opnsense-src/sys/security
Zhenlei Huang 04f360b782 MAC: mac_biba, mac_lomac: Fix setting loader tunables
A string loader tunable requires setting the len parameter to a nonzero
value, typically the size of the string, to have the flag CTLFLAG_TUN
work correctly [1] [2].

Without this fix security.mac.{biba,lomac}.trusted_interfaces would
have no effect at all.

[1] 3da1cf1e88 Extend the meaning of the CTLFLAG_TUN flag to automatically ...
[2] 6a3287f889 Fix regression issue after r267961. Handle special string case ...

Reviewed by:	olce, kib
Fixes:		af3b2549c4 Pull in r267961 and r267973 again ...
MFC after:	3 days
Differential Revision:	https://reviews.freebsd.org/D48898

(cherry picked from commit 7d4c0fac8c7db9c5741ba98a8b3ce3c43feb1cf4)
2025-02-13 18:19:56 +08:00
..
audit audit/audit.c: fix typo KERNEL_PANICED->KERNEL_PANICKED 2025-02-08 02:26:56 +02:00
mac MAC: syscalls: mac_label_copyin(): 32-bit compatibility 2025-01-16 19:06:56 +01:00
mac_biba MAC: mac_biba, mac_lomac: Fix setting loader tunables 2025-02-13 18:19:56 +08:00
mac_bsdextended MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_ddb mac_ddb: Fix the show rman validator. 2022-08-12 10:20:05 -07:00
mac_do MAC/do: allow to call setuid if real user id is 0 2024-06-27 10:47:06 +02:00
mac_ifoff MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_ipacl MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_lomac MAC: mac_biba, mac_lomac: Fix setting loader tunables 2025-02-13 18:19:56 +08:00
mac_mls MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_none sys: Remove $FreeBSD$: two-line .h pattern 2023-08-16 11:54:11 -06:00
mac_ntpd MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_partition MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_pimd MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_portacl MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_priority MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_seeotheruids MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_stub MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_test MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_veriexec MAC: mac_policy.h: Declare common MAC sysctl and jail parameters' nodes 2025-01-16 19:06:55 +01:00
mac_veriexec_parser sys: Remove $FreeBSD$: one-line .c pattern 2023-08-16 11:54:36 -06:00