| Commit message (Expand) | Author | Age | Files | Lines |
| * | MFC: r183973 | Bjoern A. Zeeb | 2008-10-31 | 1 | -1/+3 |
| * | Merge r179781 from head to stable/7: | Robert Watson | 2008-08-04 | 1 | -3/+3 |
| * | Merge mac_framework.h:1.97, mac_internal.h:1.124, mac_policy.h:1.107 | Robert Watson | 2008-04-20 | 1 | -3/+3 |
| * | Merge mac_framework.h:1.85, mac_policy.h:1.95, mac_posix_sem.c:1.10, | Robert Watson | 2007-11-06 | 1 | -7/+7 |
| * | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | Robert Watson | 2007-09-10 | 1 | -5/+5 |
| * | Fix a bunch of warnings due to a missing forward declaration of a struct. | Peter Wemm | 2007-07-05 | 1 | -0/+1 |
| * | Add a new MAC framework and policy entry point, | Robert Watson | 2007-06-26 | 1 | -0/+3 |
| * | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | Robert Watson | 2007-04-23 | 1 | -6/+6 |
| * | Normalize variable naming in the MAC Framework by adopting the normal | Robert Watson | 2007-04-22 | 1 | -144/+142 |
| * | In the MAC Framework implementation, file systems have two per-mountpoint | Robert Watson | 2007-04-22 | 1 | -9/+5 |
| * | Remove MAC Framework access control check entry points made redundant with | Robert Watson | 2007-04-22 | 1 | -8/+0 |
| * | Allow MAC policy modules to control access to audit configuration system | Robert Watson | 2007-04-21 | 1 | -0/+14 |
| * | Introduce accessor functions mac_label_get() and mac_label_set() to replace | Robert Watson | 2007-02-06 | 1 | -7/+3 |
| * | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | Robert Watson | 2007-02-06 | 1 | -0/+6 |
| * | Add missing include guards to mac_internal.h, update include guards in | Robert Watson | 2006-12-28 | 1 | -3/+3 |
| * | Centralize definition of MAC_VERSION in mac_policy.h, as it defines the | Robert Watson | 2006-12-28 | 1 | -1/+16 |
| * | Re-wrap comments following de-indentation. | Robert Watson | 2006-12-23 | 1 | -13/+11 |
| * | Comment LABEL_TO_SLOT() macro, including observing that we'd like to improve | Robert Watson | 2006-12-20 | 1 | -0/+8 |
| * | Fix LOR between the syncache and inpcb locks when MAC is present in the | Christian S.J. Peron | 2006-12-13 | 1 | -0/+10 |
| * | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | Robert Watson | 2006-11-06 | 1 | -0/+4 |
| * | Forward declare struct cdev, since arguments of this type are used in | Robert Watson | 2006-10-30 | 1 | -0/+1 |
| * | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | Robert Watson | 2006-10-22 | 1 | -0/+2 |
| * | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | Christian S.J. Peron | 2006-09-12 | 1 | -0/+3 |
| * | Add struct msg to the forwarded declared data structures in mac_policy.h. | Robert Watson | 2006-09-09 | 1 | -0/+1 |
| * | Make mpo_associate_nfsd_label() return void, not int, to match | Robert Watson | 2006-08-06 | 1 | -1/+1 |
| * | Reconstitute struct mac_policy_ops by breaking out individual function | Robert Watson | 2006-04-26 | 1 | -296/+575 |
| * | Introduce a new MAC entry point for label initialization of the NFS daemon's | Christian S.J. Peron | 2006-04-06 | 1 | -0/+1 |
| * | Complete removal of mac_create_root_mount/mpo_create_root_mount MAC | Robert Watson | 2005-10-02 | 1 | -2/+0 |
| * | Insert a series of place-holder function pointers in mac_policy.h for | Robert Watson | 2005-08-08 | 1 | -0/+25 |
| * | Bump the module versions of the MAC Framework and MAC policy modules | Robert Watson | 2005-07-14 | 1 | -1/+1 |
| * | When devfs cloning takes place, provide access to the credential of the | Robert Watson | 2005-07-14 | 1 | -1/+5 |
| * | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | Robert Watson | 2005-07-05 | 1 | -3/+0 |
| * | Add MAC Framework and MAC policy entry point mac_check_socket_create(), | Robert Watson | 2005-07-05 | 1 | -0/+3 |
| * | Gratuitous renaming of four System V Semaphore MAC Framework entry | Robert Watson | 2005-06-07 | 1 | -4/+4 |
| * | Introduce MAC Framework and MAC Policy entry points to label and control | Robert Watson | 2005-05-04 | 1 | -0/+21 |
| * | Introduce p_canwait() and MAC Framework and MAC Policy entry points | Robert Watson | 2005-04-18 | 1 | -0/+2 |
| * | Introduce three additional MAC Framework and MAC Policy entry points to | Robert Watson | 2005-04-16 | 1 | -1/+7 |
| * | Introduce new MAC Framework and MAC Policy entry points to control the use | Robert Watson | 2005-04-16 | 1 | -0/+14 |
| * | Move MAC check_vnode_mmap entry point out from being exclusive to | Christian S.J. Peron | 2005-04-14 | 1 | -1/+1 |
| * | Define new MAC framework and policy entry points for System V IPC | Robert Watson | 2004-11-17 | 1 | -1/+65 |
| * | Bump MAC Framework version to 2 in preparation for the upcoming API/ABI | Robert Watson | 2004-11-09 | 1 | -1/+1 |
| * | Expand comments on various sections of the MAC Framework Policy API, | Robert Watson | 2004-10-22 | 1 | -4/+15 |
| * | Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on | Robert Watson | 2004-06-24 | 1 | -0/+2 |
| * | Do the dreaded s/dev_t/struct cdev */ | Poul-Henning Kamp | 2004-06-16 | 1 | -1/+1 |
| * | Improve consistency of include file guards in src/sys/sys by terminating | Robert Watson | 2004-05-10 | 1 | -3/+3 |
| * | Forward declare struct proc, struct sockaddr, and struct thread, which | Robert Watson | 2004-02-26 | 1 | -0/+3 |
| * | Forward declare struct bpf_d, struct ifnet, struct image_params, and | Robert Watson | 2004-02-26 | 1 | -1/+5 |
| * | Reimplement sysctls handling by MAC framework. | Pawel Jakub Dawidek | 2004-02-22 | 1 | -3/+5 |
| * | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson | 2004-02-22 | 1 | -2/+2 |
| * | Coalesce pipe allocations and frees. Previously, the pipe code | Robert Watson | 2004-02-01 | 1 | -14/+15 |