Robert Watson 5c5384fe80 Use the credential authorizing the socket creation operation to perform ... the jail check and the MAC socket labeling in socreate(). This handles socket creation using a cached credential better (such as in the NFS client code when rebuilding a socket following a disconnect: the new socket should be created using the nfsmount cached cred, not the cred of the thread causing the socket to be rebuilt). Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs		2002-08-12 16:49:03 +00:00
..
bus_if.m	Add bus_child_present and the child_present method to bus_if.m	2002-07-21 03:28:43 +00:00
clock_if.m	Add a generic implementation of inittodr() and resettodr(), as well as	2002-04-04 23:39:10 +00:00
device_if.m
genassym.sh	Allow one to specify the AWK used in the environment(commandline).	2002-02-11 03:54:30 +00:00
imgact_aout.c	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
imgact_elf32.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_elf64.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_elf.c	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
imgact_elfN.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_gzip.c	Infrastructure tweaks to allow having both an Elf32 and an Elf64 executable	2002-07-20 02:56:12 +00:00
imgact_shell.c	Return a more meaningful errno when the length of the interpreter	2001-11-28 03:26:58 +00:00
inflate.c	Modernize my email address.	2002-03-25 13:52:45 +00:00
init_main.c	Refresh the credential on the first initproc thread following divorcing	2002-08-07 17:53:31 +00:00
init_sysent.c	Regen.	2002-08-06 15:16:55 +00:00
kern_acct.c	Cache the credential provided during accton() for use in later accounting	2002-08-07 19:30:16 +00:00
kern_acl.c	Introduce support for Mandatory Access Control and extensible	2002-08-01 01:04:16 +00:00
kern_clock.c	Fixed breakage of binary compatibility of the kern.clockrate sysctl in	2002-05-05 04:33:09 +00:00
kern_condvar.c	Remove code that removes thread from sleep queue before	2002-07-30 20:34:30 +00:00
kern_conf.c	Break the following implementation of panic(3):	2002-04-25 13:17:33 +00:00
kern_descrip.c	Have the kern.file sysctl export xfiles rather than files. The truth is	2002-07-31 12:26:52 +00:00
kern_environment.c	Cosmetic tweaks. Try and keep the style more consistent, catch some stray	2002-05-01 02:51:50 +00:00
kern_event.c	More caddr_t removal, make fo_ioctl take a void * instead of a caddr_t.	2002-06-29 01:50:25 +00:00
kern_exec.c	Introduce support for Mandatory Access Control and extensible	2002-08-01 14:31:58 +00:00
kern_exit.c	Revert previous revision which accidentally snuck in with another commit.	2002-08-01 13:44:33 +00:00
kern_fork.c	Move code block added in 1.157 to a safer part of fork1().	2002-08-07 11:31:45 +00:00
kern_idle.c	Slight cleanup of some comments/whitespace.	2002-08-01 18:45:10 +00:00
kern_intr.c	Slight cleanup of some comments/whitespace.	2002-08-01 18:45:10 +00:00
kern_jail.c	The jail syscall calls chroot, which is not mpsafe, so put back a	2002-07-01 20:46:01 +00:00
kern_kse.c	Fix a comment.	2002-08-01 19:10:40 +00:00
kern_kthread.c	Part 1 of KSE-III	2002-06-29 17:26:22 +00:00
kern_ktr.c	Remove a stale comment.	2002-04-06 08:44:04 +00:00
kern_ktrace.c	If we fail to write to a vnode during a ktrace write, then we drop all	2002-08-01 13:35:38 +00:00
kern_linker.c	Make the consumers of the linker_load_file() function use	2002-08-02 20:56:07 +00:00
kern_lock.c	Record the file, line, and pid of the last successful shared lock holder. This	2002-05-30 05:55:22 +00:00
