aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Use __FBSDID() for $FreeBSD$ IDs in the audit code.Robert Watson2008-04-139-18/+27
* Make naming of include guards for MAC Framework include files moreRobert Watson2008-04-133-9/+9
* Add the support for the AT_FDCWD and fd-relative name lookups to theKonstantin Belousov2008-03-311-0/+1
* In keeping with style(9)'s recommendations on macros, use a ';'Robert Watson2008-03-161-1/+1
* Remove XXX to remind me to check the free space calculation, which to myRobert Watson2008-03-101-3/+0
* Change auditon(2) so that if somebody supplies an invalid command, itChristian S.J. Peron2008-03-061-0/+3
* Rather than copying out the full audit trigger record, which includesRobert Watson2008-03-021-1/+1
* Add audit_prefixes to two more globally visible functions in the AuditRobert Watson2008-03-013-7/+7
* Rename globally exposed symbol send_trigger() to audit_send_trigger().Robert Watson2008-03-014-6/+7
* Replace somewhat awkward audit trail rotation scheme, which involved theRobert Watson2008-02-271-156/+91
* Rename several audit functions in the global kernel symbol namespace toRobert Watson2008-02-255-11/+11
* Make sure that the termid type is initialized to AU_IPv4 by default.Christian S.J. Peron2008-01-281-0/+2
* Properly return the error from mls_subject_privileged() in the ifnetRobert Watson2008-01-281-3/+1
* Fix gratuitous whitespace bugChristian S.J. Peron2008-01-181-1/+2
* Add a case for AUE_LISTEN. This removes the following console error message:Christian S.J. Peron2008-01-181-0/+1
* VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used inAttilio Rao2008-01-135-15/+15
* vn_lock() is currently only used with the 'curthread' passed as argument.Attilio Rao2008-01-105-8/+8
* Add a new file descriptor type for IPC shared memory objects and use it toJohn Baldwin2008-01-085-0/+339
* Add a new 'why' argument to kdb_enter(), and a set of constants to useRobert Watson2007-12-251-1/+1
* Change "audit_pipe_preselect" to "audit_pipe_presel" to make it printWojciech A. Koszek2007-12-251-1/+1
* Fix a MAC label leak for POSIX semaphores, in which per-policy labelsRobert Watson2007-12-171-0/+1
* Explicitly initialize 'ret' to 0'. It lets one to build tmpfs from theWojciech A. Koszek2007-12-041-0/+2
* Implement per-object type consistency checks for labels passed toRobert Watson2007-10-301-20/+65
* Replace use of AU_NULL with 0 when no audit classes are in use; thisRobert Watson2007-10-292-4/+4
* Canonicalize names of local variables.Robert Watson2007-10-291-66/+66
* Resort TrustedBSD MAC Framework policy entry point implementations andRobert Watson2007-10-299-4684/+4744
* Add missing mac_test labeling and sleep checks for the syncache.Robert Watson2007-10-281-0/+48
* Garbage collect mac_mbuf_create_multicast_encap TrustedBSD MAC FrameworkRobert Watson2007-10-288-87/+0
* Continue to move from generic network entry points in the TrustedBSD MACRobert Watson2007-10-289-86/+155
* Move towards more explicit support for various network protocol stacksRobert Watson2007-10-2812-82/+414
* Perform explicit label type checks for externalize entry points, rather thanRobert Watson2007-10-281-10/+70
* Make sure we are incrementing the read count for each audit pipe read.Christian S.J. Peron2007-10-271-0/+1
* Give each posixsem MAC Framework entry point its own counter and test caseRobert Watson2007-10-271-9/+74
* Update comment following MAC Framework entry point renaming andRobert Watson2007-10-261-1/+6
* Rename 'mac_mbuf_create_from_firewall' to 'mac_netinet_firewall_send' asRobert Watson2007-10-269-33/+33
* Implement AUE_CORE, which adds process core dump support into the kernel.Christian S.J. Peron2007-10-263-0/+57
* Sort entry points in mac_framework.h and mac_policy.h alphabetically byRobert Watson2007-10-252-629/+574
* Normalize TCP syncache-related MAC Framework entry points to match mostRobert Watson2007-10-257-44/+44
* Rename mac_associate_nfsd_label() to mac_proc_associate_nfsd(), and moveRobert Watson2007-10-257-50/+50
* Consistently name functions for mac_<policy> as <policy>_whatever ratherRobert Watson2007-10-2511-2761/+2722
* Further MAC Framework cleanup: normalize some local variable names andRobert Watson2007-10-256-48/+49
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-2427-3241/+3324
* Use extended process token. The in kernel process auditChristian S.J. Peron2007-10-241-2/+2
* Bump MAC_VERSION to 4 and add an 8.x line in the version table. Version 4Robert Watson2007-10-231-1/+2
* Canonicalize naming of local variables for struct ksem and associatedRobert Watson2007-10-217-72/+71
* Rename the kthread_xxx (e.g. kthread_create()) callsJulian Elischer2007-10-201-2/+2
* - Change the wakeup logic associated with having multiple sleepersChristian S.J. Peron2007-10-121-2/+2
* - Move all of the PS_ flags into either p_flag or td_flags.Jeff Roberson2007-09-171-2/+1
* Rename mac_check_vnode_delete() MAC Framework and MAC Policy entryRobert Watson2007-09-109-136/+136
* Remove the now-unused NET_{LOCK,UNLOCK,ASSERT}_GIANT() macros, whichRobert Watson2007-08-061-4/+0
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-19 03:45:54 +0000