Christian S.J. Peron c297f0e497 Allow sigwait(2) in capabilities mode. ...

It's common for multi-threaded processes to create a thread for
the purpose of synchronously processing signals. Allow such processes to
utilize a capabilities sandbox.

Discussed with:	rwatson, pjd
MFC after:	2 weeks

2014-01-28 01:49:49 +00:00

..

bus_if.m

Add a BUS_CHILD_DELETED() method that a bus can hook to allow it to cleanup

2012-08-21 18:13:09 +00:00

capabilities.conf

Allow sigwait(2) in capabilities mode.

2014-01-28 01:49:49 +00:00

clock_if.m

…

cpufreq_if.m

…

device_if.m

Revert r239178 and implement two new functions, namely

2012-08-15 15:42:57 +00:00

genassym.sh

…

imgact_aout.c

Cosmetics: define FREEBSD32_MINUSER and AOUT32_MINUSER for struct

2012-07-22 13:41:45 +00:00

imgact_elf32.c

…

imgact_elf64.c

…

imgact_elf.c

Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping use

2013-09-09 18:11:59 +00:00

imgact_gzip.c

Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping use

2013-09-09 18:11:59 +00:00

imgact_shell.c

…

inflate.c

…

init_main.c

Debugging. My attempt at EVENTHANDLER(multiuser) was a failure; use EVENTHANDLER(mountroot) instead.

2013-10-08 06:54:52 +00:00

init_sysent.c

Allow sigwait(2) in capabilities mode.

2014-01-28 01:49:49 +00:00

kern_acct.c

acct: create a special plimit object and set it for exiting processes

2013-06-30 19:08:06 +00:00

kern_alq.c

The fix committed in r250951 replaced the reported panic with a deadlock... gold

2013-06-17 09:49:07 +00:00

kern_clock.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_clocksource.c

Fix periodic per-CPU timers startup on boot.

2013-12-16 13:52:18 +00:00

kern_condvar.c

Fix lc_lock/lc_unlock() support for rmlocks held in shared mode. With

2013-09-20 23:06:21 +00:00

kern_conf.c

Remove global device lock acquisition from dev_relthread(), replacing it

2013-10-22 10:40:26 +00:00

kern_cons.c

Delete echoed doesn't rub out the previous character, so always

2013-12-31 04:40:25 +00:00

kern_context.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_cpu.c

Revert r175376 and tune cpufreq(4) frequency comparison logic instead.

2012-03-10 18:56:16 +00:00

kern_cpuset.c

Several improvements to rmlock(9). Many of these are based on patches

2013-06-25 18:44:15 +00:00

kern_ctf.c

Remove the support for using non-mpsafe filesystem modules.

2012-10-22 17:50:54 +00:00

kern_descrip.c

Plug a memory leak in dup2 when both old and new fd have ioctl caps.

2014-01-03 16:36:55 +00:00

kern_dtrace.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

kern_environment.c

Make getenv_*() functions and respectively TUNABLE_*_FETCH() macros not

2013-11-01 10:32:33 +00:00

kern_et.c

Fix incorrect assertion that caused panic when periodic-only timers used.

2013-03-13 06:42:01 +00:00

kern_event.c

Add in a default initialiser for the EVOPS_SENDFILE kqueue filterops.

2014-01-17 05:15:44 +00:00

kern_exec.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_exit.c

proc exit: don't take PROC_LOCK while freeing rlimits

2013-12-15 04:11:43 +00:00

kern_fail.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

kern_ffclock.c

Revise the sysctl handling code and restructure the hierarchy of sysctls

2011-12-01 07:19:13 +00:00

kern_fork.c

The fasttrap fork handler is responsible for removing tracepoints in the

2013-12-18 01:41:52 +00:00

kern_gzio.c

Remove the support for using non-mpsafe filesystem modules.

2012-10-22 17:50:54 +00:00

kern_hhook.c

Move hhook's per-vnet initialisation to an earlier SYSINIT SI_SUB stage to

2013-06-15 10:08:34 +00:00

kern_idle.c

…

kern_intr.c

Snapshot. This passes the build test, but has not yet been finished or debugged.

