summaryrefslogtreecommitdiff
path: root/sys/security/mac_lomac
AgeCommit message (Expand)Author
2025-12-04MAC: Rename mac_cred_create_swapper to mac_cred_create_kproc0John Baldwin
2025-02-09MAC: mac_biba, mac_lomac: Fix setting loader tunablesZhenlei Huang
2024-12-16MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodesOlivier Certner
2023-09-28cr_canseejailproc(): New privilege, no direct check for UID 0Olivier Certner
2023-08-16sys: Remove $FreeBSD$: two-line .h patternWarner Losh
2023-01-31IfAPI: Add if_get/setmaclabel() and use it.Justin Hibbits
2022-11-15mac_lomac: whack giant usageMateusz Guzik
2022-08-02AST: reworkKonstantin Belousov
2021-12-10Add PRIV_SCHED_IDPRIOFlorian Walpen
2020-09-01security: clean up empty lines in .c and .h filesMateusz Guzik
2020-02-26Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki
2018-12-11Remove unused argument to priv_check_cred.Mateusz Guzik
2016-05-06sys/security: minor spelling fixes.Pedro F. Giffuni
2015-03-16cred: add proc_set_cred helperMateusz Guzik
2014-12-17Adjust printf format specifiers for dev_t and ino_t in kernel.Gleb Kurtsou
2014-06-28Pull in r267961 and r267973 again. Fix for issues reported will follow.Hans Petter Selasky
2014-06-27Revert r267961, r267973:Glen Barber
2014-06-27Extend the meaning of the CTLFLAG_TUN flag to automatically check ifHans Petter Selasky
2014-03-14Remove AppleTalk support.Gleb Smirnoff
2014-03-14Remove IPX support.Gleb Smirnoff
2012-02-10Remove direct access to si_name.Ed Schouten
2012-01-02Use strchr() and strrchr().Ed Schouten
2011-11-07Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten
2011-11-07Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.Ed Schouten
2010-03-02Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-styleRobert Watson
2010-01-03Make mac_lomac(4) able to interpret NFSv4 access bits.Edward Tomasz Napierala
2009-06-23Implement global and per-uid accounting of the anonymous memory. AddKonstantin Belousov
2009-06-20Chase the removal of PRIV_TTY_PRISON in the mac(9) modules.Ed Schouten
2009-06-03Continue work to optimize performance of "options MAC" when no MAC policyRobert Watson
2009-03-08Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson
2009-01-10Rather than having MAC policies explicitly declare what object typesRobert Watson
2009-01-10Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather thanRobert Watson
2008-10-28Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala
2008-10-28Rename mac_cred_mmapped_drop_perms(), which revokes access to virtualRobert Watson
2008-10-28Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson
2008-10-26Implement MAC policy support for IPv6 fragment reassembly queues,Robert Watson
2008-10-23Retire the MALLOC and FREE macros. They are an abomination unto style(9).Dag-Erling Smørgrav
2008-10-17Add a mac_inpcb_check_visible implementation to all MAC policiesBjoern A. Zeeb
2008-08-28Decontextualize the couplet VOP_GETATTR / VOP_SETATTR as the passed threadAttilio Rao
2008-08-23Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson
2008-08-02Minor style tweaks.Robert Watson
2008-06-13The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson
2007-10-29Resort TrustedBSD MAC Framework policy entry point implementations andRobert Watson
2007-10-28Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson
2007-10-28Continue to move from generic network entry points in the TrustedBSD MACRobert Watson
2007-10-28Move towards more explicit support for various network protocol stacksRobert Watson
2007-10-26Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson
2007-10-25Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson
2007-10-25Consistently name functions for mac_<policy> as <policy>_whatever ratherRobert Watson
2007-10-25Further MAC Framework cleanup: normalize some local variable names andRobert Watson