summaryrefslogtreecommitdiff
path: root/sys/secmodel
AgeCommit message (Expand)Author
2008-11-12Remove LKMs and switch to the module framework, pass 1.ad
2008-10-22- Be clear about whether module load is explicit or system initiated (auto).ad
2008-10-11Move uidinfo to its own module in kern_uidinfo.c and include in rump.pooka
2008-03-09Remove include of sys/pset.h in sys/lwp.h header.rmind
2008-03-02Forgot this file in the previous commit.elad
2008-02-28Factor out the guts of get/setparam so it can be used from the compat code.elad
2008-02-27Default defer, not deny.elad
2008-02-23Adapt to secmodel_securelevel.elad
2008-02-17PR/37986: YAMAMOTO Takashi: any user can hog the all cpu withelad
2008-02-16Fold KAUTH_REQ_PROCESS_SCHEDULER_* to KAUTH_PROCESS_SCHEDULER_*. In otherelad
2008-02-12Default deny and explicit allow policy in all listeners.elad
2008-02-02Add, document, and use KAUTH_REQ_PROCESS_KTRACE_PERSISTENT.elad
2008-02-02KTRFAC_ROOT -> KTRFAC_PERSISTENT, and update comments.elad
2008-02-01Replace a KAUTH_GENERIC_ISSUSER in the cpuctl code with a proper kauthelad
2008-01-30Use proper kauth(9) actions/requests for native scheduler stuff and theelad
2008-01-23Tons of process scope changes.elad
2008-01-16Pull in my modules code for review/test/hacking.ad
2008-01-14vp->v_rdev, not vp->v_un.vu_specinfo->si_rdev.ad
2008-01-07Make fork use kauth.elad
2007-12-31Remove systrace. Ok core@.ad
2007-12-01Add PT_TRACE_ME to switch statement.elad
2007-11-25Deprecate KAUTH_REQ_SYSTEM_TIME_BACKWARDS, as it was merged intoelad
2007-11-25Refactor time modification checks and place them in the secmodel code.elad
2007-11-24Fix a long time issue where the securelevel secmodel would explicitlyelad
2007-11-23Kill another instance of KAUTH_GENERIC_ISSUSER.elad
2007-11-21Make securelevel a "secmodel" of its own.elad
2007-07-09Merge some of the less invasive changes from the vmlocking branch:ad
2007-02-21Replace the Mach-derived boolean_t type with the C99 bool type. Athorpej
2007-02-17Change the process/lwp flags seen by userland via sysctl back to thepavel
2007-02-09Merge newlock2 to head.ad
2007-02-01Add another hardwired exception to the SOCK_RAW / superuser rule, becauseplunky
2007-01-20Kill KAUTH_PROCESS_RESOURCE and just replace it with two actions forelad
2007-01-16Use secmodel_register() and secmodel_deregister().elad
2007-01-16Implement secmodel_bsd44_start(), secmodel_bsd44_stop(), andelad
2007-01-15Avoid proc_uidmatch() for rlimits if p is curproc.elad
2007-01-15'&securelevel' -> 'NULL', pointed out by cube@, thanks!elad
2007-01-10Make 'securelevel' internal to the secmodel.elad
2007-01-09Make readable.elad
2007-01-09Remove advertising clause from all of my stuff.elad
2007-01-05Fallthrough.elad
2007-01-02Add 'stop' routines to do the exact opposite of the 'start' routines forelad
2007-01-02Don't compile secmodel_start() if built as an LKM.elad
2007-01-02Add prototypes for the sysctl(9) setup routines for LKMs only.elad
2007-01-02Don't leak listeners.elad
2007-01-02Consistent naming in sysctl(9) setup routines.elad
2007-01-02Add missing break...elad
2007-01-02Make the securelevel contained by not exposing the variable that keepselad
2007-01-02Add KAUTH_SYSTEM_CHSYSFLAGS so we can get rid of the last threeelad
2007-01-02Need vnode.h here.elad
2007-01-02Make mount(2) and unmount(2) use kauth(9) for security policy.elad