2013-10-04 06:55:06 +00:00

kern_jail.c

Fix copy/paste typo.

2013-12-17 16:45:19 +00:00

kern_khelp.c

Cleanup and simplification in khelp_{register|deregister}_helper(). No

2013-06-15 06:45:17 +00:00

kern_kthread.c

Do not use potentially stale thread in kthread_add()

2013-08-17 17:02:43 +00:00

kern_ktr.c

ktr: correctly handle possible wrap-around in the boot buffer

2013-02-08 07:29:07 +00:00

kern_ktrace.c

Fix panic in ktrcapfail() when no capability rights are passed.

2013-09-18 19:26:08 +00:00

kern_linker.c

Invoke the kld_* event handlers from linker_load_file() and

2013-12-19 03:48:36 +00:00

kern_lock.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_lockf.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

kern_lockstat.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_loginclass.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

kern_malloc.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_mbuf.c

Ignore attempts to set the nmbcluster sysctls to their current value

2013-10-10 16:11:34 +00:00

kern_mib.c

Rename sysctl kern.supported_abis to kern.supported_archs, since it gives

2013-12-04 16:38:40 +00:00

kern_module.c

Fix a typo.

2012-08-22 20:01:57 +00:00

kern_mtxpool.c

…

kern_mutex.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_ntptime.c

rename scheduler->swapper and SI_SUB_RUN_SCHEDULER->SI_SUB_LAST

2013-07-24 09:45:31 +00:00

kern_osd.c

…

kern_physio.c

Fix some issues in change 254760 pointed out by Bruce Evans:

2013-08-29 16:41:40 +00:00

kern_pmc.c

Add software PMC support.

2012-03-28 20:58:30 +00:00

kern_poll.c

The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare

2013-10-26 17:58:36 +00:00

kern_priv.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_proc.c

Add an kinfo sysctl to retrieve signal trampoline location for the

2013-11-26 19:47:09 +00:00

kern_prot.c

Style fix

2012-11-14 10:33:12 +00:00

kern_racct.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_rangelock.c

Change the queue of locks in kern_rangelock.c from holding lock requests in

2013-08-15 20:19:17 +00:00

kern_rctl.c

Add CPU percentage limit enforcement to RCTL. The resouce name is "pcpu".

2012-10-26 16:01:08 +00:00

kern_resource.c

rlimit: avoid unnecessary copying of rlimits

2013-12-13 20:54:45 +00:00

kern_rmlock.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_rwlock.c

- Assert for not leaking readers rw locks counter on userland return.

2013-12-17 13:37:02 +00:00

kern_sdt.c

sdt: add support for solaris/illumos style DTRACE_PROBE macros

2013-11-26 08:49:53 +00:00

kern_sema.c

…

kern_sharedpage.c

Remove the deprecated VM_ALLOC_RETRY flag for the vm_page_grab(9).

2013-08-22 07:39:53 +00:00

kern_shutdown.c

Make panic_reboot_wait_time static.

2013-12-05 03:01:41 +00:00

kern_sig.c

Make process descriptors standard part of the kernel. rwhod(8) already

2013-11-30 15:08:35 +00:00

kern_switch.c

Add a comment on why inlining critical_enter() may not be a good idea

2012-12-09 04:54:22 +00:00

kern_sx.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

kern_synch.c

use saner calculations in should_yield

2013-11-26 14:00:50 +00:00

kern_syscalls.c

…

kern_sysctl.c

Add a helpful message that can help point to why a sysctl tree removal failed

2013-08-09 01:04:44 +00:00

kern_tc.c

- Make callout(9) tickless, relying on eventtimers(4) as backend for

2013-03-04 11:09:56 +00:00

kern_thr.c

Stop treating td_sigmask specially for the purposes of new thread

2012-05-26 20:03:47 +00:00

kern_thread.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_time.c

Implement compat32 wrappers for the ktimer_* syscalls.

2013-07-21 19:43:52 +00:00

kern_timeout.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

kern_umtx.c

Fix two issues with the spin loops in the umtx(2) implementation.

