rwatson efcac3d02e Add MAC Framework and MAC policy entry point mac_check_socket_create(), ...

which is invoked from socket() and socketpair(), permitting MAC
policy modules to control the creation of sockets by domain, type, and
protocol.

Obtained from:	TrustedBSD Project
Sponsored by:	SPARTA, SPAWAR
Approved by:	re (scottl)
Requested by:	SCC

2005-07-05 22:49:10 +00:00

..

bus_if.m

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

clock_if.m

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

cpufreq_if.m

Introduce a new method, cpufreq_drv_type(), that returns the type of the

2005-02-18 00:23:36 +00:00

device_if.m

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

genassym.sh

…

imgact_aout.c

- Neither of our image formats require Giant now that the vm and vfs have

2005-05-03 10:51:38 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Jumbo-commit to enhance 32 bit application support on 64 bit kernels.

2005-06-30 07:49:22 +00:00

imgact_gzip.c

- Change the vm_mmap() function to accept an objtype_t parameter specifying

2005-04-01 20:00:11 +00:00

imgact_shell.c

Fix a panic which could occur parsing #!-lines in a shell-script. If the

2005-06-19 02:21:03 +00:00

inflate.c

…

init_main.c

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

init_sysent.c

Rebuild generated system call definition files following the addition of

2005-05-30 15:20:21 +00:00

kern_acct.c

When mac_check_system_acct() fails, make sure to unlock as well as close

2005-03-01 08:56:13 +00:00

kern_acl.c

Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is

2004-07-26 07:24:04 +00:00

kern_alq.c

Modify the alq(9) alq_open() API to accept a file creation mode, rather

2005-04-16 12:12:27 +00:00

kern_clock.c

Use SCTL_MASK32 to determine that the sysctl call is from a 32bit

2005-06-30 17:17:29 +00:00

kern_condvar.c

Refine the turnstile and sleep queue interfaces just a bit:

2004-10-12 18:36:20 +00:00

kern_conf.c

cdev (still) needs per instance uid/gid/mode

2005-03-31 10:29:57 +00:00

kern_context.c

…

kern_cpu.c

Add debugging prints to all the methods in case there are problems with

2005-04-10 19:11:23 +00:00

kern_descrip.c

Fix fdcheckstd to pass the file descriptor along through vn_open. When

2005-06-25 03:34:49 +00:00

kern_environment.c

My addled brains didn't realize that since vtp points into value, we

2005-03-09 12:16:45 +00:00

kern_event.c

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

kern_exec.c

MFP4:

2005-06-30 19:01:26 +00:00

kern_exit.c

Use low level constructs borrowed from interrupt threads to wait for

2005-05-23 23:01:53 +00:00

kern_fork.c

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

kern_idle.c

Divorce critical sections from spinlocks. Critical sections as denoted by

2005-04-04 21:53:56 +00:00

kern_intr.c

Simplify the storming logic and remove a variable as a result.

2005-06-20 19:32:23 +00:00

kern_jail.c

Actually only protect mount-point if security.jail.enforce_statfs is set to 2.

2005-06-23 22:13:29 +00:00

kern_kse.c

Fix a typo in a comment.

2005-06-23 21:55:43 +00:00

kern_kthread.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

kern_ktr.c

- Add curthread to the state that ktr is saving. The extra information is

2005-06-10 23:21:29 +00:00

kern_ktrace.c

Close another information leak in ktrace(2): one was able to find active

2005-06-24 12:05:24 +00:00

kern_linker.c

Fix panic when module is compiled in and it is loaded from loader.conf.

2005-05-28 23:20:05 +00:00

kern_lock.c

- Differentiate two UPGRADE panics so I have a better idea of what's going

2005-04-12 05:43:03 +00:00

kern_lockf.c

Print name of device instead of useless major/minor numbers.

2005-03-29 08:13:01 +00:00

kern_mac.c

Get the directory structure correct in a comment.

2005-04-22 19:09:12 +00:00

kern_malloc.c

Remove a variable that became unused as a result of changes made

2005-06-16 16:01:46 +00:00

kern_mbuf.c

Fix the false memory modified after free messages some users have been

2005-06-29 08:18:26 +00:00

kern_mib.c

Add a sysctl that records the amount of physical memory in the machine.

