aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* MFC r335060Alan Somers2019-06-151-1/+1
* MFC r337031:Mark Johnston2018-08-081-1/+3
* MFC r336319:Alan Somers2018-08-031-1/+1
* MFC r336641: fix incorrect operator in the AUDITPIPE_SET_QLIMIT bounds checkAndriy Gapon2018-08-021-1/+1
* MFC r334403:Alan Somers2018-07-111-0/+2
* MFC r334296:Alan Somers2018-07-111-1/+0
* MFC r331797:Brooks Davis2018-04-081-2/+2
* Revert r330897:Eitan Adler2018-03-2913-27/+1
* Partial merge of the SPDX changesEitan Adler2018-03-1413-1/+27
* MFC r329994: mac_portacl(4): stop panicing INVARIANTS-enabled kernel by loadi...Eugene Grosbein2018-03-051-0/+1
* MFC r323235,r323236,r324789,r324863:Mateusz Guzik2017-12-311-1/+1
* MFC r319890: Correct bitwise test in mac_bsdextended ugidfw_rule_valid()Ed Maste2017-07-161-1/+1
* Implement AUE_PREAD and AUE_PWRITE BSM conversion support, eliminatingRobert Watson2016-06-131-0/+2
* sys/security: minor spelling fixes.Pedro F. Giffuni2016-05-067-7/+7
* sys: use our nitems() macro when param.h is available.Pedro F. Giffuni2016-04-212-4/+2
* Remove slightly used const values that can be replaced with nitems().Pedro F. Giffuni2016-04-212-7/+4
* audit(8): leave unsigned comparison for last.Pedro F. Giffuni2016-04-081-2/+2
* Busy the mount point which is the owner of the audit vnode, aroundKonstantin Belousov2016-01-161-15/+45
* Move the funsetown(9) call from audit_pipe_close() to cdevprivKonstantin Belousov2016-01-131-25/+4
* Merge from contrib/openbsm to bring the kernel audit bits up to date with Ope...Christian Brueffer2015-12-205-10/+0
* Fix style issues around existing SDT probes.Mark Johnston2015-12-162-22/+22
* fd: make 'rights' a manadatory argument to fget* functionsMateusz Guzik2015-07-051-1/+3
* Replace struct filedesc argument in getvnode with struct threadMateusz Guzik2015-06-161-1/+1
* fd: make rights a mandatory argument to fget_unlockedMateusz Guzik2015-06-161-1/+3
* cred: add proc_set_cred helperMateusz Guzik2015-03-163-6/+6
* audit: fix cred assignment when A_SETPMASK is usedMateusz Guzik2015-03-151-1/+1
* Adjust printf format specifiers for dev_t and ino_t in kernel.Gleb Kurtsou2014-12-171-2/+2
* Replace dev_clone with cdevpriv(9) KPI in audit_pipe code.Davide Italiano2014-08-201-71/+47
* Pull in r267961 and r267973 again. Fix for issues reported will follow.Hans Petter Selasky2014-06-286-50/+23
* Revert r267961, r267973:Glen Barber2014-06-276-23/+50
* Extend the meaning of the CTLFLAG_TUN flag to automatically check ifHans Petter Selasky2014-06-276-50/+23
* audit: plug FILEDESC_LOCK leak in audit_canon_path.Mateusz Guzik2014-03-211-0/+1
* Update kernel inclusions of capability.h to use capsicum.h instead; someRobert Watson2014-03-161-1/+1
* Remove AppleTalk support.Gleb Smirnoff2014-03-148-144/+0
* Remove IPX support.Gleb Smirnoff2014-03-142-4/+0
* As constantly reported during kernel compilation, m_buflen is unsigned soBjoern A. Zeeb2013-12-251-2/+1
* There is no sysctl with the MIB { CTL_KERN, KERN_MAXID }.John Baldwin2013-12-051-1/+0
* dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINEAndriy Gapon2013-11-262-27/+27
* - For kernel compiled only with KDTRACE_HOOKS and not any lock debuggingAttilio Rao2013-11-2516-17/+0
* The r48589 promised to remove implicit inclusion of if_var.h soon. PrepareGleb Smirnoff2013-10-261-1/+4
* Fix some typos that were causing probe argument types to show up as unknown.Mark Johnston2013-10-014-4/+4
* Make the mac_policy_rm lock recursable, which allows reentrance intoKonstantin Belousov2013-09-291-1/+2
* - Use make_dev_credf(MAKEDEV_REF) instead of the race-prone make_dev()+Davide Italiano2013-09-071-8/+3
* Handle cases where capability rights are not provided.Pawel Jakub Dawidek2013-09-051-1/+1
* Change the cap_rights_t type from uint64_t to a structure that we can extendPawel Jakub Dawidek2013-09-056-7/+25
* Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.Konstantin Belousov2013-08-217-0/+172
* audit_proc_coredump: check return value of audit_newAndriy Gapon2013-07-091-0/+2
* Relax the vm object locking in mac_proc_vm_revoke_recurse(). A read lockAlan Cox2013-06-041-4/+4
* Switch the vm_object mutex to be a rwlock. This will enable in theAttilio Rao2013-03-091-7/+7
* - Implement two new system calls:Pawel Jakub Dawidek2013-03-023-6/+23