freebsd-src/sys/security
Michael Tuexen 2fb778fab8 MAC: improve handling of listening sockets
so_peerlabel can only be used when the socket is not listening.

Reviewed by:		markj
MFC after:		1 week
Sponsored by:		Netflix, Inc.
Differential Revision:	https://reviews.freebsd.org/D46755
2024-09-26 08:06:24 +02:00
..
audit sys: Automated cleanup of cdefs and other formatting 2023-11-26 22:24:00 -07:00
mac MAC: improve handling of listening sockets 2024-09-26 08:06:24 +02:00
mac_biba cr_canseejailproc(): New privilege, no direct check for UID 0 2023-09-28 11:42:22 -03:00
mac_bsdextended sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_ddb mac_ddb: Fix the show rman validator. 2022-08-12 10:20:05 -07:00
mac_do MAC/do: allow to call setuid if real user id is 0 2024-05-23 12:09:11 +02:00
mac_grantbylabel procfs require PRIV_PROC_MEM_WRITE to write mem 2024-09-19 13:10:27 -07:00
mac_ifoff sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_ipacl mac_ipacl: Use IfAPI 2023-08-25 12:50:39 -04:00
mac_lomac cr_canseejailproc(): New privilege, no direct check for UID 0 2023-09-28 11:42:22 -03:00
mac_mls sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_none sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_ntpd sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_partition sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_pimd sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_portacl sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_priority Thread creation privilege for realtime group 2021-12-15 00:01:58 +02:00
mac_seeotheruids sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_stub sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_test sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_veriexec procfs require PRIV_PROC_MEM_WRITE to write mem 2024-09-19 13:10:27 -07:00
mac_veriexec_parser mac_veriexec_parser: Fix open_file error handling 2024-09-20 09:22:56 -06:00