Robert Watson 177142e458 Pass active_cred and file_cred into the MAC framework explicitly ...

for mac_check_vnode_{poll,read,stat,write}().  Pass in fp->f_cred
when calling these checks with a struct file available.  Otherwise,
pass NOCRED.  All currently MAC policies use active_cred, but
could now offer the cached credential semantic used for the base
system security model.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs

2002-08-19 19:04:53 +00:00

..

bus_if.m

Add bus_child_present and the child_present method to bus_if.m

2002-07-21 03:28:43 +00:00

clock_if.m

…

device_if.m

…

genassym.sh

…

imgact_aout.c

In order to better support flexible and extensible access control,

2002-08-15 20:55:08 +00:00

imgact_elf32.c

Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable

2002-07-20 02:56:12 +00:00

imgact_elf64.c

Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable

2002-07-20 02:56:12 +00:00

imgact_elf.c

In order to better support flexible and extensible access control,

2002-08-15 20:55:08 +00:00

imgact_elfN.c

Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable

2002-07-20 02:56:12 +00:00

imgact_gzip.c

Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable

2002-07-20 02:56:12 +00:00

imgact_shell.c

…

inflate.c

…

init_main.c

Refresh the credential on the first initproc thread following divorcing

2002-08-07 17:53:31 +00:00

init_sysent.c

Regen.

2002-08-06 15:16:55 +00:00

kern_acct.c

In order to better support flexible and extensible access control,

2002-08-15 20:55:08 +00:00

kern_acl.c

Introduce support for Mandatory Access Control and extensible

2002-08-01 01:04:16 +00:00

kern_clock.c

Fixed breakage of binary compatibility of the kern.clockrate sysctl in

2002-05-05 04:33:09 +00:00

kern_condvar.c

Remove code that removes thread from sleep queue before

2002-07-30 20:34:30 +00:00

kern_conf.c

Break the following implementation of panic(3):

2002-04-25 13:17:33 +00:00

kern_descrip.c

In continuation of early fileop credential changes, modify fo_ioctl() to

2002-08-17 02:36:16 +00:00

kern_environment.c

Cosmetic tweaks. Try and keep the style more consistent, catch some stray

2002-05-01 02:51:50 +00:00

kern_event.c

In continuation of early fileop credential changes, modify fo_ioctl() to

2002-08-17 02:36:16 +00:00

kern_exec.c

- Hold the vnode lock throughout execve.

2002-08-13 06:55:28 +00:00

kern_exit.c

Revert previous revision which accidentally snuck in with another commit.

2002-08-01 13:44:33 +00:00

kern_fork.c

Move code block added in 1.157 to a safer part of fork1().

2002-08-07 11:31:45 +00:00

kern_idle.c

Slight cleanup of some comments/whitespace.

2002-08-01 18:45:10 +00:00

kern_intr.c

Slight cleanup of some comments/whitespace.

2002-08-01 18:45:10 +00:00

kern_jail.c

The jail syscall calls chroot, which is not mpsafe, so put back a

2002-07-01 20:46:01 +00:00

kern_kse.c

Fix a comment.

