freebsd-dev/sys
Jamie Gritton 2b0d6f815e Remove a LOR, where the the sleepable allprison_lock was being obtained
in prison_equal_ip4/6 while an inp mutex was held.  Locking allprison_lock
can be avoided by making a restriction on the IP addresses associated with
jails:

Don't allow the "ip4" and "ip6" parameters to be changed after a jail is
created.  Setting the "ip4.addr" and "ip6.addr" parameters is allowed,
but only if the jail was already created with either ip4/6=new or
ip4/6=disable.  With this restriction, the prison flags in question
(PR_IP4_USER and PR_IP6_USER) become read-only and can be checked
without locking.

This also allows the simplification of a messy code path that was needed
to handle an existing prison gaining an IP address list.

PR:		kern/136899
Reported by:	Dirk Meyer
Approved by:	re (kib), bz (mentor)
2009-07-30 14:28:56 +00:00
..
amd64 Refine the MacBook hack to only match early models that have Intel ICH. 2009-07-27 13:51:55 +00:00
arm Add a new type of VM object: OBJT_SG. An OBJT_SG object is very similar to 2009-07-24 13:50:29 +00:00
boot Update epair(4) to the new netisr implementation and polish 2009-07-26 12:20:07 +00:00
bsm Import OpenBSM 1.1p1 from vendor branch to 8-CURRENT, populating 2009-07-17 14:02:20 +00:00
cam Fix copy-paste bug. Use regular non-polled mode for executing FLUSHCACHE 2009-07-17 21:48:08 +00:00
cddl We don't support ephemeral IDs in FreeBSD and without this fix ZFS can 2009-07-27 14:52:34 +00:00
compat Fix the freebsd32 versions of semsys(), shmsys(), and msgsys() to use the 2009-07-27 16:03:04 +00:00
conf Update epair(4) to the new netisr implementation and polish 2009-07-26 12:20:07 +00:00
contrib Build on Jeff Roberson's linker-set based dynamic per-CPU allocator 2009-07-14 22:48:30 +00:00
crypto
ddb Build on Jeff Roberson's linker-set based dynamic per-CPU allocator 2009-07-14 22:48:30 +00:00
dev Missed this file for r195963: 2009-07-30 00:57:54 +00:00
fs Fix the experimental nfs client so that it only calls ncl_vinvalbuf() 2009-07-29 14:50:31 +00:00
gdb
geom - Fix the issue with read access count modification on RAID-5 plexes properly. 2009-07-18 11:12:48 +00:00
gnu
i386 Fix XEN build breakage, by implementing pmap_invalidate_cache_range() 2009-07-29 19:38:33 +00:00
ia64 Add a new type of VM object: OBJT_SG. An OBJT_SG object is very similar to 2009-07-24 13:50:29 +00:00
isa
kern Remove a LOR, where the the sleepable allprison_lock was being obtained 2009-07-30 14:28:56 +00:00
kgssapi
libkern
mips Add a new type of VM object: OBJT_SG. An OBJT_SG object is very similar to 2009-07-24 13:50:29 +00:00
modules Update epair(4) to the new netisr implementation and polish 2009-07-26 12:20:07 +00:00
net Reorder and recomment vnet.c and vnet.h on the basis that they are no longer 2009-07-30 12:41:19 +00:00
net80211 Mesh fixes, namely: 2009-07-27 14:22:09 +00:00
netatalk
netgraph Introduce and use a sysinit-based initialization scheme for virtual 2009-07-23 20:46:49 +00:00
netinet Startup the vnet part of initialization a bit after the global part. 2009-07-28 19:58:07 +00:00
netinet6 This patch does the following: 2009-07-27 17:08:06 +00:00
netipsec Introduce and use a sysinit-based initialization scheme for virtual 2009-07-23 20:46:49 +00:00
netipx
netnatm
netncp
netsmb
nfs Revert rev 192323 (nfs_common.c only): 2009-07-12 03:53:52 +00:00
nfsclient Patch the regular nfs client in a manner analagous to 2009-07-17 19:38:07 +00:00
nfsserver
nlm
opencrypto
pc98 Implementation of the upcoming Wireless Mesh standard, 802.11s, on the 2009-07-11 15:02:45 +00:00
pci Adding hardware ID for RTL810x PCIe found on HP Pavilion DV2-1022AX. 2009-07-14 04:35:13 +00:00
powerpc Add a new type of VM object: OBJT_SG. An OBJT_SG object is very similar to 2009-07-24 13:50:29 +00:00
rpc Use PBDRY flag for msleep(9) in NFS and NLM when sleeping thread owns 2009-07-14 22:54:29 +00:00
security Eliminate ARG_UPATH[12] arguments to AUDIT_ARG_UPATH() and instead 2009-07-29 07:44:43 +00:00
sparc64 Add a new type of VM object: OBJT_SG. An OBJT_SG object is very similar to 2009-07-24 13:50:29 +00:00
sun4v Correct an error of omission in r195649 ("Add support to the virtual memory 2009-07-13 18:11:59 +00:00
sys Add two new privileges for use by OpenAFS, which will be supported for 2009-07-30 08:41:06 +00:00
tools
ufs
vm Remove debugging that crept in with previous commit. 2009-07-24 15:06:49 +00:00
xdr
xen Catch up with r195249, "Improve the handling of cpuset with interrupts." 2009-07-21 16:54:11 +00:00
Makefile