mjg c0fe514f04 Plug capability races. ...

fp and appropriate capability lookups were not atomic, which could result in
improper capabilities being checked.

This could result either in protection bypass or in a spurious ENOTCAPABLE.

Make fp + capability check atomic with the help of sequence counters.

Reviewed by:	kib
MFC after:	3 weeks

2014-10-04 08:08:56 +00:00

..

bus_if.m

Stage one of multipass suspend/resume

2014-09-23 02:56:40 +00:00

capabilities.conf

Allow sigwait(2) in capabilities mode.

2014-01-28 01:49:49 +00:00

clock_if.m

…

cpufreq_if.m

…

device_if.m

…

genassym.sh

…

imgact_aout.c

…

imgact_binmisc.c

Allow multiple image activators to run on the same execution by changing

2014-09-04 21:31:25 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Add missing proctree locking to fill_kinfo_proc consumers.

2014-08-30 03:10:55 +00:00

imgact_gzip.c

…

imgact_shell.c

Allow multiple image activators to run on the same execution by changing

2014-09-04 21:31:25 +00:00

inflate.c

…

init_main.c

Rename global cnt to vm_cnt to avoid shadowing.

2014-03-22 10:26:09 +00:00

init_sysent.c

Regen per r263318.

2014-03-18 21:34:11 +00:00

kern_acct.c

…

kern_alq.c

Prevent alq from panic when the invalid alq_file path specified.

2014-04-05 16:54:47 +00:00

kern_clock.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_clocksource.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_condvar.c

…

kern_conf.c

…

kern_cons.c

Convert from timeout(9) to callout(9).

2014-09-22 14:27:26 +00:00

kern_context.c

…

kern_cpu.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_cpuset.c

Modify cpuset_setithread() to take a CPU ID as an integer, not a char.

2014-09-16 01:21:47 +00:00

kern_ctf.c

…

kern_descrip.c

Plug capability races.

2014-10-04 08:08:56 +00:00

kern_dtrace.c

Commit the rest of the changes that were intended to be part of r266826.

2014-05-29 01:42:22 +00:00

kern_environment.c

…

kern_et.c

Fix build breakage. Apparently all ARM configs build kern_et.c, but only a

2014-04-02 17:34:17 +00:00

kern_event.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

kern_exec.c

Use bzero instead of explicitly zeroing stuff in do_execve.

2014-09-29 23:59:19 +00:00

kern_exit.c

Fix up proc_realparent to always return correct process.

2014-09-03 06:25:34 +00:00

kern_fail.c

…

kern_ffclock.c

…

kern_fork.c

Make fdunshare accept only td parameter.

2014-06-28 05:41:53 +00:00

kern_gzio.c

…

kern_hhook.c

…

kern_idle.c

…

kern_intr.c

Migrate ie->ie_assign_cpu and associated code to use an int for CPU rather

2014-09-17 17:33:22 +00:00

kern_jail.c

Avoid unlocking unlocked mutex in RCTL jail code. Specific test case

2014-09-09 16:05:33 +00:00

kern_khelp.c

…

kern_kthread.c

…

kern_ktr.c

Drop KTR records when we're in the debugger so that the debugger isn't

2014-07-02 22:13:07 +00:00

kern_ktrace.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_linker.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_lock.c

Add function and wrapper to switch lockmgr and vnode lock back to

2014-08-29 09:02:01 +00:00

kern_lockf.c

Correct the problem reported by test16 from

2014-07-08 08:10:15 +00:00

kern_lockstat.c

…

kern_loginclass.c

Initialize loginclass mutex using MTX_SYSINIT instead of using SI_SUB_CPU.

2014-05-14 09:03:02 +00:00

kern_malloc.c

svn revisions r269964 and r269963 seemed to have impaired small memory

2014-09-22 05:07:22 +00:00

kern_mbuf.c

Test for absence of M_NOFREE before attempting to purge the mbuf's tags.

2014-09-30 23:16:26 +00:00

kern_mib.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_module.c

…

kern_mtxpool.c

Garbage collect mtxpool_lockbuilder, the mutex pool historically used

2014-05-02 07:57:40 +00:00

kern_mutex.c

…

kern_ntptime.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_osd.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_physio.c

…

kern_pmc.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_poll.c

- Remove empty wrappers ether_poll_[de]register_drv(). [1]

2014-09-28 14:05:18 +00:00

kern_priv.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_proc.c

Plug a hypothetical use after free in sysctl kern.proc.groups.

2014-09-04 01:21:33 +00:00

kern_prot.c

Fix getppid for traced processes.

2014-08-24 09:04:09 +00:00

kern_racct.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_rangelock.c

…

kern_rctl.c

…

kern_resource.c

rlimit: avoid unnecessary copying of rlimits

2013-12-13 20:54:45 +00:00

kern_rmlock.c

…

kern_rwlock.c

Drop the 3rd clause from all 3 clause BSD licenses where I am the sole

2014-02-05 18:13:27 +00:00

kern_sdt.c

Print a backtrace if the SDT(9) stub gets called so that there's at least

2014-02-22 01:41:45 +00:00

kern_sema.c

…

kern_sharedpage.c

…

kern_shutdown.c

Add error return to dumpsys(), and use it in doadump().

