summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* Reserve a major number for the mdsio driver: RS-485 driver for 8250-familyrwatson2002-11-061-0/+1
| | | | | | UARTs. Requested by: doconnor@gsoft.com.au
* Use warn() instead of perror() or fprintf() where appropriate.tjr2002-11-062-14/+8
|
* Mount devfs with nmount(2) instead of mount(2). This error was maskedjhb2002-11-051-1/+12
| | | | | because errors from mount(2) were explicitly ignored. I didn't fix that bug.
* Take sizeof() the right string for fspath's iovec. The old string was thejhb2002-11-051-1/+1
| | | | same size so this doesn't fix a bug, but it makes it cleaner.
* Fix formatting bogon.dd2002-11-051-2/+2
|
* Undelete FILES section (taken from RELENG_4), primarily to give thedd2002-11-051-0/+15
| | | | | | location of the passwd and master.passwd files. Submitted by: Andre Guibert de Bruet <andy@siliconlandmark.com>
* master.passwd, not master.passworddd2002-11-051-1/+1
| | | | Submitted by: Andre Guibert de Bruet <andy@siliconlandmark.com>
* Spotted a couple of places where the socket buffer's counters were beingkbyanc2002-11-052-0/+8
| | | | | | | manipulated directly (rather than using sballoc()/sbfree()); update them to tweak the new sb_ctl field too. Sponsored by: NTT Multimedia Communications Labs
* Fix filt_soread() to properly flag a kevent when a 0-byte datagram iskbyanc2002-11-051-1/+1
| | | | | | | received. Verified by: dougb, Manfred Antar <null@pozo.com> Sponsored by: NTT Multimedia Communications Labs
* o Introduce variable DOFS_SH to hold the path of the doFS.sh.marcel2002-11-051-12/+19
| | | | | | | | o ia64: Set DOFS_SH to point to an alternate version. o ia64: Lower BIGBOOTSIZE from 120M (LS-120) to ~5M. o ia64: Set BIGBOOTLABEL to efi so that we can check for it in the alternate doFS.sh script. If the label is not efi, we can invoke the generic doFS.sh.
* Correct merge-o: disable the right execve() variation if !MACrwatson2002-11-051-4/+4
|
* Update policy modules for changes in arguments associated with supportrwatson2002-11-056-12/+18
| | | | | for label access on the interpreter, not just the shell script. No policies currently present in the system rely on the new labels.
* Bring in two sets of changes:rwatson2002-11-0516-76/+617
| | | | | | | | | | | | | | | | | | | | | | (1) Permit userland applications to request a change of label atomic with an execve() via mac_execve(). This is required for the SEBSD port of SELinux/FLASK. Attempts to invoke this without MAC compiled in result in ENOSYS, as with all other MAC system calls. Complexity, if desired, is present in policy modules, rather than the framework. (2) Permit policies to have access to both the label of the vnode being executed as well as the interpreter if it's a shell script or related UNIX nonsense. Because we can't hold both vnode locks at the same time, cache the interpreter label. SEBSD relies on this because it supports secure transitioning via shell script executables. Other policies might want to take both labels into account during an integrity or confidentiality decision at execve()-time. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Regen.rwatson2002-11-055-7/+16
|
* Flesh out the definition of __mac_execve(): per earlier discussion,rwatson2002-11-051-1/+2
| | | | | | | | it's essentially execve() with an optional MAC label argument. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Document the current default for VersionAddendum.des2002-11-051-0/+2
|
* Accurately reflect our local changes and additions.des2002-11-051-11/+9
|
* Document the current default value for VersionAddendum.des2002-11-052-2/+2
|
* Since neither the Biba policy nor the MLS policy make use ofrwatson2002-11-052-46/+0
| | | | | | | transitioning, remove their transition entry points. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Grab 181 for HP/Compaq ProLiant advanced server management driverpeter2002-11-051-0/+1
|
* Assert that appropriate vnodes are locked in mac_execve_will_transition().rwatson2002-11-059-0/+72
| | | | | | | | Allow transitioning to be twiddled off using the process and fs enforcement flags, although at some point this should probably be its own flag. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Hook up the mac_will_execve_transition() and mac_execve_transition()rwatson2002-11-051-0/+15
| | | | | | | | | | | | | | | | | entrypoints, #ifdef MAC. The supporting logic already existed in kern_mac.c, so no change there. This permits MAC policies to cause a process label change as the result of executing a binary -- typically, as a result of executing a specially labeled binary. For example, the SEBSD port of SELinux/FLASK uses this functionality to implement TE type transitions on processes using transitioning binaries, in a manner similar to setuid. Policies not implementing a notion of transition (all the ones in the tree right now) require no changes, since the old label data is copied to the new label via mac_create_cred() even if a transition does occur. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Typo in comment: commmand -> commandkeramida2002-11-051-1/+1
| | | | Reviewed by: jhb
* Fixes to unbreak Alpha releases:ru2002-11-053-12/+10
| | | | | | | | | | | | | | | | | | | | Strip ${RD}/mfsfd/stand/etc/defaults/rc.conf. Don't copy loader.help to ${RD}/mfsfd/boot, it serves no useful purpose. Removed the now no-op commands to copy ${RD}/trees/base/dev bits to ${RD}/mfsfd/dev, now that DEVFS is the default. Removed UFS_ACL, PSEUDOFS, and COMPAT_FREEBSD4 options from the BOOTMFS kernel. Moved miibus network module to the drivers floppy. isp(4) and mpt(4) now have corresponding modules, move them to the third floppy as well. Caution! With these changes, mfsroot.flp has only 11K left, and kern.flp has even less -- 5K.
