svn commit: r347058 - head/sys/security/mac

2019-05-03 Thread Robert Watson
Author: rwatson Date: Fri May 3 20:38:43 2019 New Revision: 347058 URL: https://svnweb.freebsd.org/changeset/base/347058 Log: When MAC is enabled and a policy module is loaded, don't unconditionally lock mac_ifnet_mtx, which protects labels on struct ifnet, unless at least one policy is

svn commit: r346846 - head/share/man/man4

2019-04-28 Thread Robert Watson
Author: rwatson Date: Sun Apr 28 16:28:36 2019 New Revision: 346846 URL: https://svnweb.freebsd.org/changeset/base/346846 Log: Update the audit(4) man page to talk about dtaudit(4), and also add a dtaudit(4) cross reference to auditpipe(4). MFC after:3 days Sponsored by: DARPA,

svn commit: r346814 - head/share/man/man4

2019-04-28 Thread Robert Watson
to the audit trail or enabled pipes. +.Sh SEE ALSO +.Xr dtrace 1 , +.Xr audit 4 , +.Xr audit.log 5 , +.Xr loader.conf 5 , +.Xr rc.conf 5 , +.Xr auditd 8 +.Sh HISTORY +The +.Nm dtaudit +provider first appeared in +.Fx 12.0 . +.Sh AUTHORS +This software and this manual page were developed by BAE

svn commit: r339085 - head/sys/security/audit

2018-10-02 Thread Robert Watson
Author: rwatson Date: Tue Oct 2 15:58:17 2018 New Revision: 339085 URL: https://svnweb.freebsd.org/changeset/base/339085 Log: Rework the logic around quick checks for auditing that take place at system-call entry and whenever audit arguments or return values are captured: 1. Expose a

svn commit: r338443 - in head: stand/defaults sys/security/audit

2018-09-03 Thread Robert Watson
Author: rwatson Date: Mon Sep 3 14:26:43 2018 New Revision: 338443 URL: https://svnweb.freebsd.org/changeset/base/338443 Log: The kernel DTrace audit provider (dtaudit) relies on auditd(8) to load /etc/security/audit_event to provide a list of audit event-number <-> name mappings.

svn commit: r316450 - in head/sys: conf security/audit

2017-04-03 Thread Robert Watson
Author: rwatson Date: Mon Apr 3 10:15:58 2017 New Revision: 316450 URL: https://svnweb.freebsd.org/changeset/base/316450 Log: Break audit_bsm_klib.c into two files: one (audit_bsm_klib.c) retaining various utility functions used during BSM generation, and a second (audit_bsm_db.c) that

svn commit: r316339 - head/contrib/less

2017-03-31 Thread Robert Watson
Author: rwatson Date: Fri Mar 31 21:29:43 2017 New Revision: 316339 URL: https://svnweb.freebsd.org/changeset/base/316339 Log: Currently, less(1) uses K prototypes, which both fails to provide useful compiler-time type checking, and also causes problems for targets where multiple

svn commit: r316334 - head/sys/kern

2017-03-31 Thread Robert Watson
Author: rwatson Date: Fri Mar 31 14:17:14 2017 New Revision: 316334 URL: https://svnweb.freebsd.org/changeset/base/316334 Log: Audit arguments to posix_fallocate(2) and posix_fadvise(2) system calls. As posix_fadvise() does not lock the vnode argument, don't capture detailed vnode

svn commit: r316333 - head/sys/security/audit

2017-03-31 Thread Robert Watson
Author: rwatson Date: Fri Mar 31 14:13:13 2017 New Revision: 316333 URL: https://svnweb.freebsd.org/changeset/base/316333 Log: Correct macro names and signatures for !AUDIT versions of canonical path auditing. Obtained from:TrustedBSD Project MFC after:3 weeks Sponsored

svn commit: r316332 - in head/sys: kern security/audit

2017-03-31 Thread Robert Watson
Author: rwatson Date: Fri Mar 31 13:43:00 2017 New Revision: 316332 URL: https://svnweb.freebsd.org/changeset/base/316332 Log: Audit arguments to POSIX message queues, semaphores, and shared memory. This requires minor changes to the audit framework to allow capturing paths that are not

svn commit: r316308 - in head/sys: kern security/audit

2017-03-30 Thread Robert Watson
Author: rwatson Date: Thu Mar 30 22:26:15 2017 New Revision: 316308 URL: https://svnweb.freebsd.org/changeset/base/316308 Log: Audit arguments to System V IPC system calls implementing sempahores, message queues, and shared memory. Obtained from:TrustedBSD Project MFC after:

svn commit: r316307 - head/sys/kern

2017-03-30 Thread Robert Watson
+1,14 @@ /*- - * Copyright (c) 1999-2006 Robert N. M. Watson + * Copyright (c) 1999-2006, 2016-2017 Robert N. M. Watson * All rights reserved. * * This software was developed by Robert Watson for the TrustedBSD Project. * + * Portions of this software were developed by BAE Systems

svn commit: r316305 - head/sys/security/audit

2017-03-30 Thread Robert Watson
Author: rwatson Date: Thu Mar 30 21:39:03 2017 New Revision: 316305 URL: https://svnweb.freebsd.org/changeset/base/316305 Log: Various BSM generation improvements when auditing AUE_ACCEPT, AUE_PROCCTL, AUE_SENDFILE, AUE_ACL_*, and AUE_POSIX_FALLOCATE. Audit AUE_SHMUNLINK path in the path

svn commit: r316271 - head/sys/security/audit

2017-03-30 Thread Robert Watson
Author: rwatson Date: Thu Mar 30 12:35:56 2017 New Revision: 316271 URL: https://svnweb.freebsd.org/changeset/base/316271 Log: Don't ifdef KDTRACE_HOOKS struct, variable, and function prototype definitions for the DTrace audit provider, so that the dtaudit module can compile in the absence

