aboutsummaryrefslogtreecommitdiff
path: root/sys/security/mac_lomac/mac_lomac.c
Commit message (Expand)AuthorAgeFilesLines
...
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-231-4/+4
* Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson2007-04-231-202/+199
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-221-12/+8
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-221-17/+192
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-211-1/+63
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-061-4/+4
* Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson2006-12-221-2/+1
* Teach the MAC policies which utilize mbuf labeling the new syncacheChristian S.J. Peron2006-12-131-0/+25
* Sweep kernel replacing suser(9) calls with priv(9) calls, assigningRobert Watson2006-11-061-1/+4
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson2006-10-221-1/+1
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointChristian S.J. Peron2006-09-121-0/+12
* Normalize a significant number of kernel malloc type names:Robert Watson2005-10-311-1/+1
* Add #include <sys/sx.h>, devfs is going to require this shortly.Poul-Henning Kamp2005-09-191-0/+1
* Remove mac_create_root_mount() and mpo_create_root_mount(), whichRobert Watson2005-09-191-14/+0
* When devfs cloning takes place, provide access to the credential of theRobert Watson2005-07-141-2/+2
* Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which isRobert Watson2005-07-051-22/+0
* Move MAC check_vnode_mmap entry point out from being exclusive toChristian S.J. Peron2005-04-141-2/+3
* Remove policy references to mpo_check_vnode_mprotect(), which isRobert Watson2005-01-261-30/+1
* Introduce SLOT_SET macro and use it in place of casts as lvalues.Alexander Kabaev2004-07-281-6/+8
* Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels onRobert Watson2004-06-241-0/+1
* Do the dreaded s/dev_t/struct cdev */Poul-Henning Kamp2004-06-161-1/+1
* Reimplement sysctls handling by MAC framework.Pawel Jakub Dawidek2004-02-221-11/+5
* Update my personal copyrights and NETA copyrights in the kernelRobert Watson2004-02-221-2/+2
* Coalesce pipe allocations and frees. Previously, the pipe codeRobert Watson2004-02-011-6/+6
* Switch TCP over to using the inpcb label when responding in timedRobert Watson2003-12-171-0/+13
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),Robert Watson2003-12-061-13/+1
* Introduce a MAC label reference in 'struct inpcb', which cachesRobert Watson2003-11-181-0/+45
* Don't implement mpo_destroy() for Biba, LOMAC, and MLS, as theyRobert Watson2003-11-171-7/+0
* Implement sockets support for __mac_get_fd() and __mac_set_fd()Robert Watson2003-11-161-0/+1
* Modify the MAC Framework so that instead of embedding a (struct label)Robert Watson2003-11-121-56/+56
* Replace a '-' with a ')'. Update copyright.Robert Watson2003-11-081-2/+2
* Replace the if_name and if_unit members of struct ifnet with new membersBrooks Davis2003-10-311-4/+2
* Line-break sync to the MAC development branch.Robert Watson2003-10-211-1/+2
* Correct logic for filling out a "new" label during a credentialRobert Watson2003-08-211-7/+29
* Remove trailing whitespace.Robert Watson2003-07-051-1/+1
* Redesign the externalization APIs from the MAC Framework toRobert Watson2003-06-231-105/+66
* Also implement mpo_copy_mbuf_label() for mac_lomac, or labels mayRobert Watson2003-06-021-0/+1
* Remove double return()Poul-Henning Kamp2003-05-311-2/+0
* Enable the MAC_ALWAYS_LABEL_MBUF flag for the Biba, LOMAC, MLS, and TestRobert Watson2003-04-151-1/+1
* Modify the mac_init_ipq() MAC Framework entry point to accept anRobert Watson2003-03-261-1/+1
* Back out M_* changes, per decision of the TRB.Warner Losh2003-02-191-2/+2
* Move a bunch of flags from the KSE to the thread.Julian Elischer2003-02-171-1/+1
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.Alfred Perlstein2003-01-211-2/+2
* Fix warnings on 64bits architectures.Maxime Henrion2003-01-061-2/+1
* Default policies to on: if you load them or compile them into yourRobert Watson2002-12-101-1/+1
* Remove dm_root entry from struct devfs_mount. It's never set, and isRobert Watson2002-12-091-8/+10
* Remove a const that generates a warning: the const isn't strictlyRobert Watson2002-12-041-1/+1
* License tweak: remove clause 3 per permission of NAI.Robert Watson2002-12-031-3/+0
* Correct two warnings by staticizing a function and removing an unusedRobert Watson2002-11-261-11/+1
* Import an implementation of LOMAC (Low-Watermark Mandatory AccessRobert Watson2002-11-261-0/+2749