aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* sys: Automated cleanup of cdefs and other formattingWarner Losh2023-11-2718-18/+0
* Remove gratuitous copyouts of unchanged struct mac.Brooks Davis2023-11-134-9/+10
* veriexec: Simplify the initialization of loader tunableZhenlei Huang2023-11-031-6/+2
* cr_canseejailproc(): New privilege, no direct check for UID 0Olivier Certner2023-09-282-0/+2
* mac_ipacl: Use IfAPIJustin Hibbits2023-08-251-4/+4
* Add mac_grantbylabelSimon J. Gerraty2023-08-252-0/+569
* sys: Remove $FreeBSD$: one-line .c patternWarner Losh2023-08-1635-70/+0
* sys: Remove $FreeBSD$: two-line .h patternWarner Losh2023-08-1628-56/+0
* mac_ipacl: new MAC policy module to limit jail/vnet IP configurationShivank Garg2023-07-265-0/+496
* mac_veriexec ensure label fields are initializedSimon J. Gerraty2023-07-061-4/+2
* veriexec: Do not save error from file info in fingerprint statusStephen J. Kiernan2023-06-091-3/+3
* mac: Honor order when registering MAC modules.Steve Kiernan2023-04-181-22/+16
* veriexec: Add function to get label associated with a fileSteve Kiernan2023-04-172-0/+27
* veriexec: Add option MAC_VERIEXEC_DEBUGSteve Kiernan2023-04-173-5/+6
* veriexec: mac_veriexec_syscall compat32 supportSimon J. Gerraty2023-04-171-0/+62
* veriexec: Additional functionality for MAC/veriexecSteve Kiernan2023-04-174-32/+144
* veriexec: Add SPDX-License-IdentifierStephen J. Kiernan2023-04-179-18/+18
* mac_veriexec: add mac_priv_grant check for NODEVSimon J. Gerraty2023-04-162-1/+38
* kdb: Modify securelevel policyMark Johnston2023-03-302-0/+10
* vfs: retire KERN_VNODEMateusz Guzik2023-03-171-1/+0
* veriexec: Improve commentsWarner Losh2023-03-151-14/+15
* Increase protection provided by veriexec with new unlink/rename hooks.dl2023-03-141-8/+155
* IfAPI: Add if_get/setmaclabel() and use it.Justin Hibbits2023-01-317-27/+27
* vfs: stop using NDFREEMateusz Guzik2022-12-191-3/+4
* mac_lomac: whack giant usageMateusz Guzik2022-11-151-7/+0
* Bump MAC_VERSION to 5Allan Jude2022-10-071-1/+2
* vfs: introduce V_PCATCH to stop abusing PCATCHMateusz Guzik2022-09-171-2/+2
* mac_veriexec_parser: fix build after 7e1d3eefd410.Dag-Erling Smørgrav2022-09-091-1/+1
* protosw: refactor protosw and domain static declaration and loadGleb Smirnoff2022-08-171-2/+2
* mac: cheaper check for mac_pipe_check_readMateusz Guzik2022-08-173-2/+20
* mac_ddb: Fix the show rman validator.John Baldwin2022-08-121-1/+1
* mac: s/0/false/ in macros denoting probe enablementMateusz Guzik2022-08-111-14/+14
* AST: reworkKonstantin Belousov2022-08-021-4/+15
* Revert "mac_ddb: Make db_show_vnet_valid() handle !VIMAGE"Allan Jude2022-07-211-4/+0
* mac_ddb: Make db_show_vnet_valid() handle !VIMAGEAllan Jude2022-07-211-0/+4
* mac_ddb: Only include the vnet validator in VIMAGE kernels.John Baldwin2022-07-201-0/+6
* mac_ddb: add some validation functionsMitchell Horne2022-07-181-0/+101
* mac: add new mac_ddb(4) policyMitchell Horne2022-07-181-0/+266
* mac: kdb/ddb framework hooksMitchell Horne2022-07-185-0/+166
* mac_veriexec: Authorize reads of secured sysctlsWojciech Macek2022-06-291-1/+1
* sysent: Get rid of bogus sys/sysent.h include.Dmitry Chagin2022-05-281-1/+0
* mac_pimd: Support for privilege drop in pimdWojciech Macek2022-04-201-0/+75
* audit: Initialize vattr fields before calling VOP_GETATTRMark Johnston2022-03-281-0/+1
* mac_veriexec: Fix a typo in a source code commentGordon Bergling2022-03-271-1/+1
* vfs: NDFREE(&nd, NDF_ONLY_PNBUF) -> NDFREE_PNBUF(&nd)Mateusz Guzik2022-03-243-4/+4
* Thread creation privilege for realtime groupFlorian Walpen2021-12-141-2/+2
* Add idle priority scheduling privilege group to MAC/priorityFlorian Walpen2021-12-101-1/+16
* Add PRIV_SCHED_IDPRIOFlorian Walpen2021-12-102-0/+2
* MAC/priority module for realtime privilege groupFlorian Walpen2021-12-041-0/+68
* vfs: remove the unused thread argument from NDINIT*Mateusz Guzik2021-11-253-5/+5
generated by cgit v1.2.3 (git 2.25.1) at 2024-06-04 15:34:37 +0000