| Commit message (Expand) | Author | Age | Files | Lines |
* | Replace the static NGROUPS=NGROUPS_MAX+1=1024 with a dynamic | brooks | 2010-01-12 | 1 | -2/+2 |
* | Make mac_lomac(4) able to interpret NFSv4 access bits. | trasz | 2010-01-03 | 1 | -1/+1 |
* | Having thrown the cat out of the house, add a necessary include. | phk | 2009-09-08 | 1 | -0/+1 |
* | Revert previous commit and add myself to the list of people who should | phk | 2009-09-08 | 1 | -1/+0 |
* | Add necessary include. | phk | 2009-09-08 | 1 | -0/+1 |
* | Correctly audit real gids following changes to the audit record argument | rwatson | 2009-08-12 | 1 | -1/+1 |
* | Eliminate ARG_UPATH[12] arguments to AUDIT_ARG_UPATH() and instead | rwatson | 2009-07-29 | 3 | -89/+89 |
* | Rework vnode argument auditing to follow the same structure, in order | rwatson | 2009-07-28 | 3 | -34/+50 |
* | Audit file descriptors passed to fooat(2) system calls, which are used | rwatson | 2009-07-28 | 6 | -83/+184 |
* | Import OpenBSM 1.1p1 from vendor branch to 8-CURRENT, populating | rwatson | 2009-07-17 | 2 | -8/+121 |
* | Create audit records for AUE_POSIX_OPENPT, currently w/o arguments. | rwatson | 2009-07-02 | 1 | -0/+1 |
* | Fix comment misthink. | rwatson | 2009-07-02 | 1 | -1/+1 |
* | Clean up a number of aspects of token generation from audit arguments to | rwatson | 2009-07-02 | 1 | -69/+55 |
* | For access(2) and eaccess(2), audit the requested access mode. | rwatson | 2009-07-01 | 1 | -2/+9 |
* | Define missing audit argument macro AUDIT_ARG_SOCKET(), and | rwatson | 2009-07-01 | 1 | -0/+6 |
* | When auditing unmount(2), capture FSID arguments as regular text strings | rwatson | 2009-07-01 | 1 | -0/+8 |
* | Audit the file descriptor number passed to lseek(2). | rwatson | 2009-07-01 | 1 | -1/+1 |
* | udit the 'options' argument to wait4(2). | rwatson | 2009-07-01 | 1 | -0/+4 |
* | Dynamically allocate the gidset field in audit record. | sson | 2009-06-29 | 3 | -2/+13 |
* | Replace AUDIT_ARG() with variable argument macros with a set more more | rwatson | 2009-06-27 | 2 | -15/+174 |
* | Implement global and per-uid accounting of the anonymous memory. Add | kib | 2009-06-23 | 2 | -0/+4 |
* | Chase the removal of PRIV_TTY_PRISON in the mac(9) modules. | ed | 2009-06-20 | 2 | -2/+0 |
* | Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Use | kib | 2009-06-10 | 1 | -2/+1 |
* | Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC | rwatson | 2009-06-05 | 1 | -2/+0 |
* | Add one further check with mac_policy_count to an mbuf copying case | rwatson | 2009-06-03 | 1 | -0/+3 |
* | Continue work to optimize performance of "options MAC" when no MAC policy | rwatson | 2009-06-03 | 10 | -94/+328 |
* | By default, label all network interfaces as biba/equal on attach. This | rwatson | 2009-06-03 | 1 | -1/+1 |
* | Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings that | rwatson | 2009-06-02 | 1 | -2/+2 |
* | Add internal 'mac_policy_count' counter to the MAC Framework, which is a | rwatson | 2009-06-02 | 3 | -22/+70 |
* | Make the rmlock(9) interface a bit more like the rwlock(9) interface: | rwatson | 2009-05-29 | 1 | -1/+1 |
* | Add hierarchical jails. A jail may further virtualize its environment | jamie | 2009-05-27 | 1 | -2/+2 |
* | Convert the MAC Framework from using rwlocks to rmlocks to stabilize | rwatson | 2009-05-27 | 2 | -21/+32 |
* | Remove the thread argument from the FSD (File-System Dependent) parts of | attilio | 2009-05-11 | 1 | -1/+1 |
* | Rename MAC Framework-internal macros used to invoke policy entry points: | rwatson | 2009-05-01 | 18 | -304/+339 |
* | Temporarily relax the constraints on argument size checking for A_GETCOND; | rwatson | 2009-04-19 | 1 | -12/+6 |
* | Merge OpenBSM 1.1 changes to the FreeBSD 8.x kernel: | rwatson | 2009-04-19 | 7 | -44/+225 |
* | Merge new kernel files from OpenBSM 1.1: audit_fcntl.h and | rwatson | 2009-04-16 | 1 | -0/+290 |
* | Remove D_NEEDGIANT from audit pipes. I'm actually not sure why this was | rwatson | 2009-04-16 | 1 | -1/+1 |
* | Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhat | trasz | 2009-03-29 | 3 | -6/+6 |
* | - Correct logic in if statement - we want to allocate temporary buffer | pjd | 2009-03-14 | 1 | -1/+3 |
* | Rework MAC Framework synchronization in a number of ways in order to | rwatson | 2009-03-14 | 20 | -327/+410 |
* | Mark the bsdextended rules sysctl as being mpsafe. | csjp | 2009-03-09 | 1 | -2/+2 |
* | Add a new thread-private flag, TDP_AUDITREC, to indicate whether or | rwatson | 2009-03-09 | 3 | -5/+15 |
* | Remove 'uio' argument from MAC Framework and MAC policy entry points for | rwatson | 2009-03-08 | 10 | -36/+21 |
* | Rename 'ucred' argument to mac_socket_check_bind() to 'cred' to match | rwatson | 2009-03-08 | 1 | -3/+3 |
* | Improve the consistency of MAC Framework and MAC policy entry point | rwatson | 2009-03-08 | 9 | -467/+454 |
* | Add static DTrace probes for MAC Framework access control checks and | rwatson | 2009-03-08 | 17 | -14/+660 |
* | Reduce the verbosity of SDT trace points for DTrace by defining several | rwatson | 2009-03-03 | 1 | -12/+3 |
* | Merge OpenBSM 1.1 beta 1 from OpenBSM vendor branch to head, both | rwatson | 2009-03-02 | 2 | -9/+10 |
* | Use vm_map_entry_t instead of explicit struct vm_map_entry *. | kib | 2009-02-24 | 1 | -1/+1 |