Print this page
uts: Allow for address space randomisation.
Randomise the base addresses of shared objects, non-fixed mappings, the
stack and the heap.  Introduce a service, svc:/system/process-security,
and a tool psecflags(1) to control and observe it


 114 int secpolicy_net_icmpaccess(const cred_t *);
 115 int secpolicy_net_mac_aware(const cred_t *);
 116 int secpolicy_net_mac_implicit(const cred_t *);
 117 int secpolicy_net_observability(const cred_t *);
 118 int secpolicy_net_privaddr(const cred_t *, in_port_t, int proto);
 119 int secpolicy_net_rawaccess(const cred_t *);
 120 boolean_t secpolicy_net_reply_equal(const cred_t *);
 121 int secpolicy_newproc(const cred_t *);
 122 int secpolicy_nfs(const cred_t *);
 123 int secpolicy_pbind(const cred_t *);
 124 int secpolicy_pcfs_modify_bootpartition(const cred_t *);
 125 int secpolicy_pfexec_register(const cred_t *);
 126 int secpolicy_ponline(const cred_t *);
 127 int secpolicy_pool(const cred_t *);
 128 int secpolicy_power_mgmt(const cred_t *);
 129 int secpolicy_ppp_config(const cred_t *);
 130 int secpolicy_proc_access(const cred_t *);
 131 int secpolicy_proc_excl_open(const cred_t *);
 132 int secpolicy_proc_owner(const cred_t *, const cred_t *, int);
 133 int secpolicy_proc_zone(const cred_t *);

 134 int secpolicy_pset(const cred_t *);
 135 int secpolicy_rctlsys(const cred_t *, boolean_t);
 136 int secpolicy_resource(const cred_t *);
 137 int secpolicy_resource_anon_mem(const cred_t *);
 138 int secpolicy_rpcmod_open(const cred_t *);
 139 int secpolicy_rsm_access(const cred_t *, uid_t, mode_t);
 140 int secpolicy_raisepriority(const cred_t *);
 141 int secpolicy_setpriority(const cred_t *);
 142 int secpolicy_settime(const cred_t *);
 143 int secpolicy_smb(const cred_t *);
 144 int secpolicy_smbfs_login(const cred_t *, uid_t);
 145 int secpolicy_spec_open(const cred_t *, struct vnode *, int);
 146 int secpolicy_sti(const cred_t *);
 147 int secpolicy_swapctl(const cred_t *);
 148 int secpolicy_sys_config(const cred_t *, boolean_t);
 149 int secpolicy_zone_admin(const cred_t *, boolean_t);
 150 int secpolicy_zone_config(const cred_t *);
 151 int secpolicy_sys_devices(const cred_t *);
 152 int secpolicy_systeminfo(const cred_t *);
 153 int secpolicy_tasksys(const cred_t *);




 114 int secpolicy_net_icmpaccess(const cred_t *);
 115 int secpolicy_net_mac_aware(const cred_t *);
 116 int secpolicy_net_mac_implicit(const cred_t *);
 117 int secpolicy_net_observability(const cred_t *);
 118 int secpolicy_net_privaddr(const cred_t *, in_port_t, int proto);
 119 int secpolicy_net_rawaccess(const cred_t *);
 120 boolean_t secpolicy_net_reply_equal(const cred_t *);
 121 int secpolicy_newproc(const cred_t *);
 122 int secpolicy_nfs(const cred_t *);
 123 int secpolicy_pbind(const cred_t *);
 124 int secpolicy_pcfs_modify_bootpartition(const cred_t *);
 125 int secpolicy_pfexec_register(const cred_t *);
 126 int secpolicy_ponline(const cred_t *);
 127 int secpolicy_pool(const cred_t *);
 128 int secpolicy_power_mgmt(const cred_t *);
 129 int secpolicy_ppp_config(const cred_t *);
 130 int secpolicy_proc_access(const cred_t *);
 131 int secpolicy_proc_excl_open(const cred_t *);
 132 int secpolicy_proc_owner(const cred_t *, const cred_t *, int);
 133 int secpolicy_proc_zone(const cred_t *);
 134 int secpolicy_psecflags(const cred_t *, struct proc *, struct proc *);
 135 int secpolicy_pset(const cred_t *);
 136 int secpolicy_rctlsys(const cred_t *, boolean_t);
 137 int secpolicy_resource(const cred_t *);
 138 int secpolicy_resource_anon_mem(const cred_t *);
 139 int secpolicy_rpcmod_open(const cred_t *);
 140 int secpolicy_rsm_access(const cred_t *, uid_t, mode_t);
 141 int secpolicy_raisepriority(const cred_t *);
 142 int secpolicy_setpriority(const cred_t *);
 143 int secpolicy_settime(const cred_t *);
 144 int secpolicy_smb(const cred_t *);
 145 int secpolicy_smbfs_login(const cred_t *, uid_t);
 146 int secpolicy_spec_open(const cred_t *, struct vnode *, int);
 147 int secpolicy_sti(const cred_t *);
 148 int secpolicy_swapctl(const cred_t *);
 149 int secpolicy_sys_config(const cred_t *, boolean_t);
 150 int secpolicy_zone_admin(const cred_t *, boolean_t);
 151 int secpolicy_zone_config(const cred_t *);
 152 int secpolicy_sys_devices(const cred_t *);
 153 int secpolicy_systeminfo(const cred_t *);
 154 int secpolicy_tasksys(const cred_t *);