svn commit: r244393 - stable/9

2012-12-18 Thread Robert Watson
Author: rwatson Date: Tue Dec 18 10:34:18 2012 New Revision: 244393 URL: http://svnweb.freebsd.org/changeset/base/244393 Log: Merge r243800 from head to stable/9: Specifically point at the Handbook instructions for world updates in UPDATING by URL. As there has been some

svn commit: r244397 - stable/9/contrib/openbsm/bin/auditdistd

2012-12-18 Thread Robert Watson
Author: rwatson Date: Tue Dec 18 14:31:55 2012 New Revision: 244397 URL: http://svnweb.freebsd.org/changeset/base/244397 Log: Apply minor local adjustment to OpenBSM's parse.y due to differences in Yacc between 10-CURRENT and 9-STABLE; this will allow the soon-to-be-connected auditdistd to

svn commit: r244398 - in stable/9: etc/defaults etc/mtree etc/rc.d share/man/man4 usr.sbin usr.sbin/auditdistd

2012-12-18 Thread Robert Watson
Author: rwatson Date: Tue Dec 18 14:32:53 2012 New Revision: 244398 URL: http://svnweb.freebsd.org/changeset/base/244398 Log: Merge r244181 from head to stable/9: Fix the location of auditdistd configuration file. Reported by:Johan Hendriks joh.hendr...@gmail.com Merge

Re: svn commit: r244663 - stable/9

2012-12-25 Thread Robert Watson
On Tue, 25 Dec 2012, Konstantin Belousov wrote: On Mon, Dec 24, 2012 at 12:04:03PM -0800, Alfred Perlstein wrote: On 12/24/12 11:24 AM, Adrian Chadd wrote: ... why'd we break the KBI in a stable branch? I am not sure either. I think a single VOP for nullfs (while ugly) would have sufficed.

svn commit: r244871 - head/sys/dev/fdt

2012-12-30 Thread Robert Watson
Author: rwatson Date: Sun Dec 30 21:10:48 2012 New Revision: 244871 URL: http://svnweb.freebsd.org/changeset/base/244871 Log: When a partially initialised FDT-based device instance can't attach, perhaps due to an interrupt configuration problem, do not try to free device ivars that have not

svn commit: r244899 - head/sys/mips/beri

2012-12-31 Thread Robert Watson
Author: rwatson Date: Mon Dec 31 11:06:37 2012 New Revision: 244899 URL: http://svnweb.freebsd.org/changeset/base/244899 Log: If FDT is compiled into a FreeBSD/beri kernel, initialise OpenFirmware. Sponsored by: DARPA, AFRL Modified: head/sys/mips/beri/beri_machdep.c Modified:

svn commit: r244942 - head/sys/mips/beri

2013-01-01 Thread Robert Watson
Author: rwatson Date: Tue Jan 1 19:42:06 2013 New Revision: 244942 URL: http://svnweb.freebsd.org/changeset/base/244942 Log: Merge @219932 from Perforce: FDT headers can't be included if the kernel is compiled without FDT support, due to dependence on generated kobj headers. BERI

Re: svn commit: r245036 - head/sys/kern

2013-01-04 Thread Robert Watson
On Fri, 4 Jan 2013, Mateusz Guzik wrote: On Fri, Jan 04, 2013 at 11:11:13AM +, David Xu wrote: Author: davidxu Date: Fri Jan 4 11:11:12 2013 New Revision: 245036 URL: http://svnweb.freebsd.org/changeset/base/245036 Log: Revert revision 244760 because strncpy pads trailing space with

svn commit: r245329 - head/sys/mips/beri

2013-01-12 Thread Robert Watson
Author: rwatson Date: Sat Jan 12 12:34:59 2013 New Revision: 245329 URL: http://svnweb.freebsd.org/changeset/base/245329 Log: Merge Perforce change @219935 to head: Initialise Openfirmware/FDT code earlier in the FreeBSD/beri boot, so that the results will be available for

svn commit: r245330 - in head/sys/mips: beri include

2013-01-12 Thread Robert Watson
Author: rwatson Date: Sat Jan 12 13:20:21 2013 New Revision: 245330 URL: http://svnweb.freebsd.org/changeset/base/245330 Log: Merge Perforce change @219948 to head: Add code so that the BERI boot process can ask the kernel linker for DTB blobs that may have been left for it by the

svn commit: r245331 - head/sys/mips/mips

2013-01-12 Thread Robert Watson
Author: rwatson Date: Sat Jan 12 15:53:45 2013 New Revision: 245331 URL: http://svnweb.freebsd.org/changeset/base/245331 Log: Merge Perforce chance 219924 to head: In a sign of weakness, replicate the MIPS bus_space_generic.c to produce a new FDT version, which will perform necessary

svn commit: r245332 - in head/sys: conf mips/include mips/mips

2013-01-12 Thread Robert Watson
Author: rwatson Date: Sat Jan 12 15:58:20 2013 New Revision: 245332 URL: http://svnweb.freebsd.org/changeset/base/245332 Log: Merge Perforce changeset 219925 to head: Provided a bus_space implementation for FDT, modelled on bus_space_generic, but with a local version of the map

svn commit: r245335 - head/sys/dev/fdt

2013-01-12 Thread Robert Watson
Author: rwatson Date: Sat Jan 12 16:09:33 2013 New Revision: 245335 URL: http://svnweb.freebsd.org/changeset/base/245335 Log: Merge Perforce changeset 219933 and portions of 219962 (omits changes to unmerged BERI DTS files) to head: Use the OFW compatible string mips,mips4k rather than

