The NetBSD Project

CVS log for src/share/man/man9/secmodel_securelevel.9

[BACK] Up to [cvs.NetBSD.org] / src / share / man / man9

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.17.2.1 / (download) - annotate - [select for diffs], Mon Jun 10 22:05:41 2019 UTC (4 years, 10 months ago) by christos
Branch: phil-wifi
Changes since 1.17: +2 -8 lines
Diff to previous 1.17 (colored) next main 1.18 (colored)

Sync with HEAD

Revision 1.19 / (download) - annotate - [select for diffs], Sat May 18 10:21:03 2019 UTC (4 years, 11 months ago) by alnsn
Branch: MAIN
CVS Tags: phil-wifi-20200421, phil-wifi-20200411, phil-wifi-20200406, phil-wifi-20191119, phil-wifi-20190609, netbsd-9-base, netbsd-9-3-RELEASE, netbsd-9-2-RELEASE, netbsd-9-1-RELEASE, netbsd-9-0-RELEASE, netbsd-9-0-RC2, netbsd-9-0-RC1, netbsd-9, netbsd-10-base, netbsd-10-0-RELEASE, netbsd-10-0-RC6, netbsd-10-0-RC5, netbsd-10-0-RC4, netbsd-10-0-RC3, netbsd-10-0-RC2, netbsd-10-0-RC1, netbsd-10, is-mlppp-base, is-mlppp, cjep_sun2x-base1, cjep_sun2x-base, cjep_sun2x, cjep_staticlib_x-base1, cjep_staticlib_x-base, cjep_staticlib_x, HEAD
Changes since 1.18: +2 -4 lines
Diff to previous 1.18 (colored)

Don't mention SVS because it can't be changed anymore.

Revision 1.15.24.2 / (download) - annotate - [select for diffs], Sat Jul 28 04:37:25 2018 UTC (5 years, 8 months ago) by pgoyette
Branch: pgoyette-compat
CVS Tags: pgoyette-compat-merge-20190127
Changes since 1.15.24.1: +2 -6 lines
Diff to previous 1.15.24.1 (colored) to branchpoint 1.15 (colored) next main 1.16 (colored)

Sync with HEAD

Revision 1.18 / (download) - annotate - [select for diffs], Sun Jul 15 05:16:41 2018 UTC (5 years, 9 months ago) by maxv
Branch: MAIN
CVS Tags: pgoyette-compat-20190127, pgoyette-compat-20190118, pgoyette-compat-1226, pgoyette-compat-1126, pgoyette-compat-1020, pgoyette-compat-0930, pgoyette-compat-0906, pgoyette-compat-0728
Changes since 1.17: +2 -6 lines
Diff to previous 1.17 (colored)

Retire ipkdb entirely. The option was removed from the config files
yesterday.

ok kamil christos

Revision 1.15.18.1 / (download) - annotate - [select for diffs], Sat May 5 15:11:53 2018 UTC (5 years, 11 months ago) by martin
Branch: netbsd-8
CVS Tags: netbsd-8-2-RELEASE, netbsd-8-1-RELEASE, netbsd-8-1-RC1, netbsd-8-0-RELEASE, netbsd-8-0-RC2
Changes since 1.15: +4 -2 lines
Diff to previous 1.15 (colored) next main 1.16 (colored)

Pull up following revision(s) (requested by alnsn in ticket #790):

	share/man/man9/secmodel_securelevel.9: revision 1.16
	sys/secmodel/suser/secmodel_suser.c: revision 1.44
	sys/secmodel/securelevel/secmodel_securelevel.c: revision 1.31
	sys/sys/kauth.h: revision 1.76
	sys/arch/x86/x86/svs.c: revision 1.18

Add KAUTH_MACHDEP_SVS_DISABLE and add support to secmodel_securelevel(9).
Disabling SVS is denied at securelevel 1 and above.

Add SVS. It may not be disabled at securelevel 1 and above.