Re: svn commit: r316182 - in head/sys: compat/freebsd32 kern sys

2017-03-30 Thread Robert Watson
On Thu, 30 Mar 2017, Konstantin Belousov wrote: Hook up new audit event identifiers for various non-Orange Book/CAPP system calls supported by OpenBSM 1.2-alpha5. Obtained from:TrustedBSD Project MFC after:3 weeks Sponsored by: DARPA, AFRL Modified:

svn commit: r316185 - in head/sys: kern security/audit

2017-03-29 Thread Robert Watson
Author: rwatson Date: Wed Mar 29 23:31:35 2017 New Revision: 316185 URL: https://svnweb.freebsd.org/changeset/base/316185 Log: When handling msgsys(2), semsys(2), and shmsys(2) multiplex system calls, map the 'which' argument into a suitable audit event identifier for the specific operation

svn commit: r316182 - in head/sys: compat/freebsd32 kern sys

2017-03-29 Thread Robert Watson
Author: rwatson Date: Wed Mar 29 22:33:56 2017 New Revision: 316182 URL: https://svnweb.freebsd.org/changeset/base/316182 Log: Hook up new audit event identifiers for various non-Orange Book/CAPP system calls supported by OpenBSM 1.2-alpha5. Obtained from:TrustedBSD Project MFC

svn commit: r316176 - in head/sys: conf modules/dtrace modules/dtrace/dtaudit security/audit

2017-03-29 Thread Robert Watson
Author: rwatson Date: Wed Mar 29 19:58:00 2017 New Revision: 316176 URL: https://svnweb.freebsd.org/changeset/base/316176 Log: Add an experimental DTrace audit provider, which allows users of DTrace to instrument security event auditing rather than relying on conventional BSM trail files or

svn commit: r316018 - head/sys/security/audit

2017-03-27 Thread Robert Watson
Author: rwatson Date: Mon Mar 27 10:38:53 2017 New Revision: 316018 URL: https://svnweb.freebsd.org/changeset/base/316018 Log: Introduce an audit event identifier -> audit event name mapping database in the kernel audit implementation, similar the exist class mapping database. This will be

svn commit: r316015 - head/sys/security/audit

2017-03-27 Thread Robert Watson
Author: rwatson Date: Mon Mar 27 08:29:17 2017 New Revision: 316015 URL: https://svnweb.freebsd.org/changeset/base/316015 Log: Extend comment describing path canonicalisation in audit. Sponsored by: DARPA, AFRL Obtained from:TrustedBSD Project MFC after:3 days Modified:

svn commit: r316006 - in head: contrib/openbsm contrib/openbsm/bin contrib/openbsm/bin/audit contrib/openbsm/bin/auditd contrib/openbsm/bin/auditdistd contrib/openbsm/bin/auditfilterd contrib/openb...

2017-03-26 Thread Robert Watson
Author: rwatson Date: Sun Mar 26 21:14:49 2017 New Revision: 316006 URL: https://svnweb.freebsd.org/changeset/base/316006 Log: Merge OpenBSM 1.2-alpha5 from vendor branch to FreeBSD -CURRENT: - Add a new "qsize" parameter in audit_control and the getacqsize(3) API to query it, allowing

Re: svn commit: r315948 - in head: bin/csh contrib/tcsh contrib/tcsh/config contrib/tcsh/nls contrib/tcsh/nls/C contrib/tcsh/nls/et contrib/tcsh/nls/finnish contrib/tcsh/nls/french contrib/tcsh/nls/ge

2017-03-26 Thread Robert Watson
On Sat, 25 Mar 2017, Chagin Dmitry wrote: Author: dchagin Date: Sat Mar 25 13:32:28 2017 New Revision: 315948 URL: https://svnweb.freebsd.org/changeset/base/315948 Log: Update to tcsh 6.20.00 Relnotes: yes don't think it matters, Should this be MFCed? I did not plan It may be

svn commit: r316004 - head/share/man/man9

2017-03-26 Thread Robert Watson
Author: rwatson Date: Sun Mar 26 20:24:27 2017 New Revision: 316004 URL: https://svnweb.freebsd.org/changeset/base/316004 Log: Slightly improve consistency of "fooint" vs "foo_int" in DPCPU(9) examples. MFC after:3 days Modified: head/share/man/man9/dpcpu.9 Modified:

svn commit: r316003 - head/share/man/man9

2017-03-26 Thread Robert Watson
Author: rwatson Date: Sun Mar 26 20:15:08 2017 New Revision: 316003 URL: https://svnweb.freebsd.org/changeset/base/316003 Log: Add a man page for the kernel's dynamic per-CPU memory allocator. MFC after: 3 days Added: head/share/man/man9/dpcpu.9 (contents, props changed) Modified:

svn commit: r315990 - in head: contrib/top usr.bin/top

2017-03-26 Thread Robert Watson
Author: rwatson Date: Sun Mar 26 17:22:44 2017 New Revision: 315990 URL: https://svnweb.freebsd.org/changeset/base/315990 Log: Provide proper contemporary function prototypes for many of the functions implemented in top(1), rather than relying on K prototypes, which can cause problems on

svn commit: r315987 - in head/libexec/bootpd: . tools/bootptest

2017-03-26 Thread Robert Watson
Author: rwatson Date: Sun Mar 26 14:37:12 2017 New Revision: 315987 URL: https://svnweb.freebsd.org/changeset/base/315987 Log: Emply contemporary function prototypes in bootpd, rather than relying on locally defined K prototypes in .c files; use appropriate casts for pointer types now that

svn commit: r315862 - head/lib/libcasper/libcasper

2017-03-23 Thread Robert Watson
Author: rwatson Date: Thu Mar 23 14:35:21 2017 New Revision: 315862 URL: https://svnweb.freebsd.org/changeset/base/315862 Log: In libcasper, prefer to send a function index or service name over the IPC channel to a zygote process, rather than sending a function pointer or service pointer.

svn commit: r312922 - head/sys/dev/altera/avgen

2017-01-28 Thread Robert Watson
Author: rwatson Date: Sat Jan 28 13:25:06 2017 New Revision: 312922 URL: https://svnweb.freebsd.org/changeset/base/312922 Log: Merge enhancements to the ALTERA Avalon bus generic device attachment driver to support exposing a GEOM device, which can be used to mount Avalon-attached ROMs,

svn commit: r312920 - head/sys/dev/altera/jtag_uart

2017-01-28 Thread Robert Watson
Author: rwatson Date: Sat Jan 28 12:43:19 2017 New Revision: 312920 URL: https://svnweb.freebsd.org/changeset/base/312920 Log: Merge robustness improvements for the ALTERA JTAG UART driver from CheriBSD, which attempt to work around an inherent race in the UART's control-register design in

svn commit: r312919 - head/tests/sys/aio

2017-01-28 Thread Robert Watson
Author: rwatson Date: Sat Jan 28 12:26:22 2017 New Revision: 312919 URL: https://svnweb.freebsd.org/changeset/base/312919 Log: Fix build of aio_test on MIPS, where the compiler warns about the local variable 'err' shadowing the global function err(3). Which it does. Sponsored by: DARPA,

svn commit: r312918 - head/sys/mips/conf

2017-01-28 Thread Robert Watson
Author: rwatson Date: Sat Jan 28 11:38:51 2017 New Revision: 312918 URL: https://svnweb.freebsd.org/changeset/base/312918 Log: As with GENERIC on other architectures, include COMPAT_FREEBSD10 and COMPAT_FREEBSD11 in the generic BERI kernel configuration template. MFC after:1 week

svn commit: r309678 - in head/sys: kern sys

2016-12-07 Thread Robert Watson
Author: rwatson Date: Wed Dec 7 16:12:27 2016 New Revision: 309678 URL: https://svnweb.freebsd.org/changeset/base/309678 Log: Regnerate system-call definitions following r309677 correcting a whitespace glitch in syscalls.master. Modified: head/sys/kern/init_sysent.c

svn commit: r309677 - head/sys/kern

2016-12-07 Thread Robert Watson
Author: rwatson Date: Wed Dec 7 16:11:55 2016 New Revision: 309677 URL: https://svnweb.freebsd.org/changeset/base/309677 Log: Replace spaces with tabs in definition of SCTP system calls, for consistency with the remainder of the syscalls.master file. This problem does not occur in the

svn commit: r309326 - head/usr.bin/login

2016-11-30 Thread Robert Watson
Author: rwatson Date: Wed Nov 30 14:02:36 2016 New Revision: 309326 URL: https://svnweb.freebsd.org/changeset/base/309326 Log: Clarify warning message when failing to configure audit on user login: when au_user_mask() fails, it's not a failure to set the audit mask, but to calculate the

svn commit: r308947 - in head/sys: kern security/audit

2016-11-21 Thread Robert Watson
Author: rwatson Date: Tue Nov 22 00:41:24 2016 New Revision: 308947 URL: https://svnweb.freebsd.org/changeset/base/308947 Log: Audit 'fd' and 'cmd' arguments to fcntl(2), and when generating BSM, always audit the file-descriptor number and vnode information for all fnctl(2) commands, not

svn commit: r304544 - in head/sys: kern security/audit

2016-08-20 Thread Robert Watson
Author: rwatson Date: Sat Aug 20 20:28:08 2016 New Revision: 304544 URL: https://svnweb.freebsd.org/changeset/base/304544 Log: Audit the accepted (or rejected) username argument to setlogin(2). (NB: This was likely a mismerge from XNU in audit support, where the text argument to

svn commit: r304537 - head/sys/kern

2016-08-20 Thread Robert Watson
Author: rwatson Date: Sat Aug 20 18:51:48 2016 New Revision: 304537 URL: https://svnweb.freebsd.org/changeset/base/304537 Log: Audit additional vnode information in the implementation of the ftruncate(2) system call. This was not required by the Common Criteria, which needed only open-time

