summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* cred: add proc_set_cred helpermjg2015-03-163-6/+6
* audit: fix cred assignment when A_SETPMASK is usedmjg2015-03-151-1/+1
* Adjust printf format specifiers for dev_t and ino_t in kernel.gleb2014-12-171-2/+2
* Replace dev_clone with cdevpriv(9) KPI in audit_pipe code.davide2014-08-201-71/+47
* Pull in r267961 and r267973 again. Fix for issues reported will follow.hselasky2014-06-286-50/+23
* Revert r267961, r267973:gjb2014-06-276-23/+50
* Extend the meaning of the CTLFLAG_TUN flag to automatically check ifhselasky2014-06-276-50/+23
* audit: plug FILEDESC_LOCK leak in audit_canon_path.mjg2014-03-211-0/+1
* Update kernel inclusions of capability.h to use capsicum.h instead; somerwatson2014-03-161-1/+1
* Remove AppleTalk support.glebius2014-03-148-144/+0
* Remove IPX support.glebius2014-03-142-4/+0
* As constantly reported during kernel compilation, m_buflen is unsigned sobz2013-12-251-2/+1
* There is no sysctl with the MIB { CTL_KERN, KERN_MAXID }.jhb2013-12-051-1/+0
* dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINEavg2013-11-262-27/+27
* - For kernel compiled only with KDTRACE_HOOKS and not any lock debuggingattilio2013-11-2516-17/+0
* The r48589 promised to remove implicit inclusion of if_var.h soon. Prepareglebius2013-10-261-1/+4
* Fix some typos that were causing probe argument types to show up as unknown.markj2013-10-014-4/+4
* Make the mac_policy_rm lock recursable, which allows reentrance intokib2013-09-291-1/+2
* - Use make_dev_credf(MAKEDEV_REF) instead of the race-prone make_dev()+davide2013-09-071-8/+3
* Handle cases where capability rights are not provided.pjd2013-09-051-1/+1
* Change the cap_rights_t type from uint64_t to a structure that we can extendpjd2013-09-056-7/+25
* Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.kib2013-08-217-0/+172
* audit_proc_coredump: check return value of audit_newavg2013-07-091-0/+2
* Relax the vm object locking in mac_proc_vm_revoke_recurse(). A read lockalc2013-06-041-4/+4
* MFCattilio2013-03-083-6/+23
|\
| * - Implement two new system calls:pjd2013-03-023-6/+23
* | MFCattilio2013-03-024-1/+36
|\ \ | |/
| * Merge Capsicum overhaul:pjd2013-03-024-1/+36
* | Rename VM_OBJECT_LOCK(), VM_OBJECT_UNLOCK() and VM_OBJECT_TRYLOCK() toattilio2013-02-201-6/+6
* | Switch vm_object lock to be a rwlock.attilio2013-02-201-1/+1
|/
* Remove redundant check.pjd2013-02-171-3/+1
* Style.pjd2013-02-111-2/+2
* Add AUDIT_ARG_SOCKADDR() macro so we can start using the audit_arg_sockaddr()pjd2013-02-071-0/+6
* Implement the zonename token for jailed processes. Ifcsjp2013-01-173-2/+25
* Four .c files from OpenBSM are used, in modified form, by the kernel torwatson2012-12-155-0/+0
* Merge OpenBSM 1.2-alpha2 changes from contrib/openbsm torwatson2012-12-012-8/+59
* IFp4 @219811:pjd2012-12-011-3/+1
* IFp4 @208452:pjd2012-11-301-7/+11
* IFp4 @208451:pjd2012-11-305-23/+42
* IFp4 @208383:pjd2012-11-301-3/+3
* IFp4 @208382:pjd2012-11-301-8/+15
* IFp4 @208381:pjd2012-11-301-1/+1
* Remove the support for using non-mpsafe filesystem modules.kib2012-10-225-53/+15
* Check vplabel for NULL before dereferencing it. Fixes a panicbrueffer2012-05-031-0/+3
* When allocation of labels on files is implicitly disabled due to MACrwatson2012-04-081-14/+27
* - Improve BPF locking model.melifaro2012-04-061-0/+2
* Remove direct access to si_name.ed2012-02-103-24/+30
* Use strchr() and strrchr().ed2012-01-021-5/+5
* Revert the approach for skipping lockstat_probe_func call when doingattilio2011-12-121-1/+0
* put sys/systm.h at its proper place or add it if missingavg2011-12-122-1/+2
OpenPOWER on IntegriCloud