src/sys/security, branch upstream/10.4.0

MFC r319890: Correct bitwise test in mac_bsdextended ugidfw_rule_valid()

2017-07-16T19:25:18Z

PR: 218039 CID: 1008934 Reported by: Coverity, PVS-Studio Sponsored by: The FreeBSD Foundation

MFC r292384:

2016-06-27T22:10:07Z

Fix style issues around existing SDT probes. ** Changes to sys/netinet/in_kdtrace.c and sys/netinet/in_kdtrace.h skipped.

MFC r280130:

2016-06-27T21:25:01Z

cred: add proc_set_cred helper

MFC r280121:

2016-06-27T20:38:38Z

audit: fix cred assignment when A_SETPMASK is used

MFC r294137:

2016-01-23T07:35:29Z

Do not panic when the filesystem which carries the audit files, is unmounted and audit is active. Do not write to the suspended fs.

MFH: r292522

2016-01-04T16:51:56Z

Merge from contrib/openbsm to bring the kernel audit bits up to date with OpenBSM 1.2 alpha 4: - remove $P4$ - fix a comment

Merge r263233 from HEAD to stable/10:

2015-03-19T13:37:36Z

Update kernel inclusions of capability.h to use capsicum.h instead; some further refinement is required as some device drivers intended to be portable over FreeBSD versions rely on __FreeBSD_version to decide whether to include capability.h. Sponsored by: Google, Inc.

MFC r259885:

2014-08-16T13:11:59Z

As constantly reported during kernel compilation, m_buflen is unsigned so can never be < 0. Remove the expression, which can never be true.

MFC r263458:

2014-03-31T02:24:29Z

audit: plug FILEDESC_LOCK leak in audit_canon_path.

MFC r258622: dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2014-01-17T10:58:59Z