2014-07-25 23:52:53 +00:00

kern_sig.c

Revert the handling of all siginfo sa_flags except SA_SIGINFO to the

2014-08-24 16:37:50 +00:00

kern_switch.c

…

kern_sx.c

…

kern_synch.c

pause_sbt(): Take the cold path (ie. use DELAY()) if KDB is active

2014-09-08 08:44:50 +00:00

kern_syscalls.c

…

kern_sysctl.c

Don't make a temporary copy of fixed sysctl strings.

2014-07-10 21:46:57 +00:00

kern_tc.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

kern_thr.c

…

kern_thread.c

Style.

2014-09-03 08:40:16 +00:00

kern_time.c

Split up sys_ktimer_getoverrun() into a sys_ and a kern_ variant

2014-08-07 16:49:50 +00:00

kern_timeout.c

If we're doing RSS then ensure that the callwheel swi's are CPU pinned.

2014-06-30 04:25:51 +00:00

kern_umtx.c

In do_lock_pi(), do not override error from umtxq_sleep_pi() when

2014-08-22 18:42:14 +00:00

kern_uuid.c

Fix a bug in be_uuid_dec(); it called le16dec() instead of be16dec(),

2014-02-13 22:24:36 +00:00

kern_xxx.c

…

ksched.c

…

link_elf_obj.c

…

link_elf.c

Remove ia64.

2014-07-07 00:27:09 +00:00

linker_if.m

…

Make.tags.inc

Remove AppleTalk support.

2014-03-14 06:29:43 +00:00

Makefile

…

makesyscalls.sh

Fix syscalls that can be loaded as kernel modules - they were not given

2013-12-15 23:19:42 +00:00

md4c.c

…

md5c.c

…

p1003_1b.c

…

posix4_mib.c

…

sched_4bsd.c

Restore pre-r239157 handling of sched_yield(), when thread time slice was

2014-08-23 17:31:56 +00:00

sched_ule.c

Reprase r271616 comments.

2014-09-17 17:43:32 +00:00

serdev_if.m

…

stack_protector.c

…

subr_acl_nfs4.c

…

subr_acl_posix1e.c

…

subr_autoconf.c

…

subr_blist.c

…

subr_bufring.c

…

subr_bus_dma.c

…

subr_bus.c

Don't panic if a resource is allocated twice. Instead, print a warning and

2014-09-26 18:37:49 +00:00

subr_busdma_bufalloc.c

…

subr_capability.c

Remove duplicated includes.

2014-06-26 13:57:44 +00:00

subr_clock.c

Fix a 2038 bug.

2014-05-01 22:28:14 +00:00

subr_counter.c

Create two public UMA_ZONE_PCPU zones: 64 bit sized and pointer sized.

2014-02-10 19:59:46 +00:00

subr_devstat.c

change defaule permissions on /dev/devstat. while i'm here remove

2014-03-24 18:13:41 +00:00

subr_disk.c

…

subr_dummy_vdso_tc.c

…

subr_eventhandler.c

…

subr_fattime.c

Fix a comment typo; conversion tables are for leap years, not leap seconds.

2014-04-20 13:37:22 +00:00

subr_firmware.c

…

subr_hash.c

…

subr_hints.c

Preserve one character space for a trailing '\0'.

2014-02-14 20:54:03 +00:00

subr_kdb.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_kobj.c

…

subr_lock.c

Drop the 3rd clause from all 3 clause BSD licenses where I am the sole

2014-02-05 18:13:27 +00:00

subr_log.c

…

subr_mbpool.c

All mbuf external free functions never fail, so let them be void.

2014-07-11 13:58:48 +00:00

subr_mchain.c

…

subr_module.c

…

subr_msgbuf.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_param.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_pcpu.c

Create two public UMA_ZONE_PCPU zones: 64 bit sized and pointer sized.

2014-02-10 19:59:46 +00:00

subr_pctrie.c

…

subr_power.c

…

subr_prf.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_prof.c

…

subr_rman.c

Nuke the never-used RF_TIMESHARE feature, reducing the complexity of the

2014-07-16 22:18:19 +00:00

subr_rtc.c

…

subr_sbuf.c

Unbreak the ABI by reverting r268494 until the compat shims are provided

2014-07-28 07:20:22 +00:00

subr_scanf.c

…

subr_sfbuf.c

Move KASSERT into locked region.

2014-08-11 15:06:07 +00:00

subr_sglist.c

Add sglist_append_bio(9) to append a struct bio's data to a sglist

2014-01-13 04:41:08 +00:00

subr_sleepqueue.c

sysctl subsystem uses sxlocks so avoid to setup dynamic sysctl nodes

2014-06-24 15:16:55 +00:00

subr_smp.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

subr_stack.c

…

subr_syscall.c

Update kernel inclusions of capability.h to use capsicum.h instead; some

2014-03-16 10:55:57 +00:00

subr_taskqueue.c

Temporary revert r269661, it looks like the patch isn't complete.