Revision 1.15.24.1 / (download) - annotate - [select for diffs], Wed May 2 07:20:02 2018 UTC (5 years, 11 months ago) by pgoyette
Branch: pgoyette-compat
Changes since 1.15: +6 -4 lines
Diff to previous 1.15 (colored)

Synch with HEAD

Revision 1.17 / (download) - annotate - [select for diffs], Fri Apr 27 09:33:43 2018 UTC (5 years, 11 months ago) by wiz
Branch: MAIN
CVS Tags: phil-wifi-base, pgoyette-compat-0625, pgoyette-compat-0521, pgoyette-compat-0502
Branch point for: phil-wifi
Changes since 1.16: +3 -3 lines
Diff to previous 1.16 (colored)

Fix xrefs.

Revision 1.16 / (download) - annotate - [select for diffs], Thu Apr 26 18:56:18 2018 UTC (5 years, 11 months ago) by alnsn
Branch: MAIN
Changes since 1.15: +4 -2 lines
Diff to previous 1.15 (colored)

Add SVS. It may not be disabled at securelevel 1 and above.

Revision 1.12.6.2 / (download) - annotate - [select for diffs], Wed Aug 20 00:02:37 2014 UTC (9 years, 8 months ago) by tls
Branch: tls-maxphys
Changes since 1.12.6.1: +2 -2 lines
Diff to previous 1.12.6.1 (colored) to branchpoint 1.12 (colored) next main 1.13 (colored)

Rebase to HEAD as of a few days ago.

Revision 1.10.6.3 / (download) - annotate - [select for diffs], Thu May 22 11:37:52 2014 UTC (9 years, 10 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.10.6.2: +2 -2 lines
Diff to previous 1.10.6.2 (colored) to branchpoint 1.10 (colored) next main 1.11 (colored)

sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs.  ("Protocol error: too many arguments")

Revision 1.15 / (download) - annotate - [select for diffs], Tue Mar 18 18:20:40 2014 UTC (10 years, 1 month ago) by riastradh
Branch: MAIN
CVS Tags: yamt-pagecache-base9, tls-maxphys-base, tls-earlyentropy-base, tls-earlyentropy, riastradh-xf86-video-intel-2-7-1-pre-2-21-15, prg-localcount2-base3, prg-localcount2-base2, prg-localcount2-base1, prg-localcount2-base, prg-localcount2, pgoyette-localcount-base, pgoyette-localcount-20170426, pgoyette-localcount-20170320, pgoyette-localcount-20170107, pgoyette-localcount-20161104, pgoyette-localcount-20160806, pgoyette-localcount-20160726, pgoyette-localcount, pgoyette-compat-base, pgoyette-compat-0422, pgoyette-compat-0415, pgoyette-compat-0407, pgoyette-compat-0330, pgoyette-compat-0322, pgoyette-compat-0315, perseant-stdc-iso10646-base, perseant-stdc-iso10646, netbsd-8-base, netbsd-8-0-RC1, netbsd-7-nhusb-base-20170116, netbsd-7-nhusb-base, netbsd-7-nhusb, netbsd-7-base, netbsd-7-2-RELEASE, netbsd-7-1-RELEASE, netbsd-7-1-RC2, netbsd-7-1-RC1, netbsd-7-1-2-RELEASE, netbsd-7-1-1-RELEASE, netbsd-7-1, netbsd-7-0-RELEASE, netbsd-7-0-RC3, netbsd-7-0-RC2, netbsd-7-0-RC1, netbsd-7-0-2-RELEASE, netbsd-7-0-1-RELEASE, netbsd-7-0, netbsd-7, matt-nb8-mediatek-base, matt-nb8-mediatek, localcount-20160914, bouyer-socketcan-base1, bouyer-socketcan-base, bouyer-socketcan
Branch point for: pgoyette-compat, netbsd-8
Changes since 1.14: +1 -1 lines
Diff to previous 1.14 (colored)

Merge riastradh-drm2 to HEAD.

