From dac91f5998c1d33695196e636176f5634af60f74 Mon Sep 17 00:00:00 2001 From: kib Date: Wed, 5 Sep 2012 13:18:51 +0000 Subject: Add support for new Intel on-CPU Bull Mountain random number generator, found on IvyBridge and supposedly later CPUs, accessible with RDRAND instruction. From the Intel whitepapers and articles about Bull Mountain, it seems that we do not need to perform post-processing of RDRAND results, like AES-encryption of the data with random IV and keys, which was done for Padlock. Intel claims that sanitization is performed in hardware. Make both Padlock and Bull Mountain random generators support code covered by kernel config options, for the benefit of people who prefer minimal kernels. Also add the tunables to disable hardware generator even if detected. Reviewed by: markm, secteam (simon) Tested by: bapt, Michael Moll MFC after: 3 weeks --- sys/conf/files.amd64 | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'sys/conf/files.amd64') diff --git a/sys/conf/files.amd64 b/sys/conf/files.amd64 index 9aa61e2..374afcb 100644 --- a/sys/conf/files.amd64 +++ b/sys/conf/files.amd64 @@ -213,7 +213,8 @@ dev/lindev/lindev.c optional lindev dev/nfe/if_nfe.c optional nfe pci dev/nve/if_nve.c optional nve pci dev/nvram/nvram.c optional nvram isa -dev/random/nehemiah.c optional random +dev/random/ivy.c optional random ivy_rng +dev/random/nehemiah.c optional random padlock_rng dev/qlxgb/qla_dbg.c optional qlxgb pci dev/qlxgb/qla_hw.c optional qlxgb pci dev/qlxgb/qla_ioctl.c optional qlxgb pci -- cgit v1.1 From 426f8135ea4d2f411057f06a08d5754090f70957 Mon Sep 17 00:00:00 2001 From: dim Date: Wed, 5 Sep 2012 17:13:08 +0000 Subject: After r240104, make sure the hpt27xx driver also compiles with clang, when it is statically linked into the kernel. MFC after: 2 weeks X-MFC-With: r240104 --- sys/conf/files.amd64 | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'sys/conf/files.amd64') diff --git a/sys/conf/files.amd64 b/sys/conf/files.amd64 index 374afcb..d73fc6a 100644 --- a/sys/conf/files.amd64 +++ b/sys/conf/files.amd64 @@ -190,7 +190,8 @@ dev/fdc/fdc_acpi.c optional fdc dev/fdc/fdc_isa.c optional fdc isa dev/fdc/fdc_pccard.c optional fdc pccard dev/hpt27xx/os_bsd.c optional hpt27xx -dev/hpt27xx/osm_bsd.c optional hpt27xx +dev/hpt27xx/osm_bsd.c optional hpt27xx \ + compile-with "${NORMAL_C} ${NO_WFORMAT_SECURITY}" dev/hpt27xx/hpt27xx_config.c optional hpt27xx dev/hptmv/entry.c optional hptmv dev/hptmv/mv.c optional hptmv -- cgit v1.1 From 0a297753318f752e086ba8e53898f99eb56c0133 Mon Sep 17 00:00:00 2001 From: obrien Date: Wed, 12 Sep 2012 13:58:18 +0000 Subject: Replace a bare use of 'objcopy' with ${OBJCOPY} for easier cross compilation in environments where 'objcopy' is spelled differently. Submitted by: John Van Horne --- sys/conf/files.amd64 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/conf/files.amd64') diff --git a/sys/conf/files.amd64 b/sys/conf/files.amd64 index d73fc6a..0f71560 100644 --- a/sys/conf/files.amd64 +++ b/sys/conf/files.amd64 @@ -79,7 +79,7 @@ acpi_wakecode.o optional acpi \ clean "acpi_wakecode.o" acpi_wakecode.bin optional acpi \ dependency "acpi_wakecode.o" \ - compile-with "objcopy -S -O binary acpi_wakecode.o ${.TARGET}" \ + compile-with "${OBJCOPY} -S -O binary acpi_wakecode.o ${.TARGET}" \ no-obj no-implicit-rule before-depend \ clean "acpi_wakecode.bin" acpi_wakecode.h optional acpi \ -- cgit v1.1 From 3cc562d0f751b0068d1bd95b84a6ab32f13f0122 Mon Sep 17 00:00:00 2001 From: jimharris Date: Wed, 12 Sep 2012 19:36:54 +0000 Subject: Remove some trailing whitespace. --- sys/conf/files.amd64 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/conf/files.amd64') diff --git a/sys/conf/files.amd64 b/sys/conf/files.amd64 index 0f71560..94639f2 100644 --- a/sys/conf/files.amd64 +++ b/sys/conf/files.amd64 @@ -135,7 +135,7 @@ crypto/aesni/aesencdec_amd64.S optional aesni crypto/aesni/aeskeys_amd64.S optional aesni crypto/aesni/aesni.c optional aesni crypto/aesni/aesni_wrap.c optional aesni -crypto/blowfish/bf_enc.c optional crypto | ipsec +crypto/blowfish/bf_enc.c optional crypto | ipsec crypto/des/des_enc.c optional crypto | ipsec | netsmb crypto/via/padlock.c optional padlock crypto/via/padlock_cipher.c optional padlock -- cgit v1.1 From 7b37f0ff967b73fd8dccf725b0fe439025e584a1 Mon Sep 17 00:00:00 2001 From: kib Date: