Rick Macklem 04cb0c38eb Add a cap on credential lifetime for Kerberized NFS. ... The kernel RPCSEC_GSS code sets the credential (called a client) lifetime to the lifetime of the Kerberos ticket, which is typically several hours. As such, when a user's credentials change such as being added to a new group, it can take several hours for this change to be recognized by the NFS server. This patch adds a sysctl called kern.rpc.gss.lifetime_max which can be set by a sysadmin to put a cap on the time to expire for the credentials, so that a sysadmin can reduce the timeout. It also fixes a bug, where time_uptime is added twice when GSS_C_INDEFINITE is returned for a lifetime. This has no effect in practice, sine Kerberos never does this. Tested by: pen@lysator.liu.se PR: 242132 Submitted by: pen@lysator.liu.se MFC after: 2 weeks		2019-11-28 02:05:31 +00:00
..
amd64	amd64: assert that EARLY_COUNTER does not corrupt memory.	2019-11-24 19:02:13 +00:00
arm	When doing ARM stack unwinding as part of stack_save(9), do not search	2019-11-24 21:08:56 +00:00
arm64	There is no reason why we need to pin the underlying thread to its current	2019-11-27 20:33:49 +00:00
bsm	Jail and capability mode for shm_rename; add audit support for shm_rename	2019-11-18 13:31:16 +00:00
cam	Do not retry long ready waits if previous gave nothing.	2019-11-22 21:31:59 +00:00
cddl	MFV r354383: 10592 misc. metaslab and vdev related ZoL bug fixes	2019-11-21 13:35:43 +00:00
compat	Linux epoll: Allow passing of any negative timeout value to epoll_wait	2019-11-24 20:51:09 +00:00
conf	stop building arm LINT-V5 kernel	2019-11-26 20:46:20 +00:00
contrib	Include fin, the packet information structure (fr_info_t), in the	2019-11-28 00:46:33 +00:00
crypto	Fix the armv8 crypto driver after r354170.	2019-10-30 10:41:10 +00:00
ddb	ddb(4): Add some support for lexing IPv6 addresses	2019-09-09 16:32:23 +00:00
dev	iwm(4): Remove _mvm from the namespace.	2019-11-27 20:32:53 +00:00
dts	dtso: allwinner: Add an overlay for H3 thermal node	2019-08-24 13:26:34 +00:00
fs	tmpfs: resolve deadlock between rename and unmount.	2019-11-24 19:06:38 +00:00
gdb	gdb(4): Implement support for NoAckMode	2019-10-17 22:37:25 +00:00
geom	We don't even need Giant here. It isn't protecting anything internal	2019-11-23 23:44:00 +00:00
gnu	arm: dts: ti: Fix mmc3 instance by setting it to disabled	2019-10-07 08:11:49 +00:00
i386	Convert in-tree sysent targets to use new makesyscalls.lua	2019-11-18 23:28:23 +00:00
isa
kern	Requested and tested by: kevans	2019-11-27 20:33:53 +00:00
kgssapi	Stop using des_cblock * for arguments to DES functions.	2019-08-26 17:25:07 +00:00
libkern	Port the NetBSD KCSAN runtime to FreeBSD.	2019-11-21 11:22:08 +00:00
mips	Remove two obsolete comments that reference splhigh/splx.	2019-11-21 18:49:54 +00:00
modules	NIC KTLS for Chelsio T6 adapters.	2019-11-21 19:30:31 +00:00
net	Allow kernel to compile without BPF.	2019-11-24 23:21:47 +00:00
net80211	Don't use if_maddr_rlock() in 802.11, use epoch(9) directly instead.	2019-10-10 23:55:33 +00:00
netgraph	Fix regression from r353026. Pointer was increased instead of value	2019-11-02 03:09:17 +00:00
netinet	Plug two mbuf leaks during INIT-ACK handling.	2019-11-27 19:32:29 +00:00
netinet6	in6_joingroup_locked: need if_addr_lock around in6m_disconnect_locked	2019-11-25 22:25:10 +00:00
netipsec	Add support for dummy ESP packets with next header field equal to	2019-11-27 10:24:46 +00:00
netpfil	pf: Add endline to all DPFPRINTF()	2019-11-24 13:53:36 +00:00
netsmb	Stop using des_cblock * for arguments to DES functions.	2019-08-26 17:25:07 +00:00
nfs
nfsclient
nfsserver
nlm
ofed	Prevent potential underflow in ibcore.	2019-11-15 11:46:53 +00:00
opencrypto	kTLS support for TLS 1.3	2019-09-27 19:17:40 +00:00
powerpc	[PPC64] Enable phyp vty use as a GDB DBGPORT	2019-11-25 16:30:38 +00:00
riscv	RISC-V: busdma_bounce: fix BUS_DMA_ALLOCNOW for non-paged aligned sizes	2019-11-16 01:25:51 +00:00
rpc	Add a cap on credential lifetime for Kerberized NFS.	2019-11-28 02:05:31 +00:00
security	Instead of looking up a predecessor or successor to the current map	2019-11-20 16:06:48 +00:00
sparc64	Set MALLOC_DEBUG_MAXZONES=1 in GENERIC-NODEBUG configurations.	2019-11-18 20:03:28 +00:00
sys	witness: sleepable rm locks are not sleepable in read mode	2019-11-27 01:54:39 +00:00
teken	Adjust teken to allow build as part of loader	2019-09-05 18:07:40 +00:00
tests
tools	Add makesyscalls.lua, a rewrite of makesyscalls.sh	2019-11-17 14:08:19 +00:00
ufs	As part of creating a snapshot, set fs->fs_fmod to 0 in the snapshot image	2019-11-28 00:37:43 +00:00
vm	Implement a sysctl tree for uma zones to assist in debugging and provide	2019-11-28 00:19:09 +00:00
x86	bus_dma_dmar_load_ident(9): load identity mapping into the map.	2019-11-27 19:57:17 +00:00
xdr
xen
Makefile