| Commit message (Expand) | Author | Age | Files | Lines |
* | Add one further check with mac_policy_count to an mbuf copying case | rwatson | 2009-06-03 | 1 | -0/+3 |
* | Continue work to optimize performance of "options MAC" when no MAC policy | rwatson | 2009-06-03 | 10 | -94/+328 |
* | By default, label all network interfaces as biba/equal on attach. This | rwatson | 2009-06-03 | 1 | -1/+1 |
* | Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings that | rwatson | 2009-06-02 | 1 | -2/+2 |
* | Add internal 'mac_policy_count' counter to the MAC Framework, which is a | rwatson | 2009-06-02 | 3 | -22/+70 |
* | Make the rmlock(9) interface a bit more like the rwlock(9) interface: | rwatson | 2009-05-29 | 1 | -1/+1 |
* | Add hierarchical jails. A jail may further virtualize its environment | jamie | 2009-05-27 | 1 | -2/+2 |
* | Convert the MAC Framework from using rwlocks to rmlocks to stabilize | rwatson | 2009-05-27 | 2 | -21/+32 |
* | Remove the thread argument from the FSD (File-System Dependent) parts of | attilio | 2009-05-11 | 1 | -1/+1 |
* | Rename MAC Framework-internal macros used to invoke policy entry points: | rwatson | 2009-05-01 | 18 | -304/+339 |
* | Temporarily relax the constraints on argument size checking for A_GETCOND; | rwatson | 2009-04-19 | 1 | -12/+6 |
* | Merge OpenBSM 1.1 changes to the FreeBSD 8.x kernel: | rwatson | 2009-04-19 | 7 | -44/+225 |
* | Merge new kernel files from OpenBSM 1.1: audit_fcntl.h and | rwatson | 2009-04-16 | 1 | -0/+290 |
* | Remove D_NEEDGIANT from audit pipes. I'm actually not sure why this was | rwatson | 2009-04-16 | 1 | -1/+1 |
* | Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhat | trasz | 2009-03-29 | 3 | -6/+6 |
* | - Correct logic in if statement - we want to allocate temporary buffer | pjd | 2009-03-14 | 1 | -1/+3 |
* | Rework MAC Framework synchronization in a number of ways in order to | rwatson | 2009-03-14 | 20 | -327/+410 |
* | Mark the bsdextended rules sysctl as being mpsafe. | csjp | 2009-03-09 | 1 | -2/+2 |
* | Add a new thread-private flag, TDP_AUDITREC, to indicate whether or | rwatson | 2009-03-09 | 3 | -5/+15 |
* | Remove 'uio' argument from MAC Framework and MAC policy entry points for | rwatson | 2009-03-08 | 10 | -36/+21 |
* | Rename 'ucred' argument to mac_socket_check_bind() to 'cred' to match | rwatson | 2009-03-08 | 1 | -3/+3 |
* | Improve the consistency of MAC Framework and MAC policy entry point | rwatson | 2009-03-08 | 9 | -467/+454 |
* | Add static DTrace probes for MAC Framework access control checks and | rwatson | 2009-03-08 | 17 | -14/+660 |
* | Reduce the verbosity of SDT trace points for DTrace by defining several | rwatson | 2009-03-03 | 1 | -12/+3 |
* | Merge OpenBSM 1.1 beta 1 from OpenBSM vendor branch to head, both | rwatson | 2009-03-02 | 2 | -9/+10 |
* | Use vm_map_entry_t instead of explicit struct vm_map_entry *. | kib | 2009-02-24 | 1 | -1/+1 |
* | Set the lower bound on queue size for an audit pipe to 1 instead of 0, | rwatson | 2009-02-08 | 1 | -2/+2 |
* | Change various routines that are responsible for transforming audit | rwatson | 2009-02-08 | 2 | -8/+8 |
* | Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE arguments | rwatson | 2009-02-08 | 1 | -0/+1 |
* | Audit the flag argument to the nfssvc(2) system call. | rwatson | 2009-02-08 | 1 | -2/+8 |
* | Eliminate the local variable 'ape' in audit_pipe_kqread(), as it's only | rwatson | 2009-02-04 | 1 | -5/+0 |
* | Use __FBSDID() for $FreeBSD$ version strings in .c files. | rwatson | 2009-01-24 | 2 | -4/+6 |
* | Begin to add SDT tracing of the MAC Framework: add policy modevent, | rwatson | 2009-01-24 | 1 | -1/+24 |
* | Update copyright, P4 version number as audit_bsm_token.c reflects changes | rwatson | 2009-01-14 | 1 | -2/+2 |
* | Merge OpenBSM alpha 5 from OpenBSM vendor branch to head, both | rwatson | 2009-01-14 | 4 | -243/+874 |
* | Rather than having MAC policies explicitly declare what object types | rwatson | 2009-01-10 | 14 | -153/+88 |
* | Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather than | rwatson | 2009-01-10 | 6 | -1/+6 |
* | Do a lockless read of the audit pipe list before grabbing the audit pipe | rwatson | 2009-01-06 | 1 | -0/+4 |
* | In AUDIT_SYSCALL_EXIT(), invoke audit_syscall_exit() only if an audit | rwatson | 2009-01-06 | 1 | -3/+3 |
* | Fix white space botch: use carriage returns rather than tabs. | rwatson | 2008-12-31 | 1 | -1/+2 |
* | Commit two files missed in previous commit: hook up audit_bsm_errno.c | rwatson | 2008-12-31 | 1 | -2/+4 |
* | Call au_errno_to_bsm() on the errno value passed into au_to_return32() | rwatson | 2008-12-31 | 1 | -1/+1 |
* | Merge OpenBSM alpha 4 from OpenBSM vendor branch to head, both | rwatson | 2008-12-31 | 2 | -77/+767 |
* | Make preparations for resurrecting shared/read locks on vm maps: | alc | 2008-12-22 | 1 | -4/+2 |
* | Merge OpenBSM 1.1 alpha 2 from the OpenBSM vendor branch to head, both | rwatson | 2008-12-02 | 1 | -75/+137 |
* | Partially roll back a revision which changed the error code being returned | csjp | 2008-11-30 | 1 | -1/+1 |
* | MFp4: | bz | 2008-11-29 | 1 | -0/+1 |
* | Regularize /* FALLTHROUGH */ comments in the BSM event type switch, and | rwatson | 2008-11-25 | 1 | -6/+10 |
* | When repeatedly accessing a thread credential, cache the credential | rwatson | 2008-11-14 | 3 | -42/+48 |
* | The audit queue limit variables are size_t, so use size_t for the audit | rwatson | 2008-11-13 | 2 | -4/+4 |