aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac_bsdextended/ugidfw_vnode.c
Commit message (Collapse)AuthorAgeFilesLines
* sys: Remove $FreeBSD$: two-line .h patternWarner Losh2023-08-161-2/+0
| | | | Remove /^\s*\*\n \*\s+\$FreeBSD\$$\n/
* Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson2009-03-081-4/+2
| | | | | | | | | | | | extended attribute get/set; in the case of get an uninitialized user buffer was passed before the EA was retrieved, making it of relatively little use; the latter was simply unused by any policies. Obtained from: TrustedBSD Project Sponsored by: Google, Inc. Notes: svn path=/head/; revision=189533
* The V* flags passed using an accmode_t to the access() and open()Robert Watson2008-10-301-11/+3
| | | | | | | | | | | access control checks in mac_bsdextended are not in the same namespace as the MBI_ flags used in ugidfw policies, so add an explicit conversion routine to get from one to the other. Obtained from: TrustedBSD Project Notes: svn path=/head/; revision=184467
* Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala2008-10-281-4/+12
| | | | | | | | | | to add more V* constants, and the variables changed by this patch were often being assigned to mode_t variables, which is 16 bit. Approved by: rwatson (mentor) Notes: svn path=/head/; revision=184413
* Break mac_bsdextended.c out into multiple .c files, with the base accessRobert Watson2008-10-271-498/+27
| | | | | | | | | | control logic and policy registration remaining in that file, and access control checks broken out into other files by class of check. Obtained from: TrustedBSD Project Notes: svn path=/head/; revision=184331
* Copy mac_bsdextended.c to two object-specific files as a prototype for howRobert Watson2008-10-271-0/+768
modularize MAC policy layout. Obtained from: TrustedBSD Project Notes: svn path=/head/; revision=184330