freebsd-skq/sys/security/mac
rwatson b08941230a When allocation of labels on files is implicitly disabled due to MAC
policy configuration, avoid leaking resources following failed calls
to get and set MAC labels by file descriptor.

Reported by:	Mateusz Guzik <mjguzik at gmail.com> + clang scan-build
MFC after:	3 days
2012-04-08 11:01:49 +00:00
..
mac_atalk.c
mac_audit.c
mac_cred.c
mac_framework.c put sys/systm.h at its proper place or add it if missing 2011-12-12 10:05:13 +00:00
mac_framework.h Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_inet6.c
mac_inet.c
mac_internal.h Add an extra comment to the SDT probes definition. This allows us to get 2010-08-22 11:18:57 +00:00
mac_label.c
mac_net.c - Improve BPF locking model. 2012-04-06 06:53:58 +00:00
mac_pipe.c
mac_policy.h Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_posix_sem.c Add the fo_chown and fo_chmod methods to struct fileops and use them 2011-08-16 20:07:47 +00:00
mac_posix_shm.c Correct several issues in the integration of POSIX shared memory objects 2011-09-02 17:40:39 +00:00
mac_priv.c Revert the approach for skipping lockstat_probe_func call when doing 2011-12-12 23:29:32 +00:00
mac_process.c Unless "cnt" exceeds MAX_COMMIT_COUNT, nfsrv_commit() and nfsvno_fsync() are 2011-02-05 21:21:27 +00:00
mac_socket.c
mac_syscalls.c When allocation of labels on files is implicitly disabled due to MAC 2012-04-08 11:01:49 +00:00
mac_system.c
mac_sysv_msg.c
mac_sysv_sem.c
mac_sysv_shm.c
mac_vfs.c Add missing DTrace probe invocation to mac_vnode_check_open; the probe 2010-10-23 16:59:39 +00:00