summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* - Set memorylocked limit to 64Kb for default login class.zont2012-12-181-1/+3
| | | | | | | | | | | | This prevents unprivileged users to lock too much memory. - Set memorylocked limit to 64Mb for daemon login class. Some daemons such as amd(8) and watchdogd(8) calls mlockall(2) on startup, they are run from init(8) which uses daemon login class. - Set memorylocked limit to unlimited for root login class. Suggested by: avg Approved by: kib (mentor) MFC after: 1 week
* Get libcompiler-rt and libgcc building on ARM with clang.andrew2012-12-182-4/+16
| | | | | | | * Don't provide clear_cache or the __sync_* functions on ARM with clang as they are provided by clang as builtin functions. * Tell clang it is aloud to compile some libgcc code using heinous GCC extensions.
* Fix typo in comment.kevlo2012-12-181-1/+1
| | | | Reviewed by: thompsa
* More correct version of prev. fix.ache2012-12-181-1/+1
|
* Piete.Brooks at cl.cam.ac.uk reported via email a crash which wasrmacklem2012-12-1814-41/+144
| | | | | | | | | | | | caused by use of an invalid kgss_gssd_handle during an upcall to the gssd daemon when it has exited. This patch seems to avoid the crashes by holding a reference count on the kgss_gssd_handle until the upcall is done. It also adds a new mutex kgss_gssd_lock used to make manipulation of kgss_gssd_handle SMP safe. Tested by: Illias A. Marinos, Herbert Poeckl Reviewed by: jhb MFC after: 2 weeks
* Use CAM_DEV_NOT_THERE instead of CAM_SEL_TIMEOUT to report nonexistentjimharris2012-12-181-2/+4
| | | | | | | | | | | | | | LUNs for the virtual processor device. This removes lots of CAM warnings, and follows similar recent changes to tws(4) and twa(4) drivers. Also fix case where CAM_REQ_CMP was getting OR'd with CAM_DEV_NOT_THERE in the nonexistent LUN case, resulting in different CAM status (CAM_UA_TERMIO) getting reported to CAM. This issue existing previously, but was more subtle because it changed CAM_SEL_TIMEOUT to CAM_CMD_TIMEOUT. Sponsored by: Intel Reported and tested by: Willem Jan Withagen <wjw@digiware.nl> MFC after: 1 week
* Hide OBJCOPY and others in POSIX modeemaste2012-12-171-1/+1
| | | | Submitted by: Garrett Cooper
* Since we use different flags to detect tcp forwarding, and we share theae2012-12-171-1/+2
| | | | | | | same code for IPv4 and IPv6 in tcp_input, we should check both M_IP_NEXTHOP and M_IP6_NEXTHOP flags. MFC after: 3 days
* Fix:ache2012-12-171-1/+1
| | | | | line 11: Malformed conditional (${TARGET} == "arm" || ${TARGET_ARCH} == "powerpc64")
* Use M_PROTO7 flag for M_IP6_NEXTHOP, because M_PROTO2 was used forae2012-12-171-1/+1
| | | | | | | | M_AUTHIPHDR. Pointy hat to: ae Reported by: Vadim Goncharov MFC after: 3 days
* Fix warning from valgrind when a failed entry is tested.eadler2012-12-171-0/+1
| | | | | | | | PR: kern/173008 Submitted by: Zhihao Yuan <lichray@gmail.com> Reviewed by: gabor Approved by: cperciva (implicit) MFC after: 1 week
* Minor style tweaks.pjd2012-12-171-6/+5
| | | | Obtained from: WHEEL Systems
* Better variables naming in expand_name() to be more consistent with coredump().pjd2012-12-171-16/+16
| | | | Obtained from: WHEEL Systems
* libc/iconv: Fix race condition with setting FD_CLOEXEC.jilles2012-12-171-5/+1
| | | | | | | | | A fork/exec could happen between open and fcntl, leaking a file descriptor. Using O_CLOEXEC fixes this and as a side effect simplifies the code. NetBSD already had this (I checked this after making the change myself). Reviewed by: gabor
* - Fix handling of .mps filesgabor2012-12-171-8/+8
| | | | | PR: bin/161454 Submitted by: Yamaya Takashi <yamayan@kbh.biglobe.ne.jp>
* Warn about reaching various PF limits.pjd2012-12-172-0/+3
| | | | | Reviewed by: glebius Obtained from: WHEEL Systems
* - Use unsigned int for values obtained with sysctlbyname(). This fixesgabor2012-12-172-4/+9
| | | | | | | sparc64 performance problems. Submitted by: Oleg Moskalenko <oleg.moskalenko@citrix.com> Tested by: trasz
* Make sure to stop both TX and RX MACs in ale_stop_mac(). Previouslyyongari2012-12-171-1/+1