Revision 1.13.2.1 / (download) - annotate - [select for diffs], Tue Jul 23 21:07:33 2013 UTC (10 years, 8 months ago) by riastradh
Branch: riastradh-drm2
Changes since 1.13: +2 -2 lines
Diff to previous 1.13 (colored) next main 1.14 (colored)

sync with HEAD

Revision 1.14 / (download) - annotate - [select for diffs], Sat Jul 20 21:39:59 2013 UTC (10 years, 9 months ago) by wiz
Branch: MAIN
CVS Tags: riastradh-drm2-base3, riastradh-drm2-base2, riastradh-drm2-base1
Changes since 1.13: +2 -2 lines
Diff to previous 1.13 (colored)

Use Mt for email addresses.

Revision 1.12.6.1 / (download) - annotate - [select for diffs], Mon Feb 25 00:28:15 2013 UTC (11 years, 1 month ago) by tls
Branch: tls-maxphys
Changes since 1.12: +6 -6 lines
Diff to previous 1.12 (colored)

resync with head

Revision 1.10.6.2 / (download) - annotate - [select for diffs], Wed Jan 16 05:32:37 2013 UTC (11 years, 3 months ago) by yamt
Branch: yamt-pagecache
CVS Tags: yamt-pagecache-tag8
Changes since 1.10.6.1: +6 -6 lines
Diff to previous 1.10.6.1 (colored) to branchpoint 1.10 (colored)

sync with (a bit old) head

Revision 1.13 / (download) - annotate - [select for diffs], Thu Nov 22 14:27:32 2012 UTC (11 years, 4 months ago) by abs
Branch: MAIN
CVS Tags: yamt-pagecache-base8, yamt-pagecache-base7, riastradh-drm2-base, agc-symver-base, agc-symver
Branch point for: riastradh-drm2
Changes since 1.12: +6 -6 lines
Diff to previous 1.12 (colored)

Punctuation and (non-)capitalization fixes.

From Bug Hunting.

Revision 1.10.6.1 / (download) - annotate - [select for diffs], Tue Apr 17 00:05:49 2012 UTC (12 years ago) by yamt
Branch: yamt-pagecache
Changes since 1.10: +84 -15 lines
Diff to previous 1.10 (colored)

sync with head

Revision 1.12 / (download) - annotate - [select for diffs], Tue Jan 17 10:47:27 2012 UTC (12 years, 3 months ago) by cegger
Branch: MAIN
CVS Tags: yamt-pagecache-base6, yamt-pagecache-base5, yamt-pagecache-base4, netbsd-6-base, netbsd-6-1-RELEASE, netbsd-6-1-RC4, netbsd-6-1-RC3, netbsd-6-1-RC2, netbsd-6-1-RC1, netbsd-6-1-5-RELEASE, netbsd-6-1-4-RELEASE, netbsd-6-1-3-RELEASE, netbsd-6-1-2-RELEASE, netbsd-6-1-1-RELEASE, netbsd-6-1, netbsd-6-0-RELEASE, netbsd-6-0-RC2, netbsd-6-0-RC1, netbsd-6-0-6-RELEASE, netbsd-6-0-5-RELEASE, netbsd-6-0-4-RELEASE, netbsd-6-0-3-RELEASE, netbsd-6-0-2-RELEASE, netbsd-6-0-1-RELEASE, netbsd-6-0, netbsd-6, matt-nb6-plus-nbase, matt-nb6-plus-base, matt-nb6-plus
Branch point for: tls-maxphys
Changes since 1.11: +4 -2 lines
Diff to previous 1.11 (colored)

fix secmodel implementation of CPU_UCODE.
ok wiz@ for the manpages
ok elad@

Revision 1.11 / (download) - annotate - [select for diffs], Sun Dec 4 21:08:45 2011 UTC (12 years, 4 months ago) by jym
Branch: MAIN
Changes since 1.10: +82 -15 lines
Diff to previous 1.10 (colored)

Improvements in secmodel(9). Document secmodel_register(9), _deregister(9)
and _eval(9).

Add secmodel_extensions(9), and indicate the new sysctl(7) to let
ordinary users control the CPU affinity (user_set_cpu_affinity).

