summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* o Update man page to reflect the new prototypes for mac_{to,from}_text.chris2002-11-061-43/+15
| | | | | | | o Remove a (currently) no-longer-pertinent entry from errors. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Labs
* Add support for DEVICE_POLLING.simokawa2002-11-062-0/+79
| | | | | | PR: kern/44772 Submitted by: Takashi Oono <takashi@yha.att.ne.jp> MFC after: 1 week
* Minor clean up on cdb handling.simokawa2002-11-061-8/+7
|
* Kill EOL whitespaces, style(9) fix.maxim2002-11-061-13/+12
|
* Fix UID/GID options parsing.maxim2002-11-061-2/+2
| | | | | | | PR: bin/42579 Submitted by: Belousov Oleg <oleg@belousov.com> Approved by: luigi MFC after: 2 weeks
* Remove what was a temporary bogus assignment of bits of siginfo_t, as it doesjmallett2002-11-069-28/+0
| | | | | | not look like the prerequisites to fill it in properly will be in the tree for the upcoming release, but it's mostly done, so there is no need for these to stay around to remind us.
* There's no need for a locally defined usb_proc_t when we've gotjoe2002-11-061-10/+3
| | | | usb_proc_ptr that does the same thing.
* Add a MAINTAINERS entry for make(1), to the make@ alias, which anyone can usejmallett2002-11-061-0/+1
| | | | | | | | | | to run patches to make(1) by. Hopefully this will make it easier to get bugs fixed in make(1), as well as get review by people with experience working on, in, around, etc., make(1). Currently it points to two people who have demonstrated maintainership (ru@ and myself) and one person interested in helping (alane@). That list is subject to expansion and contraction.
* Move adding -DPC98 to CFLAGS from each modules to sys/modules/Makefile.inc.nyan2002-11-0621-59/+4
|
* Include "../Makefile.inc".nyan2002-11-0611-0/+32
|
* Add missing #includes of <stdio.h>. Correct a few typos in comments.tjr2002-11-063-5/+7
|
* Import the latest hints file from Internic. The most important changedougb2002-11-061-13/+13
| | | | | is that J has moved, however I'm sure you'll all be very disappointed to hear that you can no longer retrieve this file via gopher.
* Clean up a little. Don't need to include fetch.h any more, and I can'tobrien2002-11-061-7/+0
| | | | find any consumers of HOSTNAME_MAX.
* Break fileGetURL() out into its own file so that pkg_install/lib consumersobrien2002-11-065-117/+149
| | | | pkg_{create,delete} don't need to needlessly link with libfetch.
* Whitespace, style fixes.mdodd2002-11-063-438/+375
|
* Add caveats regarding the effect of PAM on PasswordAuthentication anddes2002-11-061-0/+23
| | | | | | | PermitRootLogin. PR: docs/43776 MFC after: 1 week
* Better emulate the FSF build for Sparc64.obrien2002-11-061-0/+1
|
* Don't ever disable ACPI on ia64. We cannot life without it.marcel2002-11-061-0/+2
|
* Define UMA_MD_SMALL_ALLOC so that we can allocate memory with regionmarcel2002-11-062-16/+38
| | | | | | 7 addresses for use by page tables and kernel stacks. Obtained from: peter
* - Let the PCI code try to route interrupt in -currentsimokawa2002-11-061-1/+5
| | | | - Print warning in -stable.
* Remove Realtek discriminating comments from the rl(4) manual page.trhodes2002-11-061-6/+0
| | | | | | This leaves us with 'just the facts' PR: 31271
* Hook up the userland wrapper for __mac_execve().rwatson2002-11-062-0/+43
| | | | | Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Check the FSLABEL argument and invoke the generic doFS.sh scriptmarcel2002-11-061-5/+13
| | | | | | | | | | if it's not defined as efi. This makes sure we create a proper MFS root filesystem and still allow the boot disk to be EFI based. At this time EFI auto boot works and we're properly loading the MFS root file system. Time to create drivers.conf and get this show on the road!
* Reserve a major number for the mdsio driver: RS-485 driver for 8250-familyrwatson2002-11-061-0/+1
| | | | | | UARTs. Requested by: doconnor@gsoft.com.au
* Use warn() instead of perror() or fprintf() where appropriate.tjr2002-11-062-14/+8
|
* Mount devfs with nmount(2) instead of mount(2). This error was maskedjhb2002-11-051-1/+12
| | | | | because errors from mount(2) were explicitly ignored. I didn't fix that bug.
* Take sizeof() the right string for fspath's iovec. The old string was thejhb2002-11-051-1/+1
| | | | same size so this doesn't fix a bug, but it makes it cleaner.
