summaryrefslogtreecommitdiff
path: root/sys/security/mac/mac_vfs.c
AgeCommit message (Expand)Author
2025-08-03mac: Remove uses of DEBUG_VFS_LOCKSMark Johnston
2023-08-16sys: Remove $FreeBSD$: one-line .c patternWarner Losh
2021-02-27Add a comment on why the call to mac_vnode_relabel() might be in the wrongRobert Watson
2021-01-08mac: cheaper check for mac_vnode_check_readlinkMateusz Guzik
2020-08-05vfs: add a cheaper entry for mac_vnode_check_accessMateusz Guzik
2020-02-13vfs: use mac fastpath for lookup, open, read, write, mmapMateusz Guzik
2013-11-25- For kernel compiled only with KDTRACE_HOOKS and not any lock debuggingAttilio Rao
2013-10-01Fix some typos that were causing probe argument types to show up as unknown.Mark Johnston
2010-10-23Add missing DTrace probe invocation to mac_vnode_check_open; the probeRobert Watson
2009-05-01Rename MAC Framework-internal macros used to invoke policy entry points:Robert Watson
2009-03-14Rework MAC Framework synchronization in a number of ways in order toRobert Watson
2009-03-08Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson
2009-03-08Add static DTrace probes for MAC Framework access control checks andRobert Watson
2008-10-28Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala
2008-08-23Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson
2007-10-25Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moveRobert Watson
2007-10-25Further MAC Framework cleanup: normalize some local variable names andRobert Watson
2007-10-24Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson
2007-09-10Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson
2007-04-23Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson
2007-04-22In the MAC Framework implementation, file systems have two per-mountpointRobert Watson
2007-02-06Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson
2006-12-28Remove XXX comments about EA transaction support and provide a moreRobert Watson
2006-12-22Move src/sys/sys/mac_policy.h, the kernel interface between the MACRobert Watson
2006-12-21Remove mac_enforce_subsystem debugging sysctls. Enforcement onRobert Watson
2006-12-20Trim trailing white space, clean up comment line wrapping and formatting.Robert Watson
2006-10-22Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson
2006-09-20Remove MAC_DEBUG label counters, which were used to debug leaks andRobert Watson
2006-07-17Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists inPoul-Henning Kamp
2006-04-06Introduce a new MAC entry point for label initialization of the NFS daemon'sChristian S.J. Peron
2005-09-19Remove mac_create_root_mount() and mpo_create_root_mount(), whichRobert Watson
2005-07-14When devfs cloning takes place, provide access to the credential of theRobert Watson
2005-04-14Move MAC check_vnode_mmap entry point out from being exclusive toChristian S.J. Peron
2005-01-30Update copyright for NETA->McAfee.Robert Watson
2004-06-16Do the dreaded s/dev_t/struct cdev */Poul-Henning Kamp
2004-02-22Update my personal copyrights and NETA copyrights in the kernelRobert Watson
2003-11-12Modify the MAC Framework so that instead of embedding a (struct label)Robert Watson
2003-11-06Remove the flags argument from mac_externalize_*_label(), as it's notRobert Watson
2003-10-25Make MAC_EXTERNALIZE() and MAC_INTERNALIZE() simply take the objectRobert Watson
2003-10-22Remove non-VFS related code from mac_vfs.c. Leave:Robert Watson
2003-09-29If the struct mac copied into the kernel has a negative length, returnRobert Watson
2003-08-26Fix a mac_policy_list reference to be a mac_static_policy_listRobert Watson
2003-08-21Introduce two new MAC Framework and MAC policy entry points:Robert Watson
2003-08-21Add mac_check_vnode_deleteextattr() and mac_check_vnode_listextattr():Robert Watson
2003-08-20Remove about 40 lines of #ifdef/#endif by using new macrosRobert Watson
2003-08-01Attempt to simplify #ifdef logic for MAC_ALWAYS_LABEL_MBUF.Robert Watson
2003-06-23Redesign the externalization APIs from the MAC Framework toRobert Watson
2003-06-22Add a f_vnode field to struct file.Poul-Henning Kamp
2003-06-11Use __FBSDID().David E. O'Brien
2003-05-08Rename MAC_MAX_POLICIES to MAC_MAX_SLOTS, since the variables andRobert Watson