aboutsummaryrefslogtreecommitdiff
path: root/sys/security
Commit message (Expand)AuthorAgeFilesLines
* As constantly reported during kernel compilation, m_buflen is unsigned soBjoern A. Zeeb2013-12-251-2/+1
* There is no sysctl with the MIB { CTL_KERN, KERN_MAXID }.John Baldwin2013-12-051-1/+0
* dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINEAndriy Gapon2013-11-262-27/+27
* - For kernel compiled only with KDTRACE_HOOKS and not any lock debuggingAttilio Rao2013-11-2516-17/+0
* The r48589 promised to remove implicit inclusion of if_var.h soon. PrepareGleb Smirnoff2013-10-261-1/+4
* Fix some typos that were causing probe argument types to show up as unknown.Mark Johnston2013-10-014-4/+4
* Make the mac_policy_rm lock recursable, which allows reentrance intoKonstantin Belousov2013-09-291-1/+2
* - Use make_dev_credf(MAKEDEV_REF) instead of the race-prone make_dev()+Davide Italiano2013-09-071-8/+3
* Handle cases where capability rights are not provided.Pawel Jakub Dawidek2013-09-051-1/+1
* Change the cap_rights_t type from uint64_t to a structure that we can extendPawel Jakub Dawidek2013-09-056-7/+25
* Implement read(2)/write(2) and neccessary lseek(2) for posix shmfd.Konstantin Belousov2013-08-217-0/+172
* audit_proc_coredump: check return value of audit_newAndriy Gapon2013-07-091-0/+2
* Relax the vm object locking in mac_proc_vm_revoke_recurse(). A read lockAlan Cox2013-06-041-4/+4
* Switch the vm_object mutex to be a rwlock. This will enable in theAttilio Rao2013-03-091-7/+7
* - Implement two new system calls:Pawel Jakub Dawidek2013-03-023-6/+23
* Merge Capsicum overhaul:Pawel Jakub Dawidek2013-03-024-1/+36
* Remove redundant check.Pawel Jakub Dawidek2013-02-171-3/+1
* Style.Pawel Jakub Dawidek2013-02-111-2/+2
* Add AUDIT_ARG_SOCKADDR() macro so we can start using the audit_arg_sockaddr()Pawel Jakub Dawidek2013-02-071-0/+6
* Implement the zonename token for jailed processes. IfChristian S.J. Peron2013-01-173-2/+25
* Four .c files from OpenBSM are used, in modified form, by the kernel toRobert Watson2012-12-155-0/+0
* Merge OpenBSM 1.2-alpha2 changes from contrib/openbsm toRobert Watson2012-12-012-8/+59
* IFp4 @219811:Pawel Jakub Dawidek2012-12-011-3/+1
* IFp4 @208452:Pawel Jakub Dawidek2012-11-301-7/+11
* IFp4 @208451:Pawel Jakub Dawidek2012-11-305-23/+42
* IFp4 @208383:Pawel Jakub Dawidek2012-11-301-3/+3
* IFp4 @208382:Pawel Jakub Dawidek2012-11-301-8/+15
* IFp4 @208381:Pawel Jakub Dawidek2012-11-301-1/+1
* Remove the support for using non-mpsafe filesystem modules.Konstantin Belousov2012-10-225-53/+15
* Check vplabel for NULL before dereferencing it. Fixes a panicChristian Brueffer2012-05-031-0/+3
* When allocation of labels on files is implicitly disabled due to MACRobert Watson2012-04-081-14/+27
* - Improve BPF locking model.Alexander V. Chernikov2012-04-061-0/+2
* Remove direct access to si_name.Ed Schouten2012-02-103-24/+30
* Use strchr() and strrchr().Ed Schouten2012-01-021-5/+5
* Revert the approach for skipping lockstat_probe_func call when doingAttilio Rao2011-12-121-1/+0
* put sys/systm.h at its proper place or add it if missingAndriy Gapon2011-12-122-1/+2
* Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.Ed Schouten2011-11-0711-13/+13
* Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.Ed Schouten2011-11-073-3/+4
* Get rid of D_PSEUDO.Ed Schouten2011-10-181-1/+1
* Remove two dublicated assignments.Christian Brueffer2011-10-081-3/+0
* In order to maximize the re-usability of kernel code in user space thisKip Macy2011-09-162-38/+38
* Correct several issues in the integration of POSIX shared memory objectsRobert Watson2011-09-027-16/+462
* Fix a deficiency in the selinfo interface:Attilio Rao2011-08-251-0/+1
* Add the fo_chown and fo_chmod methods to struct fileops and use themKonstantin Belousov2011-08-166-0/+176
* Second-to-last commit implementing Capsicum capabilities in the FreeBSDRobert Watson2011-08-112-3/+4
* Provide ability to audit cap_rights_t arguments.Jonathan Anderson2011-07-184-0/+44
* - Add a FEATURE for capsicum (security_capabilities).Alexander Leidinger2011-03-041-1/+1
* Add ECAPMODE, "Not permitted in capability mode", a new kernel errnoRobert Watson2011-03-011-0/+14
* Add some FEATURE macros for various features (AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/Alexander Leidinger2011-02-252-0/+5
* Unless "cnt" exceeds MAX_COMMIT_COUNT, nfsrv_commit() and nfsvno_fsync() areAlan Cox2011-02-051-5/+2
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-14 13:57:44 +0000