Martin Matuska bf3db8aa65 To improve control over the use of mount(8) inside a jail(8), introduce ...

a new jail parameter node with the following parameters:

allow.mount.devfs:
	allow mounting the devfs filesystem inside a jail

allow.mount.nullfs:
	allow mounting the nullfs filesystem inside a jail

Both parameters are disabled by default (equals the behavior before
devfs and nullfs in jails). Administrators have to explicitly allow
mounting devfs and nullfs for each jail. The value "-1" of the
devfs_ruleset parameter is removed in favor of the new allow setting.

Reviewed by:	jamie
Suggested by:	pjd
MFC after:	2 weeks

2012-02-23 18:51:24 +00:00

..

bus_if.m

Add a new bus method, BUS_ADJUST_RESOURCE() that is intended to be a

2011-04-29 21:36:45 +00:00

capabilities.conf

Add experimental support for process descriptors

2011-08-18 22:51:30 +00:00

clock_if.m

…

cpufreq_if.m

…

device_if.m

Update comments for DEVICE_PROBE() to reflect that BUS_PROBE_DEFAULT is

2011-05-24 13:22:40 +00:00

genassym.sh

…

imgact_aout.c

Do not trash the argv[0] pointer for an a.out process on amd64.

2011-06-16 22:00:59 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Finally, try to enable the nxstacks on amd64 and powerpc64 for both 64bit

2012-01-30 07:56:00 +00:00

imgact_gzip.c

Fix misuse of the kernel map in miscellaneous image activators.

2012-02-17 23:47:16 +00:00

imgact_shell.c

The execution of the shebang script requires putting interpreter path,

2011-03-06 22:59:30 +00:00

inflate.c

…

init_main.c

TDF_* flags should be used with td_flags field and TDP_* flags should be used

2012-01-22 11:01:36 +00:00

init_sysent.c

- Add the ffclock_getcounter(), ffclock_getestimate() and ffclock_setestimate()

2011-11-21 01:26:10 +00:00

kern_acct.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_alq.c

…

kern_clock.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

kern_clocksource.c

Set negative quality to TSC timecounter when C3 state is enabled for Intel

2011-06-22 16:40:45 +00:00

kern_condvar.c

…

kern_conf.c

Remove unneeded newline. It fits in 80 columns now.

2012-02-10 14:55:47 +00:00

kern_cons.c

belatedly transfer copyrights from libkern/gets.c to kern_cons.c

2011-12-17 15:50:45 +00:00

kern_context.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_cpu.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

kern_cpuset.c

Add a missing curly bracket

2011-12-05 10:34:52 +00:00

kern_ctf.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

kern_descrip.c

Reformat comment to be more readable in standard Xterm.

2011-11-15 01:48:53 +00:00

kern_dtrace.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

kern_environment.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_et.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

kern_event.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_exec.c

Use shared lock for the executable vnode in the exec path after the

2012-01-19 23:03:31 +00:00

kern_exit.c

Allow the parent to gather the exit status of the children reparented

2012-02-23 11:50:23 +00:00

kern_fail.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

kern_ffclock.c

Revise the sysctl handling code and restructure the hierarchy of sysctls

2011-12-01 07:19:13 +00:00

kern_fork.c

Allow the parent to gather the exit status of the children reparented

2012-02-23 11:50:23 +00:00

kern_gzio.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

kern_hhook.c

Staticize malloc types.

2011-04-13 11:28:46 +00:00

kern_idle.c

On multi-core, multi-threaded PPC systems, it is important that the threads

2011-05-31 15:11:43 +00:00

kern_intr.c

Be pedantic and change // comment to C-style one.

2012-01-16 20:42:56 +00:00

kern_jail.c

To improve control over the use of mount(8) inside a jail(8), introduce

2012-02-23 18:51:24 +00:00

kern_khelp.c

Use the full and proper company name for Swinburne University of Technology

2011-04-12 08:13:18 +00:00

kern_kthread.c

Whenever a new kernel thread is spawned, explicitly clear any CPU affinity

2012-02-04 16:49:29 +00:00

kern_ktr.c

Use strchr() and strrchr().

