Steve Wills a4aaba3b0a Add security.bsd.see_jail_proc ...

Add security.bsd.see_jail_proc sysctl to hide jail processes from non-root
users

Reviewed by:	jamie
Approved by:	allanjude
Relnotes:	yes
Differential Revision:	https://reviews.freebsd.org/D10770

2017-05-23 16:59:24 +00:00

..

bus_if.m

"Buses" is the preferred plural of "bus"

2017-01-15 17:54:01 +00:00

capabilities.conf

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

clock_if.m

…

cpufreq_if.m

…

device_if.m

Import the 'iflib' API library for network drivers. From the author:

2016-05-18 04:35:58 +00:00

genassym.sh

Don't prefix zero with 0x in assym.s.

2017-04-13 15:43:44 +00:00

imgact_aout.c

Implement vsyscall hack. Prior to 2.13 glibc uses vsyscall

2016-01-09 20:18:53 +00:00

imgact_binmisc.c

tighten buffer bounds in imgact_binmisc_populate_interp

2017-03-21 18:02:14 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Add support for capturing 'struct ptrace_lwpinfo' for signals

2017-03-30 18:21:36 +00:00

imgact_gzip.c

…

imgact_shell.c

…

inflate.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

init_main.c

Bump struct thread alignment to 32.

2017-02-07 17:03:22 +00:00

init_sysent.c

Regen.

2017-05-23 09:30:42 +00:00

kern_acct.c

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

kern_alq.c

Use SI_SUB_LAST instead of SI_SUB_SMP as the "catch-all" subsystem.

2016-03-11 23:18:06 +00:00

kern_clock.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

kern_clocksource.c

Remove cpu_deepest_sleep variable.

2017-02-24 16:11:55 +00:00

kern_condvar.c

Introduce SCHEDULER_STOPPED_TD for use when the thread pointer was already read

2017-02-17 06:45:04 +00:00

kern_conf.c

Undo r309891. Konstantin is right in that this condition normally

2016-12-12 19:11:04 +00:00

kern_cons.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

kern_context.c

…

kern_cpu.c

Add an EARLY_AP_STARTUP option to start APs earlier during boot.

2016-05-14 18:22:52 +00:00

kern_cpuset.c

Extend cpuset_get/setaffinity() APIs

2017-05-03 18:41:08 +00:00

kern_ctf.c

Fix improper use of "its".

2016-11-08 23:59:41 +00:00

kern_descrip.c

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

kern_dtrace.c

…

kern_dump.c

Add support for encrypted kernel crash dumps.

2016-12-10 16:20:39 +00:00

kern_environment.c

Create wrappers for uint64_t and int64_t for the tunables. While not

2016-04-15 03:09:55 +00:00

kern_et.c

Add labels to sysctls related to clocks.

2016-12-14 12:56:58 +00:00

kern_event.c

Use designated initializers for kevent_copyops.

2017-03-14 09:25:01 +00:00

kern_exec.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

kern_exit.c

Avoid reusing p_ksi while it is on queue.

2017-03-12 13:58:51 +00:00

kern_fail.c

Avoid open-coding PRI_UNCHANGED.

2017-05-18 18:24:11 +00:00

kern_ffclock.c

kernel: use our nitems() macro when it is available through param.h.

2016-04-19 23:48:27 +00:00

kern_fork.c

- Remove 'struct vmmeter' from 'struct pcpu', leaving only global vmmeter

2017-04-17 17:34:47 +00:00

kern_gzio.c

…

kern_hhook.c

Get closer to a VIMAGE network stack teardown from top to bottom rather

2016-06-21 13:48:49 +00:00

kern_idle.c

…

kern_intr.c

Extend cpuset_get/setaffinity() APIs

2017-05-03 18:41:08 +00:00

kern_jail.c

Use inet_ntoa_r() instead of inet_ntoa() throughout the kernel

2017-02-16 20:47:41 +00:00

kern_khelp.c

…

kern_kthread.c

Re-schedule signals after kthread exits, since apparently there are

2016-08-10 13:47:12 +00:00

kern_ktr.c

Fix the logic in the ddb command 'show ktr /a'. Prior to r118269 it would

2016-01-31 17:32:20 +00:00

kern_ktrace.c

Ktracing kevent(2) calls with unusual arguments might leads to an

2017-03-12 13:48:24 +00:00

kern_linker.c

In linker_load_file() print name of a file that failed to load.

