aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac_do
Commit message (Expand)AuthorAgeFilesLines
* MAC/do: Clarify comments about flags attached per-ID or per-ID-typeOlivier Certner2026-06-041-5/+7
* MAC/do: Fix double-free on parse error after "executable paths" featureOlivier Certner2026-06-011-8/+8
* MAC/do: Update copyrightOlivier Certner2026-05-291-3/+3
* MAC/do: Do not skip blanks when parsing executable pathsOlivier Certner2026-05-291-1/+1
* MAC/do: Serialize installing/modifying some jail's configurationOlivier Certner2026-05-291-23/+76
* MAC/do: Support for atomically modifying configurationsOlivier Certner2026-05-291-15/+49
* MAC/do: Sequential consistency for configuration retrievalOlivier Certner2026-05-291-48/+64
* MAC/do: Comment to explain the main invariant for configurationsOlivier Certner2026-05-291-0/+5
* MAC/do: Allocate only one default configurationOlivier Certner2026-05-291-12/+12
* MAC/do: Visually separate some file sectionsOlivier Certner2026-05-291-0/+2
* MAC/do: Fix reporting of "mac.do" post-"executable paths"Olivier Certner2026-05-291-3/+2
* MAC/do: Configuration: Fix default values: Remove jail creation methodOlivier Certner2026-05-291-14/+6
* MAC/do: Fix the recent logic to set jail parameters, make it more tolerantOlivier Certner2026-05-291-61/+140
* MAC/do: Constify is_null_or_empty()Olivier Certner2026-05-291-1/+1
* MAC/do: Fix obsolete wording in a comment ("ascendant" => "ancestor")Olivier Certner2026-05-291-1/+1
* MAC/do: parse_and_set_conf(): Require the model configurationOlivier Certner2026-05-291-28/+38
* MAC/do: parse_and_set_conf(): Obey empty parameters; Add docOlivier Certner2026-05-291-14/+14
* MAC/do: clone_rules(): Readability improvements, constificationOlivier Certner2026-05-291-11/+13
* MAC/do: Remove superfluous configuration initializationOlivier Certner2026-05-291-10/+24
* MAC/do: Move static assertions on constants close to their definitionsOlivier Certner2026-05-291-4/+6
* MAC/do: Constify clone_rules() and clone_exec_paths()'s source argumentOlivier Certner2026-05-291-2/+3
* MAC/do: Fix releasing a nonexistent reference on configuration parsing errorOlivier Certner2026-05-291-6/+10
* MAC/do: find_conf(): Return configuration with a true referenceOlivier Certner2026-05-291-43/+40
* MAC/do: Move hold_conf() and drop_conf() earlierOlivier Certner2026-05-291-15/+15
* MAC/do: find_conf(): Turn an MPASS() into a KASSERT()Olivier Certner2026-05-291-1/+9
* MAC/do: Rename size constants/variables to clear confusion with string lengthsOlivier Certner2026-05-291-34/+34
* MAC/do: Executable paths: Accept an empty stringOlivier Certner2026-05-291-6/+0
* MAC/do: Document and assert when parse error objects must be builtOlivier Certner2026-05-291-32/+50
* MAC/do: check_proc(): Remove a superfluous 'if'Olivier Certner2026-05-291-6/+5
* MAC/do: Expand "conf" to "configuration" in a panic message on INVARIANTSOlivier Certner2026-05-291-2/+2
* MAC/do: Fix recently-introduced commentsOlivier Certner2026-05-291-14/+25
* MAC/do: Make it style(9) compliant againOlivier Certner2026-05-291-70/+96
* MAC/do: Update copyrightOlivier Certner2026-05-291-0/+1
* MAC/do: Executable paths feature (GSoC 2025's final state)Kushagra Srivastava2026-05-291-159/+422
* MAC/do: Comments: Rephrase one, fix a typo in anotherOlivier Certner2026-03-211-4/+5
* MAC/do: Check executable path from the current jail's rootOlivier Certner2025-09-291-1/+5
* MAC/do: Restore matching the first supplementary groupOlivier Certner2025-09-171-1/+1
* MAC/do: Rename the internal malloc typeKushagra Srivastava2025-08-211-24/+24
* machine/stdarg.h -> sys/stdarg.hBrooks Davis2025-06-111-2/+1
* MAC/do: Fix a too stringent debug assertion for a target of 'uid=*'Olivier Certner2025-05-271-1/+2
* MAC/do: Rules: <from> and <to> parts now to be separated by '>'Olivier Certner2025-04-021-5/+6
* MAC/do: parse_single_rule(): Fix herald comment's first lineOlivier Certner2025-04-021-1/+1
* MAC/do: Fix a compilation warning about an unused functionOlivier Certner2024-12-171-1/+1
* MAC/do: Update copyrightOlivier Certner2024-12-161-1/+6
* MAC/do: Apply a rule on real UID/GID instead of effective onesOlivier Certner2024-12-161-2/+2
* MAC/do: Convert internal TAILQs to STAILQsOlivier Certner2024-12-161-18/+18
* MAC/do: parse_rules(): Tolerate blanks around tokensOlivier Certner2024-12-161-8/+53
* MAC/do: toast_rules(): Minor simplificationOlivier Certner2024-12-161-3/+2
* MAC/do: Interpret the new rules specification; Monitor setcred()Olivier Certner2024-12-161-94/+618
* MAC/do: Introduce rules reference countingOlivier Certner2024-12-161-5/+58