aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Move per-process audit state from a pointer in the proc structure toRobert Watson2007-06-074-162/+133
* Commit 14/14 of sched_lock decomposition.Jeff Roberson2007-06-051-2/+2
* Clean up audit comments--formatting, spelling, etc.Robert Watson2007-06-018-74/+70
* Change the VOP_OPEN(), vn_open() vnode operation and d_fdopen() cdev operationKonstantin Belousov2007-06-011-1/+1
* Remove AUDIT_PRINTF() debugging statements and definition; clean up orRobert Watson2007-06-013-55/+10
* Remove unused !AUDIT audit_proc_*() prototypes: unlike in Mac OS X, weRobert Watson2007-05-302-23/+0
* Synchronize white space to congruent user-space code in OpenBSM.Robert Watson2007-05-301-0/+2
* Remove unused ar_subj_comm field from in-kernel audit record; we neverRobert Watson2007-05-302-2/+0
* Consistent white space after .'s in comments.Robert Watson2007-05-301-3/+3
* No need to force __inline__ of currecord(), as the compiler will usefullyRobert Watson2007-05-231-1/+1
* Short name of kernel audit worker thread from "audit_worker" to "audit".Robert Watson2007-05-211-1/+1
* Don't expose #ifdef NOTYET parts to userspace via audit_ioctl.h, justRobert Watson2007-04-291-3/+0
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,Robert Watson2007-04-238-51/+49
* Apply variable name normalization to MAC policies: adopt global conventionsRobert Watson2007-04-2310-1001/+995
* Normalize variable naming in the MAC Framework by adopting the normalRobert Watson2007-04-228-395/+384
* In the MAC Framework implementation, file systems have two per-mountpointRobert Watson2007-04-227-115/+54
* Remove MAC Framework access control check entry points made redundant withRobert Watson2007-04-227-183/+387
* Further MAC test policy cleanup and enhancement:Robert Watson2007-04-221-141/+478
* Perform overdue clean up mac_test policy:Robert Watson2007-04-221-717/+474
* Allow MAC policy modules to control access to audit configuration systemRobert Watson2007-04-2110-8/+446
* Remove $P4$ that snuck into CVS from Perforce.Robert Watson2007-04-171-1/+0
* Merge OpenBSM 1.0 alpha 14 changes to src/sys/security/audit:Robert Watson2007-04-161-13/+184
* Fix the handling of IPv6 addresses for subject and process BSM auditChristian S.J. Peron2007-04-137-33/+104
* Replace custom file descriptor array sleep lock constructed using a mutexRobert Watson2007-04-041-2/+2
* Remove 'MPSAFE' annotations from the comments above most system calls: allRobert Watson2007-03-043-47/+0
* More unnecessary include reduction.Robert Watson2007-02-237-90/+12
* Remove many unneeded includes, update copyright.Robert Watson2007-02-231-29/+2
* Remove empty entry point functions (init, destroy, syscall) fromRobert Watson2007-02-232-32/+0
* mac_none sample policy has nothing to enforce, so remove sysctls.Robert Watson2007-02-231-9/+0
* Update auditing of socket information for the inpcb new world order:Robert Watson2007-02-201-6/+4
* Move mapping of MBI_APPEND to MBI_WRITE from inside the rule loop inRobert Watson2007-02-201-9/+8
* Do allow bypass of mac_seeotheruids in jail in order to be consistentRobert Watson2007-02-191-1/+2
* In mac_biba_check_system_swapoff(), don't extract the object label sinceRobert Watson2007-02-101-2/+1
* Print intptr_t values by first casting to intmax_t and then printing withRobert Watson2007-02-061-1/+1
* Introduce accessor functions mac_label_get() and mac_label_set() to replaceRobert Watson2007-02-069-69/+107
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:Robert Watson2007-02-0621-19/+10
* When returning early from audit_arg_file() due to so->so_pcb being NULLRobert Watson2007-01-061-2/+3
* Teach the stub policy about some of the more recent entry points that haveChristian S.J. Peron2007-01-011-0/+57
* Remove conditional return of 1. For the MAC_STATIC case at this point inChristian S.J. Peron2007-01-011-3/+0
* Only signal the CV indicating that the MAC Framework is available forRobert Watson2006-12-311-6/+23
* Slightly resort functions in file so that no forward function prototypesRobert Watson2006-12-291-49/+46
* Re-add include of opt_mac.h in mac_framework.c, which was improperlyRobert Watson2006-12-291-0/+2
* Remove two XXX comments that no longer apply.Robert Watson2006-12-291-5/+0
* Use p_cansee() to check that a target process for an audit stateRobert Watson2006-12-291-3/+9
* Add a witness sleep warning to canon_path(), which invokes vput() and henceRobert Watson2006-12-292-3/+3
* Add missing include guards to mac_internal.h, update include guards inRobert Watson2006-12-282-3/+8
* Update a number of comments:Robert Watson2006-12-284-23/+22
* Remove XXX comments about EA transaction support and provide a moreRobert Watson2006-12-281-6/+11
* Remove an inaccurate comment I added regarding storage for mbuf tagRobert Watson2006-12-281-7/+0
* In mac_inpcb_sosetlabel(), assert the socket lock rather than commentingRobert Watson2006-12-281-1/+1
generated by cgit v1.3 (git 2.53.0) at 2026-08-03 09:43:43 +0000