| Commit message (Expand) | Author | Age | Files | Lines |
| * | New setcred() system call and associated MAC hooks | Olivier Certner | 2024-12-16 | 1 | -0/+29 |
| * | MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes | Olivier Certner | 2024-12-16 | 1 | -2/+0 |
| * | sys: Remove $FreeBSD$: two-line .h pattern | Warner Losh | 2023-08-16 | 1 | -2/+0 |
| * | mac: kdb/ddb framework hooks | Mitchell Horne | 2022-07-18 | 1 | -0/+39 |
| * | Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many) | Pawel Biernacki | 2020-02-26 | 1 | -2/+4 |
| * | Remove AppleTalk support. | Gleb Smirnoff | 2014-03-14 | 1 | -13/+0 |
| * | Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd. | Konstantin Belousov | 2013-08-21 | 1 | -0/+32 |
| * | Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs. | Ed Schouten | 2011-11-07 | 1 | -2/+2 |
| * | Correct several issues in the integration of POSIX shared memory objects | Robert Watson | 2011-09-02 | 1 | -2/+12 |
| * | Add the fo_chown and fo_chmod methods to struct fileops and use them | Konstantin Belousov | 2011-08-16 | 1 | -0/+52 |
| * | Continue work to optimize performance of "options MAC" when no MAC policy | Robert Watson | 2009-06-03 | 1 | -4/+44 |
| * | Remove 'uio' argument from MAC Framework and MAC policy entry points for | Robert Watson | 2009-03-08 | 1 | -4/+2 |
| * | Improve the consistency of MAC Framework and MAC policy entry point | Robert Watson | 2009-03-08 | 1 | -149/+152 |
| * | Rather than having MAC policies explicitly declare what object types | Robert Watson | 2009-01-10 | 1 | -22/+1 |
| * | Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather than | Robert Watson | 2009-01-10 | 1 | -0/+1 |
| * | Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary | Edward Tomasz Napierala | 2008-10-28 | 1 | -2/+2 |
| * | Rename three MAC entry points from _proc_ to _cred_ to reflect the fact | Robert Watson | 2008-10-28 | 1 | -20/+20 |
| * | Implement MAC policy support for IPv6 fragment reassembly queues, | Robert Watson | 2008-10-26 | 1 | -1/+79 |
| * | Add a mac_inpcb_check_visible implementation to all MAC policies | Bjoern A. Zeeb | 2008-10-17 | 1 | -0/+14 |
| * | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson | 2008-08-23 | 1 | -1/+22 |
| * | Rework the lifetime management of the kernel implementation of POSIX | John Baldwin | 2008-06-27 | 1 | -9/+26 |
| * | Add missing counter increments for posix shm checks. | John Baldwin | 2008-06-26 | 1 | -0/+5 |
| * | Remove the posixsem_check_destroy() MAC check. It is semantically identical | John Baldwin | 2008-06-23 | 1 | -14/+0 |
| * | The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the | Robert Watson | 2008-06-13 | 1 | -9/+9 |
| * | Add a new file descriptor type for IPC shared memory objects and use it to | John Baldwin | 2008-01-08 | 1 | -0/+96 |
| * | Add a new 'why' argument to kdb_enter(), and a set of constants to use | Robert Watson | 2007-12-25 | 1 | -1/+1 |
| * | Implement per-object type consistency checks for labels passed to | Robert Watson | 2007-10-30 | 1 | -20/+65 |
| * | Canonicalize names of local variables. | Robert Watson | 2007-10-29 | 1 | -66/+66 |
| * | Resort TrustedBSD MAC Framework policy entry point implementations and | Robert Watson | 2007-10-29 | 1 | -1243/+1256 |
| * | Add missing mac_test labeling and sleep checks for the syncache. | Robert Watson | 2007-10-28 | 1 | -0/+48 |
| * | Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Framework | Robert Watson | 2007-10-28 | 1 | -14/+0 |
| * | Continue to move from generic network entry points in the TrustedBSD MAC | Robert Watson | 2007-10-28 | 1 | -15/+14 |
| * | Move towards more explicit support for various network protocol stacks | Robert Watson | 2007-10-28 | 1 | -12/+48 |
| * | Perform explicit label type checks for externalize entry points, rather than | Robert Watson | 2007-10-28 | 1 | -10/+70 |
| * | Give each posixsem MAC Framework entry point its own counter and test case | Robert Watson | 2007-10-27 | 1 | -9/+74 |
| * | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | Robert Watson | 2007-10-26 | 1 | -4/+4 |
| * | Consistently name functions for mac_<policy> as <policy>_whatever rather | Robert Watson | 2007-10-25 | 1 | -413/+413 |
| * | Further MAC Framework cleanup: normalize some local variable names and | Robert Watson | 2007-10-25 | 1 | -18/+18 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson | 2007-10-24 | 1 | -797/+802 |
| * | Canonicalize naming of local variables for struct ksem and associated | Robert Watson | 2007-10-21 | 1 | -6/+6 |
| * | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | Robert Watson | 2007-09-10 | 1 | -16/+16 |
| * | Add a new MAC framework and policy entry point, | Robert Watson | 2007-06-26 | 1 | -0/+13 |
| * | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | Robert Watson | 2007-04-23 | 1 | -14/+13 |
| * | Apply variable name normalization to MAC policies: adopt global conventions | Robert Watson | 2007-04-23 | 1 | -151/+153 |
| * | In the MAC Framework implementation, file systems have two per-mountpoint | Robert Watson | 2007-04-22 | 1 | -30/+9 |
| * | Remove MAC Framework access control check entry points made redundant with | Robert Watson | 2007-04-22 | 1 | -36/+0 |
| * | Further MAC test policy cleanup and enhancement: | Robert Watson | 2007-04-22 | 1 | -141/+478 |
| * | Perform overdue clean up mac_test policy: | Robert Watson | 2007-04-22 | 1 | -717/+474 |
| * | Allow MAC policy modules to control access to audit configuration system | Robert Watson | 2007-04-21 | 1 | -3/+60 |
| * | More unnecessary include reduction. | Robert Watson | 2007-02-23 | 1 | -12/+4 |