summaryrefslogtreecommitdiff
path: root/sys/security/mac_test
AgeCommit message (Expand)Author
4 daysmac_set_fd(3): add support for jail descriptorsKyle Evans
4 dayskern: mac: add various jail MAC hooksKyle Evans
2025-12-04MAC: Rename mac_cred_create_swapper to mac_cred_create_kproc0John Baldwin
2024-12-16New setcred() system call and associated MAC hooksOlivier Certner
2024-12-16MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodesOlivier Certner
2023-08-16sys: Remove $FreeBSD$: two-line .h patternWarner Losh
2022-07-18mac: kdb/ddb framework hooksMitchell Horne
2020-02-26Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki
2014-03-14Remove AppleTalk support.Gleb Smirnoff
2013-08-21Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.Konstantin Belousov
2011-11-07Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten
2011-09-02Correct several issues in the integration of POSIX shared memory objectsRobert Watson
2011-08-16Add the fo_chown and fo_chmod methods to struct fileops and use themKonstantin Belousov
2009-06-03Continue work to optimize performance of "options MAC" when no MAC policyRobert Watson
2009-03-08Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson
2009-03-08Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson
2009-01-10Rather than having MAC policies explicitly declare what object typesRobert Watson
2009-01-10Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather thanRobert Watson
2008-10-28Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala
2008-10-28Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson
2008-10-26Implement MAC policy support for IPv6 fragment reassembly queues,Robert Watson
2008-10-17Add a mac_inpcb_check_visible implementation to all MAC policiesBjoern A. Zeeb
2008-08-23Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson
2008-06-27Rework the lifetime management of the kernel implementation of POSIXJohn Baldwin
2008-06-26Add missing counter increments for posix shm checks.John Baldwin
2008-06-23Remove the posixsem_check_destroy() MAC check. It is semantically identicalJohn Baldwin
2008-06-13The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is theRobert Watson
2008-01-08Add a new file descriptor type for IPC shared memory objects and use it toJohn Baldwin
2007-12-25Add a new 'why' argument to kdb_enter(), and a set of constants to useRobert Watson
2007-10-30Implement per-object type consistency checks for labels passed toRobert Watson
2007-10-29Canonicalize names of local variables.Robert Watson
2007-10-29Resort TrustedBSD MAC Framework policy entry point implementations andRobert Watson
2007-10-28Add missing mac_test labeling and sleep checks for the syncache.Robert Watson
2007-10-28Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson
2007-10-28Continue to move from generic network entry points in the TrustedBSD MACRobert Watson
2007-10-28Move towards more explicit support for various network protocol stacksRobert Watson
2007-10-28Perform explicit label type checks for externalize entry points, rather thanRobert Watson
2007-10-27Give each posixsem MAC Framework entry point its own counter and test caseRobert Watson
2007-10-26Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson
2007-10-25Consistently name functions for mac_<policy> as <policy>_whatever ratherRobert Watson
2007-10-25Further MAC Framework cleanup: normalize some local variable names andRobert Watson
2007-10-24Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson
2007-10-21Canonicalize naming of local variables for struct ksem and associatedRobert Watson
2007-09-10Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson
2007-06-26Add a new MAC framework and policy entry point,Robert Watson
2007-04-23Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson
2007-04-23Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson
2007-04-22In the MAC Framework implementation, file systems have two per-mountpointRobert Watson
2007-04-22Remove MAC Framework access control check entry points made redundant withRobert Watson
2007-04-22Further MAC test policy cleanup and enhancement:Robert Watson
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-19 14:57:20 +0000