summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Make libldns and libssh private.des2013-09-0816-3/+19
| | | | Approved by: re (blanket)
* Add a stock libmap32.conf for amd64. The first two lines have no effectdes2013-09-082-0/+8
| | | | | | | | | | | except to document the hardcoded standard library search path for 32-bit binaries. The third line performs the equivalent substitution for the private library directory. Ironically, these entries rely on functionality which is only available in the COMPAT_32BIT version of rtld-elf. Approved by: re (blanket)
* Create a private library directory (LIBPRIVATEDIR) for libraries whichdes2013-09-085-20/+44
| | | | | | | | | | | | | | we don't want to expose but which can't or shouldn't be static. To mark a library as private, define PRIVATELIB in its Makefile. It will be installed in LIBPRIVATEDIR, which is normally /usr/lib/private (or /usr/lib32/private for 32-bit libraries on 64-bit platforms). To indicate that a program or library depends on a private library, define USEPRIVATELIB in its Makefile. The correct version of LIBPRIVATEDIR will be added to its run-time library search path. Approved by: re (blanket)
* Fix the build; Certain linkable symbols need to always be present.markm2013-09-076-19/+13
| | | | | | | | | | | | | Pass the pointy hat please. Also unblock the software (Yarrow) generator for now. This will be reverted; Yarrow needs to block until secure, not this behaviour of serving as soon as asked. Folks with specific requiremnts will be able to (can!) unblock this device with any write, and are encouraged to do so in /etc/rc.d/* scripting. ("Any" in this case could be "echo '' > /dev/random" as root).
* Fix error in r252115: space for the softc needs to be allocated. Thisnwhitehorn2013-09-071-1/+1
| | | | seemed to be working by chance on most systems.
* Tweak wording.des2013-09-071-8/+9
|
* Update to OpenPAM Nummularia.des2013-09-07215-14856/+17950
|\
| * Vendor import of OpenPAM Nummularia..des2013-09-07214-14855/+17944
| |
* | Sort properly.pjd2013-09-071-1/+1
| |
* | Adjust optional obsolete files with new MK_GNUCXXantoine2013-09-071-3/+19
| |
* | Fix panic in cap_rights_is_valid() when invalid rights are provided -pjd2013-09-071-11/+24
| | | | | | | | | | | | | | | | | | the right_to_index() function should assert correctness in this case. Improve other assertions. Reported by: pho Tested by: pho
* | This was a good idea that never went anywhere.des2013-09-071-6/+0
| |
* | Export a function to allow BCM2835's peripheral devices to enable theirloos2013-09-072-29/+75
| | | | | | | | | | | | altenate pin function (from GPIO pins) as needed. Approved by: adrian (mentor)
* | MFV (r255364): move the code around in preparation for Nummularia.des2013-09-0786-12/+16
|\ \ | |/
| * Prepare for OpenPAM Nummularia by reorganizing to match its new directorydes2013-09-0785-11/+11
| | | | | | | | structure.
| * Merge upstream r634:646: correctly parse mixed quoted / unquoted text.des2013-03-043-12/+22
| | | | | | | | See http://www.openpam.org/wiki/Errata#Configurationparsing for details.
| * OpenPAM Micrampelis was re-rolled due to a showstopper bug.des2012-05-261-1/+3
| |
* | Netlogic XLP network driver updatejchandra2013-09-0710-301/+222
| | | | | | | | | | | | | | | | | | | | Changes are to - update board and network interface detection logic - fix reading onboard CPLD in little-endian config - print NAE frequency conrrectly for Bx chips - update XAUI config to disable Rx/Tx until interface is up Submitted by: Venkatesh J V <venkatesh.vivekanandan@broadcom.com>
* | Use a better version of memcpy/bcopy for mips kernel.jchandra2013-09-073-92/+287
| | | | | | | | | | | | | | | | Use a variant of mips libc memcpy for kernel. This implementation uses 64-bit operations when compiled for 64-bit, and is significantly faster in that case. Submitted by: Tanmay Jagdale <tanmayj@broadcom.com>
* | Micro-optimize cpu_search(), allowing compiler to use more efficient inlinemav2013-09-071-2/+10
| | | | | | | | | | | | | | ffsl() implementation, when it is available, instead of homegrown iteration. On dual-E5645 amd64 system (2x6x2 cores) under heavy I/O load that reduces time spent inside cpu_search() from 19% to 13%, while IOPS increased by 5%.
* | Bring in some behind-the-scenes development, mainly By Arthur Mesh,markm2013-09-0730-429/+891
|\ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the rest by me. o Namespace cleanup; the Yarrow name is now restricted to where it really applies; this is in anticipation of being augmented or replaced by Fortuna in the future. Fortuna is mentioned, but behind #if logic, and is ignorable for now. o The harvest queue is pulled out into its own modules. o Entropy harvesting is emproved, both by being made more conservative, and by separating (a bit!) the sources. Available entropy crumbs are marginally improved. o Selection of sources is made clearer. With recent revelations, this will receive more work in the weeks and months to come. Submitted by: Arthur Mesh (partly) <arthurmesh@gmail.com>
| * \ MFCmarkm2013-09-07685-24952/+72895
| |\ \
| * | | Yarrow wants entropy estimations to be conservative; the usual ideamarkm2013-09-066-6/+6
| | | | | | | | | | | | | | | | | | | | is that if you are certain you have N bits of entropy, you declare N/2.
