| Age | Commit message (Expand) | Author |
|---|
| 4 days | kern: mac: add a MAC label to struct prison | Kyle Evans |
| 2025-10-13 | MAC: Use proper prototype for SYSINIT functions | Zhenlei Huang |
| 2024-12-16 | MAC: Define a common 'mac' node for MAC's jail parameters | Olivier Certner |
| 2024-12-16 | MAC: 'kernel_mac_support' module: Make an outdated comment more generic | Olivier Certner |
| 2023-11-26 | sys: Automated cleanup of cdefs and other formatting | Warner Losh |
| 2023-11-13 | Remove gratuitous copyouts of unchanged struct mac. | Brooks Davis |
| 2023-08-16 | sys: Remove $FreeBSD$: one-line .c pattern | Warner Losh |
| 2023-04-18 | mac: Honor order when registering MAC modules. | Steve Kiernan |
| 2022-08-17 | mac: cheaper check for mac_pipe_check_read | Mateusz Guzik |
| 2021-06-29 | mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmit | Mateusz Guzik |
| 2021-01-08 | mac: cheaper check for mac_vnode_check_readlink | Mateusz Guzik |
| 2021-01-06 | cache: combine fast path enabled status into one flag | Mateusz Guzik |
| 2020-11-19 | pipe: allow for lockless pipe_stat | Mateusz Guzik |
| 2020-08-05 | vfs: add a cheaper entry for mac_vnode_check_access | Mateusz Guzik |
| 2020-07-29 | vfs: elide MAC-induced locking on rename if there are no relevant hoooks | Mateusz Guzik |
| 2020-07-16 | vfs: fix vn_poll performance with either MAC or AUDIT | Mateusz Guzik |
| 2020-04-04 | mac_policy: Remove mac_policy_sx | Jason A. Harmening |
| 2020-02-26 | Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many) | Pawel Biernacki |
| 2020-02-13 | vfs: use mac fastpath for lookup, open, read, write, mmap | Mateusz Guzik |
| 2020-02-13 | mac: implement fast path for checks | Mateusz Guzik |
| 2019-12-27 | mac: use a sleepable rmlock instead of an sx lock | Mateusz Guzik |
| 2018-08-01 | Require that MAC label buffers be able to store a non-empty string. | Mark Johnston |
| 2016-05-06 | sys/security: minor spelling fixes. | Pedro F. Giffuni |
| 2015-12-16 | Fix style issues around existing SDT probes. | Mark Johnston |
| 2013-12-25 | As constantly reported during kernel compilation, m_buflen is unsigned so | Bjoern A. Zeeb |
| 2013-11-26 | dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE | Andriy Gapon |
| 2013-11-25 | - For kernel compiled only with KDTRACE_HOOKS and not any lock debugging | Attilio Rao |
| 2013-10-01 | Fix some typos that were causing probe argument types to show up as unknown. | Mark Johnston |
| 2013-09-29 | Make the mac_policy_rm lock recursable, which allows reentrance into | Konstantin Belousov |
| 2011-12-12 | put sys/systm.h at its proper place or add it if missing | Andriy Gapon |
| 2011-01-12 | sysctl(9) cleanup checkpoint: amd64 GENERIC builds cleanly. | Matthew D Fleming |
| 2010-08-22 | Add an extra comment to the SDT probes definition. This allows us to get | Rui Paulo |
| 2009-06-02 | Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings that | Robert Watson |
| 2009-06-02 | Add internal 'mac_policy_count' counter to the MAC Framework, which is a | Robert Watson |
| 2009-05-29 | Make the rmlock(9) interface a bit more like the rwlock(9) interface: | Robert Watson |
| 2009-05-27 | Convert the MAC Framework from using rwlocks to rmlocks to stabilize | Robert Watson |
| 2009-03-14 | Rework MAC Framework synchronization in a number of ways in order to | Robert Watson |
| 2009-03-08 | Improve the consistency of MAC Framework and MAC policy entry point | Robert Watson |
| 2009-03-08 | Add static DTrace probes for MAC Framework access control checks and | Robert Watson |
| 2009-03-03 | Reduce the verbosity of SDT trace points for DTrace by defining several | Robert Watson |
| 2009-01-24 | Begin to add SDT tracing of the MAC Framework: add policy modevent, | Robert Watson |
| 2009-01-10 | Rather than having MAC policies explicitly declare what object types | Robert Watson |
| 2008-08-23 | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson |
| 2007-01-01 | Remove conditional return of 1. For the MAC_STATIC case at this point in | Christian S.J. Peron |
| 2006-12-31 | Only signal the CV indicating that the MAC Framework is available for | Robert Watson |
| 2006-12-29 | Slightly resort functions in file so that no forward function prototypes | Robert Watson |
| 2006-12-29 | Re-add include of opt_mac.h in mac_framework.c, which was improperly | Robert Watson |
| 2006-12-28 | Centralize definition of MAC_VERSION in mac_policy.h, as it defines the | Robert Watson |
| 2006-12-28 | Move mac_init_label() and mac_destroy_label() from mac_framework.c to | Robert Watson |
| 2006-12-28 | Trim unneeded includes. | Robert Watson |
