summaryrefslogtreecommitdiffstats
path: root/sys/conf/files
Commit message (Collapse)AuthorAgeFilesLines
* Allow MAC policy modules to control access to audit configuration systemrwatson2007-04-211-0/+1
| | | | | | | | | | | | | | | | calls. Add MAC Framework entry points and MAC policy entry points for audit(), auditctl(), auditon(), setaudit(), aud setauid(). MAC Framework entry points are only added for audit system calls where additional argument context may be useful for policy decision-making; other audit system calls without arguments may be controlled via the priv(9) entry points. Update various policy modules to implement audit-related checks, and in some cases, other missing system-related checks. Obtained from: TrustedBSD Project Sponsored by: SPARTA, Inc.
* Rename the trunk(4) driver to lagg(4) as it is too similar to vlan trunking.thompsa2007-04-171-2/+2
| | | | | | | | | | | The name trunk is misused as the networking term trunk means carrying multiple VLANs over a single connection. The IEEE standard for link aggregation (802.3 section 3) does not talk about 'trunk' at all while it is used throughout IEEE 802.1Q in describing vlans. The lagg(4) driver provides link aggregation, failover and fault tolerance. Discussed on: current@
* Hook trunk(4) up to the build.thompsa2007-04-101-0/+2
|
* The old PacketAlias* API is not exported whenpiso2007-04-091-1/+0
| | | | libalias run in kernel land.
* Sort sctp_*.c files.andre2007-04-091-8/+8
|
* hook uipc_mvec.c into buildkmacy2007-04-081-0/+1
|
* Add the CAM 'SG' peripheral device. This device implements a subset of thescottl2007-04-071-0/+1
| | | | | | | | | | | | | | | | | | | | | | | Linux SCSI SG passthrough device API. The intention is to allow for both running of Linux apps that want to talk to /dev/sg* nodes, and to facilitate porting of apps from Linux to FreeBSD. As such, both native and linuxolator entry points and definitions are provided. Caveats: - This does not support the procfs and sysfs nodes that the Linux SG driver provides. Some Linux apps may rely on these for operation, others may only use them for informational purposes. - More ioctls need to be implemented. - Linux uses a naming scheme of "sg[a-z]" for devices, while FreeBSD uses a scheme of "sg[0-9]". Devfs aliasis (symlinks) are automatically created to link the two together. However, tools like camcontrol only see the native names. - Some operations were originally designed to return byte counts or other data directly as the syscall return value. The linuxolator doesn't appear to support this well, so this driver just punts for these cases. Now that the driver is in place, others are welcome to add missing functionality. Thanks to Roman Divacky for pushing this work along.
* Be more conservative and compile libkern/memset.c only on architectureskan2007-04-061-1/+0
| | | | than need it. These are i386, amd64 and powerpc so far.
* Add trivial MI memset function implementation. GCC mandates thekan2007-04-051-0/+1
| | | | | | existence of this function as a linkable symbol in standalone configurations and existing inline memcpy from libkern.h fails this requirement.
* Complete removal of uipc_socket2.c by moving the last few functions torwatson2007-03-261-1/+0
| | | | | | | | | | | | | other C files: - Move sbcreatecontrol() and sbtoxsockbuf() to uipc_sockbuf.c. While sbcreatecontrol() is really an mbuf allocation routine, it does its work with awareness of the layout of socket buffer memory. - Move pru_*() protocol switch stubs to uipc_socket.c where the non-stub versions of several of these functions live. Likewise, move socket state transition calls (soisconnecting(), etc) to uipc_socket.c. Moveo sodupsockaddr() and sotoxsocket().
* Introduce a new toy interface, edsc(4). It's a discard interfaceyar2007-03-261-0/+1
| | | | | | | imitating an Ethernet device, so vlan(4) and if_bridge(4) can be attached to it for testing and benchmarking purposes. Its source can be an introduction to the anatomy of a network interface driver due to its simplicity as well as to a bunch of comments in it.
