| Commit message (Expand) | Author | Age | Files | Lines |
* | Implement MAC policy support for IPv6 fragment reassembly queues, | rwatson | 2008-10-26 | 5 | -5/+275 |
* | Add a MAC label, MAC Framework, and MAC policy entry points for IPv6 | rwatson | 2008-10-26 | 3 | -3/+129 |
* | Fix a number of style issues in the MALLOC / FREE commit. I've tried to | des | 2008-10-23 | 1 | -1/+2 |
* | Retire the MALLOC and FREE macros. They are an abomination unto style(9). | des | 2008-10-23 | 2 | -4/+3 |
* | Add a mac_inpcb_check_visible implementation to all MAC policies | bz | 2008-10-17 | 7 | -0/+111 |
* | Add mac_inpcb_check_visible MAC Framework entry point, which is similar | bz | 2008-10-17 | 3 | -0/+16 |
* | Use the label from the socket credential rather than the | bz | 2008-10-17 | 1 | -1/+2 |
* | Remove unit2minor() use from kernel code. | ed | 2008-09-26 | 1 | -1/+1 |
* | Remove the suser(9) interface from the kernel. It has been replaced from | attilio | 2008-09-17 | 1 | -8/+24 |
* | Remove VSVTX, VSGID and VSUID. This should be a no-op, | trasz | 2008-09-10 | 1 | -2/+3 |
* | Unbreak the build. | des | 2008-09-04 | 1 | -2/+2 |
* | If the process id specified is invalid, the system call returns ESRCH | kevlo | 2008-09-04 | 1 | -10/+10 |
* | Decontextualize the couplet VOP_GETATTR / VOP_SETATTR as the passed thread | attilio | 2008-08-28 | 4 | -5/+4 |
* | More fully audit fexecve(2) and its arguments. | rwatson | 2008-08-25 | 1 | -0/+7 |
* | Use ERANGE instead of EOVERFLOW selected in r182059, this seems more | rwatson | 2008-08-24 | 1 | -1/+1 |
* | Use sbuf_putc instead of sbuf_cat. This makes more sense, since we are | csjp | 2008-08-24 | 1 | -1/+1 |
* | Introduce two related changes to the TrustedBSD MAC Framework: | rwatson | 2008-08-23 | 27 | -161/+456 |
* | When getaudit(2) is unable to fit the terminal IPv6 address into the | rwatson | 2008-08-23 | 1 | -1/+1 |
* | Make sure we check the preselection masks present for all audit pipes. | csjp | 2008-08-11 | 1 | -1/+2 |
* | Add sbuf_new_auto as a shortcut for the very common case of creating a | des | 2008-08-09 | 1 | -1/+1 |
* | Minor style tweaks. | rwatson | 2008-08-02 | 3 | -24/+15 |
* | Rename mac_partition_enabled to partition_enabled to synchronize with | rwatson | 2008-08-02 | 1 | -3/+3 |
* | In mac_bsdextended's auditctl and acct policy access control checks, | rwatson | 2008-07-31 | 1 | -11/+8 |
* | Currently, BSM audit pathname token generation for chrooted or jailed | csjp | 2008-07-31 | 1 | -55/+93 |
* | Further synchronization of copyrights, licenses, white space, etc from | rwatson | 2008-07-31 | 9 | -11/+10 |
* | Minor white space tweak. | rwatson | 2008-07-23 | 1 | -1/+1 |
* | If an AUE_SYSCTL_NONADMIN audit event is selected, generate a record | rwatson | 2008-07-22 | 1 | -0/+1 |
* | Further minor style fixes to audit. | rwatson | 2008-07-22 | 1 | -5/+10 |
* | Remove unneeded \ at the end of a macro. | rwatson | 2008-07-22 | 1 | -1/+1 |
* | Further minor white space tweaks. | rwatson | 2008-07-22 | 1 | -2/+2 |
* | Generally avoid <space><tab> as a white space anomoly. | rwatson | 2008-07-22 | 5 | -18/+18 |
* | Use #define<tab> rather than #define<space>. | rwatson | 2008-07-22 | 2 | -9/+9 |
* | Comment fix. | rwatson | 2008-07-22 | 1 | -1/+1 |
* | Comment typo fix. | rwatson | 2008-07-22 | 1 | -1/+1 |
* | Minor white space synchronization to Apple version of security audit. | rwatson | 2008-07-22 | 1 | -4/+4 |
* | In preparation to sync Apple and FreeBSD versions of security audit, | rwatson | 2008-07-22 | 9 | -18/+18 |
* | Use unsigned int when iterating over groupsets in audit_arg_groupset(). | rwatson | 2008-07-22 | 1 | -1/+1 |
* | Rework the lifetime management of the kernel implementation of POSIX | jhb | 2008-06-27 | 7 | -42/+136 |
* | Add missing counter increments for posix shm checks. | jhb | 2008-06-26 | 1 | -0/+5 |
* | Remove the posixsem_check_destroy() MAC check. It is semantically identical | jhb | 2008-06-23 | 7 | -39/+0 |
* | The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is the | rwatson | 2008-06-13 | 8 | -74/+73 |
* | Don't enforce unique device minor number policy anymore. | ed | 2008-06-11 | 1 | -1/+1 |
* | When the file-system containing the audit log file is running low on | simon | 2008-06-10 | 1 | -1/+3 |
* | Add an XXX comment regarding a bug I introduced when modifying the behavior | rwatson | 2008-06-03 | 1 | -0/+3 |
* | Plug a memory leak which can occur when multiple MAC policies are loaded | csjp | 2008-05-27 | 1 | -0/+4 |
* | Don't use LK_DRAIN before calling VOP_FSYNC() in the two further | rwatson | 2008-05-21 | 1 | -2/+2 |
* | Don't use LK_DRAIN before calling VOP_FSYNC() in the panic case for | rwatson | 2008-05-21 | 1 | -1/+1 |
* | When testing whether to enter the audit argument gathering code, rather | rwatson | 2008-05-06 | 1 | -1/+1 |
* | Fix include guard spelling. | rwatson | 2008-04-27 | 1 | -1/+1 |
* | Use logic or, not binary or, when deciding whether or not a system call | rwatson | 2008-04-24 | 1 | -1/+1 |