svn commit: r219223 - head/lib/libc/sys

2011-03-03 Thread Robert Watson
Author: rwatson Date: Thu Mar 3 11:29:48 2011 New Revision: 219223 URL: http://svn.freebsd.org/changeset/base/219223 Log: Add description of ECAPMODE to errno(2) man page. Discussed with: anderson Obtained from: Capsicum Project Sponsored by: Google, Inc. MFC after: 3 months

svn commit: r219224 - head/lib/libc/sys

2011-03-03 Thread Robert Watson
Author: rwatson Date: Thu Mar 3 11:31:08 2011 New Revision: 219224 URL: http://svn.freebsd.org/changeset/base/219224 Log: Make cap_new(2) and cap_getmode(2) symbols from libc public so applications can link against them. Add man pages for the new system calls, with one errant forward

svn commit: r219230 - stable/8/cddl/contrib/dtracetoolkit

2011-03-03 Thread Robert Watson
Author: rwatson Date: Thu Mar 3 16:57:59 2011 New Revision: 219230 URL: http://svn.freebsd.org/changeset/base/219230 Log: Merge r211786 from head to stable/8: Port dtruss to FreeBSD. Sponsored by: The FreeBSD Foundation Reported by: Nikolay Denev ndenev at gmail.com

Re: svn commit: r219107 - in stable/8/sys: amd64/amd64 amd64/include boot/common cddl/compat/opensolaris/kern cddl/compat/opensolaris/sys cddl/contrib/opensolaris/uts/common/dtrace cddl/contrib/openso

2011-03-03 Thread Robert Watson
On Wed, 2 Mar 2011, Nikolay Denev wrote: On 1 Mar, 2011, at 01:28 , Robert Watson wrote: Author: rwatson Date: Mon Feb 28 23:28:35 2011 New Revision: 219107 URL: http://svn.freebsd.org/changeset/base/219107 Log: Merge userspace DTrace support from head to stable/8: It seems

svn commit: r226301 - head/sys/kern

2011-10-12 Thread Robert Watson
Author: rwatson Date: Wed Oct 12 12:08:03 2011 New Revision: 226301 URL: http://svn.freebsd.org/changeset/base/226301 Log: Correct a bug in export of capability-related information from the sysctls supporting procstat -f: properly provide capability rights information to userspace. The bug

svn commit: r226407 - stable/9/sys/kern

2011-10-15 Thread Robert Watson
Author: rwatson Date: Sat Oct 15 22:27:59 2011 New Revision: 226407 URL: http://svn.freebsd.org/changeset/base/226407 Log: Merge r226301 from head to stable/9: Correct a bug in export of capability-related information from the sysctls supporting procstat -f: properly provide

svn commit: r228039 - head/share/man/man4

2011-11-27 Thread Robert Watson
at the University of Cambridge. +.Sh AUTHORS +.Nm +was developed by +.An -nosplit +.An Robert Watson Aq rwat...@freebsd.org +and +.An Jonathan Anderson Aq jonat...@freebsd.org +at the University of Cambridge, and +.An Ben Laurie Aq b...@freebsd.org +and +.An Kris Kennaway Aq k...@freebsd.org +at Google, Inc. +.Sh

svn commit: r228040 - head/lib/libc/sys

2011-11-27 Thread Robert Watson
Author: rwatson Date: Sun Nov 27 19:45:41 2011 New Revision: 228040 URL: http://svn.freebsd.org/changeset/base/228040 Log: Cross-reference capsicum.4 from cap_enter.2 and cap_new.2. MFC after:3 days Sponsored by: Google, Inc. Modified: head/lib/libc/sys/cap_enter.2

svn commit: r228057 - head/cddl/lib/drti

2011-11-28 Thread Robert Watson
Author: rwatson Date: Mon Nov 28 10:01:36 2011 New Revision: 228057 URL: http://svn.freebsd.org/changeset/base/228057 Log: Change the Makefile in cddl/lib/drti to use bsd.lib.mk instead of bsd.prog.mk -- we need to compile PIC, which requires a library build. With this change, USDT

svn commit: r228069 - stable/9/share/man/man4

2011-11-28 Thread Robert Watson
. +.Sh AUTHORS +.Nm +was developed by +.An -nosplit +.An Robert Watson Aq rwat...@freebsd.org +and +.An Jonathan Anderson Aq jonat...@freebsd.org +at the University of Cambridge, and +.An Ben Laurie Aq b...@freebsd.org +and +.An Kris Kennaway Aq k...@freebsd.org +at Google, Inc. +.Sh BUGS +.Nm

svn commit: r228070 - stable/9/lib/libc/sys

2011-11-28 Thread Robert Watson
Author: rwatson Date: Mon Nov 28 14:39:56 2011 New Revision: 228070 URL: http://svn.freebsd.org/changeset/base/228070 Log: Merge r228040 from head to stable/9: Cross-reference capsicum.4 from cap_enter.2 and cap_new.2. Sponsored by: Google, Inc. Approved by: re (kib)

svn commit: r228073 - stable/9/cddl/lib/drti

2011-11-28 Thread Robert Watson
Author: rwatson Date: Mon Nov 28 15:09:31 2011 New Revision: 228073 URL: http://svn.freebsd.org/changeset/base/228073 Log: Merge r228057 from head to stable/9: Change the Makefile in cddl/lib/drti to use bsd.lib.mk instead of bsd.prog.mk -- we need to compile PIC, which requires a