kern_lockf.c	More caddr_t removal.	2002-06-29 00:29:12 +00:00
kern_mac.c	Declare a module service "kernel_mac_support" when MAC support is	2002-08-12 02:00:21 +00:00
kern_malloc.c	- Replace the bandaid introduced in revision 1.110 with	2002-05-31 09:41:09 +00:00
kern_mib.c	- Add a mutex to lock the global securelevel value.	2002-04-02 17:43:17 +00:00
kern_module.c	- Remove Giant acquisition from modevent(), modfnext(), modstat() and	2002-06-26 00:31:44 +00:00
kern_mtxpool.c	Change callers of mtx_init() to pass in an appropriate lock type name. In	2002-04-04 21:03:38 +00:00
kern_mutex.c	Disable optimization of spinlocks on UP kernels w/o debugging for now	2002-07-27 16:54:23 +00:00
kern_ntptime.c	Hide the private parts of timecounter from a couple of places that don't	2002-04-26 21:31:44 +00:00
kern_physio.c	More caddr_t removal, make fo_ioctl take a void * instead of a caddr_t.	2002-06-29 01:50:25 +00:00
kern_poll.c	Temporarily disable polling when no processes are active, while I	2002-08-04 21:00:49 +00:00
kern_proc.c	Fix typos; each file has at least one s/seperat/separat/	2002-08-11 13:05:30 +00:00
kern_prot.c	Include file cleanup; mac.h and malloc.h at one point had ordering	2002-08-01 17:47:56 +00:00
kern_resource.c	Widen struct sockbuf's sb_timeo member to int from short. With	2002-07-24 03:02:43 +00:00
kern_sema.c	Change callers of mtx_init() to pass in an appropriate lock type name. In	2002-04-04 21:03:38 +00:00
kern_shutdown.c	Revert previous revision which was accidentally committed and has not been	2002-08-01 13:39:33 +00:00
kern_sig.c	Do some work on keeping better track of stopped/continued state.	2002-08-08 06:18:41 +00:00
kern_subr.c	o Convert a vm_page_sleep_busy() into a vm_page_sleep_if_busy()	2002-08-04 06:27:37 +00:00
kern_switch.c	- Optimize wakeup() and its friends; if a thread waken up is being	2002-07-30 06:54:05 +00:00
kern_sx.c	Set the lock type equal to the lock name for now as all of the current	2002-04-04 20:49:35 +00:00
kern_synch.c	Slight cleanup of some comments/whitespace.	2002-08-01 18:45:10 +00:00
kern_syscalls.c	- Lock down the ``module'' structure by adding an SX lock that is used by	2002-03-18 07:45:30 +00:00
kern_sysctl.c	Introduce a new sysctl flag, CTLFLAG_SKIP, which will cause	2002-08-10 19:56:45 +00:00
kern_tc.c	Use a semicolon at the end of a function-like macro invocation. Kills	2002-07-15 13:13:04 +00:00
kern_thread.c	Fix a comment.	2002-08-01 19:10:40 +00:00
kern_time.c	more caddr_t removal.	2002-06-29 02:00:02 +00:00
kern_timeout.c	Change callers of mtx_init() to pass in an appropriate lock type name. In	2002-04-04 21:03:38 +00:00
kern_uuid.c	Fix a minor whitespace style nit that broke 'grep ^uuidgen'.	2002-07-09 19:36:50 +00:00
kern_xxx.c	more caddr_t removal.	2002-06-29 02:00:02 +00:00
ksched.c	Part 1 of KSE-III	2002-06-29 17:26:22 +00:00
link_aout.c	Simple p_ucred -> td_ucred changes to start using the per-thread ucred	2002-02-27 18:32:23 +00:00
link_elf_obj.c	Don't use the symbol name to lookup the symbol value when we can use	2002-04-25 01:22:16 +00:00
link_elf.c	Don't use the symbol name to lookup the symbol value when we can use	2002-04-25 01:22:16 +00:00
linker_if.m	Add the sysctl "kern.function_list", which currently exports all	2001-10-30 15:21:45 +00:00
Make.tags.inc	Don't hardcode /sys when making tags, instead use ${.CURDIR}/.. this	2002-02-27 10:07:15 +00:00
Makefile	Don't generate <sys/syscalls-hide.h> it has never had any users anywhere in	2001-10-13 09:17:49 +00:00
makesyscalls.sh	Introduce syscall.master option 'COMPAT4' which allows one to wrap	2002-07-12 06:38:34 +00:00
