| Commit message (Expand) | Author | Age | Files | Lines |
* | Audit 'fd' and 'cmd' arguments to fcntl(2), and when generating BSM, | Robert Watson | 2016-11-22 | 1 | -4/+1 |
* | Fix improper use of "its". | Bryan Drewery | 2016-11-08 | 1 | -1/+1 |
* | Don't check aq64_minfree which is unsigned for negative values. | John Baldwin | 2016-09-08 | 1 | -2/+2 |
* | Audit the accepted (or rejected) username argument to setlogin(2). | Robert Watson | 2016-08-20 | 2 | -2/+8 |
* | Add AUE_WAIT6 handling to the BSM conversion switch statement, reusing | Robert Watson | 2016-07-11 | 1 | -0/+1 |
* | Implement AUE_PREAD and AUE_PWRITE BSM conversion support, eliminating | Robert Watson | 2016-06-13 | 1 | -0/+2 |
* | sys/security: minor spelling fixes. | Pedro F. Giffuni | 2016-05-06 | 7 | -7/+7 |
* | sys: use our nitems() macro when param.h is available. | Pedro F. Giffuni | 2016-04-21 | 2 | -4/+2 |
* | Remove slightly used const values that can be replaced with nitems(). | Pedro F. Giffuni | 2016-04-21 | 2 | -7/+4 |
* | audit(8): leave unsigned comparison for last. | Pedro F. Giffuni | 2016-04-08 | 1 | -2/+2 |
* | Busy the mount point which is the owner of the audit vnode, around | Konstantin Belousov | 2016-01-16 | 1 | -15/+45 |
* | Move the funsetown(9) call from audit_pipe_close() to cdevpriv | Konstantin Belousov | 2016-01-13 | 1 | -25/+4 |
* | Merge from contrib/openbsm to bring the kernel audit bits up to date with Ope... | Christian Brueffer | 2015-12-20 | 5 | -10/+0 |
* | Fix style issues around existing SDT probes. | Mark Johnston | 2015-12-16 | 2 | -22/+22 |
* | fd: make 'rights' a manadatory argument to fget* functions | Mateusz Guzik | 2015-07-05 | 1 | -1/+3 |
* | Replace struct filedesc argument in getvnode with struct thread | Mateusz Guzik | 2015-06-16 | 1 | -1/+1 |
* | fd: make rights a mandatory argument to fget_unlocked | Mateusz Guzik | 2015-06-16 | 1 | -1/+3 |
* | cred: add proc_set_cred helper | Mateusz Guzik | 2015-03-16 | 3 | -6/+6 |
* | audit: fix cred assignment when A_SETPMASK is used | Mateusz Guzik | 2015-03-15 | 1 | -1/+1 |
* | Adjust printf format specifiers for dev_t and ino_t in kernel. | Gleb Kurtsou | 2014-12-17 | 1 | -2/+2 |
* | Replace dev_clone with cdevpriv(9) KPI in audit_pipe code. | Davide Italiano | 2014-08-20 | 1 | -71/+47 |
* | Pull in r267961 and r267973 again. Fix for issues reported will follow. | Hans Petter Selasky | 2014-06-28 | 6 | -50/+23 |
* | Revert r267961, r267973: | Glen Barber | 2014-06-27 | 6 | -23/+50 |
* | Extend the meaning of the CTLFLAG_TUN flag to automatically check if | Hans Petter Selasky | 2014-06-27 | 6 | -50/+23 |
* | audit: plug FILEDESC_LOCK leak in audit_canon_path. | Mateusz Guzik | 2014-03-21 | 1 | -0/+1 |
* | Update kernel inclusions of capability.h to use capsicum.h instead; some | Robert Watson | 2014-03-16 | 1 | -1/+1 |
* | Remove AppleTalk support. | Gleb Smirnoff | 2014-03-14 | 8 | -144/+0 |
* | Remove IPX support. | Gleb Smirnoff | 2014-03-14 | 2 | -4/+0 |
* | As constantly reported during kernel compilation, m_buflen is unsigned so | Bjoern A. Zeeb | 2013-12-25 | 1 | -2/+1 |
* | There is no sysctl with the MIB { CTL_KERN, KERN_MAXID }. | John Baldwin | 2013-12-05 | 1 | -1/+0 |
* | dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE | Andriy Gapon | 2013-11-26 | 2 | -27/+27 |
* | - For kernel compiled only with KDTRACE_HOOKS and not any lock debugging | Attilio Rao | 2013-11-25 | 16 | -17/+0 |
* | The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare | Gleb Smirnoff | 2013-10-26 | 1 | -1/+4 |
* | Fix some typos that were causing probe argument types to show up as unknown. | Mark Johnston | 2013-10-01 | 4 | -4/+4 |
* | Make the mac_policy_rm lock recursable, which allows reentrance into | Konstantin Belousov | 2013-09-29 | 1 | -1/+2 |
* | - Use make_dev_credf(MAKEDEV_REF) instead of the race-prone make_dev()+ | Davide Italiano | 2013-09-07 | 1 | -8/+3 |
* | Handle cases where capability rights are not provided. | Pawel Jakub Dawidek | 2013-09-05 | 1 | -1/+1 |
* | Change the cap_rights_t type from uint64_t to a structure that we can extend | Pawel Jakub Dawidek | 2013-09-05 | 6 | -7/+25 |
* | Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd. | Konstantin Belousov | 2013-08-21 | 7 | -0/+172 |
* | audit_proc_coredump: check return value of audit_new | Andriy Gapon | 2013-07-09 | 1 | -0/+2 |
* | Relax the vm object locking in mac_proc_vm_revoke_recurse(). A read lock | Alan Cox | 2013-06-04 | 1 | -4/+4 |
* | Switch the vm_object mutex to be a rwlock. This will enable in the | Attilio Rao | 2013-03-09 | 1 | -7/+7 |
* | - Implement two new system calls: | Pawel Jakub Dawidek | 2013-03-02 | 3 | -6/+23 |
* | Merge Capsicum overhaul: | Pawel Jakub Dawidek | 2013-03-02 | 4 | -1/+36 |
* | Remove redundant check. | Pawel Jakub Dawidek | 2013-02-17 | 1 | -3/+1 |
* | Style. | Pawel Jakub Dawidek | 2013-02-11 | 1 | -2/+2 |
* | Add AUDIT_ARG_SOCKADDR() macro so we can start using the audit_arg_sockaddr() | Pawel Jakub Dawidek | 2013-02-07 | 1 | -0/+6 |
* | Implement the zonename token for jailed processes. If | Christian S.J. Peron | 2013-01-17 | 3 | -2/+25 |
* | Four .c files from OpenBSM are used, in modified form, by the kernel to | Robert Watson | 2012-12-15 | 5 | -0/+0 |
* | Merge OpenBSM 1.2-alpha2 changes from contrib/openbsm to | Robert Watson | 2012-12-01 | 2 | -8/+59 |