Robert Watson 7587203c2f Hook up most of the MAC entry points relating to file/directory/node ... creation, deletion, and rename. There are one or two other stray cases I'll catch in follow-up commits (such as unix domain socket creation); this permits MAC policy modules to limit the ability to perform these operations based on existing UNIX credential / vnode attributes, extended attributes, and security labels. In the rename case using MAC, we now have to lock the from directory and file vnodes for the MAC check, but this is done only in the MAC case, and the locks are immediately released so that the remainder of the rename implementation remains the same. Because the create check takes a vattr to know object type information, we now initialize additional fields in the VATTR passed to VOP_SYMLINK() in the MAC case. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories		2002-10-19 20:25:57 +00:00
..
bus_if.m	Add two interfaces to allow for busses to report the pnpinfo for	2002-10-07 05:06:38 +00:00
clock_if.m	Add a generic implementation of inittodr() and resettodr(), as well as	2002-04-04 23:39:10 +00:00
device_if.m
genassym.sh	Allow one to specify the AWK used in the environment(commandline).	2002-02-11 03:54:30 +00:00
imgact_aout.c	Use the fields in the sysentvec and in the vm map header in place of the	2002-09-21 22:07:17 +00:00
imgact_elf.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
imgact_elf32.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_elf64.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_elfN.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_gzip.c	Use the fields in the sysentvec and in the vm map header in place of the	2002-09-21 22:07:17 +00:00
imgact_shell.c	Return a more meaningful errno when the length of the interpreter	2001-11-28 03:26:58 +00:00
inflate.c	Modernize my email address.	2002-03-25 13:52:45 +00:00
init_main.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
init_sysent.c	Regen from syntax fix to syscalls.master.	2002-10-10 04:08:11 +00:00
kern_acct.c	Make sure that the accounting credential is saved along with the vp	2002-10-05 20:05:23 +00:00
kern_acl.c	Introduce support for Mandatory Access Control and extensible	2002-08-01 01:04:16 +00:00
kern_alq.c	- Export the alq daemon thread pointer.	2002-09-26 07:38:56 +00:00
kern_clock.c	- Create a new scheduler api that is defined in sys/sched.h	2002-10-12 05:32:24 +00:00
kern_condvar.c	Round out the facilty for a 'bound' thread to loan out its KSE	2002-10-09 02:33:36 +00:00
kern_conf.c	Don't allow dev_stdclone(9) to accept minors larger than the system is	2002-10-05 17:10:28 +00:00
kern_descrip.c	Don't lock the proc lock to clear p_fd. p_fd isn't protected by the proc	2002-10-18 17:42:28 +00:00
kern_environment.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
kern_event.c	hashinit() calls MALLOC(), so release the filedesc lock in knote_attach()	2002-10-03 06:03:26 +00:00
kern_exec.c	- Move the 'done1' label down below the unlock of the proc lock and move	2002-10-11 21:04:01 +00:00
kern_exit.c	- Add a new global mutex 'ppeers_lock' to protect the p_peers list of	2002-10-15 00:14:32 +00:00
kern_fork.c	Do not lock the process when calling fdfree() (this would have recursed on	2002-10-18 17:45:41 +00:00
kern_idle.c	- Create a new scheduler api that is defined in sys/sched.h	2002-10-12 05:32:24 +00:00
kern_intr.c	Instead of (sizeof(source_buffer) - 1) bytes, copy at most	2002-10-17 21:02:02 +00:00
kern_jail.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
kern_kse.c	Round out the facilty for a 'bound' thread to loan out its KSE	2002-10-09 02:33:36 +00:00
kern_kthread.c	Some kernel threads try to do significant work, and the default KSTACK_PAGES	2002-10-02 07:44:29 +00:00
kern_ktr.c	- Export the alq daemon thread pointer.	2002-09-26 07:38:56 +00:00