* Fix formatting bogon.dd2002-11-051-2/+2
|
* Undelete FILES section (taken from RELENG_4), primarily to give thedd2002-11-051-0/+15
| | | | | | location of the passwd and master.passwd files. Submitted by: Andre Guibert de Bruet <andy@siliconlandmark.com>
* master.passwd, not master.passworddd2002-11-051-1/+1
| | | | Submitted by: Andre Guibert de Bruet <andy@siliconlandmark.com>
* Spotted a couple of places where the socket buffer's counters were beingkbyanc2002-11-052-0/+8
| | | | | | | manipulated directly (rather than using sballoc()/sbfree()); update them to tweak the new sb_ctl field too. Sponsored by: NTT Multimedia Communications Labs
* Fix filt_soread() to properly flag a kevent when a 0-byte datagram iskbyanc2002-11-051-1/+1
| | | | | | | received. Verified by: dougb, Manfred Antar <null@pozo.com> Sponsored by: NTT Multimedia Communications Labs
* o Introduce variable DOFS_SH to hold the path of the doFS.sh.marcel2002-11-051-12/+19
| | | | | | | | o ia64: Set DOFS_SH to point to an alternate version. o ia64: Lower BIGBOOTSIZE from 120M (LS-120) to ~5M. o ia64: Set BIGBOOTLABEL to efi so that we can check for it in the alternate doFS.sh script. If the label is not efi, we can invoke the generic doFS.sh.
* Correct merge-o: disable the right execve() variation if !MACrwatson2002-11-051-4/+4
|
* Update policy modules for changes in arguments associated with supportrwatson2002-11-056-12/+18
| | | | | for label access on the interpreter, not just the shell script. No policies currently present in the system rely on the new labels.
* Bring in two sets of changes:rwatson2002-11-0516-76/+617
| | | | | | | | | | | | | | | | | | | | | | (1) Permit userland applications to request a change of label atomic with an execve() via mac_execve(). This is required for the SEBSD port of SELinux/FLASK. Attempts to invoke this without MAC compiled in result in ENOSYS, as with all other MAC system calls. Complexity, if desired, is present in policy modules, rather than the framework. (2) Permit policies to have access to both the label of the vnode being executed as well as the interpreter if it's a shell script or related UNIX nonsense. Because we can't hold both vnode locks at the same time, cache the interpreter label. SEBSD relies on this because it supports secure transitioning via shell script executables. Other policies might want to take both labels into account during an integrity or confidentiality decision at execve()-time. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Regen.rwatson2002-11-055-7/+16
|
* Flesh out the definition of __mac_execve(): per earlier discussion,rwatson2002-11-051-1/+2
| | | | | | | | it's essentially execve() with an optional MAC label argument. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Document the current default for VersionAddendum.des2002-11-051-0/+2
|
* Accurately reflect our local changes and additions.des2002-11-051-11/+9
|
* Document the current default value for VersionAddendum.des2002-11-052-2/+2
|
* Since neither the Biba policy nor the MLS policy make use ofrwatson2002-11-052-46/+0
| | | | | | | transitioning, remove their transition entry points. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Grab 181 for HP/Compaq ProLiant advanced server management driverpeter2002-11-051-0/+1
|
* Assert that appropriate vnodes are locked in mac_execve_will_transition().rwatson2002-11-059-0/+72
| | | | | | | | Allow transitioning to be twiddled off using the process and fs enforcement flags, although at some point this should probably be its own flag. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Hook up the mac_will_execve_transition() and mac_execve_transition()rwatson2002-11-051-0/+15
| | | | | | | | | | | | | | | | | entrypoints, #ifdef MAC. The supporting logic already existed in kern_mac.c, so no change there. This permits MAC policies to cause a process label change as the result of executing a binary -- typically, as a result of executing a specially labeled binary. For example, the SEBSD port of SELinux/FLASK uses this functionality to implement TE type transitions on processes using transitioning binaries, in a manner similar to setuid. Policies not implementing a notion of transition (all the ones in the tree right now) require no changes, since the old label data is copied to the new label via mac_create_cred() even if a transition does occur. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Typo in comment: commmand -> commandkeramida2002-11-051-1/+1
| | | | Reviewed by: jhb
* Fixes to unbreak Alpha releases:ru2002-11-053-12/+10
| | | | | | | | | | | | | | | | | | | | Strip ${RD}/mfsfd/stand/etc/defaults/rc.conf. Don't copy loader.help to ${RD}/mfsfd/boot, it serves no useful purpose. Removed the now no-op commands to copy ${RD}/trees/base/dev bits to ${RD}/mfsfd/dev, now that DEVFS is the default. Removed UFS_ACL, PSEUDOFS, and COMPAT_FREEBSD4 options from the BOOTMFS kernel. Moved miibus network module to the drivers floppy. isp(4) and mpt(4) now have corresponding modules, move them to the third floppy as well. Caution! With these changes, mfsroot.flp has only 11K left, and kern.flp has even less -- 5K.
* Use more non-b0rked error reporting. Print the disk we are trying to openjmallett2002-11-051-3/+6
| | | | | | and (we have the disk error from libufs? the disk error: the errno). Requested by: bde, <many>
* Make a small (1.2M) fixit floppy image for pc98.nyan2002-11-052-2/+40
|
* Wrap function prototype declarations in __BEGIN_DECLS to do the right thingjmallett2002-11-051-0/+4
| | | | | | | | | with them in non-C cases, outside of the kernel. Include <sys/cdefs.h> for __BEGIN_DECLS/__END_DECLS as other headers seem to do in this area. Requested by: Patrick Hartling <patrick@137.org>
OpenPOWER on IntegriCloud