aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* In preparation for 7.0 privilege cleanup, clean up style:Robert Watson2007-07-052-87/+32
* Fix a bunch of warnings due to a missing forward declaration of a struct.Peter Wemm2007-07-051-0/+1
* Remove two boot printfs generated by Audit to announce it's presence,Robert Watson2007-07-012-2/+4
* - Add audit_arg_audinfo_addr() for auditing the arguments for setaudit_addr(2)Christian S.J. Peron2007-06-275-6/+67
* Add a new MAC framework and policy entry point,Robert Watson2007-06-266-1/+38
* In setaudit_addr(), drop the process lock in error cases.Robert Watson2007-06-151-0/+1
* Spell statistics more correctly in comments.Robert Watson2007-06-141-1/+1
* Include priv.h to pick up suser(9) definitions, missed in an earlierRobert Watson2007-06-131-0/+1
* Close a very narrow race that might cause a trigger allocation to beRobert Watson2007-06-131-7/+6
* Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); inRobert Watson2007-06-122-4/+2
* Clean up, and sometimes remove, a number of audit-related implementationRobert Watson2007-06-113-32/+3
* Move per-process audit state from a pointer in the proc structure toRobert Watson2007-06-074-162/+133
* Commit 14/14 of sched_lock decomposition.Jeff Roberson2007-06-051-2/+2
* Clean up audit comments--formatting, spelling, etc.Robert Watson2007-06-018-74/+70
* Change the VOP_OPEN(), vn_open() vnode operation and d_fdopen() cdev operationKonstantin Belousov2007-06-011-1/+1
* Remove AUDIT_PRINTF() debugging statements and definition; clean up orRobert Watson2007-06-013-55/+10
* Remove unused !AUDIT audit_proc_*() prototypes: unlike in Mac OS X, weRobert Watson2007-05-302-23/+0
* Synchronize white space to congruent user-space code in OpenBSM.Robert Watson2007-05-301-0/+2
* Remove unused ar_subj_comm field from in-kernel audit record; we neverRobert Watson2007-05-302-2/+0
* Consistent white space after .'s in comments.Robert Watson2007-05-301-3/+3
* No need to force __inline__ of currecord(), as the compiler will usefullyRobert Watson2007-05-231-1/+1
* Short name of kernel audit worker thread from "audit_worker" to "audit".Robert Watson2007-05-211-1/+1
* Don't expose #ifdef NOTYET parts to userspace via audit_ioctl.h, justRobert Watson2007-04-291-3/+0
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-238-51/+49
* Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson2007-04-2310-1001/+995
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-228-395/+384
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-227-115/+54
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-227-183/+387
* Further MAC test policy cleanup and enhancement:Robert Watson2007-04-221-141/+478
* Perform overdue clean up mac_test policy:Robert Watson2007-04-221-717/+474
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-2110-8/+446
* Remove $P4$ that snuck into CVS from Perforce.Robert Watson2007-04-171-1/+0
* Merge OpenBSM 1.0 alpha 14 changes to src/sys/security/audit:Robert Watson2007-04-161-13/+184
* Fix the handling of IPv6 addresses for subject and process BSM auditChristian S.J. Peron2007-04-137-33/+104
* Replace custom file descriptor array sleep lock constructed using a mutexRobert Watson2007-04-041-2/+2
* Remove 'MPSAFE' annotations from the comments above most system calls: allRobert Watson2007-03-043-47/+0
* More unnecessary include reduction.Robert Watson2007-02-237-90/+12
* Remove many unneeded includes, update copyright.Robert Watson2007-02-231-29/+2
* Remove empty entry point functions (init, destroy, syscall) fromRobert Watson2007-02-232-32/+0
* mac_none sample policy has nothing to enforce, so remove sysctls.Robert Watson2007-02-231-9/+0
* Update auditing of socket information for the inpcb new world order:Robert Watson2007-02-201-6/+4
* Move mapping of MBI_APPEND to MBI_WRITE from inside the rule loop inRobert Watson2007-02-201-9/+8
* Do allow bypass of mac_seeotheruids in jail in order to be consistentRobert Watson2007-02-191-1/+2
* In mac_biba_check_system_swapoff(), don't extract the object label sinceRobert Watson2007-02-101-2/+1
* Print intptr_t values by first casting to intmax_t and then printing withRobert Watson2007-02-061-1/+1
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-069-69/+107
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-0621-19/+10
* When returning early from audit_arg_file() due to so->so_pcb being NULLRobert Watson2007-01-061-2/+3
* Teach the stub policy about some of the more recent entry points that haveChristian S.J. Peron2007-01-011-0/+57
* Remove conditional return of 1. For the MAC_STATIC case at this point inChristian S.J. Peron2007-01-011-3/+0
generated by cgit v1.3 (git 2.53.0) at 2026-08-04 10:21:28 +0000