Jonathan Anderson 7a270867e7 Turn on AUDIT_ARG_RIGHTS() for cap_new(2). ...

Now that the code is in place to audit capability method rights, start
using it to audit the 'rights' argument to cap_new(2).

Approved by: re (kib), mentor (rwatson)
Sponsored by: Google Inc

2011-07-22 12:50:21 +00:00

..

bus_if.m

Add a new bus method, BUS_ADJUST_RESOURCE() that is intended to be a

2011-04-29 21:36:45 +00:00

capabilities.conf

…

clock_if.m

…

cpufreq_if.m

…

device_if.m

Update comments for DEVICE_PROBE() to reflect that BUS_PROBE_DEFAULT is

2011-05-24 13:22:40 +00:00

genassym.sh

…

imgact_aout.c

Do not trash the argv[0] pointer for an a.out process on amd64.

2011-06-16 22:00:59 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

All the racct_*() calls need to happen with the proc locked. Fixing this

2011-07-06 20:06:44 +00:00

imgact_gzip.c

Add accounting for most of the memory-related resources.

2011-04-05 20:23:59 +00:00

imgact_shell.c

…

inflate.c

…

init_main.c

…

init_sysent.c

Auto-generated system call code with cap_new(), cap_getrights().

2011-07-15 18:33:12 +00:00

kern_acct.c

…

kern_alq.c

…

kern_clock.c

- Remove the eintrcnt/eintrnames usage and introduce the concept of

2011-07-18 15:19:40 +00:00

kern_clocksource.c

Set negative quality to TSC timecounter when C3 state is enabled for Intel

2011-06-22 16:40:45 +00:00

kern_condvar.c

…

kern_conf.c

MFC

2011-06-15 07:20:22 +00:00

kern_cons.c

…

kern_context.c

…

kern_cpu.c

…

kern_cpuset.c

Fix KTR_CPUMASK in order to accept a string representing a cpuset_t.

2011-05-31 20:48:58 +00:00

kern_ctf.c

…

kern_descrip.c

Export capability information via sysctls.

2011-07-20 09:53:35 +00:00

kern_dtrace.c

…

kern_environment.c

In init_dynamic_kenv(), ignore environment strings exceeding the

2011-05-23 16:40:44 +00:00

kern_et.c

…

kern_event.c

…

kern_exec.c

Define two new sysctl node flags: CTLFLAG_CAPRD and CTLFLAG_CAPRW, which

2011-07-17 23:05:24 +00:00

kern_exit.c

All the racct_*() calls need to happen with the proc locked. Fixing this

2011-07-06 20:06:44 +00:00

kern_fail.c

Add an option to have a fail point term only execute when run by a

2011-07-08 20:41:12 +00:00

kern_fork.c

Implement an RFTSIGZMB flag to rfork(2) to specify a signal that is

2011-07-12 20:37:18 +00:00

kern_gzio.c

…

kern_hhook.c

Staticize malloc types.

2011-04-13 11:28:46 +00:00

kern_idle.c

On multi-core, multi-threaded PPC systems, it is important that the threads

2011-05-31 15:11:43 +00:00

kern_intr.c

- Remove the eintrcnt/eintrnames usage and introduce the concept of

2011-07-18 15:19:40 +00:00

kern_jail.c

Add infrastructure to allow all frames/packets received on an interface

2011-07-03 12:22:02 +00:00

kern_khelp.c

Use the full and proper company name for Swinburne University of Technology

2011-04-12 08:13:18 +00:00

kern_kthread.c

…

kern_ktr.c

Fix KTR_CPUMASK in order to accept a string representing a cpuset_t.

2011-05-31 20:48:58 +00:00

kern_ktrace.c

Fix several places to ignore processes that are not yet fully constructed.

2011-04-06 17:47:22 +00:00

kern_linker.c

Fix a LOR between hwpmc and the kernel linker. When a system-wide

2011-07-17 21:53:42 +00:00

kern_lock.c

…

kern_lockf.c

…

kern_lockstat.c

…

kern_loginclass.c

…

kern_malloc.c

…

kern_mbuf.c

…

kern_mib.c

Define two new sysctl node flags: CTLFLAG_CAPRD and CTLFLAG_CAPRW, which

2011-07-17 23:05:24 +00:00

kern_module.c

…

kern_mtxpool.c

…

kern_mutex.c

…

kern_ntptime.c

…

kern_osd.c

…

kern_physio.c

…

kern_pmc.c

Commit the support for removing cpumask_t and replacing it directly with

2011-05-05 14:39:14 +00:00

kern_poll.c

…

kern_priv.c

…

kern_proc.c

Rename ki_ocomm to ki_tdname and OCOMMLEN to TDNAMLEN.

