| Commit message (Expand) | Author | Age | Files | Lines |
... | |
* | Create audit records for AUE_POSIX_OPENPT, currently w/o arguments. | rwatson | 2009-07-02 | 1 | -0/+1 |
* | Fix comment misthink. | rwatson | 2009-07-02 | 1 | -1/+1 |
* | Clean up a number of aspects of token generation from audit arguments to | rwatson | 2009-07-02 | 1 | -69/+55 |
* | For access(2) and eaccess(2), audit the requested access mode. | rwatson | 2009-07-01 | 1 | -2/+9 |
* | Define missing audit argument macro AUDIT_ARG_SOCKET(), and | rwatson | 2009-07-01 | 1 | -0/+6 |
* | When auditing unmount(2), capture FSID arguments as regular text strings | rwatson | 2009-07-01 | 1 | -0/+8 |
* | Audit the file descriptor number passed to lseek(2). | rwatson | 2009-07-01 | 1 | -1/+1 |
* | udit the 'options' argument to wait4(2). | rwatson | 2009-07-01 | 1 | -0/+4 |
* | Dynamically allocate the gidset field in audit record. | sson | 2009-06-29 | 3 | -2/+13 |
* | Replace AUDIT_ARG() with variable argument macros with a set more more | rwatson | 2009-06-27 | 2 | -15/+174 |
* | Implement global and per-uid accounting of the anonymous memory. Add | kib | 2009-06-23 | 2 | -0/+4 |
* | Chase the removal of PRIV_TTY_PRISON in the mac(9) modules. | ed | 2009-06-20 | 2 | -2/+0 |
* | Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Use | kib | 2009-06-10 | 1 | -2/+1 |
* | Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC | rwatson | 2009-06-05 | 1 | -2/+0 |
* | Add one further check with mac_policy_count to an mbuf copying case | rwatson | 2009-06-03 | 1 | -0/+3 |
* | Continue work to optimize performance of "options MAC" when no MAC policy | rwatson | 2009-06-03 | 10 | -94/+328 |
* | By default, label all network interfaces as biba/equal on attach. This | rwatson | 2009-06-03 | 1 | -1/+1 |
* | Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings that | rwatson | 2009-06-02 | 1 | -2/+2 |
* | Add internal 'mac_policy_count' counter to the MAC Framework, which is a | rwatson | 2009-06-02 | 3 | -22/+70 |
* | Make the rmlock(9) interface a bit more like the rwlock(9) interface: | rwatson | 2009-05-29 | 1 | -1/+1 |
* | Add hierarchical jails. A jail may further virtualize its environment | jamie | 2009-05-27 | 1 | -2/+2 |
* | Convert the MAC Framework from using rwlocks to rmlocks to stabilize | rwatson | 2009-05-27 | 2 | -21/+32 |
* | Remove the thread argument from the FSD (File-System Dependent) parts of | attilio | 2009-05-11 | 1 | -1/+1 |
* | Rename MAC Framework-internal macros used to invoke policy entry points: | rwatson | 2009-05-01 | 18 | -304/+339 |
* | Temporarily relax the constraints on argument size checking for A_GETCOND; | rwatson | 2009-04-19 | 1 | -12/+6 |
* | Merge OpenBSM 1.1 changes to the FreeBSD 8.x kernel: | rwatson | 2009-04-19 | 7 | -44/+225 |
* | Merge new kernel files from OpenBSM 1.1: audit_fcntl.h and | rwatson | 2009-04-16 | 1 | -0/+290 |
* | Remove D_NEEDGIANT from audit pipes. I'm actually not sure why this was | rwatson | 2009-04-16 | 1 | -1/+1 |
* | Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhat | trasz | 2009-03-29 | 3 | -6/+6 |
* | - Correct logic in if statement - we want to allocate temporary buffer | pjd | 2009-03-14 | 1 | -1/+3 |
* | Rework MAC Framework synchronization in a number of ways in order to | rwatson | 2009-03-14 | 20 | -327/+410 |
* | Mark the bsdextended rules sysctl as being mpsafe. | csjp | 2009-03-09 | 1 | -2/+2 |
* | Add a new thread-private flag, TDP_AUDITREC, to indicate whether or | rwatson | 2009-03-09 | 3 | -5/+15 |
* | Remove 'uio' argument from MAC Framework and MAC policy entry points for | rwatson | 2009-03-08 | 10 | -36/+21 |
* | Rename 'ucred' argument to mac_socket_check_bind() to 'cred' to match | rwatson | 2009-03-08 | 1 | -3/+3 |
* | Improve the consistency of MAC Framework and MAC policy entry point | rwatson | 2009-03-08 | 9 | -467/+454 |
* | Add static DTrace probes for MAC Framework access control checks and | rwatson | 2009-03-08 | 17 | -14/+660 |
* | Reduce the verbosity of SDT trace points for DTrace by defining several | rwatson | 2009-03-03 | 1 | -12/+3 |
* | Merge OpenBSM 1.1 beta 1 from OpenBSM vendor branch to head, both | rwatson | 2009-03-02 | 2 | -9/+10 |
* | Use vm_map_entry_t instead of explicit struct vm_map_entry *. | kib | 2009-02-24 | 1 | -1/+1 |
* | Set the lower bound on queue size for an audit pipe to 1 instead of 0, | rwatson | 2009-02-08 | 1 | -2/+2 |
* | Change various routines that are responsible for transforming audit | rwatson | 2009-02-08 | 2 | -8/+8 |
* | Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE arguments | rwatson | 2009-02-08 | 1 | -0/+1 |
* | Audit the flag argument to the nfssvc(2) system call. | rwatson | 2009-02-08 | 1 | -2/+8 |
* | Eliminate the local variable 'ape' in audit_pipe_kqread(), as it's only | rwatson | 2009-02-04 | 1 | -5/+0 |
* | Use __FBSDID() for $FreeBSD$ version strings in .c files. | rwatson | 2009-01-24 | 2 | -4/+6 |
* | Begin to add SDT tracing of the MAC Framework: add policy modevent, | rwatson | 2009-01-24 | 1 | -1/+24 |
* | Update copyright, P4 version number as audit_bsm_token.c reflects changes | rwatson | 2009-01-14 | 1 | -2/+2 |
* | Merge OpenBSM alpha 5 from OpenBSM vendor branch to head, both | rwatson | 2009-01-14 | 4 | -243/+874 |
* | Rather than having MAC policies explicitly declare what object types | rwatson | 2009-01-10 | 14 | -153/+88 |