| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Teach the MAC policies which utilize mbuf labeling the new syncache | csjp | 2006-12-13 | 3 | -0/+75 |
| * | Fix LOR between the syncache and inpcb locks when MAC is present in the | csjp | 2006-12-13 | 3 | -0/+68 |
| * | Merge posix4/* into normal kernel hierarchy. | trhodes | 2006-11-11 | 5 | -10/+5 |
| * | Add stub entry point implementations of mpo_priv_check and mpo_priv_grant to | rwatson | 2006-11-06 | 1 | -0/+16 |
| * | Sweep kernel replacing suser(9) calls with priv(9) calls, assigning | rwatson | 2006-11-06 | 11 | -21/+45 |
| * | Add a new priv(9) kernel interface for checking the availability of | rwatson | 2006-11-06 | 3 | -0/+100 |
| * | Change the type of ar_arg_sockaddr from struct sockaddr to struct | csjp | 2006-11-06 | 2 | -3/+2 |
| * | Forward declare struct cdev, since arguments of this type are used in | rwatson | 2006-10-30 | 1 | -0/+1 |
| * | Remove extra _MAC_ from #ifdef guard. | rwatson | 2006-10-25 | 1 | -1/+1 |
| * | Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h | rwatson | 2006-10-22 | 17 | -76/+32 |
| * | Do allow jailed superuser to override the port ACL. | rwatson | 2006-10-10 | 1 | -1/+1 |
| * | Mark the audit system calls as being un-implemented in jails. Currently we do | csjp | 2006-10-10 | 1 | -0/+19 |
| * | Add BSM conversion switch entries for a number of system calls, many | rwatson | 2006-10-03 | 1 | -7/+43 |
| * | Trim some no longer XXX comments. | rwatson | 2006-10-02 | 1 | -22/+5 |
| * | Audit path argument when changing audit trails. | rwatson | 2006-10-02 | 1 | -3/+4 |
| * | Rework the way errors are handled with respect to how audit records are | rwatson | 2006-09-24 | 1 | -100/+145 |
| * | Merge OpenBSM 1.0 alpha 11 changes into src/sys/bsm and src/sys/security; | rwatson | 2006-09-21 | 1 | -1/+1 |
| * | Remove MAC_DEBUG label counters, which were used to debug leaks and | rwatson | 2006-09-20 | 13 | -161/+0 |
| * | Rather than allocating all buffer memory for the completed BSM record | rwatson | 2006-09-20 | 1 | -19/+17 |
| * | Add missing white space in au_to_exec_{args,env}(). | rwatson | 2006-09-20 | 1 | -0/+2 |
| * | Make sure that lutimes(2) gets processed and converted into a BSM record. | csjp | 2006-09-18 | 1 | -0/+1 |
| * | Declare security and security.bsd sysctl hierarchies in sysctl.h along | rwatson | 2006-09-17 | 1 | -1/+0 |
| * | Correct a slight regression which was introduced with the implementation of | csjp | 2006-09-17 | 4 | -5/+20 |
| * | Add AUE_SYSARCH to the list of audit events during BSM conversion to prevent | rwatson | 2006-09-17 | 1 | -0/+1 |
| * | Introduce a new entry point, mac_create_mbuf_from_firewall. This entry point | csjp | 2006-09-12 | 6 | -0/+50 |
| * | Add struct msg to the forwarded declared data structures in mac_policy.h. | rwatson | 2006-09-09 | 1 | -0/+1 |
| * | Add a BSM conversion switch case for AUE_GETCWD, so that a console | rwatson | 2006-09-09 | 1 | -0/+3 |
| * | Small style cleanup. | rwatson | 2006-09-09 | 1 | -3/+2 |
| * | White space cleanup, no functional change. | rwatson | 2006-09-04 | 1 | -53/+53 |
| * | Audit the argv and env vectors passed in on exec: | wsalamon | 2006-09-01 | 7 | -10/+139 |
| * | Fix panic associated with file creation via RPC/NFS when the MLS policy | csjp | 2006-08-26 | 1 | -0/+12 |
| * | Allow the user process to query the kernel's notion of a maximum | rwatson | 2006-08-26 | 2 | -0/+6 |
| * | Update kernel OpenBSM parts, especially src/sys/bsm, for the OpenBSM | rwatson | 2006-08-26 | 2 | -3/+4 |
| * | Remove $P4$ from this file; other then temporarily P4-local work in | rwatson | 2006-08-25 | 1 | -1/+0 |
| * | Add kqueue support to audit pipe pseudo-devices. | rwatson | 2006-08-24 | 1 | -0/+84 |
| * | Make mpo_associate_nfsd_label() return void, not int, to match | rwatson | 2006-08-06 | 2 | -3/+2 |
| * | Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists in | phk | 2006-07-17 | 3 | -3/+0 |
| * | Implement mpo_associate_nfsd_label entry point for the BIBA security policy, | csjp | 2006-07-10 | 1 | -0/+13 |
| * | Audit the remaining parameters to the extattr system calls. Generate | wsalamon | 2006-07-06 | 1 | -0/+59 |
| * | Correct a number of problems that were previously commented on: | rwatson | 2006-07-03 | 2 | -49/+40 |
| * | Make the size of the subject32_ex and process32_ex tokens depend on | wsalamon | 2006-06-17 | 1 | -13/+25 |
| * | Lock process when copying fields from process structure so as to | rwatson | 2006-06-08 | 1 | -3/+2 |
| * | Prefer C to C++ comments per style(9). | rwatson | 2006-06-08 | 1 | -1/+1 |
| * | Extract pointer value for mnt_stat from vp after the NULL check, not | rwatson | 2006-06-06 | 1 | -1/+2 |
| * | Remove use of Giant around vn_open() in audit trail setup. | rwatson | 2006-06-05 | 1 | -15/+10 |
| * | When generating BSM tokens for mkfifo(), include mode argument. | rwatson | 2006-06-05 | 1 | -1/+6 |
| * | When generating the process token, need to check whether the | rwatson | 2006-06-05 | 2 | -15/+14 |
| * | Consistently use audit_free() to free records, rather than | rwatson | 2006-06-05 | 1 | -2/+2 |
| * | Introduce support for per-audit pipe preselection independent from the | rwatson | 2006-06-05 | 6 | -66/+519 |
| * | Shorten audit record zone name. | rwatson | 2006-06-05 | 1 | -1/+1 |