kern_ktrace.c	Some kernel threads try to do significant work, and the default KSTACK_PAGES	2002-10-02 07:44:29 +00:00
kern_linker.c	fix kldload error return when a module is rejected because it's statically	2002-10-17 17:28:57 +00:00
kern_lock.c	Have lockinit() initialize the debugging fields of a lock	2002-10-18 01:34:10 +00:00
kern_lockf.c	Remove a conditional #include <sys/kernel.h>, it is already	2002-09-14 14:44:41 +00:00
kern_mac.c	Integrate mac_check_socket_send() and mac_check_socket_receive()	2002-10-06 14:39:15 +00:00
kern_malloc.c	- Split UMA_ZFLAG_OFFPAGE into UMA_ZFLAG_OFFPAGE and UMA_ZFLAG_HASH.	2002-09-18 08:26:30 +00:00
kern_mib.c	Update a sysctl to use _POSIX_VERSION from <sys/unistd.h>, instead of	2002-10-13 14:26:29 +00:00
kern_module.c	- Remove Giant acquisition from modevent(), modfnext(), modstat() and	2002-06-26 00:31:44 +00:00
kern_mtxpool.c	Change callers of mtx_init() to pass in an appropriate lock type name. In	2002-04-04 21:03:38 +00:00
kern_mutex.c	- Create a new scheduler api that is defined in sys/sched.h	2002-10-12 05:32:24 +00:00
kern_ntptime.c	Remove an unused variable.	2002-10-11 10:36:22 +00:00
kern_physio.c	Change iov_base's type from char *' to the standard void *'. All	2002-10-11 14:58:34 +00:00
kern_poll.c	Increase size of ifnet.if_flags from 16 bits (short) to 32 bits (int). To avoid	2002-08-18 07:05:00 +00:00
kern_proc.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
kern_prot.c	Include file cleanup; mac.h and malloc.h at one point had ordering	2002-08-01 17:47:56 +00:00
kern_resource.c	- Create a new scheduler api that is defined in sys/sched.h	2002-10-12 05:32:24 +00:00
kern_sema.c	Change callers of mtx_init() to pass in an appropriate lock type name. In	2002-04-04 21:03:38 +00:00
kern_shutdown.c	Add ability to dump stacktraces on kernel panics when DDB is compiled into	2002-09-19 18:49:46 +00:00
kern_sig.c	Fix mis-indentation.	2002-10-02 09:09:25 +00:00
kern_subr.c	- Create a new scheduler api that is defined in sys/sched.h	2002-10-12 05:32:24 +00:00
kern_switch.c	Did you ever notice how stupid bugs show up much clearer	2002-10-14 20:43:02 +00:00
kern_sx.c	Set the lock type equal to the lock name for now as all of the current	2002-04-04 20:49:35 +00:00
kern_synch.c	- Create a new scheduler api that is defined in sys/sched.h	2002-10-12 05:32:24 +00:00
kern_syscalls.c	- Lock down the ``module'' structure by adding an SX lock that is used by	2002-03-18 07:45:30 +00:00
kern_sysctl.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
kern_tc.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
kern_thread.c	Round out the facilty for a 'bound' thread to loan out its KSE	2002-10-09 02:33:36 +00:00
kern_time.c	Round up instead of towards 0 in clock_getres() so that a resolution of	2002-09-25 12:00:38 +00:00
kern_timeout.c	Fix a format buglet.	2002-09-05 11:42:03 +00:00
kern_uuid.c	Include <sys/systm.h> for the declarations of many things instead of	2002-08-22 12:47:22 +00:00
kern_xxx.c	more caddr_t removal.	2002-06-29 02:00:02 +00:00
ksched.c	Tidy up the scheduler's code for changing the priority of a thread.	2002-10-14 20:34:31 +00:00
link_elf.c	Add two hooks to signal module load and module unload to MD code.	2002-10-19 19:16:03 +00:00
link_elf_obj.c	Add two hooks to signal module load and module unload to MD code.	2002-10-19 19:16:03 +00:00
linker_if.m	Add the sysctl "kern.function_list", which currently exports all	2001-10-30 15:21:45 +00:00
Make.tags.inc	Don't hardcode /sys when making tags, instead use ${.CURDIR}/.. this	2002-02-27 10:07:15 +00:00
Makefile	Don't generate <sys/syscalls-hide.h> it has never had any users anywhere in	2001-10-13 09:17:49 +00:00
makesyscalls.sh	Add the rest of the kernel support for the sem_ API in kern/uipc_sem.c.	2002-09-19 00:43:32 +00:00
md4c.c	Import kernel part of SMB/CIFS requester.	2001-04-10 07:59:06 +00:00
md5c.c	Bring sys/kern/md5c.c in sync with the userland version.	2002-06-24 14:15:25 +00:00
