Robert Watson 471e5756ad Update MAC Framework general comments, referencing various interfaces it ...

consumes and implements, as well as the location of the framework and
policy modules.

Refactor MAC Framework versioning a bit so that the current ABI version can
be exported via a read-only sysctl.

Further update comments relating to locking/synchronization.

Update copyright to take into account these and other recent changes.

Obtained from:	TrustedBSD Project

2006-12-28 17:25:57 +00:00

..

bus_if.m

- Revert making bus_generic_add_child() the default for BUS_ADD_CHILD().

2006-09-11 22:20:37 +00:00

clock_if.m

…

cpufreq_if.m

…

device_if.m

…

genassym.sh

…

imgact_aout.c

Correct two vm object reference leaks in error cases.

2006-03-16 08:51:59 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Add vm map and object locking to each_writable_segment().

2006-11-19 23:38:59 +00:00

imgact_gzip.c

Maintain the lock on the vnode for most of exec_elfN_imgact().

2005-12-24 04:57:50 +00:00

imgact_shell.c

Fix a panic which could occur parsing #!-lines in a shell-script. If the

2005-06-19 02:21:03 +00:00

inflate.c

Normalize a significant number of kernel malloc type names:

2005-10-31 15:41:29 +00:00

init_main.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

init_sysent.c

This commits the remake in kern/ make sysent to get

2006-11-03 18:57:49 +00:00

kern_acct.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_acl.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

kern_alq.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

kern_clock.c

Align the interfaces for the various watchdogs and make the interface

2006-12-15 21:44:49 +00:00

kern_condvar.c

Add second sleep queue so that sx and lockmgr can have separate sleep

2006-12-16 06:54:09 +00:00

kern_conf.c

Fix the race between devfs_fp_check and devfs_reclaim. Derefence the

2006-10-20 07:59:50 +00:00

kern_context.c

…

kern_cpu.c

- Print message about cpufreq and timecounter TSC

2006-03-03 02:06:04 +00:00

kern_descrip.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_environment.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_event.c

Save exit status of an exiting process in kn_data in the knote.

2006-11-20 22:17:50 +00:00

kern_exec.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_exit.c

Move sigqueue_take() call into proc_reparent(), this fixed bugs where

2006-10-25 06:18:04 +00:00

kern_fork.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_idle.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_intr.c

Add a function to return the MD interrupt source cookie associated with

2006-12-12 19:20:19 +00:00

kern_jail.c

Add a new priv(9) kernel interface for checking the availability of

2006-11-06 13:37:19 +00:00

kern_kse.c

Fix a potential point of confusion. Art Ironport we've seen this end up

2006-12-12 08:01:55 +00:00

kern_kthread.c

Don't do a PHOLD() in kthread_create() w/o a matching PRELE() in

2006-02-22 17:21:45 +00:00

kern_ktr.c

Remove slightly oddly placed suser() call from the KTR/ALQ setup sysctl:

2006-09-09 16:09:01 +00:00

kern_ktrace.c

ktrace_cv is no longer used - remove

2006-12-17 00:16:09 +00:00

kern_linker.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_lock.c

track lock class name in a way that doesn't break WITNESS

2006-11-13 05:41:46 +00:00

kern_lockf.c

…

kern_mac.c

Update MAC Framework general comments, referencing various interfaces it

2006-12-28 17:25:57 +00:00

kern_malloc.c

Increase usefulness of "show malloc" by moving from displaying the basic

2006-10-26 10:17:13 +00:00

kern_mbuf.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

kern_mib.c

mp_ncpus is always (properly) initialized, even on UP kernels, so just use it.

2005-08-21 18:03:31 +00:00

kern_module.c

Address a problem I missed in removing Giant from the kernel linker. Not

2006-06-26 18:34:45 +00:00

kern_mtxpool.c

…

kern_mutex.c

- Fix some gcc warnings in lock_profile.h

2006-12-16 02:37:58 +00:00

kern_ntptime.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_physio.c

…

kern_pmc.c

Fix -Wundef.

2005-12-04 02:12:43 +00:00

kern_poll.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_priv.c

Add a new priv(9) kernel interface for checking the availability of

2006-11-06 13:37:19 +00:00

kern_proc.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_prot.c

Add a new priv(9) kernel interface for checking the availability of

2006-11-06 13:37:19 +00:00

kern_resource.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_rwlock.c

track lock class name in a way that doesn't break WITNESS

2006-11-13 05:41:46 +00:00

kern_sema.c

…

kern_shutdown.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_sig.c

break loop early if we know that there are at least two signals.

2006-12-25 03:00:15 +00:00

kern_subr.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_switch.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_sx.c

track lock class name in a way that doesn't break WITNESS

2006-11-13 05:41:46 +00:00

kern_synch.c

Add second sleep queue so that sx and lockmgr can have separate sleep

2006-12-16 06:54:09 +00:00

kern_syscalls.c

Make system call modules a bit more robust:

2006-08-01 16:32:20 +00:00

kern_sysctl.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

kern_tc.c

Commit the results of the typo hunt by Darren Pilgrim.

