Robert Watson a3abeda755 Introduce support for Mandatory Access Control and extensible ... kernel access control. Invoke the necessary MAC entry points to maintain labels on header mbufs. In particular, invoke entry points during the two mbuf header allocation cases, and the mbuf freeing case. Pass the "how" argument at allocation time to the MAC framework so that it can determine if it is permitted to block (as with policy modules), and permit the initialization entry point to fail if it needs to allocate memory but is not permitted to, failing the mbuf allocation. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs		2002-07-31 01:42:19 +00:00
..
bus_if.m	Add bus_child_present and the child_present method to bus_if.m	2002-07-21 03:28:43 +00:00
clock_if.m
device_if.m
genassym.sh
imgact_aout.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_elf32.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_elf64.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_elf.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_elfN.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_gzip.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_shell.c
inflate.c
init_main.c	Introduce support for Mandatory Access Control and extensible	2002-07-31 01:11:29 +00:00
init_sysent.c	Regen.	2002-07-31 00:16:58 +00:00
kern_acct.c	Save flags returned by vn_open and use them when calling vn_close.	2002-07-21 15:22:56 +00:00
kern_acl.c	Teach discretionary access control methods for files about VAPPEND	2002-07-22 03:57:07 +00:00
kern_clock.c
kern_condvar.c	Remove code that removes thread from sleep queue before	2002-07-30 20:34:30 +00:00
kern_conf.c
kern_descrip.c	Wire the sysctl output buffer before grabbing any locks to prevent	2002-07-28 19:59:31 +00:00
kern_environment.c
kern_event.c
kern_exec.c	For processes which are set-user-ID or set-group-ID, the kernel performs a few	2002-07-30 15:38:29 +00:00
kern_exit.c
kern_fork.c	Update docs to reflect change in count of procs reserved for root	2002-07-30 05:37:00 +00:00
kern_idle.c	Make sure the process state for the idle proc is set correctly	2002-07-17 19:18:45 +00:00
kern_intr.c
kern_jail.c
kern_kse.c	get suspension counting right.	2002-07-25 03:21:35 +00:00
kern_kthread.c
kern_ktr.c
kern_ktrace.c
kern_linker.c	Pre-wire the output buffer so that sysctl_kern_function_list() doesn't	2002-07-22 08:28:09 +00:00
kern_lock.c
kern_lockf.c
kern_mac.c	Begin committing support for Mandatory Access Control and extensible	2002-07-30 21:36:05 +00:00
kern_malloc.c
kern_mib.c
kern_module.c
kern_mtxpool.c
kern_mutex.c	Disable optimization of spinlocks on UP kernels w/o debugging for now	2002-07-27 16:54:23 +00:00
kern_ntptime.c
kern_physio.c
kern_poll.c
kern_proc.c	Wire the sysctl output buffer before grabbing any locks to prevent	2002-07-28 19:59:31 +00:00
kern_prot.c	Introduce support for Mandatory Access Control and extensible	2002-07-31 00:48:24 +00:00
kern_resource.c	Widen struct sockbuf's sb_timeo member to int from short. With	2002-07-24 03:02:43 +00:00
kern_sema.c
kern_shutdown.c	Allow alphas to do crashdumps: Refuse to run anything in choosethread()	2002-07-17 02:23:44 +00:00
kern_sig.c	Don't need to hold schedlock specifically for stop() ans it calls wakeup()	2002-07-30 21:13:48 +00:00
kern_subr.c	o Lock page queue accesses by vm_page_free().	2002-07-21 19:06:46 +00:00
kern_switch.c	- Optimize wakeup() and its friends; if a thread waken up is being	2002-07-30 06:54:05 +00:00
kern_sx.c
kern_synch.c	In endtsleep() and cv_timedwait_end(), a thread marked TDF_TIMEOUT may	2002-07-30 10:12:11 +00:00
kern_syscalls.c
kern_sysctl.c	Make a temporary copy of the output data in the generic sysctl handlers	2002-07-28 21:06:14 +00:00
kern_tc.c	Use a semicolon at the end of a function-like macro invocation. Kills	2002-07-15 13:13:04 +00:00
kern_thread.c	get suspension counting right.	2002-07-25 03:21:35 +00:00
kern_time.c
kern_timeout.c
kern_uuid.c	Fix a minor whitespace style nit that broke 'grep ^uuidgen'.	2002-07-09 19:36:50 +00:00
kern_xxx.c
ksched.c
link_aout.c
link_elf_obj.c
link_elf.c
linker_if.m
Make.tags.inc
Makefile
makesyscalls.sh	Introduce syscall.master option 'COMPAT4' which allows one to wrap	2002-07-12 06:38:34 +00:00