Re: svn commit: r228073 - stable/9/cddl/lib/drti

2011-11-28 Thread Robert Watson
On Mon, 28 Nov 2011, Joel Dahl wrote: Log: Merge r228057 from head to stable/9: Change the Makefile in cddl/lib/drti to use bsd.lib.mk instead of bsd.prog.mk -- we need to compile PIC, which requires a library build. With this change, USDT (userspace DTrace probes) work from

svn commit: r228105 - releng/9.0/share/man/man4

2011-11-28 Thread Robert Watson
of Cambridge. +.Sh AUTHORS +.Nm +was developed by +.An -nosplit +.An Robert Watson Aq rwat...@freebsd.org +and +.An Jonathan Anderson Aq jonat...@freebsd.org +at the University of Cambridge, and +.An Ben Laurie Aq b...@freebsd.org +and +.An Kris Kennaway Aq k...@freebsd.org +at Google, Inc. +.Sh

svn commit: r228106 - releng/9.0/lib/libc/sys

2011-11-28 Thread Robert Watson
Author: rwatson Date: Mon Nov 28 22:24:22 2011 New Revision: 228106 URL: http://svn.freebsd.org/changeset/base/228106 Log: Merge r228040 from head to releng/9.0: Cross-reference capsicum.4 from cap_enter.2 and cap_new.2. Sponsored by: Google, Inc. Approved by: re (kib)

svn commit: r228107 - releng/9.0/cddl/lib/drti

2011-11-28 Thread Robert Watson
Author: rwatson Date: Mon Nov 28 22:30:19 2011 New Revision: 228107 URL: http://svn.freebsd.org/changeset/base/228107 Log: Merge r228057 from head to releng/9.0: Change the Makefile in cddl/lib/drti to use bsd.lib.mk instead of bsd.prog.mk -- we need to compile PIC, which requires a

Re: svn commit: r232770 - head/sys/mips/mips

2012-03-10 Thread Robert Watson
On Sat, 10 Mar 2012, Juli Mallett wrote: Log: o) Remove some CPU_CNMIPS-related magical thinking about the status register's contents for user programs. o) Conditionalize the installation of an XTLB handler on ABI, not CPU family. This all makes the FreeBSD/CHERI port much more

svn commit: r234032 - head/sys/security/mac

2012-04-08 Thread Robert Watson
Author: rwatson Date: Sun Apr 8 11:01:49 2012 New Revision: 234032 URL: http://svn.freebsd.org/changeset/base/234032 Log: When allocation of labels on files is implicitly disabled due to MAC policy configuration, avoid leaking resources following failed calls to get and set MAC labels by

svn commit: r234034 - head/contrib/openbsm/libauditd

2012-04-08 Thread Robert Watson
Author: rwatson Date: Sun Apr 8 11:05:22 2012 New Revision: 234034 URL: http://svn.freebsd.org/changeset/base/234034 Log: Merge a local fix to OpenBSM's libauditd to avoid a directory descriptor leak when iterating over possible audit trail directories. This fix will be merged upstream in

Re: svn commit: r268852 - in vendor-sys/illumos/dist/uts/common/fs/zfs: . sys

2014-07-19 Thread Robert Watson
On Fri, 18 Jul 2014, Xin LI wrote: Log: 5008 lock contention (rrw_exit) while running a read only load Reviewed by: Matthew Ahrens matthew.ahr...@delphix.com Reviewed by: George Wilson george.wil...@delphix.com Reviewed by: Alex Reece alex.re...@delphix.com Reviewed by: Christopher Siden

svn commit: r268879 - head/usr.bin/procstat

2014-07-19 Thread Robert Watson
Author: rwatson Date: Sat Jul 19 15:09:53 2014 New Revision: 268879 URL: http://svnweb.freebsd.org/changeset/base/268879 Log: Better align headers and data for 'procstat -f' with and without '-C'. MFC after:3 days Sponsored by: DARPA, AFRL Modified:

svn commit: r268925 - head/usr.bin/procstat

2014-07-20 Thread Robert Watson
Author: rwatson Date: Sun Jul 20 20:11:34 2014 New Revision: 268925 URL: http://svnweb.freebsd.org/changeset/base/268925 Log: In procstat -v (VM), spell out 'FL' to 'FLAG' since there are two extra columns available anyway. Also left align as we tend to do for flags fields, although you

svn commit: r265216 - in head/sys: kern sys

2014-05-02 Thread Robert Watson
Author: rwatson Date: Fri May 2 07:57:40 2014 New Revision: 265216 URL: http://svnweb.freebsd.org/changeset/base/265216 Log: Garbage collect mtxpool_lockbuilder, the mutex pool historically used for lockmgr and sx interlocks, but unused since optimised versions of those sleep locks were

svn commit: r265396 - head/sys/sys

2014-05-05 Thread Robert Watson
Author: rwatson Date: Mon May 5 21:46:10 2014 New Revision: 265396 URL: http://svnweb.freebsd.org/changeset/base/265396 Log: Garbage collect two more unused sysinit subsystems: SI_SUB_KVM_RSRC and SI_SUB_CLISTS. MFC after:3 days Modified: head/sys/sys/kernel.h Modified:

svn commit: r265432 - head/sys/sys

2014-05-06 Thread Robert Watson
Author: rwatson Date: Tue May 6 10:53:51 2014 New Revision: 265432 URL: http://svnweb.freebsd.org/changeset/base/265432 Log: Spell raccdt in a more conventional way in a comment. MFC after:3 days Modified: head/sys/sys/kernel.h Modified: head/sys/sys/kernel.h

