summaryrefslogtreecommitdiff
path: root/sys/security/mac
AgeCommit message (Expand)Author
4 dayskern: add a mac.label jail parameterKyle Evans
4 dayskern: mac: pull mac_label_copyin_string outKyle Evans
4 daysmac_set_fd(3): add support for jail descriptorsKyle Evans
4 dayskern: mac: add various jail MAC hooksKyle Evans
4 daysmac: add macros for 5-argument SDT probesKyle Evans
4 dayskern: mac: add a MAC label to struct prisonKyle Evans
2025-12-04MAC: Rename mac_cred_create_swapper to mac_cred_create_kproc0John Baldwin
2025-11-24MAC: Use the current thread's user ABI to determine the layout of struct macJohn Baldwin
2025-10-13MAC: Use proper prototype for SYSINIT functionsZhenlei Huang
2025-08-03mac: Remove uses of DEBUG_VFS_LOCKSMark Johnston
2024-12-16New setcred() system call and associated MAC hooksOlivier Certner
2024-12-16MAC: syscalls: mac_label_copyin(): 32-bit compatibilityOlivier Certner
2024-12-16MAC: syscalls: Split mac_set_proc() into reusable piecesOlivier Certner
2024-12-16MAC: syscalls: Factor out common label copy-in codeOlivier Certner
2024-12-16MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodesOlivier Certner
2024-12-16MAC: Define a common 'mac' node for MAC's jail parametersOlivier Certner
2024-12-16MAC: 'kernel_mac_support' module: Make an outdated comment more genericOlivier Certner
2024-09-26MAC: improve handling of listening socketsMichael Tuexen
2024-09-26MAC: improve consistency in error handlingMichael Tuexen
2023-11-26sys: Automated cleanup of cdefs and other formattingWarner Losh
2023-11-13Remove gratuitous copyouts of unchanged struct mac.Brooks Davis
2023-08-16sys: Remove $FreeBSD$: one-line .c patternWarner Losh
2023-08-16sys: Remove $FreeBSD$: two-line .h patternWarner Losh
2023-07-26mac_ipacl: new MAC policy module to limit jail/vnet IP configurationShivank Garg
2023-04-18mac: Honor order when registering MAC modules.Steve Kiernan
2023-03-30kdb: Modify securelevel policyMark Johnston
2023-01-31IfAPI: Add if_get/setmaclabel() and use it.Justin Hibbits
2022-12-19vfs: stop using NDFREEMateusz Guzik
2022-10-07Bump MAC_VERSION to 5Allan Jude
2022-09-17vfs: introduce V_PCATCH to stop abusing PCATCHMateusz Guzik
2022-08-17protosw: refactor protosw and domain static declaration and loadGleb Smirnoff
2022-08-17mac: cheaper check for mac_pipe_check_readMateusz Guzik
2022-08-11mac: s/0/false/ in macros denoting probe enablementMateusz Guzik
2022-07-18mac: kdb/ddb framework hooksMitchell Horne
2022-05-28sysent: Get rid of bogus sys/sysent.h include.Dmitry Chagin
2021-11-25vfs: remove the unused thread argument from NDINIT*Mateusz Guzik
2021-06-29mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmitMateusz Guzik
2021-04-12tcp_input/syncache: acquire only read lock on PCB for SYN,!ACK packetsGleb Smirnoff
2021-02-27Add a comment on why the call to mac_vnode_relabel() might be in the wrongRobert Watson
2021-01-12Convert remaining cap_rights_init users to cap_rights_init_oneMateusz Guzik
2021-01-08mac: cheaper check for mac_vnode_check_readlinkMateusz Guzik
2021-01-06cache: combine fast path enabled status into one flagMateusz Guzik
2020-11-19pipe: allow for lockless pipe_statMateusz Guzik
2020-09-03mac_framework.h: fix build with DEBUG_VFS_LOCKS and !MACAndriy Gapon
2020-09-01security: clean up empty lines in .c and .h filesMateusz Guzik
2020-08-06mac: even up all entry points to the same schemeMateusz Guzik
2020-08-05vfs: add a cheaper entry for mac_vnode_check_accessMateusz Guzik
2020-07-30Fix tinderbox build after r363714Mateusz Guzik
2020-07-29vfs: elide MAC-induced locking on rename if there are no relevant hoooksMateusz Guzik
2020-07-25vfs: add the infrastructure for lockless lookupMateusz Guzik
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-19 18:16:58 +0000