index
:
src
main
releng/1
releng/10.0
releng/10.1
releng/10.2
releng/10.3
releng/10.4
releng/11.0
releng/11.1
releng/11.2
releng/11.3
releng/11.4
releng/12.0
releng/12.1
releng/12.2
releng/12.3
releng/12.4
releng/13.0
releng/13.1
releng/13.2
releng/13.3
releng/13.4
releng/14.0
releng/14.1
releng/2.0
releng/2.0.5
releng/4.10
releng/4.11
releng/4.3
releng/4.4
releng/4.5
releng/4.6
releng/4.7
releng/4.8
releng/4.9
releng/5.0
releng/5.1
releng/5.2
releng/5.3
releng/5.4
releng/5.5
releng/6.0
releng/6.1
releng/6.2
releng/6.3
releng/6.4
releng/7.0
releng/7.1
releng/7.2
releng/7.3
releng/7.4
releng/8.0
releng/8.1
releng/8.2
releng/8.3
releng/8.4
releng/9.0
releng/9.1
releng/9.2
releng/9.3
stable/10
stable/11
stable/12
stable/13
stable/14
stable/2.1
stable/2.2
stable/3
stable/4
stable/5
stable/6
stable/7
stable/8
stable/9
vendor/CSRG
vendor/Juniper/libxo
vendor/Linux/ath-common
vendor/Linux/ath10k
vendor/Linux/ath11k
vendor/Linux/ath12k
vendor/Linux/iwlwifi
vendor/Linux/mt76
vendor/Linux/rtw88
vendor/Linux/rtw89
vendor/NetBSD/blacklist
vendor/NetBSD/bmake
vendor/NetBSD/libc-pwcache
vendor/NetBSD/libc-vis
vendor/NetBSD/libedit
vendor/NetBSD/libexecinfo
vendor/NetBSD/lukemftp
vendor/NetBSD/lukemftpd
vendor/NetBSD/misc
vendor/NetBSD/mknod
vendor/NetBSD/mtree
vendor/NetBSD/softfloat
vendor/NetBSD/sort
vendor/NetBSD/tests
vendor/NetBSD/unvis
vendor/NetBSD/vis
vendor/NetBSD/xlint
vendor/OpenBSD
vendor/SGI
vendor/acpica
vendor/alpine-hal
vendor/alsa
vendor/altq
vendor/amd
vendor/apr
vendor/apr-util
vendor/arm-optimized-routines
vendor/atf
vendor/ath
vendor/bc
vendor/bearssl
vendor/bind
vendor/bind4
vendor/bind9
vendor/bind9-9.3
vendor/bind9-9.4
vendor/bind9-9.6
vendor/bind9-9.8
vendor/binutils
vendor/bionic-x86_64-string
vendor/blocklist
vendor/bsddialog
vendor/bsnmp
vendor/byacc
vendor/bzip2
vendor/ck
vendor/clang
vendor/clang-60
vendor/clang-70
vendor/clang-80
vendor/clang-90
vendor/com_err
vendor/compiler-rt
vendor/compiler-rt-60
vendor/compiler-rt-70
vendor/compiler-rt-80
vendor/compiler-rt-90
vendor/cortex-strings
vendor/csup
vendor/ctfdump
vendor/device-tree
vendor/dhcpcd
vendor/dialog
vendor/dma
vendor/dtc
vendor/dtracetoolkit
vendor/edk2
vendor/ee
vendor/elftoolchain
vendor/ena-com
vendor/expat
vendor/ext2fs
vendor/ficl
vendor/file
vendor/flex
vendor/gcc
vendor/gdb
vendor/gdtoa
vendor/global
vendor/google/capsicum-test
vendor/google/googletest
vendor/got/diff
vendor/gperf
vendor/groff
vendor/heimdal
vendor/heirloom-doctools
vendor/hostapd
vendor/hyperv
vendor/illumos
vendor/ipfilter
vendor/ipfilter-sys
vendor/ipfilter-sys-old
vendor/isc-dhcp
vendor/kerberosIV
vendor/krb5
vendor/kyua
vendor/ldns
vendor/ldns-host
vendor/less
vendor/lib9p
vendor/libarchive
vendor/libbegemot
vendor/libc++
vendor/libc++-60
vendor/libc++-70
vendor/libc++-80
vendor/libc++-90
vendor/libcbor
vendor/libcxxrt
vendor/libdes
vendor/libdivsufsort
vendor/libevent
vendor/libfdt
vendor/libfido2
vendor/libgmp
vendor/libpam
vendor/libpcap
vendor/libreadline
vendor/libregex
vendor/libucl
vendor/libuwx
vendor/libyaml
vendor/lld
vendor/lld-60
vendor/lld-70
vendor/lld-80
vendor/lld-90
vendor/lldb
vendor/lldb-60
vendor/lldb-70
