aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Do pass removing some write-only variables from the kernel.Alexander Kabaev2017-12-251-2/+0
* sys: further adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-2013-1/+27
* Sprinkle __read_frequently on few obvious places.Mateusz Guzik2017-09-061-1/+1
* Correct bitwise test in mac_bsdextended ugidfw_rule_valid()Ed Maste2017-06-131-1/+1
* Commit the 64-bit inode project.Konstantin Belousov2017-05-231-4/+4
* Break audit_bsm_klib.c into two files: one (audit_bsm_klib.c)Robert Watson2017-04-032-271/+330
* Correct macro names and signatures for !AUDIT versions of canonicalRobert Watson2017-03-311-2/+2
* Audit arguments to POSIX message queues, semaphores, and shared memory.Robert Watson2017-03-312-0/+56
* Audit arguments to System V IPC system calls implementing sempahores,Robert Watson2017-03-301-0/+30
* Various BSM generation improvements when auditing AUE_ACCEPT,Robert Watson2017-03-301-6/+68
* Don't ifdef KDTRACE_HOOKS struct, variable, and function prototypeRobert Watson2017-03-301-8/+0
* When handling msgsys(2), semsys(2), and shmsys(2) multiplex system calls,Robert Watson2017-03-295-3/+118
* Add an experimental DTrace audit provider, which allows users of DTrace toRobert Watson2017-03-295-15/+700
* Introduce an audit event identifier -> audit event name mappingRobert Watson2017-03-274-1/+216
* Extend comment describing path canonicalisation in audit.Robert Watson2017-03-271-1/+2
* Audit 'fd' and 'cmd' arguments to fcntl(2), and when generating BSM,Robert Watson2016-11-221-4/+1
* Fix improper use of "its".Bryan Drewery2016-11-081-1/+1
* Don't check aq64_minfree which is unsigned for negative values.John Baldwin2016-09-081-2/+2
* Audit the accepted (or rejected) username argument to setlogin(2).Robert Watson2016-08-202-2/+8
* Add AUE_WAIT6 handling to the BSM conversion switch statement, reusingRobert Watson2016-07-111-0/+1
* Implement AUE_PREAD and AUE_PWRITE BSM conversion support, eliminatingRobert Watson2016-06-131-0/+2
* sys/security: minor spelling fixes.Pedro F. Giffuni2016-05-067-7/+7
* sys: use our nitems() macro when param.h is available.Pedro F. Giffuni2016-04-212-4/+2
* Remove slightly used const values that can be replaced with nitems().Pedro F. Giffuni2016-04-212-7/+4
* audit(8): leave unsigned comparison for last.Pedro F. Giffuni2016-04-081-2/+2
* Busy the mount point which is the owner of the audit vnode, aroundKonstantin Belousov2016-01-161-15/+45
* Move the funsetown(9) call from audit_pipe_close() to cdevprivKonstantin Belousov2016-01-131-25/+4
* Merge from contrib/openbsm to bring the kernel audit bits up to date with Ope...Christian Brueffer2015-12-205-10/+0
* Fix style issues around existing SDT probes.Mark Johnston2015-12-162-22/+22
* fd: make 'rights' a manadatory argument to fget* functionsMateusz Guzik2015-07-051-1/+3
* Replace struct filedesc argument in getvnode with struct threadMateusz Guzik2015-06-161-1/+1
* fd: make rights a mandatory argument to fget_unlockedMateusz Guzik2015-06-161-1/+3
* cred: add proc_set_cred helperMateusz Guzik2015-03-163-6/+6
* audit: fix cred assignment when A_SETPMASK is usedMateusz Guzik2015-03-151-1/+1
* Adjust printf format specifiers for dev_t and ino_t in kernel.Gleb Kurtsou2014-12-171-2/+2
* Replace dev_clone with cdevpriv(9) KPI in audit_pipe code.Davide Italiano2014-08-201-71/+47
* Pull in r267961 and r267973 again. Fix for issues reported will follow.Hans Petter Selasky2014-06-286-50/+23
* Revert r267961, r267973:Glen Barber2014-06-276-23/+50
* Extend the meaning of the CTLFLAG_TUN flag to automatically check ifHans Petter Selasky2014-06-276-50/+23
* audit: plug FILEDESC_LOCK leak in audit_canon_path.Mateusz Guzik2014-03-211-0/+1
* Update kernel inclusions of capability.h to use capsicum.h instead; someRobert Watson2014-03-161-1/+1
* Remove AppleTalk support.Gleb Smirnoff2014-03-148-144/+0
* Remove IPX support.Gleb Smirnoff2014-03-142-4/+0
* As constantly reported during kernel compilation, m_buflen is unsigned soBjoern A. Zeeb2013-12-251-2/+1
* There is no sysctl with the MIB { CTL_KERN, KERN_MAXID }.John Baldwin2013-12-051-1/+0
* dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINEAndriy Gapon2013-11-262-27/+27
* - For kernel compiled only with KDTRACE_HOOKS and not any lock debuggingAttilio Rao2013-11-2516-17/+0
* The r48589 promised to remove implicit inclusion of if_var.h soon. PrepareGleb Smirnoff2013-10-261-1/+4
* Fix some typos that were causing probe argument types to show up as unknown.Mark Johnston2013-10-014-4/+4
* Make the mac_policy_rm lock recursable, which allows reentrance intoKonstantin Belousov2013-09-291-1/+2