summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* This commit was generated by cvs2svn to compensate for changes in r159248,rwatson2006-06-0547-265/+5266
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor branch import of TrustedBSD OpenBSM 1.0 alpha 6:rwatson2006-06-0547-265/+5266
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Use AU_TO_WRITE and AU_NO_TO_WRITE for the 'keep' argument to au_close(); previously we used hard-coded 0 and 1 values. - Add man page for au_open(), au_write(), au_close(), and au_close_buffer(). - Support a more complete range of data types for the arbitrary data token: add AUR_CHAR (alias to AUR_BYTE), remove AUR_LONG, add AUR_INT32 (alias to AUR_INT), add AUR_INT64. - Add au_close_token(), which allows writing a single token_t to a memory buffer. Not likely to be used much by applications, but useful for writing test tools. - Modify au_to_file() so that it accepts a timeval in user space, not just kernel -- this is not a Solaris BSM API so can be modified without causing compatibility issues. - Define a new API, au_to_header32_tm(), which adds a struct timeval argument to the ordinary au_to_header32(), which is now implemented by wrapping au_to_header32_tm() and calling gettimeofday(). #ifndef KERNEL the APIs that invoke gettimeofday(), rather than having a variable definition. Don't try to retrieve time zone information using gettimeofday(), as it's not needed, and introduces possible failure modes. - Don't perform byte order transformations on the addr/machine fields of the terminal ID that appears in the process32/subject32 tokens. These are assumed to be IP addresses, and as such, to be in network byte order. - Universally, APIs now assume that IP addresses and ports are provided in network byte order. APIs now generally provide these types in network byte order when decoding. - Beginnings of an OpenBSM test framework can now be found in openbsm/test. This code is not built or installed by default. - auditd now assigns more appropriate syslog levels to its debugging and error information. - Support for audit filters introduced: audit filters are dynamically loaded shared objects that run in the context of a new daemon, auditfilterd. The daemon reads from an audit pipe and feeds both BSM and parsed versions of records to shared objects using a module API. This will provide a framework for the writing of intrusion detection services. - New utility API, audit_submit(), added to capture common elements of audit record submission for many applications. Obtained from: TrustedBSD Project
* | Add audit.h to mkioctls inclusion list: audit pipe ioctls need accessrwatson2006-06-051-0/+1
| | | | | | | | | | | | | | to the audit types. Submitted by: wsalamon Obtained from: TrustedBSD Project
* | Include strings.h for bzero()delphij2006-06-052-0/+2
| |
* | MFamd64alc2006-06-051-5/+2
| | | | | | | | | | | | | | Eliminate unnecessary, recursive acquisitions and releases of the page queues lock by free_pv_entry() and pmap_remove_pages(). Reduce the scope of the page queues lock in pmap_remove_pages().
* | Use an option form better matching the manual.obrien2006-06-051-1/+1
| |
* | Use newly added functions to simplify the code.pjd2006-06-044-190/+97
| |
* | - Replace COPYDATA() and COPYBACK() macros with crypto_copydata() andpjd2006-06-042-27/+47
| | | | | | | | | | | | | | crypto_copyback() functions. - Add crypto_apply() function. This will allow for more code simplification.
* | Prefer hardware crypto over software crypto.pjd2006-06-041-38/+74
| | | | | | | | | | | | Before the change if a hardware crypto driver was loaded after the software crypto driver, calling crypto_newsession() with hard=0, will always choose software crypto.
* | Add regression tests for IPsec.pjd2006-06-041-0/+89
| |
* | Fix unaligned memory accesses on Alpha and possible other platforms.marcel2006-06-041-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | By using a pointer to struct dos_partition, we implicitly tell the compiler that the pointer is 4-bytes aligned, even though we know that's not the case. The fact that we only dereference the pointer to access a byte-wide field (field dp_ptyp) is not a guarantee that the compiler will in fact use a byte-wide load. On some platforms it's more efficient to use long word or quad word loads and use bit-shifting and bit-masking to get the intended byte. On those platforms an misaligned load will be the result. The fix is to use byte-wide pointer arithmetic based on sizeof() and offsetof() to avoid invalid casts which avoids that the compiler makes invalid assumptions. Backtrace provided by: wilko@ MFC after: 1 week
* | Change '#if INET' and '#if INET6' to '#ifdef INET' and '#ifdef INET6'.pjd2006-06-042-3/+3
| | | | | | | | This unbreaks compiling a kernel with FAST_IPSEC and no INET6.
