summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* In the MAC Framework implementation, file systems have two per-mountpointrwatson2007-04-228-117/+55
| | | | | | | | | | | | | labels: the mount label (label of the mountpoint) and the fs label (label of the file system). In practice, policies appear to only ever use one, and the distinction is not helpful. Combine mnt_mntlabel and mnt_fslabel into a single mnt_label, and eliminate extra machinery required to maintain the additional label. Update policies to reflect removal of extra entry points and label. Obtained from: TrustedBSD Project Sponsored by: SPARTA, Inc.
* Remove the old software bit-banging MII interface, we started usingphk2007-04-222-334/+2
| | | | the Rhines shiftregisters in four years ago (1.60).
* Remove further cobwebs: Two layers of pointless substructures.phk2007-04-224-210/+142
|
* Remove MAC Framework access control check entry points made redundant withrwatson2007-04-2211-215/+387
| | | | | | | | | | | | | | | | | | the introduction of priv(9) and MAC Framework entry points for privilege checking/granting. These entry points exactly aligned with privileges and provided no additional security context: - mac_check_sysarch_ioperm() - mac_check_kld_unload() - mac_check_settime() - mac_check_system_nfsd() Add mpo_priv_check() implementations to Biba and LOMAC policies, which, for each privilege, determine if they can be granted to processes considered unprivileged by those two policies. These mostly, but not entirely, align with the set of privileges granted in jails. Obtained from: TrustedBSD Project
* Initialize the physical next pointer in the tx descriptors when wephk2007-04-222-14/+16
| | | | initialize instead of in the start routine.
* MFP4: Enhancements and bug-fixes to pmcstat(8):jkoshy2007-04-223-126/+224
| | | | | | | | | | | | | | | | - The '-c' option now takes a comma-separated list of CPU numbers, or a literal '*' denoting all CPUs in the system. Subsequent system PMCs are allocated on the CPUs so specified. Change the default behaviour to allocate system PMCs on all CPUs, not just CPU 0. Update the manual page and add an example of how to use the new functionality. - Attach PMCs to a (commandline) child process more reliably. This fixes a long standing bug in counting events incurred by short-lived processes.
* Don't rename fields with #define.phk2007-04-224-54/+36
| | | | | Collapse two semantically identical structs. Add missing vr_ prefix.
* Further MAC test policy cleanup and enhancement:rwatson2007-04-221-141/+478
| | | | | | | | | | | | | | | | | | | | | - Redistribute counter declarations to where they are used, rather than at the file header, so it's more clear where we do (and don't) have counters. - Add many more counters, one per policy entry point, so that many individual access controls and object life cycle events are tracked. - Perform counter increments for label destruction explicitly in entry point functions rather than in LABEL_DESTROY(). - Use LABEL_INIT() instead of SLOT_SET() directly in label init functions to be symmetric with destruction. - Align counter names more carefully with entry point names. - More constant and variable name normalization. Obtained from: TrustedBSD Project
* Run if_vr(4) through FlexeLint and clean some of the cobwebs found.phk2007-04-224-202/+118
|
* Moves the PCB features and flags from sctp_pcb.h torrs2007-04-222-53/+54
| | | | | sctp.h so that netstat can access and display these values.
* Perform overdue clean up mac_test policy:rwatson2007-04-221-719/+476
| | | | | | | | | | | | | | | | | | | | | | | | | - Add a more detailed comment describing the mac_test policy. - Add COUNTER_DECL() and COUNTER_INC() macros to declare and manage various test counters, reducing the verbosity of the test policy quite a bit. - Add LABEL_CHECK() macro to abbreviate normal validation of labels. Unlike the previous check macros, this checks for a NULL label and doesn't test NULL labels. This means that optionally passed labels will now be handled automatically, although in the case of optional credentials, NULL-checks are still required. - Add LABEL_DESTROY() macro to abbreviate the handling of label validation and tear-down. - Add LABEL_NOTFREE() macro to abbreviate check for non-free labels. - Normalize the names of counters, magic values. - Remove unused policy "enabled" flag. Obtained from: TrustedBSD Project
* - Somehow the disable fragment option got lost. We couldrrs2007-04-2212-57/+150
| | | | | | set/clear it but would not do it. Now we will. - Moved to latest socket api for extended sndrcv info struct. - Moved to support all new levels of fragment interleave.
