summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Fix include guard spelling.rwatson2008-04-271-1/+1
* Use logic or, not binary or, when deciding whether or not a system callrwatson2008-04-241-1/+1
* When auditing state from an IPv4 or IPv6 socket, use read locks on therwatson2008-04-191-2/+2
* When propagating a MAC label from an inpcb to an mbuf, allow read andrwatson2008-04-191-1/+1
* Convert pcbinfo and inpcb mutexes to rwlocks, and modify macros torwatson2008-04-172-5/+5
* Use __FBSDID() for $FreeBSD$ IDs in the audit code.rwatson2008-04-139-18/+27
* Make naming of include guards for MAC Framework include files morerwatson2008-04-133-9/+9
* Add the support for the AT_FDCWD and fd-relative name lookups to thekib2008-03-311-0/+1
* In keeping with style(9)'s recommendations on macros, use a ';'rwatson2008-03-161-1/+1
* Remove XXX to remind me to check the free space calculation, which to myrwatson2008-03-101-3/+0
* Change auditon(2) so that if somebody supplies an invalid command, itcsjp2008-03-061-0/+3
* Rather than copying out the full audit trigger record, which includesrwatson2008-03-021-1/+1
* Add audit_prefixes to two more globally visible functions in the Auditrwatson2008-03-013-7/+7
* Rename globally exposed symbol send_trigger() to audit_send_trigger().rwatson2008-03-014-6/+7
* Replace somewhat awkward audit trail rotation scheme, which involved therwatson2008-02-271-156/+91
* Rename several audit functions in the global kernel symbol namespace torwatson2008-02-255-11/+11
* Make sure that the termid type is initialized to AU_IPv4 by default.csjp2008-01-281-0/+2
* Properly return the error from mls_subject_privileged() in the ifnetrwatson2008-01-281-3/+1
* Fix gratuitous whitespace bugcsjp2008-01-181-1/+2
* Add a case for AUE_LISTEN. This removes the following console error message:csjp2008-01-181-0/+1
* VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used inattilio2008-01-135-15/+15
* vn_lock() is currently only used with the 'curthread' passed as argument.attilio2008-01-105-8/+8
* Add a new file descriptor type for IPC shared memory objects and use it tojhb2008-01-085-0/+339
* Add a new 'why' argument to kdb_enter(), and a set of constants to userwatson2007-12-251-1/+1
* Change "audit_pipe_preselect" to "audit_pipe_presel" to make it printwkoszek2007-12-251-1/+1
* Fix a MAC label leak for POSIX semaphores, in which per-policy labelsrwatson2007-12-171-0/+1
* Explicitly initialize 'ret' to 0'. It lets one to build tmpfs from thewkoszek2007-12-041-0/+2
* Implement per-object type consistency checks for labels passed torwatson2007-10-301-20/+65
* Replace use of AU_NULL with 0 when no audit classes are in use; thisrwatson2007-10-292-4/+4
* Canonicalize names of local variables.rwatson2007-10-291-66/+66
* Resort TrustedBSD MAC Framework policy entry point implementations andrwatson2007-10-299-4684/+4744
* Add missing mac_test labeling and sleep checks for the syncache.rwatson2007-10-281-0/+48
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC Frameworkrwatson2007-10-288-87/+0
* Continue to move from generic network entry points in the TrustedBSD MACrwatson2007-10-289-86/+155
* Move towards more explicit support for various network protocol stacksrwatson2007-10-2812-82/+414
* Perform explicit label type checks for externalize entry points, rather thanrwatson2007-10-281-10/+70
* Make sure we are incrementing the read count for each audit pipe read.csjp2007-10-271-0/+1
* Give each posixsem MAC Framework entry point its own counter and test caserwatson2007-10-271-9/+74
* Update comment following MAC Framework entry point renaming andrwatson2007-10-261-1/+6
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asrwatson2007-10-269-33/+33
* Implement AUE_CORE, which adds process core dump support into the kernel.csjp2007-10-263-0/+57
* Sort entry points in mac_framework.h and mac_policy.h alphabetically byrwatson2007-10-252-629/+574
* Normalize TCP syncache-related MAC Framework entry points to match mostrwatson2007-10-257-44/+44
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moverwatson2007-10-257-50/+50
* Consistently name functions for mac_<policy> as <policy>_whatever ratherrwatson2007-10-2511-2761/+2722
* Further MAC Framework cleanup: normalize some local variable names andrwatson2007-10-256-48/+49
* Merge first in a series of TrustedBSD MAC Framework KPI changesrwatson2007-10-2427-3241/+3324
* Use extended process token. The in kernel process auditcsjp2007-10-241-2/+2
* Bump MAC_VERSION to 4 and add an 8.x line in the version table. Version 4rwatson2007-10-231-1/+2
* Canonicalize naming of local variables for struct ksem and associatedrwatson2007-10-217-72/+71
OpenPOWER on IntegriCloud