2006-08-04 07:56:35 +00:00

kern_thr.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

kern_thread.c

Remove unused sysctls.

2006-12-19 13:06:01 +00:00

kern_time.c

- Remove third parameter of itimer_find, the parameter is always zero.

2006-11-28 03:24:34 +00:00

kern_timeout.c

Improve ktr(4) logging for callout(9) subsystem. Log all inserts and

2006-10-11 14:57:03 +00:00

kern_umtx.c

Add a lwpid field into per-cpu structure, the lwpid represents current

2006-12-20 04:40:39 +00:00

kern_uuid.c

Separate functions with a newline.

2006-07-17 21:00:42 +00:00

kern_xxx.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

ksched.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

link_elf_obj.c

Linker set support depends on the magic __start_<section> and

2006-11-30 10:50:29 +00:00

link_elf.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

linker_if.m

…

Make.tags.inc

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

Makefile

Add support for the generated file systrace_args.c.

2006-08-05 19:25:14 +00:00

makesyscalls.sh

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

md4c.c

…

md5c.c

Fix a panic on sparc64 related to inproper aligment - we cannot assume,

2006-03-30 18:45:50 +00:00

p1003_1b.c

Update #includes list.

2006-11-11 16:19:12 +00:00

posix4_mib.c

Fix mispatch of includes list; allows my kernel to build successfully.

2006-11-12 03:34:03 +00:00

sched_4bsd.c

Fix typo, p_slptime should be td_slptime.

2006-12-24 01:52:27 +00:00

sched_core.c

Add user priority loaning code to support priority propagation for

2006-08-25 06:12:53 +00:00

sched_ule.c

Changes to try fix sched_ule.c courtesy of David Xu.

2006-12-06 06:55:59 +00:00

serdev_if.m

MFp4: Add the ipend() method to the serdev I/F to allow umbrella

2006-04-23 22:12:39 +00:00

subr_acl_posix1e.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

subr_autoconf.c

Add a mutex to protect the list of interrupt config hooks. We do assume

2006-07-19 18:53:56 +00:00

subr_blist.c

…

subr_bus.c

Add a default method for BUS_ADD_CHILD() that just calls

2006-09-11 19:41:31 +00:00

subr_clist.c

…

subr_clock.c

Use utc_offset() where applicable, and hide the internals of it

2006-10-02 18:23:37 +00:00

subr_devstat.c

…

subr_disk.c

Add a new I/O request - BIO_FLUSH, which basically tells providers below to

2006-10-31 21:11:21 +00:00

subr_eventhandler.c

…

subr_fattime.c

Better naming of fattime conversion functions, they do convert to timespec

2006-10-24 10:27:23 +00:00

subr_firmware.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

subr_hints.c

Use a sleep mutex instead of an sx lock for the kernel environment. This

2006-07-09 21:42:58 +00:00

subr_kdb.c

Add a funny sysctl: debug.kdb.trap_code .

2006-06-18 12:27:59 +00:00

subr_kobj.c

Increment kobj_lookup_misses on a miss rather than decrementing it.

2005-12-29 18:00:42 +00:00

subr_lock.c

Bug fix for obscenely large wait times on uncontested locks

2006-12-04 22:15:50 +00:00

subr_log.c

…

subr_mbpool.c

…

subr_mchain.c

Change API of mb_copy_t in libmchain so that netsmb can handle

2005-07-29 13:22:37 +00:00

subr_module.c

…

subr_msgbuf.c

…

subr_param.c

Partially revert revision 1.66, which contained a change that did not

2005-10-14 19:15:10 +00:00

subr_pcpu.c

Fix 'show allpcpu' ddb command on non-x86. CPU IDs are in the range 0 ..

2005-11-03 21:06:29 +00:00

subr_power.c

General consensus is that it would be even better to run this in a

2005-11-09 16:22:56 +00:00

subr_prf.c

Flushing the buffer is conditional on actually using the buffer. Oops.

2006-11-30 07:25:52 +00:00

subr_prof.c

Change the addupc_*() functions to use the uintfptr_t type for pc rather

2005-12-16 22:08:32 +00:00

subr_rman.c

Fix an edge case in rman_manage_region() where it didn't handle a resource

2006-12-04 16:45:23 +00:00

subr_rtc.c

Use utc_offset() where applicable, and hide the internals of it

2006-10-02 18:23:37 +00:00

subr_sbuf.c

Make sbuf_copyin() return the number of bytes copied on success.

2005-12-23 11:49:53 +00:00

subr_scanf.c

…

subr_sleepqueue.c

Cleaner fix for handling declaration of loop variable under INVARIANTS

2006-12-17 00:14:20 +00:00

subr_smp.c

Rename the KDB_STOP_NMI kernel option to STOP_NMI and make it apply to all

2005-10-24 21:04:19 +00:00

subr_stack.c

Correct typos

2006-05-28 22:15:28 +00:00

subr_taskqueue.c

When starting up threads in taskqueue_start_threads create them

2006-05-24 22:11:07 +00:00

subr_trap.c

Threading cleanup.. part 2 of several.