Re: svn commit: r302577 - head/sys/dev/drm2

2016-07-13 Thread Robert Watson
On Mon, 11 Jul 2016, Garrett Cooper wrote: Add missing default case to capable(..) function definition By definition (enum __drm_capabilities), cases other than CAP_SYS_ADMIN aren't possible. Add in a KASSERT safety belt and return false in !INVARIANTS case if an invalid value is passed

svn commit: r302564 - head/sys/security/audit

2016-07-11 Thread Robert Watson
Author: rwatson Date: Mon Jul 11 13:06:17 2016 New Revision: 302564 URL: https://svnweb.freebsd.org/changeset/base/302564 Log: Add AUE_WAIT6 handling to the BSM conversion switch statement, reusing the BSM encoding used for AUE_WAIT4. MFC after:3 days Sponsored by: DARPA, AFRL

svn commit: r302526 - head/sys/kern

2016-07-10 Thread Robert Watson
Author: rwatson Date: Sun Jul 10 14:17:36 2016 New Revision: 302526 URL: https://svnweb.freebsd.org/changeset/base/302526 Log: In process-descriptor close(2) and fstat(2), audit target process information. pgkill(2) already audits target process ID. MFC after:3 days Sponsored by:

svn commit: r302525 - in head/sys: kern sys

2016-07-10 Thread Robert Watson
Author: rwatson Date: Sun Jul 10 13:42:33 2016 New Revision: 302525 URL: https://svnweb.freebsd.org/changeset/base/302525 Log: Do allow auditing of read(2) and write(2) system calls, by assigning those system calls audit event identifiers AUE_READ and AUE_WRITE. While auditing

svn commit: r302524 - head/sys/vm

2016-07-10 Thread Robert Watson
Author: rwatson Date: Sun Jul 10 11:49:10 2016 New Revision: 302524 URL: https://svnweb.freebsd.org/changeset/base/302524 Log: When mmap(2) is used with a vnode, capture vnode attributes in the audit trail. This was not required for Common Criteria auditing (which requires only that the

svn commit: r302519 - head/sys/kern

2016-07-10 Thread Robert Watson
Author: rwatson Date: Sun Jul 10 09:50:21 2016 New Revision: 302519 URL: https://svnweb.freebsd.org/changeset/base/302519 Log: Audit the file-descriptor number argument for openat(2). Remove a comment about the desirability of auditing the number, as it was in fact in the wrong place (in

svn commit: r302514 - in head/sys: kern vm

2016-07-10 Thread Robert Watson
Author: rwatson Date: Sun Jul 10 08:04:02 2016 New Revision: 302514 URL: https://svnweb.freebsd.org/changeset/base/302514 Log: Audit file-descriptor arguments to I/O system calls such as read(2), write(2), dup(2), and mmap(2). This auditing is not required by the Common Criteria (and hence

svn commit: r302345 - head/sys/kern

2016-07-05 Thread Robert Watson
Author: rwatson Date: Tue Jul 5 16:37:01 2016 New Revision: 302345 URL: https://svnweb.freebsd.org/changeset/base/302345 Log: Call audit hooks to capture vnode attributes for three file-descriptor method implementations: fstat(2), close(2), and poll(2). This change synchronises auditing

svn commit: r301867 - head/sys/security/audit

2016-06-13 Thread Robert Watson
Author: rwatson Date: Mon Jun 13 09:22:20 2016 New Revision: 301867 URL: https://svnweb.freebsd.org/changeset/base/301867 Log: Implement AUE_PREAD and AUE_PWRITE BSM conversion support, eliminating console warnings when pread(2) and pwrite(2) are used with full system-call auditing enabled.

svn commit: r300306 - head/sys/mips/include

2016-05-20 Thread Robert Watson
Author: rwatson Date: Fri May 20 15:34:03 2016 New Revision: 300306 URL: https://svnweb.freebsd.org/changeset/base/300306 Log: Garbage collect unused prototype for clockintr(). MFC after:3 days Modified: head/sys/mips/include/clock.h Modified: head/sys/mips/include/clock.h

svn commit: r298859 - in head/sys/mips: include mips

2016-04-30 Thread Robert Watson
Author: rwatson Date: Sat Apr 30 19:29:03 2016 New Revision: 298859 URL: https://svnweb.freebsd.org/changeset/base/298859 Log: When attempting to satisfy mmap() requests for superpage alignment on 64-bit MIPS, use superpage rather than physical-segment constants, or we may improperly fail

svn commit: r296806 - head/sys/netipsec

2016-03-13 Thread Robert Watson
Author: rwatson Date: Sun Mar 13 19:27:46 2016 New Revision: 296806 URL: https://svnweb.freebsd.org/changeset/base/296806 Log: Put IPSec's anouncement of its successful intialisation under bootverbose: now that it's a default kernel option, we don't really need to tell the world about it on

svn commit: r288662 - in head/sys/arm: arm include

2015-10-04 Thread Robert Watson
Author: rwatson Date: Sun Oct 4 09:39:40 2015 New Revision: 288662 URL: https://svnweb.freebsd.org/changeset/base/288662 Log: Add missing stack unwind information to several assembly functions on ARMv6/7: - Define _SAVE() macro to allow unwind data to be conditionally defined for

svn commit: r281983 - head/sys/cddl/dev/profile

2015-04-25 Thread Robert Watson
Author: rwatson Date: Sat Apr 25 15:43:12 2015 New Revision: 281983 URL: https://svnweb.freebsd.org/changeset/base/281983 Log: Adjust PROF_ARTIFICIAL_FRAMES in the DTrace profile provider on ARM to skip 10, rather than 9, frames. This appears to work quite well in practice on the