2017-03-09 00:56:07 +00:00

kern_lock.c

lockmgr: implement fast path

2017-02-12 09:49:44 +00:00

kern_lockf.c

put very expensive sanity checks of advisory locks under DIAGNOSTIC

2017-01-30 15:20:13 +00:00

kern_lockstat.c

mtx: microoptimize lockstat handling in __mtx_lock_sleep

2017-02-17 14:55:59 +00:00

kern_loginclass.c

Speed up rctl operation with large rulesets, by holding the lock

2015-11-15 12:10:51 +00:00

kern_malloc.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

kern_mbuf.c

Import the 'iflib' API library for network drivers. From the author:

2016-05-18 04:35:58 +00:00

kern_mib.c

All these files need sys/vmmeter.h, but now they got it implicitly

2017-04-17 17:07:00 +00:00

kern_module.c

Provide better debug message on kernel module name clash.

2015-10-10 09:21:55 +00:00

kern_mtxpool.c

sys/kern: spelling fixes in comments.

2016-04-29 22:15:33 +00:00

kern_mutex.c

KDTRACE_HOOKS isn't guaranteed to be defined. Change to check to see

2017-02-24 01:39:08 +00:00

kern_ntptime.c

ANSIfy kern_ntptime.c

2017-01-25 20:22:32 +00:00

kern_numa.c

Remove unneeded include of vm_phys.h.

2017-04-17 16:51:04 +00:00

kern_osd.c

osd(9): Change array pointer to array pointer type from void*

2016-04-26 19:57:35 +00:00

kern_physio.c

Add four new RCTL resources - readbps, readiops, writebps and writeiops,

2016-04-07 04:23:25 +00:00

kern_pmc.c

Cast values to (int) before comparing them to the range of the

2017-02-24 01:39:12 +00:00

kern_poll.c

…

kern_priv.c

…

kern_proc.c

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

kern_procctl.c

reaper: Make REAPER_KILL_SUBTREE actually work.

2016-12-14 22:49:20 +00:00

kern_prot.c

Add security.bsd.see_jail_proc

2017-05-23 16:59:24 +00:00

kern_racct.c

try to fix RACCT_RSS accounting

2017-02-14 13:54:05 +00:00

kern_rangelock.c

…

kern_rctl.c

sys/kern: spelling fixes in comments.

2016-04-29 22:15:33 +00:00

kern_resource.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

kern_rmlock.c

Corrected misspelled versions of rendezvous.

2017-04-09 02:00:03 +00:00

kern_rwlock.c

locks: ensure proper barriers are used with atomic ops when necessary

2017-03-01 05:06:21 +00:00

kern_sdt.c

…

kern_sema.c

…

kern_sendfile.c

Make sendfile(2) more robust against file change. This fixes a possible

2017-03-24 16:01:19 +00:00

kern_sharedpage.c

Split kerne timekeep ABI structure vdso_sv_tk out of the struct

2015-11-23 07:09:35 +00:00

kern_shutdown.c

Fix compilation of r314784 on 32 bit.

2017-03-06 22:32:56 +00:00

kern_sig.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

kern_switch.c

Add comments explaining unobvious td_critnest adjustments in

2017-01-22 19:41:42 +00:00

kern_sx.c

locks: ensure proper barriers are used with atomic ops when necessary

2017-03-01 05:06:21 +00:00

kern_synch.c

- Remove 'struct vmmeter' from 'struct pcpu', leaving only global vmmeter

2017-04-17 17:34:47 +00:00

kern_syscalls.c

…

kern_sysctl.c

Print out name of non-dynamic sysctl in sysctl_remove_oid_locked

2017-03-22 05:27:20 +00:00

kern_tc.c

Add missing pieces of r315280

2017-03-14 22:02:02 +00:00

kern_thr.c

Defer ptracestop() signals that cannot be delivered immediately

2017-02-20 15:53:16 +00:00

kern_thread.c

Add asserts to verify stability of struct proc and struct thread layouts.

