Commit Graph

10157 Commits

Author SHA1 Message Date
elad
119d4b5acd PR/35253: YAMAMOTO Takashi: fileassoc hash size problem
fileassoc_table_add() was removed from the KPI and made internal. From now
fileassoc(9) will manage the optimal table size internally.

Input from and okay yamt@.
2007-02-06 01:09:48 +00:00
gdt
3a8d10addf Add Novatel Merlin, used in VZ V620.
From John Nielsen on freebsd-mobile.
Not tested, but almost certainly better than attaching as ugen.

FreeBSD has a UQ_ASSUME_CM_OVER_DATA quirk for this device; I can't
figure out what that means.
2007-02-05 15:13:28 +00:00
ad
20fd6754cf Sync with latest changes. 2007-02-05 15:04:21 +00:00
rillig
f59fec0d57 Mention the word "regular file" more clearly.
The term "append-only" directory was misleading.
2007-02-05 14:54:31 +00:00
rillig
a70aaa0ac5 Added a HISTORY section. 2007-02-05 14:48:25 +00:00
elad
5e2e282f9c Add support for per-user /tmp.
Enabled via per_user_tmp in /etc/rc.conf (default off).

See security(8) and rc.conf(5) for more details.

Lots of input from thorpej@ & christos@, thanks!
2007-02-04 08:19:26 +00:00
ad
26d6ccf325 Document cv_has_waiters(). 2007-02-03 16:49:11 +00:00
ad
00b8f6d201 - Require that cv_signal/cv_broadcast be called with the interlock held.
- Provide 'async' versions that don't need the interlock.
2007-02-03 16:39:53 +00:00
wiz
711856f6bb Fix Dd argument. 2007-02-02 07:37:06 +00:00
wiz
a88d4440e3 Sort SEE ALSO. Fix typo. 2007-02-02 07:36:09 +00:00
wiz
401fd96995 Sort options. Fix a few typos. 2007-02-02 07:35:28 +00:00
ad
c1a5096807 Add manpage for memory barrier ops. Not enabled in the Makefile yet. 2007-02-02 03:40:07 +00:00
elad
319fb82387 paxctl(1) -> paxctl(8), add "table of contents". 2007-02-02 02:42:00 +00:00
elad
2f9fd85b15 Some nits, paxctl(1) -> paxctl(8). 2007-02-02 02:39:13 +00:00
elad
725c64f2e3 <cyber> lgtm 2007-01-31 18:37:07 +00:00
apb
4432060543 * Insert "+1" at the front of a North American telephone number.
* Refer to pkgsrc/sysutils/wpi-firmware
2007-01-31 18:10:35 +00:00
njoly
f0142adc4d Remove wrong statement about non automatic files creation.
ok by christos
2007-01-31 15:41:37 +00:00
rpaulo
256dafd816 Sync with v1.111 adding FreeBSD 6.2 and DragonFly 1.8.0. 2007-01-31 14:45:04 +00:00
elad
409147ef11 Forgot to add notes about secmodel_register() and secmodel_register() in
previous commit -- added now.
2007-01-31 11:18:23 +00:00
elad
ac22ef0996 Update instructions on writing a new security model to include some notes
about LKMs and private data in credentials.
2007-01-31 11:16:46 +00:00
elad
9d00fe4640 Fix mdoc (Lt -> Gt). 2007-01-31 10:39:40 +00:00
elad
c439bcfe43 Add a new scope, the credentials scope, which is internal to the kauth(9)
implementation and meant to be used by security models to hook credential
related operations (init, fork, copy, free -- hooked in kauth_cred_alloc(),
kauth_proc_fork(), kauth_cred_clone(), and kauth_cred_free(), respectively)
and document it.

Add specificdata to credentials, and routines to register/deregister new
"keys", as well as set/get routines. This allows security models to add
their own private data to a kauth_cred_t.

The above two, combined, allow security models to control inheritance of
their own private data in credentials which is a requirement for doing
stuff like, I dunno, capabilities?
2007-01-31 10:08:23 +00:00
mrg
6024cd92c4 update the "bt" description to include "/l" modifier 2007-01-31 02:17:31 +00:00
wiz
47594a87c9 Add SWFG. 2007-01-30 22:01:13 +00:00
tron
6d2e146fcb "Transvaal" should be capitalized.
Patch provided by David A. Holland in PR misc/35517.
2007-01-30 13:10:49 +00:00
tron
03ffbba348 Correct documentation about ACPI related kernel options.
Patch provided by Joerg Niendorf in PR misc/35514.
2007-01-30 13:01:34 +00:00
gdt
5ff979921c Even though the parent doesn't descend here, it's still convenient to
have a makefile to build the 4 examples at once.
2007-01-30 01:26:58 +00:00
hannken
4d607243ba Change fstrans enum types to upper case.
No functional change.

