summaryrefslogtreecommitdiff
path: root/sys/security
AgeCommit message (Expand)Author
2009-05-29Make the rmlock(9) interface a bit more like the rwlock(9) interface:Robert Watson
2009-05-27Add hierarchical jails. A jail may further virtualize its environmentJamie Gritton
2009-05-27Convert the MAC Framework from using rwlocks to rmlocks to stabilizeRobert Watson
2009-05-11Remove the thread argument from the FSD (File-System Dependent) parts ofAttilio Rao
2009-05-01Rename MAC Framework-internal macros used to invoke policy entry points:Robert Watson
2009-04-19Temporarily relax the constraints on argument size checking for A_GETCOND;Robert Watson
2009-04-19Merge OpenBSM 1.1 changes to the FreeBSD 8.x kernel:Robert Watson
2009-04-16Merge new kernel files from OpenBSM 1.1: audit_fcntl.h andRobert Watson
2009-04-16Remove D_NEEDGIANT from audit pipes. I'm actually not sure why this wasRobert Watson
2009-03-29Get rid of VSTAT and replace it with VSTAT_PERMS, which is somewhatEdward Tomasz Napierala
2009-03-14- Correct logic in if statement - we want to allocate temporary bufferPawel Jakub Dawidek
2009-03-14Rework MAC Framework synchronization in a number of ways in order toRobert Watson
2009-03-09Mark the bsdextended rules sysctl as being mpsafe.Christian S.J. Peron
2009-03-09Add a new thread-private flag, TDP_AUDITREC, to indicate whether orRobert Watson
2009-03-08Remove 'uio' argument from MAC Framework and MAC policy entry points forRobert Watson
2009-03-08Rename 'ucred' argument to mac_socket_check_bind() to 'cred' to matchRobert Watson
2009-03-08Improve the consistency of MAC Framework and MAC policy entry pointRobert Watson
2009-03-08Add static DTrace probes for MAC Framework access control checks andRobert Watson
2009-03-03Reduce the verbosity of SDT trace points for DTrace by defining severalRobert Watson
2009-03-02Merge OpenBSM 1.1 beta 1 from OpenBSM vendor branch to head, bothRobert Watson
2009-02-24Use vm_map_entry_t instead of explicit struct vm_map_entry *.Konstantin Belousov
2009-02-08Set the lower bound on queue size for an audit pipe to 1 instead of 0,Robert Watson
2009-02-08Change various routines that are responsible for transforming auditRobert Watson
2009-02-08Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE argumentsRobert Watson
2009-02-08Audit the flag argument to the nfssvc(2) system call.Robert Watson
2009-02-04Eliminate the local variable 'ape' in audit_pipe_kqread(), as it's onlyRobert Watson
2009-01-24Use __FBSDID() for $FreeBSD$ version strings in .c files.Robert Watson
2009-01-24Begin to add SDT tracing of the MAC Framework: add policy modevent,Robert Watson
2009-01-14Update copyright, P4 version number as audit_bsm_token.c reflects changesRobert Watson
2009-01-14Merge OpenBSM alpha 5 from OpenBSM vendor branch to head, bothRobert Watson
2009-01-10Rather than having MAC policies explicitly declare what object typesRobert Watson
2009-01-10Use MPC_OBJECT_IP6Q to indicate labeling of struct ip6q rather thanRobert Watson
2009-01-06Do a lockless read of the audit pipe list before grabbing the audit pipeRobert Watson
2009-01-06In AUDIT_SYSCALL_EXIT(), invoke audit_syscall_exit() only if an auditRobert Watson
2008-12-31Fix white space botch: use carriage returns rather than tabs.Robert Watson
2008-12-31Commit two files missed in previous commit: hook up audit_bsm_errno.cRobert Watson
2008-12-31Call au_errno_to_bsm() on the errno value passed into au_to_return32()Robert Watson
2008-12-31Merge OpenBSM alpha 4 from OpenBSM vendor branch to head, bothRobert Watson
2008-12-22Make preparations for resurrecting shared/read locks on vm maps:Alan Cox
2008-12-02Merge OpenBSM 1.1 alpha 2 from the OpenBSM vendor branch to head, bothRobert Watson
2008-11-30Partially roll back a revision which changed the error code being returnedChristian S.J. Peron
2008-11-29MFp4:Bjoern A. Zeeb
2008-11-25Regularize /* FALLTHROUGH */ comments in the BSM event type switch, andRobert Watson
2008-11-14When repeatedly accessing a thread credential, cache the credentialRobert Watson
2008-11-13The audit queue limit variables are size_t, so use size_t for the auditRobert Watson
2008-11-11Move audit-internal function definitions for getting and setting auditRobert Watson
2008-11-11Minor style tweaks and change lock name string to use _'s and not spacesRobert Watson
2008-11-11Add support for extended header BSM tokens. Currently we use theChristian S.J. Peron
2008-11-10Wrap sx locking of the audit worker sleep lock in macros, update comments.Robert Watson
2008-11-04Use shared vnode locks for auditing vnode arguments as auditing onlyJohn Baldwin