* New device: icee. Generic i2c eeprom driver.imp2007-03-231-0/+1
|
* Catch up with ACPI-CA 20070320 import.jkim2007-03-221-6/+4
|
* Overhaul driver/subsystem api's:sam2007-03-211-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | o make all crypto drivers have a device_t; pseudo drivers like the s/w crypto driver synthesize one o change the api between the crypto subsystem and drivers to use kobj; cryptodev_if.m defines this api o use the fact that all crypto drivers now have a device_t to add support for specifying which of several potential devices to use when doing crypto operations o add new ioctls that allow user apps to select a specific crypto device to use (previous ioctls maintained for compatibility) o overhaul crypto subsystem code to eliminate lots of cruft and hide implementation details from drivers o bring in numerous fixes from Michale Richardson/hifn; mostly for 795x parts o add an optional mechanism for mmap'ing the hifn 795x public key h/w to user space for use by openssl (not enabled by default) o update crypto test tools to use new ioctl's and add cmd line options to specify a device to use for tests These changes will also enable much future work on improving the core crypto subsystem; including proper load balancing and interposing code between the core and drivers to dispatch small operations to the s/w driver as appropriate. These changes were instigated by the work of Michael Richardson. Reviewed by: pjd Approved by: re
* - Sysctl's move to seperate filerrs2007-03-151-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | - moved away from ifn/ifa access to sctp_ifa/sctp_ifn built and managed by the add-ip code. - cleaned up add-ip code to use the iterator - made iterator be a thread, which enables auto-asconf now. - rewrote and cleaned up source address selection (also made it use new structures). - Fixed a couple of memory leaks. - DACK now settable as to how many packets to delay as well as time. - connectx() to latest socket API, new associd arg. - Fixed issue with revoking and loosing potential to send when we inflate the flight size. We now inflate the cwnd too and deflate it later when the revoked chunk is sent or acked. - Got rid of some temp debug code - src addr selection moved to a common file (sctp_output.c) - Support for simple VRF's (we have support for multi-vfr via compile switch that is scrubbed from BSD but we won't need multi-vrf until we first get VRF :-D) - Rest of mib work for address information now done - Limit number of addresses in INIT/INIT-ACK to a #def (30). Reviewed by: gnn
* Add support for statically compiling cxgb into the kernelkmacy2007-03-141-0/+9
|
* Recognize repo-copy of kern_acl.c to vfs_acl.c, remove kern_acl.c,rwatson2007-03-051-1/+1
| | | | | | remove kern_acl.c from the build, connect vfs_acl.c to the build. Thanks to: joe
* First cut at GEOM based multipath. This is an active/passive{/passive...}mjacob2007-02-271-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | arrangement that has no intrinsic internal knowledge of whether devices it is given are truly multipath devices. As such, this is a simplistic approach, but still a useful one. The basic approach is to (at present- this will change soon) use camcontrol to find likely identical devices and and label the trailing sector of the first one. This label contains both a full UUID and a name. The name is what is presented in /dev/multipath, but the UUID is used as a true distinguishor at g_taste time, thus making sure we don't have chaos on a shared SAN where everyone names their data multipath as "Fred". The first of N identical devices (and N *may* be 1!) becomes the active path until a BIO request is failed with EIO or ENXIO. When this occurs, the active disk is ripped away and the next in a list is picked to (retry and) continue with. During g_taste events new disks that meet the match criteria for existing multipath geoms get added to the tail end of the list. Thus, this active/passive setup actually does work for devices which go away and come back, as do (now) mpt(4) and isp(4) SAN based disks. There is still a lot to do to improve this- like about 5 of the 12 recommendations I've received about it, but it's been functional enough for a while that it deserves a broader test base. Reviewed by: pjd Sponsored by: IronPort Systems MFC: 2 months
* Build ipx_ip.c only if options IPXIP is defined. No functional change.rwatson2007-02-261-1/+1
|
* Make IPv6 multicast forwarding dynamically loadable from a GENERIC kernel.bms2007-02-241-2/+2
| | | | | | It is built in the same module as IPv4 multicast forwarding, i.e. ip_mroute.ko, if and only if IPv6 support is enabled for loadable modules. Export IPv6 forwarding structs to userland netstat(1) via sysctl(9).
* Teach DDB how to print sockets, socket buffers, protosw's, and domainrwatson2007-02-151-0/+1
| | | | structures given pointers to them.
* Makefile changes to reflect moving sys/isofs/cd9660 to sys/fs/cd9660.rodrigc2007-02-111-8/+8
| | | | | Continue to install userland include files in /usr/include/isofs/cd9660 so as not to break userland applications such as libstand.
* Evolve the ctlreq interface added to geom_gpt into a genericmarcel2007-02-071-2/+4
| | | | | | | | | | | partitioning class that supports multiple schemes. Current schemes supported are APM (Apple Partition Map) and GPT. Change all GEOM_APPLE anf GEOM_GPT options into GEOM_PART_APM and GEOM_PART_GPT (resp). The ctlreq interface supports verbs to create and destroy partitioning schemes on a disk; to add, delete and modify partitions; and to commit or undo changes made.
