| Age | Commit message (Expand) | Author |
| 2009-12-29 | Use the socket credentials, now that we have them, instead of uidinfo. | elad |
| 2009-12-24 | Rename KAUTH_GENERIC_CANSEE to KAUTH_GENERIC_UNUSED1 and remove handling for | elad |
| 2009-11-18 | Fixed security.models.suser.curtain to deny when uid does not match. | stacktic |
| 2009-11-14 | - Move kauth_init() a little bit higher. | elad |
| 2009-10-19 | buildfix: define integer before use. i386 ALL kernel builds again | cegger |
| 2009-10-07 | Extract usermount policy to its own routine. | elad |
| 2009-10-07 | Compare against initproc, not pid 1, to check if it's init (unify). | elad |
| 2009-10-06 | Add a (weak aliased) machdep_init() as a place to do machdep initialization | elad |
| 2009-10-06 | Allow root to do things that the subsystem allows as well (unify). | elad |
| 2009-10-06 | Unify: >= 0 -> > -1. | elad |
| 2009-10-06 | Cosmetic changes to declarations. No functional change. | elad |
| 2009-10-06 | Factor out a block of code that appears in three places (Veriexec, keylock, | elad |
| 2009-10-05 | - Add usermount_common_policy() that implements some common (everything | elad |
| 2009-10-03 | Introduce time_wraps() to check if setting the time will wrap it (or | elad |
| 2009-10-03 | Move KAUTH_NETWORK_BIND::KAUTH_REQ_NETWORK_BIND_PORT policy back to the | elad |
| 2009-10-03 | Move policies for KAUTH_PROCESS_{CANSEE,CORENAME,STOPFLAG,FORK} back to | elad |
| 2009-10-03 | One less include. | elad |
| 2009-10-03 | Make this file a little bit smaller by collapsing cases. | elad |
| 2009-10-03 | Move clockctl policy exception back to the subsystem. | elad |
| 2009-10-03 | secmodel_bsd44_curtain -> secmodel_suser_curtain (static). | elad |
| 2009-10-03 | Move default network interface policy back to the subsystem. | elad |
| 2009-10-03 | Finish moving socket policy to the subsystem. | elad |
| 2009-10-03 | Move sched policy back to the subsystem. | elad |
| 2009-10-03 | Move firewall/NAT policy back to respective subsystems (pf, ipf). | elad |
| 2009-10-03 | Move kevent policy back to the subsystem. | elad |
| 2009-10-03 | Put module loading policy back in the subsystem. | elad |
| 2009-10-02 | Put the tty opening policy back in the subsystem. | elad |
| 2009-10-02 | Move some of the socket policy back to the subsystem. | elad |
| 2009-10-02 | Put signal delivery policy back in the subsystem. | elad |
| 2009-10-02 | Remove includes we don't need. | elad |
| 2009-10-02 | Move routing socket security policy back to the subsystem. | elad |
| 2009-10-02 | - Squeeze function declarations where possible, | elad |
| 2009-10-02 | Put procfs policy back in the subsystem. | elad |
| 2009-10-02 | Stick nice policy in its own subsystem and call the listener "resource" | elad |
| 2009-10-02 | Move rlimit policy back to the subsystem. | elad |
| 2009-10-02 | Move ptrace's security policy back to the subsystem itself. | elad |
| 2009-10-02 | Let the ipkdb subsystem allow operations related to it rather than wrongly | elad |
| 2009-10-02 | Move psets security policy back to the subsystem and keep suser logic only | elad |
| 2009-10-02 | Move ktrace's subsystem security policy to the subsystem itself, and keep | elad |
| 2009-10-02 | Create securelevel variable under securelevel node. | elad |
| 2009-10-02 | Remove secmodel.h, forgotten in previous commit: | elad |
| 2009-10-02 | First part of secmodel cleanup and other misc. changes: | elad |
| 2009-09-03 | Implement the vnode scope and adapt tmpfs to use it. | elad |
| 2009-08-15 | Move the keylock.h header from sys/sys to sys/dev where it really belongs. | mbalmer |
| 2009-08-14 | Add support for multi-position electro-mechanical keylocks. An example | mbalmer |
| 2009-08-10 | reduce the number of KAUTH_DEVICE_BLUETOOTH_SEND/RECV requests | plunky |
| 2009-08-10 | remove last usage of KAUTH_ISSUSER in bluetooth code by adding | plunky |
| 2009-07-25 | Extend the existing security models for upcoming gpio(4) changes. | mbalmer |
| 2009-05-08 | Add and use a network scope action/request for tun(4), similar to ppp(4), | elad |
| 2009-05-07 | Introduce several actions/requests for authorizing file-system related | elad |