| Age | Commit message (Expand) | Author |
| 2025-08-03 | mac: Remove uses of DEBUG_VFS_LOCKS | Mark Johnston |
| 2023-08-16 | sys: Remove $FreeBSD$: one-line .c pattern | Warner Losh |
| 2021-02-27 | Add a comment on why the call to mac_vnode_relabel() might be in the wrong | Robert Watson |
| 2021-01-08 | mac: cheaper check for mac_vnode_check_readlink | Mateusz Guzik |
| 2020-08-05 | vfs: add a cheaper entry for mac_vnode_check_access | Mateusz Guzik |
| 2020-02-13 | vfs: use mac fastpath for lookup, open, read, write, mmap | Mateusz Guzik |
| 2013-11-25 | - For kernel compiled only with KDTRACE_HOOKS and not any lock debugging | Attilio Rao |
| 2013-10-01 | Fix some typos that were causing probe argument types to show up as unknown. | Mark Johnston |
| 2010-10-23 | Add missing DTrace probe invocation to mac_vnode_check_open; the probe | Robert Watson |
| 2009-05-01 | Rename MAC Framework-internal macros used to invoke policy entry points: | Robert Watson |
| 2009-03-14 | Rework MAC Framework synchronization in a number of ways in order to | Robert Watson |
| 2009-03-08 | Remove 'uio' argument from MAC Framework and MAC policy entry points for | Robert Watson |
| 2009-03-08 | Add static DTrace probes for MAC Framework access control checks and | Robert Watson |
| 2008-10-28 | Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary | Edward Tomasz Napierala |
| 2008-08-23 | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson |
| 2007-10-25 | Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and move | Robert Watson |
| 2007-10-25 | Further MAC Framework cleanup: normalize some local variable names and | Robert Watson |
| 2007-10-24 | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson |
| 2007-09-10 | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | Robert Watson |
| 2007-04-23 | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | Robert Watson |
| 2007-04-22 | In the MAC Framework implementation, file systems have two per-mountpoint | Robert Watson |
| 2007-02-06 | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | Robert Watson |
| 2006-12-28 | Remove XXX comments about EA transaction support and provide a more | Robert Watson |
| 2006-12-22 | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | Robert Watson |
| 2006-12-21 | Remove mac_enforce_subsystem debugging sysctls. Enforcement on | Robert Watson |
| 2006-12-20 | Trim trailing white space, clean up comment line wrapping and formatting. | Robert Watson |
| 2006-10-22 | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | Robert Watson |
| 2006-09-20 | Remove MAC_DEBUG label counters, which were used to debug leaks and | Robert Watson |
| 2006-07-17 | Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists in | Poul-Henning Kamp |
| 2006-04-06 | Introduce a new MAC entry point for label initialization of the NFS daemon's | Christian S.J. Peron |
| 2005-09-19 | Remove mac_create_root_mount() and mpo_create_root_mount(), which | Robert Watson |
| 2005-07-14 | When devfs cloning takes place, provide access to the credential of the | Robert Watson |
| 2005-04-14 | Move MAC check_vnode_mmap entry point out from being exclusive to | Christian S.J. Peron |
| 2005-01-30 | Update copyright for NETA->McAfee. | Robert Watson |
| 2004-06-16 | Do the dreaded s/dev_t/struct cdev */ | Poul-Henning Kamp |
| 2004-02-22 | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson |
| 2003-11-12 | Modify the MAC Framework so that instead of embedding a (struct label) | Robert Watson |
| 2003-11-06 | Remove the flags argument from mac_externalize_*_label(), as it's not | Robert Watson |
| 2003-10-25 | Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the object | Robert Watson |
| 2003-10-22 | Remove non-VFS related code from mac_vfs.c. Leave: | Robert Watson |
| 2003-09-29 | If the struct mac copied into the kernel has a negative length, return | Robert Watson |
| 2003-08-26 | Fix a mac_policy_list reference to be a mac_static_policy_list | Robert Watson |
| 2003-08-21 | Introduce two new MAC Framework and MAC policy entry points: | Robert Watson |
| 2003-08-21 | Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr(): | Robert Watson |
| 2003-08-20 | Remove about 40 lines of #ifdef/#endif by using new macros | Robert Watson |
| 2003-08-01 | Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF. | Robert Watson |
| 2003-06-23 | Redesign the externalization APIs from the MAC Framework to | Robert Watson |
| 2003-06-22 | Add a f_vnode field to struct file. | Poul-Henning Kamp |
| 2003-06-11 | Use __FBSDID(). | David E. O'Brien |
| 2003-05-08 | Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables and | Robert Watson |