2011-07-18 20:06:15 +00:00

kern_prot.c

…

kern_racct.c

Rename resource names to match these in login.conf.

2011-07-14 19:18:17 +00:00

kern_rctl.c

Rename resource names to match these in login.conf.

2011-07-14 19:18:17 +00:00

kern_resource.c

- Export each thread's individual resource usage in in struct kinfo_proc's

2011-07-18 17:33:08 +00:00

kern_rmlock.c

Remove pc_cpumask and pc_other_cpus usage from MI code.

2011-06-13 13:28:31 +00:00

kern_rwlock.c

…

kern_sdt.c

…

kern_sema.c

…

kern_shutdown.c

In the current code, a double panic condition may lead to dumps

2011-06-08 19:28:59 +00:00

kern_sig.c

Fix support for RACCT_CORE by merging forgotten file.

2011-05-26 18:54:07 +00:00

kern_switch.c

…

kern_sx.c

…

kern_synch.c

Simplify a stale assertion. We have not called mi_switch() from a nested

2011-05-24 13:17:08 +00:00

kern_syscalls.c

…

kern_sysctl.c

Define two new sysctl node flags: CTLFLAG_CAPRD and CTLFLAG_CAPRW, which

2011-07-17 23:05:24 +00:00

kern_tc.c

If TSC stops ticking in C3, disable deep sleep when the user forcefully

2011-07-14 21:00:26 +00:00

kern_thr.c

All the racct_*() calls need to happen with the proc locked. Fixing this

2011-07-06 20:06:44 +00:00

kern_thread.c

…

kern_time.c

…

kern_timeout.c

Reintroduce the fix already discussed in r216805 (please check its history

2011-04-08 18:48:57 +00:00

kern_umtx.c

…

kern_uuid.c

…

kern_xxx.c

…

ksched.c

Use p4prio_to_tsprio to calculate TS priority instead of using

2011-06-07 02:50:14 +00:00

link_elf_obj.c

Remove malloc(9) return value checks when M_WAITOK is used.

2011-04-16 16:20:51 +00:00

link_elf.c

Even if the loaded module has no symbols, we still need to notify

2011-06-16 17:41:21 +00:00

linker_if.m

…

Make.tags.inc

Update tags build script

2011-07-10 00:53:04 +00:00

Makefile

…

makesyscalls.sh

…

md4c.c

…

md5c.c

…

p1003_1b.c

…

posix4_mib.c

Define two new sysctl node flags: CTLFLAG_CAPRD and CTLFLAG_CAPRW, which

2011-07-17 23:05:24 +00:00

sched_4bsd.c

Remove pc_cpumask and pc_other_cpus usage from MI code.

2011-06-13 13:28:31 +00:00

sched_ule.c

Remove explicit MAXCPU usage from sys/pcpu.h avoiding a namespace

2011-07-19 16:50:55 +00:00

serdev_if.m

…

stack_protector.c

…

subr_acl_nfs4.c

…

subr_acl_posix1e.c

…

subr_autoconf.c

…

subr_blist.c

…

subr_bufring.c

…

subr_bus.c

Add a new bus method, BUS_ADJUST_RESOURCE() that is intended to be a

2011-04-29 21:36:45 +00:00

subr_clock.c

…

subr_devstat.c

Instead of using an atomic operation to determine whether the devstat(9)

2011-06-13 22:08:24 +00:00

subr_disk.c

…

subr_eventhandler.c

…

subr_fattime.c

…

subr_firmware.c

…

subr_hash.c

…

subr_hints.c

…

subr_kdb.c

Fix a mismerge.

2011-06-27 13:02:23 +00:00

subr_kobj.c

…

subr_lock.c

…

subr_log.c

…

subr_mbpool.c

…

subr_mchain.c

…

subr_module.c

…

subr_msgbuf.c

Fix a bug introduced in revision 222537.

2011-05-31 22:39:32 +00:00

subr_param.c

…

subr_pcpu.c

Remove pc_name member of struct pcpu.

2011-07-19 14:57:59 +00:00

subr_power.c

…

subr_prf.c

Set pca.p_bufr to NULL when we haven't allocated a buffer.

