| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Reimplement sysctls handling by MAC framework. | Pawel Jakub Dawidek | 2004-02-22 | 1 | -3/+4 |
| * | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson | 2004-02-22 | 1 | -2/+2 |
| * | Coalesce pipe allocations and frees. Previously, the pipe code | Robert Watson | 2004-02-01 | 1 | -10/+10 |
| * | Switch TCP over to using the inpcb label when responding in timed | Robert Watson | 2003-12-17 | 1 | -0/+1 |
| * | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | Robert Watson | 2003-12-06 | 1 | -1/+1 |
| * | Introduce a MAC label reference in 'struct inpcb', which caches | Robert Watson | 2003-11-18 | 1 | -0/+7 |
| * | Implement mac_get_peer(3) using getsockopt() with SOL_SOCKET and | Robert Watson | 2003-11-16 | 1 | -0/+1 |
| * | Reduce gratuitous redundancy and length in function names: | Robert Watson | 2003-11-16 | 1 | -3/+3 |
| * | GC prototype for mac_destroy_vnode_label(), missed in last commit. | Robert Watson | 2003-11-12 | 1 | -1/+0 |
| * | Modify the MAC Framework so that instead of embedding a (struct label) | Robert Watson | 2003-11-12 | 1 | -4/+7 |
| * | Use __BEGIN_DECLS and __END_DECLS around userland function prototypes | Robert Watson | 2003-10-02 | 1 | -0/+2 |
| * | Remove extra tabs indenting MAC library calls; they were there to | Robert Watson | 2003-08-29 | 1 | -21/+20 |
| * | Make the elements argument to mac_prepare() be const. | Robert Watson | 2003-08-22 | 1 | -1/+1 |
| * | Add prototype for new libc function mac_prepare_type(). | Robert Watson | 2003-08-22 | 1 | -0/+1 |
| * | Introduce two new MAC Framework and MAC policy entry points: | Robert Watson | 2003-08-21 | 1 | -0/+2 |
| * | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | Robert Watson | 2003-08-21 | 1 | -0/+4 |
| * | Update NAI copyright to 2003, missed in earlier commits and merges. | Robert Watson | 2003-04-18 | 1 | -1/+1 |
| * | Move MAC label storage for mbufs into m_tags from the m_pkthdr structure, | Robert Watson | 2003-04-14 | 1 | -2/+5 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | Robert Watson | 2003-03-26 | 1 | -1/+1 |
| * | Garbage collect FREEBSD_MAC_EXTATTR_NAME and FREEBSD_MAC_EXTATTR_NAMESPACE, | Robert Watson | 2003-03-23 | 1 | -8/+0 |
| * | Instrument sysarch() MD privileged I/O access interfaces with a MAC | Robert Watson | 2003-03-06 | 1 | -0/+1 |
| * | Provide a mac_check_system_swapoff() entry point, which permits MAC | Robert Watson | 2003-03-05 | 1 | -0/+1 |
| * | Remove dm_root entry from struct devfs_mount. It's never set, and is | Robert Watson | 2002-12-09 | 1 | -5/+7 |
| * | Un-staticize mac_cred_mmapped_drop_perms() so that it may be used | Robert Watson | 2002-11-26 | 1 | -0/+1 |
| * | Introduce p_label, extensible security label storage for the MAC framework | Robert Watson | 2002-11-20 | 1 | -0/+2 |
| * | Merge kld access control checks from the MAC tree: these access control | Robert Watson | 2002-11-19 | 1 | -0/+3 |
| * | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | Robert Watson | 2002-11-12 | 1 | -1/+0 |
| * | Bring in two sets of changes: | Robert Watson | 2002-11-05 | 1 | -4/+12 |
| * | Permit MAC policies to instrument the access control decisions for | Robert Watson | 2002-11-04 | 1 | -0/+2 |
| * | License clarification and wording changes: NAI has approved removal of | Robert Watson | 2002-11-04 | 1 | -7/+4 |
| * | Introduce mac_check_system_settime(), a MAC check allowing policies to | Robert Watson | 2002-11-03 | 1 | -0/+1 |
| * | Add MAC checks for various kenv() operations: dump, get, set, unset, | Robert Watson | 2002-11-01 | 1 | -0/+4 |
| * | While 'mode_t' seemed like a good idea for the access mode argument for | Robert Watson | 2002-10-30 | 1 | -2/+2 |
| * | Remove all reference to 'struct oldmac', since it's no longer required | Robert Watson | 2002-10-28 | 1 | -49/+2 |
| * | Implement mac_check_system_sysctl(), a MAC Framework entry point to | Robert Watson | 2002-10-27 | 1 | -0/+3 |
| * | Hook up mac_check_system_reboot(), a MAC Framework entry point that | Robert Watson | 2002-10-27 | 1 | -0/+1 |
| * | Merge from MAC tree: rename mac_check_vnode_swapon() to | Robert Watson | 2002-10-27 | 1 | -1/+1 |
| * | Slightly change the semantics of vnode labels for MAC: rather than | Robert Watson | 2002-10-26 | 1 | -7/+9 |
| * | Remove the mac_te policy bits from 'struct oldmac' -- we're not going | Robert Watson | 2002-10-22 | 1 | -6/+0 |
| * | Introduce MAC_CHECK_VNODE_SWAPON, which permits MAC policies to | Robert Watson | 2002-10-22 | 1 | -0/+1 |
| * | Revised APIs for user process label management; the existing APIs relied | Robert Watson | 2002-10-22 | 1 | -87/+59 |
| * | Add compartment support to Biba and MLS policies. The logic of the | Robert Watson | 2002-10-21 | 1 | -0/+4 |
| * | Integrate mac_check_socket_send() and mac_check_socket_receive() | Robert Watson | 2002-10-06 | 1 | -0/+2 |
| * | Sync from MAC tree: break out the single mmap entry point into | Robert Watson | 2002-10-06 | 1 | -3/+4 |
| * | Modify label allocation semantics for sockets: pass in soalloc's malloc | Robert Watson | 2002-10-05 | 1 | -2/+2 |
| * | Integrate a devfs/MAC fix from the MAC tree: avoid a race condition during | Robert Watson | 2002-10-05 | 1 | -0/+2 |
| * | Merge support for mac_check_vnode_link(), a MAC framework/policy entry | Robert Watson | 2002-10-05 | 1 | -0/+2 |
| * | Add a new MAC entry point, mac_thread_userret(td), which permits policy | Robert Watson | 2002-10-02 | 1 | -0/+2 |
| * | Pass active_cred and file_cred into the MAC framework explicitly | Robert Watson | 2002-08-19 | 1 | -4/+8 |
| * | Provide an implementation of mac_syscall() so that security modules | Robert Watson | 2002-08-19 | 1 | -1/+6 |
