aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which isRobert Watson2005-07-058-102/+12
* Add MAC Framework and MAC policy entry point mac_check_socket_create(),Robert Watson2005-07-054-0/+40
* Correct grammar error in commentChristian S.J. Peron2005-06-101-1/+1
* Gratuitous renaming of four System V Semaphore MAC Framework entryRobert Watson2005-06-077-56/+56
* Introduce MAC Framework and MAC Policy entry points to label and controlRobert Watson2005-05-047-0/+462
* Get the directory structure correct in a comment.Tom Rhodes2005-04-222-2/+4
* Add locking support to mac_bsdextended:Tom Rhodes2005-04-221-37/+67
* Introduce p_canwait() and MAC Framework and MAC Policy entry pointsRobert Watson2005-04-185-0/+37
* Introduce three additional MAC Framework and MAC Policy entry points toRobert Watson2005-04-165-8/+166
* In mac_get_fd(), remove unconditional acquisition of Giant around copyingRobert Watson2005-04-162-18/+14
* Introduce new MAC Framework and MAC Policy entry points to control the useRobert Watson2005-04-165-0/+337
* Move MAC check_vnode_mmap entry point out from being exclusive toChristian S.J. Peron2005-04-148-12/+16
* Remove an accidental clearing of the new label pointer on a system VRobert Watson2005-02-241-1/+0
* Synchronize HEAD copyright/license with RELENG_5 copyright/license:Robert Watson2005-02-131-5/+5
* Update copyright for NETA->McAfee.Robert Watson2005-01-301-5/+5
* Remove policy references to mpo_check_vnode_mprotect(), which isRobert Watson2005-01-265-54/+2
* Remove an obsoleted comment about struct versions.Robert Watson2005-01-231-1/+0
* Update mac_test for MAC Framework policy entry points System V IPCRobert Watson2005-01-221-0/+378
* Update mac_stub for MAC Framework policy entry points System V IPCRobert Watson2005-01-221-5/+213
* Implement MLS confidentiality protection for System V IPC objectsRobert Watson2005-01-221-5/+391
* Implement Biba integrity protection for System V IPC objects (messageRobert Watson2005-01-221-5/+394
* Exempt the superuser from mac_seeotheruids checks.Robert Watson2005-01-031-0/+3
* Add a new sysctl/tunable to mac_portacl:Robert Watson2004-12-081-0/+23
* Switch from using an sx lock to a mutex for the mac_portacl rule chain:Robert Watson2004-12-061-26/+19
* Implement MAC entry points relating to System V IPC, calling into theRobert Watson2004-11-173-0/+592
* Define new MAC framework and policy entry points for System V IPCRobert Watson2004-11-172-1/+129
* Bump MAC Framework version to 2 in preparation for the upcoming API/ABIRobert Watson2004-11-093-3/+3
* Disable use of synchronization early in the boot by the MAC Framework;Robert Watson2004-10-302-0/+42
* /%x/%s/ -- mismerged DEBUGGER() printf() format stirng from theRobert Watson2004-10-231-1/+1
* Expand comments on various sections of the MAC Framework Policy API,Robert Watson2004-10-221-4/+15
* Replace direct reference to kdb_enter() with a DEBUGGER() macro thatRobert Watson2004-10-221-28/+34
* Minor white space synchronization and line wrapping.Robert Watson2004-10-222-1/+3
* In the MAC label zone destructor, assert that the label is onlyRobert Watson2004-10-221-1/+3
* Remove extern declaration of mac_enforce_sysv, as it's not present inRobert Watson2004-10-221-1/+0
* Bump copyright dates for NETA on these files.Robert Watson2004-10-212-2/+2
* Modify mac_bsdextended policy so that it defines its own vnode accessRobert Watson2004-10-212-33/+74
* Remove the debugging tunable, it was not being used.Tom Rhodes2004-09-101-10/+1
* Allow mac_bsdextended(4) to log failed attempts to syslog's AUTHPRIVTom Rhodes2004-08-211-5/+19
* Give the mac_bsdextended(4) policy the ability to match and apply on a firstTom Rhodes2004-08-211-2/+21
* * Add a "how" argument to uma_zone constructors and initialization functionsBrian Feldman2004-08-021-3/+4
* Introduce SLOT_SET macro and use it in place of casts as lvalues.Alexander Kabaev2004-07-283-12/+16
* Allow an effective uid of root to bypass mac_bsdextended rules; the MACRobert Watson2004-07-231-0/+3
* Rename Biba and MLS _single label elements to _effective, which moreRobert Watson2004-07-164-353/+353
* Do a pass over all modules in the kernel and make them return EOPNOTSUPPPoul-Henning Kamp2004-07-152-0/+2
* Update for the KDB framework:Marcel Moolenaar2004-07-101-28/+29
* Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels onRobert Watson2004-06-247-0/+53
* Do the dreaded s/dev_t/struct cdev */Poul-Henning Kamp2004-06-168-8/+9
* Socket MAC labels so_label and so_peerlabel are now protected byRobert Watson2004-06-131-8/+57
* add missing #include <sys/module.h>Poul-Henning Kamp2004-05-302-0/+2
* Remove dead code. (This loop counted the number of rules, but the countColin Percival2004-05-151-7/+0
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-14 18:30:49 +0000