freebsd kernel with SKQ
Go to file
Robert Watson bbf0607700 Modify extended attribute protection model to authorize based on
attribute namespace and DAC protection on file:
	- Attribute names beginning with '$' are in the system namespace
	- The attribute name "$" is reserved
	- System namespace attributes may only be read/set by suser()
	  or by kernel (cred == NULL)
	- Other attribute names are in the application namespace
	- The attribute name "" is reserved
	- Application namespace attributes are protected in the manner
	  of the target file permission

o Kernel changes
	- Add ufs_extattr_valid_attrname() to check whether the requested
	  attribute "set" or "enable" is appropriate (i.e., non-reserved)
	- Modify ufs_extattr_credcheck() to accept target file vnode, not
	  to take inode uid
	- Modify ufs_extattr_credcheck() to check namespace, then enforce
	  either kernel/suser for system namespace, or vaccess() for
	  application namespace
o EA backing file format changes
	- Remove permission fields from extended attribute backing file
	  header
	- Bump extended attribute backing file header version to 3
o Update extattrctl.c and extattrctl.8
	- Remove now deprecated -r and -w arguments to initattr, as
	  permissions are now implicit
	- (unrelated) fix error reporting and unlinking during failed
	  initattr to remove duplicate/inaccurate error messages, and to
	  only unlink if the failure wasn't in the backing file open()

Obtained from:	TrustedBSD Project
2000-09-02 20:31:26 +00:00
bin Fix style bugs and poor wording introduced in rev 1.12. 2000-08-17 16:09:27 +00:00
contrib Move setproctitle() from libutil to libc (after a repo-copy) 2000-09-02 01:51:36 +00:00
crypto Err, we weren't even compiling auth1.c with LOGIN_CAP at all. Guess nobody 2000-09-02 07:32:05 +00:00
etc Remove our override on the default time that a looked up name remains 2000-09-01 01:08:52 +00:00
games BDECFLAGS (with a whitespace change or two) 2000-08-29 03:25:49 +00:00
gnu Fixes and cleanups to the perl build; don't error out when NOCLEAN is 2000-08-20 10:03:26 +00:00
include Move setproctitle() from libutil to libc (after a repo-copy) 2000-09-02 01:51:36 +00:00
kerberos5 Fix ordering for real this time. 2000-08-30 03:44:30 +00:00
kerberosIV Remove the last vestiges of libRSAglue now that it's an empty stub. 2000-03-11 22:34:10 +00:00
lib setproctitle() requires unistd.h and not libutil.h/-lutil 2000-09-02 02:25:34 +00:00
libexec Pass two pointer parameters to the r_debug_state() hook 2000-08-26 05:13:29 +00:00
release Fix wording 2000-09-02 20:30:02 +00:00
sbin Correct typo. 2000-08-29 02:42:02 +00:00
secure Err, we weren't even compiling auth1.c with LOGIN_CAP at all. Guess nobody 2000-09-02 07:32:05 +00:00
share Add a missing article. 2000-09-01 13:06:57 +00:00
sys Modify extended attribute protection model to authorize based on 2000-09-02 20:31:26 +00:00
tools Make this work with current makefiles again. 2000-08-21 14:42:48 +00:00
usr.bin Don't try to set the mtime of the output file if it's not a regular file. 2000-09-02 09:48:34 +00:00
usr.sbin Modify extended attribute protection model to authorize based on 2000-09-02 20:31:26 +00:00
COPYRIGHT Update to add the July 22, 1999 addendum. 1999-09-05 21:33:47 +00:00
Makefile Mention the buildkernel/installkernel targets in the documentation. 2000-07-31 09:26:59 +00:00
Makefile.inc1 Define SUPHOST. If this is set a '-h ${SUPHOST}' is added to the 2000-08-13 12:36:40 +00:00
Makefile.upgrade $Id$ -> $FreeBSD$ 1999-08-28 01:35:59 +00:00
README Slightly improve the description of "crypto". "DES" is a subset of 2000-08-31 17:59:01 +00:00
UPDATING Expand information about device.hints. Add information in the 2000-08-29 06:35:46 +00:00

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree, the most
commonly used one being ``world'', which rebuilds and installs
everything in the FreeBSD system from the source tree except the
kernel, the kernel-modules and the contents of /etc.  The
``buildkernel'' and ``installkernel'' targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process, documentation
for which can be found at:
   http://www.freebsd.org/handbook/kernelconfig.html
And in the config(8) man page.
Note: If you want to build and install the kernel with the
``buildkernel'' and ``installkernel'' targets, you have to build
world before.  More information is available in the handbook.

The sample kernel configuration files reside in the sys/i386/conf
sub-directory (assuming that you've installed the kernel sources), the
file named GENERIC being the one used to build your initial installation
kernel.  The file NOTES contains entries and documentation for all possible
devices, not just those commonly used.  It is the successor of the ancient
LINT file, but in contrast to LINT, it is not buildable as a kernel but a
pure reference and documentation file.


Source Roadmap:
---------------
bin		System/User commands.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc

games		Amusements.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberosIV	Kerberos package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

sys		Kernel sources.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  http://www.freebsd.org/handbook/synching.html