p1003_1b.c	Change p_can{debug,see,sched,signal}()'s first argument to be a thread	2002-05-19 00:14:50 +00:00
posix4_mib.c	Add the rest of the kernel support for the sem_ API in kern/uipc_sem.c.	2002-09-19 00:43:32 +00:00
sched_4bsd.c	Tidy up the scheduler's code for changing the priority of a thread.	2002-10-14 20:34:31 +00:00
subr_acl_posix1e.c	Introduce support for Mandatory Access Control and extensible	2002-08-01 01:04:16 +00:00
subr_autoconf.c	Remove __P.	2002-03-19 21:25:46 +00:00
subr_blist.c	Now that daddr_t has grown up, use %lld to printf it and cast it to long	2002-05-18 23:46:04 +00:00
subr_bus.c	Use ; not , as statement separator in PDEBUG() macro.	2002-10-15 18:56:13 +00:00
subr_clist.c	Remove __P.	2002-03-19 21:25:46 +00:00
subr_clock.c	Use the CPU_* OID constants instead of OID_AUTO for the clock-related	2002-08-07 19:43:54 +00:00
subr_devstat.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
subr_disk.c	Separate fiels reported by disk_err() with spaces, so that output doesn't	2002-10-17 23:48:29 +00:00
subr_disklabel.c	(This commit touches about 15 disk device drivers in a very consistent	2002-09-20 19:36:05 +00:00
subr_diskmbr.c	Split MBR and PC98 on-disk sliceformats out from disklabel.h, step 1:	2002-10-01 07:24:55 +00:00
subr_diskslice.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
subr_eventhandler.c	Wrap a line longer than 80 characters.	2002-07-19 17:44:44 +00:00
subr_hints.c	Cosmetic tweaks. Try and keep the style more consistent, catch some stray	2002-05-01 02:51:50 +00:00
subr_kobj.c	Convert hit and miss counters to unsigned values. Surely negative values	2002-06-10 22:40:26 +00:00
subr_log.c	In an SMP environment post-Giant it is no longer safe to blindly	2002-10-03 02:13:00 +00:00
subr_mbuf.c	Fix a fairly subtle bug in mbuf_init() where the reference counter	2002-10-16 19:59:08 +00:00
subr_mchain.c	Change iov_base's type from char *' to the standard void *'. All	2002-10-11 14:58:34 +00:00
subr_module.c
subr_param.c	Change hw.physmem and hw.usermem to unsigned long like they used to be	2002-08-30 04:04:37 +00:00
subr_pcpu.c	Add a per-cpu variable, cpumask, the preshifted equivalent of 1 << cpuid.	2002-01-05 09:35:50 +00:00
subr_power.c	Use ISO 9X variadic macro format; arguments are not optional, just	2002-07-15 17:17:56 +00:00
subr_prf.c	Fix %z to always print values as signed like it is supposed to.	2002-10-11 17:54:55 +00:00
subr_prof.c	Don't #error if we are lint.	2002-10-01 13:15:11 +00:00
subr_rman.c	Add debug.rman_debug sysctl MIB and loader tunable instead of broken	2002-09-05 11:45:02 +00:00
subr_rtc.c	Use the CPU_* OID constants instead of OID_AUTO for the clock-related	2002-08-07 19:43:54 +00:00
subr_sbuf.c	Add the new function "sbuf_done()" which returns non-zero if the sbuf is	2002-10-04 09:58:17 +00:00
subr_scanf.c	Fix mis-indentation.	2002-10-02 09:09:25 +00:00
subr_smp.c	Completely redo thread states.	2002-09-11 08:13:56 +00:00
subr_taskqueue.c	If we fail to write to a vnode during a ktrace write, then we drop all	2002-08-01 13:35:38 +00:00
subr_trap.c	- Create a new scheduler api that is defined in sys/sched.h	2002-10-12 05:32:24 +00:00
subr_turnstile.c	- Create a new scheduler api that is defined in sys/sched.h	2002-10-12 05:32:24 +00:00
subr_witness.c	Register the machine check private state spinlock on ia64.	2002-10-12 00:33:36 +00:00
subr_xxx.c	Here follows the new kernel dumping infrastructure.	2002-03-31 22:37:00 +00:00
sys_generic.c	Be consistent about "static" functions: if the function is marked	2002-09-28 17:15:38 +00:00
sys_pipe.c	Remove a KASSERT I added in 1.73 to catch uninitialized pipes.	2002-10-14 21:15:04 +00:00
sys_process.c	Add a missing PROC_UNLOCK in ptrace() for the PT_IO case.	2002-10-16 16:28:33 +00:00
sys_socket.c	Integrate mac_check_socket_send() and mac_check_socket_receive()	2002-10-06 14:39:15 +00:00
