Jamie Gritton 6bb795633c In case of prisons with their own network stack, permit ...

additional privileges as well as not restricting the type of
sockets a user can open.

Note: the VIMAGE/vnet fetaure of of jails is still considered
      experimental and cannot guarantee that privileged users
      can be kept imprisoned if enabled.

Reviewed by:	rwatson
Approved by:	bz (mentor)

2009-06-24 21:39:50 +00:00

..

bus_if.m

Add support for multiple passes of the device tree during the boot-time

2009-06-09 14:26:23 +00:00

clock_if.m

…

cpufreq_if.m

…

device_if.m

…

genassym.sh

refactor code so it can run in a chroot without having to have /dev/mounted

2008-01-18 17:02:14 +00:00

imgact_aout.c

Add sv_flags field to struct sysentvec with intention to provide description

2008-11-22 12:36:15 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Fix KBI breakage by r190520 which affects older linux.ko binaries:

2009-04-05 09:27:19 +00:00

imgact_gzip.c

VOP_LOCK1() (and so VOP_LOCK()) and VOP_UNLOCK() are only used in

2008-01-13 14:44:15 +00:00

imgact_shell.c

Decontextualize the couplet VOP_GETATTR / VOP_SETATTR as the passed thread

2008-08-28 15:23:18 +00:00

inflate.c

…

init_main.c

Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Use

2009-06-10 20:59:32 +00:00

init_sysent.c

Regen.

2009-06-22 20:24:03 +00:00

kern_acct.c

Do not use casts (int *)0 and (struct thread *)0 for the arguments of

2009-06-16 15:13:45 +00:00

kern_alq.c

Add another flags argument to vn_open_cred. Use it to specify that some

2009-06-21 13:41:32 +00:00

kern_clock.c

Mark the clock sysctls as MPSAFE.

2009-05-18 12:03:43 +00:00

kern_condvar.c

Remove unused variables p' and unneeded assignments of rval'.

2009-02-26 13:00:13 +00:00

kern_conf.c

Add an extension to the character device interface that allows character

2009-06-01 21:32:52 +00:00

kern_cons.c

Remove unneeded variable `ocn_mute'.

2009-02-26 13:01:45 +00:00

kern_context.c

…

kern_cpu.c

Provide a new CPU device driver ivar to report the nominal speed of the

2009-05-31 08:59:15 +00:00

kern_cpuset.c

Remove unnecessary/redundant includes.

2009-06-23 14:39:21 +00:00

kern_ctf.c

Add the CTF source file which gets shared with link_elf.c and link_elf_obj.c.

2008-05-23 03:04:27 +00:00

kern_descrip.c

- Similar to the previous commit, but for CURRENT: Fix a bug where a FIFO vnode

2009-06-24 18:44:38 +00:00

kern_dtrace.c

Remove code that isn't required. It actually breaks the case where KDTRACE_HOOKS

2008-06-16 04:44:29 +00:00

kern_environment.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

kern_event.c

Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Use

2009-06-10 20:59:32 +00:00

kern_exec.c

Rework the credential code to support larger values of NGROUPS and

2009-06-19 17:10:35 +00:00

kern_exit.c

Perform some more cleanups to in-kernel session handling.

2009-06-15 20:45:51 +00:00

kern_fail.c

fail(9) support:

2009-05-27 16:36:54 +00:00

kern_fork.c

Implement global and per-uid accounting of the anonymous memory. Add

2009-06-23 20:45:22 +00:00

kern_idle.c

In keeping with style(9)'s recommendations on macros, use a ';'

2008-03-16 10:58:09 +00:00

kern_intr.c

Binding interrupts to a CPU consists of two parts: setting up CPU

2009-05-18 14:02:55 +00:00

kern_jail.c

In case of prisons with their own network stack, permit

2009-06-24 21:39:50 +00:00

kern_kthread.c

Kill a dead variable

2008-08-03 21:07:19 +00:00

kern_ktr.c

…

kern_ktrace.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

kern_linker.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

kern_lock.c

Introduce support for adaptive spinning in lockmgr.