| | | | | | | it used to stop TX MAC only such that MAC reconfiguration after getting a link didn't work as expected. PR: kern/173652
* amd64 only has rela sections.rpaulo2012-12-171-12/+12
|
* Fix the gssd daemon so that it uses syslog() to reportrmacklem2012-12-171-0/+23
| | | | | | | | | an error instead of calling err() when it is daemonized, so that the error gets logged. Discussed with: rwatson, jhb Tested by: Illias A. Marinos, Herbert Poeckl MFC after: 2 weeks
* - Fix strtol() error handling.hrs2012-12-161-16/+35
| | | | | | | | - Add a range condition of given FIB number and the related error messages. - Fix free() problem. Spotted by: Artyom Mirgorodskiy Discussed with: glebius
* Use new savecore(8) option and limit number of kernel dumps that willpjd2012-12-162-1/+10
| | | | | | | | | be kept around to the 10 most recent ones. Add UPDATING entry with info how to return to the previous behaviour (no limits). Obtained from: WHEEL Systems
* With rotating kernel dumps the higest dump number is not necessarily thepjd2012-12-161-1/+29
| | | | | | | | | | | last one. To make it easier to find the last one create symlinks with 'last' suffix that will point to the files of the last coredump, eg.: info.last -> info.5 textdump.tar.last.gz -> textdump.tar.5.gz Reviewed by: avg Obtained from: WHEEL Systems
* Implement -m option to savecore(8) that allows to limit number of kernelpjd2012-12-162-21/+96
| | | | | | | dumps stored. Once the limit is reached it restarts from 0. Reviewed by: avg Obtained from: WHEEL Systems
* Make use of the fact that we changed working directory to the dump directorypjd2012-12-161-4/+3
| | | | | | earlier. Obtained from: WHEEL Systems
* Minor wording improvments to some manual pageseadler2012-12-162-3/+3
| | | | | | Approved by: bcr (mentor) Obtained from: DragonflyBSD (a5294ca835317c68c919ab43936da4f05ab6e926) MFC after: 3 days
* Sort flags properly.pjd2012-12-161-3/+3
| | | | Obtained from: WHEEL Systems
* Prefer snprintf() over sprintf().pjd2012-12-161-5/+5
| | | | Obtained from: WHEEL Systems
* Revert r237842 and switch back to SCHED_ULE. All problems I encounteredmarius2012-12-161-1/+1
| | | | | | with the latter have been fixed with r241780. MFC after: 3 days
* Restore pre-r234898 printing of boot loader and path.marius2012-12-161-3/+3
| | | | MFC after: 3 days
* Move expand_name() after process lock is released.pjd2012-12-161-7/+4
| | | | | | | | | | This fixed panic where we hold mutex (process lock) and try to obtain sleepable lock (vnode lock in expand_name()). The panic could occur when %I was used in kern.corefile. Additionally we avoid expand_name() overhead when coredumps are disabled. Obtained from: WHEEL Systems
* When growing a filesystem, don't leave unused space at the endtrasz2012-12-161-7/+10
| | | | | | if there is not enough room for a full cylinder group. Reviewed by: mckusick@
* Don't add audit record when coredumps are disabled or name cannot be expanded.pjd2012-12-161-9/+0
| | | | | Discussed with: rwatson Obtained from: WHEEL Systems
* Make the check easier to read.pjd2012-12-161-2/+1
| | | | Obtained from: WHEEL Systems
* Use 'cred' variable.pjd2012-12-161-2/+1
| | | | Obtained from: WHEEL Systems
* Fix comment to represent actual file purposegonzo2012-12-161-1/+1
| | | | Spotted by: gavin@
* sbuf_trim() cannot be used on sbuf with drain function set.pjd2012-12-151-2/+1
| | | | | | | | | | | | | | | This fixes panic when listing sysctls on INVARIANTS-enabled kernel while having wbwd loaded. This panic was not fatal, at worst one additional space was printed. Also sbuf_trim() makes some sense even if drain function is set. The drain function is called only when buffer is to be expanded. So we could still trim existing buffer before drain is called. In this case it worked just fine - the trailing space was correctly trimmed. Obtained from: WHEEL Systems MFC after: 1 week
* Ignore a warning in ubldr where clang doesn't understand the %D printfandrew2012-12-151-0/+3
| | | | specifier from libstand.
