jonathan 45e47caaf9 Provide ability to audit cap_rights_t arguments. ...

We wish to be able to audit capability rights arguments; this code
provides the necessary infrastructure.

This commit does not, of itself, turn on such auditing for any
system call; that should follow shortly.

Approved by: mentor (rwatson), re (Capsicum blanket)
Sponsored by: Google Inc

2011-07-18 12:58:18 +00:00

..

audit

Provide ability to audit cap_rights_t arguments.

2011-07-18 12:58:18 +00:00

mac

- Add a FEATURE for capsicum (security_capabilities).

2011-03-04 09:03:54 +00:00

mac_biba

Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-style

2010-03-02 15:05:48 +00:00

mac_bsdextended

Add hierarchical jails. A jail may further virtualize its environment

2009-05-27 14:11:23 +00:00

mac_ifoff

Rather than having MAC policies explicitly declare what object types

2009-01-10 10:58:41 +00:00

mac_lomac

Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-style

2010-03-02 15:05:48 +00:00

mac_mls

Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-style

2010-03-02 15:05:48 +00:00

mac_none

Rather than having MAC policies explicitly declare what object types

2009-01-10 10:58:41 +00:00

mac_partition

Rather than having MAC policies explicitly declare what object types

2009-01-10 10:58:41 +00:00

mac_portacl

Fix typos.

2010-11-09 10:59:09 +00:00

mac_seeotheruids

sysctl(9) cleanup checkpoint: amd64 GENERIC builds cleanly.

2011-01-12 19:54:14 +00:00

mac_stub

Continue work to optimize performance of "options MAC" when no MAC policy

2009-06-03 18:46:28 +00:00

mac_test

Continue work to optimize performance of "options MAC" when no MAC policy

2009-06-03 18:46:28 +00:00