* Use more non-b0rked error reporting. Print the disk we are trying to openjmallett2002-11-051-3/+6
| | | | | | and (we have the disk error from libufs? the disk error: the errno). Requested by: bde, <many>
* Make a small (1.2M) fixit floppy image for pc98.nyan2002-11-052-2/+40
|
* Wrap function prototype declarations in __BEGIN_DECLS to do the right thingjmallett2002-11-051-0/+4
| | | | | | | | | with them in non-C cases, outside of the kernel. Include <sys/cdefs.h> for __BEGIN_DECLS/__END_DECLS as other headers seem to do in this area. Requested by: Patrick Hartling <patrick@137.org>
* Remove undefined variable.mdodd2002-11-051-1/+1
| | | | Somehow this didn't make it in the last commits.
* Wrap function prototype declarations in __BEGIN_DECLS to do the right thingjmallett2002-11-052-0/+4
| | | | | | with them in non-C cases. Requested by: Patrick Hartling <patrick@137.org>
* Style/whitespace changes.mdodd2002-11-051-82/+78
|
* Fix for GEOM.mdodd2002-11-052-56/+11
| | | | Tested on: i386
* - Convert to newbus, bus_space etc.mdodd2002-11-0512-2101/+605
| | | | | | - Move to MI space. Tested on: i386
* Use ${TARGET_ARCH} for ia64 tests.ru2002-11-051-2/+2
|
* o Remove devices that are commented out.marcel2002-11-051-10/+4
| | | | | | o Enable sc o Remove NO_GEOM. We need GEOM for GPT. o Remove NO_CPU_COPTFLAGS.
* Remove mcclock. It's an Alpha left-over.marcel2002-11-051-2/+0
|
* Create a special version for ia64. For auto-boot to work, we needmarcel2002-11-051-0/+77
| | | | | | | | | the loader in an EFI partition. This automaticly means we need the kernel there as well. In order to avoid having to worry about a geometry as much as possible, we partition the disk with GPT. With this, auto-boot works, but we have a problem mounting the MFS.
* Test for the existance of kernel ppp support by seeing if the kernel hasbrooks2002-11-051-12/+14
| | | | | | the module compiled in or loaded instead of bogusly checking for ppp0. Also if and only if the caller is actually root and the kernel does not have ppp support, try to load the ppp module before giving up.
* Fix typo. ioport_rid should be irq_rid.davidxu2002-11-053-3/+3
|
* Sync with the stock FSF 3.2 file. This adds TRANSFER_FROM_TRAMPOLINE,obrien2002-11-051-0/+26
| | | | which is needed in order for nexted C functions to work.
* Sony CXD3222 OHCI i.LINK chips needs more DELAY before starting SCLKsimokawa2002-11-051-1/+1
| | | | when no devices are connected.
* Remove reference to struct execve_args from struct imgact, whichrwatson2002-11-055-21/+46
| | | | | | | | | | | | | | | | | describes an image activation instance. Instead, make use of the existing fname structure entry, and introduce two new entries, userspace_argv, and userspace_envv. With the addition of mac_execve(), this divorces the image structure from the specifics of the execve() system call, removes a redundant pointer, etc. No semantic change from current behavior, but it means that the structure doesn't depend on syscalls.master-generated includes. There seems to be some redundant initialization of imgact entries, which I have maintained, but which could probably use some cleaning up at some point. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* License update authorized by NAI: remove clause 3.rwatson2002-11-051-7/+4
|
* Slight redesign for fitting in with -current.julian2002-11-051-27/+50
|
* Fix bogus return values from libc_r's write() routine in situations wherearchie2002-11-051-6/+21
| | | | | | | a partial-write is followed by an error. PR: 43335 MFC after: 1 week
* The symbol for Hertz is Hz.dwmalone2002-11-043-3/+3
|
* Clarify language relating to ACLs, Capabtilities, and MAC, since therwatson2002-11-041-28/+36
| | | | | implementation status of these services has changed substantially since this man page was last updated.
* Force rpcbind to start even if it wasn't enabled. This solves the ypbindfenner2002-11-041-0/+10
| | | | | | problems people were having at startup. Approved by: re
* Update license, historical information.rwatson2002-11-041-7/+8
|
* Point out that the MAC Framework is considered experimental.rwatson2002-11-041-0/+9
|
* Update ntpd to 4.1.1b. There are two new drivers and the usual bunch ofroberto2002-11-043-476/+508
| | | | | | | | fixes. See contrib/ntp/ChangeLog for details. MFC after: 1 month Prodded by: jhay Tested on: sparc64 (panther), alpha (beast) and i386.
OpenPOWER on IntegriCloud