From Antti Kantee <pooka@netbsd.org>
2007-01-29 15:42:50 +00:00
pooka
c1b9179682 Avoid doing a ludicrous number of reallocs when the file grows by only
lazy extending the file in setattr and really extending it in write.
2007-01-28 10:47:36 +00:00
elad
c2e4f788f9 Talk about special cases for kauth_authorize_action(). 2007-01-28 00:21:04 +00:00
elad
94d493dbe2 Remove extra '.El', left in previous commit. 2007-01-27 23:14:02 +00:00
pooka
f235a8d60c Add very uncorrect "suspend fs if server gets SIGUSR1" test for fs
suspension (hey, it's a test file system after all .... )
2007-01-26 23:02:05 +00:00
perry
34c4900430 Before I completely forget the issue, convert "PROG_PAX" to the
better-named "PAXCTL_FLAGS".
2007-01-25 23:04:28 +00:00
skrll
372930a9c7 Fix the path reference to the firmware package. 2007-01-25 16:16:38 +00:00
jschauma
aa5548dece add UUOC 2007-01-25 05:40:26 +00:00
wiz
a6b4bc9d66 Do not give Nx arguments it does not understand. 2007-01-23 22:24:30 +00:00
wiz
656213bfe1 Sort SEE ALSO alphabetically. Fix Xref. 2007-01-23 20:33:38 +00:00
wiz
a297486471 Sort SEE ALSO. 2007-01-23 20:32:05 +00:00
wiz
c0ed8c1e97 Make HTML-safe. 2007-01-23 20:31:33 +00:00
wiz
0f3c9bb729 Sort ERRORS. 2007-01-23 20:31:20 +00:00
christos
855c80dc29 delete "-std=gnu99" from c++ flags. From mrg. 2007-01-22 21:49:07 +00:00
jdc
2761c4c97a Note that sun-4 systems must set the PROM variable "console=p4opt".
Cross-reference cgfourteen(4).
New sentence, new line.
2007-01-22 18:11:56 +00:00
jdc
3cfa1eec0a Add additional cross-references (from Slava Semushin). 2007-01-22 11:57:44 +00:00
wiz
0b400eb99f Remove trailing space and grammar fix. 2007-01-21 22:14:53 +00:00
hannken
facd1f65cb Add and update documentation for fstrans(9) file system suspension helper.
wiz?
2007-01-21 15:42:36 +00:00
isaki
9e86a000cf Add support for CS5536. 2007-01-21 05:04:15 +00:00
xtraeme
a4423f177a Updated viaenv(4) driver:
* Support for the VIA VT8231 Hardware monitor.
* Power Management Timer available for timecounters in both
  VT86C686A and VT8231 (code simplified thanks to dev/ic/acpipmtimer).
* Remove viapm(4) code and manpage (which was a link to viaenv.4 anyway).

From OpenBSD, tested by some users.
2007-01-20 18:44:26 +00:00
elad
a78693aa19 Kill KAUTH_PROCESS_RESOURCE and just replace it with two actions for
nice and rlimit.
2007-01-20 16:47:38 +00:00
hubertf
326d0a938c Add a few entries contributed by Alexey Eremenko <al4321@gmail.com>,
and add CARP (by me)
2007-01-19 16:16:36 +00:00
hubertf
75f2812824 exclude working directories 2007-01-17 00:51:25 +00:00
elad
c3ca2b03a6 Add man-page for pathname(9) routines, but don't link to build yet. 2007-01-16 13:21:14 +00:00
elad
6df6f0ea65 Introduce kauth_proc_fork() to control credential inheritance. 2007-01-15 17:45:32 +00:00
elad
e52ee73ea8 arg0 is always 'struct proc *' for the process scope. 2007-01-15 17:05:01 +00:00
pooka
b5da39fea6 Gur Zbba vf Jnavat Perfprag (19% bs Shyy)
Add a little layering experiment, which both exercises the
componentname modification feature of libpuffs and tries to do
layering (just a little too hardcoded for comfort, fow now).  This
simply uses the puffs nullfs to present all data and paths in rot13.
You can even mount it twice for extra fun.
2007-01-15 00:46:29 +00:00
pooka
e6ea11c9c0 use new style to indicate rootpath 2007-01-15 00:43:07 +00:00
pooka
9a25a94ef7 adapt to libpuffs changes 2007-01-15 00:41:09 +00:00
pooka
14995912ad use the libpuffs path management routines to help build the sysctl
mib names
2007-01-15 00:40:37 +00:00
apb
a45dfb93f4 Define TOOL_JOIN. 2007-01-14 16:19:55 +00:00
gdt
11343fbd1f Add a heuristic to set rbus_min_start based on total RAM. The new
behavior is to choose 0.5 GB for <= 192 MB, 1 GB normally, and 2 GB
for >= 1 GB.  This should make the defaults work additionally old
Thinkpad 600Es, and also on notebooks with lots of RAM (e.g. T60 with
2GB).

