Commit Graph

2275 Commits

Author SHA1 Message Date
rmind
f1f4283156 Replace pcq(9) with the implementation from ad@ and minor changes by me.
PR/40516, PR/45631.
2012-01-22 02:55:47 +00:00
cegger
a02b2c29fa fix secmodel implementation of CPU_UCODE.
ok wiz@ for the manpages
ok elad@
2012-01-17 10:47:26 +00:00
wiz
7af0bef7e5 Use more markup. Increase table width since longest string changed. 2012-01-13 23:12:32 +00:00
wiz
c18fbdcf42 New sentence, new line. Use more markup. Bump date for previous. 2012-01-13 23:09:51 +00:00
macallan
be47469bba document some rasops_info flags that have been added recently ( and not so
recently )
2012-01-13 16:50:28 +00:00
macallan
19ea84bf71 document recent changes 2012-01-13 16:06:20 +00:00
wiz
d6829e5b30 Bump date for previous. Move RCS Id to top of file. 2012-01-02 18:07:21 +00:00
rkujawa
5ec5041c48 Correct the include path. 2012-01-02 15:41:51 +00:00
rmind
32d19c916b Amend previous. 2011-12-23 20:53:31 +00:00
rmind
40947a78e4 Sync with reality a little. 2011-12-23 20:51:50 +00:00
wiz
707b092c0c New sentence, new line. Fix some markup. Bump date for previous. 2011-12-17 21:25:12 +00:00
wiz
1a45da71c8 Use more markup. Bump date for previous. 2011-12-17 21:24:40 +00:00
tls
6e1dd068e9 Separate /dev/random pseudodevice implemenation from kernel entropy pool
implementation.  Rewrite pseudodevice code to use cprng_strong(9).

The new pseudodevice is cloning, so each caller gets bits from a stream
generated with its own key.  Users of /dev/urandom get their generators
keyed on a "best effort" basis -- the kernel will rekey generators
whenever the entropy pool hits the high water mark -- while users of
/dev/random get their generators rekeyed every time key-length bits
are output.

The underlying cprng_strong API can use AES-256 or AES-128, but we use
AES-128 because of concerns about related-key attacks on AES-256.  This
improves performance (and reduces entropy pool depletion) significantly
for users of /dev/urandom but does cause users of /dev/random to rekey
twice as often.

Also fixes various bugs (including some missing locking and a reseed-counter
overflow in the CTR_DRBG code) found while testing this.

For long reads, this generator is approximately 20 times as fast as the
old generator (dd with bs=64K yields 53MB/sec on 2Ghz Core2 instead of
2.5MB/sec) and also uses a separate mutex per instance so concurrency
is greatly improved.  For reads of typical key sizes for modern
cryptosystems (16-32 bytes) performance is about the same as the old
code: a little better for 32 bytes, a little worse for 16 bytes.
2011-12-17 20:05:38 +00:00
njoly
2291fd1fba Kill extra El macro. 2011-12-09 10:58:51 +00:00
jym
0d4c568bb2 KAUTH_GENERIC_CANSEE is no more. 2011-12-04 23:59:25 +00:00
jym
bdb161bba3 GETPARAMS => GETPARAM
SETPARAMS => SETPARAM
2011-12-04 21:52:37 +00:00
jym
f3effc5ec2 Improvements in secmodel(9). Document secmodel_register(9), _deregister(9)
and _eval(9).

