| Commit message (Expand) | Author | Age | Files | Lines |
* | Add a new 'why' argument to kdb_enter(), and a set of constants to use | rwatson | 2007-12-25 | 1 | -1/+1 |
* | Change "audit_pipe_preselect" to "audit_pipe_presel" to make it print | wkoszek | 2007-12-25 | 1 | -1/+1 |
* | Fix a MAC label leak for POSIX semaphores, in which per-policy labels | rwatson | 2007-12-17 | 1 | -0/+1 |
* | Explicitly initialize 'ret' to 0'. It lets one to build tmpfs from the | wkoszek | 2007-12-04 | 1 | -0/+2 |
* | Implement per-object type consistency checks for labels passed to | rwatson | 2007-10-30 | 1 | -20/+65 |
* | Replace use of AU_NULL with 0 when no audit classes are in use; this | rwatson | 2007-10-29 | 2 | -4/+4 |
* | Canonicalize names of local variables. | rwatson | 2007-10-29 | 1 | -66/+66 |
* | Resort TrustedBSD MAC Framework policy entry point implementations and | rwatson | 2007-10-29 | 9 | -4684/+4744 |
* | Add missing mac_test labeling and sleep checks for the syncache. | rwatson | 2007-10-28 | 1 | -0/+48 |
* | Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Framework | rwatson | 2007-10-28 | 8 | -87/+0 |
* | Continue to move from generic network entry points in the TrustedBSD MAC | rwatson | 2007-10-28 | 9 | -86/+155 |
* | Move towards more explicit support for various network protocol stacks | rwatson | 2007-10-28 | 12 | -82/+414 |
* | Perform explicit label type checks for externalize entry points, rather than | rwatson | 2007-10-28 | 1 | -10/+70 |
* | Make sure we are incrementing the read count for each audit pipe read. | csjp | 2007-10-27 | 1 | -0/+1 |
* | Give each posixsem MAC Framework entry point its own counter and test case | rwatson | 2007-10-27 | 1 | -9/+74 |
* | Update comment following MAC Framework entry point renaming and | rwatson | 2007-10-26 | 1 | -1/+6 |
* | Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' as | rwatson | 2007-10-26 | 9 | -33/+33 |
* | Implement AUE_CORE, which adds process core dump support into the kernel. | csjp | 2007-10-26 | 3 | -0/+57 |
* | Sort entry points in mac_framework.h and mac_policy.h alphabetically by | rwatson | 2007-10-25 | 2 | -629/+574 |
* | Normalize TCP syncache-related MAC Framework entry points to match most | rwatson | 2007-10-25 | 7 | -44/+44 |
* | Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and move | rwatson | 2007-10-25 | 7 | -50/+50 |
* | Consistently name functions for mac_<policy> as <policy>_whatever rather | rwatson | 2007-10-25 | 11 | -2761/+2722 |
* | Further MAC Framework cleanup: normalize some local variable names and | rwatson | 2007-10-25 | 6 | -48/+49 |
* | Merge first in a series of TrustedBSD MAC Framework KPI changes | rwatson | 2007-10-24 | 27 | -3241/+3324 |
* | Use extended process token. The in kernel process audit | csjp | 2007-10-24 | 1 | -2/+2 |
* | Bump MAC_VERSION to 4 and add an 8.x line in the version table. Version 4 | rwatson | 2007-10-23 | 1 | -1/+2 |
* | Canonicalize naming of local variables for struct ksem and associated | rwatson | 2007-10-21 | 7 | -72/+71 |
* | Rename the kthread_xxx (e.g. kthread_create()) calls | julian | 2007-10-20 | 1 | -2/+2 |
* | - Change the wakeup logic associated with having multiple sleepers | csjp | 2007-10-12 | 1 | -2/+2 |
* | - Move all of the PS_ flags into either p_flag or td_flags. | jeff | 2007-09-17 | 1 | -2/+1 |
* | Rename mac_check_vnode_delete() MAC Framework and MAC Policy entry | rwatson | 2007-09-10 | 9 | -136/+136 |
* | Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, which | rwatson | 2007-08-06 | 1 | -4/+0 |
* | When checking labels during a vnode link operation in MLS, use the file | rwatson | 2007-07-23 | 1 | -1/+1 |
* | In preparation for 7.0 privilege cleanup, clean up style: | rwatson | 2007-07-05 | 2 | -87/+32 |
* | Fix a bunch of warnings due to a missing forward declaration of a struct. | peter | 2007-07-05 | 1 | -0/+1 |
* | Remove two boot printfs generated by Audit to announce it's presence, | rwatson | 2007-07-01 | 2 | -2/+4 |
* | - Add audit_arg_audinfo_addr() for auditing the arguments for setaudit_addr(2) | csjp | 2007-06-27 | 5 | -6/+67 |
* | Add a new MAC framework and policy entry point, | rwatson | 2007-06-26 | 6 | -1/+38 |
* | In setaudit_addr(), drop the process lock in error cases. | rwatson | 2007-06-15 | 1 | -0/+1 |
* | Spell statistics more correctly in comments. | rwatson | 2007-06-14 | 1 | -1/+1 |
* | Include priv.h to pick up suser(9) definitions, missed in an earlier | rwatson | 2007-06-13 | 1 | -0/+1 |
* | Close a very narrow race that might cause a trigger allocation to be | rwatson | 2007-06-13 | 1 | -7/+6 |
* | Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); in | rwatson | 2007-06-12 | 2 | -4/+2 |
* | Clean up, and sometimes remove, a number of audit-related implementation | rwatson | 2007-06-11 | 3 | -32/+3 |
* | Move per-process audit state from a pointer in the proc structure to | rwatson | 2007-06-07 | 4 | -162/+133 |
* | Commit 14/14 of sched_lock decomposition. | jeff | 2007-06-05 | 1 | -2/+2 |
* | Clean up audit comments--formatting, spelling, etc. | rwatson | 2007-06-01 | 8 | -74/+70 |
* | Change the VOP_OPEN(), vn_open() vnode operation and d_fdopen() cdev operation | kib | 2007-06-01 | 1 | -1/+1 |
* | Remove AUDIT_PRINTF() debugging statements and definition; clean up or | rwatson | 2007-06-01 | 3 | -55/+10 |
* | Remove unused !AUDIT audit_proc_*() prototypes: unlike in Mac OS X, we | rwatson | 2007-05-30 | 2 | -23/+0 |