| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Reconstitute struct mac_policy_ops by breaking out individual function | Robert Watson | 2006-04-26 | 1 | -296/+575 |
| * | Introduce a new MAC entry point for label initialization of the NFS daemon's | Christian S.J. Peron | 2006-04-06 | 1 | -0/+1 |
| * | Complete removal of mac_create_root_mount/mpo_create_root_mount MAC | Robert Watson | 2005-10-02 | 1 | -2/+0 |
| * | Insert a series of place-holder function pointers in mac_policy.h for | Robert Watson | 2005-08-08 | 1 | -0/+25 |
| * | Bump the module versions of the MAC Framework and MAC policy modules | Robert Watson | 2005-07-14 | 1 | -1/+1 |
| * | When devfs cloning takes place, provide access to the credential of the | Robert Watson | 2005-07-14 | 1 | -1/+5 |
| * | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | Robert Watson | 2005-07-05 | 1 | -3/+0 |
| * | Add MAC Framework and MAC policy entry point mac_check_socket_create(), | Robert Watson | 2005-07-05 | 1 | -0/+3 |
| * | Gratuitous renaming of four System V Semaphore MAC Framework entry | Robert Watson | 2005-06-07 | 1 | -4/+4 |
| * | Introduce MAC Framework and MAC Policy entry points to label and control | Robert Watson | 2005-05-04 | 1 | -0/+21 |
| * | Introduce p_canwait() and MAC Framework and MAC Policy entry points | Robert Watson | 2005-04-18 | 1 | -0/+2 |
| * | Introduce three additional MAC Framework and MAC Policy entry points to | Robert Watson | 2005-04-16 | 1 | -1/+7 |
| * | Introduce new MAC Framework and MAC Policy entry points to control the use | Robert Watson | 2005-04-16 | 1 | -0/+14 |
| * | Move MAC check_vnode_mmap entry point out from being exclusive to | Christian S.J. Peron | 2005-04-14 | 1 | -1/+1 |
| * | Define new MAC framework and policy entry points for System V IPC | Robert Watson | 2004-11-17 | 1 | -1/+65 |
| * | Bump MAC Framework version to 2 in preparation for the upcoming API/ABI | Robert Watson | 2004-11-09 | 1 | -1/+1 |
| * | Expand comments on various sections of the MAC Framework Policy API, | Robert Watson | 2004-10-22 | 1 | -4/+15 |
| * | Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on | Robert Watson | 2004-06-24 | 1 | -0/+2 |
| * | Do the dreaded s/dev_t/struct cdev */ | Poul-Henning Kamp | 2004-06-16 | 1 | -1/+1 |
| * | Improve consistency of include file guards in src/sys/sys by terminating | Robert Watson | 2004-05-10 | 1 | -3/+3 |
| * | Forward declare struct proc, struct sockaddr, and struct thread, which | Robert Watson | 2004-02-26 | 1 | -0/+3 |
| * | Forward declare struct bpf_d, struct ifnet, struct image_params, and | Robert Watson | 2004-02-26 | 1 | -1/+5 |
| * | Reimplement sysctls handling by MAC framework. | Pawel Jakub Dawidek | 2004-02-22 | 1 | -3/+5 |
| * | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson | 2004-02-22 | 1 | -2/+2 |
| * | Coalesce pipe allocations and frees. Previously, the pipe code | Robert Watson | 2004-02-01 | 1 | -14/+15 |
| * | Switch TCP over to using the inpcb label when responding in timed | Robert Watson | 2003-12-17 | 1 | -0/+3 |
| * | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | Robert Watson | 2003-12-06 | 1 | -2/+2 |
| * | Introduce a MAC label reference in 'struct inpcb', which caches | Robert Watson | 2003-11-18 | 1 | -0/+12 |
| * | Implement sockets support for __mac_get_fd() and __mac_set_fd() | Robert Watson | 2003-11-16 | 1 | -0/+2 |
| * | Introduce two new MAC Framework and MAC policy entry points: | Robert Watson | 2003-08-21 | 1 | -0/+3 |
| * | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | Robert Watson | 2003-08-21 | 1 | -0/+5 |
| * | Redesign the externalization APIs from the MAC Framework to | Robert Watson | 2003-06-23 | 1 | -12/+7 |
| * | Forward declare a boatload of structures referenced in the MAC | Robert Watson | 2003-06-22 | 1 | -0/+12 |
| * | Update NAI copyright to 2003, missed in earlier commits and merges. | Robert Watson | 2003-04-18 | 1 | -1/+1 |
| * | Move MAC label storage for mbufs into m_tags from the m_pkthdr structure, | Robert Watson | 2003-04-14 | 1 | -0/+3 |
| * | Modify the mac_init_ipq() MAC Framework entry point to accept an | Robert Watson | 2003-03-26 | 1 | -1/+1 |
| * | Instrument sysarch() MD privileged I/O access interfaces with a MAC | Robert Watson | 2003-03-06 | 1 | -0/+1 |
| * | Provide a mac_check_system_swapoff() entry point, which permits MAC | Robert Watson | 2003-03-05 | 1 | -0/+2 |
| * | Remove dm_root entry from struct devfs_mount. It's never set, and is | Robert Watson | 2002-12-09 | 1 | -6/+9 |
| * | Introduce p_label, extensible security label storage for the MAC framework | Robert Watson | 2002-11-20 | 1 | -0/+2 |
| * | Merge kld access control checks from the MAC tree: these access control | Robert Watson | 2002-11-19 | 1 | -0/+4 |
| * | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | Robert Watson | 2002-11-12 | 1 | -3/+0 |
| * | Add an explicit execlabel argument to exec-related MAC policy entry | Robert Watson | 2002-11-08 | 1 | -3/+4 |
| * | Bring in two sets of changes: | Robert Watson | 2002-11-05 | 1 | -3/+7 |
| * | Permit MAC policies to instrument the access control decisions for | Robert Watson | 2002-11-04 | 1 | -0/+3 |
| * | License clarification and wording changes: NAI has approved removal of | Robert Watson | 2002-11-04 | 1 | -7/+4 |
| * | Introduce mac_check_system_settime(), a MAC check allowing policies to | Robert Watson | 2002-11-03 | 1 | -0/+1 |
| * | Add MAC checks for various kenv() operations: dump, get, set, unset, | Robert Watson | 2002-11-01 | 1 | -0/+5 |
| * | Move to C99 sparse structure initialization for the mac_policy_ops | Robert Watson | 2002-10-30 | 1 | -155/+4 |
| * | While 'mode_t' seemed like a good idea for the access mode argument for | Robert Watson | 2002-10-30 | 1 | -2/+2 |
