Commit Graph

83340 Commits

Author SHA1 Message Date
Ruslan Ermilov
e27480d64d mdoc(7) police:
Revert to using the .Tn POSIX and .Tn ANSI instead of \*[Px] and \*[Ai]
strings; using these strings is unsafe in troff mode, as they include a
change in a font size.

Approved by:	re
2002-11-26 17:55:41 +00:00
Robert Watson
fe5f892d58 Unhook LOMAC kernel module since the functionality is now provided by
the smaller, cleaner, less bit-rotted mac_lomac module.

Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:53:27 +00:00
Robert Watson
881a0ee9b5 Update rc scripts to load mac_lomac instead of lomac.
Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:51:03 +00:00
Robert Watson
7496ed81c3 Correct two warnings by staticizing a function and removing an unused
function.

Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:38:25 +00:00
Robert Watson
5773cccf19 Hook up the mac_lomac module build.
Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:35:44 +00:00
Ruslan Ermilov
a8fb4dfabc mdoc(7) police: markup and spelling.
Approved by:	re
2002-11-26 17:34:25 +00:00
Ruslan Ermilov
06e482e60a mdoc(7) police: markup polishing.
Approved by:	re
2002-11-26 17:33:37 +00:00
Robert Watson
c47257370f Hook up kernel options and build information for mac_lomac.
Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:32:39 +00:00
Robert Drehmel
d1989db545 To avoid sleeping with all sorts of resources acquired (the reported
problem was a locked directory vnode), do not give the process a chance
to sleep in state "stopevent" (depends on the S_EXEC bit being set in
p_stops) until most resources have been released again.

Approved by:	re
2002-11-26 17:30:55 +00:00
Robert Watson
db2661ce96 Import an implementation of LOMAC (Low-Watermark Mandatory Access
Control) as a MAC Framework policy module.  Unlike the existing
src/sys/security/lomac implementation, this one has its fingers out
of the kernel lock order and doesn't make use of flags in existing
kernel structures.  This greatly reduces the quantity of replicated
code with src/sys/kern, simplifies the implementation (3000 vs 8500
lines), and correctes a number of known stability problems with
the existing LOMAC implementation, which will be removed.  A bit
more hooking up to do here.

Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:26:06 +00:00
John Baldwin
04f4a16448 If the file descriptors passed into do_dup() are negative, return EBADF
instead of panicing.  Also, perform some of the simpler sanity checks on
the fds before acquiring the filedesc lock.

Approved by:	re
Reported by:	Dan Nelson <dan@emsphone.com> and others
2002-11-26 17:22:15 +00:00
Robert Watson
4d10c0ce5f Un-staticize mac_cred_mmapped_drop_perms() so that it may be used
by policy modules making use of downgrades in the MAC AST event.  This
is required by the mac_lomac port of LOMAC to the MAC Framework.

Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:11:57 +00:00
Bruce A. Mah
229cd60f68 Make GNOME 2 the default version of GNOME that goes on the disc1 package
set.

Requested by:		marcus
Approved by:		re (bmah)
2002-11-26 16:50:52 +00:00
Ruslan Ermilov
de95573725 mdoc(7) police: back out unproved changes from previous revision.
Approved by:	re
2002-11-26 15:34:18 +00:00
Ruslan Ermilov
f2177c5f62 mdoc(7) police:
Restore (once again) my fixes from revision 1.20 that got lost in
revision 1.25 merge.

Approved by:	re
2002-11-26 15:32:04 +00:00
Ruslan Ermilov
203a6d6aa7 mdoc(7) police: laundry.
Approved by:	re
2002-11-26 14:00:39 +00:00
Yaroslav Tykhiy
df86a3fec1 Eliminate references to defunct kernel tunables.
Approved by:	re
PR:		bin/43343
2002-11-26 13:55:50 +00:00
Ruslan Ermilov
bbdca2142f mdoc(7) police: nit.
Approved by:	re
2002-11-26 11:25:04 +00:00
Ruslan Ermilov
8abea92cd2 mdoc(7) police: back out unproved changes in previous revision;
descriptions in the FILES section should be full sentences, as
demonstrated in mdoc(7) and /usr/share/examples/mdoc/.