Re: svn commit: r265498 - stable/10/sys/dev/iscsi

2014-05-07 Thread Robert Watson
On Wed, 7 May 2014, Edward Tomasz Napierala wrote: Author: trasz Date: Wed May 7 06:38:19 2014 New Revision: 265498 URL: http://svnweb.freebsd.org/changeset/base/265498 Log: MFC r264025: Get rid of the autoscaling, instead just set socket buffer sizes in the usual way. The only thing the

Re: svn commit: r262566 - in stable/10: crypto/openssh crypto/openssh/contrib/caldera crypto/openssh/contrib/cygwin crypto/openssh/contrib/redhat crypto/openssh/contrib/suse crypto/openssh/openbsd-com

2014-03-09 Thread Robert Watson
On Mon, 3 Mar 2014, John Baldwin wrote: Log: MFH (r261320): upgrade openssh to 6.5p1 MFH (r261340): enable sandboxing by default Mails on stable@ suggest that this latter change may be a bit of a POLA violation as if people are using a custom kernel configuration that doesn't include

svn commit: r263198 - in head/sys: amd64/conf conf net netinet netinet6 sys

2014-03-14 Thread Robert Watson
Author: rwatson Date: Sat Mar 15 00:57:50 2014 New Revision: 263198 URL: http://svnweb.freebsd.org/changeset/base/263198 Log: Several years after initial development, merge prototype support for linking NIC Receive Side Scaling (RSS) to the network stack's connection-group implementation.

svn commit: r263200 - head/sys/amd64/conf

2014-03-14 Thread Robert Watson
Author: rwatson Date: Sat Mar 15 00:59:23 2014 New Revision: 263200 URL: http://svnweb.freebsd.org/changeset/base/263200 Log: Revert a small portion of r263198 left over from local testing: don't enable PCB groups and RSS by default [yet]. Modified: head/sys/amd64/conf/GENERIC Modified:

Re: svn commit: r263215 - head/sys/crypto/sha2

2014-03-16 Thread Robert Watson
On Sun, 16 Mar 2014, John-Mark Gurney wrote: Log: copy these files from lib/libmd in preperation for moving these files into the kernel... I was sure that there was a sha256 implementation in the kernel already, and indeed there is -- in the ZFS code. Having it in the crypto tree makes

Re: svn commit: r263215 - head/sys/crypto/sha2

2014-03-16 Thread Robert Watson
On Sun, 16 Mar 2014, Robert Watson wrote: copy these files from lib/libmd in preperation for moving these files into the kernel... I was sure that there was a sha256 implementation in the kernel already, and indeed there is -- in the ZFS code. Having it in the crypto tree makes (much

svn commit: r263232 - head/sys/sys

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 10:49:16 2014 New Revision: 263232 URL: http://svnweb.freebsd.org/changeset/base/263232 Log: Rename capability.h to capsicum.h: the original name conflicts with the draft POSIX.1e capability.h used on some systems (e.g., Linux). On FreeBSD, leave a wrapper

svn commit: r263233 - in head/sys: amd64/amd64 amd64/linux32 arm/arm cam/ctl cddl/compat/opensolaris/sys compat/freebsd32 compat/linux compat/svr4 dev/aac dev/aacraid dev/amr dev/filemon dev/hwpmc ...

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 10:55:57 2014 New Revision: 263233 URL: http://svnweb.freebsd.org/changeset/base/263233 Log: Update kernel inclusions of capability.h to use capsicum.h instead; some further refinement is required as some device drivers intended to be portable over FreeBSD

svn commit: r263234 - in head: contrib/tcpdump crypto/openssh lib/libc/gen lib/libcasper lib/libprocstat sbin/casperd sbin/dhclient sbin/hastd sbin/ping tools/regression/capsicum/libcapsicum tools/...

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 11:04:44 2014 New Revision: 263234 URL: http://svnweb.freebsd.org/changeset/base/263234 Log: Update most userspace consumers of capability.h to use capsicum.h instead. auditdistd is not updated as I will make the change upstream and then do a vendor

svn commit: r263235 - head/sys/sys

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 11:06:05 2014 New Revision: 263235 URL: http://svnweb.freebsd.org/changeset/base/263235 Log: Bump __FreeBSD_version to reflect capability.h - capsicum.h change. MFC after:3 weeks Modified: head/sys/sys/param.h Modified: head/sys/sys/param.h

svn commit: r263252 - head/sys/sys

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 21:05:00 2014 New Revision: 263252 URL: http://svnweb.freebsd.org/changeset/base/263252 Log: Fix a comment in capability.h: it got renamed to capsicum.h, not capability.h. MFC after:3 weeks Spotted by: alc, mcdouga9 at egr.msu.edu, thompsa

svn commit: r263266 - head/usr.sbin/jail

2014-03-17 Thread Robert Watson
Author: rwatson Date: Mon Mar 17 14:19:42 2014 New Revision: 263266 URL: http://svnweb.freebsd.org/changeset/base/263266 Log: Line-wrapping tweak: make the sample jail command line fit in 80 characters. MFC after:3 days Modified: head/usr.sbin/jail/jail.8 Modified:

svn commit: r263343 - stable/9/lib/libprocstat

2014-03-19 Thread Robert Watson
Author: rwatson Date: Wed Mar 19 10:32:57 2014 New Revision: 263343 URL: http://svnweb.freebsd.org/changeset/base/263343 Log: Merge r262690 from head to stable/9: When querying a process's umask via sysctl in libprocstat(), don't print a warning if EPERM is returned as this is an

