c27d5f30b6
- Add a KAUTH_PROCESS_SCHEDULER action, to handle scheduler related
requests, and add specific requests for set/get scheduler policy and
set/get scheduler parameters.
- Add a KAUTH_PROCESS_KEVENT_FILTER action, to handle kevent(2) related
requests.
- Add a KAUTH_DEVICE_TTY_STI action to handle requests to TIOCSTI.
- Add requests for the KAUTH_PROCESS_CANSEE action, indicating what
process information is being looked at (entry itself, args, env,
open files).
- Add requests for the KAUTH_PROCESS_RLIMIT action indicating set/get.
- Add requests for the KAUTH_PROCESS_CORENAME action indicating set/get.
- Make bsd44 secmodel code handle the newly added rqeuests appropriately.
All of the above make it possible to issue finer-grained kauth(9) calls in
many places, removing some KAUTH_GENERIC_ISSUSER requests.
- Remove the "CAN" from KAUTH_PROCESS_CAN{KTRACE,PROCFS,PTRACE,SIGNAL}.
Discussed with christos@ and yamt@.
|
||
|---|---|---|
| .. | ||
| Makefile | ||
| TODO | ||
| files.ibcs2 | ||
| ibcs2_dirent.h | ||
| ibcs2_errno.c | ||
| ibcs2_errno.h | ||
| ibcs2_exec.c | ||
| ibcs2_exec.h | ||
| ibcs2_exec_coff.c | ||
| ibcs2_exec_elf32.c | ||
| ibcs2_exec_xout.c | ||
| ibcs2_fcntl.c | ||
| ibcs2_fcntl.h | ||
| ibcs2_grp.h | ||
| ibcs2_ioctl.c | ||
| ibcs2_ipc.c | ||
| ibcs2_misc.c | ||
| ibcs2_mman.h | ||
| ibcs2_mount.h | ||
| ibcs2_pwd.h | ||
| ibcs2_signal.c | ||
| ibcs2_signal.h | ||
| ibcs2_signo.c | ||
| ibcs2_socksys.c | ||
| ibcs2_socksys.h | ||
| ibcs2_stat.c | ||
| ibcs2_stat.h | ||
| ibcs2_statfs.h | ||
| ibcs2_stropts.h | ||
| ibcs2_syscall.h | ||
| ibcs2_syscallargs.h | ||
| ibcs2_syscalls.c | ||
| ibcs2_sysent.c | ||
| ibcs2_sysi86.h | ||
| ibcs2_termios.h | ||
| ibcs2_time.h | ||
| ibcs2_timeb.h | ||
| ibcs2_types.h | ||
| ibcs2_unistd.h | ||
| ibcs2_ustat.h | ||
| ibcs2_util.h | ||
| ibcs2_utime.h | ||
| ibcs2_utsname.h | ||
| ibcs2_wait.h | ||
| syscalls.conf | ||
| syscalls.master | ||