vendor/lldb-80
vendor/lldb-90
vendor/llvm
vendor/llvm-60
vendor/llvm-70
vendor/llvm-80
vendor/llvm-90
vendor/llvm-libunwind
vendor/llvm-libunwind-80
vendor/llvm-libunwind-90
vendor/llvm-openmp
vendor/llvm-openmp-80
vendor/llvm-openmp-90
vendor/llvm-project/main
vendor/llvm-project/master
vendor/llvm-project/release-10.x
vendor/llvm-project/release-11.x
vendor/llvm-project/release-12.x
vendor/llvm-project/release-13.x
vendor/llvm-project/release-14.x
vendor/llvm-project/release-15.x
vendor/llvm-project/release-16.x
vendor/llvm-project/release-17.x
vendor/llvm-project/release-18.x
vendor/llvm-project/release-19.x
vendor/llvm-project/release-8.x
vendor/llvm-project/release-9.x
vendor/lomac
vendor/lua
vendor/lutok
vendor/mandoc
vendor/misc-GNU/awk
vendor/misc-GNU/bc
vendor/misc-GNU/bison
vendor/misc-GNU/cpio
vendor/misc-GNU/cvs
vendor/misc-GNU/diff
vendor/misc-GNU/grep
vendor/misc-GNU/misc
vendor/misc-GNU/patch
vendor/misc-GNU/sort
vendor/misc-GNU/texinfo
vendor/mrouted
vendor/ncftp
vendor/ncurses
vendor/netcat
vendor/ngatm
vendor/ntp
vendor/ntpd
vendor/nve
vendor/nvi
vendor/octeon-sdk
vendor/one-true-awk
vendor/openbsm
vendor/opencsd
vendor/openpam
vendor/openresolv
vendor/opensolaris
vendor/openssh
vendor/openssl
vendor/openssl-0.9.8
vendor/openssl-1.0.1
vendor/openssl-1.0.2
vendor/openssl-1.1.1
vendor/openssl-3.0
vendor/openzfs/legacy
vendor/openzfs/master
vendor/openzfs/zfs-2.1-release
vendor/openzfs/zfs-2.2-release
vendor/opie
vendor/pam_modules
vendor/pcg-c
vendor/pciids
vendor/perl5
vendor/pf
vendor/pf-sys
vendor/pjdfstest
vendor/pnglite
vendor/pppd
vendor/qcamain_open_hal
vendor/rarpd
vendor/resolver
vendor/rpcgen
vendor/sendmail
vendor/serf
vendor/skein
vendor/smbfs
vendor/softdep
vendor/softupdates
vendor/spleen
vendor/sqlite3
vendor/ssleay
vendor/stallion
vendor/subversion
vendor/sym
vendor/tcl
vendor/tcp_wrappers
vendor/tcpdump
vendor/tcsh
vendor/terminus
vendor/testfloat
vendor/tnftp
vendor/top
vendor/traceroute
vendor/tre
vendor/tzcode
vendor/tzdata
vendor/tzdb
vendor/unbound
vendor/unifdef
vendor/v4l
vendor/voxware
vendor/wireguard-tools
vendor/wpa
vendor/wpa_supplicant
vendor/x86emu
vendor/xe
vendor/xz
vendor/xz-embedded
vendor/zlib
vendor/zstd
FreeBSD source tree
about
summary
refs
log
tree
commit
diff
log msg
author
committer
range
path:
root
/
sys
/
security
/
mac_biba
Commit message (
Expand
)
Author
Age
Files
Lines
*
Trim "trustedbsd_" from the front of the policy module "short names";
Robert Watson
2003-03-27
1
-1
/
+1
*
Modify the mac_init_ipq() MAC Framework entry point to accept an
Robert Watson
2003-03-26
1
-1
/
+1
*
Expand scope of the Biba policy to include some of the new entry
Robert Watson
2003-03-25
1
-0
/
+40
*
Back out M_* changes, per decision of the TRB.
Warner Losh
2003-02-19
1
-1
/
+1
*
Implement mpo_check_kld_load() and mpo_check_kld_unload() for the Biba
Robert Watson
2003-02-04
1
-0
/
+39
*
Place more stringent checks on process credential relabeling for the Biba
Robert Watson
2003-02-04
1
-6
/
+10
*
Rename the variable 'grade' to 'type' in interface parsing and
Robert Watson
2003-02-04
1
-7
/
+7
*
Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.
