aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* sys: add AUE_PDOPENPIDKonstantin Belousov2026-07-071-0/+10
* mac_portacl: do not reject unspecific family directlyK Rin2026-06-101-1/+2
* audit: Replace TAILQ with STAILQDag-Erling Smørgrav2026-06-051-11/+11
* audit: Add poll / select supportDag-Erling Smørgrav2026-06-051-2/+21
* MAC/do: Clarify comments about flags attached per-ID or per-ID-typeOlivier Certner2026-06-041-5/+7
* MAC/do: Fix double-free on parse error after "executable paths" featureOlivier Certner2026-06-011-8/+8
* MAC/do: Update copyrightOlivier Certner2026-05-291-3/+3
* MAC/do: Do not skip blanks when parsing executable pathsOlivier Certner2026-05-291-1/+1
* MAC/do: Serialize installing/modifying some jail's configurationOlivier Certner2026-05-291-23/+76
* MAC/do: Support for atomically modifying configurationsOlivier Certner2026-05-291-15/+49
* MAC/do: Sequential consistency for configuration retrievalOlivier Certner2026-05-291-48/+64
* MAC/do: Comment to explain the main invariant for configurationsOlivier Certner2026-05-291-0/+5
* MAC/do: Allocate only one default configurationOlivier Certner2026-05-291-12/+12
* MAC/do: Visually separate some file sectionsOlivier Certner2026-05-291-0/+2
* MAC/do: Fix reporting of "mac.do" post-"executable paths"Olivier Certner2026-05-291-3/+2
* MAC/do: Configuration: Fix default values: Remove jail creation methodOlivier Certner2026-05-291-14/+6
* MAC/do: Fix the recent logic to set jail parameters, make it more tolerantOlivier Certner2026-05-291-61/+140
* MAC/do: Constify is_null_or_empty()Olivier Certner2026-05-291-1/+1
* MAC/do: Fix obsolete wording in a comment ("ascendant" => "ancestor")Olivier Certner2026-05-291-1/+1
* MAC/do: parse_and_set_conf(): Require the model configurationOlivier Certner2026-05-291-28/+38
* MAC/do: parse_and_set_conf(): Obey empty parameters; Add docOlivier Certner2026-05-291-14/+14
* MAC/do: clone_rules(): Readability improvements, constificationOlivier Certner2026-05-291-11/+13
* MAC/do: Remove superfluous configuration initializationOlivier Certner2026-05-291-10/+24
* MAC/do: Move static assertions on constants close to their definitionsOlivier Certner2026-05-291-4/+6
* MAC/do: Constify clone_rules() and clone_exec_paths()'s source argumentOlivier Certner2026-05-291-2/+3
* MAC/do: Fix releasing a nonexistent reference on configuration parsing errorOlivier Certner2026-05-291-6/+10
* MAC/do: find_conf(): Return configuration with a true referenceOlivier Certner2026-05-291-43/+40
* MAC/do: Move hold_conf() and drop_conf() earlierOlivier Certner2026-05-291-15/+15
* MAC/do: find_conf(): Turn an MPASS() into a KASSERT()Olivier Certner2026-05-291-1/+9
* MAC/do: Rename size constants/variables to clear confusion with string lengthsOlivier Certner2026-05-291-34/+34
* MAC/do: Executable paths: Accept an empty stringOlivier Certner2026-05-291-6/+0
* MAC/do: Document and assert when parse error objects must be builtOlivier Certner2026-05-291-32/+50
* MAC/do: check_proc(): Remove a superfluous 'if'Olivier Certner2026-05-291-6/+5
* MAC/do: Expand "conf" to "configuration" in a panic message on INVARIANTSOlivier Certner2026-05-291-2/+2
* MAC/do: Fix recently-introduced commentsOlivier Certner2026-05-291-14/+25
* MAC/do: Make it style(9) compliant againOlivier Certner2026-05-291-70/+96
* MAC/do: Update copyrightOlivier Certner2026-05-291-0/+1
* MAC/do: Executable paths feature (GSoC 2025's final state)Kushagra Srivastava2026-05-291-159/+422
* mac_seeotheruids: allow specificgid to be a list of groupsKyle Evans2026-04-231-10/+164
* kern: mac: bump the MAC_VERSION for 16.xKyle Evans2026-04-231-1/+2
* kern: mac: sprinkle a bit of const correctnessKyle Evans2026-04-232-8/+8
* kern: vfs: add MAC checks for mount/unmount/updateKyle Evans2026-04-235-0/+134
* audit: Fix logging of IPv6 addressesAndrew Gallatin2026-04-212-3/+16
* MAC/do: Comments: Rephrase one, fix a typo in anotherOlivier Certner2026-03-211-4/+5
* kern: mac: add a prison_cleanup entry pointKyle Evans2026-02-144-0/+22
* audit: handle AUE_PDWAITKonstantin Belousov2026-01-251-0/+10
* sys: add AUE_PDRFORKKonstantin Belousov2026-01-251-0/+18
* jail(3): fix common usage after mac.label supportKyle Evans2026-01-201-6/+2
* kern: add a mac.label jail parameterKyle Evans2026-01-162-0/+164
* kern: mac: pull mac_label_copyin_string outKyle Evans2026-01-161-18/+30
generated by cgit v1.3 (git 2.53.0) at 2026-08-22 07:22:18 +0000