2012-01-02 12:12:10 +00:00

kern_ktrace.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

kern_linker.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

kern_lock.c

panic: add a switch and infrastructure for stopping other CPUs in SMP case

2011-12-11 21:02:01 +00:00

kern_lockf.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

kern_lockstat.c

…

kern_loginclass.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_malloc.c

Eliminate stale numbers from a comment.

2011-12-07 16:27:23 +00:00

kern_mbuf.c

…

kern_mib.c

Define two new sysctl node flags: CTLFLAG_CAPRD and CTLFLAG_CAPRW, which

2011-07-17 23:05:24 +00:00

kern_module.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_mtxpool.c

…

kern_mutex.c

panic: add a switch and infrastructure for stopping other CPUs in SMP case

2011-12-11 21:02:01 +00:00

kern_ntptime.c

Introduce the sysclock_getsnapshot() and sysclock_snap2bintime() KPIs. The

2011-12-24 01:32:01 +00:00

kern_osd.c

…

kern_physio.c

Account i/o done on cdevs.

2010-11-25 20:05:11 +00:00

kern_pmc.c

Commit the support for removing cpumask_t and replacing it directly with

2011-05-05 14:39:14 +00:00

kern_poll.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

kern_priv.c

Add an extra comment to the SDT probes definition. This allows us to get

2010-08-22 11:18:57 +00:00

kern_proc.c

Fix CTL flags in the declarations of KERN_PROC_ENV, AUXV and

2012-01-25 20:15:58 +00:00

kern_prot.c

Fix a typo. (s/nessesary/necessary/)

2012-01-08 18:48:36 +00:00

kern_racct.c

kern_racct: move sys/systm.h inclusion to its proper place

2011-12-12 07:46:10 +00:00

kern_rctl.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

kern_resource.c

Change kern.proc.rlimit sysctl to:

2012-01-22 20:25:00 +00:00

kern_rmlock.c

panic: add a switch and infrastructure for stopping other CPUs in SMP case

2011-12-11 21:02:01 +00:00

kern_rwlock.c

panic: add a switch and infrastructure for stopping other CPUs in SMP case

2011-12-11 21:02:01 +00:00

kern_sdt.c

…

kern_sema.c

…

kern_shutdown.c

Avoid to check the same cache line/variable from all the locking

2012-01-28 14:00:21 +00:00

kern_sig.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

kern_switch.c

critical_exit: ignore td_owepreempt if kdb_active is set

2011-12-04 21:27:41 +00:00

kern_sx.c

put sys/systm.h at its proper place or add it if missing

2011-12-12 10:05:13 +00:00

kern_synch.c

panic: add a switch and infrastructure for stopping other CPUs in SMP case

2011-12-11 21:02:01 +00:00

kern_syscalls.c

Call chainevh callback when we are invoked with neither MOD_LOAD nor

2010-10-21 20:31:50 +00:00

kern_sysctl.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_tc.c

Add a missing break. This bug was introduced in r228856.

2012-02-10 06:30:52 +00:00

kern_thr.c

Document a large number of currently undocumented sysctls. While here

2011-12-13 00:38:50 +00:00

kern_thread.c

Some small fixes to CPU accounting for threads:

2012-01-03 21:03:28 +00:00

kern_time.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_timeout.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

kern_umtx.c

Fix typo.

2012-02-22 07:34:23 +00:00

kern_uuid.c

Convert all users of IF_ADDR_LOCK to use new locking macros that specify

2012-01-05 19:00:36 +00:00

kern_xxx.c

…

ksched.c

Use p4prio_to_tsprio to calculate TS priority instead of using

2011-06-07 02:50:14 +00:00

link_elf_obj.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

link_elf.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

linker_if.m

…

Make.tags.inc

Update tags build script

2011-07-10 00:53:04 +00:00

Makefile

Continue to introduce Capsicum Capability Mode support:

2011-03-01 13:28:27 +00:00

makesyscalls.sh

- Add the ffclock_getcounter(), ffclock_getestimate() and ffclock_setestimate()

2011-11-21 01:26:10 +00:00

md4c.c

…

md5c.c

…

p1003_1b.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

posix4_mib.c

Define two new sysctl node flags: CTLFLAG_CAPRD and CTLFLAG_CAPRW, which

2011-07-17 23:05:24 +00:00

sched_4bsd.c

Some small fixes to CPU accounting for threads:

2012-01-03 21:03:28 +00:00

sched_ule.c

Some small fixes to CPU accounting for threads:

2012-01-03 21:03:28 +00:00

serdev_if.m

…

stack_protector.c

…

subr_acl_nfs4.c

Remove assertion against empty NFSv4 ACLs. An empty ACL is not exactly

2011-10-05 17:29:49 +00:00

subr_acl_posix1e.c

execve(2) has a special check for file permissions: a file must have at

2010-08-30 16:30:18 +00:00

subr_autoconf.c

Retire PCONFIG and leave the priority of thread0 alone when waiting for

2011-01-06 22:09:37 +00:00

subr_blist.c

- Fix typos s/(more|less) then|\1 than/

2011-12-03 15:41:37 +00:00

subr_bufring.c

…

subr_bus.c

- Fix undefined behavior when device_get_name is null

2012-01-15 07:09:18 +00:00

subr_clock.c

Improve style and wording of comments and sysctl descriptions [1].

2011-01-09 14:34:56 +00:00

subr_devstat.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

subr_disk.c

Correct bioq_disksort so that bioq_insert_tail() offers barrier semantic.

2010-09-02 19:40:28 +00:00

subr_eventhandler.c

…

subr_fattime.c

…

subr_firmware.c

Do not increment the parent firmware's reference count when any other

2011-11-19 00:20:28 +00:00

subr_hash.c

Convert panic()s to KASSERT()s. This is an optimisation for

2012-01-23 16:31:46 +00:00

subr_hints.c

Use strchr() and strrchr().

2012-01-02 12:12:10 +00:00

subr_kdb.c

introduce cngrab/cnungrab stub calls in some places where they make sense

2011-12-17 15:11:22 +00:00

subr_kobj.c

As it turns out, r186347 actually is insufficient to avoid the use of the

2011-11-15 20:11:03 +00:00

subr_lock.c

panic: add a switch and infrastructure for stopping other CPUs in SMP case

2011-12-11 21:02:01 +00:00

subr_log.c

Add kqueue support to /dev/klog.

2012-02-01 14:34:52 +00:00

subr_mbpool.c

…

subr_mchain.c

- Use uint8_t for the variable x and spell the size of the variable

2012-02-06 06:03:16 +00:00

subr_module.c

Provide convenience function for obtaining MODINFO_ADDR and MODINFO_SIZE

2011-02-09 19:08:21 +00:00

subr_msgbuf.c

Add a timestamp to the msgbuf output in order to determine when when

2012-02-16 05:11:35 +00:00

subr_param.c

Modestly increase the maximum allowed size of the kmem map on i386.

2011-03-23 16:38:29 +00:00

subr_pcpu.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

subr_power.c

…

subr_prf.c

Fix double vision syndrome (read: double output) when in the

2011-10-16 14:16:46 +00:00

subr_prof.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

subr_rman.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

subr_rtc.c

Core structure and functions to support a feed-forward clock within the kernel.

2011-11-19 14:10:16 +00:00

subr_sbuf.c

r222015 introduced a new assertion that the size of a fixed-length sbuf

2011-08-19 08:29:10 +00:00

subr_scanf.c

Xen netback driver rewrite.

2012-01-26 16:35:09 +00:00

subr_sglist.c

…

subr_sleepqueue.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

subr_smp.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

subr_stack.c

Constify stack argument for functions that don't modify it.

2011-11-16 19:06:55 +00:00

subr_syscall.c

The PTRACESTOP() macro is used only once. Inline the only use and remove

2012-02-11 14:49:25 +00:00

subr_taskqueue.c

Ensure that ta_pending doesn't overflow u_short by capping its value at USHRT_MAX.

2011-09-15 08:42:06 +00:00

subr_trap.c

Assert that exiting process does not return to usermode.

2011-10-03 16:58:58 +00:00

subr_turnstile.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

subr_uio.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

subr_unit.c

Fix typos - remove duplicate "the".