ok christos@
2007-01-12 20:34:09 +00:00
pooka
dd15744c39 * register fsync operation
* test for -s, which causes no detach (don't need to remember to
  do follow-dances in gdb because of fork() used in daemon())
2007-01-11 17:50:35 +00:00
elad
8ed50e44ae veriexec_file_delete() and veriexec_table_delete() now take 'struct lwp *'
too.
2007-01-11 16:24:47 +00:00
pooka
764f2241da * initialize pflags properly
* make 'dump' imply 'don't detach'
2007-01-11 11:52:53 +00:00
pooka
cf4b2a379f example null file system built on top of the null layer in libpuffs 2007-01-11 01:03:03 +00:00
pooka
28b073df19 regen 2007-01-09 15:35:14 +00:00
elad
d2e4f7167b Remove advertising clause from all of my stuff. 2007-01-09 12:49:36 +00:00
kleink
803347c9aa Merge tzdata2007a. 2007-01-09 12:30:30 +00:00
kleink
3723141ebb Import tzdata2007a. 2007-01-09 12:28:23 +00:00
xtraeme
bdfae9b3bc First appeared in 4.0. 2007-01-08 23:55:58 +00:00
tsutsui
96b793e47c - add some note and Xref for rgephy(4) and rlphy(4), as per suggestion
from Steve Bellovin in PR kern/35376
- add some more 8169S based products which have their own PCI vendor ID
  and are listed in if_re_pci.c
- fix/remove some error messages in DIAGNOSTIC section to sync with reality.
- bump date
2007-01-08 15:37:10 +00:00
wiz
751fa51e41 Sort SEE ALSO. 2007-01-08 07:24:35 +00:00
wiz
378494c46b Appeared in 5.0. End sentence with a dot. 2007-01-08 07:21:17 +00:00
wiz
f05f89cb89 Serial comma. Add RCS Id. 2007-01-08 07:19:57 +00:00
elad
190f747fee Add a memoryallocators(9) man-page to give a short summary of memory
allocators available in the kernel.

Tons of input from YAMAMOTO Takashi, thanks!
2007-01-07 15:37:51 +00:00
xtraeme
ad691d8e2e ug(4): manual page for the Abit uGuru hardware system monitor
(wiz please review, thanks).
2007-01-07 03:14:09 +00:00
xtraeme
91e325391c sync with code, preempt wizd and bump date. 2007-01-07 01:44:01 +00:00
pooka
a67e4ce37f * do mount as a forward operation instead of a callback
* process -o args for mount
2007-01-06 18:25:19 +00:00
wiz
ac6fb6a04c From Sergey Svishchev in PR 34995:
Current termcap entry for wsvt25 is 'micro-minimal', so here's an
updated one.  I've based it on vt220-8.  DECSCNM sequence (dark/light
background) is not emulated by wscons, so visual bell is disabled (vb@);
also, I think that 'xn' quirk is unnecessary.  'rs' sequence should
fix PR/28402.

I've also added kB (back tab), F1 (F11 key) and F2 (F12 key) to xterm
entry.
2007-01-06 14:24:42 +00:00
wiz
e7caa1c8e8 Bump date for previous.
XXX: this needs updating for the sendmail and uucp removals.
2007-01-06 13:03:50 +00:00
ober
11827a57ef Update to include the new Zaurus port as per new-port checklist. 2007-01-06 03:53:21 +00:00
elad
a75d82b0bc We no longer have 'enum kauth_machdep_req'. 2007-01-05 13:23:22 +00:00
wiz
0d2fb92520 Fix Dd argument (who woke the wizd?) 2007-01-03 23:00:03 +00:00
joerg
724f61fbac Bump date as previous before wizd awakes. 2007-01-03 08:45:59 +00:00
joerg
a6d84a6d41 Reflect changed name of the firmware package after the update to
version 3.
2007-01-03 08:04:12 +00:00
elad
a13160f423 Make mount(2) and unmount(2) use kauth(9) for security policy.
Okay yamt@.
2007-01-02 10:47:28 +00:00
elad
c6e8423fec Make kauth_deregister_scope() and kauth_unlisten_scope() free the
passed kauth_scope_t and kauth_listener_t objects, respectively.

