freebsd-nq/sys/security/mac
Robert Watson 310e7ceb94 Socket MAC labels so_label and so_peerlabel are now protected by
SOCK_LOCK(so):

- Hold socket lock over calls to MAC entry points reading or
  manipulating socket labels.

- Assert socket lock in MAC entry point implementations.

- When externalizing the socket label, first make a thread-local
  copy while holding the socket lock, then release the socket lock
  to externalize to userspace.
2004-06-13 02:50:07 +00:00
..
mac_framework.c Add /* !MAC */ to final #endif. 2004-05-03 22:54:46 +00:00
mac_framework.h Improve consistency of include file guards in src/sys/sys by terminating 2004-05-10 18:38:07 +00:00
mac_inet.c Move inet and inet6 related MAC Framework entry points from mac_net.c 2004-02-26 03:51:04 +00:00
mac_internal.h Move inet and inet6 related MAC Framework entry points from mac_net.c 2004-02-26 03:51:04 +00:00
mac_label.c Modify the MAC Framework so that instead of embedding a (struct label) 2003-11-12 03:14:31 +00:00
mac_net.c If the mbuf pointer passed to mac_mbuf_to_label() is NULL, or the tag 2004-05-03 23:37:48 +00:00
mac_pipe.c add missing #include <sys/module.h> 2004-05-30 20:27:19 +00:00
mac_policy.h Improve consistency of include file guards in src/sys/sys by terminating 2004-05-10 18:38:07 +00:00
mac_process.c Update my personal copyrights and NETA copyrights in the kernel 2004-02-22 00:33:12 +00:00
mac_socket.c Socket MAC labels so_label and so_peerlabel are now protected by 2004-06-13 02:50:07 +00:00
mac_syscalls.c Add /* !MAC */ to final #endif. 2004-05-03 22:54:46 +00:00
mac_system.c add missing #include <sys/module.h> 2004-05-30 20:27:19 +00:00
mac_vfs.c Update my personal copyrights and NETA copyrights in the kernel 2004-02-22 00:33:12 +00:00