freebsd-skq/sys/security
Robert Watson ae87be447c Replace somewhat awkward audit trail rotation scheme, which involved the
global audit mutex and condition variables, with an sx lock which protects
the trail vnode and credential while in use, and is acquired by the system
call code when rotating the trail.  Previously, a "message" would be sent
to the kernel audit worker, which did the rotation, but the new code is
simpler and (hopefully) less error-prone.

Obtained from:	TrustedBSD Project
MFC after:	1 month
2008-02-27 17:12:22 +00:00
..
audit Replace somewhat awkward audit trail rotation scheme, which involved the 2008-02-27 17:12:22 +00:00
mac VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used in 2008-01-13 14:44:15 +00:00
mac_biba Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_bsdextended Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_ifoff Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_lomac Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_mls Properly return the error from mls_subject_privileged() in the ifnet 2008-01-28 10:20:18 +00:00
mac_none Consistently name functions for mac_<policy> as <policy>_whatever rather 2007-10-25 11:31:11 +00:00
mac_partition Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_portacl Consistently name functions for mac_<policy> as <policy>_whatever rather 2007-10-25 11:31:11 +00:00
mac_seeotheruids Resort TrustedBSD MAC Framework policy entry point implementations and 2007-10-29 13:33:06 +00:00
mac_stub Add a new file descriptor type for IPC shared memory objects and use it to 2008-01-08 21:58:16 +00:00
mac_test Add a new file descriptor type for IPC shared memory objects and use it to 2008-01-08 21:58:16 +00:00