d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
99f390a4e8
freebsd-skq/sys/netgraph
History
rwatson 4af919b491 Second-to-last commit implementing Capsicum capabilities in the FreeBSD 
kernel for FreeBSD 9.0:

Add a new capability mask argument to fget(9) and friends, allowing system
call code to declare what capabilities are required when an integer file
descriptor is converted into an in-kernel struct file *.  With options
CAPABILITIES compiled into the kernel, this enforces capability
protection; without, this change is effectively a no-op.

Some cases require special handling, such as mmap(2), which must preserve
information about the maximum rights at the time of mapping in the memory
map so that they can later be enforced in mprotect(2) -- this is done by
narrowing the rights in the existing max_protection field used for similar
purposes with file permissions.

In namei(9), we assert that the code is not reached from within capability
mode, as we're not yet ready to enforce namespace capabilities there.
This will follow in a later commit.

Update two capability names: CAP_EVENT and CAP_KEVENT become
CAP_POST_KEVENT and CAP_POLL_KEVENT to more accurately indicate what they
represent.

Approved by:	re (bz)
Submitted by:	jonathan
Sponsored by:	Google Inc
2011-08-11 12:30:23 +00:00
..
atm Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
bluetooth - Move all USB device ID arrays into so-called sections, 2011-06-24 02:30:02 +00:00
netflow Add missing unlocks. 2011-07-06 09:43:25 +00:00
netgraph.h Fix build with NETGRAPH_DEBUG. 2011-07-04 20:50:09 +00:00
ng_async.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_async.h
ng_atmllc.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_atmllc.h
ng_base.c - Use refcount(9) API to manage node and hook refcounting. 2011-07-04 07:03:44 +00:00
ng_bpf.c
ng_bpf.h
ng_bridge.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_bridge.h Add an optional "persistent" flag to ng_hub and ng_bridge, which if set, 2010-05-05 22:06:05 +00:00
ng_car.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_car.h
ng_cisco.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_cisco.h
ng_deflate.c
ng_deflate.h
ng_device.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_device.h
ng_echo.c
ng_echo.h
ng_eiface.c Provide fake link status information in an attempt to let ng_eiface(4) 2011-05-24 14:10:33 +00:00
ng_eiface.h Allow for MTU sizes of up to ETHER_MAX_LEN_JUMBO (i.e. 9018) bytes to be 2010-11-22 12:32:19 +00:00
ng_etf.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_etf.h
ng_ether_echo.c
ng_ether_echo.h
ng_ether.c remove RESTARTABLE_PANICS option 2011-07-25 09:12:48 +00:00
ng_ether.h
ng_fec.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_fec.h
ng_frame_relay.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_frame_relay.h
ng_gif_demux.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_gif_demux.h
ng_gif.c
ng_gif.h
ng_hole.c
ng_hole.h
ng_hub.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_hub.h Add an optional "persistent" flag to ng_hub and ng_bridge, which if set, 2010-05-05 22:06:05 +00:00
ng_iface.c Tag mbufs of all incoming frames or packets with the interface's FIB 2011-07-03 16:08:38 +00:00
ng_iface.h
ng_ip_input.c
ng_ip_input.h
ng_ipfw.c Fix operation of "netgraph" action in conjunction with the 2010-07-27 14:26:34 +00:00
ng_ipfw.h
ng_ksocket.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_ksocket.h
ng_l2tp.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_l2tp.h
ng_lmi.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_lmi.h
ng_message.h
ng_mppc.c remove RESTARTABLE_PANICS option 2011-07-25 09:12:48 +00:00
ng_mppc.h
ng_nat.c Sync ng_nat with recent (r222806) ipfw_nat changes: 2011-06-07 06:48:42 +00:00
ng_nat.h
ng_one2many.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_one2many.h Add XMIT_FAILOVER transmit algorithm to ng_one2many node. Packets are 2011-03-01 13:10:56 +00:00
ng_parse.c remove RESTARTABLE_PANICS option 2011-07-25 09:12:48 +00:00
ng_parse.h
ng_patch.c Use M_WAITOK flag instead M_WAIT for malloc. 2011-04-18 09:10:27 +00:00
ng_patch.h Style(9) fixes: 2010-06-10 16:45:30 +00:00
ng_pipe.c Assume the link to be dead if bit error rate (BER) parameter is set to 1. 2011-05-24 14:36:32 +00:00
ng_pipe.h
ng_ppp.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_ppp.h
ng_pppoe.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_pppoe.h
ng_pptpgre.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_pptpgre.h
ng_pred1.c
ng_pred1.h
ng_rfc1490.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_rfc1490.h
ng_sample.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_sample.h
ng_socket.c Second-to-last commit implementing Capsicum capabilities in the FreeBSD 2011-08-11 12:30:23 +00:00
ng_socket.h
ng_socketvar.h
ng_source.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_source.h Remove defunct email address from header as well. 2010-07-06 16:55:39 +00:00
ng_split.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_split.h
ng_sppp.c Finish last change. 2011-04-18 14:07:01 +00:00
ng_sppp.h
ng_tag.c
ng_tag.h
ng_tcpmss.c
ng_tcpmss.h
ng_tee.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_tee.h
ng_tty.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_tty.h
ng_UI.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_UI.h
ng_vjc.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_vjc.h
ng_vlan.c Node constructor methods are supposed to be called in syscall 2011-04-18 09:12:27 +00:00
ng_vlan.h
NOTES