| * | | MFCmarkm2013-09-06349-8640/+7817
| |\ \ \
| * \ \ \ MFCmarkm2013-09-0135-1502/+3283
| |\ \ \ \
| * \ \ \ \ MFCmarkm2013-08-3125-271/+1027
| |\ \ \ \ \
| * | | | | | Remove short-lived idea; thread to harvest (eg) RDRAND enropy into the usual ↵markm2013-08-303-92/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | harvest queues. It was a nifty idea, but too heavyweight. Submitted by: Arthur Mesh <arthurmesh@gmail.com>
| * | | | | | Separate out the Software RNG entropy harvesting queue and thread into its ↵markm2013-08-304-198/+298
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | own files. Submitted by: Arthur Mesh <arthurmesh@gmail.com>
| * | | | | | MFCmarkm2013-08-30248-4713/+18651
| |\ \ \ \ \ \
| * | | | | | | Remove the short-lived namei experiment.markm2013-08-261-5/+0
| | | | | | | |
| * | | | | | | Snapshot; Do some running repairs on entropy harvesting. More needs to follow.markm2013-08-265-9/+10
| | | | | | | |
| * | | | | | | Snapshot of current work;markm2013-08-267-193/+253
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1) Clean up namespace; only use "Yarrow" where it is Yarrow-specific or close enough to the Yarrow algorithm. For the rest use a neutral name. 2) Tidy up headers; put private stuff in private places. More could be done here. 3) Streamline the hashing/encryption; no need for a 256-bit counter; 128 bits will last for long enough. There are bits of debug code lying around; these will be removed at a later stage.
| * | | | | | | MFCmarkm2013-08-2622-147/+1242
| |\ \ \ \ \ \ \
| * \ \ \ \ \ \ \ MFCmarkm2013-08-26432-975/+167855
| |\ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ MFCmarkm2013-08-2587-545/+1352
| |\ \ \ \ \ \ \ \ \
| * | | | | | | | | | 1) example (partially humorous random_adaptor, that I call "EXAMPLE")markm2013-08-2411-75/+472
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * It's not meant to be used in a real system, it's there to show how the basics of how to create interfaces for random_adaptors. Perhaps it should belong in a manual page 2) Move probe.c's functionality in to random_adaptors.c * rename random_ident_hardware() to random_adaptor_choose() 3) Introduce a new way to choose (or select) random_adaptors via tunable "rngs_want" It's a list of comma separated names of adaptors, ordered by preferences. I.e.: rngs_want="yarrow,rdrand" Such setting would cause yarrow to be preferred to rdrand. If neither of them are available (or registered), then system will default to something reasonable (currently yarrow). If yarrow is not present, then we fall back to the adaptor that's first on the list of registered adaptors. 4) Introduce a way where RNGs can play a role of entropy source. This is mostly useful for HW rngs. The way I envision this is that every HW RNG will use this functionality by default. Functionality to disable this is also present. I have an example of how to use this in random_adaptor_example.c (see modload event, and init function) 5) fix kern.random.adaptors from kern.random.adaptors: yarrowpanicblock to kern.random.adaptors: yarrow,panic,block 6) add kern.random.active_adaptor to indicate currently selected adaptor: root@freebsd04:~ # sysctl kern.random.active_adaptor kern.random.active_adaptor: yarrow Submitted by: Arthur Mesh <arthurmesh@gmail.com>
| * | | | | | | | | | MFCmarkm2013-08-24114-603/+6346
| |\ \ \ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ \ \ IFCmarkm2013-08-23928-83/+363916
| |\ \ \ \ \ \ \ \ \ \ \
| * \ \ \ \ \ \ \ \ \ \ \ MFCmarkm2013-08-23399-14225/+27855
| |\ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | IFC.markm2013-08-2236-417/+798
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | On ARM EABI double precision floating point values are stored in theandrew2013-09-076-6/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | endian the CPU is in, i.e. little-endian on most ARM cores. This allows ARMv4 and ARMv5 boards to boot with the ARM EABI.
* | | | | | | | | | | | | | Don't clear the unused SI_CHEAPCLONE flag in tap_create()/tuncreate().davide2013-09-072-4/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reviewed by: kib
* | | | | | | | | | | | | | - Use make_dev_credf(MAKEDEV_REF) instead of the race-prone make_dev()+davide2013-09-074-26/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | dev_ref() in the clone handlers that still use it. - Don't set SI_CHEAPCLONE flag, it's not used anywhere neither in devfs (for anything real) Reviewed by: kib
* | | | | | | | | | | | | | wait(2): Add some possible caveats to standards section.jilles2013-09-071-4/+18
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | Do not try to remove directories that are part of BSD.include.distantoine2013-09-071-2/+0
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | Revert parts of r245132 and r245175. We don't need to write to thehselasky2013-09-071-10/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | IMAN register to clear the pending interrupt status bits. This patch tries to solve problems seen on the MacBook Air, as reported by Johannes Lundberg <johannes@brilliantservice.co.jp> MFC after: 1 week
* | | | | | | | | | | | | | Fix !INET6 build.glebius2013-09-071-1/+1
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | Add more leftovers from gcc.glebius2013-09-071-1/+5
| | | | | | | | | | | | | |
* | | | | | | | | | | | | | Fix of r255318: move sf_buf_alloc()/sf_buf_free() out of #ifdefglebius2013-09-071-3/+4
| |_|_|_|_|_|_|_|_|_|_|/ / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ARM_USE_SMALL_ALLOC.
* | | | | | | | | | | | | Add a vtprintf. It is to tprintf what vprintf is to printf.np2013-09-072-5/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reviewed by: kib
OpenPOWER on IntegriCloud