Re: svn commit: r245331 - head/sys/mips/mips

2013-01-13 Thread Robert Watson
On Sat, 12 Jan 2013, Nathan Whitehorn wrote: In a sign of weakness, replicate the MIPS bus_space_generic.c to produce a new FDT version, which will perform necessary address space translation for bus_space -- the solution used in NLM's MIPS FDT support, but possibly not quite

svn commit: r245364 - head/sys/dev/altera/jtag_uart

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 14:38:09 2013 New Revision: 245364 URL: http://svnweb.freebsd.org/changeset/base/245364 Log: Merge Perforce changeset 219917 to head: Copy Altera JTAG UART nexus bus attachment as a starting point for an FDT bus attachment. Sponsored by: DARPA,

svn commit: r245365 - in head/sys: dev/altera/jtag_uart mips/beri

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 15:08:17 2013 New Revision: 245365 URL: http://svnweb.freebsd.org/changeset/base/245365 Log: Merge Perforce changeset 219918 to head: Naive first cut at an FDT bus attachment for the Altera JTAG UART. Sponsored by: DARPA, AFRL Modified:

svn commit: r245366 - head/sys/dev/terasic/de4led

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 15:10:27 2013 New Revision: 245366 URL: http://svnweb.freebsd.org/changeset/base/245366 Log: Merge Perforce changeset 219921 to head: Copy DE4 LED nexus bus attachment as a starting point for an FDT attachment. Sponsored by: DARPA, AFRL Added:

svn commit: r245367 - in head/sys: dev/terasic/de4led mips/beri

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 15:12:35 2013 New Revision: 245367 URL: http://svnweb.freebsd.org/changeset/base/245367 Log: Merge Perforce changeset 219922 to head: Update nexus parts in copied DE4LED attachment to use FDT. Sponsored by: DARPA, AFRL Modified:

svn commit: r245368 - head/sys/dev/altera/sdcard

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 15:13:25 2013 New Revision: 245368 URL: http://svnweb.freebsd.org/changeset/base/245368 Log: Merge Perforce changeset 219926 to head: Copy Altera SDCard nexus attachment as a starting point for the FDT attachment. Sponsored by: DARPA, AFRL

svn commit: r245369 - in head/sys: conf dev/altera/sdcard

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 15:15:24 2013 New Revision: 245369 URL: http://svnweb.freebsd.org/changeset/base/245369 Log: Merge Perforce changeset 219927 to head: Implement an FDT attachment for the Altera SD Card driver Sponsored by: DARPA, AFRL Modified: head/sys/conf/files

svn commit: r245370 - head/sys/dev/isf

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 15:16:18 2013 New Revision: 245370 URL: http://svnweb.freebsd.org/changeset/base/245370 Log: Merge Perforce changeset 219929 to head: Replicate nexus attachment for isf(4) to become an FDT attachment. Sponsored by: DARPA, AFRL Added:

svn commit: r245371 - in head/sys: conf dev/isf

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 16:20:40 2013 New Revision: 245371 URL: http://svnweb.freebsd.org/changeset/base/245371 Log: Partially merge Perforce changeset 219930 to head: Add an Intel StrataFlash (isf) driver FDT attachment. Portions of the original changeset hooking up FDT

svn commit: r245372 - head/sys/dev/terasic/mtl

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 16:21:51 2013 New Revision: 245372 URL: http://svnweb.freebsd.org/changeset/base/245372 Log: Merge Perforce changeset 219937 to head: Copy Terasic MTL nexus bus attachment as a starting point for an FDT attachment for the same driver. Sponsored

svn commit: r245373 - in head/sys: dev/terasic/mtl mips/beri

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 16:27:56 2013 New Revision: 245373 URL: http://svnweb.freebsd.org/changeset/base/245373 Log: Partially merge Perforce changeset 219938 to head: Write FDT attachment for the Terasic MTL (multitouch LCD) driver. Exploit the fact that FDT allows multiple

