| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
|
| |
it keeps asking you if you want to overwrite it or not.
Submitted by: peter
|
| |
|
|
|
|
|
| |
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
in the arguments to vn_rdwr(). Hopefully the last.
|
|
|
|
|
|
|
|
| |
ap->a_cred, and pass in ap->a_td->td_ucred as the active_cred to
soo_poll().
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
a bit optimized now.
|
| |
|
| |
|
|
|
|
|
| |
COMPAT_SVR4 is broken and usage is, until fixed, not recommended
BTW; does anybody remember why this is here?
|
|
|
|
|
|
| |
This relocation creates a function descriptor at the specified
address and is commonly used for C++ to create virtual function
tables.
|
|
|
|
| |
Submitted by: mike@
|
| |
|
| |
|
|
|
|
| |
so the conditional compile should never have been used.
|
|
|
|
| |
'device atkbdc 1'.
|
|
|
|
|
|
| |
but since pc hardware only allows one AT-style keyboard controller, this
doesn't seem particularly urgent. (I do not know what the old sunriver
remote keyboard/mouse/vga cards do, that might be an exception).
|
|
|
|
|
|
|
|
| |
little more than a place holder, because nothing actually counted the
number of 'sc' units to compare it against NSC. A bit more work here
is needed so that the scaling of SC_MAX_HISTORY_SIZE and extra_history_size
goes up when more sc units are added. But, it does not appear that we can
have more than one console yet, so it does not seem particularly urgent.
|
|
|
|
| |
add it here.
|
|
|
|
| |
Reviewed by: tmm
|
| |
|
|
|
|
|
|
| |
reimplementing it.
Reviewed by: tmm
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
it complains that it can't do it because the filesystem is readonly.
Assume that when the user has a readonly /dev that they don't care if
login can't change the permissions/flags. While this does break a few
things like msgs, we'll assume that the user setting up the read only
system knows what they are doing.
All this change does is to stop the complaint when the file system is
read only. It also adds comments as to why EROFS and EOPNOTSUPP are
ignored.
This allows one to have a read-only / w/o a /dev MFS and have a
relatively warning-free existence. /etc/rc still complains when it
can't chown/chflags/chmod things, but that's easy to ignore/tweak.
Reviewed by: roberto, phk
Sponsored by: Timing Solutions
|
| |
|
| |
|
|
|
|
| |
others.
|
| |
|
|
|
|
|
|
|
|
|
|
| |
proc locking when revoking access to mmaps. Instead, perform this
later once we've changed the process label (hold onto a reference
to the new cred so that we don't lose it when we release the
process lock if another thread changes the credential).
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
epic_common_attach().
|
| |
|
| |
|
|
|
|
|
| |
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
|
|
|
|
| |
TCP/UDP port seperated by a colon. This is for the log_in_vain facility.
Pointed out by: Edward J. M. Brocklesby
Reviewed by: ume
MFC after: 2 weeks
|
|
|
|
|
| |
Submitted by: "Vladimir B. " Grebenschikov <vova@sw.ru>
Pointy hat to: brooks
|
|
|
|
|
|
|
|
|
|
|
| |
for mac_check_vnode_{poll,read,stat,write}(). Pass in fp->f_cred
when calling these checks with a struct file available. Otherwise,
pass NOCRED. All currently MAC policies use active_cred, but
could now offer the cached credential semantic used for the base
system security model.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
PR: 41063
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
can offer new services without reserving system call numbers, or
augmented versions of existing services. User code requests a
target policy by name, and specifies the policy-specific API plus
target. This is required in particular for our port of SELinux/FLASK
to the MAC framework since it offers additional security services.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
|
|
| |
xntpd -> ntpd
single_mountd_enable -> mountd_enable
portmap -> rpcbind
|
|
|
|
| |
ASCII NUL character (0, or '\0' in C).
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
mac_check_pipe_poll(), mac_check_pipe_read(), mac_check_pipe_stat(),
and mac_check_pipe_write(). This is improves consistency with other
access control entry points and permits security modules to only
control the object methods that they are interested in, avoiding
switch statements.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
|
|
|
|
|
| |
or not we have to limit the PHY detection in the softc structure. Then
just check the flag.
Suggested by: jdp
Reviewed by: jdp
MFC after: 3 days
|
|
|
|
|
|
|
|
|
|
| |
mac_check_vnode_poll(), mac_check_vnode_read(), mac_check_vnode_write().
This improves the consistency with other existing vnode checks, and
allows policies to avoid implementing switch statements to determine
what operations they do and do not want to authorize.
Obtained from: TrustedBSD Project
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
full console history.
|
|
|
|
|
| |
2. modify screen dumpung routine, so that in addition to visible area, it
allows to grab any portion of history buffer as well.
|
|
|
|
|
| |
Reported by: Jacob Rhoden
Tested by: Jacob Rhoden, mp
|