| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Change crsetgroups_locked() (called by crsetgroups()) to sort the | Brooks Davis | 2009-06-20 | 1 | -10/+45 |
| * | Rework the credential code to support larger values of NGROUPS and | Brooks Davis | 2009-06-19 | 1 | -35/+135 |
| * | Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC | Robert Watson | 2009-06-05 | 1 | -1/+0 |
| * | Add internal 'mac_policy_count' counter to the MAC Framework, which is a | Robert Watson | 2009-06-02 | 1 | -2/+0 |
| * | Introduce an interm userland-kernel API for creating vnets and | Marko Zec | 2009-05-31 | 1 | -1/+5 |
| * | Add hierarchical jails. A jail may further virtualize its environment | Jamie Gritton | 2009-05-27 | 1 | -19/+10 |
| * | Introduce a new virtualization container, provisionally named vprocg, to hold | Marko Zec | 2009-05-08 | 1 | -0/+10 |
| * | Improve the consistency of MAC Framework and MAC policy entry point | Robert Watson | 2009-03-08 | 1 | -9/+9 |
| * | The userland_sysctl() function retries sysctl_root() until returned | Konstantin Belousov | 2008-12-12 | 1 | -1/+1 |
| * | Retire the MALLOC and FREE macros. They are an abomination unto style(9). | Dag-Erling Smørgrav | 2008-10-23 | 1 | -8/+8 |
| * | Add cr_canseeinpcb() doing checks using the cached socket | Bjoern A. Zeeb | 2008-10-17 | 1 | -0/+35 |
| * | Merge first in a series of TrustedBSD MAC Framework KPI changes | Robert Watson | 2007-10-24 | 1 | -18/+18 |
| * | Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in | Robert Watson | 2007-06-12 | 1 | -39/+20 |
| * | Move per-process audit state from a pointer in the proc structure to | Robert Watson | 2007-06-07 | 1 | -0/+9 |
| * | Further system call comment cleanup: | Robert Watson | 2007-03-05 | 1 | -6/+4 |
| * | Remove 'MPSAFE' annotations from the comments above most system calls: all | Robert Watson | 2007-03-04 | 1 | -97/+3 |
| * | Sort copyrights together. | Robert Watson | 2007-01-08 | 1 | -2/+4 |
| * | Add a new priv(9) kernel interface for checking the availability of | Robert Watson | 2006-11-06 | 1 | -89/+58 |
| * | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | Robert Watson | 2006-10-22 | 1 | -1/+1 |
| * | Declare security and security.bsd sysctl hierarchies in sysctl.h along | Robert Watson | 2006-09-17 | 1 | -3/+1 |
| * | Add kern_setgroups() and kern_getgroups() and use them to implement | John Baldwin | 2006-07-06 | 1 | -25/+42 |
| * | Audit the arguments (user/group IDs) for the system calls that set these IDs. | Wayne Salamon | 2006-02-06 | 1 | -0/+17 |
| * | Use the refcount API to manage the reference count for user credentials | John Baldwin | 2005-09-27 | 1 | -16/+6 |
| * | Introduce p_canwait() and MAC Framework and MAC Policy entry points | Robert Watson | 2005-04-18 | 1 | -0/+31 |
| * | Introduce new MAC Framework and MAC Policy entry points to control the use | Robert Watson | 2005-04-16 | 1 | -53/+137 |
| * | Impose the upper limit on signals that are allowed between kernel threads | Maxim Sobolev | 2005-03-18 | 1 | -2/+2 |
| * | Linuxthreads uses not only signal 32 but several signals >= 32. | Maxim Sobolev | 2005-03-18 | 1 | -5/+5 |
| * | In linux emulation layer try to detect attempt to use linux_clone() to | Maxim Sobolev | 2005-03-03 | 1 | -0/+12 |
| * | Backout addition of SIGTHR into the list of signals allowed to be delivered | Maxim Sobolev | 2005-02-13 | 1 | -1/+0 |
| * | Backout previous change (disabling of security checks for signals delivered | Maxim Sobolev | 2005-02-13 | 1 | -4/+5 |
| * | Split out kill(2) syscall service routine into user-level and kernel part, the | Maxim Sobolev | 2005-02-13 | 1 | -5/+4 |
| * | Add SIGTHR (32) into list of signals permitted to be delivered to the | Maxim Sobolev | 2005-02-11 | 1 | -0/+1 |
| * | Style cleanup: with removal of mutex operations, we can also remove | Robert Watson | 2005-01-23 | 1 | -4/+2 |
| * | When reading pr_securelevel from a prison, perform a lockless read, | Robert Watson | 2005-01-23 | 1 | -4/+0 |
| * | /* -> /*- for copyright notices, minor format tweaks as necessary | Warner Losh | 2005-01-06 | 1 | -1/+1 |
| * | Remove sched_free_thread() which was only used | Julian Elischer | 2004-08-31 | 1 | -13/+0 |
| * | Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is | Colin Percival | 2004-07-26 | 1 | -21/+21 |
| * | In setpgid(), since td is passed in as a system call argument, use it | Robert Watson | 2004-07-23 | 1 | -1/+1 |
| * | suser() accepts a thread argument; as suser() dereferences td_ucred, a | Robert Watson | 2004-07-22 | 1 | -0/+12 |
| * | Add a SUSER_RUID flag to suser_cred. This flag indicates that we want to | Colin Percival | 2004-07-16 | 1 | -3/+2 |
| * | Socket MAC labels so_label and so_peerlabel are now protected by | Robert Watson | 2004-06-13 | 1 | -0/+2 |
| * | Deorbit COMPAT_SUNOS. | Poul-Henning Kamp | 2004-06-11 | 1 | -3/+3 |
| * | Remove advertising clause from University of California Regent's license, | Warner Losh | 2004-04-05 | 1 | -4/+0 |
| * | Don't grab Giant in crfree(), since prison_free() no longer requires it. | Robert Watson | 2004-01-23 | 1 | -3/+1 |
| * | Rename mac_create_cred() MAC Framework entry point to mac_copy_cred(), | Robert Watson | 2003-12-06 | 1 | -1/+1 |
| * | Add a sysctl, security.bsd.see_other_gids, similar in semantics | Robert Watson | 2003-11-17 | 1 | -2/+51 |
| * | Writes to p_flag in __setugid() no longer need Giant. | John Baldwin | 2003-10-23 | 1 | -4/+0 |
| * | Add a new sysctl, security.bsd.conservative_signals, to disable | Robert Watson | 2003-09-14 | 1 | -1/+16 |
| * | Extend the mutex pool implementation to permit the creation and use of | Don Lewis | 2003-07-13 | 1 | -1/+1 |
| * | In setpgrp(), don't assume a pgrp won't exist if the provided pgid is the same | Olivier Houchard | 2003-07-04 | 1 | -12/+13 |