2005-02-28 21:42:56 +00:00

kern_module.c

Swap the arguments for CP so we copy the correct source and

2005-02-18 22:14:40 +00:00

kern_mtxpool.c

Make a bunch of malloc types static.

2005-02-10 12:02:37 +00:00

kern_mutex.c

Add additional newline to debug.mutex.prof.stats header, so that

2005-04-08 14:14:09 +00:00

kern_ntptime.c

Explicitly acquire Giant around the ntp_gettime() and assert it in the

2005-05-28 14:34:41 +00:00

kern_physio.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

kern_pmc.c

MFP4:

2005-06-09 19:45:09 +00:00

kern_poll.c

Remove recently added note about DEVICE_POLLING not working with SMP.

2005-02-25 22:07:51 +00:00

kern_proc.c

Add a sysctl that returns the full path of a process' text file.

2005-04-18 02:10:37 +00:00

kern_prot.c

Introduce p_canwait() and MAC Framework and MAC Policy entry points

2005-04-18 13:36:57 +00:00

kern_resource.c

Giant is no longer required in kern_setrlimit(); remove its acquisition and

2005-06-01 17:52:51 +00:00

kern_sema.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

kern_shutdown.c

- Remove unused include.

2005-04-12 05:45:58 +00:00

kern_sig.c

Fix a bug relavant to debugging, a masked signal unexpectedly interrupts

2005-06-06 05:13:10 +00:00

kern_subr.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

kern_switch.c

Restore preemption of idle threads.

2005-06-10 03:00:29 +00:00

kern_sx.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

kern_synch.c

Use low level constructs borrowed from interrupt threads to wait for

2005-05-23 23:01:53 +00:00

kern_syscalls.c

Do a pass over all modules in the kernel and make them return EOPNOTSUPP

2004-07-15 08:26:07 +00:00

kern_sysctl.c

Make another bunch of SYSCTL_NODEs static

2005-02-10 12:16:08 +00:00

kern_tc.c

s/ENOTTY/ENOIOCTL/

2005-03-26 20:04:28 +00:00

kern_thr.c

Add new syscall thr_new to create thread in atomic, it will

2005-04-23 02:36:07 +00:00

kern_thread.c

Remove sleep queue hack, it is no longer needed with current sleep queue.

2005-05-27 04:27:22 +00:00

kern_time.c

Implement kern_adjtime(), kern_readv(), kern_sched_rr_get_interval(),

2005-03-31 22:51:18 +00:00

kern_timeout.c

When processing a timeout() callout and returning it to the free

2005-02-11 00:14:00 +00:00

kern_umtx.c

Allocate umtx_q from heap instead of stack, this avoids

2005-03-05 09:15:03 +00:00

kern_uuid.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

kern_xxx.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

ksched.c

/* -> /*- for license, minor formatting changes

2005-01-07 02:29:27 +00:00

link_elf_obj.c

Add support for completing the installation of ELF relocatable

2004-08-29 01:21:51 +00:00

link_elf.c

Normalize the VM wiring done with SPARSE_MAPPING: check for errors, and

2004-08-09 18:46:13 +00:00

linker_if.m

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

Make.tags.inc

…

Makefile

…

makesyscalls.sh

Introduce a new field in the syscalls.master file format to hold the

2005-05-30 15:09:18 +00:00

md4c.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

md5c.c

MD5Pad() should never have been exposed.

2005-02-10 12:20:42 +00:00

p1003_1b.c

Actually commit the code for kern_sched_get_rr_interval().

2005-03-31 22:54:48 +00:00

posix4_mib.c

Back when VOP_* was introduced, we did not have new-style struct

2004-12-01 23:16:38 +00:00

sched_4bsd.c

Move HWPMC_HOOKS into its own opt_hwpmc_hooks.h file. It doesn't merit

2005-06-24 00:16:57 +00:00

sched_ule.c

Move HWPMC_HOOKS into its own opt_hwpmc_hooks.h file. It doesn't merit

2005-06-24 00:16:57 +00:00

subr_acl_posix1e.c

Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is

2004-07-26 07:24:04 +00:00

subr_autoconf.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

subr_blist.c

Move the definitions of SWAPBLK_NONE and SWAPBLK_MASK from vm_page.h to

2004-06-04 04:03:26 +00:00

subr_bus.c

Simplify the code a bit after the bzero().

