summaryrefslogtreecommitdiff
path: root/sys/kern/sys_capability.c
AgeCommit message (Expand)Author
2024-10-22sys_capability.c: update the source of CAPENABLEDBrooks Davis
2024-05-21capsicum: SIGTRAP is delivered also on ECAPMODE error.Pawel Jakub Dawidek
2024-04-07ktrace: Record detailed ECAPMODE violationsJake Freeland
2023-08-16sys: Remove $FreeBSD$: one-line .c patternWarner Losh
2023-05-12spdx: The BSD-2-Clause-FreeBSD identifier is obsolete, drop -FreeBSDWarner Losh
2022-02-22fd: rename fget*_locked to fget*_norefMateusz Guzik
2020-03-19Enter a write sequence when updating rights.Mark Johnston
2020-02-15capsicum: use new helpersMateusz Guzik
2020-02-14u_char -> vm_prot_t in a couple of places, NFCKyle Evans
2020-02-03capsicum: faster cap_rights_containsMateusz Guzik
2018-12-06Let kern.trap_enotcap be set as a tunable.Mark Johnston
2018-10-12capsicum: provide cap_rights_fde_inlineMateusz Guzik
2018-05-19capsicum: propagate const correctnessMatt Macy
2018-05-07Change trap_enotcap to bool and annotate with __read_frequentlyMateusz Guzik
2018-02-18Fix broken assertion in r329520.Mariusz Zaborski
2018-02-18Use the fdeget_locked function instead of the fget_locked in theMariusz Zaborski
2017-11-27sys/kern: adoption of SPDX licensing ID tags.Pedro F. Giffuni
2016-10-21capsicum: perform copyout without the fildesc lock held in sys_cap_ioctls_getMariusz Zaborski
2016-09-21Add PROC_TRAPCAP procctl(2) controls and global sysctl kern.trap_enocap.Konstantin Belousov
2016-08-31Eliminate unnecessary loop in _cap_check()Allan Jude
2015-08-11Introduce kern_cap_rights_limit().Ed Schouten
2015-03-16cred: add proc_set_cred helperMateusz Guzik
2015-01-05Use crcopysafe(9) to make a copy of a process' credential struct. crcopy(9)Mark Johnston
2014-07-23Prepare fget_unlocked for reading fd table only once.Mateusz Guzik
2014-03-16Update kernel inclusions of capability.h to use capsicum.h instead; someRobert Watson
2013-09-05This looks like a typo that breaks the build. Yell at me if this isn't theSean Bruno
2013-09-05Change the cap_rights_t type from uint64_t to a structure that we can extendPawel Jakub Dawidek
2013-08-18Implement 32bit versions of the cap_ioctls_limit(2) and cap_ioctls_get(2)Pawel Jakub Dawidek
2013-05-23Use proper malloc type for ioctls white-list.Pawel Jakub Dawidek
2013-03-02Merge Capsicum overhaul:Pawel Jakub Dawidek
2013-02-17Remove redundant parenthesis.Pawel Jakub Dawidek
2012-06-10Style: move opt_*.h includes in the proper place.Pawel Jakub Dawidek
2012-03-12Allways call fdrop().Peter Holm
2011-10-18Revisit the capability failure trace points. The initial implementationDag-Erling Smørgrav
2011-10-11Add a new trace point, KTRFAC_CAPFAIL, which traces capability checkDag-Erling Smørgrav
2011-09-16In order to maximize the re-usability of kernel code in user space thisKip Macy
2011-08-16Add the fo_chown and fo_chmod methods to struct fileops and use themKonstantin Belousov
2011-08-13Update use of the FEATURE() macro in sys_capability.c to reflect the moveRobert Watson
2011-08-13Now that capability support has been committed, update and expand theRobert Watson
2011-08-13Allow Capsicum capabilities to delegate constrainedJonathan Anderson
2011-08-11Second-to-last commit implementing Capsicum capabilities in the FreeBSDRobert Watson
2011-07-22Turn on AUDIT_ARG_RIGHTS() for cap_new(2).Jonathan Anderson
2011-07-15Add cap_new() and cap_getrights() system calls.Jonathan Anderson
2011-07-15Add implementation for capabilities.Jonathan Anderson
2011-07-04Add kernel functions to unwrap capabilities.Jonathan Anderson
2011-06-29We may split today's CAPABILITIES into CAPABILITY_MODE (which hasJonathan Anderson
2011-06-25Remove redundant Capsicum sysctl.Jonathan Anderson
2011-03-04- Add a FEATURE for capsicum (security_capabilities).Alexander Leidinger
2011-03-01Add initial support for Capsicum's Capability Mode to the FreeBSD kernel,Robert Watson
generated by cgit v1.2.3 (git 2.25.1) at 2026-01-19 19:10:52 +0000