summaryrefslogtreecommitdiff
path: root/sys/security/mac_stub
AgeCommit message (Expand)Author
4 daysmac_set_fd(3): add support for jail descriptorsKyle Evans
4 dayskern: mac: add various jail MAC hooksKyle Evans
2025-12-04MAC: Rename mac_cred_create_swapper to mac_cred_create_kproc0John Baldwin
2024-12-16New setcred() system call and associated MAC hooksOlivier Certner
2024-12-16MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodesOlivier Certner
2023-08-16sys: Remove $FreeBSD$: two-line .h patternWarner Losh
2022-07-18mac: kdb/ddb framework hooksMitchell Horne
2020-09-01security: clean up empty lines in .c and .h filesMateusz Guzik
2020-02-26Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki
2014-03-14Remove AppleTalk support.Gleb Smirnoff
2013-08-21Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.Konstantin Belousov
2011-11-07Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten
2011-09-02Correct several issues in the integration of POSIX shared memory objectsRobert Watson
2011-08-16Add the fo_chown and fo_chmod methods to struct fileops and use themKonstantin Belousov
2009-06-03Continue work to optimize performance of "options MAC" when no MAC policyRobert Watson
2009-03-08Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson
2009-03-08Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson
2009-01-10Rather than having MAC policies explicitly declare what object typesRobert Watson
2009-01-10Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather thanRobert Watson
2008-10-28Commit part of accmode_t changes that I missed in previous commit.Edward Tomasz Napierala
2008-10-28Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala
2008-10-28Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson
2008-10-28Improve alphabetical sort order of stub entry points.Robert Watson
2008-10-26Implement MAC policy support for IPv6 fragment reassembly queues,Robert Watson
2008-10-17Add a mac_inpcb_check_visible implementation to all MAC policiesBjoern A. Zeeb
2008-08-23Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson
2008-06-27Rework the lifetime management of the kernel implementation of POSIXJohn Baldwin
2008-06-23Remove the posixsem_check_destroy() MAC check. It is semantically identicalJohn Baldwin
2008-06-13The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson
2008-01-08Add a new file descriptor type for IPC shared memory objects and use it toJohn Baldwin
2007-10-29Resort TrustedBSD MAC Framework policy entry point implementations andRobert Watson
2007-10-28Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson
2007-10-28Continue to move from generic network entry points in the TrustedBSD MACRobert Watson
2007-10-28Move towards more explicit support for various network protocol stacksRobert Watson
2007-10-26Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson
2007-10-25Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson
2007-10-25Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moveRobert Watson
2007-10-25Consistently name functions for mac_<policy> as <policy>_whatever ratherRobert Watson
2007-10-25Further MAC Framework cleanup: normalize some local variable names andRobert Watson
2007-10-24Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson
2007-10-21Canonicalize naming of local variables for struct ksem and associatedRobert Watson
2007-09-10Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson
2007-06-26Add a new MAC framework and policy entry point,Robert Watson
2007-04-23Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson
2007-04-23Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson
2007-04-22In the MAC Framework implementation, file systems have two per-mountpointRobert Watson
2007-04-22Remove MAC Framework access control check entry points made redundant withRobert Watson
2007-04-21Allow MAC policy modules to control access to audit configuration systemRobert Watson
2007-02-06Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson
2007-01-01Teach the stub policy about some of the more recent entry points that haveChristian S.J. Peron