svn commit: r263842 - in head/lib/libc: capability gen sys

2014-03-27 Thread Robert Watson
Author: rwatson Date: Thu Mar 27 21:43:00 2014 New Revision: 263842 URL: http://svnweb.freebsd.org/changeset/base/263842 Log: Update system man pages for s/capability.h/capsicum.h/. MFC after:3 weeks Modified: head/lib/libc/capability/cap_rights_init.3

svn commit: r259217 - svnadmin/conf

2013-12-11 Thread Robert Watson
Author: rwatson Date: Wed Dec 11 08:46:18 2013 New Revision: 259217 URL: http://svnweb.freebsd.org/changeset/base/259217 Log: Re-add jkh to the access file as his commit bit is being returned from safekeeping by core. As he has been away for a while, I'll be wearing the notional mentor hat

Re: svn commit: r261266 - in head: sys/dev/drm sys/kern sys/sys usr.sbin/jail

2014-01-31 Thread Robert Watson
Hi Jamie: As these privileges basically allows root processes in jail to break out of jail, I think this needs a much more clear signpost that this is a very unsafe thing to turn on. I can imagine scenarios where this might be useful, but can't really imagine any where it is 'safe' with

Re: svn commit: r261266 - in head: sys/dev/drm sys/kern sys/sys usr.sbin/jail

2014-01-31 Thread Robert Watson
On Wed, 29 Jan 2014, Alexander Leidinger wrote: It does. I included a warning in jail.8 that this will pretty much undo jail security. There are still reasons some may want to do this, but it's definitely not for everyone or even most people. It only unjails (= basically the same security

svn commit: r262197 - in head/sys/boot/mips: . beri beri/boot2 beri/common beri/loader

2014-02-18 Thread Robert Watson
Author: rwatson Date: Tue Feb 18 23:18:32 2014 New Revision: 262197 URL: http://svnweb.freebsd.org/changeset/base/262197 Log: Commit a first cut at ports of boot2 and loader to 64-bit MIPS, with a particular interest in (and support for) SRI International and the University of Cambridge's

svn commit: r262198 - in head/sys/boot/mips/beri: boot2 loader

2014-02-18 Thread Robert Watson
Author: rwatson Date: Tue Feb 18 23:22:54 2014 New Revision: 262198 URL: http://svnweb.freebsd.org/changeset/base/262198 Log: Replace Apache-style license on two Makefiles with stock 2-clause BSD; license, although the former is pretty safe, it wasn't intended to be used in the version of

svn commit: r262217 - head/sys/mips/include

2014-02-19 Thread Robert Watson
Author: rwatson Date: Wed Feb 19 09:19:09 2014 New Revision: 262217 URL: http://svnweb.freebsd.org/changeset/base/262217 Log: Update MIPS bootinfo.h to reflect the actual MIPS boot2/loader boot-time interface. MFC after:3 weeks Sponsored by: DARPA, AFRL Modified:

svn commit: r262224 - head/sys/boot

2014-02-19 Thread Robert Watson
Author: rwatson Date: Wed Feb 19 17:44:59 2014 New Revision: 262224 URL: http://svnweb.freebsd.org/changeset/base/262224 Log: Do build boot-loader FDT code on MIPS. MFC after:3 weeks Sponsored by: DARPA, AFRL Added: head/sys/boot/Makefile.mips (contents, props changed) Added:

svn commit: r262235 - head/sys/boot/mips

2014-02-19 Thread Robert Watson
Author: rwatson Date: Wed Feb 19 23:09:25 2014 New Revision: 262235 URL: http://svnweb.freebsd.org/changeset/base/262235 Log: Temporarily unhook BERI boot loader from the build until 32-bit MIPS properly excludes building our 64-bit only boot-loader adaptation. Modified:

svn commit: r262402 - in head/sys/boot/ficl: . mips64

2014-02-23 Thread Robert Watson
Author: rwatson Date: Sun Feb 23 22:10:25 2014 New Revision: 262402 URL: http://svnweb.freebsd.org/changeset/base/262402 Log: Give mips64 its own ficl configuration that sizes pointers/etc suitably for a 64-bit architecture, rather than trying to share the 32-bit MIPS ficl configuration.

svn commit: r262403 - head/sys/boot/common

2014-02-23 Thread Robert Watson
Author: rwatson Date: Sun Feb 23 22:11:26 2014 New Revision: 262403 URL: http://svnweb.freebsd.org/changeset/base/262403 Log: On mips64, built 64-bit ELF support. MFC after:3 weeks Sponsored by: DARPA, AFRL Modified: head/sys/boot/common/Makefile.inc Modified:

svn commit: r262404 - head/sys/boot/fdt

2014-02-23 Thread Robert Watson
Author: rwatson Date: Sun Feb 23 22:12:25 2014 New Revision: 262404 URL: http://svnweb.freebsd.org/changeset/base/262404 Log: When building FDT on MIPS, use softfloat. MFC after:3 weeks Sponsored by: DARPA, AFRL Modified: head/sys/boot/fdt/Makefile Modified:

svn commit: r262406 - head/sys/boot/mips

2014-02-23 Thread Robert Watson
Author: rwatson Date: Sun Feb 23 22:20:52 2014 New Revision: 262406 URL: http://svnweb.freebsd.org/changeset/base/262406 Log: Build the BERI boot loader on 64-bit MIPS (but not 32-bit MIPS). While these binaries aren't immediately useful on other MIPSes, still build them as part of mips64

