| Age | Commit message (Expand) | Author |
|---|
| 2023-08-16 | sys: Remove $FreeBSD$: one-line .c pattern | Warner Losh |
| 2023-01-31 | IfAPI: Add if_get/setmaclabel() and use it. | Justin Hibbits |
| 2021-06-29 | mac: cheaper check for ifnet_create_mbuf and ifnet_check_transmit | Mateusz Guzik |
| 2019-05-03 | When MAC is enabled and a policy module is loaded, don't unconditionally | Robert Watson |
| 2018-12-11 | Remove unused argument to priv_check_cred. | Mateusz Guzik |
| 2018-03-30 | Use an accessor function to access ifr_data. | Brooks Davis |
| 2013-11-25 | - For kernel compiled only with KDTRACE_HOOKS and not any lock debugging | Attilio Rao |
| 2012-04-06 | - Improve BPF locking model. | Alexander V. Chernikov |
| 2009-06-03 | Add one further check with mac_policy_count to an mbuf copying case | Robert Watson |
| 2009-06-03 | Continue work to optimize performance of "options MAC" when no MAC policy | Robert Watson |
| 2009-05-01 | Rename MAC Framework-internal macros used to invoke policy entry points: | Robert Watson |
| 2009-03-14 | Rework MAC Framework synchronization in a number of ways in order to | Robert Watson |
| 2009-03-08 | Add static DTrace probes for MAC Framework access control checks and | Robert Watson |
| 2008-08-23 | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson |
| 2007-10-28 | Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Framework | Robert Watson |
| 2007-10-28 | Continue to move from generic network entry points in the TrustedBSD MAC | Robert Watson |
| 2007-10-28 | Move towards more explicit support for various network protocol stacks | Robert Watson |
| 2007-10-26 | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | Robert Watson |
| 2007-10-24 | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson |
| 2007-04-22 | Normalize variable naming in the MAC Framework by adopting the normal | Robert Watson |
| 2006-12-28 | Remove an inaccurate comment I added regarding storage for mbuf tag | Robert Watson |
| 2006-12-22 | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | Robert Watson |
| 2006-12-21 | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | Robert Watson |
| 2006-12-20 | Document that we could allocate the mbuf label as part of the tag rather | Robert Watson |
| 2006-12-20 | Externalize local stack copy of the ifnet label, rather than the copy on | Robert Watson |
| 2006-11-06 | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | Robert Watson |
| 2006-10-22 | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | Robert Watson |
| 2006-09-20 | Remove MAC_DEBUG label counters, which were used to debug leaks and | Robert Watson |
| 2005-07-05 | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | Robert Watson |
| 2004-06-24 | Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on | Robert Watson |
| 2004-05-03 | If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tag | Robert Watson |
| 2004-02-29 | Define BPFD_LOCK_ASSERT() to assert the BPF descriptor lock. | Robert Watson |
| 2004-02-26 | Move inet and inet6 related MAC Framework entry points from mac_net.c | Robert Watson |
| 2004-02-22 | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson |
| 2003-12-17 | Switch TCP over to using the inpcb label when responding in timed | Robert Watson |
| 2003-11-18 | Introduce a MAC label reference in 'struct inpcb', which caches | Robert Watson |
| 2003-11-16 | Implement sockets support for __mac_get_fd() and __mac_set_fd() | Robert Watson |
| 2003-11-16 | Abstract the label checking and setting logic from | Robert Watson |
| 2003-11-16 | Reduce gratuitous redundancy and length in function names: | Robert Watson |
| 2003-11-16 | Whitespace fix. | Robert Watson |
| 2003-11-12 | Modify the MAC Framework so that instead of embedding a (struct label) | Robert Watson |
| 2003-11-07 | When allocation of a socket peer label fails, scrub what was | Robert Watson |
| 2003-11-06 | Remove the flags argument from mac_externalize_*_label(), as it's not | Robert Watson |
| 2003-10-25 | Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the object | Robert Watson |
| 2003-10-22 | Remove non-network related contents from mac_net.c. Leave: | Robert Watson |
| 2003-09-29 | If the struct mac copied into the kernel has a negative length, return | Robert Watson |
| 2003-08-26 | Fix a mac_policy_list reference to be a mac_static_policy_list | Robert Watson |
| 2003-08-21 | Introduce two new MAC Framework and MAC policy entry points: | Robert Watson |
| 2003-08-21 | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | Robert Watson |
| 2003-08-20 | Remove about 40 lines of #ifdef/#endif by using new macros | Robert Watson |