2005-06-09 05:50:01 +00:00

subr_clist.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

subr_clock.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

subr_devstat.c

- Remove two mtx_asserts that can incorrectly trigger if

2005-05-03 10:58:05 +00:00

subr_disk.c

- Fix insertions of bios which represent data earlier than anything else

2005-06-15 23:32:07 +00:00

subr_eventhandler.c

eliminate potential null deref

2005-02-23 19:32:29 +00:00

subr_hints.c

Don't set ret_namelen and ret_resnamelen in res_find() unless both the

2005-03-24 21:20:25 +00:00

subr_kdb.c

Move the KDB_STOP_NMI option from opt_global.h to opt_kdb.h

2005-06-29 23:23:16 +00:00

subr_kobj.c

…

subr_log.c

Use dynamic major number allocation.

2005-02-27 22:02:03 +00:00

subr_mbpool.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

subr_mchain.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

subr_module.c

…

subr_msgbuf.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

subr_param.c

Increase default HZ for sparc64 to 1000.

2005-04-16 15:07:41 +00:00

subr_pcpu.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

subr_power.c

…

subr_prf.c

Make "show msgbuf" use the pager instead of blasting the whole thing out.

2005-06-06 22:18:32 +00:00

subr_prof.c

netchild's mega-patch to isolate compiler dependencies into a central

2005-03-02 21:33:29 +00:00

subr_rman.c

If we are going to

2005-05-06 02:50:00 +00:00

subr_rtc.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

subr_sbuf.c

Make a bunch of malloc types static.

2005-02-10 12:02:37 +00:00

subr_scanf.c

Remove advertising clause from University of California Regent's license,

2004-04-05 21:03:37 +00:00

subr_sleepqueue.c

Remove thread_upcall_check, it was used to avoid race bug in earlier

2005-05-27 15:57:27 +00:00

subr_smp.c

Second part of commit for moving KDB_STOP_NMI from opt_global.h to

2005-06-30 03:38:10 +00:00

subr_taskqueue.c

o enable shutdown of taskqueue threads; the thread servicing the queue checks

2005-05-01 00:38:11 +00:00

subr_trap.c

- Rev 1.83 of kern_lock.c fixes the td_locks assert, reenable it here.

2005-03-28 12:52:46 +00:00

subr_turnstile.c

Make a bunch of malloc types static.

2005-02-10 12:02:37 +00:00

subr_unit.c

Remove debugging printfs.

2005-03-14 06:51:29 +00:00

subr_witness.c

After some input from bde@ and rereading the datasheet use a MTX_SPIN

2005-06-04 23:24:50 +00:00

sys_generic.c

Conditionally weaken sys_generic.c rev 1.136 to allow certain dubious

2005-06-30 00:19:08 +00:00

sys_pipe.c

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

sys_process.c

Jumbo-commit to enhance 32 bit application support on 64 bit kernels.

2005-06-30 07:49:22 +00:00

sys_socket.c

Introduce three additional MAC Framework and MAC Policy entry points to

2005-04-16 18:46:29 +00:00

syscalls.c

Rebuild generated system call definition files following the addition of

2005-05-30 15:20:21 +00:00

syscalls.master

Introduce a new field in the syscalls.master file format to hold the

2005-05-30 15:09:18 +00:00

sysv_ipc.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

sysv_msg.c

Add much needed descriptions for a number of the IPC related sysctl OIDs.

2005-02-12 01:22:39 +00:00

sysv_sem.c

Gratuitous renaming of four System V Semaphore MAC Framework entry

2005-06-07 05:03:28 +00:00

sysv_shm.c

Actually use the iterating variable in the for loop when trying to avoid

2005-05-12 20:04:48 +00:00

tty_compat.c

Put the pre FreeBSD-2.x tty compat code under BURN_BRIDGES.

