| Age | Commit message (Expand) | Author |
| 2018-04-26 | Add KAUTH_MACHDEP_SVS_DISABLE and add support to secmodel_securelevel(9). | alnsn |
| 2018-04-08 | Add new sysctl(3) entry: security.models.extensions.user_set_dbregs | kamil |
| 2017-06-14 | Make the PMC syscalls privileged. | maxv |
| 2015-12-12 | secmodel_extensions_system_cb() is not mount-specific, even though | maxv |
| 2015-08-17 | Add kernel code to support intrctl(8). | knakahara |
| 2014-11-04 | Do not release secmodels_lock when it is not held. | maxv |
| 2014-02-25 | Ensure that the top level sysctl nodes (kern, vfs, net, ...) exist before | pooka |
| 2013-02-28 | Make the callback deal with embryonic connections which do not have | martin |
| 2013-01-28 | Re-instate backwards compatible security.models.bsd44.{curtain,securelevel}. | jym |
| 2012-11-13 | kill some -Wunused-but-set-variable warnings | pooka |
| 2012-06-27 | KNF fix. spaces vs. tab | cheusov |
| 2012-03-13 | Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls with | elad |
| 2012-01-17 | fix secmodel implementation of CPU_UCODE. | cegger |
| 2012-01-13 | Support CPU microcode loading via cpuctl(8). | cegger |
| 2011-12-08 | build fix for keylock secmodel(9). | jym |
| 2011-12-05 | secmodel_eval(9) may want to access securelevel before it is set | jym |
| 2011-12-04 | When user_set_cpu_affinity is non-zero, only allow users to modify | jym |
| 2011-12-04 | Implement the register/deregister/evaluation API for secmodel(9). It | jym |
| 2011-11-28 | The secmodel(9)s init, start and stop routines are managed by each | jym |
| 2011-11-28 | Whitespace fixes. | jym |
| 2011-11-23 | Load entropy at system boot (only works at securelevel < 1); save | tls |
| 2009-12-29 | Use the socket credentials, now that we have them, instead of uidinfo. | elad |
| 2009-12-24 | Rename KAUTH_GENERIC_CANSEE to KAUTH_GENERIC_UNUSED1 and remove handling for | elad |
| 2009-11-18 | Fixed security.models.suser.curtain to deny when uid does not match. | stacktic |
| 2009-11-14 | - Move kauth_init() a little bit higher. | elad |
| 2009-10-19 | buildfix: define integer before use. i386 ALL kernel builds again | cegger |
| 2009-10-07 | Extract usermount policy to its own routine. | elad |
| 2009-10-07 | Compare against initproc, not pid 1, to check if it's init (unify). | elad |
| 2009-10-06 | Add a (weak aliased) machdep_init() as a place to do machdep initialization | elad |
| 2009-10-06 | Allow root to do things that the subsystem allows as well (unify). | elad |
| 2009-10-06 | Unify: >= 0 -> > -1. | elad |
| 2009-10-06 | Cosmetic changes to declarations. No functional change. | elad |
| 2009-10-06 | Factor out a block of code that appears in three places (Veriexec, keylock, | elad |
| 2009-10-05 | - Add usermount_common_policy() that implements some common (everything | elad |
| 2009-10-03 | Introduce time_wraps() to check if setting the time will wrap it (or | elad |
| 2009-10-03 | Move KAUTH_NETWORK_BIND::KAUTH_REQ_NETWORK_BIND_PORT policy back to the | elad |
| 2009-10-03 | Move policies for KAUTH_PROCESS_{CANSEE,CORENAME,STOPFLAG,FORK} back to | elad |
| 2009-10-03 | One less include. | elad |
| 2009-10-03 | Make this file a little bit smaller by collapsing cases. | elad |
| 2009-10-03 | Move clockctl policy exception back to the subsystem. | elad |
| 2009-10-03 | secmodel_bsd44_curtain -> secmodel_suser_curtain (static). | elad |
| 2009-10-03 | Move default network interface policy back to the subsystem. | elad |
| 2009-10-03 | Finish moving socket policy to the subsystem. | elad |
| 2009-10-03 | Move sched policy back to the subsystem. | elad |
| 2009-10-03 | Move firewall/NAT policy back to respective subsystems (pf, ipf). | elad |
| 2009-10-03 | Move kevent policy back to the subsystem. | elad |
| 2009-10-03 | Put module loading policy back in the subsystem. | elad |
| 2009-10-02 | Put the tty opening policy back in the subsystem. | elad |
| 2009-10-02 | Move some of the socket policy back to the subsystem. | elad |
| 2009-10-02 | Put signal delivery policy back in the subsystem. | elad |