summaryrefslogtreecommitdiffstats
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
...
* Clean up, and sometimes remove, a number of audit-related implementationrwatson2007-06-113-32/+3
* Move per-process audit state from a pointer in the proc structure torwatson2007-06-074-162/+133
* Commit 14/14 of sched_lock decomposition.jeff2007-06-051-2/+2
* Clean up audit comments--formatting, spelling, etc.rwatson2007-06-018-74/+70
* Change the VOP_OPEN(), vn_open() vnode operation and d_fdopen() cdev operationkib2007-06-011-1/+1
* Remove AUDIT_PRINTF() debugging statements and definition; clean up orrwatson2007-06-013-55/+10
* Remove unused !AUDIT audit_proc_*() prototypes: unlike in Mac OS X, werwatson2007-05-302-23/+0
* Synchronize white space to congruent user-space code in OpenBSM.rwatson2007-05-301-0/+2
* Remove unused ar_subj_comm field from in-kernel audit record; we neverrwatson2007-05-302-2/+0
* Consistent white space after .'s in comments.rwatson2007-05-301-3/+3
* No need to force __inline__ of currecord(), as the compiler will usefullyrwatson2007-05-231-1/+1
* Short name of kernel audit worker thread from "audit_worker" to "audit".rwatson2007-05-211-1/+1
* Don't expose #ifdef NOTYET parts to userspace via audit_ioctl.h, justrwatson2007-04-291-3/+0
* Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin,rwatson2007-04-238-51/+49
* Apply variable name normalization to MAC policies: adopt global conventionsrwatson2007-04-2310-1001/+995
* Normalize variable naming in the MAC Framework by adopting the normalrwatson2007-04-228-395/+384
* In the MAC Framework implementation, file systems have two per-mountpointrwatson2007-04-227-115/+54
* Remove MAC Framework access control check entry points made redundant withrwatson2007-04-227-183/+387
* Further MAC test policy cleanup and enhancement:rwatson2007-04-221-141/+478
* Perform overdue clean up mac_test policy:rwatson2007-04-221-719/+476
* Allow MAC policy modules to control access to audit configuration systemrwatson2007-04-2110-8/+446
* Remove $P4$ that snuck into CVS from Perforce.rwatson2007-04-171-1/+0
* Merge OpenBSM 1.0 alpha 14 changes to src/sys/security/audit:rwatson2007-04-161-13/+184
* Fix the handling of IPv6 addresses for subject and process BSM auditcsjp2007-04-137-33/+104
* Replace custom file descriptor array sleep lock constructed using a mutexrwatson2007-04-041-2/+2
* Remove 'MPSAFE' annotations from the comments above most system calls: allrwatson2007-03-043-47/+0
* More unnecessary include reduction.rwatson2007-02-237-90/+12
* Remove many unneeded includes, update copyright.rwatson2007-02-231-29/+2
* Remove empty entry point functions (init, destroy, syscall) fromrwatson2007-02-232-32/+0
* mac_none sample policy has nothing to enforce, so remove sysctls.rwatson2007-02-231-9/+0
* Update auditing of socket information for the inpcb new world order:rwatson2007-02-201-6/+4
* Move mapping of MBI_APPEND to MBI_WRITE from inside the rule loop inrwatson2007-02-201-9/+8
* Do allow bypass of mac_seeotheruids in jail in order to be consistentrwatson2007-02-191-1/+2
* In mac_biba_check_system_swapoff(), don't extract the object label sincerwatson2007-02-101-2/+1
* Print intptr_t values by first casting to intmax_t and then printing withrwatson2007-02-061-1/+1
* Introduce accessor functions mac_label_get() and mac_label_set() to replacerwatson2007-02-069-69/+107
* Continue 7-CURRENT MAC Framework rearrangement and cleanup:rwatson2007-02-0621-19/+10
* When returning early from audit_arg_file() due to so->so_pcb being NULLrwatson2007-01-061-2/+3
* Teach the stub policy about some of the more recent entry points that havecsjp2007-01-011-0/+57
* Remove conditional return of 1. For the MAC_STATIC case at this point incsjp2007-01-011-3/+0
* Only signal the CV indicating that the MAC Framework is available forrwatson2006-12-311-6/+23
* Slightly resort functions in file so that no forward function prototypesrwatson2006-12-291-49/+46
* Re-add include of opt_mac.h in mac_framework.c, which was improperlyrwatson2006-12-291-0/+2
* Remove two XXX comments that no longer apply.rwatson2006-12-291-5/+0
* Use p_cansee() to check that a target process for an audit staterwatson2006-12-291-3/+9
* Add a witness sleep warning to canon_path(), which invokes vput() and hencerwatson2006-12-292-3/+3
* Add missing include guards to mac_internal.h, update include guards inrwatson2006-12-282-3/+8
* Update a number of comments:rwatson2006-12-284-23/+22
* Remove XXX comments about EA transaction support and provide a morerwatson2006-12-281-6/+11
* Remove an inaccurate comment I added regarding storage for mbuf tagrwatson2006-12-281-7/+0
OpenPOWER on IntegriCloud