aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Update introductory comment for audit pipes.Robert Watson2008-11-021-4/+4
* Remove stale comment about filtering in audit pipe ioctl routine: we doRobert Watson2008-11-021-3/+0
* Add comment for per-pipe stats.Robert Watson2008-11-011-0/+3
* We only allow a partial read of the first record in an audit pipeRobert Watson2008-11-011-15/+28
* Allow a single read(2) system call on an audit pipe to retrieve data fromRobert Watson2008-11-011-40/+32
* Since there is no longer the opportunity for record truncation, justRobert Watson2008-10-311-2/+1
* Historically, /dev/auditpipe has allows only whole records to be read viaRobert Watson2008-10-311-58/+86
* When we drop an audit record going to and audit pipe because the auditRobert Watson2008-10-301-13/+9
* Break out single audit_pipe_mtx into two types of locks: a global rwlockRobert Watson2008-10-301-83/+127
* Protect the event->class lookup database using an rwlock instead of aRobert Watson2008-10-301-8/+15
* The V* flags passed using an accmode_t to the access() and open()Robert Watson2008-10-303-12/+26
* Commit part of accmode_t changes that I missed in previous commit.Edward Tomasz Napierala2008-10-281-1/+1
* Break out strictly credential-related portions of mac_process.c into aRobert Watson2008-10-282-141/+213
* Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessaryEdward Tomasz Napierala2008-10-2810-25/+37
* Rename mac_cred_mmapped_drop_perms(), which revokes access to virtualRobert Watson2008-10-284-20/+18
* Rename three MAC entry points from _proc_ to _cred_ to reflect the factRobert Watson2008-10-289-201/+202
* Extended comment on why we consider a partition relabel request of "0" toRobert Watson2008-10-281-1/+7
* Rename label_on_label() to partition_check(), which is far moreRobert Watson2008-10-281-7/+7
* Improve alphabetical sort order of stub entry points.Robert Watson2008-10-281-32/+32
* When the mac_bsdextended policy is unloaded, free rule memory.Robert Watson2008-10-271-0/+5
* Add TrustedBSD credit to new ugidfw_internal.h file.Robert Watson2008-10-271-0/+2
* Break mac_bsdextended.c out into multiple .c files, with the base accessRobert Watson2008-10-274-1451/+149
* Copy mac_bsdextended.c to two object-specific files as a prototype for howRobert Watson2008-10-272-0/+1536
* Implement MAC policy support for IPv6 fragment reassembly queues,Robert Watson2008-10-265-5/+275
* Add a MAC label, MAC Framework, and MAC policy entry points for IPv6Robert Watson2008-10-263-3/+129
* Fix a number of style issues in the MALLOC / FREE commit. I've tried toDag-Erling Smørgrav2008-10-231-1/+2
* Retire the MALLOC and FREE macros. They are an abomination unto style(9).Dag-Erling Smørgrav2008-10-232-4/+3
* Add a mac_inpcb_check_visible implementation to all MAC policiesBjoern A. Zeeb2008-10-177-0/+111
* Add mac_inpcb_check_visible MAC Framework entry point, which is similarBjoern A. Zeeb2008-10-173-0/+16
* Use the label from the socket credential rather than theBjoern A. Zeeb2008-10-171-1/+2
* Remove unit2minor() use from kernel code.Ed Schouten2008-09-261-1/+1
* Remove the suser(9) interface from the kernel. It has been replaced fromAttilio Rao2008-09-171-8/+24
* Remove VSVTX, VSGID and VSUID. This should be a no-op,Edward Tomasz Napierala2008-09-101-2/+3
* Unbreak the build.Dag-Erling Smørgrav2008-09-041-2/+2
* If the process id specified is invalid, the system call returns ESRCHKevin Lo2008-09-041-10/+10
* Decontextualize the couplet VOP_GETATTR / VOP_SETATTR as the passed threadAttilio Rao2008-08-284-5/+4
* More fully audit fexecve(2) and its arguments.Robert Watson2008-08-251-0/+7
* Use ERANGE instead of EOVERFLOW selected in r182059, this seems moreRobert Watson2008-08-241-1/+1
* Use sbuf_putc instead of sbuf_cat. This makes more sense, since we areChristian S.J. Peron2008-08-241-1/+1
* Introduce two related changes to the TrustedBSD MAC Framework:Robert Watson2008-08-2327-161/+456
* When getaudit(2) is unable to fit the terminal IPv6 address into theRobert Watson2008-08-231-1/+1
* Make sure we check the preselection masks present for all audit pipes.Christian S.J. Peron2008-08-111-1/+2
* Add sbuf_new_auto as a shortcut for the very common case of creating aDag-Erling Smørgrav2008-08-091-1/+1
* Minor style tweaks.Robert Watson2008-08-023-24/+15
* Rename mac_partition_enabled to partition_enabled to synchronize withRobert Watson2008-08-021-3/+3
* In mac_bsdextended's auditctl and acct policy access control checks,Robert Watson2008-07-311-11/+8
* Currently, BSM audit pathname token generation for chrooted or jailedChristian S.J. Peron2008-07-311-55/+93
* Further synchronization of copyrights, licenses, white space, etc fromRobert Watson2008-07-319-11/+10
* Minor white space tweak.Robert Watson2008-07-231-1/+1
* If an AUE_SYSCTL_NONADMIN audit event is selected, generate a recordRobert Watson2008-07-221-0/+1
generated by cgit v1.3 (git 2.53.0) at 2026-08-07 02:39:12 +0000