md4c.c
md5c.c
p1003_1b.c
posix4_mib.c
subr_acl_posix1e.c	Teach discretionary access control methods for files about VAPPEND	2002-07-22 03:57:07 +00:00
subr_autoconf.c
subr_blist.c
subr_bus.c	Add bus_child_present and the child_present method to bus_if.m	2002-07-21 03:28:43 +00:00
subr_clist.c
subr_clock.c
subr_devstat.c
subr_disk.c
subr_disklabel.c
subr_diskmbr.c
subr_diskslice.c	Fix DIOCGMEDIASIZE and DIOCGSECTORSIZE ioctls to work for all	2002-07-23 14:30:27 +00:00
subr_eventhandler.c	Wrap a line longer than 80 characters.	2002-07-19 17:44:44 +00:00
subr_hints.c
subr_kobj.c
subr_log.c
subr_mbuf.c	Introduce support for Mandatory Access Control and extensible	2002-07-31 01:42:19 +00:00
subr_mchain.c	Convert GNU-styled variadic macros to ISO(9x) style.	2002-07-15 13:15:31 +00:00
subr_module.c
subr_param.c
subr_pcpu.c
subr_power.c	Use ISO 9X variadic macro format; arguments are not optional, just	2002-07-15 17:17:56 +00:00
subr_prf.c
subr_prof.c
subr_rman.c
subr_rtc.c
subr_sbuf.c
subr_scanf.c
subr_smp.c
subr_taskqueue.c
subr_trap.c	Revert removal of cred_free_thread(): It is used to ensure that a thread's	2002-07-11 02:18:33 +00:00
subr_turnstile.c	Disable optimization of spinlocks on UP kernels w/o debugging for now	2002-07-27 16:54:23 +00:00
subr_witness.c	Silence compiler warnings when DDB is not defined.	2002-07-15 02:03:17 +00:00
subr_xxx.c
sys_generic.c	Attempt to clarify comment in selrecord.	2002-07-24 00:29:22 +00:00
sys_pipe.c	Remove unneeded caddr_t casts.	2002-07-22 19:05:44 +00:00
sys_process.c	Do preserve the error result from calling p_cansee() and use that when	2002-07-20 22:44:39 +00:00
sys_socket.c
syscalls.c	Regen.	2002-07-31 00:16:58 +00:00
syscalls.master	Introduce support for Mandatory Access Control and extensible	2002-07-30 22:43:20 +00:00
sysv_ipc.c
sysv_msg.c	Cleanup:	2002-07-22 18:27:54 +00:00
sysv_sem.c	Cleanup:	2002-07-22 18:27:54 +00:00
sysv_shm.c	Change struct vmspace->vm_shm from void * to struct shmmap_state *, this	2002-07-22 16:22:27 +00:00
tty_compat.c
tty_conf.c
tty_cons.c
tty_pty.c
tty_subr.c
tty_tty.c
tty.c	Clear up confusion in ugly code. ^T gave wrong results for RSS.	2002-07-18 21:19:56 +00:00
uipc_accf.c
uipc_cow.c	Lock accesses to the page queues.	2002-07-13 04:37:22 +00:00
uipc_domain.c
uipc_jumbo.c	o Lock page queue accesses by vm_page_free().	2002-07-21 19:06:46 +00:00
uipc_mbuf2.c
uipc_mbuf.c	Make M_COPY_PKTHDR() macro into a wrapper for a m_copy_pkthdr()	2002-07-30 18:28:58 +00:00
uipc_proto.c
uipc_sockbuf.c	If a socket is disconnected for some reason (like a TCP connection	2002-07-27 23:06:52 +00:00
uipc_socket2.c	If a socket is disconnected for some reason (like a TCP connection	2002-07-27 23:06:52 +00:00
uipc_socket.c	Catch up to rev 1.87 of sys/sys/socketvar.h (sb_cc changed from u_long	2002-07-24 14:21:41 +00:00
uipc_syscalls.c	o In do_sendfile(), replace vm_page_sleep_busy() by vm_page_sleep_if_busy()	2002-07-30 18:51:07 +00:00
uipc_usrreq.c
vfs_acl.c	Teach discretionary access control methods for files about VAPPEND	2002-07-22 03:57:07 +00:00
vfs_aio.c
vfs_bio.c	o Replace vm_page_sleep_busy() with vm_page_sleep_if_busy()	2002-07-30 20:41:10 +00:00
vfs_cache.c
vfs_cluster.c	Replace the global buffer hash table with per-vnode splay trees using a	2002-07-10 17:02:32 +00:00
vfs_default.c	- The default for lock, unlock, and islocked is now std* instead of no*.	2002-07-27 05:16:20 +00:00
vfs_export.c
vfs_extattr.c	Introduce support for Mandatory Access Control and extensible	2002-07-31 01:27:33 +00:00
vfs_init.c
vfs_lookup.c	Under #ifdef DIAGNOSTIC, NULL out componentname pointers if we free the	2002-07-24 15:42:22 +00:00
vfs_mount.c	Introduce support for Mandatory Access Control and extensible	2002-07-31 01:11:29 +00:00
vfs_subr.c	- Backout the patch made in revision 1.75 of vfs_mount.c. The vputs here	2002-07-29 06:26:55 +00:00
vfs_syscalls.c	Introduce support for Mandatory Access Control and extensible	2002-07-31 01:27:33 +00:00
vfs_vnops.c	Set VAPPEND in open mode when O_APPEND is specified as an argument to	2002-07-22 12:51:06 +00:00
vnode_if.src	Begin committing support for Mandatory Access Control and extensible	2002-07-30 22:15:09 +00:00