md4c.c
md5c.c	Bring sys/kern/md5c.c in sync with the userland version.	2002-06-24 14:15:25 +00:00
p1003_1b.c	Change p_can{debug,see,sched,signal}()'s first argument to be a thread	2002-05-19 00:14:50 +00:00
posix4_mib.c
subr_acl_posix1e.c	Introduce support for Mandatory Access Control and extensible	2002-08-01 01:04:16 +00:00
subr_autoconf.c	Remove __P.	2002-03-19 21:25:46 +00:00
subr_blist.c	Now that daddr_t has grown up, use %lld to printf it and cast it to long	2002-05-18 23:46:04 +00:00
subr_bus.c	Add bus_child_present and the child_present method to bus_if.m	2002-07-21 03:28:43 +00:00
subr_clist.c	Remove __P.	2002-03-19 21:25:46 +00:00
subr_clock.c	Use the CPU_* OID constants instead of OID_AUTO for the clock-related	2002-08-07 19:43:54 +00:00
subr_devstat.c	GC: BIO_ORDERED, various infrastructure dealing with BIO_ORDERED.	2002-02-22 09:26:35 +00:00
subr_disk.c	Implement DIOCGFRONTSTUFF ioctl which reports how many bytes from the start	2002-04-09 15:43:32 +00:00
subr_disklabel.c	more caddr_t removal.	2002-06-29 02:00:02 +00:00
subr_diskmbr.c	Remove __P.	2002-03-19 21:25:46 +00:00
subr_diskslice.c	Fix DIOCGMEDIASIZE and DIOCGSECTORSIZE ioctls to work for all	2002-07-23 14:30:27 +00:00
subr_eventhandler.c	Wrap a line longer than 80 characters.	2002-07-19 17:44:44 +00:00
subr_hints.c	Cosmetic tweaks. Try and keep the style more consistent, catch some stray	2002-05-01 02:51:50 +00:00
subr_kobj.c	Convert hit and miss counters to unsigned values. Surely negative values	2002-06-10 22:40:26 +00:00
subr_log.c	more caddr_t removal.	2002-06-29 02:00:02 +00:00
subr_mbuf.c	Only my brain can fart while fixing a previous brain fart.	2002-08-08 13:31:57 +00:00
subr_mchain.c	Convert GNU-styled variadic macros to ISO(9x) style.	2002-07-15 13:15:31 +00:00
subr_module.c
subr_param.c	Improve the implementation of adjtime(2).	2002-04-15 12:23:11 +00:00
subr_pcpu.c	Add a per-cpu variable, cpumask, the preshifted equivalent of 1 << cpuid.	2002-01-05 09:35:50 +00:00
subr_power.c	Use ISO 9X variadic macro format; arguments are not optional, just	2002-07-15 17:17:56 +00:00
subr_prf.c	Make kern.log_console_output a tuneable aswell as a sysctl.	2002-08-11 18:47:42 +00:00
subr_prof.c	more caddr_t removal.	2002-06-29 02:00:02 +00:00
subr_rman.c	Change callers of mtx_init() to pass in an appropriate lock type name. In	2002-04-04 21:03:38 +00:00
subr_rtc.c	Use the CPU_* OID constants instead of OID_AUTO for the clock-related	2002-08-07 19:43:54 +00:00
subr_sbuf.c	Fix warnings on gcc-3.1+ where __func__ is a const char * instead of a	2002-03-19 10:56:46 +00:00
subr_scanf.c
subr_smp.c	Part 1 of KSE-III	2002-06-29 17:26:22 +00:00
subr_taskqueue.c	If we fail to write to a vnode during a ktrace write, then we drop all	2002-08-01 13:35:38 +00:00
subr_trap.c	Revert removal of cred_free_thread(): It is used to ensure that a thread's	2002-07-11 02:18:33 +00:00
subr_turnstile.c	Disable optimization of spinlocks on UP kernels w/o debugging for now	2002-07-27 16:54:23 +00:00
subr_witness.c	Silence compiler warnings when DDB is not defined.	2002-07-15 02:03:17 +00:00
subr_xxx.c	Here follows the new kernel dumping infrastructure.	2002-03-31 22:37:00 +00:00
sys_generic.c	Attempt to clarify comment in selrecord.	2002-07-24 00:29:22 +00:00
sys_pipe.c	Check the far end before registering an EVFILT_WRITE filter on a pipe.	2002-08-05 15:03:03 +00:00
sys_process.c	Do preserve the error result from calling p_cansee() and use that when	2002-07-20 22:44:39 +00:00
sys_socket.c	More caddr_t removal, make fo_ioctl take a void * instead of a caddr_t.	2002-06-29 01:50:25 +00:00
