#
285830 |
|
23-Jul-2015 |
gjb |
- Copy stable/10@285827 to releng/10.2 in preparation for 10.2-RC1 builds. - Update newvers.sh to reflect RC1. - Update __FreeBSD_version to reflect 10.2. - Update default pkg(8) configuration to use the quarterly branch.[1]
Discussed with: re, portmgr [1] Approved by: re (implicit) Sponsored by: The FreeBSD Foundation |
#
256281 |
|
10-Oct-2013 |
gjb |
Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
#
206622 |
|
14-Apr-2010 |
uqs |
mdoc: order prologue macros consistently by Dd/Dt/Os
Although groff_mdoc(7) gives another impression, this is the ordering most widely used and also required by mdocml/mandoc.
Reviewed by: ru Approved by: philip, ed (mentors)
|
#
157986 |
|
23-Apr-2006 |
dwmalone |
Add some new options to mac_bsdestended. We can now match on:
subject: ranges of uid, ranges of gid, jail id objects: ranges of uid, ranges of gid, filesystem, object is suid, object is sgid, object matches subject uid/gid object type
We can also negate individual conditions. The ruleset language is a superset of the previous language, so old rules should continue to work.
These changes require a change to the API between libugidfw and the mac_bsdextended module. Add a version number, so we can tell if we're running mismatched versions.
Update man pages to reflect changes, add extra test cases to test_ugidfw.c and add a shell script that checks that the the module seems to do what we expect.
Suggestions from: rwatson, trhodes Reviewed by: trhodes MFC after: 2 months
|
#
145139 |
|
16-Apr-2005 |
rwatson |
In practice, you need to include <sys/types.h> and <security/mac_bsdextended/mac_bsdextended.h> in order to include <ugidfw.h>, so document that.
MFC after: 3 days
|
#
131504 |
|
02-Jul-2004 |
ru |
Mechanically kill hard sentence breaks.
|
#
131421 |
|
01-Jul-2004 |
ru |
Markup, grammar, punctuation.
|
#
126217 |
|
25-Feb-2004 |
rwatson |
Add bsde_add_rule(), which is similar to bsde_set_rule() except that the caller does not specify the rule number -- instead, the kernel module is probed for the next available rule, which is then used.
Obtained from: TrustedBSD Project Sponsored by: DARPA, McAfee Research
|
#
115633 |
|
01-Jun-2003 |
ru |
Assorted mdoc(7) fixes.
|
#
108878 |
|
07-Jan-2003 |
chris |
Correct a couple small typos.
Submitted by: Attila Nagy <bra@fsn.hu>
|
#
108873 |
|
07-Jan-2003 |
chris |
Document the file system firewall interface library functions.
Sponsored by: DARPA, Network Associates Laboratories
|