Okay yamt@.
2007-01-01 23:33:03 +00:00
pooka
d584a8d23a SUSv3 says: should the implementation not support directory unlinking,
unlink shall fail with EPERM and the errno of the failure shall be EPERM
2007-01-01 21:32:12 +00:00
wiz
2e33f7658d Remove pasto lines in license; ok rumble@. 2007-01-01 20:16:18 +00:00
wiz
fb228f3ef5 Fix Dd argument (should be full month name). 2007-01-01 16:58:00 +00:00
pavel
e697c78846 Add alpha-specific information. 2007-01-01 16:05:12 +00:00
wiz
183497f456 Sort options in SYNOPSIS. Use Dq for strings and Pa for paths.
New sentence, new line.
2006-12-31 09:40:58 +00:00
wiz
4383124932 Use double quotes for strings. Remove trailing whitespace.
New sentence, new line. Sort SEE ALSO.
2006-12-31 09:40:18 +00:00
gdt
155f4a0519 Add D-Link DWL-AG660. (A card with "H/W Ver.:A2" and FCC ID
KA2DWLAG650A3 attached and worked, but I'm not sure if it's a 5212 or
5213 because the driver doesn't print it at attach time.)
2006-12-30 23:51:18 +00:00
rumble
486ddd506f Build man8.sgimips. Alphabetise the list. 2006-12-30 19:29:20 +00:00
rumble
c916a07b67 Add section 8 man pages for sgimips, including brief entries on the boot
procedure and the sgivol utility.
2006-12-30 19:28:19 +00:00
elad
867767da66 Add veriexe_openchk(). 2006-12-30 15:32:19 +00:00
rumble
78f7b270d1 Fix a typo, tweak wording, and maintain consistency. 2006-12-30 04:45:13 +00:00
pooka
81b905fdbb if MKPUFFS=yes is given, build & install mount_psshfs (default: no) 2006-12-29 15:52:20 +00:00
pooka
6a42c9c838 apply wide-angle rotollation beam to match libpuffs changes 2006-12-29 15:37:06 +00:00
pooka
fb7890b666 ssshfs is obsoleted by mount_psshfs 2006-12-29 15:36:18 +00:00
wiz
9fb2b767d2 New sentence, new line. Use Nx. Drop dot at end of SEE ALSO. 2006-12-28 11:44:19 +00:00
hubertf
f300aecb2d Fill manpage with some data, taken from comments in the kernel source 2006-12-28 02:09:49 +00:00
elad
504c71d9fe Make machdep scope architecture-agnostic by removing all arch-specific
requests and centralizing them all. The result is that some of these
are not used on some architectures, but the documentation was updated
to reflect that.
2006-12-26 10:43:43 +00:00
elad
7e1cc3fd07 Elaborate on SSP.
Requested by and okay wiz@.
2006-12-26 10:24:53 +00:00
elad
ff39342b33 veriexec_lookup() should not return an internal data-structure, but rather
just a boolean value.
2006-12-26 07:50:40 +00:00
rumble
62b7bdb3b6 Add a page for LG1/LG2 graphics. Add xrefs. 2006-12-26 04:43:10 +00:00
wiz
3ed1aa9185 Spell "separate" correctly. From Zafer Aydogan. 2006-12-25 18:39:47 +00:00
rumble
f87f55890b Potentially futile attempt to avoid wizd. 2006-12-24 21:51:28 +00:00
rumble
91ea8ec96b Fix a few typos and tweak the grammar slightly. Move the disabling PaX
MPROTECT section to directly follow instructions on enabling it. Be
consistent in stating that Segvguard works on a per-program, per-user
basis.
2006-12-24 21:50:09 +00:00
rumble
4c3f4508d4 arbitrator -> arbiter 2006-12-24 00:47:24 +00:00
