Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
184,197 Commits 606 Branches 0 Tags 3.1 GiB
445e8226bb
Commit Graph

184197 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
tsutsui
445e8226bb Put workaround fix for LOCKDEBUG panic mentioned in PR kern/41078: 
Don't try to load a driver module if the driver is already exist but just
 not attached. [bc]dev_open() could return ENXIO even if the driver exists.

XXX: Maybe this should be handled by helper functions for
XXX: module_autoload() calls on demand.
 2009-10-04 06:23:58 +00:00
elad
fa69dc186a Install floppies (haha) don't get built with ktrace/ptrace, so they don't 
include kern/sys_process.c. Move proc_uidmatch() to kern/kern_proc.c which
always gets built instead.

Pointed out by Kurt Schreiner on current-users@:

    http://mail-index.netbsd.org/current-users/2009/10/03/msg010745.html
 2009-10-04 03:15:08 +00:00
christos
875c2ae09f mdnsd home should not be /var/www! 2009-10-04 01:40:53 +00:00
christos
85ddadbfdc Don't just look only at the first element in the deadqueue to find lwp's 
to reuse, because if we lose the race with the kernel we are never going
to reuse any elements. Look in the whole list instead.
XXX: should be pulled up to 5.x
 2009-10-03 23:49:50 +00:00
christos
c9bb67bb7b Need proc_uidmatch 2009-10-03 22:55:48 +00:00
elad
b2f3768346 - Move sched_listener and co. from kern_synch.c to sys_sched.c, where it 
really belongs (suggested by rmind@),

- Rename sched_init() to synch_init(), and introduce a new sched_init()
  in sys_sched.c where we (a) initialize the sysctl node (no more
  link-set) and (b) listen on the process scope with sched_listener.

Reviewed by and okay rmind@.
 2009-10-03 22:32:56 +00:00
phx
c9394f466a SystemV-R4 ABI for M68k returns pointers in %a0, so we have to make sure 
that CERROR returns -1 in %a0 in addition to %d0 and %d1, to make functions
like mmap(2), mremap(2), shmat(2) or sbrk(2) return -1 in case of an error.
A side effect of this bug was a segfault caused by jemalloc, when mmap()
failed.
 2009-10-03 22:28:33 +00:00
elad
458410e7b5 Oops, forgot to make sched_listener static. Pointed out by rmind@, thansk! 2009-10-03 21:21:56 +00:00
elad
54d08ac134 Update a comment. No functional change. 2009-10-03 21:03:55 +00:00
jmcneill
74436af5d8 add dummy opt_via_c7temp.h, spotted by Andreas Gustafsson. 2009-10-03 20:56:39 +00:00
elad
a39251ecc2 Introduce time_wraps() to check if setting the time will wrap it (or 
close to it). Useful for secmodels.

Replace open-coded form with it in secmodel code (securelevel, keylock).

Note: I need to find a way to make secmodel_keylock.c ~<100 lines.
 2009-10-03 20:48:42 +00:00
pooka
a611f250f5 Report the root hub as self-powered. Works better when attaching 
power-hungry devices.
 2009-10-03 20:46:49 +00:00
elad
7f720ad562 KAUTH_GENERIC_CANSEE -> KAUTH_REQ_NETWORK_SOCKET_CANSEE. 
Not quite the same semantics but it's okay. Once our sockets have
credentials (and they will) it's all the same.
 2009-10-03 20:24:39 +00:00
apb
c8cd35993a Add an additional check for whether to rebuild make. This fixes a problem 
I saw where building first without and then with OBJMACHINE confused
build.sh into not building a new nbmake in the new TOOLDIR.
 2009-10-03 19:19:59 +00:00
pooka
8d655ed84b probe and attach ugen0 through ugen3 2009-10-03 19:07:33 +00:00
pooka
cbdc6e568f pass unit number in mainbus attach args 2009-10-03 19:06:35 +00:00
christos
7770393bf8 add type attributes in a few more places. 2009-10-03 17:09:18 +00:00
jmcneill
92ddd35b74 from Jukka Ruohonen: 
- Remove redundant assertions.
 - Properly check for NULL pointers.
 - No real need to keep track whether the internal event handler is installed.
 - Add a missing function to pass possible extra information associated with
   an event. Mentioned in the specification.
 2009-10-03 15:49:21 +00:00
jmcneill
d0d1a0e6c3 Enable viapcib 2009-10-03 13:37:27 +00:00
zafer
efcbcb0cf3 remove trailing whitespace. (hi wiz!) 2009-10-03 12:45:15 +00:00
martin
b7d9979e0d When creating /etc/fstab: 
for the first swap partition use type sw,dp instead of sw, so dump device
gets configured correctly if swap is not on the second partition.
Fixes PR install/42148.
 2009-10-03 12:00:00 +00:00
wiz
0fe31f2e87 Drop trailing whitespace. 2009-10-03 07:37:01 +00:00
elad
5b3a96a24d Move KAUTH_NETWORK_BIND::KAUTH_REQ_NETWORK_BIND_PORT policy back to the 
subsystem (or close to it).

