summaryrefslogtreecommitdiff
path: root/sys/secmodel
AgeCommit message (Expand)Author
2007-07-09Merge some of the less invasive changes from the vmlocking branch:ad
2007-02-21Replace the Mach-derived boolean_t type with the C99 bool type. Athorpej
2007-02-17Change the process/lwp flags seen by userland via sysctl back to thepavel
2007-02-09Merge newlock2 to head.ad
2007-02-01Add another hardwired exception to the SOCK_RAW / superuser rule, becauseplunky
2007-01-20Kill KAUTH_PROCESS_RESOURCE and just replace it with two actions forelad
2007-01-16Use secmodel_register() and secmodel_deregister().elad
2007-01-16Implement secmodel_bsd44_start(), secmodel_bsd44_stop(), andelad
2007-01-15Avoid proc_uidmatch() for rlimits if p is curproc.elad
2007-01-15'&securelevel' -> 'NULL', pointed out by cube@, thanks!elad
2007-01-10Make 'securelevel' internal to the secmodel.elad
2007-01-09Make readable.elad
2007-01-09Remove advertising clause from all of my stuff.elad
2007-01-05Fallthrough.elad
2007-01-02Add 'stop' routines to do the exact opposite of the 'start' routines forelad
2007-01-02Don't compile secmodel_start() if built as an LKM.elad
2007-01-02Add prototypes for the sysctl(9) setup routines for LKMs only.elad
2007-01-02Don't leak listeners.elad
2007-01-02Consistent naming in sysctl(9) setup routines.elad
2007-01-02Add missing break...elad
2007-01-02Make the securelevel contained by not exposing the variable that keepselad
2007-01-02Add KAUTH_SYSTEM_CHSYSFLAGS so we can get rid of the last threeelad
2007-01-02Need vnode.h here.elad
2007-01-02Make mount(2) and unmount(2) use kauth(9) for security policy.elad
2006-12-31Remove XXX comment about making 'securelevel' a static.elad
2006-12-31Explicitly 'extern int securelevel;' in the sysctl(9) setup routine.elad
2006-12-29Support device scope.elad
2006-12-27Refactor a bit the ptrace(2) code: first make the keep-kernel-stableelad
2006-12-26Make machdep scope architecture-agnostic by removing all arch-specificelad
2006-12-25PR/35226: Johann Franz: Problems with permissions inelad
2006-12-22Add requests indicating access to unmanaged memory for arm, pc532, powerpc,elad
2006-12-19Don't allow anyone but the superuser to do 'ctl' on procfs nodes.elad
2006-12-14- moves 'nice' access semantics to secmodel code,elad
2006-12-02Change kauth(9) KPI for kauth_authorize_device_passthru() to add anotherelad
2006-11-28Move ktrace, ptrace, systrace, and procfs to use kauth(9).elad
2006-11-26Add an XXX comment so we don't forget what we need to do here:elad
2006-11-22Prevent iopl/ioperm in securelevel 1, not 2.elad
2006-11-22Introduce KAUTH_REQ_MACHDEP_{ALPHA,X86}_UNMANAGEDMEM to handle accesselad
2006-11-16__unused removal on arguments; approved by core.christos
2006-11-14Fix a regression in socket(2): in the BSD 4.4 security model, youdyoung
2006-11-07Better VCHR handling.elad
2006-11-06simplify & fix logic in device/rawio/spec.elad
2006-11-04Oops, forgot to do this one in previous commit.elad
2006-11-04Use KASSERT() as requested by yamt@.elad
2006-11-04Change KAUTH_SYSTEM_RAWIO to KAUTH_DEVICE_RAWIO_SPEC (moving the raw i/oelad
2006-10-30Use integers, not pointers to integers, for KAUTH_REQ_NETWORK_SOCKET_OPEN.elad
2006-10-25Introduce KAUTH_REQ_NETWORK_SOCKET_OPEN, to check if opening a socket iselad
2006-10-24oops, fix license. (hah!)elad
2006-10-20Introduce a new action on the network scope, KAUTH_NETWORK_INTERFACE,elad
2006-10-20Add a new ALTQ kauth(9) request, KAUTH_REQ_NETWORK_ALTQ_JOBS.elad