Allan Jude e28f9b7d03 Jails: Optionally prevent jailed root from binding to privileged ports ...

You may now optionally specify allow.noreserved_ports to prevent root
inside a jail from using privileged ports (less than 1024)

PR:		217728
Submitted by:	Matt Miller <mattm916@pulsar.neomailbox.ch>
Reviewed by:	jamie, cem, smh
Relnotes:	yes
Differential Revision:	https://reviews.freebsd.org/D10202

2017-06-06 02:15:00 +00:00

..

amd64

Eliminate duplication of the pmap and pv list unlock operations in

2017-06-03 17:24:13 +00:00

arm

Start to rename files with common or generic names to be SoC specific. The

2017-06-04 09:11:14 +00:00

arm64

- Don't bother flushing the data cache for pages we're about to unmap, there's

2017-06-02 14:17:14 +00:00

boot

Small cleanup in dev_net.c

2017-05-28 21:20:55 +00:00

bsm

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

cam

Introduce Genesys GL3224 quirks

2017-05-29 09:22:53 +00:00

cddl

zfs_lookup: fix bogus arguments to lookup of "snapshot" directory

2017-05-29 06:30:34 +00:00

compat

Add sysctl vfs.ino64_trunc_error controlling action on truncating

2017-06-05 11:40:30 +00:00

conf

[iwm] Move Smart Fifo handling into if_iwm_sf.c, sync with Linux iwlwifi.

2017-06-04 21:05:58 +00:00

contrib

[iwmfw] 8000C ver 22 firmware.

2017-06-04 21:27:39 +00:00

crypto

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

ddb

Remove register keyword from sys/ and ANSIfy prototypes

2017-05-17 00:34:34 +00:00

dev

[iwm] Remove support for fw older than -17 and -22

2017-06-04 21:28:52 +00:00

fs

ext2fs(4): Fix a null dererence and clean an unclear switch

2017-06-03 22:39:50 +00:00

gdb

…

geom

Add MD_VERIFY option to enable O_VERIFY in open for vnode type.

2017-05-31 21:18:11 +00:00

gnu

[mips] [rt2880] Add oldest Ralink MIPS SOC RT2880 support code.

2017-05-06 06:20:34 +00:00

i386

Remove the BSD/OS 2.1 system call gate LDT entry.

2017-05-23 22:34:18 +00:00

isa

…

kern

Jails: Optionally prevent jailed root from binding to privileged ports

2017-06-06 02:15:00 +00:00

kgssapi

…

libkern

Sync qsort.c with userland r318515.

2017-05-19 06:37:16 +00:00

mips

Remove unused tlb_write_random().

2017-06-05 11:04:22 +00:00

modules

[iwmfw] bump built firmware now to version 22 for 7265D and 8000C.

2017-06-04 21:28:03 +00:00

net

Call VLAN_CAPABILITIES() when LAGG capabilities change.

2017-05-26 22:22:48 +00:00

net80211

net80211: initialize i_seq for A-MPDU frames.

2017-06-01 20:46:43 +00:00

netgraph

Make cached Bluetooth LE host advertise information visible from userland.

2017-04-27 15:03:24 +00:00

netinet

Fix the ICMP6 handling for TCP.

2017-06-03 21:53:58 +00:00

netinet6

Fix an unnecessary/incorrect check in the PKTOPT_EXTHDRCPY macro.

2017-05-30 14:50:28 +00:00

netipsec

Build kdebug_secreplay() function only when IPSEC_DEBUG is defined.

2017-06-01 10:04:12 +00:00

netpfil

Fix the queue delay estimation in PIE/FQ-PIE when the timestamp

2017-05-19 08:38:03 +00:00

netsmb

…

nfs

…

nfsclient

Add an NFSv4.1 mount option for "use one openowner".

2017-04-13 21:54:19 +00:00

nfsserver

…

nlm

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

ofed

All these files need sys/vmmeter.h, but now they got it implicitly

2017-04-17 17:07:00 +00:00

opencrypto

Use const with some read-only buffers in opencrypto APIs.

2017-05-09 18:28:42 +00:00

powerpc

Add a driver for the Chelsio T6 crypto accelerator engine.

2017-05-17 22:13:07 +00:00

riscv

Follow r317061 "Remove struct vmmeter from struct pcpu"

2017-04-19 17:06:32 +00:00

rpc

* limit size of buffers to RPC_MAXDATASIZE

2017-06-01 06:12:25 +00:00

security

Commit the 64-bit inode project.

2017-05-23 09:29:05 +00:00

sparc64

fix sparc64 build by restoring 'register' in pcpu.h

2017-05-17 16:32:24 +00:00

sys

Jails: Optionally prevent jailed root from binding to privileged ports

2017-06-06 02:15:00 +00:00

teken

Oops, my fix for bright colors broke bright black some more (in cases

2017-03-27 10:48:28 +00:00

tests

style(9): sort headers

2017-05-09 05:08:47 +00:00

tools

Declare the "snd_fxdiv_table" once. This shaves around 24Kbytes of

2017-05-25 05:23:47 +00:00

ufs

Mitigate several problems with the softdep_request_cleanup() on busy

2017-06-03 16:18:50 +00:00

vm

The variable "breakout" is used like a Boolean, so actually define it as

2017-06-05 18:07:56 +00:00

x86

fix indentation

2017-05-30 13:53:03 +00:00

xdr

* limit size of buffers to RPC_MAXDATASIZE

2017-06-01 06:12:25 +00:00

xen

…

Makefile

Remove glimpse make target added in r181432

2017-05-22 15:53:30 +00:00