| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The last half year I've been working on a replacement TTY layer for the
FreeBSD kernel. The new TTY layer was designed to improve the following:
- Improved driver model:
The old TTY layer has a driver model that is not abstract enough to
make it friendly to use. A good example is the output path, where the
device drivers directly access the output buffers. This means that an
in-kernel PPP implementation must always convert network buffers into
TTY buffers.
If a PPP implementation would be built on top of the new TTY layer
(still needs a hooks layer, though), it would allow the PPP
implementation to directly hand the data to the TTY driver.
- Improved hotplugging:
With the old TTY layer, it isn't entirely safe to destroy TTY's from
the system. This implementation has a two-step destructing design,
where the driver first abandons the TTY. After all threads have left
the TTY, the TTY layer calls a routine in the driver, which can be
used to free resources (unit numbers, etc).
The pts(4) driver also implements this feature, which means
posix_openpt() will now return PTY's that are created on the fly.
- Improved performance:
One of the major improvements is the per-TTY mutex, which is expected
to improve scalability when compared to the old Giant locking.
Another change is the unbuffered copying to userspace, which is both
used on TTY device nodes and PTY masters.
Upgrading should be quite straightforward. Unlike previous versions,
existing kernel configuration files do not need to be changed, except
when they reference device drivers that are listed in UPDATING.
Obtained from: //depot/projects/mpsafetty/...
Approved by: philip (ex-mentor)
Discussed: on the lists, at BSDCan, at the DevSummit
Sponsored by: Snow B.V., the Netherlands
dcons(4) fixed by: kan
|
|
|
|
|
|
|
| |
Apple and from the OpenBSM vendor tree.
Obtained from: Apple Inc., TrustedBSD Project
MFC after: 3 days
|
|
|
|
|
|
|
| |
- Remove AU_.* hard-coded audit class constants, as udit classes are now
entirely dynamically configured using /etc/security/audit_class.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
|
| |
- Synchronized audit event list to Solaris, picking up the *at(2) system call
definitions, now required for FreeBSD and Linux. Added additional events
for *at(2) system calls not present in Solaris.
Obtained from: TrustedBSD Project
Approved by: re (hrs)
|
|
|
|
|
| |
when integrated back into Perforce. This avoids unnecessary conflicts
during the loopback of files maintained in Perforce.
|
|
|
|
| |
Add new audit event types.
|
|
|
|
|
| |
function that will be implemented shortly. This is being done for the
openbsm import.
|
|
|
|
|
|
|
| |
for the Linuxulator.
MFC after: 3 days
Obtained from: TrustedBSD Project
|
|
|
|
|
|
| |
primarily, add new event identifiers and update trigger names.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
| |
fixes.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add the argument auditing functions for argv and env.
Add kernel-specific versions of the tokenizer functions for the
arg and env represented as a char array.
Implement the AUDIT_ARGV and AUDIT_ARGE audit policy commands to
enable/disable argv/env auditing.
Call the argument auditing from the exec system calls.
Obtained from: TrustedBSD Project
Approved by: rwatson (mentor)
|
|
|
|
|
|
|
| |
1.0 alpha 9 import. See the OpenBSM import commit message for a
detailed summary of changes.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
| |
of audit_kevents.h.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
| |
audit_record.h.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
|
|
|
|
| |
- Cleanup of AUR_ data types.
- Comment fixes.
- au_close_token() definition.
- Break out of kernel vs. user space token interfaces for headers.
Note: this may briefly break the kernel build until other kernel files are
updated to match.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
| |
statistics variables.
Submitted by: Martin Fong <martin dot fong at sri dot com>
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
| |
- Add new comments.
- Move private data structures from public audit.h to audit_internal.h to
avoid exposing queue.h macros to undesiring consumers.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
|
| |
to sys/bsm:
- Correct error in definition of audit event for Linux setfsgid().
- Add audit event identifier for sysarch().
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
| |
entirely new audit event identifiers for FreeBSD, Linux, and POSIX.1b
system calls.
Obtained from: TrustedBSD Project
|
|
|
|
|
|
|
|
|
| |
couple of FreeBSD-specific modifications that may be merged out
later). These include files define the basic audit data
structures, types, and definitions use by the kernel, or shared
by the kernel and user space.
Obtained from: TrustedBSD Project, Apple Computer, Inc.
|
|
|
|
| |
the define guards in audit_kevents.h.
|
|
|
|
|
|
|
| |
in order to modify the system call table to include event identifiers.
The full audit.h will be merged at a later date.
Obtained from: TrustedBSD Project
|
|
AUE_NULL. This is a place-holder to allow other audit infrastructure
to be introduced, such as an updated syscalls.master file format,
while the license on the real audit_kevents.h is fixed.
|