| Age | Commit message (Expand) | Author |
| 2023-04-22 | secmodel_extensions: Split vfs part into separate .c file. | riastradh |
| 2023-01-05 | wg(4): Allow non-root to retrieve information other than the private | jakllsch |
| 2023-01-05 | more strip(4) removal, this time in kauth(9) | jakllsch |
| 2022-03-29 | isroot should be bool... | christos |
| 2022-03-28 | secmodel: fix grammar in description of hardlink_check_gid | rillig |
| 2022-03-27 | Implement restrictions for adding hard links to files | christos |
| 2021-12-07 | s/dissallow/disallow/ | andvar |
| 2020-12-05 | Remove unnecessary inclusion of <sys/timevar.h>. | thorpej |
| 2020-09-08 | Add IP_BINDANY, IPV6_BINDANY which can be used to bind to any address in | christos |
| 2020-08-10 | Clean up _LKM --> _MODULE leftovers. | rin |
| 2020-05-28 | Accept ioctl(RNDADDDATA) estimates at securelevel 1 (but not 2). | riastradh |
| 2020-05-16 | Make it clear that only KAUTH_MACHDEP_SVS_DISABLE is deprecated. | alnsn |
| 2020-05-11 | KAUTH_MACHDEP_SVS_DISABLE is deprecated. | alnsn |
| 2020-03-16 | Use the module subsystem's ability to process SYSCTL_SETUP() entries to | pgoyette |
| 2020-02-21 | Explicitly cast pointers to uintptr_t before casting to enums. They are | joerg |
| 2020-02-14 | Provide necessary forward declarations or includes. | riastradh |
| 2019-04-10 | Add the NVMM_CTL ioctl, always privileged regardless of the permissions of | maxv |
| 2018-10-05 | Provide a sysctl kern.expose_address to expose kernel addresses in | christos |
| 2018-09-04 | Introduce KAUTH_REQ_PROCESS_CANSEE_KPTR, and use it in the already-existing | maxv |
| 2018-08-25 | Add KAUTH_REQ_PROCESS_CANSEE_EPROC, and use it for the kern.proc node. | maxv |
| 2018-07-15 | Retire ipkdb entirely. The option was removed from the config files | maxv |
| 2018-07-13 | Remove KAUTH_MACHDEP_X86PMC, now unused. | maxv |
| 2018-04-26 | Add KAUTH_MACHDEP_SVS_DISABLE and add support to secmodel_securelevel(9). | alnsn |
| 2018-04-08 | Add new sysctl(3) entry: security.models.extensions.user_set_dbregs | kamil |
| 2017-06-14 | Make the PMC syscalls privileged. | maxv |
| 2015-12-12 | secmodel_extensions_system_cb() is not mount-specific, even though | maxv |
| 2015-08-17 | Add kernel code to support intrctl(8). | knakahara |
| 2014-11-04 | Do not release secmodels_lock when it is not held. | maxv |
| 2014-02-25 | Ensure that the top level sysctl nodes (kern, vfs, net, ...) exist before | pooka |
| 2013-02-28 | Make the callback deal with embryonic connections which do not have | martin |
| 2013-01-28 | Re-instate backwards compatible security.models.bsd44.{curtain,securelevel}. | jym |
| 2012-11-13 | kill some -Wunused-but-set-variable warnings | pooka |
| 2012-06-27 | KNF fix. spaces vs. tab | cheusov |
| 2012-03-13 | Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls with | elad |
| 2012-01-17 | fix secmodel implementation of CPU_UCODE. | cegger |
| 2012-01-13 | Support CPU microcode loading via cpuctl(8). | cegger |
| 2011-12-08 | build fix for keylock secmodel(9). | jym |
| 2011-12-05 | secmodel_eval(9) may want to access securelevel before it is set | jym |
| 2011-12-04 | When user_set_cpu_affinity is non-zero, only allow users to modify | jym |
| 2011-12-04 | Implement the register/deregister/evaluation API for secmodel(9). It | jym |
| 2011-11-28 | The secmodel(9)s init, start and stop routines are managed by each | jym |
| 2011-11-28 | Whitespace fixes. | jym |
| 2011-11-23 | Load entropy at system boot (only works at securelevel < 1); save | tls |
| 2009-12-29 | Use the socket credentials, now that we have them, instead of uidinfo. | elad |
| 2009-12-24 | Rename KAUTH_GENERIC_CANSEE to KAUTH_GENERIC_UNUSED1 and remove handling for | elad |
| 2009-11-18 | Fixed security.models.suser.curtain to deny when uid does not match. | stacktic |
| 2009-11-14 | - Move kauth_init() a little bit higher. | elad |
| 2009-10-19 | buildfix: define integer before use. i386 ALL kernel builds again | cegger |
| 2009-10-07 | Extract usermount policy to its own routine. | elad |
| 2009-10-07 | Compare against initproc, not pid 1, to check if it's init (unify). | elad |