summaryrefslogtreecommitdiff
path: root/sys/security/mac_veriexec
AgeCommit message (Expand)Author
2024-12-16MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodesOlivier Certner
2024-09-19procfs require PRIV_PROC_MEM_WRITE to write memSimon J. Gerraty
2023-11-03veriexec: Simplify the initialization of loader tunableZhenlei Huang
2023-07-06mac_veriexec ensure label fields are initializedSimon J. Gerraty
2023-06-09veriexec: Do not save error from file info in fingerprint statusStephen J. Kiernan
2023-04-17veriexec: Add function to get label associated with a fileSteve Kiernan
2023-04-17veriexec: Add option MAC_VERIEXEC_DEBUGSteve Kiernan
2023-04-17veriexec: mac_veriexec_syscall compat32 supportSimon J. Gerraty
2023-04-17veriexec: Additional functionality for MAC/veriexecSteve Kiernan
2023-04-16veriexec: Add SPDX-License-IdentifierStephen J. Kiernan
2023-04-16mac_veriexec: add mac_priv_grant check for NODEVSimon J. Gerraty
2023-03-14veriexec: Improve commentsWarner Losh
2023-03-14Increase protection provided by veriexec with new unlink/rename hooks.dl
2022-06-29mac_veriexec: Authorize reads of secured sysctlsWojciech Macek
2022-03-27mac_veriexec: Fix a typo in a source code commentGordon Bergling
2022-03-24vfs: NDFREE(&nd, NDF_ONLY_PNBUF) -> NDFREE_PNBUF(&nd)Mateusz Guzik
2021-11-25vfs: remove the unused thread argument from NDINIT*Mateusz Guzik
2021-07-29Fix mac_veriexec version mismatchWojciech Macek
2021-01-12Convert remaining cap_rights_init users to cap_rights_init_oneMateusz Guzik
2020-09-01security: clean up empty lines in .c and .h filesMateusz Guzik
2020-06-12mac_veriexec_fingerprint_check_vnode: v_writecount > 0 means active writersSimon J. Gerraty
2020-02-26Mark more nodes as CTLFLAG_MPSAFE or CTLFLAG_NEEDGIANT (17 of many)Pawel Biernacki
2020-01-07vfs: eliminate v_tag from struct vnodeMateusz Guzik
2020-01-03vfs: drop the mostly unused flags argument from VOP_UNLOCKMateusz Guzik
2019-05-17Add a new ioctl for the larger params struct that includes the label.Stephen J. Kiernan
2019-05-17Obtain a shared lock instead of exclusive in the MAC/veriexecStephen J. Kiernan
2019-05-17sysctls which should be restricted when securelevel is raised should alsoStephen J. Kiernan
2019-05-17Fix format strings for some debug messages that could have arguments thatStephen J. Kiernan
2019-05-17Ensure we have obtained a lock on the process before callingStephen J. Kiernan
2018-07-14Add mpo_vnode_check_setmode MAC method to MAC/veriexec.Stephen J. Kiernan
2018-07-14Fix a typo which could cause a build breakage when building with MAC/veriexecStephen J. Kiernan
2018-07-14Remove RIPEMD-160 fingerprint modules for veriexec, since it has veryStephen J. Kiernan
2018-06-20Fix build breakage in veriexec for 32-bit architectures.Stephen J. Kiernan
2018-06-20MAC/veriexec implements a verified execution environment using the MACStephen J. Kiernan
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-22 13:41:53 +0000