d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
65,144 Commits 4 Branches 49 Tags 2 GiB
3301500c80
Commit Graph

65144 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Luigi Rizzo
04d4d7cf05 Add entries for vmware interfaces. 2001-09-27 16:48:13 +00:00
Luigi Rizzo
e8b19bc63e Enable the use of wildcards in the #ethertable section of 
/etc/hosts to map MAC addresses to hostnames.

Main use is to get addresses for vmware interfaces.
 2001-09-27 16:47:45 +00:00
Warner Losh
5119d237e5 Add note about buildworld being fixed. 2001-09-27 15:43:04 +00:00
Luigi Rizzo
88f6feee74 Fix typo in a comment. 
MFC-after: 3 days
 2001-09-27 12:01:57 +00:00
Luigi Rizzo
832d32eb5b Remove unused (and duplicate) struct ip_opts which is never used, 
not referenced in Stevens, and does not compile with g++.
There is an equivalent structure, struct ipoption in ip_var.h
which is actually used in various parts of the kernel, and also referenced
in Stevens.

Bill Fenner also says:
... if you want the trivia, struct ip_opts was introduced
in in.h SCCS revision 7.9, on 6/28/1990, by Mike Karels.
struct ipoption was introduced in ip_var.h SCCS revision 6.5,
on 9/16/1985, by... Mike Karels.

MFC-after: 3 days
 2001-09-27 11:53:22 +00:00
Murray Stokely
fd197202f9 Update a comment to reflect the param.c -> subr_param.c move. 
PR:		kern/30766
Submitted by:	Kevin Way <kevin.way@overtone.org>
 2001-09-27 09:58:30 +00:00
Julian Elischer
f1f9d42a53 Quick hack to print out the non-standard pppoe used by 3com 2001-09-27 08:02:27 +00:00
Murray Stokely
37068be4f9 Be consistent with the way we talk about sysctl values. 
PR:		docs/30343
Submitted by:	Giorgos Keramidas <charon@labs.gr>
 2001-09-27 07:26:16 +00:00
Alfred Perlstein
e93d0738f5 This driver can talk to the Rio600 as well, make it happen. 
Hardware (and patience) provided by: Andrew J Caines <A.J.Caines@halplant.com>
 2001-09-27 06:01:20 +00:00
Brooks Davis
9658e15840 NULL commit due to misunderstanding "cvs commit -m <blah>". The 
previous log message "/home/brooks/ng_gif.message" should have read:

Add a pair of new netgraph nodes.  The ng_gif node is like ng_ether
except that it works on gif interfaces.  The ng_gif_demux node attaches
to an ng_gif node to allow separate processing or discarding of
different types of encapsulated traffic.
 2001-09-27 03:14:17 +00:00
Jonathan Lemon
fe16674a74 Return EINVAL if the passed intr is out of bounds. 
PR: 30857
Submitted by: David Xu <davidx@viasoft.com.cn>
MFC: 1 week
 2001-09-27 02:46:47 +00:00
Peter Wemm
ea7fe289fe Tidy up nfsm_build usage. This is only partially finished. 2001-09-27 02:33:36 +00:00
Murray Stokely
a43a70d6c6 Tip Correction : s/seconds/minutes/ 
PR:		docs/30844
Submitted by:	Andrew <andrew@ugh.net.au>
 2001-09-27 00:43:28 +00:00
Brooks Davis
cf776d8152 The initial commit contained an error in the license, this is the 
correct one.
 2001-09-27 00:04:29 +00:00
Peter Wemm
c7f9a7e8ae Oops, forgot to rm this last time. 2001-09-26 23:57:25 +00:00
Brooks Davis
94408d94c3 /home/brooks/ng_gif.message 2001-09-26 23:50:17 +00:00
Brooks Davis
20af0ffaa1 Use LIST_ macros instead of TAILQ_ macros to be more like NetBSD. 
Obtained from:	NetBSD
 2001-09-26 23:37:15 +00:00
Brooks Davis
efacde1bcc The number of ccd(4) devices is no longer set at compile time so stop 
trying to do it in the examples and config files.
 2001-09-26 22:41:02 +00:00
Brooks Davis
2862fc7a49 Call securelevel_gt with a credential. Also, s/p/td->td_proc/. 
Submitted by:	LINT
 2001-09-26 22:02:01 +00:00
Brooks Davis
49c024e373 Include sys/proc.h for the definition of securelevel_ge(). 
Submitted by:	LINT
 2001-09-26 21:53:20 +00:00
David E. O'Brien
7d437141ba Unconditionally use basename.c source vs. only doing this if the libc we 
are linking against does not have basename().  There is a buffer overflow
bug in lib/libc/gen/basename.c rev 1.1.  There is no way for us to test
what revision of basename() we have in libc, thus this change.

