#
267654 |
|
19-Jun-2014 |
gjb |
Copy stable/9 to releng/9.3 as part of the 9.3-RELEASE cycle.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation |
#
225736 |
|
22-Sep-2011 |
kensmith |
Copy head to stable/9 as part of 9.0-RELEASE release cycle.
Approved by: re (implicit)
|
#
209147 |
|
14-Jun-2010 |
kientzle |
Separate _posix1e_acl_id_to_name() into a separate file, to break an unnecessary dependency on getpwuid() and getgrgid().
MFC after: 1 month
|
#
201402 |
|
02-Jan-2010 |
ed |
Don't forget to clean up the file copied from the kernel sources.
MFC after: 1 week
|
#
196123 |
|
12-Aug-2009 |
rwatson |
Update posix1e-related man pages, especially as relates to MAC, to more accurately reflect the last ten years of work.
Approved by: re (kib)
|
#
195692 |
|
14-Jul-2009 |
trasz |
Add missing MLINKS for acl_{get,set}_link_fd(3).
Approved by: re (kib)
|
#
194955 |
|
25-Jun-2009 |
trasz |
Add NFSv4 ACL support to libc.
This adds the following functions to the acl(3) API: acl_add_flag_np, acl_clear_flags_np, acl_create_entry_np, acl_delete_entry_np, acl_delete_flag_np, acl_get_extended_np, acl_get_flag_np, acl_get_flagset_np, acl_set_extended_np, acl_set_flagset_np, acl_to_text_np, acl_is_trivial_np, acl_strip_np, acl_get_brand_np. Most of them are similar to what Darwin does. There are no backward-incompatible changes.
Approved by: rwatson@
|
#
192586 |
|
22-May-2009 |
trasz |
Make 'struct acl' larger, as required to support NFSv4 ACLs. Provide compatibility interfaces in both kernel and libc.
Reviewed by: rwatson
|
#
160154 |
|
07-Jul-2006 |
rwatson |
Following repo-copy of mac_is_present_np.3 to mac_is_present.3, remove old file, update references, etc. The C function is already named mac_is_present().
Obtained from: TrustedBSD Project
|
#
156613 |
|
12-Mar-2006 |
deischen |
Add each directory's symbol map file to SYM_MAPS.
|
#
146937 |
|
03-Jun-2005 |
imp |
Missed rwatson's redundancy
|
#
130636 |
|
17-Jun-2004 |
rwatson |
Add reference to mac_get_link() in man page, which was omitted when mac_get_link() and mac_set_link() were added.
|
#
113737 |
|
20-Apr-2003 |
rwatson |
Add a man page for the mac.conf MAC library configuration file.
Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
|
#
109263 |
|
14-Jan-2003 |
chris |
o Document mac_prepare() and associated functions o Link mac_get_pid.3 to mac_get.3 o Update SEE ALSO to refer to mac_prepare, and added missing references o Remove clause #3 on my work o Update mac_get.3 for the updated MAC API
Sponsored by: DARPA, Network Associates Laboratories Obtained from: TrustedBSD Project
|
#
107052 |
|
18-Nov-2002 |
ru |
libc_r wasn't so tied to libc for 22 months.
|
#
106482 |
|
06-Nov-2002 |
rwatson |
Hook up the userland wrapper for __mac_execve().
Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
|
#
105698 |
|
22-Oct-2002 |
rwatson |
Reflect MAC kernel/user API changes into the libc MAC implementation. This removes a lot of complexity, since we basically just reserve space on a retrieval of a label, and pass around strings. Two new elements: (1) consumers of the API must now declare what label elements they are interested in retrieving, or (2) rely on the default provided in a new configuration file, mac.conf.
Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
|
#
105605 |
|
21-Oct-2002 |
rwatson |
Unhook the per-policy parsing/printing MAC modules in libc to prepare to bring in the new MAC label management API. With the new API revision, we have only policy-agnostic code in libc and the base kernel.
Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
|
#
101242 |
|
02-Aug-2002 |
rwatson |
Introduce support for Mandatory Access Control and extensible kernel access control.
Extensions to libc to provide basic MAC label manipulation facilities for userland. These interface will be replaced in the next month or two with more flexible interfaces, but provide sufficient support to allow use of the Biba and MLS policies for user applications.
libc_r wrappers to follow.
Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
|
#
98196 |
|
13-Jun-2002 |
rwatson |
No POSIX.1e capabilities in the main tree yet.
|
#
86452 |
|
16-Nov-2001 |
rwatson |
o Reflect repo-copy of extattr.[c3] from libutil to libc, moving extattr namespace routines to the libc/posix1e directory. While the extattr calls are not strictly POSIX.1e, POSIX.1e wasn't strictly ever approved, so I think that's OK.
Obtained from: TrustedBSD Project
|
#
82707 |
|
31-Aug-2001 |
rwatson |
o Attach cap_cmp.c and cap_copy.c to the build. o Attach cap_copy_ext.3 and cap_copy_int.3 to the install, and link cap_size.3 to cap_copy_ext.3.
Submitted by: tmm Obtained from: TrustedBSD Project
|
#
75928 |
|
24-Apr-2001 |
jedgar |
o Separate acl_t into internal and external representations as required by POSIX.1e. This maintains the current 'struct acl' in the kernel while providing the generic external acl_t interface required to complete the ACL editing library. o Add the acl_get_entry() function. o Convert the existing ACL utilities, getfacl and setfacl, to fully make use of the ACL editing library.
Obtained from: TrustedBSD Project
|
#
75492 |
|
13-Apr-2001 |
jedgar |
Add acl_get_perm_np(3), a non-portable function to check if a permission is in a permission set, required for third-party applications such as Samba.
Reviewed by: rwatson Obtained from: TrustedBSD Project
|
#
75223 |
|
05-Apr-2001 |
ru |
Unbreak world.
Submitted by: jhay
|
#
75209 |
|
04-Apr-2001 |
jedgar |
Install the acl_create_entry.3 man page
|
#
75185 |
|
04-Apr-2001 |
tmm |
Prepare for the inclusion of libposix1e into libc: retire the old Makefile, add Makefile.inc needed for libc build; add #include "namespace.h"/#include "un-namespace.h" pairs around the includes of sys/acl.h and sys/capability.h, and an additional underscore in front of the functions that will be overridden in libc_r.
Approved by: rwatson Obtained from: TrustedBSD Project
|