2011-06-07 05:04:37 +00:00

subr_prof.c

…

subr_rman.c

Clear the device_t pointer in 'struct resource' when releasing a device

2011-06-06 13:12:56 +00:00

subr_rtc.c

…

subr_sbuf.c

Use memset() instead of bzero() and memcpy() instead of bcopy(), there

2011-05-17 11:04:50 +00:00

subr_scanf.c

…

subr_sglist.c

…

subr_sleepqueue.c

…

subr_smp.c

Define two new sysctl node flags: CTLFLAG_CAPRD and CTLFLAG_CAPRW, which

2011-07-17 23:05:24 +00:00

subr_stack.c

…

subr_taskqueue.c

Implement the delayed task execution extension to the taskqueue

2011-04-26 11:39:56 +00:00

subr_trap.c

We may split today's CAPABILITIES into CAPABILITY_MODE (which has

2011-06-29 13:03:05 +00:00

subr_turnstile.c

…

subr_uio.c

Add a facility to disable processing page faults. When activated,

2011-07-09 15:21:10 +00:00

subr_unit.c

…

subr_witness.c

…

sys_capability.c

Turn on AUDIT_ARG_RIGHTS() for cap_new(2).

2011-07-22 12:50:21 +00:00

sys_generic.c

…

sys_pipe.c

…

sys_process.c

Add comment from CSRG rev 7.27 (1992/06/23 19:56:55; author: mckusick)

2011-06-17 21:44:13 +00:00

sys_socket.c

…

syscalls.c

Auto-generated system call code with cap_new(), cap_getrights().

2011-07-15 18:33:12 +00:00

syscalls.master

Add cap_new() and cap_getrights() system calls.

2011-07-15 18:26:19 +00:00

systrace_args.c

Auto-generated system call code with cap_new(), cap_getrights().

2011-07-15 18:33:12 +00:00

sysv_ipc.c

…

sysv_msg.c

All the racct_*() calls need to happen with the proc locked. Fixing this

2011-07-06 20:06:44 +00:00

sysv_sem.c

Remove semaphore map entry count "semmap" field and its tuning

2011-07-14 14:18:14 +00:00

sysv_shm.c

All the racct_*() calls need to happen with the proc locked. Fixing this

2011-07-06 20:06:44 +00:00

tty_compat.c

…

tty_info.c

…

tty_inq.c

Fix whitespace inconsistencies in the TTY layer and its drivers owned by me.

2011-06-26 18:26:20 +00:00

tty_outq.c

Fix whitespace inconsistencies in the TTY layer and its drivers owned by me.

2011-06-26 18:26:20 +00:00

tty_pts.c

Fix whitespace inconsistencies in the TTY layer and its drivers owned by me.

2011-06-26 18:26:20 +00:00

tty_tty.c

…

tty_ttydisc.c

Fix whitespace inconsistencies in the TTY layer and its drivers owned by me.

2011-06-26 18:26:20 +00:00

tty.c

Reintroduce the cioctl() hook in the TTY layer for digi(4).

2011-07-02 13:54:20 +00:00

uipc_accf.c

…

uipc_cow.c

…

uipc_debug.c

…

uipc_domain.c

…

uipc_mbuf2.c

…

uipc_mbuf.c

…

uipc_mqueue.c

…

uipc_sem.c

…

uipc_shm.c

Add some checks to ensure that Capsicum is behaving correctly, and add some

2011-06-30 10:56:02 +00:00

uipc_sockbuf.c

Revert r194662, since it breaks ng_ksocket(4) and may break

2011-04-14 14:54:22 +00:00

uipc_socket.c

In the experimental soreceive_stream():

2011-07-08 10:50:13 +00:00

uipc_syscalls.c

Add some checks to ensure that Capsicum is behaving correctly, and add some

2011-06-30 10:56:02 +00:00

uipc_usrreq.c

…

vfs_acl.c

…

vfs_aio.c

…

vfs_bio.c

Call pmap_qremove() before freeing or unwiring the pages, otherwise

2011-07-05 18:40:37 +00:00

vfs_cache.c

…

vfs_cluster.c

…

vfs_default.c

Add a lock flags argument to the VFS_FHTOVP() file system

2011-05-22 01:07:54 +00:00

vfs_export.c

…

vfs_extattr.c

…

vfs_hash.c

…

vfs_init.c

…

vfs_lookup.c

…

vfs_mount.c

Include sys/sbuf.h directly.

2011-07-11 05:17:46 +00:00

vfs_mountroot.c

Include sys/sbuf.h directly.

2011-07-11 05:17:46 +00:00

vfs_subr.c

Add a new option, OBJPR_NOTMAPPED, to vm_object_page_remove(). Passing this

2011-06-29 16:40:41 +00:00

vfs_syscalls.c

Add a lock flags argument to the VFS_FHTOVP() file system

2011-05-22 01:07:54 +00:00

vfs_vnops.c

Use a name instead of a magic number for kern_yield(9) when the priority

2011-05-13 05:27:58 +00:00

vnode_if.src

Correctly use INOUT for the offset/len parameters to vop_allocate. As

2011-05-13 14:29:28 +00:00