2009-06-17 01:55:42 +00:00

kern_lockf.c

Decrement state->ls_threads when vnode appeared to be doomed.

2009-06-17 12:43:04 +00:00

kern_lockstat.c

Add the OpenSolaris dtrace lockstat provider. The lockstat provider

2009-05-26 20:28:22 +00:00

kern_malloc.c

If we're passed garbage in malloc_init(), panic() rather than expecting

2009-06-05 09:16:52 +00:00

kern_mbuf.c

define helper routines for deferred mbuf initialization

2009-06-19 21:14:39 +00:00

kern_mib.c

Rename the host-related prison fields to be the same as the host.*

2009-06-13 15:39:12 +00:00

kern_module.c

When the SYSINIT() to load a module invokes the MOD_LOAD event successfully,

2008-12-05 16:47:30 +00:00

kern_mtxpool.c

Fix a number of style issues in the MALLOC / FREE commit. I've tried to

2008-10-23 20:26:15 +00:00

kern_mutex.c

Remove extra cpu_spinwait() invocations. This should really only be used

2009-05-29 14:03:34 +00:00

kern_ntptime.c

In keeping with style(9)'s recommendations on macros, use a ';'

2008-03-16 10:58:09 +00:00

kern_osd.c

Make the rmlock(9) interface a bit more like the rwlock(9) interface:

2009-05-29 10:52:37 +00:00

kern_physio.c

…

kern_pmc.c

Support sparsely numbered CPUs.

2008-09-22 10:37:02 +00:00

kern_poll.c

After cleaning up rt_tables from vnet.h and cleaning up opt_route.h

2009-06-23 17:03:45 +00:00

kern_priv.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

kern_proc.c

Rework the credential code to support larger values of NGROUPS and

2009-06-19 17:10:35 +00:00

kern_prot.c

Change crsetgroups_locked() (called by crsetgroups()) to sort the

2009-06-20 20:29:21 +00:00

kern_resource.c

Implement global and per-uid accounting of the anonymous memory. Add

2009-06-23 20:45:22 +00:00

kern_rmlock.c

Minor style tweak.

2009-05-29 14:25:51 +00:00

kern_rwlock.c

Handle lock recursion differenty by always checking against LO_RECURSABLE

2009-06-02 13:03:35 +00:00

kern_sdt.c

Add kernel support for the Statically Defined Trace provider.

2008-05-18 19:32:36 +00:00

kern_sema.c

…

kern_shutdown.c

Rename the host-related prison fields to be the same as the host.*

2009-06-13 15:39:12 +00:00

kern_sig.c

vn_open_cred() needs a non NULL ucred pointer

2009-06-23 11:29:54 +00:00

kern_subr.c

Make ureadc() warn when holding any locks, just like uiomove().

2008-08-28 19:34:58 +00:00

kern_switch.c

fix typo in runz_fuzz

2008-05-12 06:42:06 +00:00

kern_sx.c

Handle lock recursion differenty by always checking against LO_RECURSABLE

2009-06-02 13:03:35 +00:00

kern_synch.c

Remove even more unneeded variable assignments.

2009-02-26 15:51:54 +00:00

kern_syscalls.c

Various style fixes. 7 space indent is just odd.

2008-09-18 20:10:11 +00:00

kern_sysctl.c

Add explicit includes for jail.h to the files that need them and

2009-06-17 15:01:01 +00:00

kern_tc.c

Remove conditionally compiled time counter statistics; tools like

2009-04-11 22:01:40 +00:00

kern_thr.c

Remove even more unneeded variable assignments.

