| Age | Commit message (Expand) | Author |
| 2023-08-16 | sys: Remove $FreeBSD$: two-line .h pattern | Warner Losh |
| 2009-01-10 | Rather than having MAC policies explicitly declare what object types | Robert Watson |
| 2008-08-23 | Introduce two related changes to the TrustedBSD MAC Framework: | Robert Watson |
| 2007-10-25 | Consistently name functions for mac_<policy> as <policy>_whatever rather | Robert Watson |
| 2007-02-23 | Remove many unneeded includes, update copyright. | Robert Watson |
| 2007-02-23 | mac_none sample policy has nothing to enforce, so remove sysctls. | Robert Watson |
| 2007-02-06 | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | Robert Watson |
| 2006-12-22 | Move src/sys/sys/mac_policy.h, the kernel interface between the MAC | Robert Watson |
| 2005-09-19 | Add #include <sys/sx.h>, devfs is going to require this shortly. | Poul-Henning Kamp |
| 2004-02-22 | Update my personal copyrights and NETA copyrights in the kernel | Robert Watson |
| 2003-08-21 | mac_none is now the null policy, not a stub policy, so remove the | Robert Watson |
| 2003-06-23 | Redesign the externalization APIs from the MAC Framework to | Robert Watson |
| 2003-03-27 | Trim "trustedbsd_" from the front of the policy module "short names"; | Robert Watson |
| 2003-03-26 | Modify the mac_init_ipq() MAC Framework entry point to accept an | Robert Watson |
| 2003-03-25 | Update MAC "none" stub policy to include stubs for the following | Robert Watson |
| 2002-12-10 | Default policies to on: if you load them or compile them into your | Robert Watson |
| 2002-12-09 | Remove dm_root entry from struct devfs_mount. It's never set, and is | Robert Watson |
| 2002-11-12 | Garbage collect mac_create_devfs_vnode() -- it hasn't been used since | Robert Watson |
| 2002-11-08 | Update MAC modules for changes in arguments for exec MAC policy | Robert Watson |
| 2002-11-05 | Update policy modules for changes in arguments associated with support | Robert Watson |
| 2002-11-04 | License and wording updates: NAI has authorized the removal of clause | Robert Watson |
| 2002-10-30 | Move to C99 sparse structure initialization for the mac_policy_ops | Robert Watson |
| 2002-10-30 | Various minor type, prototype tweaks -- clean up cruft due to lack of | Robert Watson |
| 2002-10-30 | While 'mode_t' seemed like a good idea for the access mode argument for | Robert Watson |
| 2002-10-29 | Hook up no-op stubs for reboot, swapon, sysctl entry points. | Robert Watson |
| 2002-10-26 | Slightly change the semantics of vnode labels for MAC: rather than | Robert Watson |
| 2002-10-22 | Adapt MAC policies for the new user API changes; teach policies how | Robert Watson |
| 2002-10-21 | mac_none is a stub policy without any functional implementation. | Robert Watson |
| 2002-10-06 | Sync from MAC tree: break out the single mmap entry point into | Robert Watson |
| 2002-10-05 | Modify label allocation semantics for sockets: pass in soalloc's malloc | Robert Watson |
| 2002-10-05 | Implement mac_create_devfs_symlink() for policies that interact with | Robert Watson |
| 2002-10-05 | Merge implementation of mpo_check_vnode_link() for various appropriate | Robert Watson |
| 2002-10-05 | Begin another merge from the TrustedBSD MAC branch: | Robert Watson |
| 2002-08-20 | Prefer NULL to 0 when passing a NULL pointer. | Robert Watson |
| 2002-08-20 | Provide stub mpo_syscall() implementations for mac_none and mac_test. | Robert Watson |
| 2002-08-19 | Pass active_cred and file_cred into the MAC framework explicitly | Robert Watson |
| 2002-08-19 | Break out mac_check_pipe_op() into component check entry points: | Robert Watson |
| 2002-08-19 | Break out mac_check_vnode_op() into three seperate checks: | Robert Watson |
| 2002-08-15 | Rename mac_check_socket_receive() to mac_check_socket_deliver() so that | Robert Watson |
| 2002-07-31 | Introduce support for Mandatory Access Control and extensible | Robert Watson |