Thu, 13 Sep 2012 10:12:16 +0000 Subject: Rename the IVY_RNG option to RDRAND_RNG. Based on submission by: Arthur Mesh MFC after: 2 weeks --- sys/conf/files.amd64 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/conf/files.amd64') diff --git a/sys/conf/files.amd64 b/sys/conf/files.amd64 index 94639f2..6180341 100644 --- a/sys/conf/files.amd64 +++ b/sys/conf/files.amd64 @@ -214,7 +214,7 @@ dev/lindev/lindev.c optional lindev dev/nfe/if_nfe.c optional nfe pci dev/nve/if_nve.c optional nve pci dev/nvram/nvram.c optional nvram isa -dev/random/ivy.c optional random ivy_rng +dev/random/ivy.c optional random rdrand_rng dev/random/nehemiah.c optional random padlock_rng dev/qlxgb/qla_dbg.c optional qlxgb pci dev/qlxgb/qla_hw.c optional qlxgb pci -- cgit v1.1 From 802d10fdbc6441ecdf0551ddb456830223ea37e5 Mon Sep 17 00:00:00 2001 From: jimharris Date: Mon, 17 Sep 2012 19:26:33 +0000 Subject: Integrate nvme(4) and nvd(4) into the amd64 and i386 builds. Sponsored by: Intel --- sys/conf/files.amd64 | 10 ++++++++++ 1 file changed, 10 insertions(+) (limited to 'sys/conf/files.amd64') diff --git a/sys/conf/files.amd64 b/sys/conf/files.amd64 index 6180341..66f7df6 100644 --- a/sys/conf/files.amd64 +++ b/sys/conf/files.amd64 @@ -212,7 +212,17 @@ dev/kbd/kbd.c optional atkbd | sc | ukbd dev/lindev/full.c optional lindev dev/lindev/lindev.c optional lindev dev/nfe/if_nfe.c optional nfe pci +dev/nvd/nvd.c optional nvd nvme dev/nve/if_nve.c optional nve pci +dev/nvme/nvme.c optional nvme +dev/nvme/nvme_ctrlr.c optional nvme +dev/nvme/nvme_ctrlr_cmd.c optional nvme +dev/nvme/nvme_ns.c optional nvme +dev/nvme/nvme_ns_cmd.c optional nvme +dev/nvme/nvme_qpair.c optional nvme +dev/nvme/nvme_sysctl.c optional nvme +dev/nvme/nvme_test.c optional nvme +dev/nvme/nvme_uio.c optional nvme dev/nvram/nvram.c optional nvram isa dev/random/ivy.c optional random rdrand_rng dev/random/nehemiah.c optional random padlock_rng -- cgit v1.1 From 65d8b7120dda17d3319b5cb108caf8e3596f905f Mon Sep 17 00:00:00 2001 From: attilio Date: Thu, 18 Oct 2012 12:04:56 +0000 Subject: Disconnect non-MPSAFE SMBFS from the build in preparation for dropping GIANT from VFS. In addition, disconnect also netsmb, which is a base requirement for SMBFS. In the while SMBFS regular users can use FUSE interface and smbnetfs port to work with their SMBFS partitions. Also, there are ongoing efforts by vendor to support in-kernel smbfs, so there are good chances that it will get relinked once properly locked. This is not targeted for MFC. --- sys/conf/files.amd64 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'sys/conf/files.amd64') diff --git a/sys/conf/files.amd64 b/sys/conf/files.amd64 index 66f7df6..fec31f7 100644 --- a/sys/conf/files.amd64 +++ b/sys/conf/files.amd64 @@ -136,7 +136,7 @@ crypto/aesni/aeskeys_amd64.S optional aesni crypto/aesni/aesni.c optional aesni crypto/aesni/aesni_wrap.c optional aesni crypto/blowfish/bf_enc.c optional crypto | ipsec -crypto/des/des_enc.c optional crypto | ipsec | netsmb +crypto/des/des_enc.c optional crypto | ipsec crypto/via/padlock.c optional padlock crypto/via/padlock_cipher.c optional padlock crypto/via/padlock_hash.c optional padlock -- cgit v1.1 From 6b6752588d701605006743fd2eaf56b064747e78 Mon Sep 17 00:00:00 2001 From: imp Date: Thu, 25 Oct 2012 04:30:48 +0000 Subject: Hoist the MI compat_freebsd32 files up into files from files.*. --- sys/conf/files.amd64 | 5 ----- 1 file changed, 5 deletions(-) (limited to 'sys/conf/files.amd64') diff --git a/sys/conf/files.amd64 b/sys/conf/files.amd64 index fec31f7..b6a474e 100644 --- a/sys/conf/files.amd64 +++ b/sys/conf/files.amd64 @@ -403,14 +403,9 @@ amd64/ia32/ia32_signal.c optional compat_freebsd32 amd64/ia32/ia32_sigtramp.S optional compat_freebsd32 amd64/ia32/ia32_syscall.c optional compat_freebsd32 amd64/ia32/ia32_misc.c optional compat_freebsd32 -compat/freebsd32/freebsd32_ioctl.c optional compat_freebsd32 -compat/freebsd32/freebsd32_misc.c optional compat_freebsd32 -compat/freebsd32/freebsd32_syscalls.c optional compat_freebsd32 -compat/freebsd32/freebsd32_sysent.c optional compat_freebsd32 compat/ia32/ia32_sysvec.c optional compat_freebsd32 compat/linprocfs/linprocfs.c optional linprocfs compat/linsysfs/linsysfs.c optional linsysfs -kern/imgact_elf32.c optional compat_freebsd32 # # Linux/i386 binary support # -- cgit v1.1