Requested by:	ru
 2001-09-26 20:51:51 +00:00
Robert Watson
57358f1e93 o Re-enable support of system file flags in jail() by adding back the 
PRISON_ROOT to the suser_xxx() check.  Since securelevels may now
  be raised in specific jails, use of system flags can still be
  restricted in jail(), but in a more configurable way.
o Users of jail() expecting system flags (such as schg) to restrict
  jail()'s should be sure to set the securelevel appropriately in
  jail()'s.
o This fixes activities involving automated system flag removal in
  jail(), including installkernel and friends.

Obtained from:	TrustedBSD Project
 2001-09-26 20:44:41 +00:00
Robert Watson
87fce2bb96 o When performing a securelevel check as part of securelevel_ge() or 
securelevel_gt(), determine first if a local securelevel exists --
  if so, perform the check based on imax(local, global).  Otherwise,
  simply use the global value.
o Note: even though local securelevels might lag below the global one,
  if the global value is updated to higher than local values, maximum
  will still be used, making the global dominant even if there is local
  lag.

Obtained from:	TrustedBSD Project
 2001-09-26 20:41:48 +00:00
Robert Watson
8a528812a0 o Modify kern.securelevel MIB entry to return a local securelevel, if 
one is present in the current jail, otherwise, to return the global
  securelevel.
o If the securelevel is being updated, require that it be greater than
  the maximum of local and global, if a local securelevel exists,
  otherwise, just maximum of the global.  If there is a local
  securelevel, update the local one instead of the global one.
o Note: this does allow local securelevels to lag behind the global one
  as long as the local one is not updated following a global increase.

Obtained from:	TrustedBSD Project
 2001-09-26 20:39:48 +00:00
Robert Watson
567931c8f6 o Initialize per-jail securelevel from global securelevel as part of 
jail creation.

Obtained from:	TrustedBSD Project
 2001-09-26 20:37:15 +00:00
Robert Watson
bda63e26d8 o Introduce pr_securelevel, which holds a per-jail securelevel. 
Obtained from:	TrustedBSD Project
 2001-09-26 20:36:08 +00:00
Robert Watson
6748bcc51e o Modify ufs_setattr() so that it uses securelevel_gt() instead of 
direct variable access.

Obtained from:	TrustedBSD Project
 2001-09-26 20:31:37 +00:00
Robert Watson
8c5d4fe829 o Modify access control checks in mmap() to use securelevel_gt() instead 
of direct variable access.

Obtained from:	TrustedBSD Project
 2001-09-26 20:29:39 +00:00
Robert Watson
3026f29e34 o securelevel_gt() patches came from pre-KSE alpha -- this revision 
fixes the compile and uses td->td_proc instead of p.

Obtained from:	TrustedBSD Project
 2001-09-26 20:27:23 +00:00
Robert Watson
e8a340cd9a o Modify pc98 syscons code to use securelevel_gt() instead of 
direct variable checks.  (Yet another API to perform direct hardware I/O).

Obtained from:	TrustedBSD Project
 2001-09-26 20:26:32 +00:00
Robert Watson
b9c6f21493 o Modify the access control checks for the ia64 /dev/mem (and friends) 
to use securelevel_gt() instead of direct variable checks.

Obtained from:	TrustedBSD Project
 2001-09-26 20:24:23 +00:00
Jeroen Ruigrok van der Werven
54045486e0 Add ERRORS section. 
Mention thread safety and async-cancel safety status [not].
Add standards compliancy references.
Note strtol() is preferred over atoi().