Re: svn commit: r245329 - head/sys/mips/beri

2013-01-13 Thread Robert Watson
On Sun, 13 Jan 2013, Andrew Thompson wrote: Merge Perforce change @219935 to head: Initialise Openfirmware/FDT code earlier in the FreeBSD/beri boot, so that the results will be available for configuring the console UART (eventually). Suggested by: thompsa Two Andrew Ts

svn commit: r245375 - head/sys/dev/altera/avgen

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 16:41:25 2013 New Revision: 245375 URL: http://svnweb.freebsd.org/changeset/base/245375 Log: Merge Perforce changeset 219939 to head: Start restructuring of altera_avgen(4) so that it can have an FDT attachment -- this requires first properly breaking

svn commit: r245376 - in head/sys: conf dev/altera/avgen

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 16:43:59 2013 New Revision: 245376 URL: http://svnweb.freebsd.org/changeset/base/245376 Log: Merge Perforce changeset 219940 to head: Rework altera_avgen(4) to cleanly(ish) separate nexus bus attachment from the driver itself. This should allow us to

svn commit: r245377 - head/sys/dev/altera/avgen

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 16:44:45 2013 New Revision: 245377 URL: http://svnweb.freebsd.org/changeset/base/245377 Log: Merge Perforce changeset 219941 to head: Copy altera_avgen(4) nexus attachment as a starting point for an FDT attachment. Sponsored by: DARPA, AFRL

svn commit: r245378 - in head/sys: conf dev/altera/avgen

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 16:51:57 2013 New Revision: 245378 URL: http://svnweb.freebsd.org/changeset/base/245378 Log: Partially merge Perforce changeset 219942 to head: Implement an FDT attachment for altera_avgen(4). Portions of the changeset updating DTS and device.hints

svn commit: r245379 - in head/sys/dev/terasic: de4led mtl

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 16:53:31 2013 New Revision: 245379 URL: http://svnweb.freebsd.org/changeset/base/245379 Log: Partially merge Perforce changeset 219944 to head: Consistently use the vendor name sri-cambridge for device compatibility strings on the BERI platform.

svn commit: r245380 - in head/sys/dev: altera/avgen altera/jtag_uart altera/sdcard isf terasic/de4led terasic/mtl

2013-01-13 Thread Robert Watson
Author: rwatson Date: Sun Jan 13 16:57:11 2013 New Revision: 245380 URL: http://svnweb.freebsd.org/changeset/base/245380 Log: Merge Perforce changeset 219952 to head: Make different bus attachments for Altera and Terasice device drivers share the same devclass_t. Sponsored by:

svn commit: r188279 - in stable/7/usr.bin: basename dirname

2009-02-07 Thread Robert Watson
Author: rwatson Date: Sat Feb 7 11:27:35 2009 New Revision: 188279 URL: http://svn.freebsd.org/changeset/base/188279 Log: Merge r188006 from head to stable/7: Alow dirname(1) to accept multiple arguments in the same way that basename(1) does. (Two different PRs contained

svn commit: r188311 - in head/sys: nfsserver security/audit

2009-02-08 Thread Robert Watson
Author: rwatson Date: Sun Feb 8 14:04:08 2009 New Revision: 188311 URL: http://svn.freebsd.org/changeset/base/188311 Log: Audit the flag argument to the nfssvc(2) system call. Obtained from:TrustedBSD Project Sponsored by: Apple, Inc. Modified:

svn commit: r188313 - head/sys/security/audit

2009-02-08 Thread Robert Watson
Author: rwatson Date: Sun Feb 8 14:39:35 2009 New Revision: 188313 URL: http://svn.freebsd.org/changeset/base/188313 Log: Change various routines that are responsible for transforming audit event IDs based on arguments to return au_event_t rather than int. Obtained from:

svn commit: r188312 - head/sys/security/audit

2009-02-08 Thread Robert Watson
Author: rwatson Date: Sun Feb 8 14:24:35 2009 New Revision: 188312 URL: http://svn.freebsd.org/changeset/base/188312 Log: Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE arguments and not the label. Obtained from:TrustedBSD Project Sponsored by: Apple, Inc. MFC

svn commit: r188315 - head/sys/security/audit

2009-02-08 Thread Robert Watson
was developed by Robert Watson for the TrustedBSD Project. @@ -76,7 +76,7 @@ static MALLOC_DEFINE(M_AUDIT_PIPE_PRESEL * Audit pipe buffer parameters. */ #defineAUDIT_PIPE_QLIMIT_DEFAULT (128) -#defineAUDIT_PIPE_QLIMIT_MIN (0) +#define

svn commit: r188404 - head/sys/kern

2009-02-09 Thread Robert Watson
Author: rwatson Date: Mon Feb 9 18:19:58 2009 New Revision: 188404 URL: http://svn.freebsd.org/changeset/base/188404 Log: Remove extra 'comma = 0' in socket state printing code, which otherwise could lead to an extra comma in output. Submitted by: Christoph Mallon christoph dot mallon

svn commit: r188425 - stable/6/sys/kern

2009-02-09 Thread Robert Watson
Author: rwatson Date: Mon Feb 9 23:23:00 2009 New Revision: 188425 URL: http://svn.freebsd.org/changeset/base/188425 Log: In unp_connect(), don't unlock the global UNIX domain socket lock when UNP_CONNECTING is set, as the caller will do that. (Due to significantly different locking in