2009-02-26 15:51:54 +00:00

kern_thread.c

- Implement a new mechanism for resetting lock profiling. We now

2009-03-15 06:41:47 +00:00

kern_time.c

Remove VOP_LEASE and supporting functions. This hasn't been used since

2009-04-10 10:52:19 +00:00

kern_timeout.c

Add explicit static DTrace tracing to the callout mechanism, capturing

2009-01-24 10:22:49 +00:00

kern_umtx.c

Make UMTX_OP_WAIT_UINT actually wait for an unsigned integer on 64-bits

2009-04-13 05:21:17 +00:00

kern_uuid.c

After cleaning up rt_tables from vnet.h and cleaning up opt_route.h

2009-06-23 17:03:45 +00:00

kern_vimage.c

Fix a race in vi_if_move, where a vnet is used after the prison that

2009-06-24 15:29:36 +00:00

kern_xxx.c

Place hostnames and similar information fully under the prison system.

2009-05-29 21:27:12 +00:00

ksched.c

…

link_elf_obj.c

Implement a facility for dynamic per-cpu variables.

2009-06-23 22:42:39 +00:00

link_elf.c

Implement a facility for dynamic per-cpu variables.

2009-06-23 22:42:39 +00:00

linker_if.m

strict kobj signatures: linker_if fixes

2009-06-11 17:05:45 +00:00

Make.tags.inc

Catch up with the disappearance of sys/dev/hfa.

2008-12-01 14:34:42 +00:00

Makefile

style.Makefile(5)

2007-12-14 21:30:51 +00:00

makesyscalls.sh

Add a new COMPAT7 flag for FreeBSD 7.x compatibility system calls.

2009-06-24 13:36:37 +00:00

md4c.c

…

md5c.c

…

p1003_1b.c

Remove kernel support for M:N threading.

2008-03-12 10:12:01 +00:00

posix4_mib.c

…

sched_4bsd.c

- Use __XSTRING where I want the define to be expanded. This resulted in

2009-01-25 07:35:10 +00:00

sched_ule.c

- Use cpuset_t and the CPU_ macros in place of cpumask_t so that ULE

2009-06-23 22:12:37 +00:00

serdev_if.m

…

stack_protector.c

Fix a chicken-and-egg problem: this files implements SSP support,

2008-06-26 07:52:45 +00:00

subr_acl_nfs4.c

Add part of NFSv4 ACL kernel support code that is required for the upcoming

2009-06-09 19:51:22 +00:00

subr_acl_posix1e.c

Make 'struct acl' larger, as required to support NFSv4 ACLs. Provide

2009-05-22 15:56:43 +00:00

subr_autoconf.c

Prefer ANSI function definitions to K&R ones.

2009-02-03 07:52:07 +00:00

subr_blist.c

Retire the MALLOC and FREE macros. They are an abomination unto style(9).

2008-10-23 15:53:51 +00:00

subr_bufring.c

- bump __FreeBSD version to reflect added buf_ring, memory barriers,

2008-11-22 05:55:56 +00:00

subr_bus.c

We can actually remove devclass_find_driver.

2009-06-10 01:02:38 +00:00

subr_clock.c

Now that all platforms use genclock, shuffle things around slightly

2008-04-22 19:38:30 +00:00

subr_devstat.c

Use NULL in preference to 0 in pointer contexts.

2009-02-03 07:54:42 +00:00

subr_disk.c

Clarify and reimplement the bioq API so that bioq_disksort() has

2009-02-13 11:36:32 +00:00

subr_eventhandler.c

In keeping with style(9)'s recommendations on macros, use a ';'

2008-03-16 10:58:09 +00:00

subr_fattime.c

…

subr_firmware.c

Use NULL in preference to 0 for pointers.

2009-02-03 07:51:11 +00:00

subr_hints.c

…

subr_kdb.c

Spell NULL properly, use (void) rather than () for functions with no

2009-05-09 19:08:22 +00:00

subr_kobj.c

Use NULL in preference to 0 in pointer contexts.

