summaryrefslogtreecommitdiff
path: root/sys/secmodel/bsd44
AgeCommit message (Expand)Author
2009-10-02First part of secmodel cleanup and other misc. changes:elad
2009-09-03Implement the vnode scope and adapt tmpfs to use it.elad
2009-08-10reduce the number of KAUTH_DEVICE_BLUETOOTH_SEND/RECV requestsplunky
2009-08-10remove last usage of KAUTH_ISSUSER in bluetooth code by addingplunky
2009-07-25Extend the existing security models for upcoming gpio(4) changes.mbalmer
2009-05-08Add and use a network scope action/request for tun(4), similar to ppp(4),elad
2009-05-07Introduce several actions/requests for authorizing file-system relatedelad
2009-05-07Introduce actions/requests to handle authorization for ppp(4), sl(4),elad
2009-05-05Add device scope actions for rnd(4) and use them.elad
2009-05-03Move dovfsusermount to secmodel_bsd44, where it really belongs.elad
2009-05-03Add a bluetooth action to the device scope and use it in netbt as aelad
2009-04-15Remove a few KAUTH_GENERIC_ISSUSER in favor of more descriptiveelad
2008-11-12Correct check for autoloaded modules.ad
2008-11-12Remove LKMs and switch to the module framework, pass 1.ad
2008-10-22- Be clear about whether module load is explicit or system initiated (auto).ad
2008-10-11Move uidinfo to its own module in kern_uidinfo.c and include in rump.pooka
2008-03-09Remove include of sys/pset.h in sys/lwp.h header.rmind
2008-03-02Forgot this file in the previous commit.elad
2008-02-28Factor out the guts of get/setparam so it can be used from the compat code.elad
2008-02-27Default defer, not deny.elad
2008-02-17PR/37986: YAMAMOTO Takashi: any user can hog the all cpu withelad
2008-02-16Fold KAUTH_REQ_PROCESS_SCHEDULER_* to KAUTH_PROCESS_SCHEDULER_*. In otherelad
2008-02-12Default deny and explicit allow policy in all listeners.elad
2008-02-02Add, document, and use KAUTH_REQ_PROCESS_KTRACE_PERSISTENT.elad
2008-02-02KTRFAC_ROOT -> KTRFAC_PERSISTENT, and update comments.elad
2008-02-01Replace a KAUTH_GENERIC_ISSUSER in the cpuctl code with a proper kauthelad
2008-01-30Use proper kauth(9) actions/requests for native scheduler stuff and theelad
2008-01-23Tons of process scope changes.elad
2008-01-16Pull in my modules code for review/test/hacking.ad
2008-01-07Make fork use kauth.elad
2007-12-31Remove systrace. Ok core@.ad
2007-12-01Add PT_TRACE_ME to switch statement.elad
2007-11-25Deprecate KAUTH_REQ_SYSTEM_TIME_BACKWARDS, as it was merged intoelad
2007-11-25Refactor time modification checks and place them in the secmodel code.elad
2007-11-24Fix a long time issue where the securelevel secmodel would explicitlyelad
2007-11-23Kill another instance of KAUTH_GENERIC_ISSUSER.elad
2007-11-21Make securelevel a "secmodel" of its own.elad
2007-07-09Merge some of the less invasive changes from the vmlocking branch:ad
2007-02-21Replace the Mach-derived boolean_t type with the C99 bool type. Athorpej
2007-02-17Change the process/lwp flags seen by userland via sysctl back to thepavel
2007-02-09Merge newlock2 to head.ad
2007-02-01Add another hardwired exception to the SOCK_RAW / superuser rule, becauseplunky
2007-01-20Kill KAUTH_PROCESS_RESOURCE and just replace it with two actions forelad
2007-01-16Use secmodel_register() and secmodel_deregister().elad
2007-01-16Implement secmodel_bsd44_start(), secmodel_bsd44_stop(), andelad
2007-01-15Avoid proc_uidmatch() for rlimits if p is curproc.elad
2007-01-10Make 'securelevel' internal to the secmodel.elad
2007-01-09Make readable.elad
2007-01-09Remove advertising clause from all of my stuff.elad
2007-01-05Fallthrough.elad