Approved by:	re
2002-11-26 11:22:59 +00:00
Ruslan Ermilov
5bd97a95a2 mdoc(7) police: markup nits, "The .Nm utility".
Approved by:	re
2002-11-26 11:17:22 +00:00
Ruslan Ermilov
fc978ec46c mdoc(7) police: bump document date, use the canonical option list width,
removed a bunch of extraneous .Pp and .Dq calls.

Approved by:	re
2002-11-26 11:09:27 +00:00
Ruslan Ermilov
c93e83fe80 mdoc(7) police: markup polishing.
Approved by:	re
2002-11-26 11:04:37 +00:00
Ruslan Ermilov
3d0ae25549 mdoc(7) police: markup polishing.
Approved by:	re
2002-11-26 10:57:57 +00:00
Ruslan Ermilov
792c362f9c mdoc(7) police: markup polishing.
Approved by:	re
2002-11-26 10:51:47 +00:00
Udo Erdelhoff
b6c7001dcc Use real filename, not a CVS sub-path. Fix markup
Approved by:	re
2002-11-26 09:29:39 +00:00
Ruslan Ermilov
8573f80562 mdoc(7) police: Nits.
Approved by:	re
2002-11-26 09:05:06 +00:00
Ruslan Ermilov
43e927ec32 NOSHARED is meaningless in the bsd.lib.mk context, so check LDFLAGS
for the -static flag instead when constructing LIBPAM.

(This fixes false warnings from ``make checkdpadd -DNOSHARED'' in
lib/libpam/modules/.)

Submitted by:	bde, ru
Approved by:	re
2002-11-26 09:00:02 +00:00
Hajimu UMEMOTO
3cea219898 compliance with RFC3152.
PR:		standards/45557
Submitted by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
Approved by:	re
2002-11-26 07:55:44 +00:00
Udo Erdelhoff
8d193c05cf MFbed:
hardware/alpha/proc-alpha.sgml	1.45  -> 1.48
relnotes/common/new.sgml	1.454 -> 1.455
2002-11-26 07:15:31 +00:00
Garance A Drosehn
080d74478e Add back the "\ No newline at end of file" marker that is printed when
comparing two files, where only one file is missing the final newline
character.  This undoes revisions 1.3 and 1.4, returning 'diff' to how
it behaved before July 2000.  We can do this now because our version of
'patch' was modified (just before 4.6-release) to understand what to do
with that line.  This marker is the same one generated by 'diff' under
netbsd, openbsd, darwin, and linux (and any OS with "gnu-diff" installed).

Reviewed by:	imp freebsd-standards (back in april)
Approved by:	re (bmah)
MFC after:	1 week
2002-11-25 22:59:52 +00:00
Alan Cox
85e03a7e1e Acquire and release the page queues lock around calls to pmap_protect()
because it updates flags within the vm page.

Approved by:	re (blanket)
2002-11-25 22:00:31 +00:00
John Baldwin
8745ec57d0 - Assume a bus number of zero if evaluating _BBN fails, not if it succeeds.
This was effectively rendering _BBN useless.
- Cleanup handling of the busok variable a bit.

Submitted by:	marcel (1)
Approved by:	re (rwatson)
2002-11-25 21:55:04 +00:00
John Baldwin
1bbf246462 Fix a couple of bugs in host_pcib_get_busno():
- If a PCI device is not present, then a 32-bit read_config() is going to
  return 0xffffffff not 0xffff.
- For the 82454NX chipset, the MIOC that we read the bus numbers of the
  various host-PCI bridges from is at function (slot) 0x10 not 0x0.