2014-08-07 14:32:28 +00:00

subr_terminal.c

vt(4): Add cngrab() and cnungrab() callbacks

2014-08-27 10:04:10 +00:00

subr_trap.c

Fix two issues with /dev/mem access on amd64, both causing kernel page

2014-03-21 14:25:09 +00:00

subr_turnstile.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

subr_uio.c

…

subr_unit.c

…

subr_vmem.c

Do not set M_BESTFIT if a strategy has already been provided. This

2014-04-16 21:39:43 +00:00

subr_witness.c

Make the witness lock limit an option.

2014-08-03 05:00:43 +00:00

sys_capability.c

Prepare fget_unlocked for reading fd table only once.

2014-07-23 19:33:49 +00:00

sys_generic.c

fd: replace fd_nfiles with fd_lastfile where appropriate

2014-06-22 01:31:55 +00:00

sys_pipe.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

sys_procdesc.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

sys_process.c

Require p_cansched() for changing a process' protection status via

2014-10-02 21:18:16 +00:00

sys_socket.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

syscalls.c

Regen per r263318.

2014-03-18 21:34:11 +00:00

syscalls.master

Remove dead code from umtx support:

2014-03-18 21:32:03 +00:00

systrace_args.c

Regen per r263318.

2014-03-18 21:34:11 +00:00

sysv_ipc.c

…

sysv_msg.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

sysv_sem.c

Pull in r267961 and r267973 again. Fix for issues reported will follow.

2014-06-28 03:56:17 +00:00

sysv_shm.c

Automatically prefault a limited number of mappings to resident pages in

2014-08-31 17:38:41 +00:00

tty_compat.c

…

tty_info.c

…

tty_inq.c

…

tty_outq.c

…

tty_pts.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

tty_tty.c

…

tty_ttydisc.c

…

tty.c

tty_rel_free() can be called more than once for the same tty so make sure

2014-09-28 21:12:23 +00:00

uipc_accf.c

The accept filter code is not specific to the FreeBSD IPv4 network stack,

2014-07-26 19:27:34 +00:00

uipc_debug.c

…

uipc_domain.c

…

uipc_mbuf2.c

…

uipc_mbuf.c

Change a very strange code in m_demote() to simple assertion.

2014-09-04 19:27:30 +00:00

uipc_mqueue.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

uipc_sem.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

uipc_shm.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

uipc_sockbuf.c

Improve transmit sending offload, TSO, algorithm in general.

2014-09-22 08:27:27 +00:00

uipc_socket.c

- Make hhook_run_socket() vnet-aware instead of adding CURVNET_SET() around

2014-09-08 09:04:22 +00:00

uipc_syscalls.c

Provide sf_buf_ref() to optimize refcounting of already allocated

2014-08-11 12:59:55 +00:00

uipc_usrreq.c

Partial revert of r262867.

2014-08-03 22:37:21 +00:00

vfs_acl.c

Update kernel inclusions of capability.h to use capsicum.h instead; some

2014-03-16 10:55:57 +00:00

vfs_aio.c

Update kernel inclusions of capability.h to use capsicum.h instead; some

2014-03-16 10:55:57 +00:00

vfs_bio.c

Add KASSERTs to catch the case where a developer may have forgotten to

2014-09-04 00:10:06 +00:00

vfs_cache.c

vn_path_to_global_path: update comment.

2014-08-03 07:59:19 +00:00

vfs_cluster.c

…

vfs_default.c

Remove unused arguments for VOP_GETPAGES(), VOP_PUTPAGES().

2014-09-10 12:36:41 +00:00

vfs_export.c

…

vfs_extattr.c

Update kernel inclusions of capability.h to use capsicum.h instead; some

2014-03-16 10:55:57 +00:00

vfs_hash.c

…

vfs_init.c

Remove Giant acquisition from the mount and unmount pathes.

2014-08-03 03:27:54 +00:00

vfs_lookup.c

Plug a memory leak in case of failed lookups in capability mode.

2014-08-24 12:51:12 +00:00

vfs_mount.c

Bring in the new automounter, similar to what's provided in most other

2014-08-17 09:44:42 +00:00

vfs_mountroot.c

Move root_mount_hold() functionality to separate mutex.

2014-06-11 08:14:08 +00:00

vfs_subr.c

In the syncer, drop the sync mutex while patting the watchdog.

2014-10-01 15:32:28 +00:00

vfs_syscalls.c

In kern_linkat() and kern_renameat(), do not call namei(9) while

2014-09-25 20:42:25 +00:00

vfs_vnops.c

Add a new fo_fill_kinfo fileops method to add type-specific information to

2014-09-22 16:20:47 +00:00

vnode_if.src

Remove unused arguments for VOP_GETPAGES(), VOP_PUTPAGES().

2014-09-10 12:36:41 +00:00