summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* After much delay and anticipation, welcome RAIDFrame into the FreeBSDscottl2002-10-20148-7/+45834
| | | | | | world. This should be considered highly experimental. Approved-by: re
* We HAVE_STPCPY now.obrien2002-10-2016-30/+29
|
* - Lock page queue accesses in pmap_release().alc2002-10-201-1/+3
|
* Remove the special casing for IP addresses that are within the IVTmarcel2002-10-201-22/+2
| | | | | or the do_syscall() function. We have unwind directives to stop the unwinder.
* Define IVT_ENTRY and IVT_END as special versions of ENTRY and ENDmarcel2002-10-202-300/+320
| | | | | | | | | | | | for defining vectors. As a result, each vector will be a global function with unwind directives to notify the unwinder that we're in an interrupt handler. In the debugger this will show up something like: Debugger(0xe000000000a211d8, 0xe000000000748960) at Debugger+0x31 panic(0xe000000000a36858, 0xe0000000021d32d0, 0xe000000000ae42e8, ... trap(0x14, 0x100000, 0xe0000000021d32d0, 0x0, 0xa0000000002095f0, ... ivt_Data_TLB(0x14, 0x100000, 0xe0000000021d32d0) at ivt_Data_TLB+0x1f0
* Cross-reference fmtcheck(3).tjr2002-10-201-0/+1
|
* If MAC_MAX_POLICIES isn't defined, don't try to define it, just let therwatson2002-10-209-27/+9
| | | | | | | | compile fail. MAC_MAX_POLICIES should always be defined, or we have bigger problems at hand. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Sort by date.grog2002-10-201-124/+122
|
* Clarify holidays which apply only to the USAgrog2002-10-201-35/+21
| | | | | | | | | | | | | | | | | | | | | | Clarify that the USSR no longer exists, but some of the holidays are celebrated anyway. Reviewed in part by: ru Remove Jewish and most Muslim holidays. They're all wrong, since they don't apply to the Western calendar. The much more complete Jewish holidays are in calendar.judaic. The Muslim holidays need to be collected into a file, but there's not much point in having the wrong date. Remove many Fiji holidays. They change every year by Government decree, and some were duplicated as a result. Remove some duplicates. There's still a lot to be done; in particular, I think the Japanese and British holidays are very inaccurate. This file needs checking by people who know the details.
* New sections translatedgioria2002-10-191-173/+202
|
* Change the symbol lookup order to search RTLD_GLOBAL objectskan2002-10-191-12/+12
| | | | | | | | | | before referencing object's DAG. This makes it possible for C++ exceptions to work across shared libraries and brings us closer to the search order used by Solaris/Linux. Reviewed by: jdp Approved by: obrien MFC after: 1 month
* Give in on the __sF stuff. I have a better fix in mind that is futurepeter2002-10-191-1/+1
| | | | proof, but this should buy me some time for now.
* Stake a claim on 418 (__xstat), 419 (__xfstat), 420 (__xlstat)peter2002-10-194-0/+12
|
* Put back NORMAL_C_NOWERROR, it was actually used.mux2002-10-191-0/+1
| | | | Pointy hat to: mux
* umap_sync is empty and is identical to vfs_stdsync. Remove it andkan2002-10-191-16/+1
| | | | | | use generic function instead. Approved by: obrien
* style(9)kan2002-10-191-4/+7
| | | | Approved by: obrien
* Grab 416/417 real estate before I get burned while testing again.peter2002-10-194-0/+8
| | | | | | This is for the not-quite-ready signal/fpu abi stuff. It may not see the light of day, but I'm certainly not going to be able to validate it when getting shot in the foot due to syscall number conflicts.
* Whitespace fixes per style(9)kan2002-10-191-11/+10
| | | | Approved by: obrien
* New translationsgioria2002-10-199-3/+1454
|
* Add the manual page which explains how gbde works and which bits it isphk2002-10-192-0/+276
| | | | | | composed off. Sponsored by: DARPA & NAI Labs.