rumble
407a4bff65 Mention Set Engineering's GIO Fast Ethernet board. 2006-12-23 22:01:54 +00:00
rumble
a2560eee42 Nuke sbic(4). It never existed and we already have wdsc(4). 2006-12-23 21:38:26 +00:00
wiz
b040245dd5 Xr more man pages (XXX: sbic(4) is missing) 2006-12-23 10:10:55 +00:00
wiz
cc896d6c79 Xr giopci(4). 2006-12-23 10:06:09 +00:00
wiz
f687422c7e Use HTML escapes. 2006-12-23 10:05:43 +00:00
wiz
68c8c576ac Serial comma; new sentence, new line. 2006-12-23 10:04:15 +00:00
wiz
a1b013e655 Drop trailing dot in Nd. 2006-12-23 10:01:32 +00:00
wiz
0cbf97b519 Use HTML escapes. 2006-12-23 09:45:34 +00:00
wiz
103c72a1ca Bump date for previous. 2006-12-23 09:36:56 +00:00
wiz
3d4b4feff1 Use HTML escapes. 2006-12-23 09:24:57 +00:00
wiz
6dfb14d789 New sentence, new line. Fix typo. 2006-12-23 09:21:10 +00:00
wiz
e0c96a247b Undo accidental change in 1.109. 2006-12-23 09:12:35 +00:00
wiz
aff4cf84af Remove superfluous Pp; use Nm instead of Xr to ourselves; bump date for v1.32. 2006-12-23 09:11:19 +00:00
wiz
f92f3068da Use HTML escapes. 2006-12-23 09:05:20 +00:00
wiz
987a2558a6 Use Dv for defined values. 2006-12-23 09:02:45 +00:00
wiz
6db5804452 Fix Dd argument. 2006-12-23 08:56:53 +00:00
wiz
4a036f5957 Xref and describe ahcisata(4). 2006-12-23 08:55:37 +00:00
wiz
934af31abd Use Dv for defined values, even in lists (some more). 2006-12-23 08:46:27 +00:00
wiz
45f6f59489 Use Dv for defined values, even in lists. 2006-12-23 08:45:55 +00:00
yamt
e9e681eded remove the fileassoc "tabledata" functionality. 2006-12-23 08:36:14 +00:00
wiz
b9b556a28f Sort sections. 2006-12-23 08:26:35 +00:00
wiz
28ed461a83 Fix typo. 2006-12-23 08:06:54 +00:00
wiz
2a3af1da0d Use Nx; new sentence, new line; serial comma. 2006-12-23 08:04:32 +00:00
wiz
e1f9477296 Revert previous: this is a list of wrong spellings. 2006-12-23 08:00:37 +00:00
wiz
66bd97f47f Use Dv for defined values. 2006-12-23 07:43:41 +00:00
wiz
c46358a299 Reword slightly. 2006-12-23 07:35:28 +00:00
wiz
50026664ac New sentence, new line.
Reword: all .. will not .. -> no .. will ..
2006-12-23 07:33:16 +00:00
yamt
dcedbd0734 remove a BUGS section because it's solved by yamt-splraiseipl. 2006-12-23 07:30:26 +00:00
wiz
7713de669b Fix sections in Xrefs. 2006-12-23 07:17:50 +00:00
wiz
0c97daff02 Sort SEE ALSO. 2006-12-23 06:58:20 +00:00
wiz
2f68d00c69 Drop trailing whitespace. 2006-12-23 06:52:49 +00:00
wiz
43a0a70785 Use more markup. Use .Rs/.Re for book citation. 2006-12-23 06:51:41 +00:00
wiz
d15f199eb9 Use more markup. Use .Rs/.Re for book citation. Add missing comma. 2006-12-23 06:39:35 +00:00
wiz
f5ec841753 Fix typo. 2006-12-23 06:36:33 +00:00
wiz
fa9034328d Drop trailing whitespace. 2006-12-23 06:36:19 +00:00
rumble
642cea6312 Fix formatting, mention Phobos boards, no hyphenation of ''Challenge S''. 2006-12-23 03:40:11 +00:00
elad
3d11477c94 Add requests indicating access to unmanaged memory for arm, pc532, powerpc,
sh3, sh5, and vax, and use them instead of KAUTH_GENERIC_ISSUSER.

