summaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_syscalls.c
AgeCommit message (Expand)Author
4 dayskern: add a mac.label jail parameterKyle Evans
4 dayskern: mac: pull mac_label_copyin_string outKyle Evans
4 daysmac_set_fd(3): add support for jail descriptorsKyle Evans
2025-11-24MAC: Use the current thread's user ABI to determine the layout of struct macJohn Baldwin
2024-12-16MAC: syscalls: mac_label_copyin(): 32-bit compatibilityOlivier Certner
2024-12-16MAC: syscalls: Split mac_set_proc() into reusable piecesOlivier Certner
2024-12-16MAC: syscalls: Factor out common label copy-in codeOlivier Certner
2023-08-16sys: Remove $FreeBSD$: one-line .c patternWarner Losh
2022-12-19vfs: stop using NDFREEMateusz Guzik
2022-09-17vfs: introduce V_PCATCH to stop abusing PCATCHMateusz Guzik
2022-05-28sysent: Get rid of bogus sys/sysent.h include.Dmitry Chagin
2021-11-25vfs: remove the unused thread argument from NDINIT*Mateusz Guzik
2021-01-12Convert remaining cap_rights_init users to cap_rights_init_oneMateusz Guzik
2020-01-03vfs: drop the mostly unused flags argument from VOP_UNLOCKMateusz Guzik
2018-02-15Reduce duplication in __mac_*_(file|link)(2) implementation.Brooks Davis
2017-12-25Do pass removing some write-only variables from the kernel.Alexander Kabaev
2015-03-16cred: add proc_set_cred helperMateusz Guzik
2014-03-16Update kernel inclusions of capability.h to use capsicum.h instead; someRobert Watson
2013-09-05Change the cap_rights_t type from uint64_t to a structure that we can extendPawel Jakub Dawidek
2012-10-22Remove the support for using non-mpsafe filesystem modules.Konstantin Belousov
2012-04-08When allocation of labels on files is implicitly disabled due to MACRobert Watson
2011-09-16In order to maximize the re-usability of kernel code in user space thisKip Macy
2011-08-11Second-to-last commit implementing Capsicum capabilities in the FreeBSDRobert Watson
2011-03-04- Add a FEATURE for capsicum (security_capabilities).Alexander Leidinger
2011-02-25Add some FEATURE macros for various features (AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/Alexander Leidinger
2009-03-14Rework MAC Framework synchronization in a number of ways in order toRobert Watson
2008-10-28Rename mac_cred_mmapped_drop_perms(), which revokes access to virtualRobert Watson
2008-08-23Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson
2008-03-31Add the support for the AT_FDCWD and fd-relative name lookups to theKonstantin Belousov
2008-01-13VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used inAttilio Rao
2008-01-10vn_lock() is currently only used with the 'curthread' passed as argument.Attilio Rao
2007-10-24Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson
2007-08-06Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, whichRobert Watson
2007-03-04Remove 'MPSAFE' annotations from the comments above most system calls: allRobert Watson
2006-12-28Trim unneeded includes.Robert Watson
2006-12-28Break contents of kern_mac.c out into two files following a repo-copy:Robert Watson
2006-12-28Update MAC Framework general comments, referencing various interfaces itRobert Watson
2006-12-22Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson
2006-12-21Remove mac_enforce_subsystem debugging sysctls. Enforcement onRobert Watson
2006-12-20Expand commenting on label slots, justification for the MAC Framework lockingRobert Watson
2006-10-22Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson
2006-09-20Remove MAC_DEBUG label counters, which were used to debug leaks andRobert Watson
2006-07-17Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists inPoul-Henning Kamp
2006-03-19Don't call vn_finished_write() if vn_start_write() failed.Tor Egge
2005-10-04Standard Giant push down operations for the Mandatory Access Control (MAC)Christian S.J. Peron
2005-07-14Bump the module versions of the MAC Framework and MAC policy modulesRobert Watson
2005-04-22Get the directory structure correct in a comment.Tom Rhodes
2005-04-16In mac_get_fd(), remove unconditional acquisition of Giant around copyingRobert Watson
2004-11-09Bump MAC Framework version to 2 in preparation for the upcoming API/ABIRobert Watson
2004-10-30Disable use of synchronization early in the boot by the MAC Framework;Robert Watson
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-19 17:15:51 +0000