* Fix the path to the make.conf example file.blackend2002-10-191-1/+2
| | | | | PR: docs/44278 Submitted by: Chris Pepper <pepper@rockefeller.edu>
* Set the NOMACCHECK flag for namei()'s generated by the NFS server code.rwatson2002-10-191-0/+1
| | | | | | | We currently don't enforce protections on NFS-originated VOP's. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* New translationgioria2002-10-191-0/+891
|
* Add a new 'NOMACCHECK' flag to namei() NDINIT flags, which permits therwatson2002-10-192-7/+13
| | | | | | | | | | | | | | | | | | caller to indicate that MAC checks are not required for the lookup. Similar to IO_NOMACCHECK for vn_rdwr(), this indicates that the caller has already performed all required protections and that this is an internally generated operation. This will be used by the NFS server code, as we don't currently enforce MAC protections against requests delivered via NFS. While here, add NOCROSSMOUNT to PARAMASK; apparently this was used at one point for name lookup flag checking, but isn't any longer or it would have triggered from the NFS server code passing it to indicate that mountpoints shouldn't be crossed in lookups. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Regen from addition of execve_mac placeholder.rwatson2002-10-195-5/+5
|
* Implement the CDROMREADAUDIO ioctl.marcel2002-10-191-1/+37
|
* Add a placeholder for the execve_mac() system call, similar to SELinux'srwatson2002-10-194-0/+4
| | | | | | | | | | | | execve_secure() system call, which permits a process to pass in a label for a label change during exec. This permits SELinux to change the label for the resulting exec without a race following a manual label change on the process. Because this interface uses our general purpose MAC label abstraction, we call it execve_mac(), and wrap our port of SELinux's execve_secure() around it with appropriate sid mappings. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Drop in the MAC check for file creation as part of open().rwatson2002-10-191-3/+11
| | | | | | Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Make sure to clear the 'registered' flag for MAC policies when theyrwatson2002-10-199-0/+9
| | | | | | | | | unregister. Under some obscure (perhaps demented) circumstances, this can result in a panic if a policy is unregistered, and then someone foolishly unregisters it again. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* Hook up most of the MAC entry points relating to file/directory/noderwatson2002-10-192-4/+136
| | | | | | | | | | | | | | | | | | | creation, deletion, and rename. There are one or two other stray cases I'll catch in follow-up commits (such as unix domain socket creation); this permits MAC policy modules to limit the ability to perform these operations based on existing UNIX credential / vnode attributes, extended attributes, and security labels. In the rename case using MAC, we now have to lock the from directory and file vnodes for the MAC check, but this is done only in the MAC case, and the locks are immediately released so that the remainder of the rename implementation remains the same. Because the create check takes a vattr to know object type information, we now initialize additional fields in the VATTR passed to VOP_SYMLINK() in the MAC case. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories
* SGML-ise accentsgioria2002-10-192-79/+90
|
* Remove the _ia64_unwind_start and _ia64_unwind_end symbols. We nowmarcel2002-10-191-2/+0
| | | | find the unwind table through the ELF program headers.
* Update the unwind information when modules are loaded and unloadedmarcel2002-10-194-52/+85
| | | | | | | | by using the linker hooks. Since these hooks are called for the kernel as well, we don't need to deal with that with a special SYSINIT. The initialization implicitly performed on the first update of the unwind information is made explicit with a SYSINIT. We now don't need the _ia64_unwind_{start|end} symbols.
* Add two hooks to signal module load and module unload to MD code.marcel2002-10-199-0/+106
| | | | | | | | | | | | The primary reason for this is to allow MD code to process machine specific attributes, segments or sections in the ELF file and update machine specific state accordingly. An immediate use of this is in the ia64 port where unwind information is updated to allow debugging and tracing in/across modules. Note that this commit does not add the functionality to the ia64 port. See revision 1.9 of ia64/ia64/elf_machdep.c. Validated on: alpha, i386, ia64
* Reduce code duplication by moving the common actions inmarcel2002-10-192-116/+112
| | | | | | | | | link_elf_init(), link_elf_link_preload_finish() and link_elf_load_file() to link_elf_link_common_finish(). Since link_elf_init() did initializations as a side-effect of doing the common actions, keep the initialization in that function. Consequently, link_elf_add_gdb() is now also called to insert the very first link_map() (ie the kernel).
* Non-functional change in preparation of the next commit:marcel2002-10-192-82/+72
| | | | | | Move link_elf_add_gdb(), link_elf_delete_gdb() and link_elf_error() near the top of the file. The *_gdb() functions are moved inside the #ifdef DDB already present there.
* Complete the page queues locking needed for the page-based copy-alc2002-10-192-3/+9
| | | | | | | | | on-write (COW) mechanism. (This mechanism is used by the zero-copy TCP/IP implementation.) - Extend the scope of the page queues lock in vm_fault() to cover vm_page_cowfault(). - Modify vm_page_cowfault() to release the page queues lock if it sleeps.
