aboutsummaryrefslogtreecommitdiff
path: root/sys/kern/kern_prot.c
Commit message (Expand)AuthorAgeFilesLines
* MFC r243021:Baptiste Daroussin2012-12-141-0/+2
* MFC r243022:Baptiste Daroussin2012-11-151-1/+1
* MFC: r183982Bjoern A. Zeeb2008-10-311-0/+35
* Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); inRobert Watson2007-06-121-39/+20
* Move per-process audit state from a pointer in the proc structure toRobert Watson2007-06-071-0/+9
* Further system call comment cleanup:Robert Watson2007-03-051-6/+4
* Remove 'MPSAFE' annotations from the comments above most system calls: allRobert Watson2007-03-041-97/+3
* Sort copyrights together.Robert Watson2007-01-081-2/+4
* Add a new priv(9) kernel interface for checking the availability ofRobert Watson2006-11-061-89/+58
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson2006-10-221-1/+1
* Declare security and security.bsd sysctl hierarchies in sysctl.h alongRobert Watson2006-09-171-3/+1
* Add kern_setgroups() and kern_getgroups() and use them to implementJohn Baldwin2006-07-061-25/+42
* Audit the arguments (user/group IDs) for the system calls that set these IDs.Wayne Salamon2006-02-061-0/+17
* Use the refcount API to manage the reference count for user credentialsJohn Baldwin2005-09-271-16/+6
* Introduce p_canwait() and MAC Framework and MAC Policy entry pointsRobert Watson2005-04-181-0/+31
* Introduce new MAC Framework and MAC Policy entry points to control the useRobert Watson2005-04-161-53/+137
* Impose the upper limit on signals that are allowed between kernel threadsMaxim Sobolev2005-03-181-2/+2
* Linuxthreads uses not only signal 32 but several signals >= 32.Maxim Sobolev2005-03-181-5/+5
* In linux emulation layer try to detect attempt to use linux_clone() toMaxim Sobolev2005-03-031-0/+12
* Backout addition of SIGTHR into the list of signals allowed to be deliveredMaxim Sobolev2005-02-131-1/+0
* Backout previous change (disabling of security checks for signals deliveredMaxim Sobolev2005-02-131-4/+5
* Split out kill(2) syscall service routine into user-level and kernel part, theMaxim Sobolev2005-02-131-5/+4
* Add SIGTHR (32) into list of signals permitted to be delivered to theMaxim Sobolev2005-02-111-0/+1
* Style cleanup: with removal of mutex operations, we can also removeRobert Watson2005-01-231-4/+2
* When reading pr_securelevel from a prison, perform a lockless read,Robert Watson2005-01-231-4/+0
* /* -> /*- for copyright notices, minor format tweaks as necessaryWarner Losh2005-01-061-1/+1
* Remove sched_free_thread() which was only usedJulian Elischer2004-08-311-13/+0
* Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This isColin Percival2004-07-261-21/+21
* In setpgid(), since td is passed in as a system call argument, use itRobert Watson2004-07-231-1/+1
* suser() accepts a thread argument; as suser() dereferences td_ucred, aRobert Watson2004-07-221-0/+12
* Add a SUSER_RUID flag to suser_cred. This flag indicates that we want toColin Percival2004-07-161-3/+2
* Socket MAC labels so_label and so_peerlabel are now protected byRobert Watson2004-06-131-0/+2
* Deorbit COMPAT_SUNOS.Poul-Henning Kamp2004-06-111-3/+3
* Remove advertising clause from University of California Regent's license,Warner Losh2004-04-051-4/+0
* Don't grab Giant in crfree(), since prison_free() no longer requires it.Robert Watson2004-01-231-3/+1
* Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(),Robert Watson2003-12-061-1/+1
* Add a sysctl, security.bsd.see_other_gids, similar in semanticsRobert Watson2003-11-171-2/+51
* Writes to p_flag in __setugid() no longer need Giant.John Baldwin2003-10-231-4/+0
* Add a new sysctl, security.bsd.conservative_signals, to disableRobert Watson2003-09-141-1/+16
* Extend the mutex pool implementation to permit the creation and use ofDon Lewis2003-07-131-1/+1
* In setpgrp(), don't assume a pgrp won't exist if the provided pgid is the sameOlivier Houchard2003-07-041-12/+13
* At this point targp will always be NULL, so remove the useless if.Olivier Houchard2003-06-251-2/+0
* Various cr*() calls believed to be MPSAFE, since the uidinfoRobert Watson2003-06-151-0/+8
* Use __FBSDID().David E. O'Brien2003-06-111-1/+3
* The issetugid() function is MPSAFE.John Baldwin2003-06-091-1/+1
* Remove Giant from the setuid(), seteuid(), setgid(), setegid(),John Baldwin2003-05-011-30/+0
* Remove Giant from getpgid() and getsid() and tweak the logic to moreJohn Baldwin2003-04-251-30/+28
* Back out M_* changes, per decision of the TRB.Warner Losh2003-02-191-4/+4
* Remove mtx_lock_giant from functions which are mp-safe.Jake Burkholder2003-02-101-9/+0
* Remove M_TRYWAIT/M_WAITOK/M_WAIT. Callers should use 0.Alfred Perlstein2003-01-211-4/+4