summaryrefslogtreecommitdiff
path: root/sys/secmodel/suser/secmodel_suser.c
AgeCommit message (Expand)Author
2023-01-05wg(4): Allow non-root to retrieve information other than the privatejakllsch
2023-01-05more strip(4) removal, this time in kauth(9)jakllsch
2020-09-08Add IP_BINDANY, IPV6_BINDANY which can be used to bind to any address inchristos
2020-05-16Make it clear that only KAUTH_MACHDEP_SVS_DISABLE is deprecated.alnsn
2020-05-11KAUTH_MACHDEP_SVS_DISABLE is deprecated.alnsn
2020-03-16Use the module subsystem's ability to process SYSCTL_SETUP() entries topgoyette
2020-02-21Explicitly cast pointers to uintptr_t before casting to enums. They arejoerg
2019-04-10Add the NVMM_CTL ioctl, always privileged regardless of the permissions ofmaxv
2018-10-05Provide a sysctl kern.expose_address to expose kernel addresses inchristos
2018-09-04Introduce KAUTH_REQ_PROCESS_CANSEE_KPTR, and use it in the already-existingmaxv
2018-08-25Add KAUTH_REQ_PROCESS_CANSEE_EPROC, and use it for the kern.proc node.maxv
2018-07-15Retire ipkdb entirely. The option was removed from the config filesmaxv
2018-07-13Remove KAUTH_MACHDEP_X86PMC, now unused.maxv
2018-04-26Add KAUTH_MACHDEP_SVS_DISABLE and add support to secmodel_securelevel(9).alnsn
2017-06-14Make the PMC syscalls privileged.maxv
2015-08-17Add kernel code to support intrctl(8).knakahara
2014-02-25Ensure that the top level sysctl nodes (kern, vfs, net, ...) exist beforepooka
2012-11-13kill some -Wunused-but-set-variable warningspooka
2012-03-13Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls withelad
2012-01-17fix secmodel implementation of CPU_UCODE.cegger
2012-01-13Support CPU microcode loading via cpuctl(8).cegger
2011-12-04Implement the register/deregister/evaluation API for secmodel(9). Itjym
2011-11-23Load entropy at system boot (only works at securelevel < 1); savetls
2009-12-29Use the socket credentials, now that we have them, instead of uidinfo.elad
2009-12-24Rename KAUTH_GENERIC_CANSEE to KAUTH_GENERIC_UNUSED1 and remove handling forelad
2009-11-18Fixed security.models.suser.curtain to deny when uid does not match.stacktic
2009-11-14- Move kauth_init() a little bit higher.elad
2009-10-07Extract usermount policy to its own routine.elad
2009-10-06Add a (weak aliased) machdep_init() as a place to do machdep initializationelad
2009-10-06Allow root to do things that the subsystem allows as well (unify).elad
2009-10-05- Add usermount_common_policy() that implements some common (everythingelad
2009-10-03Move KAUTH_NETWORK_BIND::KAUTH_REQ_NETWORK_BIND_PORT policy back to theelad
2009-10-03Move policies for KAUTH_PROCESS_{CANSEE,CORENAME,STOPFLAG,FORK} back toelad
2009-10-03One less include.elad
2009-10-03Make this file a little bit smaller by collapsing cases.elad
2009-10-03Move clockctl policy exception back to the subsystem.elad
2009-10-03secmodel_bsd44_curtain -> secmodel_suser_curtain (static).elad
2009-10-03Move default network interface policy back to the subsystem.elad
2009-10-03Finish moving socket policy to the subsystem.elad
2009-10-03Move sched policy back to the subsystem.elad
2009-10-03Move firewall/NAT policy back to respective subsystems (pf, ipf).elad
2009-10-03Move kevent policy back to the subsystem.elad
2009-10-03Put module loading policy back in the subsystem.elad
2009-10-02Put the tty opening policy back in the subsystem.elad
2009-10-02Move some of the socket policy back to the subsystem.elad
2009-10-02Put signal delivery policy back in the subsystem.elad
2009-10-02Remove includes we don't need.elad
2009-10-02Move routing socket security policy back to the subsystem.elad
2009-10-02- Squeeze function declarations where possible,elad
2009-10-02Put procfs policy back in the subsystem.elad