| Age | Commit message (Expand) | Author |
| 2023-01-05 | wg(4): Allow non-root to retrieve information other than the private | jakllsch |
| 2023-01-05 | more strip(4) removal, this time in kauth(9) | jakllsch |
| 2020-09-08 | Add IP_BINDANY, IPV6_BINDANY which can be used to bind to any address in | christos |
| 2020-05-16 | Make it clear that only KAUTH_MACHDEP_SVS_DISABLE is deprecated. | alnsn |
| 2020-05-11 | KAUTH_MACHDEP_SVS_DISABLE is deprecated. | alnsn |
| 2020-03-16 | Use the module subsystem's ability to process SYSCTL_SETUP() entries to | pgoyette |
| 2020-02-21 | Explicitly cast pointers to uintptr_t before casting to enums. They are | joerg |
| 2019-04-10 | Add the NVMM_CTL ioctl, always privileged regardless of the permissions of | maxv |
| 2018-10-05 | Provide a sysctl kern.expose_address to expose kernel addresses in | christos |
| 2018-09-04 | Introduce KAUTH_REQ_PROCESS_CANSEE_KPTR, and use it in the already-existing | maxv |
| 2018-08-25 | Add KAUTH_REQ_PROCESS_CANSEE_EPROC, and use it for the kern.proc node. | maxv |
| 2018-07-15 | Retire ipkdb entirely. The option was removed from the config files | maxv |
| 2018-07-13 | Remove KAUTH_MACHDEP_X86PMC, now unused. | maxv |
| 2018-04-26 | Add KAUTH_MACHDEP_SVS_DISABLE and add support to secmodel_securelevel(9). | alnsn |
| 2017-06-14 | Make the PMC syscalls privileged. | maxv |
| 2015-08-17 | Add kernel code to support intrctl(8). | knakahara |
| 2014-02-25 | Ensure that the top level sysctl nodes (kern, vfs, net, ...) exist before | pooka |
| 2012-11-13 | kill some -Wunused-but-set-variable warnings | pooka |
| 2012-03-13 | Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls with | elad |
| 2012-01-17 | fix secmodel implementation of CPU_UCODE. | cegger |
| 2012-01-13 | Support CPU microcode loading via cpuctl(8). | cegger |
| 2011-12-04 | Implement the register/deregister/evaluation API for secmodel(9). It | jym |
| 2011-11-23 | Load entropy at system boot (only works at securelevel < 1); save | tls |
| 2009-12-29 | Use the socket credentials, now that we have them, instead of uidinfo. | elad |
| 2009-12-24 | Rename KAUTH_GENERIC_CANSEE to KAUTH_GENERIC_UNUSED1 and remove handling for | elad |
| 2009-11-18 | Fixed security.models.suser.curtain to deny when uid does not match. | stacktic |
| 2009-11-14 | - Move kauth_init() a little bit higher. | elad |
| 2009-10-07 | Extract usermount policy to its own routine. | elad |
| 2009-10-06 | Add a (weak aliased) machdep_init() as a place to do machdep initialization | elad |
| 2009-10-06 | Allow root to do things that the subsystem allows as well (unify). | elad |
| 2009-10-05 | - Add usermount_common_policy() that implements some common (everything | elad |
| 2009-10-03 | Move KAUTH_NETWORK_BIND::KAUTH_REQ_NETWORK_BIND_PORT policy back to the | elad |
| 2009-10-03 | Move policies for KAUTH_PROCESS_{CANSEE,CORENAME,STOPFLAG,FORK} back to | elad |
| 2009-10-03 | One less include. | elad |
| 2009-10-03 | Make this file a little bit smaller by collapsing cases. | elad |
| 2009-10-03 | Move clockctl policy exception back to the subsystem. | elad |
| 2009-10-03 | secmodel_bsd44_curtain -> secmodel_suser_curtain (static). | elad |
| 2009-10-03 | Move default network interface policy back to the subsystem. | elad |
| 2009-10-03 | Finish moving socket policy to the subsystem. | elad |
| 2009-10-03 | Move sched policy back to the subsystem. | elad |
| 2009-10-03 | Move firewall/NAT policy back to respective subsystems (pf, ipf). | elad |
| 2009-10-03 | Move kevent policy back to the subsystem. | elad |
| 2009-10-03 | Put module loading policy back in the subsystem. | elad |
| 2009-10-02 | Put the tty opening policy back in the subsystem. | elad |
| 2009-10-02 | Move some of the socket policy back to the subsystem. | elad |
| 2009-10-02 | Put signal delivery policy back in the subsystem. | elad |
| 2009-10-02 | Remove includes we don't need. | elad |
| 2009-10-02 | Move routing socket security policy back to the subsystem. | elad |
| 2009-10-02 | - Squeeze function declarations where possible, | elad |
| 2009-10-02 | Put procfs policy back in the subsystem. | elad |