Re: svn commit: r188425 - stable/6/sys/kern

2009-02-10 Thread Robert Watson
On Mon, 9 Feb 2009, Robert Watson wrote: Author: rwatson Date: Mon Feb 9 23:23:00 2009 New Revision: 188425 URL: http://svn.freebsd.org/changeset/base/188425 Log: In unp_connect(), don't unlock the global UNIX domain socket lock when UNP_CONNECTING is set, as the caller will do

svn commit: r188483 - head/tools/regression/file/newfileops_on_fork

2009-02-11 Thread Robert Watson
Author: rwatson Date: Wed Feb 11 13:44:27 2009 New Revision: 188483 URL: http://svn.freebsd.org/changeset/base/188483 Log: Add a regresion test to determine whether or not a file descriptor is allocated in a fork(2)-inheritable way at the beginning or end of an accept(2) system call. This

svn commit: r188545 - head/sys/dev/cm

2009-02-12 Thread Robert Watson
Author: rwatson Date: Thu Feb 12 23:55:35 2009 New Revision: 188545 URL: http://svn.freebsd.org/changeset/base/188545 Log: Remove unused ifaddr and ifreq local variables. MFC after:3 days Modified: head/sys/dev/cm/smc90cx6.c Modified: head/sys/dev/cm/smc90cx6.c

svn commit: r188546 - head/sys/net

2009-02-12 Thread Robert Watson
Author: rwatson Date: Fri Feb 13 00:01:11 2009 New Revision: 188546 URL: http://svn.freebsd.org/changeset/base/188546 Log: Remove unused ifaddr local variable in ioctl routine. MFC after:3 days Modified: head/sys/net/if_vlan.c Modified: head/sys/net/if_vlan.c

Re: svn commit: r188587 - stable/7/sys/netinet

2009-02-13 Thread Robert Watson
On Fri, 13 Feb 2009, Luigi Rizzo wrote: Author: luigi Date: Fri Feb 13 18:09:38 2009 New Revision: 188587 URL: http://svn.freebsd.org/changeset/base/188587 Log: MFC - replace usage of n_* types with uint*_t , to help removing unnecessary dependencies on in_systm.h As harmless as these

svn commit: r188661 - head/sys/dev/cp

2009-02-15 Thread Robert Watson
Author: rwatson Date: Sun Feb 15 23:18:29 2009 New Revision: 188661 URL: http://svn.freebsd.org/changeset/base/188661 Log: Remove debug.cp.mpsafenet: we no longer support running the network stack with conditional Giant acquisition, and IFF_NEEDSGIANT will be removed in the near future.

svn commit: r188663 - head/sys/dev/ce

2009-02-15 Thread Robert Watson
Author: rwatson Date: Sun Feb 15 23:29:13 2009 New Revision: 188663 URL: http://svn.freebsd.org/changeset/base/188663 Log: Remove debug.ce.mpsafenet: we no longer support running the network stack with conditional Giant acquisition, and IFF_NEEDSGIANT will be removed in the near future.

svn commit: r188668 - head/sys/net

2009-02-16 Thread Robert Watson
Author: rwatson Date: Mon Feb 16 10:29:03 2009 New Revision: 188668 URL: http://svn.freebsd.org/changeset/base/188668 Log: IFF_NEEDSGIANT will no longer be supported, so remove compatibility code from if_sppp framework for interfaces requiring Giant. Modified: head/sys/net/if_spppsubr.c

svn commit: r188768 - head/sys/dev/cx

2009-02-18 Thread Robert Watson
Author: rwatson Date: Thu Feb 19 00:06:01 2009 New Revision: 188768 URL: http://svn.freebsd.org/changeset/base/188768 Log: if_cx is currently disconnected from the build due to a dependence on the old TTY implementation; however, take a cut at stripping its optional Giant-protected code

Re: svn commit: r188831 - head/sys/nfsclient

2009-02-21 Thread Robert Watson
On Thu, 19 Feb 2009, John Baldwin wrote: Author: jhb Date: Thu Feb 19 22:10:39 2009 New Revision: 188831 URL: http://svn.freebsd.org/changeset/base/188831 Log: Don't clear the attribute cache of a file when it is closed. A subsequent open() of the same file will load fresh attributes, so

svn commit: r188962 - head/sys/netinet

2009-02-23 Thread Robert Watson
Author: rwatson Date: Mon Feb 23 22:57:55 2009 New Revision: 188962 URL: http://svn.freebsd.org/changeset/base/188962 Log: In in_rtqkill(), assert the radix head lock, and pass RTF_RNH_LOCKED to in_rtrequest(); the radix head lock is already acquired before rnh_walktree is called in

