-201-17/+27
* Re-wrap comment at 77 character columns.Robert Watson2006-12-201-7/+7
* Comment and white space cleanup.Robert Watson2006-12-201-15/+17
* Externalize local stack copy of the ifnet label, rather than the copy onRobert Watson2006-12-201-2/+2
* Expand commenting on label slots, justification for the MAC Framework lockingRobert Watson2006-12-202-108/+158
* Fix LOR between the syncache and inpcb locks when MAC is present in theChristian S.J. Peron2006-12-133-0/+68
* Merge posix4/* into normal kernel hierarchy.Tom Rhodes2006-11-111-2/+1
* Sweep kernel replacing suser(9) calls with priv(9) calls, assigningRobert Watson2006-11-063-4/+15
* Add a new priv(9) kernel interface for checking the availability ofRobert Watson2006-11-063-0/+100
* Forward declare struct cdev, since arguments of this type are used inRobert Watson2006-10-301-0/+1