aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac_portacl
Commit message (Expand)AuthorAgeFilesLines
* sys: Remove $FreeBSD$: two-line .h patternWarner Losh2023-08-161-2/+0
* Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki2020-02-261-2/+5
* Remove unused argument to priv_check_cred.Mateusz Guzik2018-12-111-1/+1
* mac_portacl(4): stop panicing INVARIANTS-enabled kernel by loading .koEugene Grosbein2018-02-251-0/+1
* Pull in r267961 and r267973 again. Fix for issues reported will follow.Hans Petter Selasky2014-06-281-10/+4
* Revert r267961, r267973:Glen Barber2014-06-271-4/+10
* Extend the meaning of the CTLFLAG_TUN flag to automatically check ifHans Petter Selasky2014-06-271-10/+4
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten2011-11-071-1/+1
* Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.Ed Schouten2011-11-071-1/+1
* Fix typos.Rebecca Cran2010-11-091-1/+1
* - Correct logic in if statement - we want to allocate temporary bufferPawel Jakub Dawidek2009-03-141-1/+3
* Rather than having MAC policies explicitly declare what object typesRobert Watson2009-01-101-1/+1
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-1/+1
* Add sbuf_new_auto as a shortcut for the very common case of creating aDag-Erling Smørgrav2008-08-091-1/+1
* Consistently name functions for mac_<policy> as <policy>_whatever ratherRobert Watson2007-10-251-26/+26
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-2/+6
* Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); inRobert Watson2007-06-121-2/+1
* Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson2007-04-231-4/+3
* More unnecessary include reduction.Robert Watson2007-02-231-9/+1
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-061-1/+0
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-1/+1
* Sweep kernel replacing suser(9) calls with priv(9) calls, assigningRobert Watson2006-11-061-1/+3
* Do allow jailed superuser to override the port ACL.Robert Watson2006-10-101-1/+1
* Normalize a significant number of kernel malloc type names:Robert Watson2005-10-311-1/+1
* Add a new sysctl/tunable to mac_portacl:Robert Watson2004-12-081-0/+23
* Switch from using an sx lock to a mutex for the mac_portacl rule chain:Robert Watson2004-12-061-26/+19
* Remove dead code. (This loop counted the number of rules, but the countColin Percival2004-05-151-7/+0
* Pay attention to mac_portacl_enabled.Robert Watson2004-01-201-1/+5
* Including <sys/stdint.h> is (almost?) universally only to be able to usePoul-Henning Kamp2003-03-181-1/+0
* Do not depend on namespace pollution, explicitly include sys/sx.hAlexander Kabaev2003-03-121-0/+1
* A cute yet small MAC policy that provides a simple ACL mechanism toRobert Watson2003-03-021-0/+485