summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Rework the lifetime management of the kernel implementation of POSIXjhb2008-06-277-42/+136
* Add missing counter increments for posix shm checks.jhb2008-06-261-0/+5
* Remove the posixsem_check_destroy() MAC check. It is semantically identicaljhb2008-06-237-39/+0
* The TrustedBSD MAC Framework named struct ipq instances 'ipq', which is therwatson2008-06-138-74/+73
* Don't enforce unique device minor number policy anymore.ed2008-06-111-1/+1
* When the file-system containing the audit log file is running low onsimon2008-06-101-1/+3
* Add an XXX comment regarding a bug I introduced when modifying the behaviorrwatson2008-06-031-0/+3
* Plug a memory leak which can occur when multiple MAC policies are loadedcsjp2008-05-271-0/+4
* Don't use LK_DRAIN before calling VOP_FSYNC() in the two furtherrwatson2008-05-211-2/+2
* Don't use LK_DRAIN before calling VOP_FSYNC() in the panic case forrwatson2008-05-211-1/+1
* When testing whether to enter the audit argument gathering code, ratherrwatson2008-05-061-1/+1
* Fix include guard spelling.rwatson2008-04-271-1/+1
* Use logic or, not binary or, when deciding whether or not a system callrwatson2008-04-241-1/+1
* When auditing state from an IPv4 or IPv6 socket, use read locks on therwatson2008-04-191-2/+2
* When propagating a MAC label from an inpcb to an mbuf, allow read andrwatson2008-04-191-1/+1
* Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros torwatson2008-04-172-5/+5
* Use __FBSDID() for $FreeBSD$ IDs in the audit code.rwatson2008-04-139-18/+27
* Make naming of include guards for MAC Framework include files morerwatson2008-04-133-9/+9
* Add the support for the AT_FDCWD and fd-relative name lookups to thekib2008-03-311-0/+1
* In keeping with style(9)'s recommendations on macros, use a ';'rwatson2008-03-161-1/+1
* Remove XXX to remind me to check the free space calculation, which to myrwatson2008-03-101-3/+0
* Change auditon(2) so that if somebody supplies an invalid command, itcsjp2008-03-061-0/+3
* Rather than copying out the full audit trigger record, which includesrwatson2008-03-021-1/+1
* Add audit_prefixes to two more globally visible functions in the Auditrwatson2008-03-013-7/+7
* Rename globally exposed symbol send_trigger() to audit_send_trigger().rwatson2008-03-014-6/+7
* Replace somewhat awkward audit trail rotation scheme, which involved therwatson2008-02-271-156/+91
* Rename several audit functions in the global kernel symbol namespace torwatson2008-02-255-11/+11
* Make sure that the termid type is initialized to AU_IPv4 by default.csjp2008-01-281-0/+2
* Properly return the error from mls_subject_privileged() in the ifnetrwatson2008-01-281-3/+1
* Fix gratuitous whitespace bugcsjp2008-01-181-1/+2
* Add a case for AUE_LISTEN. This removes the following console error message:csjp2008-01-181-0/+1
* VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used inattilio2008-01-135-15/+15
* vn_lock() is currently only used with the 'curthread' passed as argument.attilio2008-01-105-8/+8
* Add a new file descriptor type for IPC shared memory objects and use it tojhb2008-01-085-0/+339
* Add a new 'why' argument to kdb_enter(), and a set of constants to userwatson2007-12-251-1/+1
* Change "audit_pipe_preselect" to "audit_pipe_presel" to make it printwkoszek2007-12-251-1/+1
* Fix a MAC label leak for POSIX semaphores, in which per-policy labelsrwatson2007-12-171-0/+1
* Explicitly initialize 'ret' to 0'. It lets one to build tmpfs from thewkoszek2007-12-041-0/+2
* Implement per-object type consistency checks for labels passed torwatson2007-10-301-20/+65
* Replace use of AU_NULL with 0 when no audit classes are in use; thisrwatson2007-10-292-4/+4
* Canonicalize names of local variables.rwatson2007-10-291-66/+66
* Resort TrustedBSD MAC Framework policy entry point implementations andrwatson2007-10-299-4684/+4744
* Add missing mac_test labeling and sleep checks for the syncache.rwatson2007-10-281-0/+48
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Frameworkrwatson2007-10-288-87/+0
* Continue to move from generic network entry points in the TrustedBSD MACrwatson2007-10-289-86/+155
* Move towards more explicit support for various network protocol stacksrwatson2007-10-2812-82/+414
* Perform explicit label type checks for externalize entry points, rather thanrwatson2007-10-281-10/+70
* Make sure we are incrementing the read count for each audit pipe read.csjp2007-10-271-0/+1
* Give each posixsem MAC Framework entry point its own counter and test caserwatson2007-10-271-9/+74
* Update comment following MAC Framework entry point renaming andrwatson2007-10-261-1/+6
OpenPOWER on IntegriCloud