Note: Revisit KAUTH_REQ_NETWORK_BIND_PRIVPORT.
 2009-10-03 03:59:39 +00:00
elad
82ce55ed44 Move policies for KAUTH_PROCESS_{CANSEE,CORENAME,STOPFLAG,FORK} back to 
the subsystem.

Note: Consider killing the signal listener and sticking
      KAUTH_PROCESS_SIGNAL here as well.
 2009-10-03 03:38:31 +00:00
elad
e62043d705 One less include. 2009-10-03 03:02:55 +00:00
elad
50c13fc074 Make modstat output look pretty again. 2009-10-03 02:27:43 +00:00
elad
2bf6c7c405 We only care about KAUTH_NETWORK_ROUTE. 2009-10-03 02:22:22 +00:00
elad
eab999856c Make this file a little bit smaller by collapsing cases. 2009-10-03 02:06:11 +00:00
elad
0dd621a02d Move clockctl policy exception back to the subsystem. 2009-10-03 02:01:12 +00:00
elad
0a0bbb40a7 secmodel_bsd44_curtain -> secmodel_suser_curtain (static). 2009-10-03 01:52:14 +00:00
elad
cee5cd7dd4 Move default network interface policy back to the subsystem. 2009-10-03 01:46:39 +00:00
elad
111de3833c Finish moving socket policy to the subsystem. 2009-10-03 01:41:39 +00:00
christos
3da8ec1b81 accept struct { ... } __packed name; 2009-10-03 01:35:20 +00:00
elad
452ced03bd Move sched policy back to the subsystem. 2009-10-03 01:30:25 +00:00
elad
6991fd9ea2 Move firewall/NAT policy back to respective subsystems (pf, ipf). 
Note: the ipf code contains a lot of ifdefs, some of them for NetBSD
versions that are no longer maintained. It won't make the code more
readable, but we should consider removing them.
 2009-10-03 00:37:01 +00:00
elad
212f5fa214 Move kevent policy back to the subsystem. 2009-10-03 00:14:07 +00:00
elad
abc7a4290b Put module loading policy back in the subsystem. 
Revisit: consider moving kauth_init() above module_init() in main().
 2009-10-03 00:06:37 +00:00
tsarna
3c8b3fccbd Make signals match what OS X and the manpage say. Implement toggles for 
debug and packet trace logging.

Make this conditional on HAVE_SIGINFO. Presumably lack of SIGINFO as a
standard posix feature is why they went with different signals here in
the first place, but since we have it, let's use it.
 2009-10-03 00:03:05 +00:00
elad
1f98cab201 Put the tty opening policy back in the subsystem. 
Remove include we don't need from the secmodel code.
 2009-10-02 23:58:53 +00:00
elad
510083464f Move some of the socket policy back to the subsystem. 
Remove include we don't need in the secmodel code.
 2009-10-02 23:50:16 +00:00
elad
8751f894d8 Put signal delivery policy back in the subsystem. 2009-10-02 23:24:15 +00:00
elad
c2ba1b2a75 Remove includes we don't need. 2009-10-02 23:18:12 +00:00
elad
9f0d81cf10 Move routing socket security policy back to the subsystem. 2009-10-02 23:16:21 +00:00
elad
198c6aa6f5 - Squeeze function declarations where possible, 
- KAUTH_RESULT_DEFER is the default (set at the beginning of each listener)
  and as such does not need to be set explicitly in the switches.
 2009-10-02 23:06:33 +00:00
elad
51f0d6a0eb Put procfs policy back in the subsystem. 2009-10-02 23:00:02 +00:00
elad
09f3ac9e2f Stick nice policy in its own subsystem and call the listener "resource" 
rather than "rlimit"...
 2009-10-02 22:46:18 +00:00
elad
bcc5014bd0 Move rlimit policy back to the subsystem. 
For this we needed proc_uidmatch() exposed, which makes a lot of sense,
so put it back in sys_process.c for use in other places as well.
 2009-10-02 22:38:45 +00:00
elad
2ae3a70827 Move ptrace's security policy back to the subsystem itself. 
Add a ptrace_init() so we have a place to register the listener; called
next to ktrinit().
 2009-10-02 22:18:56 +00:00
elad
9a472060de Let the ipkdb subsystem allow operations related to it rather than wrongly 
doing so in the suser secmodel.
 2009-10-02 22:05:52 +00:00
elad
40cc528a28 Move psets security policy back to the subsystem and keep suser logic only 
in the suser secmodel code.
 2009-10-02 21:56:28 +00:00