d/freebsd-nq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
1b350b4542
freebsd-nq/sys
History
Robert Watson 1b350b4542 Break out the "see_other_uids" policy check from the various 
method-based inter-process security checks.  To do this, introduce
a new cr_seeotheruids(u1, u2) function, which encapsulates the
"see_other_uids" logic.  Call out to this policy following the
jail security check for all of {debug,sched,see,signal} inter-process
checks.  This more consistently enforces the check, and makes the
check easy to modify.  Eventually, it may be that this check should
become a MAC policy, loaded via a module.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs
2002-03-22 02:28:26 +00:00
..
alpha shut up the compiler 2002-03-21 18:48:00 +00:00
amd64 o Use the MI vm_map_growstack() instead of grow_stack() in trap_pfault() 2002-03-21 19:27:15 +00:00
arm Remove __P. 2002-03-20 18:22:19 +00:00
boot Remove __P. 2002-03-20 08:00:54 +00:00
cam Remove __P. 2002-03-20 08:56:31 +00:00
coda Remove __P. 2002-03-20 05:00:21 +00:00
compat Remove references to vm_zone.h and switch over to the new uma API. 2002-03-20 10:35:22 +00:00
conf Collect all functions for copying to and from userspace into the one file. 2002-03-21 23:45:59 +00:00
contrib fix blockno printf formatting warnings. 2002-03-19 20:46:30 +00:00
crypto Remove __P. 2002-03-20 05:14:42 +00:00
ddb Remove __P. 2002-03-20 05:14:42 +00:00
dev Limit fabric search to a default 256 entries. This will all go away 2002-03-21 21:10:16 +00:00
fs Remove references to vm_zone.h and switch over to the new uma API. 2002-03-20 10:17:00 +00:00
geom Fix bio->bio_blkno format warning. 2002-03-19 20:12:08 +00:00
gnu Remove __P. 2002-03-19 22:40:48 +00:00
i4b Remove __P. 2002-03-20 07:51:46 +00:00
i386 o Use the MI vm_map_growstack() instead of grow_stack() in trap_pfault() 2002-03-21 19:27:15 +00:00
ia64 Change critical_t to register_t for intr_disable/restore. 2002-03-21 09:50:11 +00:00
isa Remove __P. 2002-03-20 07:51:46 +00:00
isofs/cd9660 Remove references to vm_zone.h and switch over to the new uma API. 2002-03-20 10:17:00 +00:00
kern Break out the "see_other_uids" policy check from the various 2002-03-22 02:28:26 +00:00
libkern Remove 'register' keyword. 2002-03-21 18:49:23 +00:00
modules Replaced hacks in sbin/Makefile,v 1.99 and usr.sbin/Makefile,v 1.217 2002-03-21 09:15:39 +00:00
net Fix a bug introduced in 1.11 (and also MFCd to stable AND the security branch) 2002-03-20 04:05:26 +00:00
netatalk Remove __P. 2002-03-20 02:39:27 +00:00
netatm Remove __P. 2002-03-20 08:00:54 +00:00
netgraph Fix bugs where the ng_ppp node could transmit PPP frames whose length 2002-03-15 02:31:14 +00:00
netinet Send periodic ARP requests when ARP entries for hosts we are sending 2002-03-20 15:56:36 +00:00
netinet6 Remove references to vm_zone.h and switch over to the new uma API. 2002-03-20 08:03:54 +00:00
netipx Remove __P. 2002-03-20 02:39:27 +00:00
netkey Remove __P. 2002-03-20 02:39:27 +00:00
netnatm Remove __P. 2002-03-20 02:39:27 +00:00
netncp Update to C99, s/__FUNCTION__/__func__/, 2001-12-10 08:09:49 +00:00
netns Remove __P. 2002-03-20 02:39:27 +00:00
netsmb Missed this file for select SMP fixes associated with rev 1.93 of 2002-03-14 05:16:18 +00:00
nfs Remove unused include. 2002-03-20 10:12:07 +00:00
nfsclient Remove references to vm_zone.h and switch over to the new uma API. 2002-03-20 10:07:52 +00:00
nfsserver Remove references to vm_zone.h and switch over to the new uma API. 2002-03-20 10:07:52 +00:00
pc98 MFi386: revision 1.65. 2002-03-20 12:28:03 +00:00
pccard Better power code and better power diagnostics 2002-03-20 19:02:08 +00:00
pci Remove __P. 2002-03-20 02:08:01 +00:00
posix4 Remove __P. 2002-03-19 22:20:14 +00:00
powerpc Collect all functions for copying to and from userspace into the one file. 2002-03-21 23:45:59 +00:00
rpc
security/lomac DBA update: pick the right DBA for various LOMAC copyrights. 2002-03-13 22:55:20 +00:00
sparc64 intr_disable returns register_t 2002-03-21 06:21:32 +00:00
svr4
sys Change the way we ensure td_ucred is NULL if DIAGNOSTIC is defined. 2002-03-20 21:09:09 +00:00
tools Return vnode_if back to its AWK roots. 2002-03-01 01:20:23 +00:00
ufs Two minor changes to dirhash, which result in some marginal benchmark 2002-03-20 17:58:02 +00:00
vm Add uma_zone_set_max() to add enforced limits to non vm obj backed zones. 2002-03-20 05:28:34 +00:00
Makefile