Update documentation and example secmodel code.
2006-12-22 11:13:21 +00:00
ad
c7a999e12a Note that ACOMPAT and ASU are no longer recorded. 2006-12-22 08:00:20 +00:00
rumble
e9faaca2de hpc(4) doesn't take flags anymore. Briefly note how the different revisions
may be mixed on certain systems.
2006-12-22 05:35:06 +00:00
rumble
1d22f4010e Fix pasto. 2006-12-22 01:16:20 +00:00
rumble
795f7da152 Add a giopci(4) manual page. 2006-12-22 01:15:17 +00:00
rumble
b437497b0f s/Challenge-S/Challenge S/, mention Challenge M as well, and remove the
imc(4) bug as we now have an interface.
2006-12-22 01:00:48 +00:00
rumble
c1f813ee0d Change the title slightly to indicate what GIO stands for. Also, be sure to
mention Challenge M, state that only two electrically distinct slots exist
on Indigo2/Challenge M and inform that a SysAD bug exists, which certain
cards may trigger (though we may mask it with a workaround). Other minor
nits as well.
2006-12-22 00:51:00 +00:00
rpaulo
689bbbd486 Sync with v 1.109. 2006-12-21 20:57:43 +00:00
yamt
71683748ca fix a typo. 2006-12-21 16:09:22 +00:00
yamt
5d51c3ca27 document splraiseipl and makeiplcookie. 2006-12-21 16:01:13 +00:00
macallan
610c0515b7 build XFree86 on shark 2006-12-21 01:45:32 +00:00
elad
2fa3937ffc Markup fix - forgot 'Fn'. 2006-12-20 12:29:09 +00:00
wiz
ea180530fa Xref msk, and describe mfi and bnx. 2006-12-19 17:52:16 +00:00
kleink
69647b7dbd Mention/Xref ral(4). 2006-12-19 11:06:44 +00:00
elad
f1a69ab3ea Some changes to get rid of another KAUTH_GENERIC_ISSUSER usage:
- Make procfs_control() in procfs_ctl.c static,
  - Add an argument to the above, 'pfs', for the pfsnode,
  - Add another request type to KAUTH_PROCESS_CANPROCFS named
    KAUTH_REQ_PROCESS_CANPROCFS_CTL (and update documentation),
  - Use the above combination in a call to kauth_authorize_process().
2006-12-19 09:58:34 +00:00
simonb
58e3217148 Explicitly mention that pmap_extract() should deal with KSEG-style
kernel addresses.
2006-12-18 00:41:21 +00:00
wiz
aba0bd4e11 Add Xrefs to etherip(4). 2006-12-18 00:16:10 +00:00
wiz
649915d649 Uppercase Ethernet. New sentence, new line.
Use Ox/Nx macros. Sort SEE ALSO.
2006-12-18 00:14:38 +00:00
wiz
6a46fac871 Xref bnx(4) and mfi(4). 2006-12-17 23:53:59 +00:00
wiz
1c4838284d Nx -> Ox; remove trailing whitespace. 2006-12-17 23:53:28 +00:00
wiz
5f1fe534e7 Punctuation issues. 2006-12-17 23:51:26 +00:00
bouyer
ea4f35dcd0 Add bnx(4), a driver for Broadcom NetXtreme II 10/100/1000 Ethernet device.
Ported from OpenBSD by cube@, with some bus_dma fixes by me.
Tested on i386 and amd64.
2006-12-17 23:02:06 +00:00
bouyer
462dc620e3 Add mfi(4), a driver for LSI Logic & Dell MegaRAID SAS RAID controller.
Ported from OpenBSD, tested on i386 and amd64.
2006-12-17 22:57:14 +00:00
pavel
2ed51cbda7 Remove the note about hardware VLAN tagging being unsupported,
Izumi Tsutsui fixed and reenabled it. Bump date.
2006-12-16 09:56:44 +00:00
ad
9a12b97e85 Nx 5.0 -> Nx 4.0 2006-12-15 20:25:55 +00:00
martin
955342ff31 Remove an accidentally duplicated word (this had the side effect of making
the regress/lib/libc/db regression test fail)
2006-12-15 12:37:55 +00:00
elad
238ad51d2d - moves 'nice' access semantics to secmodel code,
- makes sysctl_proc_find() just lookup the process,
- use KAUTH_PROCESS_CANSEE requests to determine if the caller is
  allowed to view the target process' corename, stop flags, and
  rlimits,
- use explicit kauth(9) calls with KAUTH_PROCESS_CORENAME,
  KAUTH_REQ_PROCESS_RESOURCE_NICE, KAUTH_REQ_PROCESS_RESOURCE_RLIMIT,
  and KAUTH_PROCESS_STOPFLAG when modifying the aforementioned.
- sync man-page and example skeleton secmodel with reality.