* | - Fix markuppav2006-06-041-1/+1
| | | | | | | | | | | | PR: docs/98471 Submitted by: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp> MFC after: 1 day
* | Use newly added defines instead of magic values.pjd2006-06-041-16/+16
| |
* | Move COPYDATA() and COPYBACK() macros to cryptodev.h, they will be usedpjd2006-06-042-27/+27
| | | | | | | | in padlock(4) as well.
* | Use defines from cryptodev.h.pjd2006-06-042-4/+4
| |
* | - Remove HMAC_BLOCK_LEN, it serves no purpose.pjd2006-06-043-9/+12
| | | | | | | | - Use defines of used algorithm instead of HMAC_BLOCK_LEN.
* | Add a sleep lock that protects access to sequences of blockingiedowse2006-06-042-3/+43
| | | | | | | | | | | | | | | | | | axe_cmd() calls. Without this the device can get confused if multiple threads attempt these operations concurrently. The problem was easily reproducible by running "ifconfig axe0" in a loop because eventually it would conflict with axe_tick_task(). A similar approach is probably required in all USB ethernet drivers.
* | - Use define of an algorithm with the biggest block length to describepjd2006-06-041-3/+1
| | | | | | | | | | EALG_MAX_BLOCK_LEN instead of hardcoded value. - Kill an unused define.
* | Rename HMAC_BLOCK_MAXLEN to HMAC_MAX_BLOCK_LEN to be consistent withpjd2006-06-042-6/+6
| | | | | | | | EALG_MAX_BLOCK_LEN.
* | Rename AALG_MAX_RESULT_LEN to HASH_MAX_LEN to look more constent withpjd2006-06-042-4/+4
| | | | | | | | other defines.
* | - Add defines with hash length for each hash algorithm.pjd2006-06-041-4/+24
| | | | | | | | | | | | - Add defines with block length for each HMAC algorithm. - Add AES_BLOCK_LEN define which is an alias for RIJNDAEL128_BLOCK_LEN. - Add NULL_BLOCK_LEN define.
* | Add support for the CRD_F_KEY_EXPLICIT flag for both encryption andpjd2006-06-041-65/+75
| | | | | | | | | | | | authentication operations. Unfortunately I've no hardware, so I only compiled-tested it.
* | Add support for the CRD_F_KEY_EXPLICIT flag for both encryption andpjd2006-06-041-67/+79
| | | | | | | | authentication operations.
* | Don't forget to destroy the sc_freeqlock mutex on detach.pjd2006-06-041-0/+1
| |
* | Kill an unused argument.pjd2006-06-041-5/+5
| |
* | Push acquisition of pcbinfo lock out of tcp_usr_attach() intorwatson2006-06-041-6/+8
| | | | | | | | | | | | | | tcp_attach() after the call to soreserve(), as it doesn't require the global lock. Rearrange inpcb locking here also. MFC after: 1 month
* | Clean up many of the debugging messages and move them under bootverbose.njl2006-06-041-64/+74
| | | | | | | | | | | | | | | | Move the code for printing timer statistics into a test function instead of an ifdef (accessible via the debug.acpi.hpet_test tunable). Also use defines for register offsets instead of magic values. Courtesy of: slow flight to HK
* | Extend the notdef #ifdef to cover the packet copy as there is no point in ↵gnn2006-06-041-8/+4
| | | | | | | | | | | | | | doing that if we're not doing the rest of the work. Submitted by: thompsa MFC after: 1 week
* | Document more bits.pjd2006-06-031-6/+29
| | | | | | | | Reviewed by: brd
* | Note that KTR_ENTRIES must be a power of two.kris2006-06-031-10/+12
| | | | | | | | MFC after: 1 week
* | Strengthen wording; the KTR_ENTRIES value *must* be a power of two sincekris2006-06-031-1/+1
| | | | | | | | | | | | the code depends on this. MFC after: 1 week
* | Check the sectorsize of the underlying disk before trying torodrigc2006-06-031-1/+8
| | | | | | | | | | | | | | | | | | bread() the UFS superblock. Should eliminate crashes when trying to do: mount -t ufs on an audio CD. PR: kern/85893 Reported by: Russell Francis <rfrancis at ev dot net> MFC after: 1 week
* | Bah, fix fat finger in last. Invert the ~ on MTX_FLAGMASK as it'sjhb2006-06-032-4/+4
| | | | | | | | | | | | | | | | non-intuitive for the ~ to be built into the mask. All the users now explicitly ~ the mask. In addition, add MTX_UNOWNED to the mask even though it technically isn't a flag. This should unbreak mtx_owner(). Quickly spotted by: kris
* | We don't have a ISA specific shutdown routine at this time, so removeimp2006-06-031-1/+0
| | | | | | | | | | | | it. We just moved it to be pci specific, so this was causing compile problems (linking problems, so I didn't notice since I unwisely just built the module).