svn commit: r262452 - head/sys/boot/common

2014-02-24 Thread Robert Watson
Author: rwatson Date: Mon Feb 24 18:44:03 2014 New Revision: 262452 URL: http://svnweb.freebsd.org/changeset/base/262452 Log: Build 64-bit ELF support into little-endian 64-bit MIPS boot-loader fragments; while this won't actually be used for anything (yet), it doesn't hurt to ensure it is

svn commit: r262453 - head/sys/boot/ficl

2014-02-24 Thread Robert Watson
Author: rwatson Date: Mon Feb 24 18:44:22 2014 New Revision: 262453 URL: http://svnweb.freebsd.org/changeset/base/262453 Log: Build FICL support into little-endian 64-bit MIPS boot-loader fragments; while this won't actually be used for anything (yet), it doesn't hurt to ensure it is

svn commit: r262690 - head/lib/libprocstat

2014-03-02 Thread Robert Watson
Author: rwatson Date: Sun Mar 2 13:26:08 2014 New Revision: 262690 URL: http://svnweb.freebsd.org/changeset/base/262690 Log: When querying a process's umask via sysctl in libprocstat(), don't print a warning if EPERM is returned as this is an expected failure mode rather than error --

Re: svn commit: r262882 - head/tools/tools/net80211/wlanstats

2014-03-07 Thread Robert Watson
On Fri, 7 Mar 2014, Bruce Evans wrote: Log: wlanstats: add help - add a help (-h) flag - move usage into itsown function it looks like the only change now is that usage info always go to stdout, and exit code differs. i don't think it should be mfced. It also removes the double

svn commit: r262947 - stable/10/lib/libprocstat

2014-03-09 Thread Robert Watson
Author: rwatson Date: Sun Mar 9 13:23:49 2014 New Revision: 262947 URL: http://svnweb.freebsd.org/changeset/base/262947 Log: Merge r262690 from head to stable/10: When querying a process's umask via sysctl in libprocstat(), don't print a warning if EPERM is returned as this is an

Re: svn commit: r258041 - head/lib/libc/posix1e

2013-11-14 Thread Robert Watson
On Tue, 12 Nov 2013, Edward Tomasz Napierala wrote: Mention acl_get_brand_np(3). MFC after: 2 weeks Sponsored by: The FreeBSD Foundation Doing some writing recently, I did wonder if acl(3) and some of the other ACL API man pages might need a bit more updating to be clear about

Re: svn commit: r258124 - head/usr.sbin/portsnap/portsnap

2013-11-14 Thread Robert Watson
On Thu, 14 Nov 2013, Colin Percival wrote: Log: When verifying that files we need are present, also check that they don't have zero length. Filesystem corruption will tend to truncate files, and since these are short that's likely to result in them becoming empty. Suggested by: Richard

Re: svn commit: r258328 - head/sys/net

2013-11-19 Thread Robert Watson
On Mon, 18 Nov 2013, George V. Neville-Neil wrote: Allow ethernet drivers to pass in packets connected via the nextpkt pointer. Handling packets in this way allows drivers to amortize work during packet reception. Submitted by: Vijay Singh Sponsored by: NetApp Currently, it is quite

Re: svn commit: r258328 - head/sys/net

2013-11-23 Thread Robert Watson
On Wed, 20 Nov 2013, Adrian Chadd wrote: We should migrate drivers to use a multi-input method where it's appropriate. It's the same pain as if_transmit() is/was. I'd really like to avoid having hacky solutions like mbufs with magic types. If we're going down that path, we should create a

Re: svn commit: r258328 - head/sys/net

2013-11-23 Thread Robert Watson
On Wed, 20 Nov 2013, Julian Elischer wrote: After that it'd be nice to write a set of mbuf list macros for abstract the whole queue, dequeue, concat, iterate, etc (like sys/queue.h, but for mbufs.) What do people think? (I've been doing it for m-next chained things, but not m-m_nextpkt

svn commit: r255001 - head/share/man/man4

2013-08-28 Thread Robert Watson
pdwait4 , +.Xr capsicum 4 +.Sh HISTORY +.Nm +first appeared in +.Fx 9.0 , +and was developed at the University of Cambridge. +.Sh AUTHORS +.Nm +was developed by +.An -nosplit +.An Robert Watson Aq rwat...@freebsd.org +and +.An Jonathan Anderson Aq jonat...@freebsd.org +at the University

svn commit: r255002 - head/lib/libc/sys

2013-08-28 Thread Robert Watson
Author: rwatson Date: Wed Aug 28 20:00:25 2013 New Revision: 255002 URL: http://svnweb.freebsd.org/changeset/base/255002 Log: Xref capsicum(4) and procdesc(4) from pdfork(2). Suggested by: sbruno MFC after:3 days Modified: head/lib/libc/sys/pdfork.2 Modified:

svn commit: r255171 - head/lib/libc/gen

2013-09-03 Thread Robert Watson
Author: rwatson Date: Tue Sep 3 08:19:06 2013 New Revision: 255171 URL: http://svnweb.freebsd.org/changeset/base/255171 Log: Document SIGLIBRT in signal(3); take a stab at the signal description as the original committer didn't provide one. MFC after:3 days Modified:

svn commit: r255948 - head/share/man/man4

2013-09-30 Thread Robert Watson
Author: rwatson Date: Mon Sep 30 09:21:17 2013 New Revision: 255948 URL: http://svnweb.freebsd.org/changeset/base/255948 Log: Update ddb(9) to show how to print 64-bit values with examine. MFC after:3 days Approved by: re (gjb) Modified: head/share/man/man4/ddb.4 Modified:

svn commit: r271174 - head/sys/sys

2014-09-05 Thread Robert Watson
Author: rwatson Date: Fri Sep 5 16:46:28 2014 New Revision: 271174 URL: http://svnweb.freebsd.org/changeset/base/271174 Log: Clarify a diagnostic printf() in the mbuf code: M_EXT doesn't necessarily imply a cluster is attached; it could also refer to some other sort of external storage

svn commit: r271373 - in head/sys/dev: ce cp ctau cx

2014-09-10 Thread Robert Watson
Author: rwatson Date: Wed Sep 10 09:57:32 2014 New Revision: 271373 URL: http://svnweb.freebsd.org/changeset/base/271373 Log: Replace local copy-and-paste implementations of printmbuf() in several device drivers with calls to the centralised m_print() implementation. While the formatting

svn commit: r271420 - in head/sys: dev/cxgbe/common sys

2014-09-11 Thread Robert Watson
Author: rwatson Date: Thu Sep 11 07:16:15 2014 New Revision: 271420 URL: http://svnweb.freebsd.org/changeset/base/271420 Log: Add new a M_START() mbuf macro that returns a pointer to the start of an mbuf's storage (internal or external). Add a new M_SIZE() mbuf macro that returns the

Re: svn commit: r271418 - head/sbin/dhclient

2014-09-11 Thread Robert Watson
A bit behind on commits, but: does this mean that an older userspace dhclient will no longer work with a newer kernel? Robert On Thu, 11 Sep 2014, Gleb Smirnoff wrote: Author: glebius Date: Thu Sep 11 05:48:39 2014 New Revision: 271418 URL: http://svnweb.freebsd.org/changeset/base/271418

Re: svn commit: r271504 - in head/sys: dev/oce dev/vmware/vmxnet3 dev/xen/netfront net netinet ofed/drivers/net/mlx4

2014-09-13 Thread Robert Watson
On Sat, 13 Sep 2014, Rick Macklem wrote: Well, there are spare fields (if_ispare[4]) in struct ifnet that I believe can be used for new u_ints when MFC'ng a patch that adds fields to struct ifnet in head. (If I have this wrong, someone please correct me.) In my notes from a few years ago on

svn commit: r272559 - head/sys/netinet

2014-10-05 Thread Robert Watson
Author: rwatson Date: Sun Oct 5 06:28:53 2014 New Revision: 272559 URL: https://svnweb.freebsd.org/changeset/base/272559 Log: Eliminate use of M_EXT in IP6_EXTHDR_CHECK() by trimming a redundant 'if'/'else' case: it matches the simple 'else' case that follows. This reduces awareness of

svn commit: r272984 - in head/sys: netinet netinet6

2014-10-12 Thread Robert Watson
Author: rwatson Date: Sun Oct 12 15:49:52 2014 New Revision: 272984 URL: https://svnweb.freebsd.org/changeset/base/272984 Log: When deciding whether to call m_pullup() even though there is adequate data in an mbuf, use M_WRITABLE() instead of a direct test of M_EXT; the latter both

svn commit: r273028 - in head/sys/dev: msk nfe sk

2014-10-13 Thread Robert Watson
Author: rwatson Date: Mon Oct 13 06:51:40 2014 New Revision: 273028 URL: https://svnweb.freebsd.org/changeset/base/273028 Log: Eliminate unnecessary checking for M_EXT on mbufs returned by m_getjcl(). Reviewed by: bz, glebius, yongari MFC after:3 days Sponsored by: EMC / Isilon

Re: svn commit: r275326 - in head: sys/dev/cxgbe/tom sys/kern sys/netinet sys/sys usr.bin/bluetooth/btsockstat usr.bin/netstat usr.bin/systat

2014-11-30 Thread Robert Watson
Hi Gleb: Randall had mentioned these in-flight changes to me, and I can see how these might substantially reduce latency in usefully filling the TCP pipe when the window is opening rapidly (among other things). As with others, I'm a bit cautious about further increases in asynchrony within

svn commit: r276563 - head/sys/dev/cxgb/ulp/tom

2015-01-02 Thread Robert Watson
Author: rwatson Date: Fri Jan 2 19:06:27 2015 New Revision: 276563 URL: https://svnweb.freebsd.org/changeset/base/276563 Log: In mbuf_to_synq_entry(), use M_START() and M_SIZE() to calculate an offset into mbuf storage, to reduce knowledge about mbuf/cluster layout in the cxgb device

svn commit: r277203 - in head/sys: kern sys

2015-01-14 Thread Robert Watson
Author: rwatson Date: Wed Jan 14 23:44:00 2015 New Revision: 277203 URL: https://svnweb.freebsd.org/changeset/base/277203 Log: In order to support ongoing work to implement variable-size mbufs, and more generally make it easier to extend 'struct mbuf in the future', make a number of changes

Re: svn commit: r277652 - in head/usr.sbin/pw: . tests

2015-01-27 Thread Robert Watson
On Sun, 25 Jan 2015, Bruce Evans wrote: Negative ids have historical abuses in places like mountd. mountd still hard-codes -2 and -2 for the default uid and gid of an unprivileged user. It at least casts these values to uid_t and gid_t before using them. This gives the ids the non-random

svn commit: r276692 - in head/sys: dev/en dev/fatm dev/iscsi_initiator dev/patm kern net80211 netinet netinet6 sys

