| Commit message (Expand) | Author | Age | Files | Lines |
|---|
| * | Move per-process audit state from a pointer in the proc structure to | rwatson | 2007-06-07 | 4 | -162/+133 |
| * | Commit 14/14 of sched_lock decomposition. | jeff | 2007-06-05 | 1 | -2/+2 |
| * | Clean up audit comments--formatting, spelling, etc. | rwatson | 2007-06-01 | 8 | -74/+70 |
| * | Change the VOP_OPEN(), vn_open() vnode operation and d_fdopen() cdev operation | kib | 2007-06-01 | 1 | -1/+1 |
| * | Remove AUDIT_PRINTF() debugging statements and definition; clean up or | rwatson | 2007-06-01 | 3 | -55/+10 |
| * | Remove unused !AUDIT audit_proc_*() prototypes: unlike in Mac OS X, we | rwatson | 2007-05-30 | 2 | -23/+0 |
| * | Synchronize white space to congruent user-space code in OpenBSM. | rwatson | 2007-05-30 | 1 | -0/+2 |
| * | Remove unused ar_subj_comm field from in-kernel audit record; we never | rwatson | 2007-05-30 | 2 | -2/+0 |
| * | Consistent white space after .'s in comments. | rwatson | 2007-05-30 | 1 | -3/+3 |
| * | No need to force __inline__ of currecord(), as the compiler will usefully | rwatson | 2007-05-23 | 1 | -1/+1 |
| * | Short name of kernel audit worker thread from "audit_worker" to "audit". | rwatson | 2007-05-21 | 1 | -1/+1 |
| * | Don't expose #ifdef NOTYET parts to userspace via audit_ioctl.h, just | rwatson | 2007-04-29 | 1 | -3/+0 |
| * | Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, | rwatson | 2007-04-23 | 8 | -51/+49 |
| * | Apply variable name normalization to MAC policies: adopt global conventions | rwatson | 2007-04-23 | 10 | -1001/+995 |
| * | Normalize variable naming in the MAC Framework by adopting the normal | rwatson | 2007-04-22 | 8 | -395/+384 |
| * | In the MAC Framework implementation, file systems have two per-mountpoint | rwatson | 2007-04-22 | 7 | -115/+54 |
| * | Remove MAC Framework access control check entry points made redundant with | rwatson | 2007-04-22 | 7 | -183/+387 |
| * | Further MAC test policy cleanup and enhancement: | rwatson | 2007-04-22 | 1 | -141/+478 |
| * | Perform overdue clean up mac_test policy: | rwatson | 2007-04-22 | 1 | -719/+476 |
| * | Allow MAC policy modules to control access to audit configuration system | rwatson | 2007-04-21 | 10 | -8/+446 |
| * | Remove $P4$ that snuck into CVS from Perforce. | rwatson | 2007-04-17 | 1 | -1/+0 |
| * | Merge OpenBSM 1.0 alpha 14 changes to src/sys/security/audit: | rwatson | 2007-04-16 | 1 | -13/+184 |
| * | Fix the handling of IPv6 addresses for subject and process BSM audit | csjp | 2007-04-13 | 7 | -33/+104 |
| * | Replace custom file descriptor array sleep lock constructed using a mutex | rwatson | 2007-04-04 | 1 | -2/+2 |
| * | Remove 'MPSAFE' annotations from the comments above most system calls: all | rwatson | 2007-03-04 | 3 | -47/+0 |
| * | More unnecessary include reduction. | rwatson | 2007-02-23 | 7 | -90/+12 |
| * | Remove many unneeded includes, update copyright. | rwatson | 2007-02-23 | 1 | -29/+2 |
| * | Remove empty entry point functions (init, destroy, syscall) from | rwatson | 2007-02-23 | 2 | -32/+0 |
| * | mac_none sample policy has nothing to enforce, so remove sysctls. | rwatson | 2007-02-23 | 1 | -9/+0 |
| * | Update auditing of socket information for the inpcb new world order: | rwatson | 2007-02-20 | 1 | -6/+4 |
| * | Move mapping of MBI_APPEND to MBI_WRITE from inside the rule loop in | rwatson | 2007-02-20 | 1 | -9/+8 |
| * | Do allow bypass of mac_seeotheruids in jail in order to be consistent | rwatson | 2007-02-19 | 1 | -1/+2 |
| * | In mac_biba_check_system_swapoff(), don't extract the object label since | rwatson | 2007-02-10 | 1 | -2/+1 |
| * | Print intptr_t values by first casting to intmax_t and then printing with | rwatson | 2007-02-06 | 1 | -1/+1 |
| * | Introduce accessor functions mac_label_get() and mac_label_set() to replace | rwatson | 2007-02-06 | 9 | -69/+107 |
| * | Continue 7-CURRENT MAC Framework rearrangement and cleanup: | rwatson | 2007-02-06 | 21 | -19/+10 |
| * | When returning early from audit_arg_file() due to so->so_pcb being NULL | rwatson | 2007-01-06 | 1 | -2/+3 |
| * | Teach the stub policy about some of the more recent entry points that have | csjp | 2007-01-01 | 1 | -0/+57 |
| * | Remove conditional return of 1. For the MAC_STATIC case at this point in | csjp | 2007-01-01 | 1 | -3/+0 |
| * | Only signal the CV indicating that the MAC Framework is available for | rwatson | 2006-12-31 | 1 | -6/+23 |
| * | Slightly resort functions in file so that no forward function prototypes | rwatson | 2006-12-29 | 1 | -49/+46 |
| * | Re-add include of opt_mac.h in mac_framework.c, which was improperly | rwatson | 2006-12-29 | 1 | -0/+2 |
| * | Remove two XXX comments that no longer apply. | rwatson | 2006-12-29 | 1 | -5/+0 |
| * | Use p_cansee() to check that a target process for an audit state | rwatson | 2006-12-29 | 1 | -3/+9 |
| * | Add a witness sleep warning to canon_path(), which invokes vput() and hence | rwatson | 2006-12-29 | 2 | -3/+3 |
| * | Add missing include guards to mac_internal.h, update include guards in | rwatson | 2006-12-28 | 2 | -3/+8 |
| * | Update a number of comments: | rwatson | 2006-12-28 | 4 | -23/+22 |
| * | Remove XXX comments about EA transaction support and provide a more | rwatson | 2006-12-28 | 1 | -6/+11 |
| * | Remove an inaccurate comment I added regarding storage for mbuf tag | rwatson | 2006-12-28 | 1 | -7/+0 |
| * | In mac_inpcb_sosetlabel(), assert the socket lock rather than commenting | rwatson | 2006-12-28 | 1 | -1/+1 |