* Also remove -Werror on arm with clang as there are warnings.andrew2012-12-151-1/+1
|
* Don't define CTORS_SECTION_ASM_OP and DTORS_SECTION_ASM_OP on arm whenandrew2012-12-151-0/+2
| | | | | | | | | | | | | | | | | built with clang. When these are defined the lists are defined similar to: asm(".section .ctors"); STATIC func_ptr __CTOR_LIST__[1] = { (func_ptr) (-1) }; asm(".section .dtors"); STATIC func_ptr __DTOR_LIST__[1] = { (func_ptr) (-1) }; The problem is clang will move the two arrays out of the .ctors and .dtors sections causing these sections to contain a single null address. By not defining these macros we use the version of the code that places the arrays is their sections by using __attribute__((section(".ctors"))) and similar for .dtors. Submitted by: Daisuke Aoyama <aoyama AT peach.ne.jp>
* Recognise vfpv2 as a value for the ARM .fpu asm directive. Clang generatesandrew2012-12-151-0/+1
| | | | | | these even when building soft floating-point code Submitted by: Daisuke Aoyama <aoyama AT peach.ne.jp>
* Fix a comment in an asm block to work with compilers other than GCCandrew2012-12-151-1/+1
|
* In additional to the tailq of IPv6 addresses add the hash table.ae2012-12-153-10/+40
| | | | | | | | | | For now use 256 buckets and fnv_hash function. Use xor'ed 32-bit s6_addr32 parts of in6_addr structure as a hash key. Update in6_localip and in6_is_addr_deprecated to use hash table for fastest lookup. Sponsored by: Yandex LLC Discussed with: dwmalone, glebius, bz
* Change `iostat -Ix` to display total duration of transactions insteadtrociny2012-12-152-13/+42
| | | | | | | | | | | of average duration, and total busy time instead of %. This looks more useful when one runs `iostat -Ix` periodically to collect statistics: e.g. now it is possible to calculate busy % between two runs subtracting total busy times and dividing per time period. Average duration and % busy are still available via `iostat -x`.
* New devstat metrics for devstat_compute_statistics():trociny2012-12-153-9/+75
| | | | | | | | | DSM_TOTAL_DURATION DSM_TOTAL_DURATION_READ DSM_TOTAL_DURATION_WRITE DSM_TOTAL_DURATION_FREE DSM_TOTAL_DURATION_OTHER DSM_TOTAL_BUSY_TIME
* Update to the new and brighter pkg worldphk2012-12-151-27/+39
|
* In pfioctl, if the permission checks failed we returned with vnet contexttrociny2012-12-151-2/+2
| | | | | | | | | | set. As the checks don't require vnet context, this is fixed by setting vnet after the checks. PR: kern/160541 Submitted by: Nikos Vassiliadis (slightly different approach)
* Four .c files from OpenBSM are used, in modified form, by the kernel torwatson2012-12-156-5/+5
| | | | | | | | implement the BSM audit trail format. Rename the kernel versions of the files to match the userspace filenames so that it's easier to work out what they correspond to, and therefore ensure they are kept in-sync. Obtained from: TrustedBSD Project
* Merge OpenBSM 1.2-alpha3 from the vendor branch to 10-CURRENT; this versionrwatson2012-12-1510-35/+49
| | | | | | | | included various upstreamed patches from the FreeBSD base to make OpenBSM compile more easily with bmake, higher warning levels, clang, and several other loose ends. Obtained from: TrustedBSD Project
* Regenerate usb.confhselasky2012-12-151-1/+25
| | | | MFC after: 1 week
OpenPOWER on IntegriCloud