2002-08-01 19:10:40 +00:00

kern_kthread.c

Part 1 of KSE-III

2002-06-29 17:26:22 +00:00

kern_ktr.c

…

kern_ktrace.c

Pass active_cred and file_cred into the MAC framework explicitly

2002-08-19 19:04:53 +00:00

kern_linker.c

In order to better support flexible and extensible access control,

2002-08-15 20:55:08 +00:00

kern_lock.c

Record the file, line, and pid of the last successful shared lock holder. This

2002-05-30 05:55:22 +00:00

kern_lockf.c

Add a #include for <sys/mount.h>

2002-08-13 10:07:05 +00:00

kern_mac.c

Pass active_cred and file_cred into the MAC framework explicitly

2002-08-19 19:04:53 +00:00

kern_malloc.c

- Replace the bandaid introduced in revision 1.110 with

2002-05-31 09:41:09 +00:00

kern_mib.c

…

kern_module.c

- Remove Giant acquisition from modevent(), modfnext(), modstat() and

2002-06-26 00:31:44 +00:00

kern_mtxpool.c

…

kern_mutex.c

Disable optimization of spinlocks on UP kernels w/o debugging for now

2002-07-27 16:54:23 +00:00

kern_ntptime.c

Hide the private parts of timecounter from a couple of places that don't

2002-04-26 21:31:44 +00:00

kern_physio.c

More caddr_t removal, make fo_ioctl take a void * instead of a caddr_t.

2002-06-29 01:50:25 +00:00

kern_poll.c

Increase size of ifnet.if_flags from 16 bits (short) to 32 bits (int). To avoid

2002-08-18 07:05:00 +00:00

kern_proc.c

Fix typos; each file has at least one s/seperat/separat/

2002-08-11 13:05:30 +00:00

kern_prot.c

Include file cleanup; mac.h and malloc.h at one point had ordering

2002-08-01 17:47:56 +00:00

kern_resource.c

Widen struct sockbuf's sb_timeo member to int from short. With

2002-07-24 03:02:43 +00:00

kern_sema.c

…

kern_shutdown.c

Revert previous revision which was accidentally committed and has not been

2002-08-01 13:39:33 +00:00

kern_sig.c

Do some work on keeping better track of stopped/continued state.

2002-08-08 06:18:41 +00:00

kern_subr.c

o Convert a vm_page_sleep_busy() into a vm_page_sleep_if_busy()

2002-08-04 06:27:37 +00:00

kern_switch.c

- Optimize wakeup() and its friends; if a thread waken up is being

2002-07-30 06:54:05 +00:00

kern_sx.c

…

kern_synch.c

Slight cleanup of some comments/whitespace.

2002-08-01 18:45:10 +00:00

kern_syscalls.c

…

kern_sysctl.c

Introduce a new sysctl flag, CTLFLAG_SKIP, which will cause

2002-08-10 19:56:45 +00:00

kern_tc.c

Use a semicolon at the end of a function-like macro invocation. Kills

2002-07-15 13:13:04 +00:00

kern_thread.c

Fix a comment.

2002-08-01 19:10:40 +00:00

kern_time.c

A side effect of some debugging: prototypify and deregister.

2002-08-18 21:24:22 +00:00

kern_timeout.c

…

kern_uuid.c

Fix a minor whitespace style nit that broke 'grep ^uuidgen'.

2002-07-09 19:36:50 +00:00

kern_xxx.c

more caddr_t removal.

2002-06-29 02:00:02 +00:00

ksched.c

Part 1 of KSE-III

2002-06-29 17:26:22 +00:00

link_aout.c

In order to better support flexible and extensible access control,

2002-08-15 20:55:08 +00:00

link_elf_obj.c

In order to better support flexible and extensible access control,

2002-08-15 20:55:08 +00:00

link_elf.c

In order to better support flexible and extensible access control,

2002-08-15 20:55:08 +00:00

linker_if.m

…

Make.tags.inc

…

Makefile

…

makesyscalls.sh

Introduce syscall.master option 'COMPAT4' which allows one to wrap

2002-07-12 06:38:34 +00:00

md4c.c

…

md5c.c

Bring sys/kern/md5c.c in sync with the userland version.

2002-06-24 14:15:25 +00:00

p1003_1b.c

Change p_can{debug,see,sched,signal}()'s first argument to be a thread

2002-05-19 00:14:50 +00:00

posix4_mib.c

…

subr_acl_posix1e.c

Introduce support for Mandatory Access Control and extensible

2002-08-01 01:04:16 +00:00

subr_autoconf.c

…

subr_blist.c

Now that daddr_t has grown up, use %lld to printf it and cast it to long

2002-05-18 23:46:04 +00:00

subr_bus.c

Add bus_child_present and the child_present method to bus_if.m

2002-07-21 03:28:43 +00:00

subr_clist.c

…

subr_clock.c

Use the CPU_* OID constants instead of OID_AUTO for the clock-related

2002-08-07 19:43:54 +00:00

subr_devstat.c

…

subr_disk.c

…

subr_disklabel.c

more caddr_t removal.

