| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
net: endhostdnsent is named _endhostdnsent and is
private to netdb family of functions.
posix1e: acl_size.c has been never compiled in,
so there's no "acl_size".
rpc: "getnetid" is a static function.
stdtime: "gtime" is #ifdef'ed out in the source.
some symbols are specific only to some architectures,
e.g., ___tls_get_addr is only defined on i386.
__htonl, __htons, __ntohl and __ntohs are no longer
functions, they are now (internal) defines in
<machine/endian.h>.
Submitted by: ru
Notes:
svn path=/head/; revision=170154
|
|
|
|
| |
Notes:
svn path=/head/; revision=169092
|
|
|
|
|
|
|
|
|
|
|
|
| |
acl_from_text.c. Since acl_from_text.c is the only place it
is used, we can now make this internal utility function "static."
As a bonus, acl_set_fd() no longer pulls in getpwuid() for no reason.
MFC after: 7 days
Notes:
svn path=/head/; revision=167006
|
|
|
|
| |
Notes:
svn path=/head/; revision=162841
|
|
|
|
|
|
|
|
|
|
| |
old file, update references, etc. The C function is already named
mac_is_present().
Obtained from: TrustedBSD Project
Notes:
svn path=/head/; revision=160154
|
|
|
|
| |
Notes:
svn path=/head/; revision=156613
|
|
|
|
|
|
|
| |
Reviewed by: davidxu
Notes:
svn path=/head/; revision=156608
|
|
|
|
| |
Notes:
svn path=/head/; revision=152718
|
|
|
|
| |
Notes:
svn path=/head/; revision=152551
|
|
|
|
|
|
|
| |
the function definition.
Notes:
svn path=/head/; revision=150065
|
|
|
|
|
|
|
|
|
|
|
| |
that have at least 3 characters.
MFC after: 1 week
Thanks to: Music band ``Chingon''
for keeping me company while searching for these.
Notes:
svn path=/head/; revision=148580
|
|
|
|
|
|
|
|
| |
Submitted by: Wojciech A. Koszek [dunstan at freebsd czest pl]
Approved by: re (hrs)
Notes:
svn path=/head/; revision=147750
|
|
|
|
| |
Notes:
svn path=/head/; revision=146937
|
|
|
|
|
|
|
| |
MFC after: 3 days
Notes:
svn path=/head/; revision=140664
|
|
|
|
| |
Notes:
svn path=/head/; revision=140505
|
|
|
|
| |
Notes:
svn path=/head/; revision=140288
|
|
|
|
| |
Notes:
svn path=/head/; revision=140081
|
|
|
|
|
|
|
|
|
|
|
|
| |
is supported.
-Document the new more preferred syntax
-Add examples for the new syntax
-Add a note that the old syntax will be deprecated in the future.
Reviewed by: rwatson
Notes:
svn path=/head/; revision=137865
|
|
|
|
| |
Notes:
svn path=/head/; revision=131635
|
|
|
|
| |
Notes:
svn path=/head/; revision=131539
|
|
|
|
| |
Notes:
svn path=/head/; revision=131504
|
|
|
|
| |
Notes:
svn path=/head/; revision=131365
|
|
|
|
|
|
|
| |
mac_get_link() and mac_set_link() were added.
Notes:
svn path=/head/; revision=130636
|
|
|
|
|
|
|
| |
Submitted by: Stefan Farfeleder <stefan@fafoe.narf.at>
Notes:
svn path=/head/; revision=124193
|
|
|
|
|
|
|
| |
foo[i] = bar[++i]; /* Which operator [] will be evaluated first? */
Notes:
svn path=/head/; revision=124176
|
|
|
|
| |
Notes:
svn path=/head/; revision=124174
|
|
|
|
|
|
|
|
| |
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=122868
|
|
|
|
|
|
|
|
|
|
|
| |
context of sockets, and document EINVAL as a possible failure mode
based on the object selected, not just the label provided.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=122811
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
SO_PEERLABEL. This provides an interface to query the label of a
socket peer without embedding implementation details of mac_t in
the application. Previously, sizeof(*mac_t) had to be specified
by an application when performing getsockopt().
Document mac_get_peer(3), and expand documentation of the other
mac_get(3) functions. Note that it's possible to get EINVAL back
from mac_get_fd(3) when pointing it at an inappropriate object.
