aboutsummaryrefslogtreecommitdiff
path: root/sys/kern/kern_priv.c
Commit message (Expand)AuthorAgeFilesLines
* jail: Consistently handle the pr_allow bitmaskJamie Gritton2020-12-271-28/+3
* Add CTLFLAG_MPSAFE to the suser_enabled sysctl.Mariusz Zaborski2020-11-181-2/+2
* jail: introduce per jail suser_enabled settingMariusz Zaborski2020-11-181-9/+61
* Fix style nits.Mariusz Zaborski2020-11-181-1/+1
* vfs: respect PRIV_VFS_LOOKUP in vaccess_smrMateusz Guzik2020-08-251-0/+52
* Further depessimize priv_check_cred_vfs_generationMateusz Guzik2020-07-301-2/+17
* vfs: add restrictions to read(2) of a directory [2/2]Kyle Evans2020-06-041-0/+8
* Partially decompose priv_check by adding priv_check_cred_vfs_generationMateusz Guzik2020-02-131-26/+78
* Annotate suser_enabled as __read_mostlyMateusz Guzik2020-02-131-1/+1
* Check for probes enabled in priv_check_cred before evaluting the error.Mateusz Guzik2018-12-191-4/+6
* Remove unused argument to priv_check_cred.Mateusz Guzik2018-12-111-2/+2
* In hardened systems, where the security.bsd.unprivileged_proc_debug sysctlJamie Gritton2018-11-271-0/+12
* Add a new jail permission, allow.read_msgbuf. When true, jailed processesJamie Gritton2018-10-171-0/+16
* sys/kern: adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-271-0/+2
* Pull in r267961 and r267973 again. Fix for issues reported will follow.Hans Petter Selasky2014-06-281-4/+2
* Revert r267961, r267973:Glen Barber2014-06-271-2/+4
* Extend the meaning of the CTLFLAG_TUN flag to automatically check ifHans Petter Selasky2014-06-271-4/+2
* dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINEAndriy Gapon2013-11-261-4/+4
* - For kernel compiled only with KDTRACE_HOOKS and not any lock debuggingAttilio Rao2013-11-251-2/+0
* Make the comments a little more clear about PRIV_KMEM_*, explicitlyJamie Gritton2013-07-061-2/+3
* Add new privileges, PRIV_KMEM_READ and PRIV_KMEM_WRITE, used in openingJamie Gritton2013-07-051-0/+9
* Style nits.Pawel Jakub Dawidek2013-05-191-6/+5
* Use SDT_PROBE1() instead of SDT_PROBE().Pawel Jakub Dawidek2013-05-191-7/+4
* - Add sysctl to allow unprivileged users to call mlock(2)-family systemAndrey Zonov2012-12-181-0/+18
* Add an extra comment to the SDT probes definition. This allows us to getRui Paulo2010-08-221-2/+2
* Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERICRobert Watson2009-06-051-1/+0
* Reduce the verbosity of SDT trace points for DTrace by defining severalRobert Watson2009-03-031-6/+2
* Add static tracing for privilege checking:Robert Watson2009-02-261-9/+40
* Remove the suser(9) interface from the kernel. It has been replaced fromAttilio Rao2008-09-171-21/+0
* Add __FBSDID() tag.Robert Watson2008-03-071-2/+3
* Continue kernel privilege cleanup for 7.0: unstaticize suser_enabled andRobert Watson2007-07-021-1/+1
* Rather than passing SUSER_RUID into priv_check_cred() to specify whenRobert Watson2007-06-161-7/+18
* Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); inRobert Watson2007-06-121-10/+0
* Add a new priv(9) kernel interface for checking the availability ofRobert Watson2006-11-061-0/+154
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-16 14:13:22 +0000