MFC after:	2 weeks
 2001-09-26 20:22:44 +00:00
Robert Watson
41c42188c8 o Modify access control checks in linux_iopl() to use securelevel_gt() 
rather than direct variable checks.  (Yet another API to perform
  direct hardware I/O.)

Obtained from:	TrustedBSD Project
 2001-09-26 20:22:38 +00:00
Robert Watson
ce3a32b6da o Modify pcvt ioctl() security checks to use securelevel_gt() instead 
of direct securelevel variable checks.  (Yet another API to perform
  direct hardware I/O using KDENABIO.)

Obtained from:	TrustedBSD Project
 2001-09-26 20:21:28 +00:00
Robert Watson
9997f52470 o Modify spigot_open() to use securelevel_gt() instead of direct 
securelevel variable checks.

Obtained from:	TrustedBSD Project
 2001-09-26 20:20:05 +00:00
Robert Watson
f86cf763ef o Modify generic specfs device open access control checks to use 
securelevel_ge() instead of direct securelevel variable checks.

Obtained from:	TrustedBSD Project
 2001-09-26 20:18:26 +00:00
Robert Watson
8c7cc7234e o Modify syscons ioctl securelevel checks to use securelevel_gt() (oh look, 
yet another API to do direct hardware I/O access.)

Obtained from:	TrustedBSD Project
 2001-09-26 20:17:15 +00:00
Robert Watson
19f1565901 o Modify open() and close() for /dev/random to use securelevel_gt() instead 
of direct securelevel variable checks.

Obtained from:	TrustedBSD Project
 2001-09-26 20:15:42 +00:00
Robert Watson
8002488bd9 o Modify access control code for /dev/pci device to use securelevel_gt() 
instead of direct securelevel variable test.

Obtained from:	TrustedBSD Project
 2001-09-26 20:14:03 +00:00
Robert Watson
f7312ca2a9 o Modify access control code for the CAM SCSI pass-through device to 
use securelevel_gt() instead of direct securelevel variable test.

Obtained from:	TrustedBSD Project
 2001-09-26 20:13:16 +00:00
Jeroen Ruigrok van der Werven
5578cfa2fa Be explicit about the POSIX version it conforms to [in this case 1990]. 
Put the error comment under the more appropriate ERRORS section.
 2001-09-26 20:10:10 +00:00
Robert Watson
330e78897a o Modify i386_set_ioperm() to use securelevel_gt() instead of 
direct securelevel variable checks.

Obtained from:	TrustedBSD Project
 2001-09-26 20:08:15 +00:00
Robert Watson
1851c8fd41 o Modify device open access control for /dev/mem and friends to use 
securelevel_gt() instead of direct securelevel variable checks.

Obtained from:	TrustedBSD Project
 2001-09-26 20:08:02 +00:00
Robert Watson
785f9ffca3 o Modify IPFW and DUMMYNET administrative setsockopt() calls to use 
securelevel_gt() to check the securelevel, rather than direct access
  to the securelevel variable.

Obtained from:	TrustedBSD Project
 2001-09-26 19:58:29 +00:00
Robert Watson
d501d04b9e o Modify static settime() to accept the proc * for the process requesting 
a time change, and callers so that they provide td->td_proc.
o Modify settime() to use securevel_gt() for securelevel checking.

Obtained from:	TrustedBSD Project
 2001-09-26 19:53:57 +00:00
Robert Watson
c2f413af19 o Modify sysctl access control check to use securelevel_gt(), and 
clarify sysctl access control logic.

Obtained from:	TrustedBSD Project
 2001-09-26 19:51:25 +00:00
Jeroen Ruigrok van der Werven
99e8131545 Change standards compliancy order so that C and POSIX are grouped. 2001-09-26 19:42:39 +00:00
Matthew Dillon
46cad5761c Enable vmiodirenable by default. Remove incorrect comment from sysctl.conf. 
MFC after:	1 week
 2001-09-26 19:35:04 +00:00
Guido van Rooij
775b007440 Redo patch in 1.22 such that the header printing is reset when the 
process gets a SIGCONT

Reviewed by:	kris@freebs.org
MFC after:	2 weeks
 2001-09-26 19:35:03 +00:00
Doug Rabson
fa129a40db Tidy up and fix a runtime warning. 2001-09-26 16:15:20 +00:00