aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac_mls
Commit message (Expand)AuthorAgeFilesLines
* Introduce SLOT_SET macro and use it in place of casts as lvalues.Alexander Kabaev2004-07-281-3/+4
* Rename Biba and MLS _single label elements to _effective, which moreRobert Watson2004-07-162-173/+173
* Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels onRobert Watson2004-06-241-0/+1
* Do the dreaded s/dev_t/struct cdev */Poul-Henning Kamp2004-06-161-1/+1
* Update my personal copyrights and NETA copyrights in the kernelRobert Watson2004-02-222-4/+4
* Coalesce pipe allocations and frees. Previously, the pipe codeRobert Watson2004-02-011-8/+8
* Switch TCP over to using the inpcb label when responding in timedRobert Watson2003-12-171-0/+13
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),Robert Watson2003-12-061-13/+1
* Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9).Robert Watson2003-11-181-6/+6
* Introduce a MAC label reference in 'struct inpcb', which cachesRobert Watson2003-11-181-0/+45
* Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as theyRobert Watson2003-11-171-7/+0
* Implement sockets support for __mac_get_fd() and __mac_set_fd()Robert Watson2003-11-161-0/+1
* Remove extraneous fullpath variable, which broke lint build. ThisRobert Watson2003-11-121-1/+1
* Modify the MAC Framework so that instead of embedding a (struct label)Robert Watson2003-11-121-61/+61
* Implementations of mpo_check_vnode_deleteextattr() andRobert Watson2003-08-211-0/+39
* Improve consistency with the Biba policy -- renameRobert Watson2003-07-311-23/+10
* Redesign the externalization APIs from the MAC Framework toRobert Watson2003-06-231-26/+14
* Use mac_biba_label_copy() and mac_mls_label_copy() to implement theRobert Watson2003-06-021-0/+1
* Rewrite Biba and MLS label externalization code to use sbufs insteadRobert Watson2003-05-311-53/+50
* Make sure all character pointers are properly initialized; this wasRobert Watson2003-05-301-4/+5
* Use strsep() in preference to manual string parsing for Biba and MLSRobert Watson2003-05-291-48/+39
* Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and TestRobert Watson2003-04-151-1/+1
* Trim "trustedbsd_" from the front of the policy module "short names";Robert Watson2003-03-271-1/+1
* Modify the mac_init_ipq() MAC Framework entry point to accept anRobert Watson2003-03-261-1/+1
* Expand scope of the MLS policy to include a new entry point availableRobert Watson2003-03-251-0/+20
* Back out M_* changes, per decision of the TRB.Warner Losh2003-02-191-1/+1
* Place more stringent checks on process credential relabeling for the BibaRobert Watson2003-02-041-6/+11
* Rename the variable 'grade' to 'type' in interface parsing andRobert Watson2003-02-041-5/+5
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.Alfred Perlstein2003-01-211-1/+1
* Default policies to on: if you load them or compile them into yourRobert Watson2002-12-101-1/+1
* Remove dm_root entry from struct devfs_mount. It's never set, and isRobert Watson2002-12-091-8/+10
* Garbage collect mac_create_devfs_vnode() -- it hasn't been used sinceRobert Watson2002-11-121-12/+0
* Update MAC modules for changes in arguments for exec MAC policyRobert Watson2002-11-081-2/+16
* Update policy modules for changes in arguments associated with supportRobert Watson2002-11-051-1/+1
* Since neither the Biba policy nor the MLS policy make use ofRobert Watson2002-11-051-23/+0
* License and wording updates: NAI has authorized the removal of clauseRobert Watson2002-11-042-14/+8
* Fix some warnings on 64 bit architectures. The vn_extattr_get()Maxime Henrion2002-11-021-2/+1
* Move to C99 sparse structure initialization for the mac_policy_opsRobert Watson2002-10-301-260/+131
* While 'mode_t' seemed like a good idea for the access mode argument forRobert Watson2002-10-301-1/+1
* Correct a typo in a previously commented include entry that was madeRobert Watson2002-10-281-1/+1
* Remove all reference to 'struct oldmac', since it's no longer requiredRobert Watson2002-10-281-0/+32
* Slightly change the semantics of vnode labels for MAC: rather thanRobert Watson2002-10-261-61/+98
* Style fix: space between 'switch' and '('.Robert Watson2002-10-221-1/+1
* s/mls/biba/ in a copy+paste error for a printf.Robert Watson2002-10-221-1/+1
* Adapt MAC policies for the new user API changes; teach policies howRobert Watson2002-10-222-17/+292
* Introduce mac_biba_copy() and mac_mls_copy(), which conditionallyRobert Watson2002-10-211-8/+24
* Add compartment support to Biba and MLS policies. The logic of theRobert Watson2002-10-212-16/+68
* More in the way of minor consistency improvements: trim 'mac_mls_'Robert Watson2002-10-211-8/+7
* Demote sockets to single-label objects rather than maintaining aRobert Watson2002-10-211-16/+0
* White space nit the crept in during merge.Robert Watson2002-10-211-1/+1