* Mark mmc *_if.m files as standard to allow for mmc/sd being compiledimp2007-02-031-2/+2
| | | | | | as a module. Submitted by: Andrea Bittau
* Add a "-o large" mount option for msdosfs. Convert compile-time checks forrodrigc2007-01-301-1/+1
| | | | | | | | | | | | | | | | #ifdef MSDOSFS_LARGE to run-time checks to see if "-o large" was specified. Test case provided by Oliver Fromme: truncate -s 200G test.img mdconfig -a -t vnode -f test.img -u 9 newfs_msdos -s 419430400 -n 1 /dev/md9 zip250 mount -t msdosfs /dev/md9 /mnt # should fail mount -t msdosfs -o large /dev/md9 /mnt # should succeed PR: 105964 Requested by: Oliver Fromme <olli lurza secnetix de> Tested by: trhodes MFC after: 2 weeks
* Add support for serial communication with Windows CE based Handheld Computer.takawata2007-01-281-0/+1
| | | | Obtained from: NetBSD
* MFp4: add basic driver for RTL8305SC switch in PHY emulationticso2007-01-051-0/+1
|
* Build bits for ng_deflate(4) and ng_pred1(4).glebius2006-12-291-0/+2
|
* Break contents of kern_mac.c out into two files following a repo-copy:rwatson2006-12-281-1/+2
| | | | | | | | | | | mac_framework.c Contains basic MAC Framework functions, policy registration, sysinits, etc. mac_syscalls.c Contains implementations of various MAC system calls, including ENOSYS stubs when compiling without options MAC. Obtained from: TrustedBSD Project
* Connect vfs_extattr.c to build by default.rwatson2006-12-231-0/+1
|
* Hook up msk(4) to the build.yongari2006-12-131-0/+1
|
* As Bernd Walter points out, the rlphy is used for more things thanimp2006-12-101-1/+0
| | | | | | | just the intenral phy on parts supported by the rl and re drivers, the RTL8201BL for example. He also sent me a nice picture of hundreds of these chips in a tray to boulder his claim. :-) Therefore remove a comment that suggested that they were...
* Build glue for at45d flash support.imp2006-11-291-1/+1
|
* device-independent implementation of AMRR tx rate control algorithmsam2006-11-261-0/+1
| | | | | Obtained from: openbsd (w/ mods) MFC after: 1 month
* hookup ad7418 and ds1672 driverssam2006-11-191-0/+2
| | | | MFC after: 1 month
* o Add uark(4), a driver for Arkmicro Technologies ARK3116 based serialmaxim2006-11-151-0/+1
| | | | | | | | | adapters. Submitted by: Alex Rodin Obtained from: OpenBSD Reviewed by: -usb MFC after: 6 weeks
* Merge posix4/* into normal kernel hierarchy.trhodes2006-11-111-3/+3
| | | | | Reviewed by: glanced at by jhb Approved by: silence on -arch@ and -standards@
* Add a new priv(9) kernel interface for checking the availability ofrwatson2006-11-061-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | privilege for threads and credentials. Unlike the existing suser(9) interface, priv(9) exposes a named privilege identifier to the privilege checking code, allowing more complex policies regarding the granting of privilege to be expressed. Two interfaces are provided, replacing the existing suser(9) interface: suser(td) -> priv_check(td, priv) suser_cred(cred, flags) -> priv_check_cred(cred, priv, flags) A comprehensive list of currently available kernel privileges may be found in priv.h. New privileges are easily added as required, but the comments on adding privileges found in priv.h and priv(9) should be read before doing so. The new privilege interface exposed sufficient information to the privilege checking routine that it will now be possible for jail to determine whether a particular privilege is granted in the check routine, rather than relying on hints from the calling context via the SUSER_ALLOWJAIL flag. For now, the flag is maintained, but a new jail check function, prison_priv_check(), is exposed from kern_jail.c and used by the privilege check routine to determine if the privilege is permitted in jail. As a result, a centralized list of privileges permitted in jail is now present in kern_jail.c. The MAC Framework is now also able to instrument privilege checks, both to deny privileges otherwise granted (mac_priv_check()), and to grant privileges otherwise denied (mac_priv_grant()), permitting MAC Policy modules to implement privilege models, as well as control a much broader range of system behavior in order to constrain processes running with root privilege. The suser() and suser_cred() functions remain implemented, now in terms of priv_check() and the PRIV_ROOT privilege, for use during the transition and possibly continuing use by third party kernel modules that have not been updated. The PRIV_DRIVER privilege exists to allow device drivers to check privilege without adopting a more specific privilege identifier. This change does not modify the actual security policy, rather, it modifies the interface for privilege checks so changes to the security policy become more feasible. Sponsored by: nCircle Network Security, Inc. Obtained from: TrustedBSD Project Discussed on: arch@ Reviewed (at least in part) by: mlaier, jmg, pjd, bde, ceri, Alex Lyashkov <umka at sevcity dot net>, Skip Ford <skip dot ford at verizon dot net>, Antoine Brodin <antoine dot brodin at laposte dot net>
