freebsd-dev/sys/security
David Bright 2d5603fe65 Jail and capability mode for shm_rename; add audit support for shm_rename
Co-mingling two things here:

  * Addressing some feedback from Konstantin and Kyle re: jail,
    capability mode, and a few other things
  * Adding audit support as promised.

The audit support change includes a partial refresh of OpenBSM from
upstream, where the change to add shm_rename has already been
accepted. Matthew doesn't plan to work on refreshing anything else to
support audit for those new event types.

Submitted by:	Matthew Bryan <matthew.bryan@isilon.com>
Reviewed by:	kib
Relnotes:	Yes
Sponsored by:	Dell EMC Isilon
Differential Revision:	https://reviews.freebsd.org/D22083
2019-11-18 13:31:16 +00:00
..
audit Jail and capability mode for shm_rename; add audit support for shm_rename 2019-11-18 13:31:16 +00:00
mac Define wrapper functions vm_map_entry_{succ,pred} to act as wrappers 2019-11-13 15:56:07 +00:00
mac_biba sys/security: minor spelling fixes. 2016-05-06 16:59:04 +00:00
mac_bsdextended Remove unused argument to priv_check_cred. 2018-12-11 19:32:16 +00:00
mac_ifoff
mac_lomac Remove unused argument to priv_check_cred. 2018-12-11 19:32:16 +00:00
mac_mls sys/security: minor spelling fixes. 2016-05-06 16:59:04 +00:00
mac_none
mac_ntpd Make it possible to run ntpd as a non-root user, add ntpd uid and gid. 2018-07-19 23:55:29 +00:00
mac_partition Remove unused argument to priv_check_cred. 2018-12-11 19:32:16 +00:00
mac_portacl Remove unused argument to priv_check_cred. 2018-12-11 19:32:16 +00:00
mac_seeotheruids Remove unused argument to priv_check_cred. 2018-12-11 19:32:16 +00:00
mac_stub
mac_test
mac_veriexec Add a new ioctl for the larger params struct that includes the label. 2019-05-17 19:27:07 +00:00
mac_veriexec_parser Fix mac_veriexec_parser build after r347938 2019-08-08 16:51:49 +00:00