freebsd-src/sys/security
Mitchell Horne 2449b9e5fe mac: kdb/ddb framework hooks
Add three simple hooks to the debugger allowing for a loaded MAC policy
to intervene if desired:
 1. Before invoking the kdb backend
 2. Before ddb command registration
 3. Before ddb command execution

We extend struct db_command with a private pointer and two flag bits
reserved for policy use.

Reviewed by:	markj
Sponsored by:	Juniper Networks, Inc.
Sponsored by:	Klara, Inc.
Differential Revision:	https://reviews.freebsd.org/D35370
2022-07-18 22:06:13 +00:00
..
audit audit: Initialize vattr fields before calling VOP_GETATTR 2022-03-28 11:23:45 -04:00
mac mac: kdb/ddb framework hooks 2022-07-18 22:06:13 +00:00
mac_biba Add PRIV_SCHED_IDPRIO 2021-12-10 04:54:48 +02:00
mac_bsdextended Deduplicate fsid comparisons 2020-05-21 01:55:35 +00:00
mac_ifoff
mac_lomac Add PRIV_SCHED_IDPRIO 2021-12-10 04:54:48 +02:00
mac_mls security: clean up empty lines in .c and .h files 2020-09-01 21:26:00 +00:00
mac_none
mac_ntpd
mac_partition
mac_pimd mac_pimd: Support for privilege drop in pimd 2022-04-20 08:07:37 +02:00
mac_portacl
mac_priority Thread creation privilege for realtime group 2021-12-15 00:01:58 +02:00
mac_seeotheruids
mac_stub mac: kdb/ddb framework hooks 2022-07-18 22:06:13 +00:00
mac_test mac: kdb/ddb framework hooks 2022-07-18 22:06:13 +00:00
mac_veriexec mac_veriexec: Authorize reads of secured sysctls 2022-06-29 10:48:01 +02:00
mac_veriexec_parser vfs: NDFREE(&nd, NDF_ONLY_PNBUF) -> NDFREE_PNBUF(&nd) 2022-03-24 10:20:51 +00:00