summaryrefslogtreecommitdiff
path: root/sys/secmodel
AgeCommit message (Expand)Author
2023-04-22secmodel_extensions: Split vfs part into separate .c file.riastradh
2023-01-05wg(4): Allow non-root to retrieve information other than the privatejakllsch
2023-01-05more strip(4) removal, this time in kauth(9)jakllsch
2022-03-29isroot should be bool...christos
2022-03-28secmodel: fix grammar in description of hardlink_check_gidrillig
2022-03-27Implement restrictions for adding hard links to fileschristos
2021-12-07s/dissallow/disallow/andvar
2020-12-05Remove unnecessary inclusion of <sys/timevar.h>.thorpej
2020-09-08Add IP_BINDANY, IPV6_BINDANY which can be used to bind to any address inchristos
2020-08-10Clean up _LKM --> _MODULE leftovers.rin
2020-05-28Accept ioctl(RNDADDDATA) estimates at securelevel 1 (but not 2).riastradh
2020-05-16Make it clear that only KAUTH_MACHDEP_SVS_DISABLE is deprecated.alnsn
2020-05-11KAUTH_MACHDEP_SVS_DISABLE is deprecated.alnsn
2020-03-16Use the module subsystem's ability to process SYSCTL_SETUP() entries topgoyette
2020-02-21Explicitly cast pointers to uintptr_t before casting to enums. They arejoerg
2020-02-14Provide necessary forward declarations or includes.riastradh
2019-04-10Add the NVMM_CTL ioctl, always privileged regardless of the permissions ofmaxv
2018-10-05Provide a sysctl kern.expose_address to expose kernel addresses inchristos
2018-09-04Introduce KAUTH_REQ_PROCESS_CANSEE_KPTR, and use it in the already-existingmaxv
2018-08-25Add KAUTH_REQ_PROCESS_CANSEE_EPROC, and use it for the kern.proc node.maxv
2018-07-15Retire ipkdb entirely. The option was removed from the config filesmaxv
2018-07-13Remove KAUTH_MACHDEP_X86PMC, now unused.maxv
2018-04-26Add KAUTH_MACHDEP_SVS_DISABLE and add support to secmodel_securelevel(9).alnsn
2018-04-08Add new sysctl(3) entry: security.models.extensions.user_set_dbregskamil
2017-06-14Make the PMC syscalls privileged.maxv
2015-12-12secmodel_extensions_system_cb() is not mount-specific, even thoughmaxv
2015-08-17Add kernel code to support intrctl(8).knakahara
2014-11-04Do not release secmodels_lock when it is not held.maxv
2014-02-25Ensure that the top level sysctl nodes (kern, vfs, net, ...) exist beforepooka
2013-02-28Make the callback deal with embryonic connections which do not havemartin
2013-01-28Re-instate backwards compatible security.models.bsd44.{curtain,securelevel}.jym
2012-11-13kill some -Wunused-but-set-variable warningspooka
2012-06-27KNF fix. spaces vs. tabcheusov
2012-03-13Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls withelad
2012-01-17fix secmodel implementation of CPU_UCODE.cegger
2012-01-13Support CPU microcode loading via cpuctl(8).cegger
2011-12-08build fix for keylock secmodel(9).jym
2011-12-05secmodel_eval(9) may want to access securelevel before it is setjym
2011-12-04When user_set_cpu_affinity is non-zero, only allow users to modifyjym
2011-12-04Implement the register/deregister/evaluation API for secmodel(9). Itjym
2011-11-28The secmodel(9)s init, start and stop routines are managed by eachjym
2011-11-28Whitespace fixes.jym
2011-11-23Load entropy at system boot (only works at securelevel < 1); savetls
2009-12-29Use the socket credentials, now that we have them, instead of uidinfo.elad
2009-12-24Rename KAUTH_GENERIC_CANSEE to KAUTH_GENERIC_UNUSED1 and remove handling forelad
2009-11-18Fixed security.models.suser.curtain to deny when uid does not match.stacktic
2009-11-14- Move kauth_init() a little bit higher.elad
2009-10-19buildfix: define integer before use. i386 ALL kernel builds againcegger
2009-10-07Extract usermount policy to its own routine.elad
2009-10-07Compare against initproc, not pid 1, to check if it's init (unify).elad