d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
57358f1e93
freebsd-skq/sys
History
Robert Watson 57358f1e93 o Re-enable support of system file flags in jail() by adding back the 
PRISON_ROOT to the suser_xxx() check.  Since securelevels may now
  be raised in specific jails, use of system flags can still be
  restricted in jail(), but in a more configurable way.
o Users of jail() expecting system flags (such as schg) to restrict
  jail()'s should be sure to set the securelevel appropriately in
  jail()'s.
o This fixes activities involving automated system flag removal in
  jail(), including installkernel and friends.

Obtained from:	TrustedBSD Project
2001-09-26 20:44:41 +00:00
..
alpha o securelevel_gt() patches came from pre-KSE alpha -- this revision 2001-09-26 20:27:23 +00:00
amd64 o Modify i386_set_ioperm() to use securelevel_gt() instead of 2001-09-26 20:08:15 +00:00
arm o Remove some GCCisms in src/powerpc/include/endian.h. 2001-08-30 00:04:19 +00:00
boot Make this 'make obj' safe 2001-09-26 00:13:08 +00:00
cam o Modify access control code for the CAM SCSI pass-through device to 2001-09-26 20:13:16 +00:00
coda Use the passed in thread to selrecord() instead of curthread. 2001-09-21 22:26:51 +00:00
compat The arg parameter is passed by value in Linux, but not in FreeBSD. 2001-09-26 05:39:59 +00:00
conf The faith(4) device is no longer a count device so don't specify a count. 2001-09-25 18:56:40 +00:00
contrib IPFilter munges multicast address packets on the loopback interface. 2001-09-12 22:06:36 +00:00
crypto properly check DES weak key. KAME PR 363. 2001-07-03 17:46:48 +00:00
ddb Fill out some gaps in ia64 DDB support. This involves generalising DDB's 2001-09-15 11:06:07 +00:00
dev o Modify syscons ioctl securelevel checks to use securelevel_gt() (oh look, 2001-09-26 20:17:15 +00:00
fs o Modify generic specfs device open access control checks to use 2001-09-26 20:18:26 +00:00
geom KSE Milestone 2 2001-09-12 08:38:13 +00:00
gnu The addition of i_dirhash to struct inode pushed RELENG_4's 2001-09-24 18:29:20 +00:00
i4b KSE Milestone 2 2001-09-12 08:38:13 +00:00
i386 o Modify access control checks in linux_iopl() to use securelevel_gt() 2001-09-26 20:22:38 +00:00
ia64 o Modify the access control checks for the ia64 /dev/mem (and friends) 2001-09-26 20:24:23 +00:00
isa Yet another turn of workaround for psm/ACPI/PnP BIOS 2001-09-25 16:59:28 +00:00
isofs/cd9660 KSE Milestone 2 2001-09-12 08:38:13 +00:00
kern o When performing a securelevel check as part of securelevel_ge() or 2001-09-26 20:41:48 +00:00
libkern Fix a warning in bsearch(). Like index() etc, it de-qualifies its 2001-09-10 10:33:46 +00:00
modules Make faith loadable, unloadable, and clonable. 2001-09-25 18:40:52 +00:00
net Make faith loadable, unloadable, and clonable. 2001-09-25 18:40:52 +00:00
netatalk KSE Milestone 2 2001-09-12 08:38:13 +00:00
netatm KSE Milestone 2 2001-09-12 08:38:13 +00:00
netgraph KSE Milestone 2 2001-09-12 08:38:13 +00:00
netinet o Modify IPFW and DUMMYNET administrative setsockopt() calls to use 2001-09-26 19:58:29 +00:00
netinet6 Make faith loadable, unloadable, and clonable. 2001-09-25 18:40:52 +00:00
netipx KSE Milestone 2 2001-09-12 08:38:13 +00:00
netkey KSE Milestone 2 2001-09-12 08:38:13 +00:00
netnatm Change a couple of M_WAITOKs used in M_PREPEND() to M_TRYWAITs, which 2001-04-05 04:20:48 +00:00
netncp KSE Milestone 2 2001-09-12 08:38:13 +00:00
netns
netsmb Map errdos:67 to the ENOENT. 2001-08-21 09:16:57 +00:00
nfs Cleanup and split of nfs client and server code. 2001-09-18 23:32:09 +00:00
nfsclient Add a missing dereference level. This caused nfsm_postop_attr_xx() 2001-09-25 00:00:33 +00:00
nfsserver Wrap a module around the init code so that we have somethign do do a 2001-09-20 05:13:43 +00:00
pc98 o Modify pc98 syscons code to use securelevel_gt() instead of 2001-09-26 20:26:32 +00:00
pccard Fix, I think, The second slot problem with Cirrus Logic PD6729/30 parts: 2001-09-21 06:45:35 +00:00
pci Implement TCP/IP checksum off-loading on receive. Announce 2001-09-23 05:13:12 +00:00
posix4 KSE Milestone 2 2001-09-12 08:38:13 +00:00
powerpc Catch up to recent removal of curpcb from globals.h. 2001-09-24 02:58:49 +00:00
rpc Bring in a hybrid of SunSoft's transport-independent RPC (TI-RPC) and 2001-03-19 12:50:13 +00:00
sparc64 + Fix misplacement of `txp' 2001-09-24 03:23:48 +00:00
svr4
sys o Introduce pr_securelevel, which holds a per-jail securelevel. 2001-09-26 20:36:08 +00:00
tools KSE Milestone 2 2001-09-12 08:38:13 +00:00
ufs o Re-enable support of system file flags in jail() by adding back the 2001-09-26 20:44:41 +00:00
vm o Modify access control checks in mmap() to use securelevel_gt() instead 2001-09-26 20:29:39 +00:00
Makefile