Re: svn commit: r280971 - in head: contrib/ipfilter/tools share/man/man4 sys/contrib/ipfilter/netinet sys/netinet sys/netipsec sys/netpfil/pf

2015-04-03 Thread Robert Watson
On Fri, 3 Apr 2015, Hans Petter Selasky wrote: Will you mind if I rephrase that paragraph in the inet.4 manual page from: This closes a minor information leak which allows remote observers to determine the rate of packet generation on the machine by watching the counter. Into: This

Re: svn commit: r280971 - in head: contrib/ipfilter/tools share/man/man4 sys/contrib/ipfilter/netinet sys/netinet sys/netipsec sys/netpfil/pf

2015-04-03 Thread Robert Watson
On Fri, 3 Apr 2015, Emeric POUPON wrote: A good ip id random would be certainly better. But the current implementation is far from being optimized: a lock is being held inside arc4rand, and another one for protecting the ip_id internals. We already have contention problems with the IV

Re: svn commit: r280971 - in head: contrib/ipfilter/tools share/man/man4 sys/contrib/ipfilter/netinet sys/netinet sys/netipsec sys/netpfil/pf

2015-04-02 Thread Robert Watson
On Thu, 2 Apr 2015, Mateusz Guzik wrote: If you carefully read the thread I referred to, you would notice that on many arches, save amd64 and i386, all systems stats are prone to mangling the stats due to migration within PCPU_INC. Look here: grep '^#define PCPU_ADD' sys/*/include/pcpu.h

Re: svn commit: r280971 - in head: contrib/ipfilter/tools share/man/man4 sys/contrib/ipfilter/netinet sys/netinet sys/netipsec sys/netpfil/pf

2015-04-02 Thread Robert Watson
On Thu, 2 Apr 2015, Hans Petter Selasky wrote: Does somebody here know what happens in these two cases: If we are transmitting using TSO, will the network adapter increment the IP ID field somehow? What happens if an outgoing IP packet resulting from a TSO packet get fragmented by a router?

svn commit: r280148 - head/sys/sys

2015-03-16 Thread Robert Watson
Author: rwatson Date: Mon Mar 16 17:42:53 2015 New Revision: 280148 URL: https://svnweb.freebsd.org/changeset/base/280148 Log: Introduce a cap_ioctl_t used for the 'cmds' arguments to cap_ioctls_limit() and cap_ioctls_get(). On FreeBSD, these are 'unsigned long', but on Linux, ioctl(2)

svn commit: r280038 - head/sys/cddl/dev/dtrace/arm

2015-03-15 Thread Robert Watson
Author: rwatson Date: Sun Mar 15 15:17:34 2015 New Revision: 280038 URL: https://svnweb.freebsd.org/changeset/base/280038 Log: On ARM, unlike some other architectures, saved $pc values from in-kernel traps do appear in the regular call stack, rather than only in a special trap frame, so we

svn commit: r280035 - head/sys/cddl/dev/profile

2015-03-15 Thread Robert Watson
Author: rwatson Date: Sun Mar 15 14:12:40 2015 New Revision: 280035 URL: https://svnweb.freebsd.org/changeset/base/280035 Log: Replace the completely arbitrary '3' with '9' for the number of frames to skip using the DTrace 'profile' provider on ARM. This causes stack traces to skip various

svn commit: r280039 - head/sys/cddl/dev/fbt/arm

2015-03-15 Thread Robert Watson
Author: rwatson Date: Sun Mar 15 15:19:02 2015 New Revision: 280039 URL: https://svnweb.freebsd.org/changeset/base/280039 Log: Now that DTrace stack traces handle exception frames better, skip fewer stack frames for FBT 'entry' probes on ARM. MFC after:3 days Sponsored by: DARPA,

svn commit: r279626 - head/sys/cddl/dev/fbt/arm

2015-03-04 Thread Robert Watson
Author: rwatson Date: Thu Mar 5 07:40:41 2015 New Revision: 279626 URL: https://svnweb.freebsd.org/changeset/base/279626 Log: Don't all DTrace's FBT on ARM to instrument undefinedinstruction(), as this would lead to DTrace reentrance. Sponsored by: DARPA, AFRL Modified:

Re: svn commit: r277652 - in head/usr.sbin/pw: . tests

2015-01-27 Thread Robert Watson
On Sun, 25 Jan 2015, Bruce Evans wrote: Negative ids have historical abuses in places like mountd. mountd still hard-codes -2 and -2 for the default uid and gid of an unprivileged user. It at least casts these values to uid_t and gid_t before using them. This gives the ids the non-random

svn commit: r277203 - in head/sys: kern sys

2015-01-14 Thread Robert Watson
Author: rwatson Date: Wed Jan 14 23:44:00 2015 New Revision: 277203 URL: https://svnweb.freebsd.org/changeset/base/277203 Log: In order to support ongoing work to implement variable-size mbufs, and more generally make it easier to extend 'struct mbuf in the future', make a number of changes

svn commit: r276910 - in head/sys: kern sys

2015-01-10 Thread Robert Watson
Author: rwatson Date: Sat Jan 10 10:41:23 2015 New Revision: 276910 URL: https://svnweb.freebsd.org/changeset/base/276910 Log: Garbage collect m_copymdata(), an mbuf utility routine introduced in FreeBSD 7 that has not been used since. It contains a number of unresolved bugs including an