* | Since we turn off the interrupts, we don't need to disestablishimp2006-06-031-13/+0
| | | | | | | | our ISR.
* | In the case of reentering the debugger due to an attempt to perform ajhb2006-06-031-10/+10
| | | | | | | | | | context switch while in the debugger, reenter the debugger sooner before performing any statistics updates.
* | Simplify mtx_owner() so it only reads m->mtx_lock once.jhb2006-06-031-2/+1
| |
* | Style fix to be more like _mtx_lock_sleep(): use 'while (!foo) { ... }'jhb2006-06-031-3/+1
| | | | | | | | instead of 'for (;;) { if (foo) break; ... }'.
* | - Switch on the full 32-bit device ID to avoid collisions between thejhb2006-06-032-205/+94
| | | | | | | | | | | | | | | | | | | | | | | | | | vendor-specific device ids across vendors. - Include the revision in the dc_devs[] array instead of special casing the revid handling in dc_devtype(). - Use PCI bus accessors to read registers instead of pci_read_config() where possible. - Use an 8-bit write to update the latency timer. - Use PCIR_xxx constants and remove unused DC_xxx related to standard PCI config registers. MFC after: 1 week
* | Use PCI bus accessors rather than reading config registers directly tojhb2006-06-031-2/+3
| | | | | | | | get the subvendor device id.
* | Increase the field widths of flt (total number of page faults), fr (pagesobrien2006-06-031-5/+5
| | | | | | | | | | freed), & cs (CPU context switch rate). 'vmstat 1' output is now lined up for today's typical machines vs. a VAX. [tested my modest 1.6ghz laptop]
* | When entering a timer on a tcpcb, don't continue processing if it has beenrwatson2006-06-031-9/+14
| | | | | | | | | | | | | | | | | | | | | | | | dropped. This prevents a bug introduced during the socket/pcb refcounting work from occuring, in which occasionally the retransmit timer may fire after a connection has been reset, resulting in the resulting R|A TCP packet having a source port of 0, as the port reservation has been released. While here, fixing up some RUNLOCK->WUNLOCK bugs. MFC after: 1 month
* | Acquire udbinfo lock after call to soreserve() rather than before, as itrwatson2006-06-031-4/+2
| | | | | | | | | | | | | | is not required. This simplifies error-handling, and reduces the time that this lock is held. MFC after: 1 month
* | Move shutdown, and pci specific methods into pccbb_pci.c. Many moreimp2006-06-033-74/+67
| | | | | | | | are needed still.
* | The interrupt routine is pci specific. Move it into pccbb_pci.c.imp2006-06-032-70/+71
| |
* | Fix a couple printf's to be properly terminated.imp2006-06-031-3/+3
| | | | | | | | Use a better name for the cbb thread.
* | Succeed for writing bus value... nobody that calls must care :-(imp2006-06-031-1/+1
| |
* | Back out previous two commits, this caused some problems in the namespacecsjp2006-06-031-7/+2
| | | | | | | | | | | | | | | | resulting in some build failures. Instead, to fix the problem of bpf not being present, check the pointer before dereferencing it. This is a temporary bandaid until we can decide on how we want to handle the bpf code not being present. This will be fixed shortly.
* | Temporarily include files so that our macro checks do something useful.csjp2006-06-031-0/+3
| |
OpenPOWER on IntegriCloud