summaryrefslogtreecommitdiffstats
path: root/sys/kern/kern_prot.c
Commit message (Expand)AuthorAgeFilesLines
* o Modify access control checks in p_candebug() such that the policy is asrwatson2001-05-171-3/+3
* Undo part of the tangle of having sys/lock.h and sys/mutex.h included inmarkm2001-05-011-2/+3
* o Remove the disabled p_cansched() test cases that permitted users torwatson2001-04-271-11/+0
* Change the pfind() and zpfind() functions to lock the process that theyjhb2001-04-241-25/+47
* o Remove comment indicating policy permits loop-back debugging, butrwatson2001-04-211-1/+0
* Add a sanity check on ucred refcount.alfred2001-04-171-0/+1
* o Since uid checks in p_cansignal() are now identical between P_SUGIDrwatson2001-04-131-28/+14
* o Disallow two "allow this" exceptions in p_cansignal() restrictingrwatson2001-04-131-5/+3
* o Disable two "allow this" exceptions in p_cansched()m retricting therwatson2001-04-121-1/+4
* o Reduce information leakage into jails by adding invocations ofrwatson2001-04-121-0/+9
* o Replace p_cankill() with p_cansignal(), remove wrappage of p_can()rwatson2001-04-121-32/+71
* o Introduce a new system call, __setsugid(), which allows a process torwatson2001-04-111-0/+23
* o Restructure privilege check associated with process visibility forrwatson2001-03-291-3/+1
* o introduce u_cansee(), which performs access control checks betweenrwatson2001-03-281-14/+26
* Just use the proc lock to protect read accesses to p_pptr rather than thejhb2001-03-241-4/+4
* o Move per-process jail pointer (p->pr_prison) to inside of the subjectrwatson2001-02-211-18/+29
* o Fix spellign in a comment: s/referernce/reference/rwatson2001-02-141-1/+1
* Change and clean the mutex lock interface.bmilekic2001-02-091-7/+7
* Fix typo: compatability -> compatibility.asmodai2001-02-061-3/+3
* Fix getsid() to use "=" instead of "==".ben2001-01-131-1/+1
* Protect proc.p_pptr and proc.p_children/p_sibling with thejake2000-12-231-1/+11
* make crfree into a function rather than a macro to avoid bloat because ofalfred2000-11-301-0/+14
* ucred system overhaul:alfred2000-11-271-8/+15
* o Fix a mis-transcription of sef's -STABLE protection fixes--only rootrwatson2000-11-101-1/+1
* o Tighten up rules for which processes can't debug which other processesrwatson2000-10-301-2/+4
* Nuke a bit of dead code.truckman2000-10-291-5/+0
* unstaticize change_ruid() because it is needed by osf1_setuid()gallatin2000-10-261-3/+1
* Remove uidinfo hash table lookup and maintenance out of chgproccnt() andtruckman2000-09-051-20/+70
* o p_cansee() wasn't setting privused when suser() was required to overriderwatson2000-08-311-2/+7
* o Centralize inter-process access control, introducing:rwatson2000-08-301-9/+143
* o Disable flagging of ASU in suser_xxx() authorization check. For therwatson2000-08-301-2/+0
* fix races in the uidinfo subsystem, several problems existed:alfred2000-06-221-6/+6
* o bde suggested moving the SYSCTL from kern_mib to the more appropriaterwatson2000-06-051-0/+6
* o Introduce kern.suser_permitted, a sysctl that disables the suser_xxx()rwatson2000-06-051-0/+2
* Make issetugid return correctly. It was returning -1 withpeter2000-05-091-2/+1
* Make the sigprocmask() and geteuid() system calls MP SAFE. Expanddillon2000-04-021-6/+9
* Commit major SMP cleanups and move the BGL (big giant lock) in thedillon2000-03-281-1/+14
* Implement setres[ug]id() and getres[ug]id(). This has been sitting inpeter2000-01-161-0/+158
* Handle the case where we truss an SUGID program -- in particular, we needsef2000-01-101-1/+1
* truss /usr/bin/suphk2000-01-031-2/+2
* Introduce the new functionphk1999-11-211-0/+25
* Trim unused options (or #ifdef for undoc options).peter1999-10-111-1/+0
* $Id$ -> $FreeBSD$peter1999-08-281-1/+1
* This Implements the mumbled about "Jail" feature.phk1999-04-281-19/+27
* Change suser_xxx() to suser() where it applies.phk1999-04-271-10/+10
* Suser() simplification:phk1999-04-271-12/+19
* Fix warnings in preparation for adding -Wall -Wcast-qual to thedillon1999-01-281-9/+9
* getpgid() and getsid() were doing a comparision rather than an assignment,truckman1998-12-131-5/+11
* add #include <sys/kernel.h> where it's needed by MALLOC_DEFINE()peter1998-11-101-1/+2
* If the session leader dies, s_leader is set to NULL and getsid() maytruckman1998-11-091-2/+2
OpenPOWER on IntegriCloud