svn commit: r276888 - head/sys/sys

2015-01-09 Thread Robert Watson
Author: rwatson Date: Fri Jan 9 15:21:53 2015 New Revision: 276888 URL: https://svnweb.freebsd.org/changeset/base/276888 Log: Uninline M_SIZE() in m_align() to reduce direct use of MLEN and MHLEN. Differential Revision:https://reviews.freebsd.org/D1471 Reviewed by: glebius, bz,

svn commit: r276884 - head/sys/kern

2015-01-09 Thread Robert Watson
Author: rwatson Date: Fri Jan 9 12:08:51 2015 New Revision: 276884 URL: https://svnweb.freebsd.org/changeset/base/276884 Log: Remove a 'This is dumb' comment that has been incorrect for at least a decade: m_pulldown() is willing to consider ordinary mbufs writable. Retain another, related,

svn commit: r276818 - head/sys/kern

2015-01-08 Thread Robert Watson
Author: rwatson Date: Thu Jan 8 11:16:21 2015 New Revision: 276818 URL: https://svnweb.freebsd.org/changeset/base/276818 Log: Replace hand-crafted versions of M_SIZE() and M_START() in uipc_mbuf.c with calls to the centralised macros, reducing direct use of MLEN and MHLEN.

svn commit: r276781 - head/sys/sys

2015-01-07 Thread Robert Watson
Author: rwatson Date: Wed Jan 7 18:24:42 2015 New Revision: 276781 URL: https://svnweb.freebsd.org/changeset/base/276781 Log: Bump __FreeBSD_version to 1100053 reflecting the addition of a return value to MCLGET(). Suggested by: jmg Sponsored by: EMC / Isilon Storage Division

Re: svn commit: r276750 - in head: share/man/man9 sys/contrib/ipfilter/netinet sys/dev/an sys/dev/bge sys/dev/ce sys/dev/cm sys/dev/cp sys/dev/cs sys/dev/ctau sys/dev/ed sys/dev/ex sys/dev/fe sys/dev/

2015-01-07 Thread Robert Watson
On Wed, 7 Jan 2015, John-Mark Gurney wrote: Log: In order to reduce use of M_EXT outside of the mbuf allocator and socket-buffer implementations, introduce a return value for MCLGET() (and m_cljget() that underlies it) to allow the caller to avoid testing M_EXT itself. Update all

svn commit: r276780 - in head/sys: fs/nfs fs/nfsserver nfsserver

2015-01-07 Thread Robert Watson
Author: rwatson Date: Wed Jan 7 17:22:56 2015 New Revision: 276780 URL: https://svnweb.freebsd.org/changeset/base/276780 Log: Use M_SIZE() instead of hand-crafted (and mostly correct) NFSMSIZ() macro in the NFS server; garbage collect now-unused NFSMSIZ() and M_HASCL() macros. Also

svn commit: r276750 - in head: share/man/man9 sys/contrib/ipfilter/netinet sys/dev/an sys/dev/bge sys/dev/ce sys/dev/cm sys/dev/cp sys/dev/cs sys/dev/ctau sys/dev/ed sys/dev/ex sys/dev/fe sys/dev/h...

2015-01-06 Thread Robert Watson
Author: rwatson Date: Tue Jan 6 12:59:37 2015 New Revision: 276750 URL: https://svnweb.freebsd.org/changeset/base/276750 Log: In order to reduce use of M_EXT outside of the mbuf allocator and socket-buffer implementations, introduce a return value for MCLGET() (and m_cljget() that

svn commit: r276752 - head/sys/netinet

2015-01-06 Thread Robert Watson
Author: rwatson Date: Tue Jan 6 14:32:28 2015 New Revision: 276752 URL: https://svnweb.freebsd.org/changeset/base/276752 Log: Use M_WRITABLE() and M_LEADINGSPACE() rather than checking M_EXT and doing hand-crafted length calculations in the IP options code. Reviewed by: bz Sponsored

svn commit: r276692 - in head/sys: dev/en dev/fatm dev/iscsi_initiator dev/patm kern net80211 netinet netinet6 sys

2015-01-05 Thread Robert Watson
Author: rwatson Date: Mon Jan 5 09:58:32 2015 New Revision: 276692 URL: https://svnweb.freebsd.org/changeset/base/276692 Log: To ease changes to underlying mbuf structure and the mbuf allocator, reduce the knowledge of mbuf layout, and in particular constants such as M_EXT, MLEN, MHLEN,

svn commit: r276563 - head/sys/dev/cxgb/ulp/tom

2015-01-02 Thread Robert Watson
Author: rwatson Date: Fri Jan 2 19:06:27 2015 New Revision: 276563 URL: https://svnweb.freebsd.org/changeset/base/276563 Log: In mbuf_to_synq_entry(), use M_START() and M_SIZE() to calculate an offset into mbuf storage, to reduce knowledge about mbuf/cluster layout in the cxgb device

svn commit: r273028 - in head/sys/dev: msk nfe sk

2014-10-13 Thread Robert Watson
Author: rwatson Date: Mon Oct 13 06:51:40 2014 New Revision: 273028 URL: https://svnweb.freebsd.org/changeset/base/273028 Log: Eliminate unnecessary checking for M_EXT on mbufs returned by m_getjcl(). Reviewed by: bz, glebius, yongari MFC after:3 days Sponsored by: EMC / Isilon

svn commit: r272984 - in head/sys: netinet netinet6

2014-10-12 Thread Robert Watson
Author: rwatson Date: Sun Oct 12 15:49:52 2014 New Revision: 272984 URL: https://svnweb.freebsd.org/changeset/base/272984 Log: When deciding whether to call m_pullup() even though there is adequate data in an mbuf, use M_WRITABLE() instead of a direct test of M_EXT; the latter both

