d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
a9d2f8d84f
freebsd-dev/sys/netgraph
History
Robert Watson a9d2f8d84f Second-to-last commit implementing Capsicum capabilities in the FreeBSD 
kernel for FreeBSD 9.0:

Add a new capability mask argument to fget(9) and friends, allowing system
call code to declare what capabilities are required when an integer file
descriptor is converted into an in-kernel struct file *.  With options
CAPABILITIES compiled into the kernel, this enforces capability
protection; without, this change is effectively a no-op.

Some cases require special handling, such as mmap(2), which must preserve
information about the maximum rights at the time of mapping in the memory
map so that they can later be enforced in mprotect(2) -- this is done by
narrowing the rights in the existing max_protection field used for similar
purposes with file permissions.

In namei(9), we assert that the code is not reached from within capability
mode, as we're not yet ready to enforce namespace capabilities there.
This will follow in a later commit.

Update two capability names: CAP_EVENT and CAP_KEVENT become
CAP_POST_KEVENT and CAP_POLL_KEVENT to more accurately indicate what they
represent.

Approved by:	re (bz)
Submitted by:	jonathan
Sponsored by:	Google Inc
2011-08-11 12:30:23 +00:00
..
atm Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
bluetooth - Move all USB device ID arrays into so-called sections, 2011-06-24 02:30:02 +00:00
netflow Add missing unlocks. 2011-07-06 09:43:25 +00:00
netgraph.h Fix build with NETGRAPH_DEBUG. 2011-07-04 20:50:09 +00:00
ng_async.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_async.h
ng_atmllc.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_atmllc.h
ng_base.c - Use refcount(9) API to manage node and hook refcounting. 2011-07-04 07:03:44 +00:00
ng_bpf.c
ng_bpf.h
ng_bridge.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_bridge.h Add an optional "persistent" flag to ng_hub and ng_bridge, which if set, 2010-05-05 22:06:05 +00:00
ng_car.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_car.h
ng_cisco.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_cisco.h
ng_deflate.c Remove alignment constraints. 2010-04-01 16:18:16 +00:00
ng_deflate.h
ng_device.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_device.h
ng_echo.c
ng_echo.h
ng_eiface.c Provide fake link status information in an attempt to let ng_eiface(4) 2011-05-24 14:10:33 +00:00
ng_eiface.h Allow for MTU sizes of up to ETHER_MAX_LEN_JUMBO (i.e. 9018) bytes to be 2010-11-22 12:32:19 +00:00
ng_etf.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_etf.h
ng_ether_echo.c
ng_ether_echo.h
ng_ether.c remove RESTARTABLE_PANICS option 2011-07-25 09:12:48 +00:00
ng_ether.h
ng_fec.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_fec.h
ng_frame_relay.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_frame_relay.h
ng_gif_demux.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_gif_demux.h
ng_gif.c Rework global locks for interface list and index management, correcting 2009-08-23 20:40:19 +00:00
ng_gif.h
ng_hole.c
ng_hole.h
ng_hub.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_hub.h Add an optional "persistent" flag to ng_hub and ng_bridge, which if set, 2010-05-05 22:06:05 +00:00
ng_iface.c Tag mbufs of all incoming frames or packets with the interface's FIB 2011-07-03 16:08:38 +00:00
ng_iface.h
ng_ip_input.c Introduce a mechanism for detecting calls from outbound path of the 2009-06-11 16:50:49 +00:00
ng_ip_input.h
ng_ipfw.c Fix operation of "netgraph" action in conjunction with the 2010-07-27 14:26:34 +00:00
ng_ipfw.h bring the NGM_IPFW_COOKIE back into ng_ipfw.h, libnetgraph expects 2009-12-28 12:29:13 +00:00
ng_ksocket.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_ksocket.h
ng_l2tp.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_l2tp.h
ng_lmi.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_lmi.h
ng_message.h World now builds without these defines, so eliminate them. 2009-06-09 07:07:20 +00:00
ng_mppc.c remove RESTARTABLE_PANICS option 2011-07-25 09:12:48 +00:00
ng_mppc.h
ng_nat.c Sync ng_nat with recent (r222806) ipfw_nat changes: 2011-06-07 06:48:42 +00:00
ng_nat.h
ng_one2many.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_one2many.h Add XMIT_FAILOVER transmit algorithm to ng_one2many node. Packets are 2011-03-01 13:10:56 +00:00
ng_parse.c remove RESTARTABLE_PANICS option 2011-07-25 09:12:48 +00:00
ng_parse.h
ng_patch.c Use M_WAITOK flag instead M_WAIT for malloc. 2011-04-18 09:10:27 +00:00
ng_patch.h Style(9) fixes: 2010-06-10 16:45:30 +00:00
ng_pipe.c Assume the link to be dead if bit error rate (BER) parameter is set to 1. 2011-05-24 14:36:32 +00:00
ng_pipe.h Start copyright notice with /*- 2010-04-07 16:29:10 +00:00
ng_ppp.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_ppp.h
ng_pppoe.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_pppoe.h
ng_pptpgre.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_pptpgre.h
ng_pred1.c
ng_pred1.h
ng_rfc1490.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_rfc1490.h
ng_sample.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_sample.h
ng_socket.c Second-to-last commit implementing Capsicum capabilities in the FreeBSD 2011-08-11 12:30:23 +00:00
ng_socket.h
ng_socketvar.h Now fix functionality of 'netstat -f netgraph' that hasn't worked 2010-03-12 15:04:59 +00:00
ng_source.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_source.h Remove defunct email address from header as well. 2010-07-06 16:55:39 +00:00
ng_split.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_split.h
ng_sppp.c Finish last change. 2011-04-18 14:07:01 +00:00
ng_sppp.h
ng_tag.c
ng_tag.h
ng_tcpmss.c Remove alignment constraints. 2010-04-01 10:41:01 +00:00
ng_tcpmss.h
ng_tee.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_tee.h
ng_tty.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_tty.h
ng_UI.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_UI.h
ng_vjc.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_vjc.h
ng_vlan.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_vlan.h
NOTES Spell DIAGNOSTIC correctly. 2009-10-24 18:49:17 +00:00