| Commit message (Expand) | Author | Age | Files | Lines |
| * | Include file cleanup; mac.h and malloc.h at one point had ordering | Robert Watson | 2002-08-01 | 1 | -1/+1 |
| * | Introduce support for Mandatory Access Control and extensible | Robert Watson | 2002-07-31 | 1 | -3/+21 |
| * | Introduce support for Mandatory Access Control and extensible | Robert Watson | 2002-07-31 | 1 | -0/+11 |
| * | Revert removal of cred_free_thread(): It is used to ensure that a thread's | Jonathan Mini | 2002-07-11 | 1 | -0/+13 |
| * | More caddr_t removal, make fo_ioctl take a void * instead of a caddr_t. | Alfred Perlstein | 2002-06-29 | 1 | -20/+17 |
| * | Remove unused diagnostic function cread_free_thread(). | Jonathan Mini | 2002-06-24 | 1 | -13/+0 |
| * | Squish the "could sleep with process lock" messages caused by calling | Alfred Perlstein | 2002-06-19 | 1 | -14/+40 |
| * | setsugid() touches p->p_flag so assert that the proc is locked. | Alfred Perlstein | 2002-06-18 | 1 | -0/+2 |
| * | Change p_can{debug,see,sched,signal}()'s first argument to be a thread | John Baldwin | 2002-05-19 | 1 | -60/+69 |
| * | As malloc(9) and free(9) are now Giant-free, remove the Giant lock | Seigo Tanimura | 2002-05-03 | 1 | -16/+5 |
| * | Push down Giant for setpgid(), setsid() and aio_daemon(). Giant protects only | Seigo Tanimura | 2002-04-20 | 1 | -11/+14 |
| * | - Lock proctree_lock instead of pgrpsess_lock. | John Baldwin | 2002-04-16 | 1 | -35/+20 |
| * | - Change the algorithms of the syscalls to modify process credentials to | John Baldwin | 2002-04-13 | 1 | -83/+137 |
| * | - Axe a stale comment. We haven't allowed the ucred pointer passed to | John Baldwin | 2002-04-03 | 1 | -9/+2 |
| * | Change the suser() API to take advantage of td_ucred as well as do a | John Baldwin | 2002-04-01 | 1 | -53/+32 |
| * | Whitespace only change: use ANSI function declarations instead of K&R. | John Baldwin | 2002-04-01 | 1 | -130/+46 |
| * | Fix style bug in previous commit. | John Baldwin | 2002-04-01 | 1 | -1/+1 |
| * | Compromise for critical*()/cpu_critical*() recommit. Cleanup the interrupt | Matthew Dillon | 2002-03-27 | 1 | -12/+11 |
| * | Use td_ucred in several trivial syscalls and remove Giant locking as | John Baldwin | 2002-03-22 | 1 | -32/+16 |
| * | Use explicit Giant locks and unlocks for rather than instrumented ones for | John Baldwin | 2002-03-22 | 1 | -6/+5 |
| * | Merge from TrustedBSD MAC branch: | Robert Watson | 2002-03-22 | 1 | -0/+23 |
| * | Since cred never appears to be passed into the securelevel calls as | Robert Watson | 2002-03-22 | 1 | -2/+2 |
| * | Break out the "see_other_uids" policy check from the various | Robert Watson | 2002-03-22 | 1 | -4/+28 |
| * | - Push down Giant into crfree() in the case that we actually free a ucred. | John Baldwin | 2002-03-20 | 1 | -0/+15 |
| * | Stop abusing the pgrpsess_lock. | Seigo Tanimura | 2002-03-11 | 1 | -2/+0 |
| * | Temporarily lock Giant while we update td_ucred. The proc lock doesn't | John Baldwin | 2002-02-27 | 1 | -6/+6 |
| * | Return ESRCH if the target process is not inferior to the curproc. | Seigo Tanimura | 2002-02-27 | 1 | -0/+2 |
| * | Introduce a version field to `struct xucred' in place of one of the | Dima Dorfman | 2002-02-27 | 1 | -0/+16 |
| * | Lock struct pgrp, session and sigio. | Seigo Tanimura | 2002-02-23 | 1 | -38/+124 |
| * | replace the embedded cr_mtx in the ucred structure with cr_mtxp (a mutex | Matthew Dillon | 2002-02-17 | 1 | -9/+11 |
| * | If the credential on an incoming thread is correct, don't bother | Julian Elischer | 2002-02-17 | 1 | -0/+21 |
| * | - Attempt to help declutter kern. sysctl by moving security out from | Andrew R. Reiter | 2002-01-16 | 1 | -8/+7 |
| * | - Push much of the logic for p_cansignal() behind cr_cansignal, which | Robert Watson | 2002-01-06 | 1 | -30/+45 |
| * | o A few more minor whitespace and other style fixes. | Robert Watson | 2001-12-06 | 1 | -6/+7 |
| * | o Remove unnecessary inclusion of opt_global.h. | Robert Watson | 2001-12-06 | 1 | -1/+0 |
| * | o Make kern.security.bsd.suser_enabled TUNABLE. | Robert Watson | 2001-12-05 | 1 | -0/+1 |
| * | o Update an instance of 'unprivileged_procdebug_permitted' missed | Robert Watson | 2001-12-03 | 1 | -6/+6 |
| * | o Introduce pr_mtx into struct prison, providing protection for the | Robert Watson | 2001-12-03 | 1 | -2/+8 |
| * | o Uniformly copy uap arguments into local variables before grabbing | Robert Watson | 2001-12-02 | 1 | -3/+1 |
| * | o Remove KSE race in setuid() in which oldcred was preserved before giant | Robert Watson | 2001-12-02 | 1 | -1/+1 |
| * | o General style, formatting, etc, improvements: | Robert Watson | 2001-12-02 | 1 | -167/+107 |
| * | o Further sysctl name simplification, generally stripping 'permitted', | Robert Watson | 2001-11-30 | 1 | -9/+9 |
| * | o Move current inhabitants of kern.security to kern.security.bsd, so | Robert Watson | 2001-11-30 | 1 | -14/+16 |
| * | Clean up breakage in inferior() I introduced in 1.92 of kern_proc.c: | John Baldwin | 2001-11-12 | 1 | -0/+3 |
| * | o Introduce group subset test, which limits the ability of a process to | Robert Watson | 2001-11-02 | 1 | -8/+36 |
| * | o Add a comment to p_candebug() noting that the P_INEXEC check should | Robert Watson | 2001-11-02 | 1 | -1/+6 |
| * | o Capabilities cap_check() interface revised to remove _xxx, so rename | Robert Watson | 2001-11-02 | 1 | -1/+1 |
| * | Add a P_INEXEC flag that indicates that the process has called execve() and | Dag-Erling Smørgrav | 2001-10-27 | 1 | -0/+4 |
| * | Add mtx_lock_giant() and mtx_unlock_giant() wrappers for sysctl management | Matthew Dillon | 2001-10-26 | 1 | -6/+9 |
| * | Change the kernel's ucred API as follows: | John Baldwin | 2001-10-11 | 1 | -22/+29 |