Alfred Perlstein
2003-01-21
1
-1
/
+1
*
Default policies to on: if you load them or compile them into your
Robert Watson
2002-12-10
1
-1
/
+1
*
Remove dm_root entry from struct devfs_mount. It's never set, and is
Robert Watson
2002-12-09
1
-8
/
+10
*
Garbage collect mac_create_devfs_vnode() -- it hasn't been used since
Robert Watson
2002-11-12
1
-12
/
+0
*
Update MAC modules for changes in arguments for exec MAC policy
Robert Watson
2002-11-08
1
-2
/
+16
*
Update policy modules for changes in arguments associated with support
Robert Watson
2002-11-05
1
-1
/
+1
*
Since neither the Biba policy nor the MLS policy make use of
Robert Watson
2002-11-05
1
-23
/
+0
*
Implement mpo_check_system_acct and mpo_check_system_settime() for Biba:
Robert Watson
2002-11-04
1
-0
/
+46
*
Correct use of mac_biba_subject_privileged() in swapon() code.
Robert Watson
2002-11-04
1
-2
/
+4
*
License and wording updates: NAI has authorized the removal of clause
Robert Watson
2002-11-04
2
-14
/
+8
*
Fix some warnings on 64 bit architectures. The vn_extattr_get()
Maxime Henrion
2002-11-02
1
-2
/
+1
*
Move to C99 sparse structure initialization for the mac_policy_ops
Robert Watson
2002-10-30
1
-264
/
+133
*
Various minor type, prototype tweaks -- clean up cruft due to lack of
Robert Watson
2002-10-30
1
-4
/
+4
*
While 'mode_t' seemed like a good idea for the access mode argument for
Robert Watson
2002-10-30
1
-1
/
+1
*
Try again to fix the KASSERT.
Robert Watson
2002-10-30
1
-1
/
+1
*
Fix a KASSERT bug that showed up only in the LINT build, not the
Robert Watson
2002-10-30
1
-1
/
+1
*
Implement Biba policy entry points for mac_check_system_swapon()
Robert Watson
2002-10-29
1
-0
/
+59
*
Require Biba privilege to relabel a network interface.
Robert Watson
2002-10-29
1
-0
/
+7
*
Remove all reference to 'struct oldmac', since it's no longer required
Robert Watson
2002-10-28
1
-0
/
+27
*
Add a return type for mac_biba_high_single(), apparently lost in an
Robert Watson
2002-10-28
1
-0
/
+1
*
Rename mac_biba_subject_equal_ok() to mac_biba_subject_privileged()
Robert Watson
2002-10-28
1
-6
/
+6
*
Zero the trusted_interface buffer before starting parsing.
Robert Watson
2002-10-28
1
-0
/
+6
*
Slightly change the semantics of vnode labels for MAC: rather than
Robert Watson
2002-10-26
1
-61
/
+120
*
Style fix: space between 'switch' and '('.
Robert Watson
2002-10-22
1
-1
/
+1
*
Don't enforce MAC Biba policy for socket visibility if Biba is not
Robert Watson
2002-10-22
1
-0
/
+3
*
Adapt MAC policies for the new user API changes; teach policies how
Robert Watson
2002-10-22
2
-16
/
+290
*
Introduce mac_biba_copy() and mac_mls_copy(), which conditionally
Robert Watson
2002-10-21
1
-9
/
+25
*
Add compartment support to Biba and MLS policies. The logic of the
Robert Watson
2002-10-21
2
-16
/
+68
*
Demote sockets to single-label objects rather than maintaining a
Robert Watson
2002-10-21
1
-16
/
+0
*
Synchonize variable spelling with the MAC tree: we shortened some of
Robert Watson
2002-10-21
1
-9
/
+8
*
Since the Biba and MLS access checks are identical to the open checks,
Robert Watson
2002-10-21
1
-12
/
+1
*
Cleanup of relabel authorization checks -- almost identical logic,
Robert Watson
2002-10-21
1
-56
/
+205
*
Add a twiddle to create PTY's with a biba/equal or mls/equal label
Robert Watson
2002-10-21
1
-0
/
+9
*
Trim accidentally introduced trailing whitespace.
Robert Watson
2002-10-06
1
-1
/
+1
*
Sync from MAC tree: break out the single mmap entry point into
Robert Watson
2002-10-06
1
-22
/
+32
*
Modify label allocation semantics for sockets: pass in soalloc's malloc
Robert Watson
2002-10-05
1
-2
/
+2
*
Implement mac_create_devfs_symlink() for policies that interact with
Robert Watson
2002-10-05
1
-0
/
+14
*
Merge implementation of mpo_check_vnode_link() for various appropriate
Robert Watson
2002-10-05
1
-0
/
+26
*
Begin another merge from the TrustedBSD MAC branch:
Robert Watson
2002-10-05
1
-205
/
+58
*
Remove another missed trailing space.
Robert Watson
2002-09-21
1
-1
/
+1
*
Trim trailing whitespace from the ends of lines.
Robert Watson
2002-09-21
1
-13
/
+13
*
Continue cleanup and sync of mac_biba and mac_mls policies to the
Robert Watson
2002-09-21
1
-13
/
+0
*
Remove mac_biba_high_single() check for interface renaming: we now
Robert Watson
2002-09-21
1
-12
/
+0
[next]