summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Add one further check with mac_policy_count to an mbuf copying caserwatson2009-06-031-0/+3
* Continue work to optimize performance of "options MAC" when no MAC policyrwatson2009-06-0310-94/+328
* By default, label all network interfaces as biba/equal on attach. Thisrwatson2009-06-031-1/+1
* Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings thatrwatson2009-06-021-2/+2
* Add internal 'mac_policy_count' counter to the MAC Framework, which is arwatson2009-06-023-22/+70
* Make the rmlock(9) interface a bit more like the rwlock(9) interface:rwatson2009-05-291-1/+1
* Add hierarchical jails. A jail may further virtualize its environmentjamie2009-05-271-2/+2
* Convert the MAC Framework from using rwlocks to rmlocks to stabilizerwatson2009-05-272-21/+32
* Remove the thread argument from the FSD (File-System Dependent) parts ofattilio2009-05-111-1/+1
* Rename MAC Framework-internal macros used to invoke policy entry points:rwatson2009-05-0118-304/+339
* Temporarily relax the constraints on argument size checking for A_GETCOND;rwatson2009-04-191-12/+6
* Merge OpenBSM 1.1 changes to the FreeBSD 8.x kernel:rwatson2009-04-197-44/+225
* Merge new kernel files from OpenBSM 1.1: audit_fcntl.h andrwatson2009-04-161-0/+290
* Remove D_NEEDGIANT from audit pipes. I'm actually not sure why this wasrwatson2009-04-161-1/+1
* Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhattrasz2009-03-293-6/+6
* - Correct logic in if statement - we want to allocate temporary bufferpjd2009-03-141-1/+3
* Rework MAC Framework synchronization in a number of ways in order torwatson2009-03-1420-327/+410
* Mark the bsdextended rules sysctl as being mpsafe.csjp2009-03-091-2/+2
* Add a new thread-private flag, TDP_AUDITREC, to indicate whether orrwatson2009-03-093-5/+15
* Remove 'uio' argument from MAC Framework and MAC policy entry points forrwatson2009-03-0810-36/+21
* Rename 'ucred' argument to mac_socket_check_bind() to 'cred' to matchrwatson2009-03-081-3/+3
* Improve the consistency of MAC Framework and MAC policy entry pointrwatson2009-03-089-467/+454
* Add static DTrace probes for MAC Framework access control checks andrwatson2009-03-0817-14/+660
* Reduce the verbosity of SDT trace points for DTrace by defining severalrwatson2009-03-031-12/+3
* Merge OpenBSM 1.1 beta 1 from OpenBSM vendor branch to head, bothrwatson2009-03-022-9/+10
* Use vm_map_entry_t instead of explicit struct vm_map_entry *.kib2009-02-241-1/+1
* Set the lower bound on queue size for an audit pipe to 1 instead of 0,rwatson2009-02-081-2/+2
* Change various routines that are responsible for transforming auditrwatson2009-02-082-8/+8
* Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE argumentsrwatson2009-02-081-0/+1
* Audit the flag argument to the nfssvc(2) system call.rwatson2009-02-081-2/+8
* Eliminate the local variable 'ape' in audit_pipe_kqread(), as it's onlyrwatson2009-02-041-5/+0
* Use __FBSDID() for $FreeBSD$ version strings in .c files.rwatson2009-01-242-4/+6
* Begin to add SDT tracing of the MAC Framework: add policy modevent,rwatson2009-01-241-1/+24
* Update copyright, P4 version number as audit_bsm_token.c reflects changesrwatson2009-01-141-2/+2
* Merge OpenBSM alpha 5 from OpenBSM vendor branch to head, bothrwatson2009-01-144-243/+874
* Rather than having MAC policies explicitly declare what object typesrwatson2009-01-1014-153/+88
* Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather thanrwatson2009-01-106-1/+6
* Do a lockless read of the audit pipe list before grabbing the audit piperwatson2009-01-061-0/+4
* In AUDIT_SYSCALL_EXIT(), invoke audit_syscall_exit() only if an auditrwatson2009-01-061-3/+3
* Fix white space botch: use carriage returns rather than tabs.rwatson2008-12-311-1/+2
* Commit two files missed in previous commit: hook up audit_bsm_errno.crwatson2008-12-311-2/+4
* Call au_errno_to_bsm() on the errno value passed into au_to_return32()rwatson2008-12-311-1/+1
* Merge OpenBSM alpha 4 from OpenBSM vendor branch to head, bothrwatson2008-12-312-77/+767
* Make preparations for resurrecting shared/read locks on vm maps:alc2008-12-221-4/+2
* Merge OpenBSM 1.1 alpha 2 from the OpenBSM vendor branch to head, bothrwatson2008-12-021-75/+137
* Partially roll back a revision which changed the error code being returnedcsjp2008-11-301-1/+1
* MFp4:bz2008-11-291-0/+1
* Regularize /* FALLTHROUGH */ comments in the BSM event type switch, andrwatson2008-11-251-6/+10
* When repeatedly accessing a thread credential, cache the credentialrwatson2008-11-143-42/+48
* The audit queue limit variables are size_t, so use size_t for the auditrwatson2008-11-132-4/+4
OpenPOWER on IntegriCloud