summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Continue to move from generic network entry points in the TrustedBSD MACrwatson2007-10-289-86/+155
* Move towards more explicit support for various network protocol stacksrwatson2007-10-2812-82/+414
* Perform explicit label type checks for externalize entry points, rather thanrwatson2007-10-281-10/+70
* Make sure we are incrementing the read count for each audit pipe read.csjp2007-10-271-0/+1
* Give each posixsem MAC Framework entry point its own counter and test caserwatson2007-10-271-9/+74
* Update comment following MAC Framework entry point renaming andrwatson2007-10-261-1/+6
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asrwatson2007-10-269-33/+33
* Implement AUE_CORE, which adds process core dump support into the kernel.csjp2007-10-263-0/+57
* Sort entry points in mac_framework.h and mac_policy.h alphabetically byrwatson2007-10-252-629/+574
* Normalize TCP syncache-related MAC Framework entry points to match mostrwatson2007-10-257-44/+44
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moverwatson2007-10-257-50/+50
* Consistently name functions for mac_<policy> as <policy>_whatever ratherrwatson2007-10-2511-2761/+2722
* Further MAC Framework cleanup: normalize some local variable names andrwatson2007-10-256-48/+49
* Merge first in a series of TrustedBSD MAC Framework KPI changesrwatson2007-10-2427-3241/+3324
* Use extended process token. The in kernel process auditcsjp2007-10-241-2/+2
* Bump MAC_VERSION to 4 and add an 8.x line in the version table. Version 4rwatson2007-10-231-1/+2
* Canonicalize naming of local variables for struct ksem and associatedrwatson2007-10-217-72/+71
* Rename the kthread_xxx (e.g. kthread_create()) callsjulian2007-10-201-2/+2
* - Change the wakeup logic associated with having multiple sleeperscsjp2007-10-121-2/+2
* - Move all of the PS_ flags into either p_flag or td_flags.jeff2007-09-171-2/+1
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryrwatson2007-09-109-136/+136
* Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, whichrwatson2007-08-061-4/+0
* When checking labels during a vnode link operation in MLS, use the filerwatson2007-07-231-1/+1
* In preparation for 7.0 privilege cleanup, clean up style:rwatson2007-07-052-87/+32
* Fix a bunch of warnings due to a missing forward declaration of a struct.peter2007-07-051-0/+1
* Remove two boot printfs generated by Audit to announce it's presence,rwatson2007-07-012-2/+4
* - Add audit_arg_audinfo_addr() for auditing the arguments for setaudit_addr(2)csjp2007-06-275-6/+67
* Add a new MAC framework and policy entry point,rwatson2007-06-266-1/+38
* In setaudit_addr(), drop the process lock in error cases.rwatson2007-06-151-0/+1
* Spell statistics more correctly in comments.rwatson2007-06-141-1/+1
* Include priv.h to pick up suser(9) definitions, missed in an earlierrwatson2007-06-131-0/+1
* Close a very narrow race that might cause a trigger allocation to berwatson2007-06-131-7/+6
* Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); inrwatson2007-06-122-4/+2
* Clean up, and sometimes remove, a number of audit-related implementationrwatson2007-06-113-32/+3
* Move per-process audit state from a pointer in the proc structure torwatson2007-06-074-162/+133
* Commit 14/14 of sched_lock decomposition.jeff2007-06-051-2/+2
* Clean up audit comments--formatting, spelling, etc.rwatson2007-06-018-74/+70
* Change the VOP_OPEN(), vn_open() vnode operation and d_fdopen() cdev operationkib2007-06-011-1/+1
* Remove AUDIT_PRINTF() debugging statements and definition; clean up orrwatson2007-06-013-55/+10
* Remove unused !AUDIT audit_proc_*() prototypes: unlike in Mac OS X, werwatson2007-05-302-23/+0
* Synchronize white space to congruent user-space code in OpenBSM.rwatson2007-05-301-0/+2
* Remove unused ar_subj_comm field from in-kernel audit record; we neverrwatson2007-05-302-2/+0
* Consistent white space after .'s in comments.rwatson2007-05-301-3/+3
* No need to force __inline__ of currecord(), as the compiler will usefullyrwatson2007-05-231-1/+1
* Short name of kernel audit worker thread from "audit_worker" to "audit".rwatson2007-05-211-1/+1
* Don't expose #ifdef NOTYET parts to userspace via audit_ioctl.h, justrwatson2007-04-291-3/+0
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,rwatson2007-04-238-51/+49
* Apply variable name normalization to MAC policies: adopt global conventionsrwatson2007-04-2310-1001/+995
* Normalize variable naming in the MAC Framework by adopting the normalrwatson2007-04-228-395/+384
* In the MAC Framework implementation, file systems have two per-mountpointrwatson2007-04-227-115/+54
OpenPOWER on IntegriCloud