2013-06-13 09:33:22 +00:00

kern_uuid.c

Further restrict the MAC addresses that we use for UUID generation

2013-07-24 18:13:43 +00:00

kern_xxx.c

…

ksched.c

sched_rr_interval() seems always returned period in hz ticks, but same

2012-08-10 18:19:57 +00:00

link_elf_obj.c

Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping use

2013-09-09 18:11:59 +00:00

link_elf.c

Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping use

2013-09-09 18:11:59 +00:00

linker_if.m

…

Make.tags.inc

- Trim an unused and bogus Makefile for mount_smbfs.

2013-06-28 21:00:08 +00:00

Makefile

…

makesyscalls.sh

Fix syscalls that can be loaded as kernel modules - they were not given

2013-12-15 23:19:42 +00:00

md4c.c

…

md5c.c

…

p1003_1b.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

posix4_mib.c

Define two new sysctl node flags: CTLFLAG_CAPRD and CTLFLAG_CAPRW, which

2011-07-17 23:05:24 +00:00

sched_4bsd.c

The arguments to sched:::off-cpu are the thread and associated process of

2013-12-29 17:08:30 +00:00

sched_ule.c

In sys/kern/sched_ule.c, remove static function sched_both(), which is

2013-12-25 16:25:54 +00:00

serdev_if.m

…

stack_protector.c

…

subr_acl_nfs4.c

Fix bug where NFSv4 ACL enforcement code wouldn't unconditionally

2012-04-17 14:54:00 +00:00

subr_acl_posix1e.c

Add module load/unload stubs.

2012-03-13 20:27:48 +00:00

subr_autoconf.c

…

subr_blist.c

Remove reference to the rlist code from comments, and fix a typo visible

2013-02-05 20:08:33 +00:00

subr_bufring.c

…

subr_bus_dma.c

Add bus_dmamap_load_ma() function to load map with the array of

2013-10-27 21:39:16 +00:00

subr_bus.c

Add YARROW_RNG and FORTUNA_RNG to sys/conf/options.

2013-10-08 11:05:26 +00:00

subr_busdma_bufalloc.c

Replace kernel virtual address space allocation with vmem. This provides

2013-08-07 06:21:20 +00:00

subr_capability.c

Change cap_rights_merge(3) and cap_rights_remove(3) to return pointer

2013-11-14 22:59:20 +00:00

subr_clock.c

…

subr_counter.c

Revert r249590 and in case if mp_ncpus isn't initialized use MAXCPU. This

2013-07-23 11:16:40 +00:00

subr_devstat.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

subr_disk.c

…

subr_dummy_vdso_tc.c

Implement mechanism to export some kernel timekeeping data to

2012-06-22 07:06:40 +00:00

subr_eventhandler.c

…

subr_fattime.c

…

subr_firmware.c

Correct sizeof usage

2012-06-25 05:41:16 +00:00

subr_hash.c

Convert panic()s to KASSERT()s. This is an optimisation for

2012-01-23 16:31:46 +00:00

subr_hints.c

Style fixes.

2012-09-04 23:16:55 +00:00

subr_kdb.c

When reentering kdb, typically due to a bug causing trap or assert in

2013-10-27 16:20:52 +00:00

subr_kobj.c

As it turns out, r186347 actually is insufficient to avoid the use of the

2011-11-15 20:11:03 +00:00

subr_lock.c

Several improvements to rmlock(9). Many of these are based on patches

2013-06-25 18:44:15 +00:00

subr_log.c

MFcalloutng (r244255 by mav, with minor changes):

2013-03-04 16:07:55 +00:00

subr_mbpool.c

Give (*ext_free) an int return value allowing for very sophisticated

2013-08-25 10:57:09 +00:00

subr_mchain.c

Mechanically substitute flags from historic mbuf allocator with

2012-12-05 08:04:20 +00:00

subr_module.c

…

subr_msgbuf.c

- Clean up timestamps in msgbuf code. The timestamps should now be

2012-03-19 00:36:32 +00:00

subr_param.c

Add VM_LAST, a special last element in enum VM_GUEST and use it in CTASSERT

2013-11-12 20:13:10 +00:00

subr_pcpu.c

Mark MALLOC_DEFINEs static that have no corresponding MALLOC_DECLAREs.