2017-04-27 21:24:50 +00:00

kern_time.c

Add clock_nanosleep()

2017-03-19 00:51:12 +00:00

kern_timeout.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

kern_umtx.c

When the RTC is adjusted, reevaluate absolute sleep times based on the RTC

2017-03-14 19:06:44 +00:00

kern_uuid.c

…

kern_xxx.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

ksched.c

Use P1B_PRIO_MAX to designate max posix priority for the RR/FIFO

2015-08-30 18:02:57 +00:00

link_elf_obj.c

Reduce stack usage in link_elf_load_file(), allocating struct nameidata.

2017-03-09 00:45:15 +00:00

link_elf.c

kern: for pointers replace 0 with NULL.

2016-04-15 16:10:11 +00:00

linker_if.m

sys/kern: spelling fixes in comments.

2016-04-29 22:15:33 +00:00

Make.tags.inc

Bring the tags and links entries for amd64 up to date.

2015-10-27 22:59:24 +00:00

Makefile

Don't create pointless backups of generated files in "make sysent".

2016-07-28 21:29:04 +00:00

makesyscalls.sh

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

md4c.c

crypto routines: Hint minimum buffer sizes to the compiler

2016-05-26 19:29:29 +00:00

md5c.c

crypto routines: Hint minimum buffer sizes to the compiler

2016-05-26 19:29:29 +00:00

msi_if.m

Introduce MSI and MSI-X support to intrng. This adds a new msi device

2016-05-16 09:11:40 +00:00

p1003_1b.c

…

pic_if.m

INTRNG: Rework handling with resources. Partially revert r301453.

2016-08-19 10:52:39 +00:00

posix4_mib.c

posix4_mib: Don't overrun facility_initialized array

2016-04-27 00:10:32 +00:00

sched_4bsd.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

sched_ule.c

move thread switch tracing from mi_switch to sched_switch

2017-03-23 08:57:04 +00:00

serdev_if.m

…

stack_protector.c

…

subr_acl_nfs4.c

Expose an interface to determine if an ACE is inherited.

2015-09-04 00:14:20 +00:00

subr_acl_posix1e.c

…

subr_autoconf.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

subr_blist.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

subr_bufring.c

…

subr_bus_dma.c

Fix a bug introduced in r291716:

2016-01-11 20:38:39 +00:00

subr_bus.c

"Buses" is the preferred plural of "bus"

2017-01-15 17:54:01 +00:00

subr_busdma_bufalloc.c

Fix printf format to allow for bus_size_t not being u_long on all platforms.

2015-10-20 03:25:17 +00:00

subr_capability.c

capsicum: plug spurious memset in __cap_rights_init

2015-12-01 02:48:42 +00:00

subr_clock.c

Use time_t for intermediate values to avoid overflow in clock_ts_to_ct

2017-01-24 18:05:29 +00:00

subr_counter.c

Zero return value when counter_rate() switches over to next second and

2016-12-13 20:11:45 +00:00

subr_devmap.c

Include machine/acle-compat.h in cdefs.h on arm if the compiler doesn't

2016-05-25 19:44:26 +00:00

subr_devstat.c

Add support for managing Shingled Magnetic Recording (SMR) drives.

2016-05-19 14:08:36 +00:00

subr_disk.c

…

subr_dummy_vdso_tc.c

…

subr_eventhandler.c

…

subr_fattime.c

…

subr_firmware.c

Fix improper use of "its".