syscalls.c	Regen.	2002-08-06 15:16:55 +00:00
syscalls.master	Rename mac_policy() to mac_syscall() to be more reflective of its	2002-08-06 15:15:53 +00:00
sysv_ipc.c	Change the suser() API to take advantage of td_ucred as well as do a	2002-04-01 21:31:13 +00:00
sysv_msg.c	Cleanup:	2002-07-22 18:27:54 +00:00
sysv_sem.c	Cleanup:	2002-08-05 05:16:09 +00:00
sysv_shm.c	Change struct vmspace->vm_shm from void * to struct shmmap_state *, this	2002-07-22 16:22:27 +00:00
tty_compat.c	Fixed some style bugs in the removal of __P(()). The main ones were	2002-03-24 05:09:11 +00:00
tty_conf.c	KSE Milestone 2	2001-09-12 08:38:13 +00:00
tty_cons.c	Remove new console devices with cnremove before initializing them in	2002-08-06 18:56:41 +00:00
tty_pty.c	- Lock proctree_lock instead of pgrpsess_lock.	2002-04-16 17:09:22 +00:00
tty_subr.c	Remove __P.	2002-03-19 21:25:46 +00:00
tty_tty.c	Enforce MAC policy in cttyread() as well as the other operations	2002-08-12 16:45:19 +00:00
tty.c	Clear up confusion in ugly code. ^T gave wrong results for RSS.	2002-07-18 21:19:56 +00:00
uipc_accf.c
uipc_cow.c	Lock accesses to the page queues.	2002-07-13 04:37:22 +00:00
uipc_domain.c	Back out my lats commit of locking down a socket, it conflicts with hsu's work.	2002-05-31 11:52:35 +00:00
uipc_jumbo.c	o Lock page queue accesses by vm_page_free().	2002-07-21 19:06:46 +00:00
uipc_mbuf2.c	In m_aux_delete, no need to chase beyond victim.	2002-05-23 15:59:48 +00:00
uipc_mbuf.c	Include file cleanup; mac.h and malloc.h at one point had ordering	2002-08-01 17:47:56 +00:00
uipc_proto.c	Implement a LOCAL_PEERCRED socket option which returns a	2001-08-17 22:01:18 +00:00
uipc_sockbuf.c	Include file cleanup; mac.h and malloc.h at one point had ordering	2002-08-01 17:47:56 +00:00
uipc_socket2.c	Include file cleanup; mac.h and malloc.h at one point had ordering	2002-08-01 17:47:56 +00:00
uipc_socket.c	Use the credential authorizing the socket creation operation to perform	2002-08-12 16:49:03 +00:00
uipc_syscalls.c	Fix sendfile(), who was calling vn_rdwr() without aresid parameter and	2002-08-11 20:33:11 +00:00
uipc_usrreq.c	Introduce support for Mandatory Access Control and extensible	2002-08-01 01:18:42 +00:00
vfs_acl.c	Introduce support for Mandatory Access Control and extensible	2002-08-01 01:04:16 +00:00
vfs_aio.c	o Make a correction to the last change: In aio_cancel(2) return AIO_ALLDONE	2002-08-11 19:04:17 +00:00
vfs_bio.c	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
vfs_cache.c	- Move a VOP assert to the right place.	2002-08-05 08:55:53 +00:00
vfs_cluster.c	o Lock page accesses by vm_page_io_start() with the page queues lock.	2002-07-31 07:27:08 +00:00
vfs_default.c	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
vfs_export.c	Partial backout of 1.318, remove error handling added because it may be	2002-06-30 05:23:58 +00:00
vfs_extattr.c	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
vfs_init.c	We don't need to check the return value of malloc() against	2002-06-22 21:44:11 +00:00
vfs_lookup.c	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
vfs_mount.c	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
vfs_subr.c	- Introduce a new struct xvfsconf, the userland version of struct vfsconf.	2002-08-10 20:19:04 +00:00
vfs_syscalls.c	- Replace v_flag with v_iflag and v_vflag	2002-08-04 10:29:36 +00:00
vfs_vnops.c	Implement IO_NOMACCHECK in vn_rdwr() -- perform MAC checks (assuming	2002-08-12 16:15:34 +00:00
vnode_if.src	Begin committing support for Mandatory Access Control and extensible	2002-07-30 22:15:09 +00:00