2002-06-29 02:00:02 +00:00

subr_diskmbr.c

…

subr_diskslice.c

Fix DIOCGMEDIASIZE and DIOCGSECTORSIZE ioctls to work for all

2002-07-23 14:30:27 +00:00

subr_eventhandler.c

Wrap a line longer than 80 characters.

2002-07-19 17:44:44 +00:00

subr_hints.c

Cosmetic tweaks. Try and keep the style more consistent, catch some stray

2002-05-01 02:51:50 +00:00

subr_kobj.c

Convert hit and miss counters to unsigned values. Surely negative values

2002-06-10 22:40:26 +00:00

subr_log.c

more caddr_t removal.

2002-06-29 02:00:02 +00:00

subr_mbuf.c

Make m_flags an int instead of a short, this is consistent with the

2002-08-15 14:09:16 +00:00

subr_mchain.c

Convert GNU-styled variadic macros to ISO(9x) style.

2002-07-15 13:15:31 +00:00

subr_module.c

…

subr_param.c

Improve the implementation of adjtime(2).

2002-04-15 12:23:11 +00:00

subr_pcpu.c

…

subr_power.c

Use ISO 9X variadic macro format; arguments are not optional, just

2002-07-15 17:17:56 +00:00

subr_prf.c

Make kern.log_console_output a tuneable aswell as a sysctl.

2002-08-11 18:47:42 +00:00

subr_prof.c

more caddr_t removal.

2002-06-29 02:00:02 +00:00

subr_rman.c

…

subr_rtc.c

Use the CPU_* OID constants instead of OID_AUTO for the clock-related

2002-08-07 19:43:54 +00:00

subr_sbuf.c

…

subr_scanf.c

…

subr_smp.c

Part 1 of KSE-III

2002-06-29 17:26:22 +00:00

subr_taskqueue.c

If we fail to write to a vnode during a ktrace write, then we drop all

2002-08-01 13:35:38 +00:00

subr_trap.c

Revert removal of cred_free_thread(): It is used to ensure that a thread's

2002-07-11 02:18:33 +00:00

subr_turnstile.c

Disable optimization of spinlocks on UP kernels w/o debugging for now

2002-07-27 16:54:23 +00:00

subr_witness.c

Silence compiler warnings when DDB is not defined.

2002-07-15 02:03:17 +00:00

subr_xxx.c

…

sys_generic.c

In continuation of early fileop credential changes, modify fo_ioctl() to

2002-08-17 02:36:16 +00:00

sys_pipe.c

Break out mac_check_pipe_op() into component check entry points:

2002-08-19 16:59:37 +00:00

sys_process.c

Do preserve the error result from calling p_cansee() and use that when

2002-07-20 22:44:39 +00:00

sys_socket.c

In continuation of early fileop credential changes, modify fo_ioctl() to

2002-08-17 02:36:16 +00:00

syscalls.c

Regen.

2002-08-06 15:16:55 +00:00

syscalls.master

Rename mac_policy() to mac_syscall() to be more reflective of its

2002-08-06 15:15:53 +00:00

sysv_ipc.c

…

sysv_msg.c

Make SYSVMSG mpsafe. Right now there is a global lock over the

2002-08-13 08:00:36 +00:00

sysv_sem.c

Make SYSVSEM mpsafe. Each semaphore set gets its own lock, however

2002-08-13 08:47:17 +00:00

sysv_shm.c

return foo -> return (foo)

2002-08-15 02:10:12 +00:00

tty_compat.c

…

tty_conf.c

…

tty_cons.c

Remove new console devices with cnremove before initializing them in

2002-08-06 18:56:41 +00:00

tty_pty.c

- Lock proctree_lock instead of pgrpsess_lock.