NOTE: mac_get_fd() and mac_set_fd() support for sockets will
follow shortly, so the documentation is slightly ahead of the
code.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=122810
|
|
|
|
|
|
|
|
|
|
|
| |
mac_free(3), which is used only for variables of type mac_t in
the FreeBSD implementation.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=122777
|
|
|
|
| |
Notes:
svn path=/head/; revision=122735
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
is accessed for the first time as a result of an application looking
up label configuration information. Previously, the check and read
were kicked off by mac_prepare_(typename)() functions; since
mac_prepare_type() may now be directly employed by a user process,
push the check and initialization into that function.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=122732
|
|
|
|
|
|
|
|
|
|
|
|
| |
rather than generating an error. This is consistent with other tools
printing user and group names, and means you can read the ACL using
our tools rather than being up a creek.
PR: 56991
Submitted by: Michael Bretterklieber <mbretter@a-quadrat.at>
Notes:
svn path=/head/; revision=121975
|
|
|
|
| |
Notes:
svn path=/head/; revision=120010
|
|
|
|
|
|
|
|
|
|
| |
ENOENT instead.
Reported by: "Kenneth D. Merry" <ken@kdm.org>
Submitted by: Bryan Liesner <bleez@comcast.net>
Notes:
svn path=/head/; revision=119588
|
|
|
|
|
|
|
|
| |
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=119321
|
|
|
|
|
|
|
|
|
|
|
|
| |
mac_prepare() APIs.
Add a HISTORY section.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=119320
|
|
|
|
|
|
|
|
| |
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=119317
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
the default label support in /etc/mac.conf. Rather than maintain
each default label type in an explicit global variable in mac.c,
keep a list of defaults loaded from the configuration file.
Generalize the parsing so that we support both the older:
default_file_labels foo
default_ifnet_labels foo
default_process_labels foo
And also a new:
default_labels file foo
default_labels ifnet foo
default_labels process foo
We now accept arbitrary object classes in the first argument. If
the same object is specified more than once, we discard the
earlier definition in favor of the later one.
Add a new API, mac_prepare_type(), which accepts a mac_t to
prepare, as well as an object name in the second argument, which
will pull a default label set for the object out of the
configuration loaded by mac_init_internal(). This permits the libc
to adapt to new objects known about by applications but not by libc
at compile-time.
Also liberalize the error handling a bit: if we're using implicit
initialization (i.e., the application didn't explicitly initialize
the MAC code), ignore syntax errors and only use valid lines. In
the future, we may want to add explicit warnings and do this a
bit more consistently.
While here, add support for a MAC_CONFFILE environmental variable,
which may be used to specify an alternative mac.conf configuration
file if the application isn't running with modified privilege
(issetugid()).
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=119314
|
|
|
|
|
|
|
|
|
| |
permission set based on a more restrictive mask.
Submitted by: Glen Gibb <grg@ridley.unimelb.edu.au>
Notes:
svn path=/head/; revision=117982
|
|
|
|
|
|
|
| |
Approved by: re (blanket)
Notes:
svn path=/head/; revision=115288
|
|
|
|
|
|
|
| |
Approved by: re (blanket)
Notes:
svn path=/head/; revision=115225
|
|
|
|
| |
Notes:
svn path=/head/; revision=114051
|
|
|
|
|
|
|
|
|
|
| |
from mac.3; likewise, mac.conf.5 from mac_prepare.3.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=113741
|
|
|
|
|
|
|
|
| |
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=113737
|
|
|
|
|
|
|
|
|
|
|
| |
in the mac.3 library man page. They were already cross-referenced
at the end of the man page, just not explicitly listed here.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=113732
|
|
|
|
|
|
|
|
|
|
|
| |
they resemble one another, but POSIX.1e interfaces were not sufficiently
expressive to do what we needed.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, Network Associates Laboratories
Notes:
svn path=/head/; revision=113578
|
|
|
|
|
|
|
| |
`implicit declaration of function' variety.
Notes:
svn path=/head/; revision=111618
|
|
|
|
| |
Notes:
svn path=/head/; revision=111447
|
|
|
|
| |
Notes:
svn path=/head/; revision=111282
|