Re: svn commit: r271504 - in head/sys: dev/oce dev/vmware/vmxnet3 dev/xen/netfront net netinet ofed/drivers/net/mlx4

2014-09-13 Thread Robert Watson
On Sat, 13 Sep 2014, Rick Macklem wrote: Well, there are spare fields (if_ispare[4]) in struct ifnet that I believe can be used for new u_ints when MFC'ng a patch that adds fields to struct ifnet in head. (If I have this wrong, someone please correct me.) In my notes from a few years ago on

svn commit: r271420 - in head/sys: dev/cxgbe/common sys

2014-09-11 Thread Robert Watson
Author: rwatson Date: Thu Sep 11 07:16:15 2014 New Revision: 271420 URL: http://svnweb.freebsd.org/changeset/base/271420 Log: Add new a M_START() mbuf macro that returns a pointer to the start of an mbuf's storage (internal or external). Add a new M_SIZE() mbuf macro that returns the

Re: svn commit: r271418 - head/sbin/dhclient

2014-09-11 Thread Robert Watson
A bit behind on commits, but: does this mean that an older userspace dhclient will no longer work with a newer kernel? Robert On Thu, 11 Sep 2014, Gleb Smirnoff wrote: Author: glebius Date: Thu Sep 11 05:48:39 2014 New Revision: 271418 URL: http://svnweb.freebsd.org/changeset/base/271418

svn commit: r271373 - in head/sys/dev: ce cp ctau cx

2014-09-10 Thread Robert Watson
Author: rwatson Date: Wed Sep 10 09:57:32 2014 New Revision: 271373 URL: http://svnweb.freebsd.org/changeset/base/271373 Log: Replace local copy-and-paste implementations of printmbuf() in several device drivers with calls to the centralised m_print() implementation. While the formatting

svn commit: r271174 - head/sys/sys

2014-09-05 Thread Robert Watson
Author: rwatson Date: Fri Sep 5 16:46:28 2014 New Revision: 271174 URL: http://svnweb.freebsd.org/changeset/base/271174 Log: Clarify a diagnostic printf() in the mbuf code: M_EXT doesn't necessarily imply a cluster is attached; it could also refer to some other sort of external storage

svn commit: r271175 - head/sys/fs/nfs

2014-09-05 Thread Robert Watson
Author: rwatson Date: Fri Sep 5 17:05:51 2014 New Revision: 271175 URL: http://svnweb.freebsd.org/changeset/base/271175 Log: Garbage collect NFSMINOFF() from the NFS stack; this unused macro replicates mbuf-initialisation logic that is best left to centralised mbuf utility code rather than

svn commit: r268925 - head/usr.bin/procstat

2014-07-20 Thread Robert Watson
Author: rwatson Date: Sun Jul 20 20:11:34 2014 New Revision: 268925 URL: http://svnweb.freebsd.org/changeset/base/268925 Log: In procstat -v (VM), spell out 'FL' to 'FLAG' since there are two extra columns available anyway. Also left align as we tend to do for flags fields, although you

svn commit: r268879 - head/usr.bin/procstat

2014-07-19 Thread Robert Watson
Author: rwatson Date: Sat Jul 19 15:09:53 2014 New Revision: 268879 URL: http://svnweb.freebsd.org/changeset/base/268879 Log: Better align headers and data for 'procstat -f' with and without '-C'. MFC after:3 days Sponsored by: DARPA, AFRL Modified:

svn commit: r265432 - head/sys/sys

2014-05-06 Thread Robert Watson
Author: rwatson Date: Tue May 6 10:53:51 2014 New Revision: 265432 URL: http://svnweb.freebsd.org/changeset/base/265432 Log: Spell raccdt in a more conventional way in a comment. MFC after:3 days Modified: head/sys/sys/kernel.h Modified: head/sys/sys/kernel.h

svn commit: r265396 - head/sys/sys

2014-05-05 Thread Robert Watson
Author: rwatson Date: Mon May 5 21:46:10 2014 New Revision: 265396 URL: http://svnweb.freebsd.org/changeset/base/265396 Log: Garbage collect two more unused sysinit subsystems: SI_SUB_KVM_RSRC and SI_SUB_CLISTS. MFC after:3 days Modified: head/sys/sys/kernel.h Modified:

svn commit: r265216 - in head/sys: kern sys

2014-05-02 Thread Robert Watson
Author: rwatson Date: Fri May 2 07:57:40 2014 New Revision: 265216 URL: http://svnweb.freebsd.org/changeset/base/265216 Log: Garbage collect mtxpool_lockbuilder, the mutex pool historically used for lockmgr and sx interlocks, but unused since optimised versions of those sleep locks were

svn commit: r264625 - head/sys/mips/mips

2014-04-17 Thread Robert Watson
Author: rwatson Date: Thu Apr 17 20:42:03 2014 New Revision: 264625 URL: http://svnweb.freebsd.org/changeset/base/264625 Log: Fix typo and case inconsistency in MIPS CP0 register names. MFC after:3 days Modified: head/sys/mips/mips/pm_machdep.c Modified:

svn commit: r263842 - in head/lib/libc: capability gen sys

2014-03-27 Thread Robert Watson
Author: rwatson Date: Thu Mar 27 21:43:00 2014 New Revision: 263842 URL: http://svnweb.freebsd.org/changeset/base/263842 Log: Update system man pages for s/capability.h/capsicum.h/. MFC after:3 weeks Modified: head/lib/libc/capability/cap_rights_init.3

svn commit: r263266 - head/usr.sbin/jail

2014-03-17 Thread Robert Watson
Author: rwatson Date: Mon Mar 17 14:19:42 2014 New Revision: 263266 URL: http://svnweb.freebsd.org/changeset/base/263266 Log: Line-wrapping tweak: make the sample jail command line fit in 80 characters. MFC after:3 days Modified: head/usr.sbin/jail/jail.8 Modified:

Re: svn commit: r263215 - head/sys/crypto/sha2

2014-03-16 Thread Robert Watson
On Sun, 16 Mar 2014, John-Mark Gurney wrote: Log: copy these files from lib/libmd in preperation for moving these files into the kernel... I was sure that there was a sha256 implementation in the kernel already, and indeed there is -- in the ZFS code. Having it in the crypto tree makes

Re: svn commit: r263215 - head/sys/crypto/sha2

2014-03-16 Thread Robert Watson
On Sun, 16 Mar 2014, Robert Watson wrote: copy these files from lib/libmd in preperation for moving these files into the kernel... I was sure that there was a sha256 implementation in the kernel already, and indeed there is -- in the ZFS code. Having it in the crypto tree makes (much

svn commit: r263232 - head/sys/sys

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 10:49:16 2014 New Revision: 263232 URL: http://svnweb.freebsd.org/changeset/base/263232 Log: Rename capability.h to capsicum.h: the original name conflicts with the draft POSIX.1e capability.h used on some systems (e.g., Linux). On FreeBSD, leave a wrapper

svn commit: r263233 - in head/sys: amd64/amd64 amd64/linux32 arm/arm cam/ctl cddl/compat/opensolaris/sys compat/freebsd32 compat/linux compat/svr4 dev/aac dev/aacraid dev/amr dev/filemon dev/hwpmc ...

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 10:55:57 2014 New Revision: 263233 URL: http://svnweb.freebsd.org/changeset/base/263233 Log: Update kernel inclusions of capability.h to use capsicum.h instead; some further refinement is required as some device drivers intended to be portable over FreeBSD

svn commit: r263234 - in head: contrib/tcpdump crypto/openssh lib/libc/gen lib/libcasper lib/libprocstat sbin/casperd sbin/dhclient sbin/hastd sbin/ping tools/regression/capsicum/libcapsicum tools/...

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 11:04:44 2014 New Revision: 263234 URL: http://svnweb.freebsd.org/changeset/base/263234 Log: Update most userspace consumers of capability.h to use capsicum.h instead. auditdistd is not updated as I will make the change upstream and then do a vendor

svn commit: r263235 - head/sys/sys

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 11:06:05 2014 New Revision: 263235 URL: http://svnweb.freebsd.org/changeset/base/263235 Log: Bump __FreeBSD_version to reflect capability.h - capsicum.h change. MFC after:3 weeks Modified: head/sys/sys/param.h Modified: head/sys/sys/param.h

svn commit: r263252 - head/sys/sys

2014-03-16 Thread Robert Watson
Author: rwatson Date: Sun Mar 16 21:05:00 2014 New Revision: 263252 URL: http://svnweb.freebsd.org/changeset/base/263252 Log: Fix a comment in capability.h: it got renamed to capsicum.h, not capability.h. MFC after:3 weeks Spotted by: alc, mcdouga9 at egr.msu.edu, thompsa

svn commit: r263198 - in head/sys: amd64/conf conf net netinet netinet6 sys

2014-03-14 Thread Robert Watson
Author: rwatson Date: Sat Mar 15 00:57:50 2014 New Revision: 263198 URL: http://svnweb.freebsd.org/changeset/base/263198 Log: Several years after initial development, merge prototype support for linking NIC Receive Side Scaling (RSS) to the network stack's connection-group implementation.

svn commit: r263200 - head/sys/amd64/conf

2014-03-14 Thread Robert Watson
Author: rwatson Date: Sat Mar 15 00:59:23 2014 New Revision: 263200 URL: http://svnweb.freebsd.org/changeset/base/263200 Log: Revert a small portion of r263198 left over from local testing: don't enable PCB groups and RSS by default [yet]. Modified: head/sys/amd64/conf/GENERIC Modified:

Re: svn commit: r262882 - head/tools/tools/net80211/wlanstats

2014-03-07 Thread Robert Watson
On Fri, 7 Mar 2014, Bruce Evans wrote: Log: wlanstats: add help - add a help (-h) flag - move usage into itsown function it looks like the only change now is that usage info always go to stdout, and exit code differs. i don't think it should be mfced. It also removes the double

svn commit: r262690 - head/lib/libprocstat

2014-03-02 Thread Robert Watson
Author: rwatson Date: Sun Mar 2 13:26:08 2014 New Revision: 262690 URL: http://svnweb.freebsd.org/changeset/base/262690 Log: When querying a process's umask via sysctl in libprocstat(), don't print a warning if EPERM is returned as this is an expected failure mode rather than error --

  1   2   3   4   >