| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Use td_ucred in several trivial syscalls and remove Giant locking as | John Baldwin | 2002-03-22 | 1 | -32/+16 |
| * | Use explicit Giant locks and unlocks for rather than instrumented ones for | John Baldwin | 2002-03-22 | 1 | -6/+5 |
| * | Merge from TrustedBSD MAC branch: | Robert Watson | 2002-03-22 | 1 | -0/+23 |
| * | Since cred never appears to be passed into the securelevel calls as | Robert Watson | 2002-03-22 | 1 | -2/+2 |
| * | Break out the "see_other_uids" policy check from the various | Robert Watson | 2002-03-22 | 1 | -4/+28 |
| * | - Push down Giant into crfree() in the case that we actually free a ucred. | John Baldwin | 2002-03-20 | 1 | -0/+15 |
| * | Stop abusing the pgrpsess_lock. | Seigo Tanimura | 2002-03-11 | 1 | -2/+0 |
| * | Temporarily lock Giant while we update td_ucred. The proc lock doesn't | John Baldwin | 2002-02-27 | 1 | -6/+6 |
| * | Return ESRCH if the target process is not inferior to the curproc. | Seigo Tanimura | 2002-02-27 | 1 | -0/+2 |
| * | Introduce a version field to `struct xucred' in place of one of the | Dima Dorfman | 2002-02-27 | 1 | -0/+16 |
| * | Lock struct pgrp, session and sigio. | Seigo Tanimura | 2002-02-23 | 1 | -38/+124 |
| * | replace the embedded cr_mtx in the ucred structure with cr_mtxp (a mutex | Matthew Dillon | 2002-02-17 | 1 | -9/+11 |
| * | If the credential on an incoming thread is correct, don't bother | Julian Elischer | 2002-02-17 | 1 | -0/+21 |
| * | - Attempt to help declutter kern. sysctl by moving security out from | Andrew R. Reiter | 2002-01-16 | 1 | -8/+7 |
| * | - Push much of the logic for p_cansignal() behind cr_cansignal, which | Robert Watson | 2002-01-06 | 1 | -30/+45 |
| * | o A few more minor whitespace and other style fixes. | Robert Watson | 2001-12-06 | 1 | -6/+7 |
| * | o Remove unnecessary inclusion of opt_global.h. | Robert Watson | 2001-12-06 | 1 | -1/+0 |
| * | o Make kern.security.bsd.suser_enabled TUNABLE. | Robert Watson | 2001-12-05 | 1 | -0/+1 |
| * | o Update an instance of 'unprivileged_procdebug_permitted' missed | Robert Watson | 2001-12-03 | 1 | -6/+6 |
| * | o Introduce pr_mtx into struct prison, providing protection for the | Robert Watson | 2001-12-03 | 1 | -2/+8 |
| * | o Uniformly copy uap arguments into local variables before grabbing | Robert Watson | 2001-12-02 | 1 | -3/+1 |
| * | o Remove KSE race in setuid() in which oldcred was preserved before giant | Robert Watson | 2001-12-02 | 1 | -1/+1 |
| * | o General style, formatting, etc, improvements: | Robert Watson | 2001-12-02 | 1 | -167/+107 |
| * | o Further sysctl name simplification, generally stripping 'permitted', | Robert Watson | 2001-11-30 | 1 | -9/+9 |
| * | o Move current inhabitants of kern.security to kern.security.bsd, so | Robert Watson | 2001-11-30 | 1 | -14/+16 |
| * | Clean up breakage in inferior() I introduced in 1.92 of kern_proc.c: | John Baldwin | 2001-11-12 | 1 | -0/+3 |
| * | o Introduce group subset test, which limits the ability of a process to | Robert Watson | 2001-11-02 | 1 | -8/+36 |
| * | o Add a comment to p_candebug() noting that the P_INEXEC check should | Robert Watson | 2001-11-02 | 1 | -1/+6 |
| * | o Capabilities cap_check() interface revised to remove _xxx, so rename | Robert Watson | 2001-11-02 | 1 | -1/+1 |
| * | Add a P_INEXEC flag that indicates that the process has called execve() and | Dag-Erling Smørgrav | 2001-10-27 | 1 | -0/+4 |
| * | Add mtx_lock_giant() and mtx_unlock_giant() wrappers for sysctl management | Matthew Dillon | 2001-10-26 | 1 | -6/+9 |
| * | Change the kernel's ucred API as follows: | John Baldwin | 2001-10-11 | 1 | -22/+29 |
| * | Whitespace fixes. | John Baldwin | 2001-10-11 | 1 | -2/+2 |
| * | Rework some code to be a bit simpler by inverting a few tests and using | John Baldwin | 2001-10-11 | 1 | -22/+12 |
| * | Add a temporary hack that will go away with the ucred API update to bzero | John Baldwin | 2001-10-10 | 1 | -0/+1 |
| * | - Combine kern.ps_showallprocs and kern.ipc.showallsockets into | Robert Watson | 2001-10-09 | 1 | -2/+12 |
| * | o Recent addition of (p1==p2) exception in p_candebug() permitted | Robert Watson | 2001-10-09 | 1 | -2/+9 |
| * | Always succeed if the target process is the same as the requesting process. | Dag-Erling Smørgrav | 2001-10-07 | 1 | -0/+3 |
| * | o When performing a securelevel check as part of securelevel_ge() or | Robert Watson | 2001-09-26 | 1 | -8/+15 |
| * | o So, when <dd> e-mailed me and said that the comment was inverted | Robert Watson | 2001-09-25 | 1 | -6/+6 |
| * | o Rename u_cansee() to cr_cansee(), making the name more comprehensible | Robert Watson | 2001-09-20 | 1 | -3/+3 |
| * | o Clarification of securelevel_{ge,gt} comment. | Robert Watson | 2001-09-19 | 1 | -2/+2 |
| * | o Introduce two new calls, securelevel_gt() and securelevel_ge(), which | Robert Watson | 2001-09-18 | 1 | -3/+57 |
| * | KSE Milestone 2 | Julian Elischer | 2001-09-12 | 1 | -75/+124 |
| * | Giant Pushdown. Saved the worst P4 tree breakage for last. | Matthew Dillon | 2001-09-01 | 1 | -80/+271 |
| * | o Screw over users of the kern.{security.,}suser_permitted sysctl again, | Robert Watson | 2001-08-31 | 1 | -5/+5 |
| * | o Improve the style of a number of routines and comments in kern_prot.c, | Robert Watson | 2001-08-28 | 1 | -66/+62 |
| * | Fix typos in recent comments. | Robert Watson | 2001-08-28 | 1 | -2/+2 |
| * | Generally improve documentation of kern_prot.c: | Robert Watson | 2001-08-27 | 1 | -10/+65 |
| * | o Modify p_candebug() such that there is no longer automatic acceptance | Robert Watson | 2001-07-31 | 1 | -3/+0 |