2009-02-03 07:54:42 +00:00

subr_lock.c

- Implement a new mechanism for resetting lock profiling. We now

2009-03-15 06:41:47 +00:00

subr_log.c

In keeping with style(9)'s recommendations on macros, use a ';'

2008-03-16 10:58:09 +00:00

subr_mbpool.c

…

subr_mchain.c

Replaced the misleading uses of a historical artefact M_TRYWAIT with M_WAIT.

2008-03-25 09:39:02 +00:00

subr_module.c

…

subr_msgbuf.c

…

subr_param.c

Improve the description of a few sysctls.

2009-03-23 20:18:06 +00:00

subr_pcpu.c

Implement a facility for dynamic per-cpu variables.

2009-06-23 22:42:39 +00:00

subr_power.c

…

subr_prf.c

Remove redundant code in printf() and vprintf().

2009-02-27 13:28:54 +00:00

subr_prof.c

Use ANSI function definition for profil.

2009-02-03 07:52:36 +00:00

subr_rman.c

sysctl_rman: report shared resources to devinfo

2009-05-19 14:08:21 +00:00

subr_rtc.c

Clean up MI inittodr(9) and kill noop code.

2009-03-23 21:16:21 +00:00

subr_sbuf.c

Switch to simplified BSD license (with phk's approval), plus whitespace

2008-08-09 10:26:21 +00:00

subr_scanf.c

…

subr_sglist.c

Add a simple API to manage scatter/gather lists of phyiscal addresses.

2009-06-01 20:35:39 +00:00

subr_sleepqueue.c

Revision 184199 had not been fully reverted, add missing piece.

2008-12-01 01:54:55 +00:00

subr_smp.c

- Remove the bogus idle thread state code. This may have a race in it

2009-04-29 03:15:43 +00:00

subr_stack.c

Add stack_print_short() and stack_print_short_ddb() interfaces to

2009-06-24 12:06:15 +00:00

subr_taskqueue.c

Remove semicolon left in the last commit

2009-02-13 18:51:39 +00:00

subr_trap.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

subr_turnstile.c

Make ddb command registration dynamic so modules can extend

2008-09-15 22:45:14 +00:00

subr_unit.c

…

subr_witness.c

Add minimal ZFS lock hierarchy

2009-05-20 02:51:48 +00:00

sys_generic.c

- Implement a lockless file descriptor lookup algorithm in

2009-05-14 03:24:22 +00:00

sys_pipe.c

Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Use

2009-06-10 20:59:32 +00:00

sys_process.c

Implement global and per-uid accounting of the anonymous memory. Add

2009-06-23 20:45:22 +00:00

sys_socket.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

syscalls.c

Regen.

2009-06-22 20:24:03 +00:00

syscalls.master

Change the ABI of some of the structures used by the SYSV IPC API:

2009-06-24 21:10:52 +00:00

systrace_args.c

Regen.

2009-06-17 19:53:47 +00:00

sysv_ipc.c

Change the ABI of some of the structures used by the SYSV IPC API:

2009-06-24 21:10:52 +00:00

sysv_msg.c

Change the ABI of some of the structures used by the SYSV IPC API:

2009-06-24 21:10:52 +00:00

sysv_sem.c

Change the ABI of some of the structures used by the SYSV IPC API:

2009-06-24 21:10:52 +00:00

sysv_shm.c

Change the ABI of some of the structures used by the SYSV IPC API:

2009-06-24 21:10:52 +00:00

tty_compat.c

Fix an awful bug inside our COMPAT_43TTY code.

2008-09-04 16:30:53 +00:00

tty_info.c

Print an extra newline when not at the first column already.

2009-05-17 16:17:48 +00:00

tty_inq.c

Enable secure TTY input buffer flushing by default.

2009-05-21 16:48:06 +00:00

tty_outq.c

Use unsigned longs for the TTY's sysctl stats.

