| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | sys: Automated cleanup of cdefs and other formatting | Warner Losh | 2023-11-27 | 1 | -1/+0 |
| * | Remove gratuitous copyouts of unchanged struct mac. | Brooks Davis | 2023-11-13 | 1 | -2/+1 |
| * | sys: Remove $FreeBSD$: one-line .c pattern | Warner Losh | 2023-08-16 | 1 | -2/+0 |
| * | mac: Honor order when registering MAC modules. | Steve Kiernan | 2023-04-18 | 1 | -22/+16 |
| * | mac: cheaper check for mac_pipe_check_read | Mateusz Guzik | 2022-08-17 | 1 | -0/+3 |
| * | mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmit | Mateusz Guzik | 2021-06-29 | 1 | -0/+6 |
| * | mac: cheaper check for mac_vnode_check_readlink | Mateusz Guzik | 2021-01-08 | 1 | -0/+3 |
| * | cache: combine fast path enabled status into one flag | Mateusz Guzik | 2021-01-06 | 1 | -0/+3 |
| * | pipe: allow for lockless pipe_stat | Mateusz Guzik | 2020-11-19 | 1 | -0/+6 |
| * | vfs: add a cheaper entry for mac_vnode_check_access | Mateusz Guzik | 2020-08-05 | 1 | -0/+3 |
| * | vfs: elide MAC-induced locking on rename if there are no relevant hoooks | Mateusz Guzik | 2020-07-29 | 1 | -0/+3 |
| * | vfs: fix vn_poll performance with either MAC or AUDIT | Mateusz Guzik | 2020-07-16 | 1 | -1/+12 |
| * | mac_policy: Remove mac_policy_sx | Jason A. Harmening | 2020-04-04 | 1 | -8/+3 |
| * | Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many) | Pawel Biernacki | 2020-02-26 | 1 | -1/+1 |
| * | vfs: use mac fastpath for lookup, open, read, write, mmap | Mateusz Guzik | 2020-02-13 | 1 | -0/+18 |
| * | mac: implement fast path for checks | Mateusz Guzik | 2020-02-13 | 1 | -0/+95 |
| * | mac: use a sleepable rmlock instead of an sx lock | Mateusz Guzik | 2019-12-27 | 1 | -2/+6 |
| * | Require that MAC label buffers be able to store a non-empty string. | Mark Johnston | 2018-08-01 | 1 | -1/+3 |
| * | sys/security: minor spelling fixes. | Pedro F. Giffuni | 2016-05-06 | 1 | -1/+1 |
| * | Fix style issues around existing SDT probes. | Mark Johnston | 2015-12-16 | 1 | -6/+6 |
| * | As constantly reported during kernel compilation, m_buflen is unsigned so | Bjoern A. Zeeb | 2013-12-25 | 1 | -2/+1 |
| * | dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE | Andriy Gapon | 2013-11-26 | 1 | -3/+3 |
| * | - For kernel compiled only with KDTRACE_HOOKS and not any lock debugging | Attilio Rao | 2013-11-25 | 1 | -1/+0 |
| * | Fix some typos that were causing probe argument types to show up as unknown. | Mark Johnston | 2013-10-01 | 1 | -1/+1 |
| * | Make the mac_policy_rm lock recursable, which allows reentrance into | Konstantin Belousov | 2013-09-29 | 1 | -1/+2 |
| * | put sys/systm.h at its proper place or add it if missing | Andriy Gapon | 2011-12-12 | 1 | -1/+1 |
| * | sysctl(9) cleanup checkpoint: amd64 GENERIC builds cleanly. | Matthew D Fleming | 2011-01-12 | 1 | -1/+1 |
| * | Add an extra comment to the SDT probes definition. This allows us to get | Rui Paulo | 2010-08-22 | 1 | -3/+5 |
| * | Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings that | Robert Watson | 2009-06-02 | 1 | -2/+2 |
| * | Add internal 'mac_policy_count' counter to the MAC Framework, which is a | Robert Watson | 2009-06-02 | 1 | -5/+11 |
| * | Make the rmlock(9) interface a bit more like the rwlock(9) interface: | Robert Watson | 2009-05-29 | 1 | -1/+1 |
| * | Convert the MAC Framework from using rwlocks to rmlocks to stabilize | Robert Watson | 2009-05-27 | 1 | -11/+11 |
| * | Rework MAC Framework synchronization in a number of ways in order to | Robert Watson | 2009-03-14 | 1 | -112/+73 |
| * | Improve the consistency of MAC Framework and MAC policy entry point | Robert Watson | 2009-03-08 | 1 | -0/+3 |
| * | Add static DTrace probes for MAC Framework access control checks and | Robert Watson | 2009-03-08 | 1 | -1/+3 |
| * | Reduce the verbosity of SDT trace points for DTrace by defining several | Robert Watson | 2009-03-03 | 1 | -12/+3 |
| * | Begin to add SDT tracing of the MAC Framework: add policy modevent, | Robert Watson | 2009-01-24 | 1 | -1/+24 |
| * | Rather than having MAC policies explicitly declare what object types | Robert Watson | 2009-01-10 | 1 | -7/+45 |
| * | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson | 2008-08-23 | 1 | -29/+14 |
| * | Remove conditional return of 1. For the MAC_STATIC case at this point in | Christian S.J. Peron | 2007-01-01 | 1 | -3/+0 |
| * | Only signal the CV indicating that the MAC Framework is available for | Robert Watson | 2006-12-31 | 1 | -6/+23 |
| * | Slightly resort functions in file so that no forward function prototypes | Robert Watson | 2006-12-29 | 1 | -49/+46 |
| * | Re-add include of opt_mac.h in mac_framework.c, which was improperly | Robert Watson | 2006-12-29 | 1 | -0/+2 |
| * | Centralize definition of MAC_VERSION in mac_policy.h, as it defines the | Robert Watson | 2006-12-28 | 1 | -4/+3 |
| * | Move mac_init_label() and mac_destroy_label() from mac_framework.c to | Robert Watson | 2006-12-28 | 1 | -19/+0 |
| * | Trim unneeded includes. | Robert Watson | 2006-12-28 | 1 | -28/+0 |
| * | Break contents of kern_mac.c out into two files following a repo-copy: | Robert Watson | 2006-12-28 | 1 | -672/+0 |
| * | Update MAC Framework general comments, referencing various interfaces it | Robert Watson | 2006-12-28 | 1 | -12/+40 |
| * | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | Robert Watson | 2006-12-22 | 1 | -2/+1 |
| * | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | Robert Watson | 2006-12-21 | 1 | -3/+1 |