svn commit: r188964 - head/sys/vm

2009-02-23 Thread Robert Watson
Author: rwatson Date: Mon Feb 23 23:00:12 2009 New Revision: 188964 URL: http://svn.freebsd.org/changeset/base/188964 Log: Add a debugging sysctl, debug.vm_lowmem, that when assigned a value of 1 will trigger a pass through the VM's low-memory handlers, such as protocol and UMA drain

svn commit: r188965 - head/sys/nfsserver

2009-02-23 Thread Robert Watson
Author: rwatson Date: Mon Feb 23 23:04:15 2009 New Revision: 188965 URL: http://svn.freebsd.org/changeset/base/188965 Log: Include audit.h so that the system call path protected by NFS_LEGACYRPC can audit its arguments. Submitted by: Jaakko Heinonen jh at saunalahti.fi MFC after:1

svn commit: r188967 - head/sys/vm

2009-02-23 Thread Robert Watson
Author: rwatson Date: Mon Feb 23 23:30:17 2009 New Revision: 188967 URL: http://svn.freebsd.org/changeset/base/188967 Log: Put debug.vm_lowmem sysctl under DIAGNOSTIC. Submitted by: sam MFC after:3 days Modified: head/sys/vm/vm_kern.c Modified: head/sys/vm/vm_kern.c

RE: svn commit: r188962 - head/sys/netinet

2009-02-24 Thread Robert Watson
On Tue, 24 Feb 2009, Yuriy Tsibizov wrote: In in_rtqkill(), assert the radix head lock, and pass RTF_RNH_LOCKED to in_rtrequest(); the radix head lock is already acquired before rnh_walktree is called in in_rtqtimo_one(). This avoids a recursive acquisition that is no longer permitted

svn commit: r188992 - head/sys/netinet

2009-02-24 Thread Robert Watson
Author: rwatson Date: Tue Feb 24 11:17:50 2009 New Revision: 188992 URL: http://svn.freebsd.org/changeset/base/188992 Log: In tcp_usr_shutdown() and tcp_usr_send(), I missed converting NULL checks for the tcpcb, previously used to detect complete disconnection, with INP_DROPPED checks.

svn commit: r189029 - stable/7/sys/net

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 11:18:18 2009 New Revision: 189029 URL: http://svn.freebsd.org/changeset/base/189029 Log: Correct a deadlock and a rtentry leak in rt_check(): - In the event that a gateway route has to be looked up, drop the lock on 'rt' before reacquiring it 'rt0' in

svn commit: r189030 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb dev/nve

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 11:37:19 2009 New Revision: 189030 URL: http://svn.freebsd.org/changeset/base/189030 Log: Merge r179458 from head to stable/7: Import rewritten nve device id's, which brings this more inline with if_nfe. PR: 110883 Submitted by:

svn commit: r189031 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 11:44:03 2009 New Revision: 189031 URL: http://svn.freebsd.org/changeset/base/189031 Log: Merge r186825 from head to stable/7: Do a lockless read of the audit pipe list before grabbing the audit pipe lock in order to avoid the lock acquire hit if the

svn commit: r189032 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 12:00:15 2009 New Revision: 189032 URL: http://svn.freebsd.org/changeset/base/189032 Log: Merge r184508 from head to stable/7: Historically, /dev/auditpipe has allows only whole records to be read via read(2), which meant that records longer than the

Re: svn commit: r189029 - stable/7/sys/net

2009-02-25 Thread Robert Watson
On Wed, 25 Feb 2009, Robert Watson wrote: Author: rwatson Date: Wed Feb 25 11:18:18 2009 New Revision: 189029 URL: http://svn.freebsd.org/changeset/base/189029 Log: Correct a deadlock and a rtentry leak in rt_check(): - In the event that a gateway route has to be looked up, drop the lock

svn commit: r189033 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 12:32:15 2009 New Revision: 189033 URL: http://svn.freebsd.org/changeset/base/189033 Log: Merge 3184510 from head to stable/7: Since there is no longer the opportunity for record truncation, just return 0 if the truncation counter is queried on an

svn commit: r189034 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 13:17:46 2009 New Revision: 189034 URL: http://svn.freebsd.org/changeset/base/189034 Log: Merge r184534 from head to stable/7: Allow a single read(2) system call on an audit pipe to retrieve data from more than one audit record at a time in order to

svn commit: r189035 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 13:21:28 2009 New Revision: 189035 URL: http://svn.freebsd.org/changeset/base/189035 Log: Merge r184536 from head to stable/7: We only allow a partial read of the first record in an audit pipe record queue, so move the offset field from the per-record

svn commit: r189036 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 13:26:30 2009 New Revision: 189036 URL: http://svn.freebsd.org/changeset/base/189036 Log: Merge r184540 from head to stable/7: Add comment for per-pipe stats. Sponsored by: Apple, Inc. Modified: stable/7/sys/ (props changed)