okay yamt@

this is a pullup candidate.
2006-12-14 11:45:08 +00:00
tnozaki
902f215bd9 add iconv encoding alias: cp813, cp91[2-6], cp920, cp923, cp1089. 2006-12-13 15:46:34 +00:00
tnozaki
e012779dec correct reference url. 2006-12-13 15:40:42 +00:00
wiz
bf294e42f4 Add snapper(4) man page, based on the one provided by David H. Gutteridge
in PR 35138 with minor changes.
2006-12-12 19:25:54 +00:00
yamt
687483b208 update an example. 2006-12-11 15:33:01 +00:00
yamt
995d487942 FILEASSOC_NHOOKS has gone. 2006-12-11 15:30:23 +00:00
yamt
9858d82855 it's fileassoc, not verifiedexec. 2006-12-11 15:27:46 +00:00
yamt
c534201d82 sync with the implementation. 2006-12-11 15:27:09 +00:00
pooka
9b0cc2c27b fix description to match the code 2006-12-10 23:03:03 +00:00
manu
098ea45eb4 New README.plainrsa sample file 2006-12-10 05:52:10 +00:00
dyoung
f3fbc3bb0f Change the name of the host disklabel to nbdisklabel-${MAKEWRAPPERMACHINE},
where ${MAKEWRAPPERMACHINE} is the suffix XXX on the target's make
wrapper, nbmake-XXX.

Fixes toolchain/30673, "single arch host disklabel isn't enough".
2006-12-09 20:13:13 +00:00
chs
c398ae9734 a smorgasbord of improvements to vnode locking and path lookup:
- LOCKPARENT is no longer relevant for lookup(), relookup() or VOP_LOOKUP().
   these now always return the parent vnode locked.  namei() works as before.
   lookup() and various other paths no longer acquire vnode locks in the
   wrong order via vrele().  fixes PR 32535.
   as a nice side effect, path lookup is also up to 25% faster.
 - the above allows us to get rid of PDIRUNLOCK.
 - also get rid of WANTPARENT (just use LOCKPARENT and unlock it).
 - remove an assumption in layer_node_find() that all file systems implement
   a recursive VOP_LOCK() (unionfs doesn't).
 - require that all file systems supply vfs_vptofh and vfs_fhtovp routines.
   fill in eopnotsupp() for file systems that don't support being exported
   and remove the checks for NULL.  (layerfs calls these without checking.)
 - in union_lookup1(), don't change refcounts in the ISDOTDOT case, just
   adjust which vnode is locked.  fixes PR 33374.
 - apply fixes for ufs_rename() from ufs_vnops.c rev. 1.61 to ext2fs_rename().
2006-12-09 16:11:50 +00:00
pooka
fe53828f70 use command line flags to set various options 2006-12-07 22:49:04 +00:00
elad
b8e4702fb2 Back out uvm_is_swap_device(). 2006-12-07 14:06:51 +00:00
pooka
7e3489d64a write requires setattr, so do a dummy version to make write here work
again after the checkops kernel changes
2006-12-07 10:59:03 +00:00
pooka
fb5e346800 counter-rototill for libpuffs change: unify all callback ops under
a single structure
2006-12-07 10:54:29 +00:00
dyoung
0a817c6193 Bump date for previous. 2006-12-06 05:32:18 +00:00
dyoung
2f22b3e668 Add rudimentary documentation for IPSec socket options. Maybe
somebody who groks IPSec will help me out here.
2006-12-06 05:27:32 +00:00
pooka
44576f90f6 fix IO_APPEND for write 2006-12-05 23:14:13 +00:00
pooka
05b1899256 only count directories in the number of hard links to a directory 2006-12-05 14:32:03 +00:00
kleink
f7c8b2f850 Merge tzdata2006p. 2006-12-05 11:26:10 +00:00
kleink
668014aba7 Import tzdata2006p. 2006-12-05 11:24:15 +00:00
hubertf
e135fa8ee4 Update to describe current API (only), and not duplicate that can be
found elsewhere. (And which will appear in the NetBSD Internals Guide
soonish).

Submitted by Daniel Sieger <dsieger@TechFak.Uni-Bielefeld.DE>,
OK'd by martin@ and  yamt@
2006-12-04 15:36:23 +00:00
tnozaki
57f0023ef8 catch up KS X 1001:2002: added U+327E - CIRCLED HANGUL IEUNG U. 2006-12-04 15:01:42 +00:00
wiz
1f1eabcdb7 Use more markup. Use HTML escapes. Use .Rs/.Re for book citation. 2006-12-04 13:16:59 +00:00
pavel
edab74570a Move the description of sysctl MIBs from sysctl.3 to a new manual page
sysctl.7. Remove the list of MIBs from sysctl.8 so we don't have to
maintain duplicate information, as proposed by YAMAMOTO Takashi on
tech-userlevel. Also remove references to header files from sysctl.8.

