Tom Rhodes fa31f18053 Give the mac_bsdextended(4) policy the ability to match and apply on a first ... rule only in place of all rules match. This is similar to how ipfw(8) works. Provide a sysctl, mac_bsdextended_firstmatch_enabled, to enable this feature. Reviewed by: re (jhb) Aprroved by: re (jhb)		2004-08-21 20:15:08 +00:00
..
mac	* Add a "how" argument to uma_zone constructors and initialization functions	2004-08-02 00:18:36 +00:00
mac_biba	Introduce SLOT_SET macro and use it in place of casts as lvalues.	2004-07-28 07:01:33 +00:00
mac_bsdextended	Give the mac_bsdextended(4) policy the ability to match and apply on a first	2004-08-21 20:15:08 +00:00
mac_ifoff	Update my personal copyrights and NETA copyrights in the kernel	2004-02-22 00:33:12 +00:00
mac_lomac	Introduce SLOT_SET macro and use it in place of casts as lvalues.	2004-07-28 07:01:33 +00:00
mac_mls	Introduce SLOT_SET macro and use it in place of casts as lvalues.	2004-07-28 07:01:33 +00:00
mac_none	Update my personal copyrights and NETA copyrights in the kernel	2004-02-22 00:33:12 +00:00
mac_partition	Update my personal copyrights and NETA copyrights in the kernel	2004-02-22 00:33:12 +00:00
mac_portacl	Remove dead code. (This loop counted the number of rules, but the count	2004-05-15 20:55:19 +00:00
mac_seeotheruids	Update my personal copyrights and NETA copyrights in the kernel	2004-02-22 00:33:12 +00:00
mac_stub	Introduce a temporary mutex, mac_ifnet_mtx, to lock MAC labels on	2004-06-24 03:34:46 +00:00
mac_test	Update for the KDB framework:	2004-07-10 21:47:53 +00:00