summaryrefslogtreecommitdiff
path: root/usr/src/lib/libbsm
AgeCommit message (Collapse)AuthorFilesLines
2022-10-062271 CIFS clients fail to authenticate when idmap is using IDMUkcrowenex1-13/+36
Reviewed by: Gordon Ross <gordon.w.ross@gmail.com> Approved by: Dan McDonald <danmcd@mnx.io>
2022-03-1014443 resection manual pages per IPD4Richard Lowe4-129/+129
Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Andy Fiddaman <andy@omnios.org> Approved by: Dan McDonald <danmcd@joyent.com>
2020-05-0412447 should install library compat symlinks from library makefiles, not ↵Richard Lowe4-6/+6
Targetdirs Reviewed by: Gordon Ross <gwr@nexenta.com> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Approved by: Dan McDonald <danmcd@joyent.com>
2020-05-0412454 remove lint library machineryRichard Lowe4-30/+13
Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Gordon Ross <gwr@nexenta.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-10-2911842 Want audit events for auditon(A_SETPMASK) and friendsAlex Wilson2-2/+5
Reviewed by: John Levon <john.levon@joyent.com> Reviewed by: Andy Fiddaman <andy@omniosce.org> Approved by: Robert Mustacchi <rm@fingolfin.org>
2019-10-2511037 SMB File access audit logging (reserve IDs)Matt Barden2-2/+5
Reviewed by: Gordon Ross <gordon.ross@nexenta.com> Reviewed by: Roman Strashkin <roman.strashkin@nexenta.com> Reviewed by: Saso Kiselkov <saso.kiselkov@nexenta.com> Reviewed by: Rick McNeal <rick.mcneal@nexenta.com> Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com> Reviewed by: John Levon <john.levon@joyent.com>
2019-10-2411826 Buffer overflow and memory leak in "libbsm"Matthias Scheler1-9/+20
Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Robert Mustacchi <rm@fingolfin.org> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-08-1611528 Makefile.noget can get goneJohn Levon1-1/+1
11529 Use -Wno-maybe-initialized Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Robert Mustacchi <rm@joyent.com>
2019-07-0311148 libbsm: NULL pointer errorsToomas Soome4-11/+8
Reviewed by: John Levon <john.levon@joyent.com> Reviewed by: Sebastian Wiedenroth <sebastian.wiedenroth@skylime.net> Approved by: Richard Lowe <richlowe@richlowe.net>
2019-02-1310361 usr/lib - stop lint library generation and packagingAndy Fiddaman1-38/+0
Reviewed by: Jason King <jason.king@joyent.com> Reviewed by: Peter Tribble <peter.tribble@gmail.com> Reviewed by: Frederik Wessels <wessels147@gmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2019-01-1410079 smatch Makefile changes for usr/src/libJohn Levon1-0/+4
Reviewed by: Andy Fiddaman <andy@omniosce.org> Approved by: Robert Mustacchi <rm@joyent.com>
2018-02-209149 libbsm: comparison between pointer and zero character constantToomas Soome1-1/+1
Reviewed by: Andy Fiddaman <omnios@citrus-it.co.uk> Reviewed by: Albert Lee <trisk@forkgnu.org> Approved by: Dan McDonald <danmcd@joyent.com>
2017-12-138885 64-bit libbsm:adt_do_ipv[46]_address creates non-compressible at_port.Andy Fiddaman1-5/+34
Reviewed by: Dominik Hassler <hadfl@omniosce.org> Reviewed by: Dan McDonald <danmcd@joyent.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Approved by: Dan McDonald <danmcd@joyent.com>
2017-11-168793 libbsm build failure with recent perlDominik Hassler1-1/+1
