summaryrefslogtreecommitdiff
path: root/sys/secmodel
AgeCommit message (Expand)Author
2018-04-26Add KAUTH_MACHDEP_SVS_DISABLE and add support to secmodel_securelevel(9).alnsn
2018-04-08Add new sysctl(3) entry: security.models.extensions.user_set_dbregskamil
2017-06-14Make the PMC syscalls privileged.maxv
2015-12-12secmodel_extensions_system_cb() is not mount-specific, even thoughmaxv
2015-08-17Add kernel code to support intrctl(8).knakahara
2014-11-04Do not release secmodels_lock when it is not held.maxv
2014-02-25Ensure that the top level sysctl nodes (kern, vfs, net, ...) exist beforepooka
2013-02-28Make the callback deal with embryonic connections which do not havemartin
2013-01-28Re-instate backwards compatible security.models.bsd44.{curtain,securelevel}.jym
2012-11-13kill some -Wunused-but-set-variable warningspooka
2012-06-27KNF fix. spaces vs. tabcheusov
2012-03-13Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls withelad
2012-01-17fix secmodel implementation of CPU_UCODE.cegger
2012-01-13Support CPU microcode loading via cpuctl(8).cegger
2011-12-08build fix for keylock secmodel(9).jym
2011-12-05secmodel_eval(9) may want to access securelevel before it is setjym
2011-12-04When user_set_cpu_affinity is non-zero, only allow users to modifyjym
2011-12-04Implement the register/deregister/evaluation API for secmodel(9). Itjym
2011-11-28The secmodel(9)s init, start and stop routines are managed by eachjym
2011-11-28Whitespace fixes.jym
2011-11-23Load entropy at system boot (only works at securelevel < 1); savetls
2009-12-29Use the socket credentials, now that we have them, instead of uidinfo.elad
2009-12-24Rename KAUTH_GENERIC_CANSEE to KAUTH_GENERIC_UNUSED1 and remove handling forelad
2009-11-18Fixed security.models.suser.curtain to deny when uid does not match.stacktic
2009-11-14- Move kauth_init() a little bit higher.elad
2009-10-19buildfix: define integer before use. i386 ALL kernel builds againcegger
2009-10-07Extract usermount policy to its own routine.elad
2009-10-07Compare against initproc, not pid 1, to check if it's init (unify).elad
2009-10-06Add a (weak aliased) machdep_init() as a place to do machdep initializationelad
2009-10-06Allow root to do things that the subsystem allows as well (unify).elad
2009-10-06Unify: >= 0 -> > -1.elad
2009-10-06Cosmetic changes to declarations. No functional change.elad
2009-10-06Factor out a block of code that appears in three places (Veriexec, keylock,elad
2009-10-05- Add usermount_common_policy() that implements some common (everythingelad
2009-10-03Introduce time_wraps() to check if setting the time will wrap it (orelad
2009-10-03Move KAUTH_NETWORK_BIND::KAUTH_REQ_NETWORK_BIND_PORT policy back to theelad
2009-10-03Move policies for KAUTH_PROCESS_{CANSEE,CORENAME,STOPFLAG,FORK} back toelad
2009-10-03One less include.elad
2009-10-03Make this file a little bit smaller by collapsing cases.elad
2009-10-03Move clockctl policy exception back to the subsystem.elad
2009-10-03secmodel_bsd44_curtain -> secmodel_suser_curtain (static).elad
2009-10-03Move default network interface policy back to the subsystem.elad
2009-10-03Finish moving socket policy to the subsystem.elad
2009-10-03Move sched policy back to the subsystem.elad
2009-10-03Move firewall/NAT policy back to respective subsystems (pf, ipf).elad
2009-10-03Move kevent policy back to the subsystem.elad
2009-10-03Put module loading policy back in the subsystem.elad
2009-10-02Put the tty opening policy back in the subsystem.elad
2009-10-02Move some of the socket policy back to the subsystem.elad
2009-10-02Put signal delivery policy back in the subsystem.elad