2009-02-26 10:28:32 +00:00

tty_pts.c

Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Use

2009-06-10 20:59:32 +00:00

tty_pty.c

Don't use PTY name as format string, even though it isn't insecure here.

2009-02-26 10:14:10 +00:00

tty_tty.c

Remove unneeded Giant locking of /dev/tty.

2008-06-03 12:38:00 +00:00

tty_ttydisc.c

If we have a regular rint handler, never go into rint_bypass mode.

2009-05-07 17:39:23 +00:00

tty.c

Improve my last commit: use a separate condvar to serialize.

2009-06-23 21:43:02 +00:00

uipc_accf.c

Retire the MALLOC and FREE macros. They are an abomination unto style(9).

2008-10-23 15:53:51 +00:00

uipc_cow.c

Extend the struct vm_page wire_count to u_int to avoid the overflow

2009-01-03 13:24:08 +00:00

uipc_debug.c

Add missing socket options.

2009-05-26 09:19:21 +00:00

uipc_domain.c

Introduce an infrastructure for dismantling vnet instances.

2009-06-08 17:15:40 +00:00

uipc_mbuf2.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

uipc_mbuf.c

Add m_mbuftouio() helper function to copy(out) an arbitrary

2009-06-22 22:20:38 +00:00

uipc_mqueue.c

Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Use

2009-06-10 20:59:32 +00:00

uipc_sem.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

uipc_shm.c

Implement global and per-uid accounting of the anonymous memory. Add

2009-06-23 20:45:22 +00:00

uipc_sockbuf.c

In sbappendstream_locked() demote all incoming packet mbufs (and

2009-06-22 21:46:40 +00:00

uipc_socket.c

Add soreceive_stream(), an optimized version of soreceive() for

2009-06-22 23:08:05 +00:00

uipc_syscalls.c

SCTP needs either IPv4 or IPv6 as lower layer[1].

2009-06-10 14:36:59 +00:00

uipc_usrreq.c

Remove unnecessary/redundant includes.

2009-06-23 14:39:21 +00:00

vfs_acl.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

vfs_aio.c

Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Use

2009-06-10 20:59:32 +00:00

vfs_bio.c

Eliminate an unused variable from allocbuf().

2009-06-07 18:19:04 +00:00

vfs_cache.c

Add explicit struct ucred * argument for VOP_VPTOCNP, to be used by

2009-06-21 19:21:01 +00:00

vfs_cluster.c

Eliminate unnecessary obfuscation when testing a page's valid bits.

2009-06-07 19:38:26 +00:00

vfs_default.c

Add explicit struct ucred * argument for VOP_VPTOCNP, to be used by

2009-06-21 19:21:01 +00:00

vfs_export.c

Rework the credential code to support larger values of NGROUPS and

2009-06-19 17:10:35 +00:00

vfs_extattr.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

vfs_hash.c

In keeping with style(9)'s recommendations on macros, use a ';'

2008-03-16 10:58:09 +00:00

vfs_init.c

Expand the scope of the sysctllock sx lock to protect the sysctl tree itself.

2009-02-06 14:51:32 +00:00

vfs_lookup.c

Eliminate trailing_slash, which was made redundant in r193028.

2009-06-06 00:49:49 +00:00

vfs_mount.c

Move "options MAC" from opt_mac.h to opt_global.h, as it's now in GENERIC

2009-06-05 14:55:22 +00:00

vfs_subr.c

Adapt vfs kqfilter to the shared vnode lock used by zfs write vop. Use

2009-06-10 20:59:32 +00:00

vfs_syscalls.c

Remove the static from int hardlink_check_uid.

2009-06-13 13:09:20 +00:00

vfs_vnops.c

Add another flags argument to vn_open_cred. Use it to specify that some

2009-06-21 13:41:32 +00:00

vnode_if.src

Add explicit struct ucred * argument for VOP_VPTOCNP, to be used by

2009-06-21 19:21:01 +00:00