summaryrefslogtreecommitdiff
path: root/sys/secmodel
AgeCommit message (Expand)Author
2009-12-29Use the socket credentials, now that we have them, instead of uidinfo.elad
2009-12-24Rename KAUTH_GENERIC_CANSEE to KAUTH_GENERIC_UNUSED1 and remove handling forelad
2009-11-18Fixed security.models.suser.curtain to deny when uid does not match.stacktic
2009-11-14- Move kauth_init() a little bit higher.elad
2009-10-19buildfix: define integer before use. i386 ALL kernel builds againcegger
2009-10-07Extract usermount policy to its own routine.elad
2009-10-07Compare against initproc, not pid 1, to check if it's init (unify).elad
2009-10-06Add a (weak aliased) machdep_init() as a place to do machdep initializationelad
2009-10-06Allow root to do things that the subsystem allows as well (unify).elad
2009-10-06Unify: >= 0 -> > -1.elad
2009-10-06Cosmetic changes to declarations. No functional change.elad
2009-10-06Factor out a block of code that appears in three places (Veriexec, keylock,elad
2009-10-05- Add usermount_common_policy() that implements some common (everythingelad
2009-10-03Introduce time_wraps() to check if setting the time will wrap it (orelad
2009-10-03Move KAUTH_NETWORK_BIND::KAUTH_REQ_NETWORK_BIND_PORT policy back to theelad
2009-10-03Move policies for KAUTH_PROCESS_{CANSEE,CORENAME,STOPFLAG,FORK} back toelad
2009-10-03One less include.elad
2009-10-03Make this file a little bit smaller by collapsing cases.elad
2009-10-03Move clockctl policy exception back to the subsystem.elad
2009-10-03secmodel_bsd44_curtain -> secmodel_suser_curtain (static).elad
2009-10-03Move default network interface policy back to the subsystem.elad
2009-10-03Finish moving socket policy to the subsystem.elad
2009-10-03Move sched policy back to the subsystem.elad
2009-10-03Move firewall/NAT policy back to respective subsystems (pf, ipf).elad
2009-10-03Move kevent policy back to the subsystem.elad
2009-10-03Put module loading policy back in the subsystem.elad
2009-10-02Put the tty opening policy back in the subsystem.elad
2009-10-02Move some of the socket policy back to the subsystem.elad
2009-10-02Put signal delivery policy back in the subsystem.elad
2009-10-02Remove includes we don't need.elad
2009-10-02Move routing socket security policy back to the subsystem.elad
2009-10-02- Squeeze function declarations where possible,elad
2009-10-02Put procfs policy back in the subsystem.elad
2009-10-02Stick nice policy in its own subsystem and call the listener "resource"elad
2009-10-02Move rlimit policy back to the subsystem.elad
2009-10-02Move ptrace's security policy back to the subsystem itself.elad
2009-10-02Let the ipkdb subsystem allow operations related to it rather than wronglyelad
2009-10-02Move psets security policy back to the subsystem and keep suser logic onlyelad
2009-10-02Move ktrace's subsystem security policy to the subsystem itself, and keepelad
2009-10-02Create securelevel variable under securelevel node.elad
2009-10-02Remove secmodel.h, forgotten in previous commit:elad
2009-10-02First part of secmodel cleanup and other misc. changes:elad
2009-09-03Implement the vnode scope and adapt tmpfs to use it.elad
2009-08-15Move the keylock.h header from sys/sys to sys/dev where it really belongs.mbalmer
2009-08-14Add support for multi-position electro-mechanical keylocks. An examplembalmer
2009-08-10reduce the number of KAUTH_DEVICE_BLUETOOTH_SEND/RECV requestsplunky
2009-08-10remove last usage of KAUTH_ISSUSER in bluetooth code by addingplunky
2009-07-25Extend the existing security models for upcoming gpio(4) changes.mbalmer
2009-05-08Add and use a network scope action/request for tun(4), similar to ppp(4),elad
2009-05-07Introduce several actions/requests for authorizing file-system relatedelad