Reviewed by: Andy Fiddaman <andy@omniosce.org> Reviewed by: Toomas Soome <tsoome@me.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Ken Mays <maybird1776@hotmail.com> Approved by: Dan McDonald <danmcd@joyent.com>
2017-06-278309 libbsm should support AUE_sudo audit eventAlexander Pyhalov1-0/+5
Reviewed by: Gordon Ross <gordon.w.ross@gmail.com> Reviewed by: Toomas Soome <tsoome@me.com> Approved by: Robert Mustacchi <rm@joyent.com>
2017-02-227812 Remove gender specific languageDaniel Hoffman1-1/+2
Reviewed by: Matt Ahrens <mahrens@delphix.com> Reviewed by: Prakash Surya <prakash.surya@delphix.com> Reviewed by: Steve Gonczi <steve.gonczi@delphix.com> Reviewed by: Chris Williamson <chris.williamson@delphix.com> Reviewed by: George Wilson <george.wilson@delphix.com> Reviewed by: Igor Kozhukhov <igor@dilos.org> Reviewed by: Dan McDonald <danmcd@omniti.com> Reviewed by: Robert Mustacchi <rm@joyent.com> Approved by: Richard Lowe <richlowe@richlowe.net>
2016-10-157029 want per-process exploit mitigation features (secflags)Richard Lowe5-1/+20
7030 want basic address space layout randomization (ASLR) 7031 noexec_user_stack should be a security-flag 7032 want a means to forbid mappings around NULL Reviewed by: Robert Mustacchi <rm@joyent.com> Reviewed by: Josef 'Jeff' Sipek <jeffpc@josefsipek.net> Reviewed by: Patrick Mooney <pmooney@joyent.com> Approved by: Dan McDonald <danmcd@omniti.com>
2015-01-115516 perl problems in libbsm/auditxmlRichard PALO1-1/+4
Reviewed by: Richard Lowe <richlowe@richlowe.net> Approved by: Robert Mustacchi <rm@joyent.com>
2012-09-222933 compiler warning gags need better granularityRichard Lowe1-0/+3
Reviewed by: Eric Schrock <eric.schrock@delphix.com> Approved by: Garrett D'Amore <garrett@damore.org>
2010-10-13171 adt_get_mask_from_user frees memory before it's usedChris Love1-1/+2
172 duplicate free in gss_accept_sec_context 173 duplicate free in spnego_gss_accept_sec_context Reviewed by: gordon.w.ross@gmail.com Reviewed by: garrett@nexenta.com Approved by: garrett@nexenta.com
2010-08-176884631 ilb code needs to utilize the audit tokens types of in_remote iport ↵Sangeeta Misra1-65/+49
for server address and ports
2010-07-286953290 adt_load_ttyname/adt_load_hostname should report ENETDOWN if there ↵gww1-1/+1
are no interfaces
2010-07-27PSARC/2009/636 Obsolete getacinfo(3bsm)Jan Friedel20-1217/+1700
PSARC/2009/642 audit_control(4) EOL and removal PSARC/2010/218 Audit subsystem Rights Profiles PSARC/2010/220 svc:/system/auditset service 6875456 Solaris Audit configuration in SMF - phase 2 (PSARC/2009/636, PSARC/2009/642) 6942035 audit_binfile(5) leaves unfinished audit logs. 6942041 auditd(1) says "auditd refreshed" on startup. 6943275 audit_remote(5) leaks memory on audit service refresh 6955077 adt_get_mask_from_user() should regard _SC_GETPW_R_SIZE_MAX 6955117 $SRC/lib/libbsm/common/audit_ftpd.c shouldn't hardcode the lenght of usernames (8) 6956169 adt_audit_state() returns non-boolean values --HG-- rename : usr/src/cmd/auditconfig/auditconfig_impl.h => usr/src/lib/libbsm/common/audit_policy.h rename : usr/src/cmd/auditconfig/audit_scf.c => usr/src/lib/libbsm/common/audit_scf.c rename : usr/src/cmd/auditconfig/audit_scf.h => usr/src/lib/libbsm/common/audit_scf.h
2010-07-206404196 <bsm/audit_uevents.h> doesn't appear to have a proper copyright or ↵Marek Pospisil1-10/+23
CDDL license.
