| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | This commit was manufactured by cvs2svn to create tagrelease/5.3.0_cvs | cvs2svn | 2004-11-04 | 25 | -25/+25 |
| * | MT5 or whatever: Set the first match ability as the default and remove the | Tom Rhodes | 2004-09-13 | 1 | -10/+1 |
| * | MT5: 1.20 Allow mac_bsdextended(4) to log policy violations via | Tom Rhodes | 2004-08-31 | 1 | -5/+19 |
| * | MT5: 1.19 The ability to match first rule in place of all rules. | Tom Rhodes | 2004-08-31 | 1 | -2/+21 |
| * | This commit was manufactured by cvs2svn to create branch 'RELENG_5'. | cvs2svn | 2004-08-18 | 4 | -3345/+0 |
| * | * Add a "how" argument to uma_zone constructors and initialization functions | Brian Feldman | 2004-08-02 | 1 | -3/+4 |
| * | Introduce SLOT_SET macro and use it in place of casts as lvalues. | Alexander Kabaev | 2004-07-28 | 3 | -12/+16 |
| * | Allow an effective uid of root to bypass mac_bsdextended rules; the MAC | Robert Watson | 2004-07-23 | 1 | -0/+3 |
| * | Rename Biba and MLS _single label elements to _effective, which more | Robert Watson | 2004-07-16 | 4 | -353/+353 |
| * | Do a pass over all modules in the kernel and make them return EOPNOTSUPP | Poul-Henning Kamp | 2004-07-15 | 2 | -0/+2 |
| * | Update for the KDB framework: | Marcel Moolenaar | 2004-07-10 | 1 | -28/+29 |
| * | Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on | Robert Watson | 2004-06-24 | 7 | -0/+53 |
| * | Do the dreaded s/dev_t/struct cdev */ | Poul-Henning Kamp | 2004-06-16 | 8 | -8/+9 |
| * | Socket MAC labels so_label and so_peerlabel are now protected by | Robert Watson | 2004-06-13 | 1 | -8/+57 |
| * | add missing #include <sys/module.h> | Poul-Henning Kamp | 2004-05-30 | 2 | -0/+2 |
| * | Remove dead code. (This loop counted the number of rules, but the count | Colin Percival | 2004-05-15 | 1 | -7/+0 |
| * | Improve consistency of include file guards in src/sys/sys by terminating | Robert Watson | 2004-05-10 | 2 | -6/+6 |
| * | If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tag | Robert Watson | 2004-05-03 | 1 | -1/+4 |
| * | Add /* !MAC */ to final #endif. | Robert Watson | 2004-05-03 | 2 | -2/+2 |
| * | Update copyright. | Robert Watson | 2004-05-03 | 1 | -1/+1 |
| * | When performing label assertions on an mbuf header label in mac_test, | Robert Watson | 2004-05-03 | 1 | -2/+3 |
| * | Bump copyright date for NETA to 2004. | Robert Watson | 2004-05-03 | 2 | -2/+2 |
| * | Add MAC_STATIC, a kernel option that disables internal MAC Framework | Robert Watson | 2004-05-03 | 2 | -0/+50 |
| * | Define BPFD_LOCK_ASSERT() to assert the BPF descriptor lock. | Robert Watson | 2004-02-29 | 1 | -0/+4 |
| * | Forward declare struct proc, struct sockaddr, and struct thread, which | Robert Watson | 2004-02-26 | 1 | -0/+3 |
| * | Forward declare struct bpf_d, struct ifnet, struct image_params, and | Robert Watson | 2004-02-26 | 1 | -1/+5 |
| * | Move inet and inet6 related MAC Framework entry points from mac_net.c | Robert Watson | 2004-02-26 | 4 | -655/+807 |
| * | Reimplement sysctls handling by MAC framework. | Pawel Jakub Dawidek | 2004-02-22 | 7 | -36/+26 |
| * | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson | 2004-02-22 | 23 | -46/+46 |
| * | Commit file missed in last pass: MAC api uses 'struct pipepair', not | Robert Watson | 2004-02-01 | 1 | -8/+8 |
| * | Coalesce pipe allocations and frees. Previously, the pipe code | Robert Watson | 2004-02-01 | 9 | -93/+95 |
| * | Pay attention to mac_portacl_enabled. | Robert Watson | 2004-01-20 | 1 | -1/+5 |
| * | Switch TCP over to using the inpcb label when responding in timed | Robert Watson | 2003-12-17 | 8 | -0/+72 |
| * | interpvnodelabel can be NULL in mac_test_execve_transition(). This | Robert Watson | 2003-12-10 | 1 | -1/+3 |
| * | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | Robert Watson | 2003-12-06 | 9 | -68/+26 |
| * | Use UMA zone allocator for Biba and MLS labels rather than MALLOC(9). | Robert Watson | 2003-11-18 | 2 | -12/+12 |
| * | Introduce a MAC label reference in 'struct inpcb', which caches | Robert Watson | 2003-11-18 | 9 | -1/+362 |
| * | Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as they | Robert Watson | 2003-11-17 | 3 | -21/+0 |
| * | Implement sockets support for __mac_get_fd() and __mac_set_fd() | Robert Watson | 2003-11-16 | 10 | -7/+92 |
| * | Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET and | Robert Watson | 2003-11-16 | 1 | -0/+1 |
| * | Abstract the label checking and setting logic from | Robert Watson | 2003-11-16 | 2 | -13/+24 |
| * | Implement mpo_copy_{mbuf,pipe,vnode}_label() entry points for | Robert Watson | 2003-11-16 | 2 | -0/+36 |
| * | Reduce gratuitous redundancy and length in function names: | Robert Watson | 2003-11-16 | 2 | -8/+6 |
| * | Whitespace fix. | Robert Watson | 2003-11-16 | 1 | -2/+2 |
| * | mac_relabel_cred() accepts two cred labels, not a cred label and a | Robert Watson | 2003-11-15 | 1 | -1/+1 |
| * | Reduced prequisites by only using MALLOC_DECLARE() if it is defined. | Bruce Evans | 2003-11-14 | 1 | -0/+4 |
| * | Mark __mac_get_pid() as MPSAFE in the comment, as it runs without | Robert Watson | 2003-11-12 | 2 | -74/+30 |
| * | Remove extraneous & to fix compile. | John Baldwin | 2003-11-12 | 1 | -1/+1 |
| * | Remove extraneous fullpath variable, which broke lint build. This | Robert Watson | 2003-11-12 | 2 | -2/+2 |
| * | GC prototype for mac_destroy_vnode_label(), missed in last commit. | Robert Watson | 2003-11-12 | 1 | -1/+0 |