* Now that we're MPSAFE, tell namei() to acquire Giant if necessary.des2007-04-221-2/+4
|
* Add some notes clarifying usage and a couple of known bugskris2007-04-221-1/+15
|
* Trace my mentor lineage as far back as I can determine.tmclaugh2007-04-221-0/+16
| | | | | | Not really sure how to handle committers who no longer have a ports commit bit but are still active in other repos. Maybe a new node definition? *shrug*
* Fix sorting in previous commit.cperciva2007-04-221-1/+1
| | | | | Pointed out by: brueffer Pointy hat to: cperciva
* Add myself. Edwin was my "mentor", even though he released me fromcperciva2007-04-221-0/+2
| | | | mentorship before approving a single commit.
* mezz was my co-mentortmclaugh2007-04-211-0/+2
|
* Add xride who was mentored by me and co-mentored by gargatmclaugh2007-04-211-0/+3
|
* Because there are so many more partitions on pc98 than on wintel (16imp2007-04-212-66/+82
| | | | | | | | | | | | vs 4), supress all unused partition output unless -v is specified. This makes operating on a 'typical' disk with one partition less painful. The 30 lines needed for the empty partitions no longer scroll the useful information off the screen. When the user requests a specific partition, the unused information is not suppressed. Also add the partition name to the -s output. Initialize the partition name to 'FreeBSD' when -I is specified.
* Allow MAC policy modules to control access to audit configuration systemrwatson2007-04-2111-8/+447
| | | | | | | | | | | | | | | | calls. Add MAC Framework entry points and MAC policy entry points for audit(), auditctl(), auditon(), setaudit(), aud setauid(). MAC Framework entry points are only added for audit system calls where additional argument context may be useful for policy decision-making; other audit system calls without arguments may be controlled via the priv(9) entry points. Update various policy modules to implement audit-related checks, and in some cases, other missing system-related checks. Obtained from: TrustedBSD Project Sponsored by: SPARTA, Inc.
* Teach netinet6 to use PRIV_NETINET_REUSEPORT.rwatson2007-04-211-4/+2
|
* Attempt to rationalize NFS privileges:rwatson2007-04-213-13/+12
| | | | | | | | | | | - Replace PRIV_NFSD with PRIV_NFS_DAEMON, add PRIV_NFS_LOCKD. - Use PRIV_NFS_DAEMON in the NFS server. - In the NFS client, move the privilege check from nfslockdans(), which occurs every time a write is performed on /dev/nfslock, and instead do it in nfslock_open() just once. This allows us to avoid checking the saved uid for root, and just use the effective on open. Use PRIV_NFS_LOCKD.
* Modify TLB invalidation handling.ups2007-04-212-60/+149
| | | | | Reviewed by: alc@, peter@ MFC after: 1 week
* Improve sharenfs option handling, so it is possible to give hosts list.pjd2007-04-212-16/+50
| | | | | | | | | | | | | | | | Before the change the command above: # zfs set sharenfs=freefall.freebsd.org,69.147.83.54 tank/foo was translated to: /tank/foo -freefall.freebsd.org -69.147.83.54 instead of: /tank/foo freefall.freebsd.org 69.147.83.54 This commit corrects this.
* Correct a sanity check.jkoshy2007-04-211-1/+1
|
* MFp4:pjd2007-04-2118-132/+112
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | @118370 Correct typo. @118371 Integrate changes from vendor. @118491 Show backtrace on unexpected code paths. @118494 Integrate changes from vendor. @118504 Fix sendfile(2). I had two ways of fixing it: 1. Fixing sendfile(2) itself to use VOP_GETPAGES() instead of hacking around with vn_rdwr(UIO_NOCOPY), which was suggested by ups. 2. Modify ZFS behaviour to handle this special case. Although 1 is more correct, I've choosen 2, because hack from 1 have a side-effect of beeing faster - it reads ahead MAXBSIZE bytes instead of reading page by page. This is not easy to implement with VOP_GETPAGES(), at least not for me in this very moment. Reported by: Andrey V. Elsukov <bu7cher@yandex.ru> @118525 Reorganize the code to reduce diff. @118526 This code path is expected. It is simply when file is opened with O_FSYNC flag. Reported by: kris Reported by: Michal Suszko <dry@dry.pl>
* Regression tests for recent changes to inet6_rth_* family of functionsmtm2007-04-214-0/+556
| | | | regarding RFC3542 compliance.
* Update release notes:hrs2007-04-211-2/+7
| | | | | | | - hw.pci.do_powerstate split into hw.pci.do_power_nodriver and hw.pci.do_power_resume. Pointed out by: pluknet at gmail.com
* Add a missing link: if_edsc.4 -> edsc.4 .yar2007-04-211-0/+1
| | | | Network interface manpages should have such links.
