Robert Watson b614dd131a Add a new 'NOMACCHECK' flag to namei() NDINIT flags, which permits the ...

caller to indicate that MAC checks are not required for the lookup.
Similar to IO_NOMACCHECK for vn_rdwr(), this indicates that the caller
has already performed all required protections and that this is an
internally generated operation.  This will be used by the NFS server
code, as we don't currently enforce MAC protections against requests
delivered via NFS.

While here, add NOCROSSMOUNT to PARAMASK; apparently this was used at
one point for name lookup flag checking, but isn't any longer or it
would have triggered from the NFS server code passing it to indicate
that mountpoints shouldn't be crossed in lookups.

Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories

2002-10-19 21:25:51 +00:00

..

alpha

Add two hooks to signal module load and module unload to MD code.

2002-10-19 19:16:03 +00:00

amd64

Add a placeholder for the execve_mac() system call, similar to SELinux's

2002-10-19 21:06:57 +00:00

arm

Add standards visibility conditionals. Change any uses of sigset_t to

2002-10-13 00:31:46 +00:00

boot

Pass the right number of tlb slots to the kernel. The allocation scheme

2002-10-18 23:49:18 +00:00

cam

* Add CDRIOC{READ,WRITE}SPEED ioctls to cd(4). Units are in KB/sec.

2002-10-18 22:03:39 +00:00

coda

Back our kernel support for reliable signal queues.

2002-10-01 17:15:53 +00:00

compat

Implement the CDROMREADAUDIO ioctl.

2002-10-19 21:11:43 +00:00

conf

Remove the _ia64_unwind_start and _ia64_unwind_end symbols. We now

2002-10-19 19:32:21 +00:00

contrib

Replace aux mbufs with packet tags:

2002-10-16 01:54:46 +00:00

crypto

Don't panic when we can just return an error code.

2002-10-14 11:21:05 +00:00

ddb

Round out the facilty for a 'bound' thread to loan out its KSE

2002-10-09 02:33:36 +00:00

dev

* Add CDRIOC{READ,WRITE}SPEED ioctls to cd(4). Units are in KB/sec.

2002-10-18 22:03:39 +00:00

fs

Fix comments and one resulting code confusion about the type of the

2002-10-16 08:04:11 +00:00

geom

Fix a missing initialization.

2002-10-19 17:19:41 +00:00

gnu

MFufs 1.33:

2002-10-18 21:41:41 +00:00

i4b

Be consistent about marking functions static.

2002-10-15 20:32:45 +00:00

i386

Add two hooks to signal module load and module unload to MD code.

2002-10-19 19:16:03 +00:00

ia64

Add a placeholder for the execve_mac() system call, similar to SELinux's

2002-10-19 21:06:57 +00:00

isa

Fix compile with options SC_NO_SUSPEND_VTYSWITCH.

2002-10-17 16:09:13 +00:00

isofs/cd9660

Fix comments and one resulting code confusion about the type of the

2002-10-16 08:04:11 +00:00

kern

Add a new 'NOMACCHECK' flag to namei() NDINIT flags, which permits the

2002-10-19 21:25:51 +00:00

libkern

Slight overhaul of arc4random() and friends.

2002-10-11 13:13:08 +00:00

modules

(1) added LSI Logic copyright, and legal line 3 in license, and string

2002-10-18 21:29:14 +00:00

net

last arg of in6?_gif_output() is not used any more.

2002-10-17 17:47:55 +00:00

netatalk

Add more ethernet types and move AppleTalk types into proper location.

2002-09-06 17:02:29 +00:00

netatm

Add a field to struct cmn_unit to hold a pointer to the driver's softc.

2002-10-01 22:04:31 +00:00

netgraph

use __packed.

2002-09-23 18:54:32 +00:00

netinet

Several malloc() calls were passing the M_DONTWAIT flag

2002-10-19 11:31:50 +00:00

netinet6

last arg of in6?_gif_output() is not used any more.

2002-10-17 17:47:55 +00:00

netipsec

"Fast IPsec": this is an experimental IPsec implementation that is derived

2002-10-16 02:10:08 +00:00

netipx

Replace aux mbufs with packet tags:

2002-10-16 01:54:46 +00:00

netkey

- fixed the order of searching SA table for packets.

2002-07-10 16:39:38 +00:00

netnatm

Be consistent about functions being static.

2002-10-16 09:19:17 +00:00

netncp

Change iov_base's type from char *' to the standard void *'. All

2002-10-11 14:58:34 +00:00

netns

Use m_length() instead of home-rolled versions.

2002-09-18 19:44:14 +00:00

netsmb

Some kernel threads try to do significant work, and the default KSTACK_PAGES

2002-10-02 07:44:29 +00:00

nfs

Change iov_base's type from char *' to the standard void *'. All

2002-10-11 14:58:34 +00:00

nfsclient

Regularize the vop_stdlock'ing protocol across all the filesystems

2002-10-14 03:20:36 +00:00

nfsserver

Correct a problem wherein NFS servers running NFSv2 would not return

2002-10-03 21:50:37 +00:00

opencrypto

Module-ize the 'core' crypto stuff. This may still need to be compiled

2002-10-16 14:31:34 +00:00

pc98

Permits UFS ACLs to be used with the GENERIC kernel. Due to recent

2002-10-19 16:54:15 +00:00

pccard

MFp4: Comment about not assuming INTA# for 6729

2002-10-07 07:02:48 +00:00

pci

Be consistent about functions being static.

2002-10-16 09:14:59 +00:00

posix4

Tidy up the scheduler's code for changing the priority of a thread.

2002-10-14 20:34:31 +00:00

powerpc

Add two hooks to signal module load and module unload to MD code.

2002-10-19 19:16:03 +00:00

rpc

…

security

Make sure to clear the 'registered' flag for MAC policies when they

2002-10-19 20:30:12 +00:00

sparc64

Add two hooks to signal module load and module unload to MD code.

2002-10-19 19:16:03 +00:00

sys

Add a new 'NOMACCHECK' flag to namei() NDINIT flags, which permits the

2002-10-19 21:25:51 +00:00

tools

- Move ASSERT_VOP_*LOCK* functionality into functions in vfs_subr.c

2002-09-26 04:48:44 +00:00

ufs

Clarify that the UFS1 extended attribute configuration steps do not apply

2002-10-19 16:09:16 +00:00

vm

Complete the page queues locking needed for the page-based copy-

2002-10-19 18:34:39 +00:00

Makefile

Milestone #1 in cross-arch make releases.

2002-04-26 17:55:27 +00:00