aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Reconstitute struct mac_policy_ops by breaking out individual functionRobert Watson2006-04-261-296/+575
* Add some new options to mac_bsdestended. We can now match on:David Malone2006-04-232-35/+210
* Introduce a new MAC entry point for label initialization of the NFS daemon'sChristian S.J. Peron2006-04-063-0/+9
* Don't call vn_finished_write() if vn_start_write() failed.Tor Egge2006-03-192-8/+12
* Merge Perforce change 93581 from TrustedBSD audit3 branch:Robert Watson2006-03-199-526/+541
* Merge Perforce changes 93512, 93514, 93515 from TrustedBSD audit3Robert Watson2006-03-193-495/+616
* Merge Perforce change 93570 from TrustedBSD audit3 branch:Robert Watson2006-03-191-0/+10
* Merge Perforce change 93567 from TrustedBSD audit3 branch:Robert Watson2006-03-191-1/+1
* Merge Perforce change 93568 from TrustedBSD audit3 branch:Robert Watson2006-03-192-6/+6
* Merge Perforce change 93506 from TrustedBSD audit3 branch:Robert Watson2006-03-192-2/+98
* Merge perforce 93507:Robert Watson2006-03-181-2/+2
* Merge perforce change 93199:Robert Watson2006-03-184-7/+8
* Create a mac_bsdextended_check_vp function that takes a cred, aDavid Malone2006-03-041-280/+43
* Count drops when the first of two pipe mallocs fails.Robert Watson2006-03-041-0/+1
* Update src/sys/security/audit for OpenBSM 1.0 alpha 5:Robert Watson2006-03-043-15/+6
* Eliminate a deadlock when creating snapshots. Blocking vn_start_write() mustTor Egge2006-03-021-0/+3
* Add stub AUE_EACCESS entry.Robert Watson2006-02-111-0/+1
* Initialize user process audit ID to AU_DEFAUDITID so that init andRobert Watson2006-02-111-0/+1
* Acquire vnode lock around call to VOP_GETATTR() in audit_record_write().Robert Watson2006-02-071-0/+2
* Fix queue drop logic when the queue overflows: decrement queue length.Robert Watson2006-02-071-0/+1
* Add support for audit pipe special devices, which allow user spaceRobert Watson2006-02-063-0/+550
* Manage audit record memory with the slab allocator, turningRobert Watson2006-02-061-100/+85
* When GC'ing a thread, assert that it has no active audit record.Robert Watson2006-02-052-0/+11
* Cast pointers to (uintptr_t) before down-casting to (int). This avoidsRobert Watson2006-02-041-7/+8
* Fix INVARIANTS build on amd64; (unsigned unsigned long) != u_int64_t.Robert Watson2006-02-031-2/+2
* Remove user.h include in audit.h, it is unneeded, and also can causeRobert Watson2006-02-031-1/+0
* Add new fields to process-related data structures:Robert Watson2006-02-022-0/+11
* Import kernel audit framework:Robert Watson2006-02-019-0/+6228
* Fix potential overrun of static stack allocated array which storesChristian S.J. Peron2006-01-151-1/+1
* Introduce a new sysctl variable:Christian S.J. Peron2005-12-311-1/+6
* Normalize a significant number of kernel malloc type names:Robert Watson2005-10-312-2/+2
* Lock object while we iterate through it's backing objects.Christian S.J. Peron2005-10-091-6/+7
* Use the correct object's backing_object_offset while calculating offsets.Christian S.J. Peron2005-10-041-1/+4
* Standard Giant push down operations for the Mandatory Access Control (MAC)Christian S.J. Peron2005-10-042-68/+54
* Conditionally pickup Giant in mac_cred_mmapped_drop_perms_recurse soChristian S.J. Peron2005-10-041-2/+6
* Complete removal of mac_create_root_mount/mpo_create_root_mount MACRobert Watson2005-10-022-3/+0
* Allow the root user to be aware of other credentials by virtueTom Rhodes2005-09-301-2/+12
* Add #include <sys/sx.h>, devfs is going to require this shortly.Poul-Henning Kamp2005-09-197-0/+7
* Remove mac_create_root_mount() and mpo_create_root_mount(), whichRobert Watson2005-09-196-69/+0
* Insert a series of place-holder function pointers in mac_policy.h forRobert Watson2005-08-081-0/+25
* If a "hole" opens up in the ruleset (i.e.: remove 5), do not returnTom Rhodes2005-07-281-5/+2
* Remove duplicate initialization of mpo_create_stub pointer.Robert Watson2005-07-211-1/+0
* Bump the module versions of the MAC Framework and MAC policy modulesRobert Watson2005-07-143-3/+11
* When devfs cloning takes place, provide access to the credential of theRobert Watson2005-07-148-15/+27
* Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which isRobert Watson2005-07-058-102/+12
* Add MAC Framework and MAC policy entry point mac_check_socket_create(),Robert Watson2005-07-054-0/+40
* Correct grammar error in commentChristian S.J. Peron2005-06-101-1/+1
* Gratuitous renaming of four System V Semaphore MAC Framework entryRobert Watson2005-06-077-56/+56
* Introduce MAC Framework and MAC Policy entry points to label and controlRobert Watson2005-05-047-0/+462
* Get the directory structure correct in a comment.Tom Rhodes2005-04-222-2/+4
generated by cgit v1.3 (git 2.53.0) at 2026-08-05 22:28:48 +0000