svn commit: r189037 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 13:30:17 2009 New Revision: 189037 URL: http://svn.freebsd.org/changeset/base/189037 Log: Merge r184544 and r184545 from head to stable/7: Remove stale comment about filtering in audit pipe ioctl routine: we do support filtering now, although we may

svn commit: r189038 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 13:42:38 2009 New Revision: 189038 URL: http://svn.freebsd.org/changeset/base/189038 Log: Merge r184825 from head to stable/7: Wrap sx locking of the audit worker sleep lock in macros, update comments. Sponsored by: Apple, Inc. Modified:

svn commit: r189039 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 13:47:09 2009 New Revision: 189039 URL: http://svn.freebsd.org/changeset/base/189039 Log: Merge r188122 from head to stable/7: Eliminate the local variable 'ape' in audit_pipe_kqread(), as it's only used for an assertion that we don't really need

svn commit: r189040 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb kern

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 14:08:28 2009 New Revision: 189040 URL: http://svn.freebsd.org/changeset/base/189040 Log: Merge r183689 from head to stable/7: Differentiate pr_usrreqs for stream and datagram UNIX domain sockets, and employ soreceive_dgram for the datagram case.

svn commit: r189042 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb netatalk

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 14:48:13 2009 New Revision: 189042 URL: http://svn.freebsd.org/changeset/base/189042 Log: Merge 3188124 from head to stable/7: Remove local variable 'ddp' from DDP's attach and detach routines; they were used only for assertions, and rather than

svn commit: r189041 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb kern

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 14:26:16 2009 New Revision: 189041 URL: http://svn.freebsd.org/changeset/base/189041 Log: Merge r188123 from head to stable/7: Remove written-to but never read local variable 'offset' from soreceive_dgram(). Submitted by: Christoph Mallon

svn commit: r189043 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 15:01:26 2009 New Revision: 189043 URL: http://svn.freebsd.org/changeset/base/189043 Log: Merge r188312 from head to stable/7: Audit AUE_MAC_EXECVE; currently just the standard AUE_EXECVE arguments and not the label. Obtained from:

svn commit: r189044 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb kern

2009-02-25 Thread Robert Watson
Author: rwatson Date: Wed Feb 25 15:04:30 2009 New Revision: 189044 URL: http://svn.freebsd.org/changeset/base/189044 Log: Merge r188485 from head to stable/7: Modify fdcopy() so that, during fork(2), it won't copy file descriptors from the parent to the child process if they have an

svn commit: r189063 - head/sys/kern

2009-02-26 Thread Robert Watson
Author: rwatson Date: Thu Feb 26 10:56:13 2009 New Revision: 189063 URL: http://svn.freebsd.org/changeset/base/189063 Log: Add static tracing for privilege checking: priv:kernel:priv_check:priv_ok fires for granted privileges priv:kernel:priv_check:priv_errr fires for denied

Re: svn commit: r189063 - head/sys/kern

2009-02-26 Thread Robert Watson
On Thu, 26 Feb 2009, Robert Watson wrote: Log: Add static tracing for privilege checking: priv:kernel:priv_check:priv_ok fires for granted privileges priv:kernel:priv_check:priv_errr fires for denied privileges The first argument is the requested privilege number. The naming

Re: svn commit: r189063 - head/sys/kern

2009-02-26 Thread Robert Watson
On Thu, 26 Feb 2009, Alexander Leidinger wrote: A typical tracing command might be: dtrace -n 'priv:::priv_ok { trace(execname); trace(arg0);}' arg0 requires manual interpretation using /usr/include/sys/priv.h. Theoretically it is possible to write a little script which takes priv.h and

svn commit: r189196 - head/sys/netinet

2009-02-28 Thread Robert Watson
Author: rwatson Date: Sat Feb 28 22:58:52 2009 New Revision: 189196 URL: http://svn.freebsd.org/changeset/base/189196 Log: Remove unreachable code for generating RST segments from tcp_twcheck(); this code became stale when T/TCP support was removed. Discussed with: bz, sam MFC

svn commit: r189231 - head

2009-03-01 Thread Robert Watson
Author: rwatson Date: Sun Mar 1 12:44:33 2009 New Revision: 189231 URL: http://svn.freebsd.org/changeset/base/189231 Log: Note that network device driver modules need rebuilding. Modified: head/UPDATING Modified: head/UPDATING

svn commit: r189230 - head/sys/net

2009-03-01 Thread Robert Watson
Author: rwatson Date: Sun Mar 1 12:42:54 2009 New Revision: 189230 URL: http://svn.freebsd.org/changeset/base/189230 Log: Do a bit of struct ifnet cleanup in preparation for 8.0: group function pointers together, move padding to the bottom of the structure, and add two new integer spares

