summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* - Add a ref count to the mount structure. Sleep for up to 3 seconds injeff2006-02-063-15/+61
| | | | | | | | | | | | | | | | vfs_mount_destroy waiting for this ref to hit 0. We don't print an error if we are rebooting as the root mount always retains some refernces by init proc. - Acquire a mnt ref for every vnode allocated to a mount point. Drop this ref only once vdestroy() has been called and the mount has been freed. - No longer NULL the v_mount pointer in delmntque() so that we may release the ref after vgone() has been called. This allows us to guarantee that the mount point structure will be valid until the last vnode has lost its last ref. - Fix a few places that rely on checking v_mount to detect recycling. Sponsored by: Isilon Systems, Inc. MFC After: 1 week
* - Don't check v_mount for NULL to determine if a vnode has been recycled.jeff2006-02-064-7/+11
| | | | | | | Use the more appropriate VI_DOOMED flag instead. Sponsored by: Isilon Systems, Inc. MFC After: 1 week
* - Fix silly VI locking that is used to check a single flag. The vnodejeff2006-02-061-14/+6
| | | | | | | | | lock also protects this flag so it is not necessary. - Don't rely on v_mount to detect whether or not we've been recycled, use the more appropriate VI_DOOMED instead. Sponsored by: Isilon Systems, Inc. MFC After: 1 week
* - Add the global 'rebooting' variable that is used to detect whenjeff2006-02-062-0/+4
| | | | | | | boot() has been called. Sponsored by: Isilon Systems, Inc. MFC After: 1 week
* - Remove ifdef disabled code that doesn't have a chance of working anymore.jeff2006-02-061-48/+0
|
* Add members pl_sigmask and pl_siglist into ptrace_lwpinfo to get lwp'sdavidxu2006-02-062-0/+6
| | | | signal mask and pending signals.
* Attempt to fix DHCP address acquisition which was broken by rev. 1.133.delphij2006-02-061-3/+6
| | | | MFC After: 3 days
* 1. Eliminate compile warnings.davidxu2006-02-061-8/+60
| | | | | 2. Add command 'thread signal' to print out current thread's signal mask and pending signals.
* Regenerate.rwatson2006-02-065-27/+27
|
* Prefer AUE_FOO audit identifiers to AUE_O_FOO, which are largely leftrwatson2006-02-061-22/+22
| | | | | | | | | | | | | | | | | | | | over from the Darwin implementation. When we implement a system call as a wrapper to sysctl(), audit it as AUE_SYSCTL. This leads to greater compatibility with Solaris audit trails as sysctl() argument tokens are not the same as the ones for the originaly system calls (i.e., setdomainname()). Replace references to AUE_ events that are equivilent to AUE_NULL with AUE_NULL. In the case of process signal configuration, this is because these events do not require auditing. Move from the Darwin spelling of getsockopt() to the FreeBSD/Solaris one. Audit nmount(). Obtained from: TrustedBSD Project
* When exiting a thread, submit any pending record. Today, we don'trwatson2006-02-061-0/+4
| | | | | | | | | audit thread exit, but should that happen, this will prevent unhappiness, as the thread exit system call will never return, and hence not commit the record. Pointed out by/with: cognet Obtained from: TrustedBSD Project
* Regenerate.rwatson2006-02-063-164/+164
|
* Assign audit event identifiers to Linux i386 system calls.rwatson2006-02-061-169/+177
| | | | Obtained from: TrustedBSD Project
* Regenerate.rwatson2006-02-063-164/+164
|
* Reflect fix in Linux setfsgid() event name from OpenBSM in the alpharwatson2006-02-061-1/+1
| | | | | | linux system call table. Obtained from: TrustedBSD Project
* Merge OpenBSM 1.0 alpha 3 include file changes from contrib/openbsm/bsmrwatson2006-02-061-2/+3
| | | | | | | | | to sys/bsm: - Correct error in definition of audit event for Linux setfsgid(). - Add audit event identifier for sysarch(). Obtained from: TrustedBSD Project
* Audit the arguments (user/group IDs) for the system calls that set these IDs.wsalamon2006-02-061-0/+17
| | | | | Obtained from: TrustedBSD Project Approved by: rwatson (mentor)
* Audit the args to rfork(), and the child PID for all fork system calls.wsalamon2006-02-061-0/+2
| | | | | Obtained from: TrustedBSD Project Approved by: rwatson (mentor)
* Audit the pid being requested in wait4().wsalamon2006-02-061-0/+2
| | | | | Obtained from: TrustedBSD Project Approved by: rwatson (mentor)
* Another update for reality: "dangerously dedicated" mode is nowceri2006-02-062-50/+46
| | | | | | | achieved by hitting 'F', which is no longer undocumented. PR: bin/92533 Submitted by: Rudolf Cejka <cejkar at fit.vutbr dot cz>
* This commit was generated by cvs2svn to compensate for changes in r155364,rwatson2006-02-0632-152/+256
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Vendor branch import of OpenBSM 1.0 alpha 3:rwatson2006-02-0632-152/+256
| | | | | | | | | | | | | | | | | | | | | | | | - Man page formatting, cross reference, mlinks, and accuracy improvements. - auditd and tools now compile and run on FreeBSD/arm. - auditd will now fchown() the trail file to the audit review group, if defined at compile-time. - Added AUE_SYSARCH for FreeBSD. - Definition of AUE_SETFSGID fixed for Linux. Many thanks to: brueffer, cognet Obtained from: TrustedBSD Project
* | Correct typo in sample CVS import line: must specify full path to therwatson2006-02-061-1/+1
| | | | | | | | CVS repository on repoman.
