summaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* MFC r361313:Ryan Moeller2020-05-282-4/+3
* MFC r343111,343113-343115 (by mckusick):Alexander Motin2020-01-301-0/+7
* MFC r345830: Create kernel module to parse Veriexec manifest based on envsMarcin Wojtas2019-04-261-0/+474
* Rework the logic around quick checks for auditing that take place atRobert Watson2018-10-026-44/+103
* The kernel DTrace audit provider (dtaudit) relies on auditd(8) to loadRobert Watson2018-09-031-8/+83
* Require that MAC label buffers be able to store a non-empty string.Mark Johnston2018-08-011-1/+3
* fix incorrect operator in the AUDITPIPE_SET_QLIMIT bounds checkAndriy Gapon2018-07-231-1/+1
* Fix audit of chflagsat, lgetfh, and setfibAlan Somers2018-07-221-0/+3
* Make it possible to run ntpd as a non-root user, add ntpd uid and gid.Ian Lepore2018-07-191-0/+77
* auditon(2): fix A_SETPOLICY with 64-bit valuesAlan Somers2018-07-151-1/+1
* Add mpo_vnode_check_setmode MAC method to MAC/veriexec.Stephen J. Kiernan2018-07-141-0/+33
* Fix a typo which could cause a build breakage when building with MAC/veriexecStephen J. Kiernan2018-07-142-2/+1
* Remove RIPEMD-160 fingerprint modules for veriexec, since it has veryStephen J. Kiernan2018-07-141-45/+0
* Fix build breakage in veriexec for 32-bit architectures.Stephen J. Kiernan2018-06-202-23/+28
* MAC/veriexec implements a verified execution environment using the MACStephen J. Kiernan2018-06-2010-0/+2454
* audit(4): fix the definition of ARG_TERMID_ADDRAlan Somers2018-06-131-1/+1
* #include <bsm/audit.h> in security/audit/audit_ioctl.hAlan Somers2018-05-301-0/+2
* Fix "Bad tailq" panic when auditing auditon(A_SETCLASS, ...)Alan Somers2018-05-281-1/+0
* Use an accessor function to access ifr_data.Brooks Davis2018-03-301-2/+2
* audit(4): fix a typo in a commentAlan Somers2018-03-171-1/+1
* mac_portacl(4): stop panicing INVARIANTS-enabled kernel by loading .koEugene Grosbein2018-02-251-0/+1
* Reduce duplication in __mac_*_(file|link)(2) implementation.Brooks Davis2018-02-151-97/+27
* Do pass removing some write-only variables from the kernel.Alexander Kabaev2017-12-251-2/+0
* sys: further adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-2013-1/+27
* Sprinkle __read_frequently on few obvious places.Mateusz Guzik2017-09-061-1/+1
* Correct bitwise test in mac_bsdextended ugidfw_rule_valid()Ed Maste2017-06-131-1/+1
* Commit the 64-bit inode project.Konstantin Belousov2017-05-231-4/+4
* Break audit_bsm_klib.c into two files: one (audit_bsm_klib.c)Robert Watson2017-04-032-271/+330
* Correct macro names and signatures for !AUDIT versions of canonicalRobert Watson2017-03-311-2/+2
* Audit arguments to POSIX message queues, semaphores, and shared memory.Robert Watson2017-03-312-0/+56
* Audit arguments to System V IPC system calls implementing sempahores,Robert Watson2017-03-301-0/+30
* Various BSM generation improvements when auditing AUE_ACCEPT,Robert Watson2017-03-301-6/+68
* Don't ifdef KDTRACE_HOOKS struct, variable, and function prototypeRobert Watson2017-03-301-8/+0
* When handling msgsys(2), semsys(2), and shmsys(2) multiplex system calls,Robert Watson2017-03-295-3/+118
* Add an experimental DTrace audit provider, which allows users of DTrace toRobert Watson2017-03-295-15/+700
* Introduce an audit event identifier -> audit event name mappingRobert Watson2017-03-274-1/+216
* Extend comment describing path canonicalisation in audit.Robert Watson2017-03-271-1/+2
* Audit 'fd' and 'cmd' arguments to fcntl(2), and when generating BSM,Robert Watson2016-11-221-4/+1
* Fix improper use of "its".Bryan Drewery2016-11-081-1/+1
* Don't check aq64_minfree which is unsigned for negative values.John Baldwin2016-09-081-2/+2
* Audit the accepted (or rejected) username argument to setlogin(2).Robert Watson2016-08-202-2/+8
* Add AUE_WAIT6 handling to the BSM conversion switch statement, reusingRobert Watson2016-07-111-0/+1
* Implement AUE_PREAD and AUE_PWRITE BSM conversion support, eliminatingRobert Watson2016-06-131-0/+2
* sys/security: minor spelling fixes.Pedro F. Giffuni2016-05-067-7/+7
* sys: use our nitems() macro when param.h is available.Pedro F. Giffuni2016-04-212-4/+2
* Remove slightly used const values that can be replaced with nitems().Pedro F. Giffuni2016-04-212-7/+4
* audit(8): leave unsigned comparison for last.Pedro F. Giffuni2016-04-081-2/+2
* Busy the mount point which is the owner of the audit vnode, aroundKonstantin Belousov2016-01-161-15/+45
* Move the funsetown(9) call from audit_pipe_close() to cdevprivKonstantin Belousov2016-01-131-25/+4
* Merge from contrib/openbsm to bring the kernel audit bits up to date with Ope...Christian Brueffer2015-12-205-10/+0