freebsd-skq/sys
Stephen J. Kiernan 6cbc970317 Obtain a shared lock instead of exclusive in the MAC/veriexec
MAC_VERIEXEC_CHECK_PATH_SYSCALL per-MAC policy system call.

When we are checking the status of the fingerprint on a vnode using the
per-MAC-policy syscall, we do not need an exclusive lock on the vnode.

Even if there is more than one thread requesting the status at the same time,
the worst we can end up doing is processing the file more than once.

This can potentially be improved in the future with offloading the fingerprint
evaluation to a separate thread and blocking until the update completes. But
for now the race is acceptable.

Obtained from:	Juniper Networks, Inc.
MFC after:	1 week
2019-05-17 18:13:43 +00:00
..
amd64 FCP-101: Remove wb(4) 2019-05-17 15:24:34 +00:00
arm arm: allwinner: aw_clk_nm: Don't reparent the clock if we didn't ask 2019-05-12 15:27:01 +00:00
arm64 Implement the ffs and fls functions, and their longer counterparts, in 2019-05-17 15:52:17 +00:00
bsm Create new EINTEGRITY error with message "Integrity check failed". 2019-01-17 06:35:45 +00:00
cam Drop periph lock around cam_periph_unmapmem(). 2019-05-06 19:08:03 +00:00
cddl Remove resolver_qual from DEFINE_IFUNC/DEFINE_UIFUNC macros. 2019-05-16 22:20:54 +00:00
compat LinuxKPI: Finalize import of seq_file. 2019-05-16 21:17:18 +00:00
conf Implement the ffs and fls functions, and their longer counterparts, in 2019-05-17 15:52:17 +00:00
contrib Support the use of the ipsec kld. 2019-05-11 17:59:13 +00:00
crypto Embedded chacha: Add 0-bit iv + 128-bit counter mode 2019-03-01 23:30:23 +00:00
ddb db show thread: avoid overflow in tick conversion 2019-05-16 05:29:54 +00:00
dev Protect commands that are considered dangerous with checks for kmem write 2019-05-17 18:02:26 +00:00
dts arm64: Add support for NanoPI NEO2 2019-05-02 12:56:13 +00:00
fs Do not flush NFS node from NFS VOP_SET_TEXT(). 2019-05-06 08:49:43 +00:00
gdb
geom List-ify kernel dump device configuration 2019-05-06 18:24:07 +00:00
gnu dts: Import files from Linux 5.1 2019-05-08 19:27:30 +00:00
i386 FCP-101: Bump __FreeBSD_version for driver removal. 2019-05-17 15:24:54 +00:00
isa
kern Instead of individual conditional statements to look for each hypervisor 2019-05-17 17:21:32 +00:00
kgssapi * Handle SIGPIPE in gssd 2019-02-21 01:30:37 +00:00
libkern random(4): depessimize arc4random 2019-05-12 06:32:46 +00:00
mips mips: Implement basic pmap_kenter_device, pmap_kremove_device 2019-05-16 19:10:48 +00:00
modules FCP-101: Remove xe(4) 2019-05-17 15:24:44 +00:00
net tuntap: Defer clearing if_softc until after if_detach 2019-05-14 20:32:29 +00:00
net80211 net80211: correct check for SMPS node flags updates 2019-03-18 02:40:22 +00:00
netgraph Remove 'dir' argument in ng_ipfw_input, since ip_fw_args now has this info. 2019-03-14 22:30:05 +00:00
netinet Revert r347582 for now. 2019-05-16 13:04:26 +00:00
netinet6 Fix hostname to be returned in an ICMPv6 NI Reply message defined 2019-05-16 19:09:41 +00:00
netipsec Replace read_random(9) with more appropriate arc4rand(9) KPIs 2019-04-04 01:02:50 +00:00
netpfil Add IPv6 support for O_IPLEN opcode. 2019-04-29 09:33:16 +00:00
netsmb Remove unused argument to priv_check_cred. 2018-12-11 19:32:16 +00:00
nfs
nfsclient
nfsserver
nlm
ofed Add new rates to ibcore. 2019-05-08 10:55:47 +00:00
opencrypto Don't panic for empty CCM requests. 2019-04-24 23:27:39 +00:00
powerpc FCP-101: Remove bm(4). 2019-05-17 15:20:51 +00:00
riscv Add support for HiFive Unleashed -- the board with a multi-core RISC-V SoC 2019-05-12 16:17:05 +00:00
rpc Fix malloc stats for the RPCSEC_GSS server code when DEBUG is enabled. 2019-04-04 01:23:06 +00:00
security Obtain a shared lock instead of exclusive in the MAC/veriexec 2019-05-17 18:13:43 +00:00
sparc64 FCP-101: Remove wb(4) 2019-05-17 15:24:34 +00:00
sys Instead of individual conditional statements to look for each hypervisor 2019-05-17 17:21:32 +00:00
teken Attempt to complete fixing programmable function keys for syscons. 2019-02-20 02:14:41 +00:00
tests Regularize the Netflix copyright 2019-02-04 21:28:25 +00:00
tools Avoid literal @generated tag in file-generating scripts 2019-05-08 13:35:51 +00:00
ufs Ensure that error is initialized in ufs_bmap_seekdata(). 2019-05-05 16:57:03 +00:00
vm Restore the pre-r347532 behaviour of ignoring wiring failures in mmap(). 2019-05-13 18:40:01 +00:00
x86 Instead of individual conditional statements to look for each hypervisor 2019-05-17 17:21:32 +00:00
xdr
xen xen: introduce a new way to setup event channel upcall 2019-01-30 11:34:52 +00:00
Makefile