2011-11-07 06:44:47 +00:00

subr_pctrie.c

- Add a new general purpose path-compressed radix trie which can be used

2013-05-12 04:05:01 +00:00

subr_power.c

…

subr_prf.c

Implement generic support for early printf. Thought I can't find the

2014-01-22 21:20:08 +00:00

subr_prof.c

Mark all SYSCTL_NODEs static that have no corresponding SYSCTL_DECLs.

2011-11-07 15:43:11 +00:00

subr_rman.c

Unlock in the error path to prevent a lock leak.

2012-05-31 17:27:05 +00:00

subr_rtc.c

Core structure and functions to support a feed-forward clock within the kernel.

2011-11-19 14:10:16 +00:00

subr_sbuf.c

Always request zeroed memory, in case we're dumb enough to leak it later.

2013-09-22 23:47:56 +00:00

subr_scanf.c

Xen netback driver rewrite.

2012-01-26 16:35:09 +00:00

subr_sglist.c

Add sglist_append_bio(9) to append a struct bio's data to a sglist

2014-01-13 04:41:08 +00:00

subr_sleepqueue.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

subr_smp.c

Fix ia64 and mips kernel builds due to XENHVM=>GENERIC integration in

2013-09-22 02:46:13 +00:00

subr_stack.c

Constify stack argument for functions that don't modify it.

2011-11-16 19:06:55 +00:00

subr_syscall.c

- For kernel compiled only with KDTRACE_HOOKS and not any lock debugging

2013-11-25 07:38:45 +00:00

subr_taskqueue.c

add taskqueue_drain_all

2013-11-28 18:56:34 +00:00

subr_terminal.c

Fix copy-pasting of CJK fullwidth characters.

2013-12-24 18:42:26 +00:00

subr_trap.c

- Assert for not leaking readers rw locks counter on userland return.

2013-12-17 13:37:02 +00:00

subr_turnstile.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

subr_uio.c

Remove zero-copy sockets code. It only worked for anonymous memory,

2013-09-16 06:25:54 +00:00

subr_unit.c

Move the definition of the struct unrhdr into a separate header file,

2013-08-30 07:37:45 +00:00

subr_vmem.c

Create own free list for each of the first 32 possible allocation sizes.

2013-12-11 21:48:04 +00:00

subr_witness.c

Bump up WITNESS_COUNT from 1024 to 1536 so there are sufficient entries for

2014-01-20 01:59:35 +00:00

sys_capability.c

This looks like a typo that breaks the build. Yell at me if this isn't the

2013-09-05 03:36:57 +00:00

sys_generic.c

Replace CAP_POLL_EVENT and CAP_POST_EVENT capability rights (which I had

2013-11-15 19:55:35 +00:00

sys_pipe.c

Add a mmap flag (MAP_32BIT) on 64-bit platforms to request that a mapping use

2013-09-09 18:11:59 +00:00

sys_procdesc.c

Make process descriptors standard part of the kernel. rwhod(8) already

2013-11-30 15:08:35 +00:00

sys_process.c

Extend the support for exempting processes from being killed when swap is

2013-09-19 18:53:42 +00:00

sys_socket.c

The r48589 promised to remove implicit inclusion of if_var.h soon. Prepare

2013-10-26 17:58:36 +00:00

syscalls.c

Regen.

2013-09-19 18:56:00 +00:00

syscalls.master

Extend the support for exempting processes from being killed when swap is

2013-09-19 18:53:42 +00:00

systrace_args.c

Regenerate syscall argument strings after r255777.

2013-09-21 23:06:36 +00:00

sysv_ipc.c

…

sysv_msg.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

sysv_sem.c

In order to maximize the re-usability of kernel code in user space this

2011-09-16 13:58:51 +00:00

sysv_shm.c

Eliminate the gratuitous use of mmap(2) flags from the implementation

2013-11-12 17:46:11 +00:00

tty_compat.c

…

tty_info.c

Fix whitespace inconsistencies in TTY code.

2012-02-06 18:15:46 +00:00

tty_inq.c

Use strchr() and strrchr().