* Don't forget to bump document date after changing the content.yar2007-04-211-1/+1
|
* Change the semantics of -i (in-place editing) so that it treatsyar2007-04-215-12/+118
| | | | | | | | | | | | | | | | | each file independently from other files. The new semantics are desired in the most of practical cases, e.g.: delete lines 5-9 from each file. Keep the previous semantics of -i under a new option, -I, which uses a single continuous address space covering all files to edit in-place -- they are too cool to just drop them. Add regression tests for -i and -I. Approved by: dds Compared with: GNU sed Discussed on: -hackers MFC after: 2 weeks
* Add support for specifying a minimal size for vm.kmem_size in the loader viasepotvin2007-04-216-5/+22
| | | | | | | | vm.kmem_size_min. Useful when using ZFS to make sure that vm.kmem size will be at least 256mb (for example) without forcing a particular value via vm.kmem_size. Approved by: njl (mentor) Reviewed by: alc
* Bah, sorting alphabetically is hard.brueffer2007-04-211-1/+1
|
* Add markus.brueffer2007-04-212-0/+5
|
* Remove useless FILES section.brueffer2007-04-211-7/+0
| | | | MFC after: 3 days
* Spring cleaning: Remove worm(4) manpage, the driver was removed pre-3.0.brueffer2007-04-203-111/+2
|
* Don't reinvent vm_page_grab().pjd2007-04-201-23/+3
| | | | Reviewed by: ups
* Test sending 0 bytes.pjd2007-04-201-0/+6
|
* Fix length calculation.pjd2007-04-201-1/+1
|
* New release notes:brueffer2007-04-201-10/+31
| | | | | | | | | | | | | | | - IPLware 3.33 support for pc98 - CAM MPSAFE - ahc(4) and ahd(4) MPSAFE - pseudofs(9) and consumers MPSAFE - OpenBSM 1.0 alpha 14 - lastcomm -X flag - ftpd(8) RFC2389 and RFC2640 support Modified release notes: - ncurses was updated from version 5.2-20020615 While here, moved the lagg(4) and XFS entries to the correct places.
* Xref linsysfs(5).brueffer2007-04-201-1/+2
| | | | MFC after: 3 days
* Fix a memory leak in the uname/gname lookup cache.kientzle2007-04-201-11/+11
| | | | Thanks to: VMiklos
* o Remove unncessary TOF_SIGLEN flag from struct tcpoptandre2007-04-203-8/+9
| | | | | o Correctly set to->to_signature in tcp_dooptions() o Update comments
* Add more KASSERT's.andre2007-04-202-0/+8
|
* o Remove unused and redundant TCP option definitionsandre2007-04-203-15/+6
| | | | | o Replace usage of MAX_TCPOPTLEN with the correctly constructed and derived MAX_TCPOPTLEN
* Remove bogus check for accept queue length and associated failure handlingandre2007-04-204-35/+23
| | | | | | | | | | | | | | from the incoming SYN handling section of tcp_input(). Enforcement of the accept queue limits is done by sonewconn() after the 3WHS is completed. It is not necessary to have an earlier check before a connection request enters the SYN cache awaiting the full handshake. It rather limits the effectiveness of the syncache by preventing legit and illegit connections from entering it and having them shaken out before we hit the real limit which may have vanished by then. Change return value of syncache_add() to void. No status communication is required.
* Simplifly syncache_expand() and clarify its semantics. Zero is returnedandre2007-04-203-33/+20
| | | | | | | | | | | | | | | when the ACK is invalid and doesn't belong to any registered connection, either in syncache or through SYN cookies. True but a NULL struct socket is returned when the 3WHS completed but the socket could not be created due to insufficient resources or limits reached. For both cases an RST is sent back in tcp_input(). A logic error leading to a panic is fixed where syncache_expand() would free the mbuf on socket allocation failure but tcp_input() later supplies it to tcp_dropwithreset() to issue a RST to the peer. Reported by: kris (the panic)
* Only update TCP timestamp on SYN duplication if it is present onandre2007-04-201-1/+3
| | | | current SYN in syncache_add(). Otherwise disable timestamps.
* o Plug memory leak in syncache_add() on MAC label allocation failure.andre2007-04-201-18/+12
| | | | | | o Simplify code flow with 'done' goto label. o Remove mbuf argument from syncache_respond(). It doesn't make use of it.
OpenPOWER on IntegriCloud