* Fix a missing initialization.phk2002-10-191-0/+1
|
* Add Geom Based Disk Encryption to the tree.phk2002-10-198-0/+1836
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is an encryption module designed for to secure denial of access to the contents of "cold disks" with or without destruction activation. Major features: * Based on AES, MD5 and ARC4 algorithms. * Four cryptographic barriers: 1) Pass-phrase encrypts the master key. 2) Pass-phrase + Lock data locates master key. 3) 128 bit key derived from 2048 bit master key protects sector key. 3) 128 bit random single-use sector keys protect data payload. * Up to four different changeable pass-phrases. * Blackening feature for provable destruction of master key material. * Isotropic disk contents offers no information about sector contents. * Configurable destination sector range allows steganographic deployment. This commit adds the kernel part, separate commits will follow for the userland utility and documentation. This software was developed for the FreeBSD Project by Poul-Henning Kamp and NAI Labs, the Security Research Division of Network Associates, Inc. under DARPA/SPAWAR contract N66001-01-C-8035 ("CBOSS"), as part of the DARPA CHATS research program. Many thanks to Robert Watson, CBOSS Principal Investigator for making this possible. Sponsored by: DARPA & NAI Labs.
* Permits UFS ACLs to be used with the GENERIC kernel. Due to recentrwatson2002-10-197-0/+7
| | | | | | | | | | | | | ACL configuration changes, this shouldn't result in different code paths for file systems not explicitly configured for ACLs by the system administrator. For UFS1, administrators must still recompile their kernel to add support for extended attributes; for UFS2, it's sufficient to enable ACLs using tunefs or at mount-time (tunefs preferred for reliability reasons). UFS2, for a variety of reasons, including performance and reliability, is the preferred file system for use with ACLs. Approved by: re
* - Remove ${NORMAL_C_NOWERROR}, it is not used anymore. To buildmux2002-10-191-3/+2
| | | | | | | | | | without -Werror, we do "make WERROR=", which doesn't need this variable. - Use ${.IMPSRC} instead of $< in ${NORMAL_M} for consistency with the rest of the file. - Add ${WERROR} for the ${NORMAL_M} case. Tested on: i386, sparc64
* Fixups to get make release going again for i386:sam2002-10-191-5/+21
| | | | | | | | | | | | | | | o mount (and unmount) devfs in the chroot'd filesystem o handle umounting devfs in case of a keyboard interrupt o remove MAKEDEV from the fixit floppy so things fit again (mount_devfs was added in a separate commit) o explicitly remove mfsroot.gz and loader.conf when building the cd-rom area as otherwice cp -Rp aborts when a previous run left identical files around o increase the number of inodes on the drivers floppy; moving drivers from the kernel there (to shrink it's size) caused things to overflow o while we're increasing the driver's floppy inode config, separate out all parameters from the boot floppy Approved by: re
* o since you can't use DIOCGDINFO and DIOCGSLICEINFO on drive nodes with geom,sam2002-10-191-62/+456
| | | | | | | | | | | | | get the xml configuration for the devices and "parse" the information to get what's needed o replace #ifdef DEBUG constructs with DPRINT/DPRINTX to make the code more readable Note the xml "parser" is very very hackish and should be replaced with a real one. This one was done to be very small and special-purpose; don't think about copying it elsewhere. Approved by: phk
* hardware/common/dev.sgml : MFen 1.106gioria2002-10-197-20/+55
| | | | | | Makefile relnotes/Makefile : Bump Original revision relnotes/common/new.sgml relnotes/common/relnotes.ent : Bump Original revision relnotes/i386/Makefile share/sgml/release.dsl : Bump Original revision
* New release note: Wide character C library functions.bmah2002-10-192-2/+16
| | | | Modified release note: Use manpage entity for pst(4).
* Use manpage entity for pst(4).bmah2002-10-192-2/+2
|
* Clarify that the UFS1 extended attribute configuration steps do not applyrwatson2002-10-191-2/+2
| | | | | | | to UFS2 file systems. Submitted by: jedgar Obtained from: TrustedBSD Project
* Explicitely specify an alignment for struct pcb. While all regular pcb'stmm2002-10-191-1/+1
| | | | | are positioned and aligned by md code, dumppcb is just a static variable and requires this.
* The argument to the DIOCGMEDIASIZE ioctl() is an off_t, not an u_int.tmm2002-10-191-1/+1
| | | | Reviewed by: phk
* Since NEWCARD is the default pccard subsystem, pccard[cd] is nomatusita2002-10-192-2/+2
| | | | | | | longer needed. Note that pc98 uses OLDCARD so this is only for i386 (thanks nyan-san). OKed by: imp
OpenPOWER on IntegriCloud