| Age | Commit message (Expand) | Author |
|---|
| 2025-12-04 | MAC: Rename mac_cred_create_swapper to mac_cred_create_kproc0 | John Baldwin |
| 2025-02-09 | MAC: mac_biba, mac_lomac: Fix setting loader tunables | Zhenlei Huang |
| 2024-12-16 | MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes | Olivier Certner |
| 2023-09-28 | cr_canseejailproc(): New privilege, no direct check for UID 0 | Olivier Certner |
| 2023-08-16 | sys: Remove $FreeBSD$: two-line .h pattern | Warner Losh |
| 2023-01-31 | IfAPI: Add if_get/setmaclabel() and use it. | Justin Hibbits |
| 2021-12-10 | Add PRIV_SCHED_IDPRIO | Florian Walpen |
| 2020-09-01 | security: clean up empty lines in .c and .h files | Mateusz Guzik |
| 2020-02-26 | Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many) | Pawel Biernacki |
| 2016-05-06 | sys/security: minor spelling fixes. | Pedro F. Giffuni |
| 2014-06-28 | Pull in r267961 and r267973 again. Fix for issues reported will follow. | Hans Petter Selasky |
| 2014-06-27 | Revert r267961, r267973: | Glen Barber |
| 2014-06-27 | Extend the meaning of the CTLFLAG_TUN flag to automatically check if | Hans Petter Selasky |
| 2014-03-14 | Remove AppleTalk support. | Gleb Smirnoff |
| 2014-03-14 | Remove IPX support. | Gleb Smirnoff |
| 2013-08-21 | Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd. | Konstantin Belousov |
| 2012-02-10 | Remove direct access to si_name. | Ed Schouten |
| 2011-11-07 | Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs. | Ed Schouten |
| 2011-09-02 | Correct several issues in the integration of POSIX shared memory objects | Robert Watson |
| 2010-03-02 | Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-style | Robert Watson |
| 2009-06-23 | Implement global and per-uid accounting of the anonymous memory. Add | Konstantin Belousov |
| 2009-06-20 | Chase the removal of PRIV_TTY_PRISON in the mac(9) modules. | Ed Schouten |
| 2009-06-03 | Continue work to optimize performance of "options MAC" when no MAC policy | Robert Watson |
| 2009-06-03 | By default, label all network interfaces as biba/equal on attach. This | Robert Watson |
| 2009-03-29 | Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhat | Edward Tomasz Napierala |
| 2009-03-08 | Remove 'uio' argument from MAC Framework and MAC policy entry points for | Robert Watson |
| 2009-01-10 | Rather than having MAC policies explicitly declare what object types | Robert Watson |
| 2009-01-10 | Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather than | Robert Watson |
| 2008-10-28 | Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary | Edward Tomasz Napierala |
| 2008-10-28 | Rename three MAC entry points from _proc_ to _cred_ to reflect the fact | Robert Watson |
| 2008-10-26 | Implement MAC policy support for IPv6 fragment reassembly queues, | Robert Watson |
| 2008-10-17 | Add a mac_inpcb_check_visible implementation to all MAC policies | Bjoern A. Zeeb |
| 2008-08-23 | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson |
| 2008-08-02 | Minor style tweaks. | Robert Watson |
| 2008-06-27 | Rework the lifetime management of the kernel implementation of POSIX | John Baldwin |
| 2008-06-23 | Remove the posixsem_check_destroy() MAC check. It is semantically identical | John Baldwin |
| 2008-06-13 | The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the | Robert Watson |
| 2007-10-29 | Resort TrustedBSD MAC Framework policy entry point implementations and | Robert Watson |
| 2007-10-28 | Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Framework | Robert Watson |
| 2007-10-28 | Continue to move from generic network entry points in the TrustedBSD MAC | Robert Watson |
| 2007-10-28 | Move towards more explicit support for various network protocol stacks | Robert Watson |
| 2007-10-26 | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | Robert Watson |
| 2007-10-25 | Normalize TCP syncache-related MAC Framework entry points to match most | Robert Watson |
| 2007-10-25 | Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and move | Robert Watson |
| 2007-10-25 | Consistently name functions for mac_<policy> as <policy>_whatever rather | Robert Watson |
| 2007-10-24 | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson |
| 2007-10-21 | Canonicalize naming of local variables for struct ksem and associated | Robert Watson |
| 2007-09-10 | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | Robert Watson |
| 2007-04-23 | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | Robert Watson |
| 2007-04-23 | Apply variable name normalization to MAC policies: adopt global conventions | Robert Watson |
