aboutsummaryrefslogtreecommitdiff
path: root/sys/kern/kern_prot.c
Commit message (Expand)AuthorAgeFilesLines
* proc: perform a lockless check in sys_issetugidMateusz Guzik2017-01-241-2/+0
* Renumber license clauses in sys/kern to avoid skipping #3Ed Maste2016-09-151-1/+1
* Audit the accepted (or rejected) username argument to setlogin(2).Robert Watson2016-08-201-0/+1
* Prepare for network stack as a moduleStephen J. Kiernan2016-07-271-48/+15
* sys/kern: spelling fixes in comments.Pedro F. Giffuni2016-04-291-2/+2
* Call crextend() before copying old credentials to the new credentialsGleb Smirnoff2016-01-141-2/+1
* Get rid of lim_update_thread and cred_update_thread.Mateusz Guzik2015-07-161-18/+0
* Generalised support for copy-on-write structures shared by threads.Mateusz Guzik2015-06-101-2/+3
* cred: add proc_set_cred_init helperMateusz Guzik2015-03-211-2/+14
* cred: add proc_set_cred helperMateusz Guzik2015-03-161-9/+34
* Add procctl(2) PROC_TRACE_CTL command to enable or disable debuggerKonstantin Belousov2015-01-181-0/+7
* Extend struct ucred with group table.Mateusz Guzik2014-11-051-3/+6
* [SA-14:25] Fix kernel stack disclosure in setlogin(2) / getlogin(2).Dag-Erling Smørgrav2014-11-041-15/+16
* Fix up an assertion in kern_setgroups, it should compare with ngroups_max + 1Mateusz Guzik2014-10-261-1/+1
* Tidy up sys_setgroups and kern_setgroups.Mateusz Guzik2014-10-261-8/+8
* Use a temporary buffer in sys_setgroups for requests with <= XU_NGROUPS groups.Mateusz Guzik2014-10-261-5/+12
* Eliminate unnecessary memory allocation in sys_getgroups and its ibcs2 counte...Mateusz Guzik2014-10-211-33/+12
* Get rid of crshared.Mateusz Guzik2014-10-051-11/+1
* Fix getppid for traced processes.Mateusz Guzik2014-08-241-6/+23
* Style fixBaptiste Daroussin2012-11-141-1/+1
* return ERANGE if the buffer is too small to contain the login as documented inBaptiste Daroussin2012-11-141-0/+2
* Fix a typo. (s/nessesary/necessary/)Hiroki Sato2012-01-081-1/+1
* In order to maximize the re-usability of kernel code in user space thisKip Macy2011-09-161-27/+27
* Notify racct when process credentials change.Edward Tomasz Napierala2011-03-311-0/+10
* Add two new system calls, setloginclass(2) and getloginclass(2). This makesEdward Tomasz Napierala2011-03-051-0/+4
* Add some FEATURE macros for various features (AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/Alexander Leidinger2011-02-251-0/+5
* Revert r210225 - turns out I was wrong; the "/*-" is not license-onlyEdward Tomasz Napierala2010-07-181-16/+16
* The "/*-" comment marker is supposed to denote copyrights. Remove non-copyrightEdward Tomasz Napierala2010-07-181-16/+16
* Only allocate the space we need before calling kern_getgroups insteadBrooks Davis2010-01-151-1/+7
* Replace the static NGROUPS=NGROUPS_MAX+1=1024 with a dynamicBrooks Davis2010-01-121-6/+6
* Remove the interim vimage containers, struct vimage and struct procg,Jamie Gritton2009-07-171-15/+1
* Remove crcopy call from seteuid now that it calls crcopysafe.Jamie Gritton2009-07-081-1/+0
* Replace AUDIT_ARG() with variable argument macros with a set more moreRobert Watson2009-06-271-15/+15
* Change crsetgroups_locked() (called by crsetgroups()) to sort theBrooks Davis2009-06-201-10/+45
* Rework the credential code to support larger values of NGROUPS andBrooks Davis2009-06-191-35/+135
* Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERICRobert Watson2009-06-051-1/+0
* Add internal 'mac_policy_count' counter to the MAC Framework, which is aRobert Watson2009-06-021-2/+0
* Introduce an interm userland-kernel API for creating vnets andMarko Zec2009-05-311-1/+5
* Add hierarchical jails. A jail may further virtualize its environmentJamie Gritton2009-05-271-19/+10
* Introduce a new virtualization container, provisionally named vprocg, to holdMarko Zec2009-05-081-0/+10
* Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson2009-03-081-9/+9
* The userland_sysctl() function retries sysctl_root() until returnedKonstantin Belousov2008-12-121-1/+1
* Retire the MALLOC and FREE macros. They are an abomination unto style(9).Dag-Erling Smørgrav2008-10-231-8/+8
* Add cr_canseeinpcb() doing checks using the cached socketBjoern A. Zeeb2008-10-171-0/+35
* Merge first in a series of TrustedBSD MAC Framework KPI changesRobert Watson2007-10-241-18/+18
* Eliminate now-unused SUSER_ALLOWJAIL arguments to priv_check_cred(); inRobert Watson2007-06-121-39/+20
* Move per-process audit state from a pointer in the proc structure toRobert Watson2007-06-071-0/+9
* Further system call comment cleanup:Robert Watson2007-03-051-6/+4
* Remove 'MPSAFE' annotations from the comments above most system calls: allRobert Watson2007-03-041-97/+3
* Sort copyrights together.Robert Watson2007-01-081-2/+4