* | Add auditing of arguments to the close() and fstat() system calls. Much morewsalamon2006-02-051-0/+10
| | | | | | | | | | | | | | argument auditing yet to come, for remaining system calls in this file. Obtained from: TrustedBSD Project Approved by: rwatson (mentor)
* | Regenerate.rwatson2006-02-053-13/+13
| |
* | Assign audit event identfiers to Xenix system calls. Note: AUE_EACCESSrwatson2006-02-051-10/+10
| | | | | | | | | | | | | | | | | | is assigned to xenix_eaccess() instead of AUE_ACCESS, as that is the intended meaning of the system call. xenix_eaccess() should be reimplemented using our native eaccess() implementation so that it works as intended. Obtained from: TrustedBSD Project
* | Correct help line: list targets, not names of files generated by targetsrwatson2006-02-051-1/+1
| | | | | | | | | | | | when no argument is provided to make. MFC after: 1 week
* | Regenerate (accidentally also committed in commit that updatedrwatson2006-02-052-2/+2
| | | | | | | | syscalls.isc).
* | Assign audit event identifiers to ibcs2 ISC system calls.rwatson2006-02-052-28/+29
| | | | | | | | Obtained from: TrustedBSD Project
* | pflog is a separate module now.mlaier2006-02-051-3/+3
| | | | | | | | | | | | Submitted by: Antoine Brodin PR: kern/88271 MFC after: 1 week
* | Backout rev 1.12. It would have been a good thing, if gcc was smart enoughcognet2006-02-051-24/+18
| | | | | | | | not to generate bad code.
* | On process exit, audit the return value of the process, and commit therwatson2006-02-051-0/+11
| | | | | | | | | | | | record immediately, as this system call never returns. Obtained from: TrustedBSD Project
* | When GC'ing a thread, assert that it has no active audit record.rwatson2006-02-053-1/+14
| | | | | | | | | | | | | | | | This should not happen, but with this assert, brueffer and I would not have spent 45 minutes trying to figure out why he wasn't seeing audit records with the audit version in CVS. Obtained from: TrustedBSD Project
* | Add some new release notes for 2006 security advisories:bmah2006-02-052-2/+76
| | | | | | | | | | | | | | | | SA-06:{01,02,03,04,05,06,07}. (SA-06:08 does not appear to apply to CURRENT.) Bump copyright date while here.
* | Assign gid 77 to audit instead of gid 73. The ports group list did notrwatson2006-02-051-1/+1
| | | | | | | | | | | | include '73', which was assigned in a ports passwd entry to ircservices. Pointed out by: ceri
* | The rpc.pcnfsd server was in the base for a little over seven minutesceri2006-02-051-1/+1
| | | | | | | | | | back in 1994. Change the example entry to point at the port, as per the entries for uucpd et al.
* | Correct a user-visible typo.ceri2006-02-052-2/+2
| |
* | Gratuitous "typo in comment" fix.ceri2006-02-052-2/+2
| |
* | Bring these files somewhat into the present.ceri2006-02-0514-149/+126
| | | | | | | | | | | | | | Perform some rewording while here. Remove register.hlp, since the code that deals with it was removed nearly 7 years ago.
* | Change group for /var/audit to audit, so that audit review can berwatson2006-02-051-0/+2
| | | | | | | | | | | | delegated to non-administrators. Obtained from: TrustedBSD Project
* | Allocate an 'audit' group, membership in which will grant the auditrwatson2006-02-051-0/+1
| | | | | | | | | | | | | | review right by virtue of read file permission on /var/audit and its contents. Obtained from: TrustedBSD Project
* | Convert NULL checks into KASSERT (and move them before the firstnetchild2006-02-052-28/+31
| | | | | | | | | | | | | | | | | | | | | | | | dereferencing) since a NULL value would be a bug here. Note: Both affected functions look very similar. A refactoring may be beneficial. CID: 483, 485 Found with: Coverity Prevent(tm) Discussed with: ariff MFC after: 5 days
* | an driver not endian clean, so don't enable on sparc64imp2006-02-051-2/+6
| |
* | forced commit: previous commit was CID 429netchild2006-02-050-0/+0
| |
* | forced commit: previous commit was CID 483netchild2006-02-050-0/+0
| |
* | A pointer was checked for NULL after dereferencing it. The check is notnetchild2006-02-051-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | needed here, except there's a bug which results in detaching the device twice. Move the NULL pointer check to the beginning of the function and convert it into a KASSERT. CID: 420 Found with: Coverity Prevent(tm) Discussed with: ariff MFC after: 5 days
* | Make pflog a seperate module. As a result pflog_packet() becomes a functionmlaier2006-02-056-3/+55
| | | | | | | | | | | | | | | | pointer that is declared in pf_ioctl.c Requested by: yar (as part of the module build reorg) MFC after: 1 week X-MFC with: yar's module reorg
* | Fix memory leak in some failure cases.netchild2006-02-051-2/+6
| | | | | | | | | | CID: 420 Found with: Coverity Prevent(tm)
* | Add AUDITVNODE[12] flags to namei(), which cause namei() to audit pathrwatson2006-02-052-1/+22
| | | | | | | | | | | | | | | | | | and vnode attribute information for looked up vnodes during the lookup operation. This will allow consumers of namei() to specify that this information be added to the in-process audit record. Submitted by: wsalamon Obtained from: TrustedBSD Project
* | shut up strict-aliasing rules warning.ume2006-02-051-1/+1
| |
OpenPOWER on IntegriCloud