summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* audit_proc_coredump: check return value of audit_newavg2013-07-091-0/+2
* Relax the vm object locking in mac_proc_vm_revoke_recurse(). A read lockalc2013-06-041-4/+4
* MFCattilio2013-03-083-6/+23
|\
| * - Implement two new system calls:pjd2013-03-023-6/+23
* | MFCattilio2013-03-024-1/+36
|\ \ | |/
| * Merge Capsicum overhaul:pjd2013-03-024-1/+36
* | Rename VM_OBJECT_LOCK(), VM_OBJECT_UNLOCK() and VM_OBJECT_TRYLOCK() toattilio2013-02-201-6/+6
* | Switch vm_object lock to be a rwlock.attilio2013-02-201-1/+1
|/
* Remove redundant check.pjd2013-02-171-3/+1
* Style.pjd2013-02-111-2/+2
* Add AUDIT_ARG_SOCKADDR() macro so we can start using the audit_arg_sockaddr()pjd2013-02-071-0/+6
* Implement the zonename token for jailed processes. Ifcsjp2013-01-173-2/+25
* Four .c files from OpenBSM are used, in modified form, by the kernel torwatson2012-12-155-0/+0
* Merge OpenBSM 1.2-alpha2 changes from contrib/openbsm torwatson2012-12-012-8/+59
* IFp4 @219811:pjd2012-12-011-3/+1
* IFp4 @208452:pjd2012-11-301-7/+11
* IFp4 @208451:pjd2012-11-305-23/+42
* IFp4 @208383:pjd2012-11-301-3/+3
* IFp4 @208382:pjd2012-11-301-8/+15
* IFp4 @208381:pjd2012-11-301-1/+1
* Remove the support for using non-mpsafe filesystem modules.kib2012-10-225-53/+15
* Check vplabel for NULL before dereferencing it. Fixes a panicbrueffer2012-05-031-0/+3
* When allocation of labels on files is implicitly disabled due to MACrwatson2012-04-081-14/+27
* - Improve BPF locking model.melifaro2012-04-061-0/+2
* Remove direct access to si_name.ed2012-02-103-24/+30
* Use strchr() and strrchr().ed2012-01-021-5/+5
* Revert the approach for skipping lockstat_probe_func call when doingattilio2011-12-121-1/+0
* put sys/systm.h at its proper place or add it if missingavg2011-12-122-1/+2
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.ed2011-11-0711-13/+13
* Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.ed2011-11-073-3/+4
* Get rid of D_PSEUDO.ed2011-10-181-1/+1
* Remove two dublicated assignments.brueffer2011-10-081-3/+0
* In order to maximize the re-usability of kernel code in user space thiskmacy2011-09-162-38/+38
* Correct several issues in the integration of POSIX shared memory objectsrwatson2011-09-027-16/+462
* Fix a deficiency in the selinfo interface:attilio2011-08-251-0/+1
* Add the fo_chown and fo_chmod methods to struct fileops and use themkib2011-08-166-0/+176
* Second-to-last commit implementing Capsicum capabilities in the FreeBSDrwatson2011-08-112-3/+4
* Provide ability to audit cap_rights_t arguments.jonathan2011-07-184-0/+44
* - Add a FEATURE for capsicum (security_capabilities).netchild2011-03-041-1/+1
* Add ECAPMODE, "Not permitted in capability mode", a new kernel errnorwatson2011-03-011-0/+14
* Add some FEATURE macros for various features (AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/netchild2011-02-252-0/+5
* Unless "cnt" exceeds MAX_COMMIT_COUNT, nfsrv_commit() and nfsvno_fsync() arealc2011-02-051-5/+2
* sysctl(9) cleanup checkpoint: amd64 GENERIC builds cleanly.mdf2011-01-122-2/+2
* Fix typos.brucec2010-11-091-1/+1
* Add missing DTrace probe invocation to mac_vnode_check_open; the proberwatson2010-10-231-0/+2
* Replace sbuf_overflowed() with sbuf_error(), which returns any errormdf2010-09-101-1/+1
* Add an extra comment to the SDT probes definition. This allows us to getrpaulo2010-08-222-13/+15
* Add a case to make sure that internal audit records get convertedcsjp2010-05-041-0/+1
* Update device-labeling logic for Biba, LOMAC, and MLS to recognize new-stylerwatson2010-03-023-0/+3
* Make sure we convert audit records that were produced as the result of thecsjp2010-01-311-0/+7
OpenPOWER on IntegriCloud