Bruce M Simpson cd83bbd2aa Implement ifnet cloning for tun(4)/tap(4). ...

Make devfs cloning a sysctl/tunable which defaults to on.

If devfs cloning is enabled, only the super-user may create
tun(4)/tap(4)/vmnet(4) instances. Devfs cloning is still enabled by
default; it may be disabled from the loader or via sysctl with
"net.link.tap.devfs_cloning" and "net.link.tun.devfs_cloning".

Disabling its use affects potentially all tun(4)/tap(4) consumers
including OpenSSH, OpenVPN and VMware.

PR:		105228 (potentially also 90413, 105570)
Submitted by:	Landon Fuller
Tested by:	Andrej Tobola
Approved by:	core (rwatson)
MFC after:	4 weeks

2007-02-04 16:32:46 +00:00

..

amd64

Introduce some more SO_ option equivalents from Linux to FreeBSD.

2007-02-01 13:36:19 +00:00

arm

ether_ifattach() sets if_mtu to ETHERMTU, don't bother set it again.

2007-02-03 07:46:26 +00:00

boot

Document the init_chroot and init_script variables.

2007-02-04 06:35:10 +00:00

bsm

Merge OpenBSM 1.0 alpha 12 import changes into src/sys/bsm. New events

2006-09-25 12:22:07 +00:00

cam

Use the more specific 'EM732X' designation rather than * to disable sync

2007-01-23 17:29:31 +00:00

coda

coda_vptofh is never defined nor used.

2007-02-02 15:47:28 +00:00

compat

Remove extern int hz; use proper include file instead.

2007-02-02 08:58:16 +00:00

conf

The path to the mmc/mmcbus_if.m file is wrong. Correct it by

2007-02-03 06:46:11 +00:00

contrib

Clean up pfr_kentry_pl2 as well. This fixes a kernel panic in the vm.zone

2007-01-01 16:51:11 +00:00

crypto

Initialize T1 to silent gcc warning.

2006-10-22 02:19:33 +00:00

ddb

Use FOREACH_PROC_IN_SYSTEM instead of using its unrolled form.

2007-01-17 15:05:52 +00:00

dev

Synaptics TouchPad seems to go back to Relative Mode after the call

2007-02-04 12:47:52 +00:00

fs

coda_vptofh is never defined nor used.

2007-02-02 15:47:28 +00:00

gdb

…

geom

We expect 'bio_data != NULL' for BIO_{READ,WRITE,GETATTR}, but for

2007-01-28 23:36:07 +00:00

gnu

Cylinder group bitmaps and blocks containing inode for a snapshot

2007-01-23 10:01:19 +00:00

i4b

Fix fat-fingering in previous commit.

2006-12-29 16:38:22 +00:00

i386

Introduce some more SO_ option equivalents from Linux to FreeBSD.

2007-02-01 13:36:19 +00:00

ia64

Remove 3rd clause, renumber, ok per email

2007-01-12 07:26:21 +00:00

isa

Cleaned up declaration and initialization of clock_lock. It is only

2007-01-23 08:01:20 +00:00

isofs/cd9660

The ISO9660 spec does allow files up to 4G. Change the i_size

2006-12-08 07:43:53 +00:00

kern

Add a small informative printf under bootverbose to firmware_register to

2007-02-03 16:01:46 +00:00

libkern

Add strstr() function to the libkern.

2006-08-12 15:28:39 +00:00

modules

Reflecting the removal of MSDOSFS_LARGE found in sys/conf/files:1.1173.

2007-02-01 04:21:03 +00:00

net

Implement ifnet cloning for tun(4)/tap(4).

2007-02-04 16:32:46 +00:00

net80211

clear/reclaim challenge text when switching auth mode and operating as an ap

2007-02-04 05:49:16 +00:00

netatalk

Clean up DDP layer netatalk code:

2007-01-12 15:07:51 +00:00

netatm

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

netgraph

Quoting Alexander:

2007-02-02 09:45:23 +00:00

netinet

Include opt_ipdivert.h so that the message announcing ipfw correctly

2007-02-03 22:11:53 +00:00

netinet6

ng_iface requiers neighbor cache as well.

2007-02-03 09:34:36 +00:00

netipsec

s,#if INET6,#ifdef INET6,

2006-12-14 17:33:46 +00:00

netipx

Factor out UCB and my copyrights from copyrights of Mike Mitchell;

2007-01-08 22:14:00 +00:00

netkey

With exception of the if_name() macro, all definitions in net_osdep.h

2006-08-04 21:27:40 +00:00

netnatm

Factor out my copyrights + licenses from Charles D. Cranor and

2007-01-08 22:30:39 +00:00

netncp

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

netsmb

Sweep kernel replacing suser(9) calls with priv(9) calls, assigning

2006-11-06 13:42:10 +00:00

nfs

NFSv4 client:

2006-11-28 19:33:28 +00:00

nfs4client

Rename some functions and variables from nfs_* to nfs4_* to avoid

2007-01-25 14:33:13 +00:00

nfsclient

Fix for a vnode lock leak in nfs_create() in the event of an error.

2007-01-31 23:10:27 +00:00

nfsserver

The nfsm_srvpathsiz() macro in nfsrv_symlink() in nfs_serv.c should

2007-01-02 20:42:08 +00:00

opencrypto

…

pc98

MFi386: revision 1.647.

2007-01-28 07:19:14 +00:00

pccard

…

pci

Change the remainder of the drivers for DMA'ing devices enabled in the

2007-01-21 19:32:51 +00:00

powerpc

Remove stale header.

2007-01-26 04:58:31 +00:00

rpc

…

security

When returning early from audit_arg_file() due to so->so_pcb being NULL

2007-01-06 22:28:28 +00:00

sparc64

Quiet GCC4 warnings regarding the width of printf()-arguments not

2007-01-20 17:14:12 +00:00

sun4v

Add support for IPI_PREEMPT in order to enable use of the ULE scheduler

2007-02-02 05:00:21 +00:00

sys

Style; remove argument names from prototype, be consistent with

2007-02-03 07:49:20 +00:00

tools

…

ufs

If quotacheck or edquota reset the block or inode grace time for

2007-02-04 06:46:57 +00:00

vm

Fix for problems that occur when all mbuf clusters migrate to the mbuf packet

2007-01-25 01:05:23 +00:00

Makefile

o Add cam to a list of cscope dirs.

2006-11-26 18:27:16 +00:00