| Commit message (Expand) | Author | Age | Files | Lines |
* | Create a mac_bsdextended_check_vp function that takes a cred, a | dwmalone | 2006-03-04 | 1 | -280/+43 |
* | Count drops when the first of two pipe mallocs fails. | rwatson | 2006-03-04 | 1 | -0/+1 |
* | Update src/sys/security/audit for OpenBSM 1.0 alpha 5: | rwatson | 2006-03-04 | 3 | -15/+6 |
* | Eliminate a deadlock when creating snapshots. Blocking vn_start_write() must | tegge | 2006-03-02 | 1 | -0/+3 |
* | Add stub AUE_EACCESS entry. | rwatson | 2006-02-11 | 1 | -0/+1 |
* | Initialize user process audit ID to AU_DEFAUDITID so that init and | rwatson | 2006-02-11 | 1 | -0/+1 |
* | Acquire vnode lock around call to VOP_GETATTR() in audit_record_write(). | rwatson | 2006-02-07 | 1 | -0/+2 |
* | Fix queue drop logic when the queue overflows: decrement queue length. | rwatson | 2006-02-07 | 1 | -0/+1 |
* | Add support for audit pipe special devices, which allow user space | rwatson | 2006-02-06 | 3 | -0/+550 |
* | Manage audit record memory with the slab allocator, turning | rwatson | 2006-02-06 | 1 | -100/+85 |
* | When GC'ing a thread, assert that it has no active audit record. | rwatson | 2006-02-05 | 2 | -0/+11 |
* | Cast pointers to (uintptr_t) before down-casting to (int). This avoids | rwatson | 2006-02-04 | 1 | -7/+8 |
* | Fix INVARIANTS build on amd64; (unsigned unsigned long) != u_int64_t. | rwatson | 2006-02-03 | 1 | -2/+2 |
* | Remove user.h include in audit.h, it is unneeded, and also can cause | rwatson | 2006-02-03 | 1 | -1/+0 |
* | Add new fields to process-related data structures: | rwatson | 2006-02-02 | 2 | -0/+11 |
* | Import kernel audit framework: | rwatson | 2006-02-01 | 9 | -0/+6228 |
* | Fix potential overrun of static stack allocated array which stores | csjp | 2006-01-15 | 1 | -1/+1 |
* | Introduce a new sysctl variable: | csjp | 2005-12-31 | 1 | -1/+6 |
* | Normalize a significant number of kernel malloc type names: | rwatson | 2005-10-31 | 2 | -2/+2 |
* | Lock object while we iterate through it's backing objects. | csjp | 2005-10-09 | 1 | -6/+7 |
* | Use the correct object's backing_object_offset while calculating offsets. | csjp | 2005-10-04 | 1 | -1/+4 |
* | Standard Giant push down operations for the Mandatory Access Control (MAC) | csjp | 2005-10-04 | 2 | -68/+54 |
* | Conditionally pickup Giant in mac_cred_mmapped_drop_perms_recurse so | csjp | 2005-10-04 | 1 | -2/+6 |
* | Complete removal of mac_create_root_mount/mpo_create_root_mount MAC | rwatson | 2005-10-02 | 2 | -3/+0 |
* | Allow the root user to be aware of other credentials by virtue | trhodes | 2005-09-30 | 1 | -2/+12 |
* | Add #include <sys/sx.h>, devfs is going to require this shortly. | phk | 2005-09-19 | 7 | -0/+7 |
* | Remove mac_create_root_mount() and mpo_create_root_mount(), which | rwatson | 2005-09-19 | 6 | -69/+0 |
* | Insert a series of place-holder function pointers in mac_policy.h for | rwatson | 2005-08-08 | 1 | -0/+25 |
* | If a "hole" opens up in the ruleset (i.e.: remove 5), do not return | trhodes | 2005-07-28 | 1 | -5/+2 |
* | Remove duplicate initialization of mpo_create_stub pointer. | rwatson | 2005-07-21 | 1 | -1/+0 |
* | Bump the module versions of the MAC Framework and MAC policy modules | rwatson | 2005-07-14 | 3 | -3/+11 |
* | When devfs cloning takes place, provide access to the credential of the | rwatson | 2005-07-14 | 8 | -15/+27 |
* | Eliminate MAC entry point mac_create_mbuf_from_mbuf(), which is | rwatson | 2005-07-05 | 8 | -102/+12 |
* | Add MAC Framework and MAC policy entry point mac_check_socket_create(), | rwatson | 2005-07-05 | 4 | -0/+40 |
* | Correct grammar error in comment | csjp | 2005-06-10 | 1 | -1/+1 |
* | Gratuitous renaming of four System V Semaphore MAC Framework entry | rwatson | 2005-06-07 | 7 | -56/+56 |
* | Introduce MAC Framework and MAC Policy entry points to label and control | rwatson | 2005-05-04 | 7 | -0/+462 |
* | Get the directory structure correct in a comment. | trhodes | 2005-04-22 | 2 | -2/+4 |
* | Add locking support to mac_bsdextended: | trhodes | 2005-04-22 | 1 | -37/+67 |
* | Introduce p_canwait() and MAC Framework and MAC Policy entry points | rwatson | 2005-04-18 | 5 | -0/+37 |
* | Introduce three additional MAC Framework and MAC Policy entry points to | rwatson | 2005-04-16 | 5 | -8/+166 |
* | In mac_get_fd(), remove unconditional acquisition of Giant around copying | rwatson | 2005-04-16 | 2 | -18/+14 |
* | Introduce new MAC Framework and MAC Policy entry points to control the use | rwatson | 2005-04-16 | 5 | -0/+337 |
* | Move MAC check_vnode_mmap entry point out from being exclusive to | csjp | 2005-04-14 | 8 | -12/+16 |
* | Remove an accidental clearing of the new label pointer on a system V | rwatson | 2005-02-24 | 1 | -1/+0 |
* | Synchronize HEAD copyright/license with RELENG_5 copyright/license: | rwatson | 2005-02-13 | 1 | -5/+5 |
* | Update copyright for NETA->McAfee. | rwatson | 2005-01-30 | 1 | -5/+5 |
* | Remove policy references to mpo_check_vnode_mprotect(), which is | rwatson | 2005-01-26 | 5 | -54/+2 |
* | Remove an obsoleted comment about struct versions. | rwatson | 2005-01-23 | 1 | -1/+0 |
* | Update mac_test for MAC Framework policy entry points System V IPC | rwatson | 2005-01-22 | 1 | -0/+378 |