* Nitpicking.ru2006-11-031-2/+2
|
* Ok, here it is, we finally add SCTP to current. Note that thisrrs2006-11-031-2/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | work is not just mine, but it is also the works of Peter Lei and Michael Tuexen. They both are my two key other developers working on the project.. and they need ata-boy's too: **** peterlei@cisco.com tuexen@fh-muenster.de **** I did do a make sysent which updated the syscall's and sysproto.. I hope that is correct... without it you don't build since we have new syscalls for SCTP :-0 So go out and look at the NOTES, add option SCTP (make sure inet and inet6 are present too) and play with SCTP. I will see about comitting some test tools I have after I figure out where I should place them. I also have a lib (libsctp.a) that adds some of the missing socketapi functions that I need to put into lib's.. I will talk to George about this :-) There may still be some 64 bit issues in here, none of us have a 64 bit processor to test with yet.. Michael may have a MAC but thats another beast too.. If you have a mac and want to use SCTP contact Michael he maintains a web site with a loadable module with this code :-) Reviewed by: gnn Approved by: gnn
* Hook up gjournal bits to the build.pjd2006-10-311-0/+3
| | | | Sponsored by: home.pl
* Add conf file entries for acpi_aiboost drivers.takawata2006-10-301-0/+1
|
* Move "device splash" back to MI NOTES and "files", it's MI.ru2006-10-231-0/+1
|
* Move MI parts of syscons into MI "files".ru2006-10-231-0/+7
|
* Add two new functions to convert FAT filesystem format timestampsphk2006-10-221-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | to and from struct timespec, to replace the crummy conversion function which have been copy&pasted into three different filesystems already. Apart from general crummyness as indicated by code like: for (year = 1970;; year++) { inc = year & 0x03 ? 365 : 366; if (days < inc) break; days -= inc; } They also contain specialized crummyness which tries to compensate for the general crummyness by caching recent conversion results, with no regard for locking or consistency. These replacement functions are smaller, O(1) and handle the Y2.1K leap-year correctly. Ideally, these functions should live in a module of their own, which the three offending filesystems would depend on, but the size is 877 bytes of code (on i386), so that would be false economy.
* Preliminary MMC stack. This stack supports SD 1.0 cards only, butimp2006-10-201-0/+4
| | | | | | should be easily adapted to SD 2.0 (aka SDHC), SDIO, MMC and MMCplus cards. At the present time, there's only one bridge driver for the ARM9 based Atmel AT91RM9200.
* Collapse the two identical emu10k1-alsa%diked.h creation rules forimp2006-10-171-6/+1
| | | | | | | | | | snd_emu10k1 and snd_emu10kx into one line. The 'pci' dependency here adds no value, so I eliminted it (we don't have a snd.all file that might make it mildly useful, and even then it wouldn't be that useful). With the pci optional component eliminated, I could use the '|' operator. I could have also include pci on both sides of the | operator, but since it isn't a value add at all, it was better to eliminate it.
* Sort libalias files.piso2006-10-081-2/+2
| | | | | Approved by: glebius Reviewed by: glebius, ru
* Added the GEOM_CACHE option.ru2006-10-061-0/+1
| | | | Reminded by: pjd
* Second part of a little cleanup in the calendar/timezone/RTC handling.phk2006-10-021-1/+2
| | | | | | | | | | | Split subr_clock.c in two parts (by repo-copy): subr_clock.c contains generic RTC and calendaric stuff. etc. subr_rtc.c contains the newbus'ified RTC interface. Centralize the machdep.{adjkerntz,disable_rtc_set,wall_cmos_clock} sysctls and associated variables into subr_clock.c. They are not machine dependent and we have generic code that relies on being present so they are not even optional.
OpenPOWER on IntegriCloud