2006-12-06 06:34:57 +00:00

subr_turnstile.c

Add a new 'show sleepchain' ddb command similar to 'show lockchain' except

2006-08-15 18:29:01 +00:00

subr_unit.c

…

subr_witness.c

MUTEX_PROFILING has been generalized to LOCK_PROFILING. We now profile

2006-11-11 03:18:07 +00:00

sys_generic.c

Prevent IOC_IN with zero size argument (this is only supported

2006-10-14 19:01:55 +00:00

sys_pipe.c

Use pipe_direct_write() optimization only if the data is in process' memory.

2006-12-19 12:52:22 +00:00

sys_process.c

Make KSE a kernel option, turned on by default in all GENERIC

2006-10-26 21:42:22 +00:00

sys_socket.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

syscalls.c

This commits the remake in kern/ make sysent to get

2006-11-03 18:57:49 +00:00

syscalls.master

Ok, here it is, we finally add SCTP to current. Note that this

2006-11-03 15:23:16 +00:00

systrace_args.c

Ok, here it is, we finally add SCTP to current. Note that this

2006-11-03 15:23:16 +00:00

sysv_ipc.c

For now, back out sysv_ipc.c:1.30, which caused shmget() with odd mode

2006-12-16 11:30:54 +00:00

sysv_msg.c

MFP4: (part of) 110058

2006-12-20 19:26:30 +00:00

sysv_sem.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

sysv_shm.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

tty_compat.c

Move the old BSD4.3 tty compatibility from (!BURN_BRIDGES && COMPAT_43)

2006-01-10 09:19:10 +00:00

tty_conf.c

…

tty_cons.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

tty_pts.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

tty_pty.c

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

tty_subr.c

…

tty_tty.c

Use ctty instead of just returning. ctty just has a simple open that

2006-09-27 16:41:15 +00:00

tty.c

Back out rev. 1.266. The real cause for the recent panics has been fixed

2006-12-20 02:49:59 +00:00

uipc_accf.c

o setsockopt(2) cannot remove accept filter. [1]

2005-06-11 11:59:48 +00:00

uipc_cow.c

Previously, nothing prevented the page that was returned by pmap_extract()

2005-10-23 07:41:56 +00:00

uipc_domain.c

soreceive_generic(), and sopoll_generic(). Add new functions sosend(),

2006-07-24 15:20:08 +00:00

uipc_mbuf2.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

uipc_mbuf.c

The prepend function did not handle non-pkthdr's correctly.

2006-12-21 19:58:04 +00:00

uipc_mqueue.c

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

uipc_sem.c

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

uipc_sockbuf.c

Use sysctl_handle_long() instead of duplicating it's logic for

2006-09-06 21:59:36 +00:00

uipc_socket2.c

Change two XXX's to two notes: the fact that SOCK_LOCK(so) ==

2006-08-02 16:23:52 +00:00

uipc_socket.c

Drop all received data mbufs from a socket's queue if the MT_SONAME

2006-12-23 21:07:07 +00:00

uipc_syscalls.c

In kern_sendfile() fix the calculation of sbytes (the total number of bytes

2006-11-12 20:57:00 +00:00

uipc_usrreq.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

vfs_acl.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

vfs_aio.c

Merge posix4/* into normal kernel hierarchy.

2006-11-11 16:26:58 +00:00

vfs_bio.c

In rev. 1.514, iodone on async buffer may happen before code checks the

2006-12-20 09:22:31 +00:00

vfs_cache.c

Axe Giant from vn_fullpath(9). The vnode -> pathname lookup should be

2006-06-16 05:09:28 +00:00

vfs_cluster.c

Replace PG_BUSY with VPO_BUSY. In other words, changes to the page's

2006-10-22 04:28:14 +00:00

vfs_default.c

change vop_lock handling to allowing tracking of callers' file and line for

2006-11-13 05:51:22 +00:00

vfs_export.c

In vfs_export(), if we specify MNT_DELEXPORT in the struct export_args,

2006-12-16 15:50:36 +00:00

vfs_extattr.c

Update comments to reflect changes in the extattrctl() code.

2006-12-23 00:30:03 +00:00

vfs_hash.c

In vfs_hash_get(): mount point should never be changed

2006-04-18 08:05:08 +00:00

vfs_init.c

Remove duplicate security checks already performed in kern_kldload().

2006-06-26 18:33:32 +00:00

vfs_lookup.c

Complete break-out of sys/sys/mac.h into sys/security/mac/mac_framework.h

2006-10-22 11:52:19 +00:00

vfs_mount.c

Add a function vfs_deleteopt() which searches through the vfsoptlist

2006-12-16 15:44:03 +00:00

vfs_subr.c

change vop_lock handling to allowing tracking of callers' file and line for

2006-11-13 05:51:22 +00:00

vfs_syscalls.c

Following a repo-copy of vfs_syscalls.c to vfs_extattr.c, remove

2006-12-23 00:10:36 +00:00

vfs_vnops.c

change vop_lock handling to allowing tracking of callers' file and line for

2006-11-13 05:51:22 +00:00

vnode_if.src

change vop_lock handling to allowing tracking of callers' file and line for

2006-11-13 05:51:22 +00:00