Revision 1.10 / (download) - annotate - [select for diffs], Wed Dec 22 09:08:09 2010 UTC (13 years, 3 months ago) by wiz
Branch: MAIN
CVS Tags: yamt-pagecache-base3, yamt-pagecache-base2, yamt-pagecache-base, uebayasi-xip-base7, matt-mips64-premerge-20101231, cherry-xenmp-base, cherry-xenmp, bouyer-quota2-nbase, bouyer-quota2-base, bouyer-quota2
Branch point for: yamt-pagecache
Changes since 1.9: +4 -4 lines
Diff to previous 1.9 (colored)

Improve wording.

Revision 1.9 / (download) - annotate - [select for diffs], Tue Dec 21 08:53:25 2010 UTC (13 years, 4 months ago) by jruoho
Branch: MAIN
Changes since 1.8: +6 -4 lines
Diff to previous 1.8 (colored)

Note vm.user_va0_disable.

Revision 1.8 / (download) - annotate - [select for diffs], Tue Dec 14 09:09:52 2010 UTC (13 years, 4 months ago) by jruoho
Branch: MAIN
Changes since 1.7: +44 -33 lines
Diff to previous 1.7 (colored)

Note specifically that kernel modules can be loaded at securelevel 0.
In addition, some markup improvements.

Revision 1.7 / (download) - annotate - [select for diffs], Fri Oct 2 20:31:19 2009 UTC (14 years, 6 months ago) by elad
Branch: MAIN
CVS Tags: uebayasi-xip-base6, uebayasi-xip-base5, uebayasi-xip-base4, uebayasi-xip-base3, uebayasi-xip-base2, uebayasi-xip-base1, uebayasi-xip, matt-premerge-20091211
Changes since 1.6: +11 -1 lines
Diff to previous 1.6 (colored)

Centralize documentation about exported sysctl variables in the relevant
secmodel's man-page.

Revision 1.6 / (download) - annotate - [select for diffs], Sat Jul 25 16:20:11 2009 UTC (14 years, 8 months ago) by mbalmer
Branch: MAIN
Changes since 1.5: +6 -2 lines
Diff to previous 1.5 (colored)

Document recent gpio(4) changes and introduce a new config file for GPIO.
Integrate with the startup scripts in /etc/rc.d.  Introduce new variable
"gpio" for /etc/rc.conf.

Revision 1.5 / (download) - annotate - [select for diffs], Tue Nov 11 00:10:39 2008 UTC (15 years, 5 months ago) by reed
Branch: MAIN
CVS Tags: jym-xensuspend-nbase, jym-xensuspend-base, jym-xensuspend
Changes since 1.4: +4 -7 lines
Diff to previous 1.4 (colored)

Fix Document Title and one line description.

Revision 1.4 / (download) - annotate - [select for diffs], Mon Nov 10 15:00:18 2008 UTC (15 years, 5 months ago) by elad
Branch: MAIN
Changes since 1.3: +3 -2 lines
Diff to previous 1.3 (colored)

Add Hugh Graham (hugh@openbsd.org) to the copyright notice.

This man-page is based on OpenBSD's securelevel(7), and the copyright was
not reflecting that (probably due to a copy/paste error on my part; I can't
remember).

Noticed by Jeremy C. Reed, thanks!

Revision 1.2.10.1 / (download) - annotate - [select for diffs], Mon Jun 23 04:30:03 2008 UTC (15 years, 9 months ago) by wrstuden
Branch: wrstuden-revivesa
Changes since 1.2: +5 -5 lines
Diff to previous 1.2 (colored) next main 1.3 (colored)

Sync w/ -current. 34 merge conflicts to follow.

Revision 1.2.8.1 / (download) - annotate - [select for diffs], Wed Jun 4 02:04:39 2008 UTC (15 years, 10 months ago) by yamt
Branch: yamt-pf42
Changes since 1.2: +5 -5 lines
Diff to previous 1.2 (colored) next main 1.3 (colored)

sync with head

Revision 1.2.6.1 / (download) - annotate - [select for diffs], Mon Jun 2 13:21:42 2008 UTC (15 years, 10 months ago) by mjf
Branch: mjf-devfs2
Changes since 1.2: +5 -5 lines
Diff to previous 1.2 (colored) next main 1.3 (colored)

Sync with HEAD.