svn commit: r189255 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb kern

2009-03-01 Thread Robert Watson
Author: rwatson Date: Sun Mar 1 22:48:18 2009 New Revision: 189255 URL: http://svn.freebsd.org/changeset/base/189255 Log: Merge r187686 from head to stable/7: When a statically linked binary is executed (or at least, one without an interpreter definition in its program header), set

svn commit: r189258 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-03-01 Thread Robert Watson
Author: rwatson Date: Sun Mar 1 23:17:51 2009 New Revision: 189258 URL: http://svn.freebsd.org/changeset/base/189258 Log: Merge r188313 from head to stable/7: Change various routines that are responsible for transforming audit event IDs based on arguments to return au_event_t rather

svn commit: r189259 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb security/audit

2009-03-01 Thread Robert Watson
:32:27 2009 (r189259) @@ -1,6 +1,6 @@ /*- * Copyright (c) 2006 Robert N. M. Watson - * Copyright (c) 2008 Apple, Inc. + * Copyright (c) 2008-2009 Apple, Inc. * All rights reserved. * * This software was developed by Robert Watson for the TrustedBSD Project. @@ -76,7 +76,7 @@ static

svn commit: r189277 - in vendor/openbsm/dist: . bin/audit bin/auditd bsm etc libauditd libbsm man sys/bsm tools

2009-03-02 Thread Robert Watson
Author: rwatson Date: Mon Mar 2 10:46:23 2009 New Revision: 189277 URL: http://svn.freebsd.org/changeset/base/189277 Log: Vendor import of OpenBSM 1.1 beta1, which incorporates the following changes since the last imported OpenBSM release: OpenBSM 1.1 beta 1 - The filesz parameter

svn commit: r189278 - vendor/openbsm/1.1-BETA-1

2009-03-02 Thread Robert Watson
Author: rwatson Date: Mon Mar 2 10:48:15 2009 New Revision: 189278 URL: http://svn.freebsd.org/changeset/base/189278 Log: Tag OpenBSM 1.1-beta1 vendor import. Added: vendor/openbsm/1.1-BETA-1/ - copied from r189277, vendor/openbsm/dist/ ___

svn commit: r189301 - head/contrib/openbsm/config

2009-03-03 Thread Robert Watson
Author: rwatson Date: Tue Mar 3 11:57:29 2009 New Revision: 189301 URL: http://svn.freebsd.org/changeset/base/189301 Log: Update config.h for OpenBSM 1.1 beta1. MFC after:1 month Modified: head/contrib/openbsm/config/config.h Modified: head/contrib/openbsm/config/config.h

svn commit: r189311 - in head/sys: kern security/mac sys

2009-03-03 Thread Robert Watson
Author: rwatson Date: Tue Mar 3 17:15:05 2009 New Revision: 189311 URL: http://svn.freebsd.org/changeset/base/189311 Log: Reduce the verbosity of SDT trace points for DTrace by defining several wrapper macros that allow trace points and arguments to be declared using a single macro rather

svn commit: r189489 - head/sys/net

2009-03-07 Thread Robert Watson
Author: rwatson Date: Sat Mar 7 10:21:37 2009 New Revision: 189489 URL: http://svn.freebsd.org/changeset/base/189489 Log: Clarify some comments, fix some types, and rename ZBUF_FLAG_IMMUTABLE to ZBUF_FLAG_ASSIGNED to make it clear why the buffer can't be written to: it is assigned to

svn commit: r189501 - head/sys/net

2009-03-07 Thread Robert Watson
Author: rwatson Date: Sat Mar 7 22:17:44 2009 New Revision: 189501 URL: http://svn.freebsd.org/changeset/base/189501 Log: When resetting a BPF descriptor, properly check that zero-copy buffers are not currently owned by userspace before clearing or rotating them. Otherwise we may not

svn commit: r189503 - head/sys/security/mac

2009-03-07 Thread Robert Watson
Author: rwatson Date: Sun Mar 8 00:50:37 2009 New Revision: 189503 URL: http://svn.freebsd.org/changeset/base/189503 Log: Add static DTrace probes for MAC Framework access control checks and privilege grants so that dtrace can be more easily used to monitor the security decisions being

svn commit: r189529 - in head/sys: kern security/audit security/mac security/mac_stub security/mac_test

