aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac_test
Commit message (Expand)AuthorAgeFilesLines
* Remove AppleTalk support.Gleb Smirnoff2014-03-141-13/+0
* Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.Konstantin Belousov2013-08-211-0/+32
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten2011-11-071-2/+2
* Correct several issues in the integration of POSIX shared memory objectsRobert Watson2011-09-021-2/+12
* Add the fo_chown and fo_chmod methods to struct fileops and use themKonstantin Belousov2011-08-161-0/+52
* Continue work to optimize performance of "options MAC" when no MAC policyRobert Watson2009-06-031-4/+44
* Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson2009-03-081-4/+2
* Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson2009-03-081-149/+152
* Rather than having MAC policies explicitly declare what object typesRobert Watson2009-01-101-22/+1
* Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather thanRobert Watson2009-01-101-0/+1
* Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala2008-10-281-2/+2
* Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson2008-10-281-20/+20
* Implement MAC policy support for IPv6 fragment reassembly queues,Robert Watson2008-10-261-1/+79
* Add a mac_inpcb_check_visible implementation to all MAC policiesBjoern A. Zeeb2008-10-171-0/+14
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-231-1/+22
* Rework the lifetime management of the kernel implementation of POSIXJohn Baldwin2008-06-271-9/+26
* Add missing counter increments for posix shm checks.John Baldwin2008-06-261-0/+5
* Remove the posixsem_check_destroy() MAC check. It is semantically identicalJohn Baldwin2008-06-231-14/+0
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson2008-06-131-9/+9
* Add a new file descriptor type for IPC shared memory objects and use it toJohn Baldwin2008-01-081-0/+96
* Add a new 'why' argument to kdb_enter(), and a set of constants to useRobert Watson2007-12-251-1/+1
* Implement per-object type consistency checks for labels passed toRobert Watson2007-10-301-20/+65
* Canonicalize names of local variables.Robert Watson2007-10-291-66/+66
* Resort TrustedBSD MAC Framework policy entry point implementations andRobert Watson2007-10-291-1243/+1256
* Add missing mac_test labeling and sleep checks for the syncache.Robert Watson2007-10-281-0/+48
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson2007-10-281-14/+0
* Continue to move from generic network entry points in the TrustedBSD MACRobert Watson2007-10-281-15/+14
* Move towards more explicit support for various network protocol stacksRobert Watson2007-10-281-12/+48
* Perform explicit label type checks for externalize entry points, rather thanRobert Watson2007-10-281-10/+70
* Give each posixsem MAC Framework entry point its own counter and test caseRobert Watson2007-10-271-9/+74
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson2007-10-261-4/+4
* Consistently name functions for mac_<policy> as <policy>_whatever ratherRobert Watson2007-10-251-414/+414
* Further MAC Framework cleanup: normalize some local variable names andRobert Watson2007-10-251-18/+18
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-797/+802
* Canonicalize naming of local variables for struct ksem and associatedRobert Watson2007-10-211-6/+6
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson2007-09-101-16/+16
* Add a new MAC framework and policy entry point,Robert Watson2007-06-261-0/+13
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-231-14/+13
* Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson2007-04-231-151/+153
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-221-30/+9
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-221-36/+0
* Further MAC test policy cleanup and enhancement:Robert Watson2007-04-221-141/+478
* Perform overdue clean up mac_test policy:Robert Watson2007-04-221-719/+476
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-211-3/+60
* More unnecessary include reduction.Robert Watson2007-02-231-12/+4
* Remove empty entry point functions (init, destroy, syscall) fromRobert Watson2007-02-231-25/+0
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-061-40/+41
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-061-1/+0
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-1/+1
* Merge posix4/* into normal kernel hierarchy.Tom Rhodes2006-11-111-2/+1