summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Remove usbhidaction(1) manual page under SEE ALSO section. This will betrhodes2002-08-161-1/+0
| | | | | | | added again if/when we port the framework. Submitted by: mwlucas Approved by: joe
* Bump document date for the -n option.johan2002-08-161-1/+1
| | | | Approved by: sheldonh (mentor)
* Bump document date for the 'beep only' change.johan2002-08-162-2/+2
|
* Add LOGIN_SETMAC, which will indicate to the user context management coderwatson2002-08-161-1/+2
| | | | | | | | that it should also set the user's default MAC label, if available and permitted. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* Use symbolic constants instead of magic address constants.jake2002-08-161-1/+1
|
* Minor style. Removed unused declaration.jake2002-08-161-2/+1
|
* Removed unneeded pmap_initialized flag.jake2002-08-161-4/+0
|
* Demark sections of code that need special fault handling with labels.jake2002-08-165-148/+169
| | | | | | | | Check if the trapped pc is inside of the demarked sections to implement fault recovery for copyin etc, instead of pcb_onfault. Handle recovery from data access exceptions as well as page faults. Inspired by: bde's sys.dif
* Bah! Use the full name for Florida.marcus2002-08-151-1/+1
|
* Add myself.marcus2002-08-151-0/+1
|
* UHCI_DEBUG -> USB_DEBUG.joe2002-08-152-2/+2
|
* Add myself.dg2002-08-151-0/+1
|
* For some reason, the flags and td arguments in the fo_read prototyperwatson2002-08-151-1/+1
| | | | were reversed. Correct this with no functional change.
* Code formatting sync to trustedbsd_mac: don't perform an assignmentrwatson2002-08-151-2/+2
| | | | | | | | | | | in an if clause. PR: Submitted by: Reviewed by: Approved by: Obtained from: MFC after:
* Remove a case of exposing 'struct ucred' to userspace. Use a struct xucredalfred2002-08-153-9/+9
| | | | | | for LOCKD_MSG instead. Requested by: rwatson
* Remove cam_extend.c from sources to unbreak modules.alfred2002-08-151-1/+1
| | | | Missed by: kern/39809,njl
* Correct a minor whitespace nit that sneaked in with my previous commit.rwatson2002-08-151-1/+1
|
* Fix typos: s/Ths/This, s/counties/countriesblackend2002-08-151-2/+2
| | | | | | PR: docs/39060 Submitted by: Nicola Vitale <nivit@libero.it> MFC after: 3 days
* - Fix a bug that wrote one char behind the end of therobert2002-08-151-6/+3
| | | | | | | | | | | | | | supplied buffer in case the size of it was equal to the number of characters the converted address consumed. The bug occurred when converting an AF_INET address. - Remove the SPRINTF macro and use sprintf instead. - Do not do string formatting using sprintf(3) and a temporary buffer which is copied when the supplied buffer provides enough space. Instead, use snprintf(3) and the real destination buffer, thus avoid the copy. Reported by: Stefan Farfeleder <e0026813@stud3.tuwien.ac.at> (1) PR: misc/41289
* Remove cam_extend.[ch] after all references to them were removed.njl2002-08-152-145/+0
| | | | | PR: kern/39809 Approved by: gibbs
* In order to better support flexible and extensible access control,rwatson2002-08-1531-106/+145
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | make a series of modifications to the credential arguments relating to file read and write operations to cliarfy which credential is used for what: - Change fo_read() and fo_write() to accept "active_cred" instead of "cred", and change the semantics of consumers of fo_read() and fo_write() to pass the active credential of the thread requesting an operation rather than the cached file cred. The cached file cred is still available in fo_read() and fo_write() consumers via fp->f_cred. These changes largely in sys_generic.c. For each implementation of fo_read() and fo_write(), update cred usage to reflect this change and maintain current semantics: - badfo_readwrite() unchanged - kqueue_read/write() unchanged pipe_read/write() now authorize MAC using active_cred rather than td->td_ucred - soo_read/write() unchanged - vn_read/write() now authorize MAC using active_cred but VOP_READ/WRITE() with fp->f_cred Modify vn_rdwr() to accept two credential arguments instead of a single credential: active_cred and file_cred. Use active_cred for MAC authorization, and select a credential for use in VOP_READ/WRITE() based on whether file_cred is NULL or not. If file_cred is provided, authorize the VOP using that cred, otherwise the active credential, matching current semantics. Modify current vn_rdwr() consumers to pass a file_cred if used in the context of a struct file, and to always pass active_cred. When vn_rdwr() is used without a file_cred, pass NOCRED. These changes should maintain current semantics for read/write, but avoid a redundant passing of fp->f_cred, as well as making it more clear what the origin of each credential is in file descriptor read/write operations. Follow-up commits will make similar changes to other file descriptor operations, and modify the MAC framework to pass both credentials to MAC policy modules so they can implement either semantic for revocation. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* Remove usage of cam_extend.c, replace with dev->si_drv1njl2002-08-1510-244/+74
| | | | | PR: kern/39809 Approved by: gibbs
* Put each function argument on its own line to keep lines shorterrobert2002-08-151-1/+6
| | | | than 80 columns.
