summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Get rid of D_PSEUDO.ed2011-10-181-1/+1
* Remove two dublicated assignments.brueffer2011-10-081-3/+0
* In order to maximize the re-usability of kernel code in user space thiskmacy2011-09-162-38/+38
* Correct several issues in the integration of POSIX shared memory objectsrwatson2011-09-027-16/+462
* Fix a deficiency in the selinfo interface:attilio2011-08-251-0/+1
* Add the fo_chown and fo_chmod methods to struct fileops and use themkib2011-08-166-0/+176
* Second-to-last commit implementing Capsicum capabilities in the FreeBSDrwatson2011-08-112-3/+4
* Provide ability to audit cap_rights_t arguments.jonathan2011-07-184-0/+44
* - Add a FEATURE for capsicum (security_capabilities).netchild2011-03-041-1/+1
* Add ECAPMODE, "Not permitted in capability mode", a new kernel errnorwatson2011-03-011-0/+14
* Add some FEATURE macros for various features (AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/netchild2011-02-252-0/+5
* Unless "cnt" exceeds MAX_COMMIT_COUNT, nfsrv_commit() and nfsvno_fsync() arealc2011-02-051-5/+2
* sysctl(9) cleanup checkpoint: amd64 GENERIC builds cleanly.mdf2011-01-122-2/+2
* Fix typos.brucec2010-11-091-1/+1
* Add missing DTrace probe invocation to mac_vnode_check_open; the proberwatson2010-10-231-0/+2
* Replace sbuf_overflowed() with sbuf_error(), which returns any errormdf2010-09-101-1/+1
* Add an extra comment to the SDT probes definition. This allows us to getrpaulo2010-08-222-13/+15
* Add a case to make sure that internal audit records get convertedcsjp2010-05-041-0/+1
* Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-stylerwatson2010-03-023-0/+3
* Make sure we convert audit records that were produced as the result of thecsjp2010-01-311-0/+7
* Replace the static NGROUPS=NGROUPS_MAX+1=1024 with a dynamicbrooks2010-01-121-2/+2
* Make mac_lomac(4) able to interpret NFSv4 access bits.trasz2010-01-031-1/+1
* Having thrown the cat out of the house, add a necessary include.phk2009-09-081-0/+1
* Revert previous commit and add myself to the list of people who shouldphk2009-09-081-1/+0
* Add necessary include.phk2009-09-081-0/+1
* Correctly audit real gids following changes to the audit record argumentrwatson2009-08-121-1/+1
* Eliminate ARG_UPATH[12] arguments to AUDIT_ARG_UPATH() and insteadrwatson2009-07-293-89/+89
* Rework vnode argument auditing to follow the same structure, in orderrwatson2009-07-283-34/+50
* Audit file descriptors passed to fooat(2) system calls, which are usedrwatson2009-07-286-83/+184
* Import OpenBSM 1.1p1 from vendor branch to 8-CURRENT, populatingrwatson2009-07-172-8/+121
* Create audit records for AUE_POSIX_OPENPT, currently w/o arguments.rwatson2009-07-021-0/+1
* Fix comment misthink.rwatson2009-07-021-1/+1
* Clean up a number of aspects of token generation from audit arguments torwatson2009-07-021-69/+55
* For access(2) and eaccess(2), audit the requested access mode.rwatson2009-07-011-2/+9
* Define missing audit argument macro AUDIT_ARG_SOCKET(), andrwatson2009-07-011-0/+6
* When auditing unmount(2), capture FSID arguments as regular text stringsrwatson2009-07-011-0/+8
* Audit the file descriptor number passed to lseek(2).rwatson2009-07-011-1/+1
* udit the 'options' argument to wait4(2).rwatson2009-07-011-0/+4
* Dynamically allocate the gidset field in audit record.sson2009-06-293-2/+13
* Replace AUDIT_ARG() with variable argument macros with a set more morerwatson2009-06-272-15/+174
* Implement global and per-uid accounting of the anonymous memory. Addkib2009-06-232-0/+4
* Chase the removal of PRIV_TTY_PRISON in the mac(9) modules.ed2009-06-202-2/+0
* Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Usekib2009-06-101-2/+1
* Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERICrwatson2009-06-051-2/+0
* Add one further check with mac_policy_count to an mbuf copying caserwatson2009-06-031-0/+3
* Continue work to optimize performance of "options MAC" when no MAC policyrwatson2009-06-0310-94/+328
* By default, label all network interfaces as biba/equal on attach. Thisrwatson2009-06-031-1/+1
* Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings thatrwatson2009-06-021-2/+2
* Add internal 'mac_policy_count' counter to the MAC Framework, which is arwatson2009-06-023-22/+70
* Make the rmlock(9) interface a bit more like the rwlock(9) interface:rwatson2009-05-291-1/+1
OpenPOWER on IntegriCloud