2012-01-02 12:12:10 +00:00

tty_outq.c

Fix whitespace inconsistencies in the TTY layer and its drivers owned by me.

2011-06-26 18:26:20 +00:00

tty_pts.c

Make sendfile() a method in the struct fileops. Currently only

2013-08-15 07:54:31 +00:00

tty_tty.c

…

tty_ttydisc.c

Correct SIGTTIN handling.

2012-10-25 09:05:21 +00:00

tty.c

Move list of ttys handling from the allocating procedures, to the

2013-12-20 19:45:51 +00:00

uipc_accf.c

…

uipc_debug.c

Fix socket buffer timeouts precision using the new sbintime_t KPI instead

2013-09-01 23:34:53 +00:00

uipc_domain.c

- Implement two new system calls:

2013-03-02 21:11:30 +00:00

uipc_mbuf2.c

Mechanically substitute flags from historic mbuf allocator with

2012-12-05 08:04:20 +00:00

uipc_mbuf.c

Remove historical macro.

2014-01-16 13:42:50 +00:00

uipc_mqueue.c

Replace CAP_POLL_EVENT and CAP_POST_EVENT capability rights (which I had

2013-11-15 19:55:35 +00:00

uipc_sem.c

Change the cap_rights_t type from uint64_t to a structure that we can extend

2013-09-05 00:09:56 +00:00

uipc_shm.c

Accept O_CLOEXEC in shm_open().

2014-01-24 21:05:07 +00:00

uipc_sockbuf.c

Fix comment.

2014-01-17 11:09:05 +00:00

uipc_socket.c

Simplify wait/nowait code, eventually killing last remnant of

2014-01-16 13:45:41 +00:00

uipc_syscalls.c

Implement a kqueue notification path for sendfile.

2014-01-17 05:26:55 +00:00

uipc_usrreq.c

Provide pr_ctloutput method for AF_LOCAL/SOCK_SEQPACKET sockets.

2013-09-11 18:22:30 +00:00

vfs_acl.c

Change the cap_rights_t type from uint64_t to a structure that we can extend

2013-09-05 00:09:56 +00:00

vfs_aio.c

The fget() function now takes pointer to cap_rights_t, so change 0 to NULL.

2013-09-05 11:59:23 +00:00

vfs_bio.c

Fix a typo.

2014-01-21 03:24:52 +00:00

vfs_cache.c

Fix accounting for the negative cache entries when reusing v_cache_dd.

2013-12-27 17:09:59 +00:00

vfs_cluster.c

When allocating a pbuf for the cluster write, do not sleep waiting

2013-08-27 01:31:12 +00:00

vfs_default.c

- Convert the bufobj lock to rwlock.

2013-05-31 00:43:41 +00:00

vfs_export.c

Further refine the handling of stop signals in the NFS client. The

2013-02-21 19:02:50 +00:00

vfs_extattr.c

Change the cap_rights_t type from uint64_t to a structure that we can extend

2013-09-05 00:09:56 +00:00

vfs_hash.c

Add exported vfs_hash_index() function, which calculates the canonical

2013-01-14 05:41:40 +00:00

vfs_init.c

Revert accidental commit.

2013-06-29 05:05:57 +00:00

vfs_lookup.c

dtrace sdt: remove the ugly sname parameter of SDT_PROBE_DEFINE

2013-11-26 08:46:27 +00:00

vfs_mount.c

Change len checks for fstypelen and fspathlen to be against absolute len

2013-10-03 22:52:03 +00:00

vfs_mountroot.c

In sys/kern/vfs_mountroot.c, remove static function parse_isspace(),

2013-12-25 22:14:42 +00:00

vfs_subr.c

Do not flush buffers when the v_object of the passed vnode does not

2013-10-09 18:43:29 +00:00

vfs_syscalls.c

The posix_fallocate(2) syscall should return error number on error,

2014-01-23 17:24:26 +00:00

vfs_vnops.c

If vn_open_vnode() succeeded in opening the vnode, but subsequent

2013-12-17 17:31:16 +00:00

vnode_if.src

If filesystem declares that it supports shared locking for writes, use

2013-11-09 20:36:29 +00:00