summaryrefslogtreecommitdiff
path: root/sys/security/mac_mls
AgeCommit message (Expand)Author
2025-12-04MAC: Rename mac_cred_create_swapper to mac_cred_create_kproc0John Baldwin
2024-12-16MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodesOlivier Certner
2023-08-16sys: Remove $FreeBSD$: two-line .h patternWarner Losh
2023-01-31IfAPI: Add if_get/setmaclabel() and use it.Justin Hibbits
2020-09-01security: clean up empty lines in .c and .h filesMateusz Guzik
2020-02-26Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki
2016-05-06sys/security: minor spelling fixes.Pedro F. Giffuni
2014-06-28Pull in r267961 and r267973 again. Fix for issues reported will follow.Hans Petter Selasky
2014-06-27Revert r267961, r267973:Glen Barber
2014-06-27Extend the meaning of the CTLFLAG_TUN flag to automatically check ifHans Petter Selasky
2014-03-14Remove AppleTalk support.Gleb Smirnoff
2013-08-21Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.Konstantin Belousov
2012-05-03Check vplabel for NULL before dereferencing it. Fixes a panicChristian Brueffer
2012-02-10Remove direct access to si_name.Ed Schouten
2011-11-07Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten
2011-10-08Remove two dublicated assignments.Christian Brueffer
2011-09-02Correct several issues in the integration of POSIX shared memory objectsRobert Watson
2010-03-02Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-styleRobert Watson
2009-06-03Continue work to optimize performance of "options MAC" when no MAC policyRobert Watson
2009-03-29Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhatEdward Tomasz Napierala
2009-03-08Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson
2009-01-10Rather than having MAC policies explicitly declare what object typesRobert Watson
2009-01-10Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather thanRobert Watson
2008-10-28Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala
2008-10-28Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson
2008-10-26Implement MAC policy support for IPv6 fragment reassembly queues,Robert Watson
2008-10-17Add a mac_inpcb_check_visible implementation to all MAC policiesBjoern A. Zeeb
2008-08-23Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson
2008-08-02Minor style tweaks.Robert Watson
2008-06-27Rework the lifetime management of the kernel implementation of POSIXJohn Baldwin
2008-06-23Remove the posixsem_check_destroy() MAC check. It is semantically identicalJohn Baldwin
2008-06-13The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson
2008-01-28Properly return the error from mls_subject_privileged() in the ifnetRobert Watson
2007-10-29Resort TrustedBSD MAC Framework policy entry point implementations andRobert Watson
2007-10-28Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson
2007-10-28Continue to move from generic network entry points in the TrustedBSD MACRobert Watson
2007-10-28Move towards more explicit support for various network protocol stacksRobert Watson
2007-10-26Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson
2007-10-25Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson
2007-10-25Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moveRobert Watson
2007-10-25Consistently name functions for mac_<policy> as <policy>_whatever ratherRobert Watson
2007-10-24Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson
2007-10-21Canonicalize naming of local variables for struct ksem and associatedRobert Watson
2007-09-10Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson
2007-07-23When checking labels during a vnode link operation in MLS, use the fileRobert Watson
2007-04-23Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson
2007-04-23Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson
2007-04-22In the MAC Framework implementation, file systems have two per-mountpointRobert Watson
2007-04-21Allow MAC policy modules to control access to audit configuration systemRobert Watson
2007-02-06Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson