Robert Watson 6758f88ea4 Add MAC Framework and MAC policy entry point mac_check_socket_create(), ...

which is invoked from socket() and socketpair(), permitting MAC
policy modules to control the creation of sockets by domain, type, and
protocol.

Obtained from:	TrustedBSD Project
Sponsored by:	SPARTA, SPAWAR
Approved by:	re (scottl)
Requested by:	SCC

2005-07-05 22:49:10 +00:00

..

alpha

Add .cvsignore files just like in sys/<arch>/compiled, this keeps CVS from

2005-06-20 16:52:59 +00:00

amd64

Remove a || 1 that crept into the i8254 commit and was subsequently

2005-07-05 20:13:12 +00:00

arm

- Use a TAILQ instead of parsing the array to find a free dmamap.

2005-06-24 23:57:27 +00:00

boot

Improved markup, fixes some spelling and grammar.

2005-06-14 08:49:14 +00:00

bsm

For consistency with more system include files, add a trailing '_' to

2005-05-29 16:11:34 +00:00

cam

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

coda

- Change all filesystems and vfs_cache to relock the dvp once the child is

2005-04-13 10:59:09 +00:00

compat

Jumbo-commit to enhance 32 bit application support on 64 bit kernels.

2005-06-30 07:49:22 +00:00

conf

Remove the CPU_ENABLE_SSE option from the i386 and pc98 architectures,

2005-07-02 20:06:44 +00:00

contrib

Properly initialize ifq_maxlen for the defered send queue and make it

2005-06-26 21:00:52 +00:00

crypto

gbde(8) is also rejndael user.

2005-03-11 22:07:04 +00:00

ddb

Implement functions calls from within DDB on ia64. On ia64 a function

2005-07-02 23:52:37 +00:00

dev

Add support for IODATA USB-RSAQ3 USB-Serial Adapter.

2005-07-03 23:51:16 +00:00

doc

…

fs

Jumbo-commit to enhance 32 bit application support on 64 bit kernels.

2005-06-30 07:49:22 +00:00

gdb

check return value of gdb_rx_varhex

2005-03-28 18:31:18 +00:00

geom

After provider creation!!

2005-05-25 15:54:17 +00:00

gnu

Replace the use if ext2fs' bitops by bitstring.h macros. This fixes

2005-06-21 10:11:13 +00:00

i4b

Fix some long standing bugs in writing to the BPF device attached to

2005-06-26 18:11:11 +00:00

i386

Remove a || 1 that crept into the i8254 commit and was subsequently

2005-07-05 20:13:12 +00:00

ia64

Enhance ia64_flush_dirty() to handle the case in which td != curthread.

2005-07-05 17:12:18 +00:00

isa

Remove a || 1 that crept into the i8254 commit and was subsequently

2005-07-05 20:13:12 +00:00

isofs/cd9660

- Change all filesystems and vfs_cache to relock the dvp once the child is

2005-04-13 10:59:09 +00:00

kern

Add MAC Framework and MAC policy entry point mac_check_socket_create(),

2005-07-05 22:49:10 +00:00

libkern

Fix kiconv on the 64bit plathomes.

2005-05-24 15:38:08 +00:00

modules

i386->amd64 sync

2005-06-30 05:37:48 +00:00

net

Check the alignment of the IP header before passing the packet up to the

2005-07-03 18:24:03 +00:00

net80211

remove auto-add of IEEE80211_KEY_GROUP; all the apps that need to

2005-07-05 18:05:25 +00:00

netatalk

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

netatm

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

netgraph

Remove obsoleted sysctl interface for switching between standard and 3Com

2005-07-05 17:51:02 +00:00

netinet

Fix for a bug in newreno partial ack handling where if a large amount

2005-07-05 19:23:02 +00:00

netinet6

Check the alignment of the IP header before passing the packet up to the

2005-07-02 23:13:31 +00:00

netipsec

Correct typo in a comment describing vshiftl().

2005-06-02 23:56:10 +00:00

netipx

Stop embedding struct ifnet at the top of driver softcs. Instead the

2005-06-10 16:49:24 +00:00

netkey

…

netnatm

…

netncp

avoid potential null ptr derefs

2005-02-23 22:44:38 +00:00

netsmb

lockmgr(...,LK_DRAIN,...) requires a balancing LK_RELEASE: recent

2005-05-13 11:27:48 +00:00

nfs

…

nfs4client

- We want if (mrep != NULL) not if (m_freem != NULL). m_freem will never

2005-04-25 05:11:19 +00:00

nfsclient

Ifdef out the incomplete non-blocking IO implementation for NFS

2005-06-16 15:43:17 +00:00

nfsserver

NFS write gathering defers execution of NFS server write requests to wait

2005-04-17 16:25:36 +00:00

opencrypto

malloc.h relies on param.h for a definition of MAXCPU. I guess that there is

2005-05-30 05:01:44 +00:00

pc98

Remove a || 1 that crept into the i8254 commit and was subsequently

2005-07-05 20:13:12 +00:00

pccard

Change a directory layout for pc98.

2005-05-10 12:02:18 +00:00

pci

Make the initialization in the AGPv3 case match that of Linux. Fixes hangs on

2005-06-26 04:01:11 +00:00

posix4

Introduce MAC Framework and MAC Policy entry points to label and control

2005-05-04 10:39:15 +00:00

powerpc

Add .cvsignore files just like in sys/<arch>/compiled, this keeps CVS from

2005-06-20 16:52:59 +00:00

rpc

- Don't call rpcclnt_realign() if we don't have any mbufs to realign.

2005-03-19 01:16:25 +00:00

security

Add MAC Framework and MAC policy entry point mac_check_socket_create(),

2005-07-05 22:49:10 +00:00

sparc64

Add .cvsignore files just like in sys/<arch>/compiled, this keeps CVS from

2005-06-20 16:52:59 +00:00

sys

Add MAC Framework and MAC policy entry point mac_check_socket_create(),

2005-07-05 22:49:10 +00:00

tools

Allow EVFILT_VNODE events to work on every filesystem type, not just

2005-06-09 20:20:31 +00:00

ufs

Allow EVFILT_VNODE events to work on every filesystem type, not just

2005-06-09 20:20:31 +00:00

vm

Change the panic in trash_ctor into just a printf for now. Once the reports

2005-06-26 23:44:07 +00:00

Makefile

When building cscopnamefile, default architecture to ${MACHINE}, not i386.

2005-03-08 00:09:41 +00:00