Add secmodel_extensions(9), and indicate the new sysctl(7) to let
ordinary users control the CPU affinity (user_set_cpu_affinity).
2011-12-04 21:08:37 +00:00
jym
d96481c6de - add the bool type for IMMEDIATE flag.
- minor tweak to the handler example: it leaks 't' (on stack)
  when passed to sysctl_lookup(9), as it copyout its content via
  sysctl_data. That would not be the case if CTLFLAG_IMMEDIATE flag
  was set for this node but the example does not preclude that.
2011-12-04 18:34:20 +00:00
tls
7db676852a Add (links for) missing "cross-references" from cprng(9). Some of the
functions replaced by cprng were never documented at all.
2011-11-29 03:40:41 +00:00
wiz
c9317429b9 Spelling. 2011-11-28 23:29:45 +00:00
wiz
b85c6e9d1b Whitespace fixes; new sentence, new line; better macro usage.
Sort SEE ALSO.
2011-11-28 23:27:59 +00:00
tls
2a139c3401 Add cprng(9) manual page, remove arc4random(9) manual page 2011-11-28 20:19:25 +00:00
jmcneill
f3aef68ba3 update audio(9) docs for audiomp changes 2011-11-23 23:11:56 +00:00
jym
0cbbdfa92d pool_cache_sethiwat(9), pool_cache_setlowat(9), pool_cache_sethardlimit(9) 2011-11-15 00:50:55 +00:00
jym
13558246e2 Document pool_cache_sethardlimit(9), the faithful friend of
pool_sethardlimit(9).
2011-11-15 00:32:34 +00:00
jym
1e8ad6eb02 pool_sethardlimit.9 => pool.9 2011-11-15 00:19:42 +00:00
jym
f83fbb4ade Document pool_sethardlimit. 2011-11-14 02:38:05 +00:00
wiz
156fd028ba Remove trailing whitespace. New sentence, new line. 2011-11-08 10:56:59 +00:00
jym
28ecaa21fd Small improvements to kauth(9). 2011-11-08 00:55:53 +00:00
wiz
f5088175d6 Fix typo, try to improve Nd. 2011-11-01 23:18:07 +00:00
wiz
d3abb97c4a Casing. 2011-11-01 23:17:59 +00:00
yamt
30007d8b8f document skpc 2011-11-01 13:36:15 +00:00
yamt
e9ab523b8a document scanc 2011-11-01 13:33:05 +00:00
jruoho
0b7b86c410 Note briefly what MSRs are. Requested by wiz@. 2011-10-28 07:23:16 +00:00
wiz
987d3d3176 Sort SEE ALSO. 2011-10-27 07:23:23 +00:00
jruoho
67fcddd627 Revert the revision 1.5 in cpufreq(9). Instead, document that the KPI can
not be used before interrupts have been enabled. Suggested by macallan@.
2011-10-27 05:25:07 +00:00
jruoho
32b5e91691 Also mention rdtsc() in passing. 2011-10-25 05:41:33 +00:00
jruoho
5c8806b7c2 Xref rdmsr(9). 2011-10-25 05:04:33 +00:00
jruoho
49124f6222 Briefly document the basic RDMSR/WRMSR functions. 2011-10-25 05:03:55 +00:00
yamt
a22529c8e8 document ucas 2011-10-24 07:31:31 +00:00
yamt
f2ae74d707 - document RESCHED_KPREEMPT
- "Specifically" -> "Typically" in the paragraph which says what this
  function can do, because they are merely examples.
2011-10-24 07:30:29 +00:00
yamt
fe2648528f update the description of the priority argument. 2011-10-24 07:27:09 +00:00
yamt
60b270881f - document XC_HIGHPRI
- explicitly note that xc_wait requires thread context.
2011-10-24 07:25:51 +00:00
njoly
c7188eceb8 Use .In macro. 2011-10-20 12:14:12 +00:00
wiz
9ec9f2859c Use Aq instead of \*[Lt]...\*[Gt] 2011-10-20 10:36:42 +00:00
jruoho
1e1471bd00 Xref mstohz(9) and tvtohz(9) with each other. 2011-10-20 09:31:00 +00:00
jruoho
5d9e77ad94 Do not use xcall(9) in cpufreq_register(9), as it requires kthreads to be
running and may impose hacks like config_interrupts(9) in the backend.
2011-10-20 06:48:24 +00:00
jruoho
288ab9d2db Note that manually loaded modules are not auto-unloaded. 2011-10-18 14:12:04 +00:00
jruoho
987b86de6d Xref i2cscan(8). 2011-10-15 16:35:45 +00:00
wiz
6df1df0810 Remove superfluous Pp. 2011-10-06 08:59:01 +00:00