* Move mac.h include to match the MAC tree location. Both locationsrwatson2002-08-151-1/+1
| | | | | | | are about equally as alphabetized. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* Introduce experimental support for MAC in the AppleTalk/EtherTalk stack.rwatson2002-08-153-0/+28
| | | | | | | | | Label link layer mbufs as they are created for transmission, check mbufs before delivering them to sockets, label mbufs as they are created from sockets, and preserve mbuf labels if mbufs are copied. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* Use one line for each function argument to keep the linerobert2002-08-152-2/+11
| | | | | | | width smaller than 80 columns. Thanks to Ruslan for an explanation of multiple ways to achieve this.
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatrwatson2002-08-1514-43/+43
| | | | | | | | we can use the names _receive() and _send() for the receive() and send() checks. Rename related constants, policy implementations, etc. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* Rename mac_check_socket_receive() to mac_check_socket_deliver() so thatrwatson2002-08-159-90/+90
| | | | | | | | | | | | | we can use the names _receive() and _send() for the receive() and send() checks. Rename related constants, policy implementations, etc. PR: Submitted by: Reviewed by: Approved by: Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs MFC after:
* Oops, add -false to the operators list in the manual page for find(1), as addedjmallett2002-08-151-0/+1
| | | | | | in revision 1.17 of option.c. MFC after: 1 week
* Add support for -false instead of '!' cause it can be hard to use that injmallett2002-08-151-0/+1
| | | | | | | some shells, etc., and also for GNU compatability (lack of this broke the Mono CVS build for me). MFC after: 1 week
* Fix return case for negative namelen by jumping to normal exit processingrwatson2002-08-151-2/+4
| | | | | | rather than immediately returning, or we may not unlock necessary locks. Noticed by: Mike Heffner <mheffner@acm.vt.edu>
* Reset dupack count in header prediction.hsu2002-08-152-0/+2
| | | | | | Follow-on to rev 1.39. Reviewed by: jayanth, Thomas R Henderson <thomas.r.henderson@boeing.com>, silby, dillon
* Kernel support for a dummynet option:luigi2002-08-152-1/+2
| | | | | | | | | | | | | | | | When a pipe or queue has the "noerror" attribute, do not report drops to the caller (ip_output() and friends). (2 lines to implement it, 2 lines to document it.) This will let you simulate losses on the sender side as if they happened in the middle of the network, i.e. with no explicit feedback to the sender. manpage and ipfw2.c changes to follow shortly, together with other ipfw2 changes. Requested by: silby MFC after: 3 days
* On MAC check failure for readdir, use 'goto out' to use the common exitrwatson2002-08-151-1/+1
| | | | | | | | handling, rather than returning directly to prevent leaking of vnode reference/lock. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* o Backout rev. 1.40 and rev. 1.49.maxim2002-08-151-36/+34
| | | | | | | | o Add argv[] boudary check. PR: bin/40117 Reviewed by: silence on -audit MFC after: 2 months
* It's now sufficient to rely on a nested include of _label.h to make surerwatson2002-08-151-1/+0
| | | | | | | all structures in ip_var.h are defined, so remove include of mac.h. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* Perform a nested include of _label.h if #ifdef _KERNEL. This willrwatson2002-08-151-0/+4
| | | | | | | | satisfy consumers of ip_var.h that need a complete definition of struct ipq and don't include mac.h. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* Add mac.h -- raw_ip.c was depending on nested inclusion of mac.h whichrwatson2002-08-151-0/+1
| | | | | | | | is no longer present. Pointed out by: bmilekic Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs
* Make m_flags an int instead of a short, this is consistent with thebmilekic2002-08-152-3/+3
| | | | | | | | | type of the 'flags' argument m_getcl() was using anyway; m_extadd() needed to be changed to accept an int instead of a short for 'flags.' This makes things more consistent and also gives us more bits to use for m_flags in the future (we have almost run out). Requested by: sam (Sam Leffler)
* Fix typo.mux2002-08-151-1/+1
|
* Removed duplicated MLINKS which make(1) recently started warning about.bde2002-08-151-2/+0
|
* Include <stdlib.h> to have abort() and exit() declared.robert2002-08-151-0/+1
|
* - For compliance with IEEE Std 1003.1-2001, add the 'restrict'robert2002-08-156-23/+20
| | | | | | qualifier to function prototypes and definitions where appropriate using the '__restrict' macro. - Update the manual page.
* - Introduce the 'restrict' qualifier to function prototypes androbert2002-08-156-12/+12
| | | | | definitions to comply with IEEE Std 1003.1-2001. - Update the manual pages.
* - Add the 'restrict' qualifier to the function prototypes androbert2002-08-1514-48/+24
| | | | | | | | definitions of the functions that convert strings to numbers and are defined by IEEE Std 1003-1.2001. - Use ANSI-C function definitions for all of the functions mentioned above plus strtouq and strtoq. - Update the prototypes in the manual pages.
* Document the effect of contrib/gcc/c-lex.c,v 1.2 commit.ru2002-08-151-0/+5
|
* Merge gcc.295/cccp.c,v 1.9: don't let gcc(1) hide warnings in system headers.ru2002-08-151-0/+6
| | | | | | | | Reviewed by: bde Original 2.95 change was subject to: Approved by: obrien
* mdoc(7) police: fixed indentation in synopsis.ru2002-08-152-4/+14
| | | | Submitted by: bde
* pccbb->cbbimp2002-08-153-4/+4
|
* No longer neededimp2002-08-151-243/+0
|
OpenPOWER on IntegriCloud