2009-03-08 Thread Robert Watson
Author: rwatson Date: Sun Mar 8 10:58:37 2009 New Revision: 189529 URL: http://svn.freebsd.org/changeset/base/189529 Log: Improve the consistency of MAC Framework and MAC policy entry point naming by renaming certain proc entry points to cred entry points, reflecting their manipulation of

svn commit: r189531 - in stable/7/sys: . contrib/pf dev/ath/ath_hal dev/cxgb net

2009-03-08 Thread Robert Watson
Author: rwatson Date: Sun Mar 8 11:20:54 2009 New Revision: 189531 URL: http://svn.freebsd.org/changeset/base/189531 Log: Merge missed routing lock fix r186061 from head to stable/7: Dont leak the rnh lock on error. Original change was from thompsa. This may correct

svn commit: r189532 - head/sys/security/mac

2009-03-08 Thread Robert Watson
Author: rwatson Date: Sun Mar 8 12:22:00 2009 New Revision: 189532 URL: http://svn.freebsd.org/changeset/base/189532 Log: Rename 'ucred' argument to mac_socket_check_bind() to 'cred' to match other use of the same variable type. Obtained from:TrustedBSD Project Sponsored by:

svn commit: r189533 - in head/sys: kern security/mac security/mac_biba security/mac_bsdextended security/mac_lomac security/mac_mls security/mac_stub security/mac_test

2009-03-08 Thread Robert Watson
Author: rwatson Date: Sun Mar 8 12:32:06 2009 New Revision: 189533 URL: http://svn.freebsd.org/changeset/base/189533 Log: Remove 'uio' argument from MAC Framework and MAC policy entry points for extended attribute get/set; in the case of get an uninitialized user buffer was passed before

svn commit: r189543 - head/tools/regression/sockets/unix_gc

2009-03-08 Thread Robert Watson
Author: rwatson Date: Sun Mar 8 21:06:02 2009 New Revision: 189543 URL: http://svn.freebsd.org/changeset/base/189543 Log: In UNIX domain socket GC regression test, after setting a socket non-blocking, EINPROGRESS is an acceptable result from connect(). Modified:

svn commit: r189544 - head/sys/kern

2009-03-08 Thread Robert Watson
Author: rwatson Date: Sun Mar 8 21:48:29 2009 New Revision: 189544 URL: http://svn.freebsd.org/changeset/base/189544 Log: Decompose the global UNIX domain sockets rwlock into two different locks: a global list/counter/generation counter protected by a new mutex unp_list_lock, and a global

svn commit: r189570 - in head/sys: security/audit sys

2009-03-09 Thread Robert Watson
Author: rwatson Date: Mon Mar 9 10:45:58 2009 New Revision: 189570 URL: http://svn.freebsd.org/changeset/base/189570 Log: Add a new thread-private flag, TDP_AUDITREC, to indicate whether or not there is an audit record hung off of td_ar on the current thread. Test this flag instead of

svn commit: r189571 - head/sys/sys

2009-03-09 Thread Robert Watson
Author: rwatson Date: Mon Mar 9 11:18:41 2009 New Revision: 189571 URL: http://svn.freebsd.org/changeset/base/189571 Log: Remove two now-defunct KSE fields from struct thread: td_uuticks and td_usticks. Modified: head/sys/sys/proc.h Modified: head/sys/sys/proc.h

svn commit: r189572 - in head/sys: amd64/amd64 i386/i386

2009-03-09 Thread Robert Watson
Author: rwatson Date: Mon Mar 9 13:11:16 2009 New Revision: 189572 URL: http://svn.freebsd.org/changeset/base/189572 Log: Trim comments about the MP-safety of various bits of the amd64/i386 system call entry path and i386 IP checksum generation: we now assume all code is MPSAFE unless

svn commit: r189573 - head/sys/sys

2009-03-09 Thread Robert Watson
Author: rwatson Date: Mon Mar 9 13:12:48 2009 New Revision: 189573 URL: http://svn.freebsd.org/changeset/base/189573 Log: Use a u_int for p_lock instead of a char: this avoids a (somewhat unlikely but not impossible given modern thread counts) wrap-around, and the compiler was padding it

svn commit: r189613 - head/tools/regression/usr.bin/pkill

2009-03-10 Thread Robert Watson
Author: rwatson Date: Tue Mar 10 09:33:22 2009 New Revision: 189613 URL: http://svn.freebsd.org/changeset/base/189613 Log: Rename files that collide on case-insensitive file systems by encoding colliding upper case letters as the lower case letter with a '_' in front. MFC after:3

svn commit: r189615 - head/sys/netinet

2009-03-10 Thread Robert Watson
Author: rwatson Date: Tue Mar 10 11:04:19 2009 New Revision: 189615 URL: http://svn.freebsd.org/changeset/base/189615 Log: Remove now-unused INP_UNMAPPABLEOPTS. MFC after:3 days Discussed with: bz Modified: head/sys/netinet/in_pcb.h Modified: head/sys/netinet/in_pcb.h

svn commit: r189618 - head/contrib/top

2009-03-10 Thread Robert Watson
Author: rwatson Date: Tue Mar 10 11:46:41 2009 New Revision: 189618 URL: http://svn.freebsd.org/changeset/base/189618 Log: Merge r183430 from vendor/top/dist to head/contrib/top, although with record-only mergeinfo because an automated merge is confused by the flattening that took place:

<    2   3   4   5   6   7   8   9   10   11   >