2016-11-08 23:59:41 +00:00

subr_gtaskqueue.c

Extend cpuset_get/setaffinity() APIs

2017-05-03 18:41:08 +00:00

subr_hash.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

subr_hints.c

…

subr_intr.c

- Remove 'struct vmmeter' from 'struct pcpu', leaving only global vmmeter

2017-04-17 17:34:47 +00:00

subr_kdb.c

…

subr_kobj.c

- Also outside of the KOBJOPLOOKUP macro - which in turn is used by

2017-05-08 21:08:39 +00:00

subr_lock.c

locks: follow up r313386

2017-02-07 16:01:07 +00:00

subr_log.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

subr_mbpool.c

sys/kern: spelling fixes in comments.

2016-04-29 22:15:33 +00:00

subr_mchain.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

subr_module.c

…

subr_msgbuf.c

sys/kern: spelling fixes in comments.

2016-04-29 22:15:33 +00:00

subr_param.c

Initialize 'ticks' earlier in boot after 'hz' is set.

2016-11-22 01:02:59 +00:00

subr_pcpu.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

subr_pctrie.c

sys: extend use of the howmany() macro when available.

2016-04-26 15:38:17 +00:00

subr_power.c

…

subr_prf.c

Provide a comment on why stdio.h needs to be included.

2017-02-28 21:27:51 +00:00

subr_prof.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

subr_rman.c

Add new bus methods for mapping resources.

2016-05-20 17:57:47 +00:00

subr_rtc.c

Make resettodr_lock accessible outside subr_rtc.c. Protect

2016-09-21 10:15:08 +00:00

subr_sbuf.c

Fail the sbuf if vsnprintf(3) fails.

2015-10-02 09:23:14 +00:00

subr_scanf.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

subr_sfbuf.c

subr_sfbus.c need sys/proc.h for struct thread definition.

2017-02-07 17:31:24 +00:00

subr_sglist.c

Add sglist_append_sglist().

2017-05-16 23:31:52 +00:00

subr_sleepqueue.c

Add missing pieces of r315280

2017-03-14 22:02:02 +00:00

subr_smp.c

Corrected misspelled versions of rendezvous.

2017-04-09 02:00:03 +00:00

subr_stack.c

Add support for a configurable output channel to witness(4).

2015-11-19 05:56:59 +00:00

subr_syscall.c

- Remove 'struct vmmeter' from 'struct pcpu', leaving only global vmmeter

2017-04-17 17:34:47 +00:00

subr_taskqueue.c

Implement taskqueue_poll_is_busy() for use by the LinuxKPI.

2017-03-02 12:20:23 +00:00

subr_terminal.c

Oops, my fix for bright colors broke bright black some more (in cases

2017-03-27 10:48:28 +00:00

subr_trap.c

- Remove 'struct vmmeter' from 'struct pcpu', leaving only global vmmeter

2017-04-17 17:34:47 +00:00

subr_turnstile.c

ddb(4): Add sleepchains to "show allchains"

2016-10-22 18:02:20 +00:00

subr_uio.c

Switch copyout_map() to use vm_mmap_object() instead of vm_mmap().

2017-02-12 20:54:31 +00:00

subr_unit.c

Clean up trailing whitespace

2017-01-14 04:16:13 +00:00

subr_vmem.c

subr_vmem: Fix double-free in error case of vmem_create

2016-05-11 23:16:11 +00:00

subr_witness.c

Make witness_warn() always print to the console.

2017-02-05 02:27:04 +00:00

sys_capability.c

capsicum: perform copyout without the fildesc lock held in sys_cap_ioctls_get

2016-10-21 16:12:23 +00:00

sys_generic.c

Fix NULL pointer dereference and panic with shm file pread/pwrite.

2017-03-10 10:09:44 +00:00

sys_pipe.c

Generate syscall tables and update pipe() implementation after r302094.

2016-06-22 21:18:19 +00:00

sys_procdesc.c

Hide the boottime and bootimebin globals, provide the getboottime(9)

2016-07-27 11:08:59 +00:00

sys_process.c

Add support for capturing 'struct ptrace_lwpinfo' for signals

2017-03-30 18:21:36 +00:00

sys_socket.c

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

syscalls.c

Regen.

