freebsd-dev/sys/security
Robert Watson 1daa6feb45 When we drop an audit record going to and audit pipe because the audit
pipe has overflowed, drop the newest, rather than oldest, record.  This
makes overflow drop behavior consistent with memory allocation failure
leading to drop, avoids touching the consumer end of the queue from a
producer, and lowers the CPU overhead of dropping a record by dropping
before memory allocation and copying.

Obtained from:	Apple, Inc.
MFC after:	2 months
2008-10-30 23:09:19 +00:00
..
audit When we drop an audit record going to and audit pipe because the audit 2008-10-30 23:09:19 +00:00
mac Break out strictly credential-related portions of mac_process.c into a 2008-10-28 21:53:10 +00:00
mac_biba Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary 2008-10-28 13:44:11 +00:00
mac_bsdextended The V* flags passed using an accmode_t to the access() and open() 2008-10-30 10:13:53 +00:00
mac_ifoff Introduce two related changes to the TrustedBSD MAC Framework: 2008-08-23 15:26:36 +00:00
mac_lomac Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary 2008-10-28 13:44:11 +00:00
mac_mls Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary 2008-10-28 13:44:11 +00:00
mac_none Introduce two related changes to the TrustedBSD MAC Framework: 2008-08-23 15:26:36 +00:00
mac_partition Rename three MAC entry points from _proc_ to _cred_ to reflect the fact 2008-10-28 11:33:06 +00:00
mac_portacl Introduce two related changes to the TrustedBSD MAC Framework: 2008-08-23 15:26:36 +00:00
mac_seeotheruids Add a mac_inpcb_check_visible implementation to all MAC policies 2008-10-17 15:11:12 +00:00
mac_stub Commit part of accmode_t changes that I missed in previous commit. 2008-10-28 21:57:32 +00:00
mac_test Introduce accmode_t. This is required for NFSv4 ACLs - it will be neccessary 2008-10-28 13:44:11 +00:00