freebsd-dev/sys
joerg c06cda336b Don't ever allow lowering the securelevel at all. Allowing it does
nothing good except of opening a can of (potential or real) security
holes.  People maintaining a machine with higher security requirements
need to be on the console anyway, so there's no point in not forcing
them to reboot before starting maintenance.

Agreed by:	hackers, guido
1997-06-25 07:31:47 +00:00
..
alpha Grr. Remove not-ready LDT modification fluff that also crept in with 1997-06-02 06:45:17 +00:00
amd64 Ensure that the boot CPU honours write protection in kernel mode. 1997-06-24 17:26:07 +00:00
compat/linux Make this thing actually compile. 1997-06-02 10:43:41 +00:00
compile
conf Synchronize with following changes: 1997-06-23 09:35:47 +00:00
contrib/ipfilter/netinet Import version 3.2alpha7 1997-05-25 15:50:46 +00:00
ddb Removed unused #includes. 1997-06-14 11:52:37 +00:00
dev Take the OS release string from the kernel variable `osrelease' 1997-06-24 12:43:18 +00:00
fs Block all write operations to /proc/1/* when securelevel > 0. 1997-06-21 16:09:49 +00:00
geom Removed unused #includes. 1997-06-14 13:56:12 +00:00
gnu Fix a problem with the VN device. Specifically, the VN device can 1997-06-15 17:56:53 +00:00
i386 Do The Right Thing when an iBCS2 program does getgroups(0, whatever) -- we 1997-06-25 01:01:21 +00:00
isa The syscons driver doesn't really check the presence of the display 1997-06-22 12:04:36 +00:00
isofs/cd9660 Hide the kernel-only stuff inside #ifdef KERNEL. 1997-05-07 13:23:04 +00:00
kern Don't ever allow lowering the securelevel at all. Allowing it does 1997-06-25 07:31:47 +00:00
libkern Style optimization in newly added POSIX range []] conformance, redo 1997-06-07 01:33:10 +00:00
miscfs Block all write operations to /proc/1/* when securelevel > 0. 1997-06-21 16:09:49 +00:00
modules Take the OS release string from the kernel variable `osrelease' 1997-06-24 12:43:18 +00:00
msdosfs Remove redundant check for vp == dvp (done in VFS before calling). 1997-05-17 18:32:53 +00:00
net Fix this damn mbuf with a negative m_len. It turns 1997-06-22 02:19:53 +00:00
netatalk Actually POINT to the appletalk usrreqs struct. 1997-06-02 20:07:33 +00:00
netinet Add for public examination the beginnings of the per-host cache support 1997-06-18 01:24:28 +00:00
netipx Mega IPX commit. 1997-05-10 09:58:58 +00:00
netkey This is the `netkey' kernel key-management service (the PF_KEY analogue 1996-06-14 17:22:18 +00:00
netnatm import Chuck Cranor's ATM driver 1997-05-09 08:04:59 +00:00
netns Remove unneeded member nsp_head from struct nspcb. 1997-04-14 18:26:51 +00:00
nfs Upgrade NFS to support the new vfs_bio resource/buffer management. 1997-06-16 00:23:40 +00:00
nfsclient Upgrade NFS to support the new vfs_bio resource/buffer management. 1997-06-16 00:23:40 +00:00
nfsserver Don't require superuser privileges for creating fifos. The v2 case was 1997-06-14 11:19:35 +00:00
pc98 Synchronize with following changes: 1997-06-23 09:35:47 +00:00
pccard Make this puppy compile again - add two includes. 1997-06-01 05:04:39 +00:00
pci Superceded by dc21040reg.h 1997-06-22 09:50:09 +00:00
powerpc/include Back out part 1 of the MCFH that changed $Id$ to $FreeBSD$. We are not 1997-02-22 09:48:43 +00:00
rpc Resolve conflicts. 1997-05-28 04:45:15 +00:00
scsi Add quirk "no tags" entry for HP 3724/5 hard disk drives. 1997-06-11 22:29:01 +00:00
sys Add tickadj to struct clockinfo, like NetBSD and OpenBSD. 1997-06-24 18:21:09 +00:00
tools Back out part 1 of the MCFH that changed $Id$ to $FreeBSD$. We are not 1997-02-22 09:48:43 +00:00
ufs Fix a problem with the VN device. Specifically, the VN device can 1997-06-15 17:56:53 +00:00
vm Don't try upgrading an existing exclusive lock in vm_map_user_pageable. 1997-06-23 21:51:03 +00:00
Makefile Back out part 1 of the MCFH that changed $Id$ to $FreeBSD$. We are not 1997-02-22 09:48:43 +00:00