Robert Watson 5c5384fe80 Use the credential authorizing the socket creation operation to perform ... the jail check and the MAC socket labeling in socreate(). This handles socket creation using a cached credential better (such as in the NFS client code when rebuilding a socket following a disconnect: the new socket should be created using the nfsmount cached cred, not the cred of the thread causing the socket to be rebuilt). Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs		2002-08-12 16:49:03 +00:00
..
alpha	Teach the OSF/1 emulation layer a little more about mandatory access	2002-08-12 01:16:55 +00:00
amd64	Use roundup2() to avoid a problem where pmap_growkernel was unable	2002-08-12 10:35:32 +00:00
arm
boot	Add help about hint.acpi.0.disable.	2002-08-09 20:07:51 +00:00
cam
coda	Fix typo in the last revision.	2002-08-04 19:34:38 +00:00
compat	Enforce MAC policies for the locally implemented vnode services in	2002-08-12 01:42:21 +00:00
conf	Add support for the LSI-Logic Fusion/MP architecture.	2002-08-11 23:34:20 +00:00
contrib
crypto
ddb
dev	Add PCI ID for ICH4 SMBus controller.	2002-08-12 16:22:12 +00:00
fs	Fix typo in vnode flags causing deadlock in msdosfs_fsync().	2002-08-05 21:07:30 +00:00
geom
gnu	Pass IO_NOMACCHECK to vn_rdwr() in the following checks to prevent	2002-08-12 16:43:04 +00:00
i4b	add support properly displaying and logging incoming telephone numbers (MSNs)	2002-08-12 07:53:55 +00:00
i386	Use roundup2() to avoid a problem where pmap_growkernel was unable	2002-08-12 10:35:32 +00:00
ia64	o Remove the setting and clearing of the PG_MAPPED flag from the alpha and	2002-08-10 18:01:39 +00:00
isa
isofs/cd9660	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
kern	Use the credential authorizing the socket creation operation to perform	2002-08-12 16:49:03 +00:00
libkern
modules	Depend on opt_mac.h.	2002-08-12 15:27:17 +00:00
net	Correct error handling during MAC transmission check for if_gif.	2002-08-12 16:08:23 +00:00
netatalk
netatm
netgraph	Make the consumers of the linker_load_file() function use	2002-08-02 20:56:07 +00:00
netinet	Assert that the inpcb lock is held when calling tcp_output().	2002-08-12 03:22:46 +00:00
netinet6	Introduce support for Mandatory Access Control and extensible	2002-08-02 20:49:14 +00:00
netipx
netkey
netnatm
netncp
netns
netsmb
nfs
nfsclient	Pass IO_NOMACCHECK to vn_rdwr() in the following checks to prevent	2002-08-12 16:43:04 +00:00
nfsserver	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
pc98	Add support for the LSI-Logic Fusion/MP architecture.	2002-08-11 23:34:20 +00:00
pccard
pci	o Use the VM_ALLOC_WIRED flag instead of calling vm_page_wire().	2002-08-10 18:42:13 +00:00
posix4
powerpc	o Introduce pmap_page_is_mapped(). Its purpose is to obsolete	2002-08-07 19:37:22 +00:00
rpc
security	Declare a module service "kernel_mac_support" when MAC support is	2002-08-12 02:00:21 +00:00
sparc64	Add support for the LSI-Logic Fusion/MP architecture.	2002-08-11 23:34:20 +00:00
sys	Declare a module service "kernel_mac_support" when MAC support is	2002-08-12 02:00:21 +00:00
tools
ufs	Pass IO_NOMACCHECK to vn_rdwr() in the following checks to prevent	2002-08-12 16:43:04 +00:00
vm	o Assert that the page queues lock is held in vm_page_activate().	2002-08-11 00:21:40 +00:00
Makefile