syscalls.c	Regen from syntax fix to syscalls.master.	2002-10-10 04:08:11 +00:00
syscalls.master	Restore pointer that was removed in 1.128. This wasn't a merge-o.	2002-10-15 01:36:45 +00:00
sysv_ipc.c	Change the suser() API to take advantage of td_ucred as well as do a	2002-04-01 21:31:13 +00:00
sysv_msg.c	Make SYSVMSG mpsafe. Right now there is a global lock over the	2002-08-13 08:00:36 +00:00
sysv_sem.c	Don't leak memory in semop(2). (Fix a bug I introduced in rev 1.55.)	2002-10-19 02:07:35 +00:00
sysv_shm.c	return foo -> return (foo)	2002-08-15 02:10:12 +00:00
tty.c	In an SMP environment post-Giant it is no longer safe to blindly	2002-10-03 02:13:00 +00:00
tty_compat.c	Fixed some style bugs in the removal of __P(()). The main ones were	2002-03-24 05:09:11 +00:00
tty_conf.c	KSE Milestone 2	2001-09-12 08:38:13 +00:00
tty_cons.c	Use strlcpy() instead of strncpy() to copy NUL terminated strings	2002-10-17 20:03:38 +00:00
tty_pty.c	- Lock proctree_lock instead of pgrpsess_lock.	2002-04-16 17:09:22 +00:00
tty_subr.c	Remove __P.	2002-03-19 21:25:46 +00:00
tty_tty.c	Pass active_cred and file_cred into the MAC framework explicitly	2002-08-19 19:04:53 +00:00
uipc_accf.c	Revert the last bits of my bogus move of NMBCLUSTERS	2001-06-01 21:47:34 +00:00
uipc_cow.c	Change iov_base's type from char *' to the standard void *'. All	2002-10-11 14:58:34 +00:00
uipc_domain.c	Back out my lats commit of locking down a socket, it conflicts with hsu's work.	2002-05-31 11:52:35 +00:00
uipc_jumbo.c	o Lock page queue accesses by vm_page_free().	2002-07-21 19:06:46 +00:00
uipc_mbuf.c	Replace aux mbufs with packet tags:	2002-10-16 01:54:46 +00:00
uipc_mbuf2.c	Replace aux mbufs with packet tags:	2002-10-16 01:54:46 +00:00
uipc_proto.c	Implement a LOCAL_PEERCRED socket option which returns a	2001-08-17 22:01:18 +00:00
uipc_sem.c	Be consistent about funtions being static.	2002-10-16 10:42:13 +00:00
uipc_sockbuf.c	Use m_length() instead of home-rolled versions.	2002-09-18 19:44:14 +00:00
uipc_socket.c	Modify label allocation semantics for sockets: pass in soalloc's malloc	2002-10-05 21:23:47 +00:00
uipc_socket2.c	Use m_length() instead of home-rolled versions.	2002-09-18 19:44:14 +00:00
uipc_syscalls.c	Integrate mac_check_socket_send() and mac_check_socket_receive()	2002-10-06 14:39:15 +00:00
uipc_usrreq.c	- Allocate only enough space for a temporary buffer to hold	2002-10-17 15:52:42 +00:00
vfs_acl.c	Introduce support for Mandatory Access Control and extensible	2002-08-01 01:04:16 +00:00
vfs_aio.c	fdfree() clears p_fd for us, no need to do it again.	2002-10-18 17:44:39 +00:00
vfs_bio.c	When the number of dirty buffers rises too high, the buf_daemon runs	2002-10-18 01:29:59 +00:00
vfs_cache.c	Split up __getcwd so that kernel callers of the internal version	2002-09-02 22:40:30 +00:00
vfs_cluster.c	- Use incore() where no other interlock locking is necessary.	2002-09-25 02:12:32 +00:00
vfs_default.c	Regularize the vop_stdlock'ing protocol across all the filesystems	2002-10-14 03:20:36 +00:00
vfs_export.c	Partial backout of 1.318, remove error handling added because it may be	2002-06-30 05:23:58 +00:00
vfs_extattr.c	Hook up most of the MAC entry points relating to file/directory/node	2002-10-19 20:25:57 +00:00
vfs_init.c	We don't need to check the return value of malloc() against	2002-06-22 21:44:11 +00:00
vfs_lookup.c	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
vfs_mount.c	- Don't protect mountedhere with the vn interlock.	2002-09-25 01:44:21 +00:00
vfs_subr.c	When scanning the freelist looking for candidate vnodes to recycle,	2002-10-14 19:54:39 +00:00
vfs_syscalls.c	Hook up most of the MAC entry points relating to file/directory/node	2002-10-19 20:25:57 +00:00
vfs_vnops.c	Under DIAGNOSTIC, complain if ENOIOCTL leaks out through VOP_IOCTL().	2002-09-26 21:21:13 +00:00
vnode_if.src	- We don't need any automated lock checking for vop_islocked.	2002-09-26 00:31:16 +00:00