2015-01-05 Thread Robert Watson
Author: rwatson Date: Mon Jan 5 09:58:32 2015 New Revision: 276692 URL: https://svnweb.freebsd.org/changeset/base/276692 Log: To ease changes to underlying mbuf structure and the mbuf allocator, reduce the knowledge of mbuf layout, and in particular constants such as M_EXT, MLEN, MHLEN,

svn commit: r276750 - in head: share/man/man9 sys/contrib/ipfilter/netinet sys/dev/an sys/dev/bge sys/dev/ce sys/dev/cm sys/dev/cp sys/dev/cs sys/dev/ctau sys/dev/ed sys/dev/ex sys/dev/fe sys/dev/h...

2015-01-06 Thread Robert Watson
Author: rwatson Date: Tue Jan 6 12:59:37 2015 New Revision: 276750 URL: https://svnweb.freebsd.org/changeset/base/276750 Log: In order to reduce use of M_EXT outside of the mbuf allocator and socket-buffer implementations, introduce a return value for MCLGET() (and m_cljget() that

svn commit: r276752 - head/sys/netinet

2015-01-06 Thread Robert Watson
Author: rwatson Date: Tue Jan 6 14:32:28 2015 New Revision: 276752 URL: https://svnweb.freebsd.org/changeset/base/276752 Log: Use M_WRITABLE() and M_LEADINGSPACE() rather than checking M_EXT and doing hand-crafted length calculations in the IP options code. Reviewed by: bz Sponsored

svn commit: r276910 - in head/sys: kern sys

2015-01-10 Thread Robert Watson
Author: rwatson Date: Sat Jan 10 10:41:23 2015 New Revision: 276910 URL: https://svnweb.freebsd.org/changeset/base/276910 Log: Garbage collect m_copymdata(), an mbuf utility routine introduced in FreeBSD 7 that has not been used since. It contains a number of unresolved bugs including an

svn commit: r276888 - head/sys/sys

2015-01-09 Thread Robert Watson
Author: rwatson Date: Fri Jan 9 15:21:53 2015 New Revision: 276888 URL: https://svnweb.freebsd.org/changeset/base/276888 Log: Uninline M_SIZE() in m_align() to reduce direct use of MLEN and MHLEN. Differential Revision:https://reviews.freebsd.org/D1471 Reviewed by: glebius, bz,

svn commit: r276884 - head/sys/kern

2015-01-09 Thread Robert Watson
Author: rwatson Date: Fri Jan 9 12:08:51 2015 New Revision: 276884 URL: https://svnweb.freebsd.org/changeset/base/276884 Log: Remove a 'This is dumb' comment that has been incorrect for at least a decade: m_pulldown() is willing to consider ordinary mbufs writable. Retain another, related,

svn commit: r276818 - head/sys/kern

2015-01-08 Thread Robert Watson
Author: rwatson Date: Thu Jan 8 11:16:21 2015 New Revision: 276818 URL: https://svnweb.freebsd.org/changeset/base/276818 Log: Replace hand-crafted versions of M_SIZE() and M_START() in uipc_mbuf.c with calls to the centralised macros, reducing direct use of MLEN and MHLEN.

svn commit: r276781 - head/sys/sys

2015-01-07 Thread Robert Watson
Author: rwatson Date: Wed Jan 7 18:24:42 2015 New Revision: 276781 URL: https://svnweb.freebsd.org/changeset/base/276781 Log: Bump __FreeBSD_version to 1100053 reflecting the addition of a return value to MCLGET(). Suggested by: jmg Sponsored by: EMC / Isilon Storage Division

Re: svn commit: r276750 - in head: share/man/man9 sys/contrib/ipfilter/netinet sys/dev/an sys/dev/bge sys/dev/ce sys/dev/cm sys/dev/cp sys/dev/cs sys/dev/ctau sys/dev/ed sys/dev/ex sys/dev/fe sys/dev/

2015-01-07 Thread Robert Watson
On Wed, 7 Jan 2015, John-Mark Gurney wrote: Log: In order to reduce use of M_EXT outside of the mbuf allocator and socket-buffer implementations, introduce a return value for MCLGET() (and m_cljget() that underlies it) to allow the caller to avoid testing M_EXT itself. Update all

svn commit: r276780 - in head/sys: fs/nfs fs/nfsserver nfsserver

2015-01-07 Thread Robert Watson
Author: rwatson Date: Wed Jan 7 17:22:56 2015 New Revision: 276780 URL: https://svnweb.freebsd.org/changeset/base/276780 Log: Use M_SIZE() instead of hand-crafted (and mostly correct) NFSMSIZ() macro in the NFS server; garbage collect now-unused NFSMSIZ() and M_HASCL() macros. Also

svn commit: r280224 - stable/10/sys/sys

2015-03-18 Thread Robert Watson
Author: rwatson Date: Wed Mar 18 15:20:08 2015 New Revision: 280224 URL: https://svnweb.freebsd.org/changeset/base/280224 Log: Merge r263232 from head to stable/10: Rename capability.h to capsicum.h: the original name conflicts with the draft POSIX.1e capability.h used on some

svn commit: r280038 - head/sys/cddl/dev/dtrace/arm

2015-03-15 Thread Robert Watson
Author: rwatson Date: Sun Mar 15 15:17:34 2015 New Revision: 280038 URL: https://svnweb.freebsd.org/changeset/base/280038 Log: On ARM, unlike some other architectures, saved $pc values from in-kernel traps do appear in the regular call stack, rather than only in a special trap frame, so we