2002-04-16 17:09:22 +00:00

tty_subr.c

…

tty_tty.c

Pass active_cred and file_cred into the MAC framework explicitly

2002-08-19 19:04:53 +00:00

tty.c

Clear up confusion in ugly code. ^T gave wrong results for RSS.

2002-07-18 21:19:56 +00:00

uipc_accf.c

…

uipc_cow.c

Moved sf_buf_alloc and sf_buf_free function declarations to sys/socketvar.h

2002-08-13 19:03:19 +00:00

uipc_domain.c

Back out my lats commit of locking down a socket, it conflicts with hsu's work.

2002-05-31 11:52:35 +00:00

uipc_jumbo.c

o Lock page queue accesses by vm_page_free().

2002-07-21 19:06:46 +00:00

uipc_mbuf2.c

In m_aux_delete, no need to chase beyond victim.

2002-05-23 15:59:48 +00:00

uipc_mbuf.c

Include file cleanup; mac.h and malloc.h at one point had ordering

2002-08-01 17:47:56 +00:00

uipc_proto.c

…

uipc_sockbuf.c

Further improved the performance of sbreserve() by moving the calculation

2002-08-16 18:41:48 +00:00

uipc_socket2.c

Further improved the performance of sbreserve() by moving the calculation

2002-08-16 18:41:48 +00:00

uipc_socket.c

Make similar changes to fo_stat() and fo_poll() as made earlier to

2002-08-16 12:52:03 +00:00

uipc_syscalls.c

In order to better support flexible and extensible access control,

2002-08-15 20:55:08 +00:00

uipc_usrreq.c

Introduce support for Mandatory Access Control and extensible

2002-08-01 01:18:42 +00:00

vfs_acl.c

Introduce support for Mandatory Access Control and extensible

2002-08-01 01:04:16 +00:00

vfs_aio.c

o Make a correction to the last change: In aio_cancel(2) return AIO_ALLDONE

2002-08-11 19:04:17 +00:00

vfs_bio.c

- Replace v_flag with v_iflag and v_vflag

2002-08-04 10:29:36 +00:00

vfs_cache.c

- Move a VOP assert to the right place.

2002-08-05 08:55:53 +00:00

vfs_cluster.c

o Lock page accesses by vm_page_io_start() with the page queues lock.

2002-07-31 07:27:08 +00:00

vfs_default.c

Remember to unlock the (optional) vnode in vfs_stdextattrctl(). Failing

2002-08-13 11:11:51 +00:00

vfs_export.c

Partial backout of 1.318, remove error handling added because it may be

2002-06-30 05:23:58 +00:00

vfs_extattr.c

Pass active_cred and file_cred into the MAC framework explicitly

2002-08-19 19:04:53 +00:00

vfs_init.c

We don't need to check the return value of malloc() against

2002-06-22 21:44:11 +00:00

vfs_lookup.c

- Replace v_flag with v_iflag and v_vflag

2002-08-04 10:29:36 +00:00

vfs_mount.c

Keep a copy of the credential used to mount filesystems around so

2002-08-19 06:52:21 +00:00

vfs_subr.c

- Extend the vnode_free_list_mtx to cover numvnodes and freevnodes. This

2002-08-13 05:29:48 +00:00

vfs_syscalls.c

Pass active_cred and file_cred into the MAC framework explicitly

2002-08-19 19:04:53 +00:00

vfs_vnops.c

Pass active_cred and file_cred into the MAC framework explicitly

2002-08-19 19:04:53 +00:00

vnode_if.src

Begin committing support for Mandatory Access Control and extensible

2002-07-30 22:15:09 +00:00