summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Forward declare struct cdev, since arguments of this type are used inrwatson2006-10-301-0/+1
* Remove extra _MAC_ from #ifdef guard.rwatson2006-10-251-1/+1
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hrwatson2006-10-2217-76/+32
* Do allow jailed superuser to override the port ACL.rwatson2006-10-101-1/+1
* Mark the audit system calls as being un-implemented in jails. Currently we docsjp2006-10-101-0/+19
* Add BSM conversion switch entries for a number of system calls, manyrwatson2006-10-031-7/+43
* Trim some no longer XXX comments.rwatson2006-10-021-22/+5
* Audit path argument when changing audit trails.rwatson2006-10-021-3/+4
* Rework the way errors are handled with respect to how audit records arerwatson2006-09-241-100/+145
* Merge OpenBSM 1.0 alpha 11 changes into src/sys/bsm and src/sys/security;rwatson2006-09-211-1/+1
* Remove MAC_DEBUG label counters, which were used to debug leaks andrwatson2006-09-2013-161/+0
* Rather than allocating all buffer memory for the completed BSM recordrwatson2006-09-201-19/+17
* Add missing white space in au_to_exec_{args,env}().rwatson2006-09-201-0/+2
* Make sure that lutimes(2) gets processed and converted into a BSM record.csjp2006-09-181-0/+1
* Declare security and security.bsd sysctl hierarchies in sysctl.h alongrwatson2006-09-171-1/+0
* Correct a slight regression which was introduced with the implementation ofcsjp2006-09-174-5/+20
* Add AUE_SYSARCH to the list of audit events during BSM conversion to preventrwatson2006-09-171-0/+1
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointcsjp2006-09-126-0/+50
* Add struct msg to the forwarded declared data structures in mac_policy.h.rwatson2006-09-091-0/+1
* Add a BSM conversion switch case for AUE_GETCWD, so that a consolerwatson2006-09-091-0/+3
* Small style cleanup.rwatson2006-09-091-3/+2
* White space cleanup, no functional change.rwatson2006-09-041-53/+53
* Audit the argv and env vectors passed in on exec:wsalamon2006-09-017-10/+139
* Fix panic associated with file creation via RPC/NFS when the MLS policycsjp2006-08-261-0/+12
* Allow the user process to query the kernel's notion of a maximumrwatson2006-08-262-0/+6
* Update kernel OpenBSM parts, especially src/sys/bsm, for the OpenBSMrwatson2006-08-262-3/+4
* Remove $P4$ from this file; other then temporarily P4-local work inrwatson2006-08-251-1/+0
* Add kqueue support to audit pipe pseudo-devices.rwatson2006-08-241-0/+84
* Make mpo_associate_nfsd_label() return void, not int, to matchrwatson2006-08-062-3/+2
* Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists inphk2006-07-173-3/+0
* Implement mpo_associate_nfsd_label entry point for the BIBA security policy,csjp2006-07-101-0/+13
* Audit the remaining parameters to the extattr system calls. Generatewsalamon2006-07-061-0/+59
* Correct a number of problems that were previously commented on:rwatson2006-07-032-49/+40
* Make the size of the subject32_ex and process32_ex tokens depend onwsalamon2006-06-171-13/+25
* Lock process when copying fields from process structure so as torwatson2006-06-081-3/+2
* Prefer C to C++ comments per style(9).rwatson2006-06-081-1/+1
* Extract pointer value for mnt_stat from vp after the NULL check, notrwatson2006-06-061-1/+2
* Remove use of Giant around vn_open() in audit trail setup.rwatson2006-06-051-15/+10
* When generating BSM tokens for mkfifo(), include mode argument.rwatson2006-06-051-1/+6
* When generating the process token, need to check whether therwatson2006-06-052-15/+14
* Consistently use audit_free() to free records, rather thanrwatson2006-06-051-2/+2
* Introduce support for per-audit pipe preselection independent from therwatson2006-06-056-66/+519
* Shorten audit record zone name.rwatson2006-06-051-1/+1
* No longer unconditionally drain the audit record queue if there isrwatson2006-06-051-35/+5
* Pull BSM conversion logic out of audit_record_write(), as well asrwatson2006-06-051-84/+48
* Assert audit mtx in audit_worker_drain().rwatson2006-06-051-11/+30
* Use struct kaudit_queue instead of a hand-crafted queue type forrwatson2006-06-051-1/+1
* Rename audit_cv to audit_worker_cv, as it wakes up the auditrwatson2006-06-053-16/+14
* Merge OpenBSM 1.0 alpha 6 changes for BSM token creation torwatson2006-06-052-69/+35
* Check to see if the rootdir is the same as the current working directory.csjp2006-06-011-3/+11
OpenPOWER on IntegriCloud