Approved by:	re (rwatson)
2002-11-25 21:53:14 +00:00
Bruce A. Mah
9ff4a5cf37 New release note: ICMP source quench behavior change.
Updated release note:  Heimdal 0.5.1.
2002-11-25 21:48:15 +00:00
Giorgos Keramidas
8b614cd40e 5.0 is a release, the `series of release' is called 5.X
Approved by:	re (bmah)
2002-11-25 21:14:16 +00:00
Bruce A. Mah
1b938d0980 In several instances, adjacent, related release notes were combined.
A useless entry was removed, as per its comment.

Fixed a number of typos and grammos.

Old (pre-4.6) security advisories were marked as historic.  Hyperlinks
were removed from these release notes to work around a buglet in
footnote numbering for printed output.  These changes eliminated three
pages of only marginally-useful utility.

Clarify a note on procfs(5) mounts.

The games/freebsd-games port now exists, so refer to it when talking
about the removal of the traditional BSD games.

lukemftpd was deactivated, so remove its release note.

Add text on the demise of pkg_version -c.

Approved by:	re (implicitly)
2002-11-25 21:12:52 +00:00
Luigi Rizzo
1efbdcd10f Fix IFF_ALLMULTI handling.
Reviewed by: pdeuskar (maintainer)
Approved by: re
2002-11-25 20:00:13 +00:00
Luigi Rizzo
d535facffe Add polling support to the "em" driver.
Reviewed by: pdeuskar (maintainer)
Approved by: re
2002-11-25 19:56:16 +00:00
Nate Lawson
5cc6190e87 Add a DPADD section to fix 'make checkdpadd'
Submitted by:	ru
Approved by:	re (previously)
2002-11-25 19:29:05 +00:00
Nate Lawson
37dce299a6 Remove unnecessary includes and add sys/{lock,mutex}.h
Submitted by:	bde
Approved by:	re (previously)
2002-11-25 19:28:05 +00:00
Luigi Rizzo
5d6dfbbb5e Fix handling of IFF_ALLMULTI. The same bug in various forms affects
the following drivers:

    dc mn sf sk ste ti tl xl an bge em gem gx ie lge sr aue cue kue wi xe

Approved by: re
2002-11-25 19:28:01 +00:00
Nate Lawson
33893c674d Hook the targ.4 manpage into the build
Submitted by:	Attila Nagy <bra@fsn.hu>
Approved by:	re (previously)
2002-11-25 18:31:07 +00:00
Cameron Grant
67beb5a5c8 various fixes to eliminate locking warnings
Approved by:	re
Reviewed by:	orion
2002-11-25 17:17:43 +00:00
Cameron Grant
68f4e7f1d3 various fixes to eliminate locking warnings
Approved by:	re
Reviewed by:	orion
2002-11-25 17:07:33 +00:00
Cameron Grant
0586ff0d84 if the list of supported formats is empty, fail the attach instead of
panicing later.  this is a band-aid pending further investigation.

MFC After:	7 days
Approved by:	re
2002-11-25 17:03:39 +00:00
Ruslan Ermilov
35cf61f671 mdoc(7) police: Fixed markup now that it was taken out of vendor branch.
Approved by:	re
2002-11-25 16:23:03 +00:00
Ruslan Ermilov
3706a3a87f mdoc(7) police: markup, spelling.
Also fixed a critical bug made in revision 1.62 by phk@.
2002-11-25 16:01:28 +00:00
Ruslan Ermilov
742ec8caad mdoc(7) police: Added missing markup bit.
Approved by:	re
2002-11-25 15:43:18 +00:00
Ruslan Ermilov
d939fc70a7 mdoc(7) police:
Properly sort options, spell "file system" correctly, expand contraction.

Catch up to the src/etc/syslog.conf,v 1.23 change: ftpd(8) session logs
are now by default get logged to /var/log/xferlog.

Approved by:	re
2002-11-25 15:20:06 +00:00
Ruslan Ermilov
2267d53b43 mdoc(7) police: In DESCRIPTION, list the options in pure alphabetical
order, as required by style(9).  Document the effect of the -f option
on exit status.  Fixed some spacing.

Submitted by:	bde
Approved by:	re
2002-11-25 14:18:42 +00:00