Jilles Tjoelker 529411c369 Disallow cap_enter() in freebsd32 compatibility mode. ...

The freebsd32 compatibility mode (for running 32-bit binaries on 64-bit
kernels) does not currently allow any system calls in capability mode, but
still permits cap_enter(). As a result, 32-bit binaries on 64-bit kernels
that use capability mode do not work (they crash after being disallowed to
call sys_exit()). Affected binaries include dhclient and uniq. The latter's
crashes cause obscure build failures.

This commit makes freebsd32 cap_enter() fail with [ENOSYS], as if capability
mode was not compiled in. Applications deal with this by doing their work
without capability mode.

This commit does not fix the uncommon situation where a 64-bit process
enters capability mode and then executes a 32-bit binary using fexecve().

This commit should be reverted when allowing the necessary freebsd32 system
calls in capability mode.

Reviewed by:	pjd
Approved by:	re (hrs)

2013-09-17 20:48:19 +00:00

..

amd64

Hide TSC-deadline APIC timer support from guests. This mode

2013-09-17 17:56:53 +00:00

arm

Fix GCC build error when building for ARMv6

2013-09-16 10:46:58 +00:00

boot

Initial support for the Digi ConnectCore(c) i.MX53 / Wi-i.MX53 boards.

2013-09-01 20:15:35 +00:00

bsm

Change the cap_rights_t type from uint64_t to a structure that we can extend

2013-09-05 00:09:56 +00:00

cam

Bring in the new iSCSI target and initiator.

2013-09-14 15:29:06 +00:00

cddl

MFV r247844 (illumos-gate 13975:ef6409bc370f)

2013-09-10 01:46:47 +00:00

compat

Disallow cap_enter() in freebsd32 compatibility mode.

2013-09-17 20:48:19 +00:00

conf

Merge in support for PAPR-compliant (Power Architecture Platform

2013-09-17 17:37:04 +00:00

contrib

Fix !INET6 build.

2013-09-07 09:47:18 +00:00

crypto

Use the fact that the AES-NI instructions can be pipelined to improve

2013-09-03 18:31:23 +00:00

ddb

…

dev

Fix a typo when accounting for tx_broadcast statistics.

2013-09-17 18:46:10 +00:00

fs

Fix the length calculation for the final block of a sendfile(2)

2013-09-10 10:05:59 +00:00

gdb

rename scheduler->swapper and SI_SUB_RUN_SCHEDULER->SI_SUB_LAST

2013-07-24 09:45:31 +00:00

geom

Remove stub implementation.

2013-09-05 09:44:09 +00:00

gnu/fs/reiserfs

…

i386

Add vmx(4) to i386 and amd64 GENERIC

2013-09-17 01:54:13 +00:00

ia64

Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping use

2013-09-09 18:11:59 +00:00

isa

…

kern

Fix assertion in sendfile_readpage() to assert only the validity

2013-09-17 06:37:21 +00:00

kgssapi

Add support for host-based (Kerberos 5 service principal) initiator

2013-07-09 01:05:28 +00:00

libkern

Fix watchdog pretimeout.

2013-07-27 20:47:01 +00:00

mips

We have grown a bit too big lately. Shrinking the kernel for TP-Link

2013-09-17 20:33:42 +00:00

modules

Remove zero-copy sockets code. It only worked for anonymous memory,

2013-09-16 06:25:54 +00:00

net

Clean up SIOCSIFDSTADDR usage from ifnet drivers. The ioctl itself is

2013-09-11 09:19:44 +00:00

net80211

Create a new function to complete 802.11 mbuf transmission.

2013-08-27 14:37:13 +00:00

netatalk

Add const qualifier to the dst parameter of the ifnet if_output method.

2013-04-26 12:50:32 +00:00

netgraph

MFC

2013-09-06 17:42:12 +00:00

netinet

Unregister inet/inet6 pfil hooks on vnet destroy.

2013-09-13 18:45:10 +00:00

netinet6

Unregister inet/inet6 pfil hooks on vnet destroy.

2013-09-13 18:45:10 +00:00

netipsec

Remove most of the remaining sysctl name list macros. They were only

2013-08-26 18:16:05 +00:00

netipx

…

netnatm

Fix the length calculation for the final block of a sendfile(2)

2013-09-10 10:05:59 +00:00

netpfil

Merge 1.12 of pf_lb.c from OpenBSD, with some changes. Original commit:

2013-09-02 10:14:25 +00:00

netsmb

Change the cap_rights_t type from uint64_t to a structure that we can extend

2013-09-05 00:09:56 +00:00

nfs

Changes to allow using BOOTP_NFSROOT and mounting an nfs root filesystem

2013-07-31 19:14:00 +00:00

nfsclient

A problem with the old NFS client where large writes to large files

2013-07-04 00:54:23 +00:00

nfsserver

Change the cap_rights_t type from uint64_t to a structure that we can extend

2013-09-05 00:09:56 +00:00

nlm

Intermittent crashes in the NLM (rpc.lockd) code during system

2013-09-06 23:14:31 +00:00

ofed

Handle cases where capability rights are not provided.

2013-09-05 11:58:12 +00:00

opencrypto

Make sendfile() a method in the struct fileops. Currently only

2013-08-15 07:54:31 +00:00

pc98

MFi386: r254619

2013-08-22 16:39:59 +00:00

pci

Update PCI drivers to no longer look at the MEMIO-enabled bit in the PCI

2013-08-12 23:30:01 +00:00

powerpc

Merge in support for PAPR-compliant (Power Architecture Platform

2013-09-17 17:37:04 +00:00

rpc

It was reported via email that the cu_sent field used by the

2013-09-06 02:34:34 +00:00

security

- Use make_dev_credf(MAKEDEV_REF) instead of the race-prone make_dev()+

2013-09-07 13:45:44 +00:00

sparc64

Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping use

2013-09-09 18:11:59 +00:00

sys

Remove zero-copy sockets code. It only worked for anonymous memory,

2013-09-16 06:25:54 +00:00

teken

…

tools

…

ufs

Change the cap_rights_t type from uint64_t to a structure that we can extend

2013-09-05 00:09:56 +00:00

vm

PG_SLAB no longer serves a useful purpose, since m->object is no

2013-09-17 07:35:26 +00:00

x86

Implement PV IPIs for PVHVM guests and further converge PV and HVM

2013-09-06 22:17:02 +00:00

xdr

…

xen

Implement PV IPIs for PVHVM guests and further converge PV and HVM

2013-09-06 22:17:02 +00:00

Makefile

…