2010-07-07PSARC 2010/235 POSIX 1003.1-2008 *at(2) syscallsRoger A. Faulkner1-0/+3
6910251 need support for all POSIX.1-2008 *at(2) syscalls 6964835 mknod(2) auditing omits the pathname for invalid arguments
2010-07-07PSARC/2010/003 EOL and removal of audit_user(4) and getauusernam(3bsm)gww7-254/+63
6914742 remove audit_user phase 1 PSARC/2010/003 EOL and removal of audit_user(4) and getauusernam(3bsm)
2010-06-246916796 OSnet mapfiles should use version 2 link-editor syntaxAli Bahrami1-10/+12
--HG-- rename : usr/src/cmd/sgs/libelf/common/mapfile-common => usr/src/cmd/sgs/libelf/common/mapfile-vers rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-bindings => usr/src/cmd/sgs/link_audit/common/mapfile-vers-bindings rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-perfcnt => usr/src/cmd/sgs/link_audit/common/mapfile-vers-perfcnt rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-symbindrep => usr/src/cmd/sgs/link_audit/common/mapfile-vers-symbindrep rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-truss => usr/src/cmd/sgs/link_audit/common/mapfile-vers-truss rename : usr/src/cmd/sgs/link_audit/i386/mapfile-vers-who => usr/src/cmd/sgs/link_audit/common/mapfile-vers-who rename : usr/src/common/mapfiles/i386/map.noexdata => usr/src/common/mapfiles/common/map.noexdata rename : usr/src/lib/libaio/sparc/mapfile-vers => usr/src/lib/libaio/common/mapfile-vers rename : usr/src/lib/libelfsign/common/mapfile.map => usr/src/lib/libelfsign/common/mapfile-vers rename : usr/src/lib/libpthread/sparc/mapfile-vers => usr/src/lib/libpthread/common/mapfile-vers rename : usr/src/lib/librt/amd64/mapfile-vers => usr/src/lib/librt/common/mapfile-vers rename : usr/src/lib/libsys/sparc/mapfile-vers => usr/src/lib/libsys/common/mapfile-vers rename : usr/src/lib/libthread/sparc/mapfile-vers => usr/src/lib/libthread/common/mapfile-vers
2010-05-186948751 $SRC/lib/libbsm/common/audit_class.c needs some cleanup.Jan Friedel1-11/+10
2010-05-106946546 Fix for 6868082 devfsadm must rely on device_maps breaks ↵Jan Parcel2-65/+190
add_allocatable on Trusted Extensions
2010-05-066946518 There is no way to validate that audit flags are validgww4-140/+146
6946529 getauditflagschar and getauclassnam may not operate properly with maximum size class names 6927607 getauditflags.c:getauditflagsbin() needs boundary checking.
2010-04-28PSARC 2009/377 In-kernel pfexec implementation.Casper H.S. Dik1-2/+2
PSARC 2009/378 Basic File Privileges PSARC 2010/072 RBAC update: user attrs from profiles 4912090 pfzsh(1) should exist 4912093 pfbash(1) should exist 4912096 pftcsh(1) should exist 6440298 Expand the basic privilege set in order to restrict file access 6859862 Move pfexec into the kernel 6919171 cred_t sidesteps kmem_debug; we need to be able to detect bad hold/free when they occur 6923721 The new SYS_SMB privilege is not backward compatible 6937562 autofs doesn't remove its door when the zone shuts down 6937727 Zones stuck on deathrow; netstack_zone keeps a credential reference to the zone 6940159 Implement PSARC 2010/072
2010-04-146940699 no reboot audit leaves auditd disabled across reboot.Marek Pospisil2-6/+4
2010-04-126935410 setting audit context when audit is not enabled should be more ↵gww2-105/+176
tolerant of getaddrinfo failure
2010-04-046939427 core dump in adr_char: au_close should check return from mallocgww1-7/+15
2010-03-116914628 Implement the user object audit token PSARC/2010/001 User object ↵gww7-17/+90
audit token PSARC/2010/001 User object audit token 6580704 passwd gww produces a less optimal audit record.
