| Age | Commit message (Expand) | Author |
|---|
| 2024-09-26 | MAC: improve consistency in error handling | Michael Tuexen |
| 2023-08-16 | sys: Remove $FreeBSD$: one-line .c pattern | Warner Losh |
| 2023-07-26 | mac_ipacl: new MAC policy module to limit jail/vnet IP configuration | Shivank Garg |
| 2023-01-31 | IfAPI: Add if_get/setmaclabel() and use it. | Justin Hibbits |
| 2021-04-12 | tcp_input/syncache: acquire only read lock on PCB for SYN,!ACK packets | Gleb Smirnoff |
| 2019-05-03 | When MAC is enabled and a policy module is loaded, don't unconditionally | Robert Watson |
| 2016-11-08 | Fix improper use of "its". | Bryan Drewery |
| 2013-11-25 | - For kernel compiled only with KDTRACE_HOOKS and not any lock debugging | Attilio Rao |
| 2009-06-03 | Continue work to optimize performance of "options MAC" when no MAC policy | Robert Watson |
| 2009-05-01 | Rename MAC Framework-internal macros used to invoke policy entry points: | Robert Watson |
| 2009-03-14 | Rework MAC Framework synchronization in a number of ways in order to | Robert Watson |
| 2009-03-08 | Add static DTrace probes for MAC Framework access control checks and | Robert Watson |
| 2008-10-17 | Add mac_inpcb_check_visible MAC Framework entry point, which is similar | Bjoern A. Zeeb |
| 2008-08-23 | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson |
| 2008-06-13 | The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the | Robert Watson |
| 2008-05-27 | Plug a memory leak which can occur when multiple MAC policies are loaded | Christian S.J. Peron |
| 2008-04-19 | When propagating a MAC label from an inpcb to an mbuf, allow read and | Robert Watson |
| 2008-04-17 | Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros to | Robert Watson |
| 2007-10-28 | Continue to move from generic network entry points in the TrustedBSD MAC | Robert Watson |
| 2007-10-28 | Move towards more explicit support for various network protocol stacks | Robert Watson |
| 2007-10-26 | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | Robert Watson |
| 2007-10-25 | Normalize TCP syncache-related MAC Framework entry points to match most | Robert Watson |
| 2007-10-24 | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson |
| 2007-04-22 | Normalize variable naming in the MAC Framework by adopting the normal | Robert Watson |
| 2007-02-06 | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | Robert Watson |
| 2006-12-28 | In mac_inpcb_sosetlabel(), assert the socket lock rather than commenting | Robert Watson |
| 2006-12-22 | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | Robert Watson |
| 2006-12-21 | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | Robert Watson |
| 2006-12-20 | Re-wrap comment at 77 character columns. | Robert Watson |
| 2006-12-13 | Fix LOR between the syncache and inpcb locks when MAC is present in the | Christian S.J. Peron |
| 2006-10-22 | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | Robert Watson |
| 2006-09-20 | Remove MAC_DEBUG label counters, which were used to debug leaks and | Robert Watson |
| 2006-09-12 | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | Christian S.J. Peron |
| 2004-02-26 | Move inet and inet6 related MAC Framework entry points from mac_net.c | Robert Watson |