svn commit: r280035 - head/sys/cddl/dev/profile

2015-03-15 Thread Robert Watson
Author: rwatson Date: Sun Mar 15 14:12:40 2015 New Revision: 280035 URL: https://svnweb.freebsd.org/changeset/base/280035 Log: Replace the completely arbitrary '3' with '9' for the number of frames to skip using the DTrace 'profile' provider on ARM. This causes stack traces to skip various

svn commit: r280039 - head/sys/cddl/dev/fbt/arm

2015-03-15 Thread Robert Watson
Author: rwatson Date: Sun Mar 15 15:19:02 2015 New Revision: 280039 URL: https://svnweb.freebsd.org/changeset/base/280039 Log: Now that DTrace stack traces handle exception frames better, skip fewer stack frames for FBT 'entry' probes on ARM. MFC after:3 days Sponsored by: DARPA,

svn commit: r280148 - head/sys/sys

2015-03-16 Thread Robert Watson
Author: rwatson Date: Mon Mar 16 17:42:53 2015 New Revision: 280148 URL: https://svnweb.freebsd.org/changeset/base/280148 Log: Introduce a cap_ioctl_t used for the 'cmds' arguments to cap_ioctls_limit() and cap_ioctls_get(). On FreeBSD, these are 'unsigned long', but on Linux, ioctl(2)

svn commit: r280247 - in stable/10/lib/libc: capability gen sys

2015-03-19 Thread Robert Watson
Author: rwatson Date: Thu Mar 19 11:24:07 2015 New Revision: 280247 URL: https://svnweb.freebsd.org/changeset/base/280247 Log: Merge r263842 from HEAD to stable/10: Update system man pages for s/capability.h/capsicum.h/. Sponsored by: Google, Inc. Modified:

svn commit: r280246 - stable/10/sys/sys

2015-03-19 Thread Robert Watson
Author: rwatson Date: Thu Mar 19 11:20:12 2015 New Revision: 280246 URL: https://svnweb.freebsd.org/changeset/base/280246 Log: Bump __FreeBSD_version to 1001511 reflecting the capability.h - capsicum.h rename. Sponsored by: Google, Inc. Modified: stable/10/sys/sys/param.h Modified:

svn commit: r280250 - in stable/10: contrib/tcpdump crypto/openssh lib/libc/gen lib/libprocstat sbin/dhclient sbin/hastd tools/regression/capsicum/syscalls tools/regression/security/cap_test usr.bi...

2015-03-19 Thread Robert Watson
Author: rwatson Date: Thu Mar 19 12:32:48 2015 New Revision: 280250 URL: https://svnweb.freebsd.org/changeset/base/280250 Log: Merge an applicable subset of r263234 from HEAD to stable/10: Update most userspace consumers of capability.h to use capsicum.h instead. auditdistd is not

svn commit: r280258 - in stable/10/sys: amd64/amd64 amd64/linux32 arm/arm cam/ctl cddl/compat/opensolaris/sys compat/freebsd32 compat/linux compat/svr4 dev/aac dev/aacraid dev/amr dev/filemon dev/h...

2015-03-19 Thread Robert Watson
Author: rwatson Date: Thu Mar 19 13:37:36 2015 New Revision: 280258 URL: https://svnweb.freebsd.org/changeset/base/280258 Log: Merge r263233 from HEAD to stable/10: Update kernel inclusions of capability.h to use capsicum.h instead; some further refinement is required as some device

svn commit: r279626 - head/sys/cddl/dev/fbt/arm

2015-03-04 Thread Robert Watson
Author: rwatson Date: Thu Mar 5 07:40:41 2015 New Revision: 279626 URL: https://svnweb.freebsd.org/changeset/base/279626 Log: Don't all DTrace's FBT on ARM to instrument undefinedinstruction(), as this would lead to DTrace reentrance. Sponsored by: DARPA, AFRL Modified:

Re: svn commit: r280971 - in head: contrib/ipfilter/tools share/man/man4 sys/contrib/ipfilter/netinet sys/netinet sys/netipsec sys/netpfil/pf

2015-04-03 Thread Robert Watson
On Fri, 3 Apr 2015, Hans Petter Selasky wrote: Will you mind if I rephrase that paragraph in the inet.4 manual page from: This closes a minor information leak which allows remote observers to determine the rate of packet generation on the machine by watching the counter. Into: This

Re: svn commit: r280971 - in head: contrib/ipfilter/tools share/man/man4 sys/contrib/ipfilter/netinet sys/netinet sys/netipsec sys/netpfil/pf

2015-04-03 Thread Robert Watson
On Fri, 3 Apr 2015, Emeric POUPON wrote: A good ip id random would be certainly better. But the current implementation is far from being optimized: a lock is being held inside arc4rand, and another one for protecting the ip_id internals. We already have contention problems with the IV

svn commit: r281983 - head/sys/cddl/dev/profile

2015-04-25 Thread Robert Watson
Author: rwatson Date: Sat Apr 25 15:43:12 2015 New Revision: 281983 URL: https://svnweb.freebsd.org/changeset/base/281983 Log: Adjust PROF_ARTIFICIAL_FRAMES in the DTrace profile provider on ARM to skip 10, rather than 9, frames. This appears to work quite well in practice on the

<    5   6   7   8   9   10   11   >