2010-03-09PSARC/2009/613 auditon(2) clarificationMarek Pospisil3-6/+6
6884238 The audit_policy variable should be a uint32_t.
2010-03-09PSARC/2009/207 adt_import_proc removalMarek Pospisil3-108/+1
6769352 adt_import_proc() should be removed
2010-02-28PSARC 2009/657 delete obsolete system call trapsRoger A. Faulkner1-22/+21
6906485 delete obsolete system call traps --HG-- rename : usr/src/cmd/truss/xstat.c => usr/src/cmd/truss/stat.c rename : usr/src/lib/libc/port/gen/dup2.c => usr/src/lib/libc/port/gen/dup.c rename : usr/src/lib/libc/port/sys/libc_fcntl.c => usr/src/lib/libc/port/sys/fcntl.c rename : usr/src/lib/libc/port/sys/libc_open.c => usr/src/lib/libc/port/sys/open.c
2010-02-25PSARC/2008/532 NWAM Phase 1Anurag S. Maskey2-33/+94
PSARC/2009/577 Network Auto-Magic (NWAM) Phase 1 Updates PSARC/2010/049 Network Auto-Magic (NWAM) Phase 1 Updates part 2 4087814 User friendly utility wanted for network config, able to add network interfaces. 6509720 support configuration using DHCP "inform" and static IP address 6553627 network/physical:default and network/physical:nwam should be mutually-exclusive (perhaps a property) 6609581 nwam does not start the dns/client service after configuring the network 6664072 nwam profiles should include name service configuration properties 6723947 setting static MAC address should be possible 6794043 NWAM needs more complete profile support 6914190 Support for unmanaged network interfaces in NWAM - hands off 6921971 nwamd fails to run teardown/net-svc after suspend/resume --HG-- rename : usr/src/cmd/cmd-inet/lib/nwamd/interface.c => usr/src/cmd/cmd-inet/lib/nwamd/ncu_ip.c rename : usr/src/cmd/cmd-inet/lib/nwamd/wireless.c => usr/src/cmd/cmd-inet/lib/nwamd/ncu_phys.c rename : usr/src/cmd/cmd-inet/lib/nwamd/events.c => usr/src/cmd/cmd-inet/lib/nwamd/routing_events.c rename : usr/src/cmd/cmd-inet/lib/nwamd/functions.h => usr/src/cmd/cmd-inet/lib/nwamd/util.h
2010-02-195097569 libbsm(3LIB)'s audit_user.c could use some tidying upJan Friedel1-135/+23
2010-02-196888676 $SRC/cmd/audit*/*.c and $SRC/lib/[libbsm|auditd_plugins] and other ↵Jan Friedel16-123/+92
need lint related clean up
2010-02-18PSARC/2002/665 auditd interface reclassificationgww3-43/+35
6647954 implement the removal of audit_data(4) as noted in PSARC/2002/665
2010-02-016920272 libdevinfo is too connected, libbsm must not depend upon itJan Parcel2-3/+116
2010-01-176868082 TX: devfsadm must rely on device_maps file with multiple ↵Jan Parcel5-44/+440
hot-pluggable usb devices 6855420 TX: USB built-in floppy drive should automatically populate the Device Manager
2010-01-14backout 6855420: needs more workjmcp6-442/+46
2010-01-146855420 TX: USB built-in floppy drive should automatically populate the ↵Jan Parcel6-46/+442
Device Manager 6868082 TX: devfsadm must rely on device_maps file with multiple hot-pluggable usb devices 6885946 libbssm or libdevinfo .h changes not reflected upon make install
2009-11-20PSARC 2009/542 Increase the maximum value of NGROUPS_MAX to 1024Casper H.S. Dik4-19/+23
4088757 Customer would like to increase ngroups_max more than 32 6853435 Many files incorrectly include the private <sys/cred_impl.h>
2009-11-206767257 Solaris Audit configuration in SMFJan Friedel2-37/+2
2009-11-03PSARC 2008/575 ILB: Integrated L3/L4 Load balancerSangeeta Misra2-1/+458
6882718 in-kernel simple L3/L4 load balancing service should be provided in Solaris 6884202 ipobs_hook() in ip_input() invalidates DB_REF assumption
2009-11-02PSARC/2008/181 Solaris Hotplug FrameworkEvan Yan2-1/+81
6837240 Solaris Hotplug Framework 6783012 Add support for PCIe Alternate Routing-ID Interpretation 6638136 remove obsolete ndi_ra_xxx logic from px_msi code 6695081 Race condition between pciehpc_intr() and pciehpc_init() --HG-- rename : usr/src/uts/common/io/hotplug/pciehpc/pciehpc.c => usr/src/uts/common/io/pciex/hotplug/pciehpc.c rename : usr/src/uts/common/io/hotplug/pcishpc/pcishpc.c => usr/src/uts/common/io/pciex/hotplug/pcishpc.c rename : usr/src/uts/intel/io/hotplug/pciehpc/pciehpc_acpi.c => usr/src/uts/intel/io/pciex/hotplug/pciehpc_acpi.c rename : usr/src/uts/intel/io/hotplug/pciehpc/pciehpc_acpi.h => usr/src/uts/intel/sys/hotplug/pci/pciehpc_acpi.h rename : usr/src/uts/sparc/pcicfg.e/Makefile => usr/src/uts/sparc/pcicfg/Makefile rename : usr/src/uts/sun4/io/pcicfg.e.c => usr/src/uts/sun4/io/pcicfg.c