2017-05-23 09:30:42 +00:00

syscalls.master

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

systrace_args.c

Regen.

2017-05-23 09:30:42 +00:00

sysv_ipc.c

…

sysv_msg.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

sysv_sem.c

Audit arguments to System V IPC system calls implementing sempahores,

2017-03-30 22:26:15 +00:00

sysv_shm.c

Audit arguments to System V IPC system calls implementing sempahores,

2017-03-30 22:26:15 +00:00

tty_compat.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

tty_info.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

tty_inq.c

Check tty_gone() after allocating IO buffers. The tty lock has to be

2017-01-13 16:37:38 +00:00

tty_outq.c

Check tty_gone() after allocating IO buffers. The tty lock has to be

2017-01-13 16:37:38 +00:00

tty_pts.c

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

tty_tty.c

…

tty_ttydisc.c

Don't clear the software flow control flag before draining for last

2016-01-26 14:46:39 +00:00

tty.c

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

uipc_accf.c

Use correct size type in do_setopt_accept_filter

2016-10-12 00:56:49 +00:00

uipc_debug.c

Refactor the AIO subsystem to permit file-type-specific handling and

2016-03-01 18:12:14 +00:00

uipc_domain.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

uipc_mbuf2.c

Remove writability requirement for single-mbuf, contiguous-range

2017-01-12 06:38:03 +00:00

uipc_mbuf.c

m_mbuftouio() doesn't modify the mbuf.

2017-03-07 19:00:50 +00:00

uipc_mbufhash.c

…

uipc_mqueue.c

Audit arguments to POSIX message queues, semaphores, and shared memory.

2017-03-31 13:43:00 +00:00

uipc_sem.c

Audit arguments to POSIX message queues, semaphores, and shared memory.

2017-03-31 13:43:00 +00:00

uipc_shm.c

Audit arguments to POSIX message queues, semaphores, and shared memory.

2017-03-31 13:43:00 +00:00

uipc_sockbuf.c

Fix the build.

2017-04-14 10:21:38 +00:00

uipc_socket.c

Remove unnecessary check for NULL mbuf in soreceive_generic().

2017-04-25 19:54:34 +00:00

uipc_syscalls.c

Add kern_listen(), kern_shutdown(), and kern_socket(), and use them

2017-01-30 12:57:22 +00:00

uipc_usrreq.c

For non-listening AF_UNIX sockets return error code EOPNOTSUPP to match

2017-01-25 22:26:45 +00:00

vfs_acl.c

Add system-call argument auditing for ACL-related system calls.

2017-03-30 22:00:58 +00:00

vfs_aio.c

Rework r313352.

2017-02-13 09:04:38 +00:00

vfs_bio.c

Make it possible to terminate "show lockedbufs" by pressing "q".

2017-04-23 22:20:25 +00:00

vfs_cache.c

cache: stop holding the ncneg_hot lock across purging

2017-05-04 03:11:59 +00:00

vfs_cluster.c

Move bogus_page declaration to vm_page.h and initialization to vm_page.c.

2017-01-04 22:27:19 +00:00

vfs_default.c

Relax the locking requirements for vm_object_page_noreuse(). While

2017-03-15 17:43:45 +00:00

vfs_export.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

vfs_extattr.c

…

vfs_hash.c

Add vfs_hash_ref(9) function, which finds a vnode by the hash value

2016-05-11 06:32:22 +00:00

vfs_init.c

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00

vfs_lookup.c

Use UMA_ALIGN_PTR instead of sizeof(void *) for zone alignment.

2017-03-15 18:23:32 +00:00

vfs_mount.c

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

vfs_mountroot.c

Make root_mount_hold() work after boot. This is important for two

2017-02-06 20:44:34 +00:00

vfs_subr.c

mnt_vnode_next_active: use conventional lock order when trylock fails.

2017-05-15 10:02:45 +00:00

vfs_syscalls.c

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

vfs_vnops.c

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

vnode_if.src

Renumber license clauses in sys/kern to avoid skipping #3

2016-09-15 13:16:20 +00:00