Robert Watson 339b79b939 Introduce support for Mandatory Access Control and extensible ...

kernel access control.

Invoke an appropriate MAC entry point to authorize execution of
a file by a process.  The check is placed slightly differently
than it appears in the trustedbsd_mac tree so that it prevents
a little more information leakage about the target of the execve()
operation.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs

2002-08-01 14:31:58 +00:00

..

alpha

- Split the unaligned access check flags out of md_flags in struct mdthread

2002-07-31 19:37:03 +00:00

amd64

Fix a bug about stack manipulation at ACPI wakeup.

2002-08-01 09:48:01 +00:00

arm

Create a new header <machine/_stdint.h> for storing MD parts of

2002-07-29 17:41:23 +00:00

boot

Stash various networking paramters in the environment for the kernel

2002-07-31 20:17:06 +00:00

cam

…

coda

…

compat

Regenerate

2002-07-20 02:56:34 +00:00

conf

Remove duplicate 'modules-tags' rule

2002-08-01 03:13:10 +00:00

contrib

Resolve conflicts arising from the ACPI CA 20020725 import.

2002-07-30 19:35:32 +00:00

crypto

Fix some really pedantic GCC warnings.

2002-07-15 13:45:15 +00:00

ddb

…

dev

Don't set the IFF_PROMISC bit when in hostap mode like the previous

2002-08-01 07:37:52 +00:00

fs

Introduce support for Mandatory Access Control and extensible

2002-08-01 02:03:21 +00:00

geom

…

gnu

…

i4b

…

i386

Fix a bug about stack manipulation at ACPI wakeup.

2002-08-01 09:48:01 +00:00

ia64

Resolve conflicts arising from the ACPI CA 20020725 import.

2002-07-30 19:35:32 +00:00

isa

…

isofs/cd9660

…

kern

Introduce support for Mandatory Access Control and extensible

2002-08-01 14:31:58 +00:00

libkern

Convert GNU variadic macros to the ISO 9X variety.

2002-07-15 13:34:50 +00:00

modules

Introduce support for Mandatory Access Control and extensible

2002-08-01 02:03:21 +00:00

net

Introduce support for Mandatory Access Control and extensible

2002-07-31 16:23:42 +00:00

netatalk

…

netatm

…

netgraph

…

netinet

Document the undocumented assumption that at least one of the PCB

2002-08-01 03:54:43 +00:00

netinet6

correct comment for setsockopt arg size.

2002-07-25 20:40:09 +00:00

netipx

Make spxnames a const char * to quieten some warnings in netstat.

2002-07-27 23:15:08 +00:00

netkey

- fixed the order of searching SA table for packets.

2002-07-10 16:39:38 +00:00

netnatm

…

netncp

Wire the sysctl output buffer before grabbing any locks to prevent

2002-07-28 19:59:31 +00:00

netns

…

netsmb

Wire the sysctl output buffer before grabbing any locks to prevent

2002-07-28 19:59:31 +00:00

nfs

…

nfsclient

o Lock page queue accesses in nfs_getpages().

2002-07-21 20:01:32 +00:00

nfsserver

Oops, another unused arg to nfssvc_nfsd(). *blush*

2002-07-24 23:10:34 +00:00

pc98

gethints.awk is a machine-specific 4.x->5.x transition aid. We cannot

2002-07-26 03:52:30 +00:00

pccard

Add 16-bit before bus to keep the words card and bus apart.

2002-07-31 20:01:11 +00:00

pci

Make sure to set both sets of registers which control the RX and TX buffer

2002-07-31 19:58:36 +00:00

posix4

…

powerpc

Create a new header <machine/_stdint.h> for storing MD parts of

2002-07-29 17:41:23 +00:00

rpc

…

security

Introduce support for Mandatory Access Control and extensible

2002-07-31 18:07:45 +00:00

sparc64

Modify the cache handling code to assume 2 virtual colours, which is much

2002-08-01 00:16:22 +00:00

sys

Add pathconf/fpathconf entries from POSIX.1e indicating support for

2002-07-31 15:54:03 +00:00

tools

- Add automatic post vop debug checks. These work in both the success and

2002-07-30 08:52:00 +00:00

ufs

Introduce support for Mandatory Access Control and extensible

2002-07-31 16:05:30 +00:00

vm

o Setting PG_MAPPED and PG_WRITEABLE on pages that are mapped and unmapped

2002-07-31 18:46:47 +00:00

Makefile

…