aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* Add stub entry point implementations of mpo_priv_check and mpo_priv_grant toRobert Watson2006-11-061-0/+16
* Sweep kernel replacing suser(9) calls with priv(9) calls, assigningRobert Watson2006-11-0611-21/+45
* Add a new priv(9) kernel interface for checking the availability ofRobert Watson2006-11-063-0/+100
* Change the type of ar_arg_sockaddr from struct sockaddr to structChristian S.J. Peron2006-11-062-3/+2
* Forward declare struct cdev, since arguments of this type are used inRobert Watson2006-10-301-0/+1
* Remove extra _MAC_ from #ifdef guard.Robert Watson2006-10-251-1/+1
* Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.hRobert Watson2006-10-2217-76/+32
* Do allow jailed superuser to override the port ACL.Robert Watson2006-10-101-1/+1
* Mark the audit system calls as being un-implemented in jails. Currently we doChristian S.J. Peron2006-10-101-0/+19
* Add BSM conversion switch entries for a number of system calls, manyRobert Watson2006-10-031-7/+43
* Trim some no longer XXX comments.Robert Watson2006-10-021-22/+5
* Audit path argument when changing audit trails.Robert Watson2006-10-021-3/+4
* Rework the way errors are handled with respect to how audit records areRobert Watson2006-09-241-100/+145
* Merge OpenBSM 1.0 alpha 11 changes into src/sys/bsm and src/sys/security;Robert Watson2006-09-211-1/+1
* Remove MAC_DEBUG label counters, which were used to debug leaks andRobert Watson2006-09-2013-161/+0
* Rather than allocating all buffer memory for the completed BSM recordRobert Watson2006-09-201-19/+17
* Add missing white space in au_to_exec_{args,env}().Robert Watson2006-09-201-0/+2
* Make sure that lutimes(2) gets processed and converted into a BSM record.Christian S.J. Peron2006-09-181-0/+1
* Declare security and security.bsd sysctl hierarchies in sysctl.h alongRobert Watson2006-09-171-1/+0
* Correct a slight regression which was introduced with the implementation ofChristian S.J. Peron2006-09-174-5/+20
* Add AUE_SYSARCH to the list of audit events during BSM conversion to preventRobert Watson2006-09-171-0/+1
* Introduce a new entry point, mac_create_mbuf_from_firewall. This entry pointChristian S.J. Peron2006-09-126-0/+50
* Add struct msg to the forwarded declared data structures in mac_policy.h.Robert Watson2006-09-091-0/+1
* Add a BSM conversion switch case for AUE_GETCWD, so that a consoleRobert Watson2006-09-091-0/+3
* Small style cleanup.Robert Watson2006-09-091-3/+2
* White space cleanup, no functional change.Robert Watson2006-09-041-53/+53
* Audit the argv and env vectors passed in on exec:Wayne Salamon2006-09-017-10/+139
* Fix panic associated with file creation via RPC/NFS when the MLS policyChristian S.J. Peron2006-08-261-0/+12
* Allow the user process to query the kernel's notion of a maximumRobert Watson2006-08-262-0/+6
* Update kernel OpenBSM parts, especially src/sys/bsm, for the OpenBSMRobert Watson2006-08-262-3/+4
* Remove $P4$ from this file; other then temporarily P4-local work inRobert Watson2006-08-251-1/+0
* Add kqueue support to audit pipe pseudo-devices.Robert Watson2006-08-241-0/+84
* Make mpo_associate_nfsd_label() return void, not int, to matchRobert Watson2006-08-062-3/+2
* Remove the NDEVFSINO and NDEVFSOVERFLOW options which no longer exists inPoul-Henning Kamp2006-07-173-3/+0
* Implement mpo_associate_nfsd_label entry point for the BIBA security policy,Christian S.J. Peron2006-07-101-0/+13
* Audit the remaining parameters to the extattr system calls. GenerateWayne Salamon2006-07-061-0/+59
* Correct a number of problems that were previously commented on:Robert Watson2006-07-032-49/+40
* Make the size of the subject32_ex and process32_ex tokens depend onWayne Salamon2006-06-171-13/+25
* Lock process when copying fields from process structure so as toRobert Watson2006-06-081-3/+2
* Prefer C to C++ comments per style(9).Robert Watson2006-06-081-1/+1
* Extract pointer value for mnt_stat from vp after the NULL check, notRobert Watson2006-06-061-1/+2
* Remove use of Giant around vn_open() in audit trail setup.Robert Watson2006-06-051-15/+10
* When generating BSM tokens for mkfifo(), include mode argument.Robert Watson2006-06-051-1/+6
* When generating the process token, need to check whether theRobert Watson2006-06-052-15/+14
* Consistently use audit_free() to free records, rather thanRobert Watson2006-06-051-2/+2
* Introduce support for per-audit pipe preselection independent from theRobert Watson2006-06-056-66/+519
* Shorten audit record zone name.Robert Watson2006-06-051-1/+1
* No longer unconditionally drain the audit record queue if there isRobert Watson2006-06-051-35/+5
* Pull BSM conversion logic out of audit_record_write(), as well asRobert Watson2006-06-051-84/+48
* Assert audit mtx in audit_worker_drain().Robert Watson2006-06-051-11/+30
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-26 07:20:24 +0000