2011-02-21 09:01:34 +00:00

subr_witness.c

Convert the per-interface address list lock from a mutex to a reader/writer

2012-01-09 19:34:12 +00:00

sys_capability.c

Revisit the capability failure trace points. The initial implementation

2011-10-18 07:28:58 +00:00

sys_generic.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

sys_pipe.c

merge pipe and fifo implementations

2012-02-23 18:37:30 +00:00

sys_procdesc.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

sys_process.c

Allow the parent to gather the exit status of the children reparented

2012-02-23 11:50:23 +00:00

sys_socket.c

Add the fo_chown and fo_chmod methods to struct fileops and use them

2011-08-16 20:07:47 +00:00

syscalls.c

- Add the ffclock_getcounter(), ffclock_getestimate() and ffclock_setestimate()

2011-11-21 01:26:10 +00:00

syscalls.master

- Add the ffclock_getcounter(), ffclock_getestimate() and ffclock_setestimate()

2011-11-21 01:26:10 +00:00

systrace_args.c

- Add the ffclock_getcounter(), ffclock_getestimate() and ffclock_setestimate()

2011-11-21 01:26:10 +00:00

sysv_ipc.c

…

sysv_msg.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

sysv_sem.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

sysv_shm.c

Close a race due to dropping of the map lock between creating a map entry

2012-02-19 00:28:49 +00:00

tty_compat.c

…

tty_info.c

Fix whitespace inconsistencies in TTY code.

2012-02-06 18:15:46 +00:00

tty_inq.c

Use strchr() and strrchr().

2012-01-02 12:12:10 +00:00

tty_outq.c

Fix whitespace inconsistencies in the TTY layer and its drivers owned by me.

2011-06-26 18:26:20 +00:00

tty_pts.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

tty_tty.c

Finish r210923, 210926. Mark some devices as eternal.

2011-01-04 10:59:38 +00:00

tty_ttydisc.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

tty.c

Fix whitespace inconsistencies in TTY code.

2012-02-06 18:15:46 +00:00

uipc_accf.c

…

uipc_cow.c

Add some FEATURE macros for various features (AUDIT/CAM/IPC/KTR/MAC/NFS/NTP/

2011-02-25 10:11:01 +00:00

uipc_debug.c

…

uipc_domain.c

Catch up with r195837 (2.5 years ago) which renamed net_add_domain() to domain_add().

2012-02-23 17:47:19 +00:00

uipc_mbuf2.c

…

uipc_mbuf.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

uipc_mqueue.c

Use strchr() and strrchr().

2012-01-02 12:12:10 +00:00

uipc_sem.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

uipc_shm.c

Correct an error of omission in the implementation of the truncation

2012-01-08 20:09:26 +00:00

uipc_sockbuf.c

Document a large number of currently undocumented sysctls. While here

2011-12-13 00:38:50 +00:00

uipc_socket.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

uipc_syscalls.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

uipc_usrreq.c

unp_connect() may use a shared lock on the vnode to fetch the socket.

2012-02-21 19:40:13 +00:00

vfs_acl.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

vfs_aio.c

Add 32-bit compat code for AIO kevent flags introduced in revision 230857.

2012-02-05 04:49:31 +00:00

vfs_bio.c

Rename vm_page_set_valid() to vm_page_set_valid_range().

2011-11-30 17:39:00 +00:00

vfs_cache.c

Rename cache_lookup_times() to cache_lookup() and retire the old API and

2012-02-06 17:00:28 +00:00

vfs_cluster.c

Unbreak detection of the async mode for clustered writes after r231075.

2012-02-08 15:07:19 +00:00

vfs_default.c

Existing VOP_VPTOCNP() interface has a fatal flow that is critical for

2011-11-19 07:50:49 +00:00

vfs_export.c

…

vfs_extattr.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

vfs_hash.c

…

vfs_init.c

Modify vfs_register() to use a hash calculation

2011-09-13 21:01:26 +00:00

vfs_lookup.c

Avoid double-unlock or double unreference for ndp->ni_dvp when the vnode dp

2012-01-01 18:45:59 +00:00

vfs_mount.c

Analogous to r230407 a separate path buffer in vfs_mount.c is required

2012-02-05 10:59:50 +00:00

vfs_mountroot.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

vfs_subr.c

Current implementations of sync(2) and syncer vnode fsync() VOP uses

2012-02-06 11:04:36 +00:00

vfs_syscalls.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

vfs_vnops.c

Fix found places where uio_resid is truncated to int.

2012-02-21 01:05:12 +00:00

vnode_if.src

Add 5 spare VOPs as placeholders to avoid breaking the KBI in the future

2012-01-06 20:06:45 +00:00