aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac_lomac
Commit message (Expand)AuthorAgeFilesLines
* sys/security: minor spelling fixes.Pedro F. Giffuni2016-05-062-2/+2
* cred: add proc_set_cred helperMateusz Guzik2015-03-161-1/+1
* Adjust printf format specifiers for dev_t and ino_t in kernel.Gleb Kurtsou2014-12-171-2/+2
* Pull in r267961 and r267973 again. Fix for issues reported will follow.Hans Petter Selasky2014-06-281-11/+5
* Revert r267961, r267973:Glen Barber2014-06-271-5/+11
* Extend the meaning of the CTLFLAG_TUN flag to automatically check ifHans Petter Selasky2014-06-271-11/+5
* Remove AppleTalk support.Gleb Smirnoff2014-03-141-14/+0
* Remove IPX support.Gleb Smirnoff2014-03-141-2/+0
* Remove direct access to si_name.Ed Schouten2012-02-101-8/+10
* Use strchr() and strrchr().Ed Schouten2012-01-021-5/+5
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten2011-11-071-1/+1
* Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.Ed Schouten2011-11-071-1/+1
* Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-styleRobert Watson2010-03-021-0/+1
* Make mac_lomac(4) able to interpret NFSv4 access bits.Edward Tomasz Napierala2010-01-031-1/+1
* Implement global and per-uid accounting of the anonymous memory. AddKonstantin Belousov2009-06-231-0/+2
* Chase the removal of PRIV_TTY_PRISON in the mac(9) modules.Ed Schouten2009-06-201-1/+0
* Continue work to optimize performance of "options MAC" when no MAC policyRobert Watson2009-06-031-9/+37
* Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson2009-03-081-2/+1
* Rather than having MAC policies explicitly declare what object typesRobert Watson2009-01-101-22/+1
* Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather thanRobert Watson2009-01-101-0/+1
* Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala2008-10-281-2/+2
* Rename mac_cred_mmapped_drop_perms(), which revokes access to virtualRobert Watson2008-10-281-4/+4
* Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson2008-10-281-24/+25
* Implement MAC policy support for IPv6 fragment reassembly queues,Robert Watson2008-10-261-1/+53
* Retire the MALLOC and FREE macros. They are an abomination unto style(9).Dag-Erling Smørgrav2008-10-231-1/+1
* Add a mac_inpcb_check_visible implementation to all MAC policiesBjoern A. Zeeb2008-10-171-0/+19
* Decontextualize the couplet VOP_GETATTR / VOP_SETATTR as the passed threadAttilio Rao2008-08-281-2/+1
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-1/+21
* Minor style tweaks.Robert Watson2008-08-021-4/+3
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson2008-06-131-11/+11
* Resort TrustedBSD MAC Framework policy entry point implementations andRobert Watson2007-10-291-861/+868
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson2007-10-281-14/+0
* Continue to move from generic network entry points in the TrustedBSD MACRobert Watson2007-10-281-13/+26
* Move towards more explicit support for various network protocol stacksRobert Watson2007-10-281-14/+49
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson2007-10-261-4/+4
* Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson2007-10-251-6/+6
* Consistently name functions for mac_<policy> as <policy>_whatever ratherRobert Watson2007-10-251-634/+614
* Further MAC Framework cleanup: normalize some local variable names andRobert Watson2007-10-251-4/+4
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-214/+219
* - Move all of the PS_ flags into either p_flag or td_flags.Jeff Roberson2007-09-171-2/+1
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson2007-09-101-25/+25
* Commit 14/14 of sched_lock decomposition.Jeff Roberson2007-06-051-2/+2
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-231-4/+4
* Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson2007-04-231-202/+199
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-221-12/+8
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-221-17/+192
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-211-1/+63
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-061-4/+4
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-2/+1
* Teach the MAC policies which utilize mbuf labeling the new syncacheChristian S.J. Peron2006-12-131-0/+25
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-27 13:07:14 +0000