Revision 1.3 / (download) - annotate - [select for diffs], Wed May 28 00:19:52 2008 UTC (15 years, 10 months ago) by snj
Branch: MAIN
CVS Tags: yamt-pf42-base4, yamt-pf42-base3, wrstuden-revivesa-base-3, wrstuden-revivesa-base-2, wrstuden-revivesa-base-1, wrstuden-revivesa-base, netbsd-5-base, netbsd-5-2-RELEASE, netbsd-5-2-RC1, netbsd-5-2-3-RELEASE, netbsd-5-2-2-RELEASE, netbsd-5-2-1-RELEASE, netbsd-5-2, netbsd-5-1-RELEASE, netbsd-5-1-RC4, netbsd-5-1-RC3, netbsd-5-1-RC2, netbsd-5-1-RC1, netbsd-5-1-5-RELEASE, netbsd-5-1-4-RELEASE, netbsd-5-1-3-RELEASE, netbsd-5-1-2-RELEASE, netbsd-5-1-1-RELEASE, netbsd-5-1, netbsd-5-0-RELEASE, netbsd-5-0-RC4, netbsd-5-0-RC3, netbsd-5-0-RC2, netbsd-5-0-RC1, netbsd-5-0-2-RELEASE, netbsd-5-0-1-RELEASE, netbsd-5-0, netbsd-5, mjf-devfs2-base, matt-nb5-pq3-base, matt-nb5-pq3, matt-nb5-mips64-u2-k2-k4-k7-k8-k9, matt-nb5-mips64-u1-k1-k5, matt-nb5-mips64-premerge-20101231, matt-nb5-mips64-premerge-20091211, matt-nb5-mips64-k15, matt-nb5-mips64, matt-nb4-mips64-k7-u2a-k9b, matt-mips64-base2
Changes since 1.2: +5 -5 lines
Diff to previous 1.2 (colored)

Remove trailing whitespace, correct a spelling error, and fix an xref.

Revision 1.2.2.2 / (download) - annotate - [select for diffs], Wed Jan 9 01:39:22 2008 UTC (16 years, 3 months ago) by matt
Branch: matt-armv6
Changes since 1.2.2.1: +197 -0 lines
Diff to previous 1.2.2.1 (colored) to branchpoint 1.2 (colored) next main 1.3 (colored)

sync with HEAD

Revision 1.2.2.1, Mon Dec 31 15:31:44 2007 UTC (16 years, 3 months ago) by matt
Branch: matt-armv6
Changes since 1.2: +0 -197 lines
FILE REMOVED

file secmodel_securelevel.9 was added on branch matt-armv6 on 2008-01-09 01:39:22 +0000

Revision 1.2 / (download) - annotate - [select for diffs], Mon Dec 31 15:31:44 2007 UTC (16 years, 3 months ago) by ad
Branch: MAIN
CVS Tags: yamt-pf42-baseX, yamt-pf42-base2, yamt-pf42-base, matt-armv6-nbase, matt-armv6-base, keiichi-mipv6-nbase, keiichi-mipv6-base, keiichi-mipv6, hpcarm-cleanup-nbase, hpcarm-cleanup-base
Branch point for: yamt-pf42, wrstuden-revivesa, mjf-devfs2, matt-armv6
Changes since 1.1: +2 -3 lines
Diff to previous 1.1 (colored)

Remove systrace. Ok core@.

Revision 1.1 / (download) - annotate - [select for diffs], Wed Nov 21 22:49:06 2007 UTC (16 years, 5 months ago) by elad
Branch: MAIN
CVS Tags: cube-autoconf-base, cube-autoconf

Make securelevel a "secmodel" of its own.

While it's true that it's part of the traditional 4.4BSD security model,
there may come a time where a different "primary" security model used for
fine-grained privileges (ie., splitting root's responsibilities to various
privileges that can be assigned) may want to still have a securelevel
setting.

Idea from Daniel Carosone:

  http://mail-index.netbsd.org/tech-security/2006/08/25/0001.html

The location of the removed files, for reference, was:

  src/secmodel/bsd44/secmodel_bsd44_securelevel.c
  src/secmodel/bsd44/securelevel.h

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>