2004-06-21 22:57:16 +00:00

tty_conf.c

Preparation commit for the tty cleanups that will follow in the near

2004-07-15 20:47:41 +00:00

tty_cons.c

Use dynamic major number allocation for /dev/console, there is no

2005-02-27 21:52:42 +00:00

tty_pty.c

Explicitly hold a reference to the cdev we have just cloned. This

2005-03-31 12:19:44 +00:00

tty_subr.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

tty_tty.c

Explicitly hold a reference to the cdev we have just cloned. This

2005-03-31 12:19:44 +00:00

tty.c

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

uipc_accf.c

o setsockopt(2) cannot remove accept filter. [1]

2005-06-11 11:59:48 +00:00

uipc_cow.c

Allow sends sent from non page-aligned userspace addresses to be

2005-06-05 17:13:23 +00:00

uipc_domain.c

/* -> /*- for copyright notices, minor format tweaks as necessary

2005-01-06 23:35:40 +00:00

uipc_mbuf2.c

Make a bunch of malloc types static.

2005-02-10 12:02:37 +00:00

uipc_mbuf.c

Change m_uiotombuf so it will accept offset at which data should be copied

2005-05-04 18:55:03 +00:00

uipc_proto.c

Remove advertising clause from University of California Regent's license,

2004-04-05 21:03:37 +00:00

uipc_sem.c

In sem_forkhook(), don't attempt to generate a copy of the process semaphore

2005-06-08 07:29:22 +00:00

uipc_sockbuf.c

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

uipc_socket2.c

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

uipc_socket.c

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

uipc_syscalls.c

Add MAC Framework and MAC policy entry point mac_check_socket_create(),

2005-07-05 22:49:10 +00:00

uipc_usrreq.c

Fix two issues which were missed in FreeBSD-SA-05:08.kmem.

2005-05-07 00:41:36 +00:00

vfs_acl.c

Rename suser_cred()'s PRISON_ROOT flag to SUSER_ALLOWJAIL. This is

2004-07-26 07:24:04 +00:00

vfs_aio.c

Fix the recent panics/LORs/hangs created by my kqueue commit by:

2005-07-01 16:28:32 +00:00

vfs_bio.c

- Add and enhance asserts related to the wrong bufobj panic.

2005-06-14 20:32:27 +00:00

vfs_cache.c

- Fix a leaked reference to a vnode via v_dd. We rely on cache_purge() and

2005-06-17 01:05:13 +00:00

vfs_cluster.c

Revert revision 1.164: pmap_qremove() does not require protection by

2005-05-14 05:09:11 +00:00

vfs_default.c

- Add and enhance asserts related to the wrong bufobj panic.

2005-06-14 20:32:27 +00:00

vfs_export.c

Handle theoretical case of vfs_export being called with both MNT_DELEXPORT and

2005-05-11 18:25:42 +00:00

vfs_extattr.c

Actually only protect mount-point if security.jail.enforce_statfs is set to 2.

2005-06-23 22:13:29 +00:00

vfs_hash.c

Fix bug in vfs_hash_rehash(): use correct bucket. This only affected

2005-04-07 07:54:08 +00:00

vfs_init.c

Remove VFS_START(). Its original purpose involved the mfs filesystem,

2005-02-20 23:02:20 +00:00

vfs_lookup.c

- Remove a debugging printf that slipped in.

2005-04-13 23:36:28 +00:00

vfs_mount.c

devfs_first() return value isn't used, remove it.

2005-05-18 22:05:12 +00:00

vfs_subr.c

Fix one "wrong b_bufobj" panic in reassignbuf() by moving VI_UNLOCK(vp)

2005-07-05 15:57:55 +00:00

vfs_syscalls.c

Actually only protect mount-point if security.jail.enforce_statfs is set to 2.

2005-06-23 22:13:29 +00:00

vfs_vnops.c

- Remove vnode lock asserts at the end of vfs syscalls. These asserts were

2005-06-14 01:14:40 +00:00

vnode_if.src

Allow EVFILT_VNODE events to work on every filesystem type, not just

2005-06-09 20:20:31 +00:00