The numeric constants remain documented, they are still needed in some
cases. See the discussion on tech-userlevel. ("mib list in sysctl.8")

OK by YAMAMOTO Takashi.
2006-12-04 08:59:13 +00:00
rpaulo
08a924d363 Mention wpa_supplicant rc script.
Noted by hubertf@
2006-12-04 03:52:26 +00:00
dyoung
a2ab81c489 Change date to reflect today's change.
Try to get groff -mdoc to stop inserting extraneous linebreaks---no
luck!
2006-12-04 02:51:07 +00:00
dyoung
627864e36f Per discussion on tech-net@, discard the address-munging hack that
let one create a tunnel with equal inner and outer destination IP
numbers.  Update gre(4) documentation for this change.

Extract subroutine  gre_update_route() from gre_compute_route(),
and always call it in gre_output() to freshen the route for
tunnel-encapsulated packets.
2006-12-04 02:40:15 +00:00
tnozaki
787d7a82ef update CP942 iconv data - don't share Unicode mapping table with JISX0208:1978. 2006-12-03 14:28:46 +00:00
tnozaki
da493f6484 - correct JISX0208:1978 <-> Unicode mappings.
- gives priority to JISX0212 more than JISX0208:1978.
2006-12-03 12:02:05 +00:00
tsutsui
32402b1bfe Remove an invalid (and nonexistent) .Xr usage. 2006-12-03 05:28:33 +00:00
tnozaki
afa086e571 1. add IBM codepage 853 support to iconv.
2. correct JISX0208:1978 <-> Unicode mapping for IBM942.
2006-12-02 14:36:13 +00:00
elad
432c309931 Change kauth(9) KPI for kauth_authorize_device_passthru() to add another
argument, u_long, serving as a bit-mask of generic requests for the
passthru request.

Discussed on tech-security@ and tech-kern@. Okay tls@.
2006-12-02 03:10:42 +00:00
elad
1e92f4ba9c Trailing whitespace... 2006-12-01 16:13:36 +00:00
elad
a6c2dfb16d Introduce uvm_is_swap_device(), to check if the passed struct vnode * is
used as a swap device or not.

Okay mrg@.
2006-12-01 16:06:09 +00:00
pooka
b98361ea36 sauce catchup 2006-12-01 15:31:25 +00:00
pooka
69dbc08863 update flag names 2006-12-01 12:50:52 +00:00
bouyer
7b4730a29f Add ahcisata(4), a driver for AHCI 1.0 and 1.1 controllers. Tested on the sata
ports of a Intel 63xxESB chipset. Does not support NCQ yet.
2006-11-30 21:01:15 +00:00
elad
2f85bad1eb Sync with reality after recent changes. 2006-11-30 16:55:00 +00:00
pooka
496f59a99f adapt to flags parameter for puffs_mainloop() 2006-11-30 05:38:54 +00:00
dsl
2abb1c7f9b If MAKEOBJDIRPREFIX or MAKEOBJDIR is defined, then we rely on make to
set .OBJDIR so 'make -V .OBJDIR' doesn't need to read any makefiles.
Given how much cud-chewing make does in order to read a line, this
speeds things up significantly (the operation in hand).
2006-11-29 21:49:39 +00:00
hira
be6e51a13a Add missing spaces after section suffix. 2006-11-29 16:50:53 +00:00
tnozaki
e105ab22c2 add iconv support following encoding:
CP858	- CP850 with euro sign
	CP942	- variant of CP932(JIS-ROMAN + JIS78)
	CP942C	- ditto(ASCII + JIS78)
	CP943	- ditto(JIS-ROMAN + JIS83)
	CP943C	- ditto(ASCII + JIS83)
	TDS565	- Turkmen Alphabet(ISO-IR-230)
2006-11-29 15:45:26 +00:00
elad
646f2112d3 Make Veriexec use proplib(3) for kernel-userland data passing.
Obviously, this breaks the already unstable Veriexec ABI, but that's
it. Some cool additions are planned to be introduced, and this just
makes it so that NetBSD 4.0 users will be able to easily use them as
well.

This also removes the fingerprint type name limit, so relevant code
was adjusted.

Thoroughly tested (even uncovered a bug in proplib! thanks for fixing
that cube@!). Documentation updated.
2006-11-28 22:22:02 +00:00
pooka
0dd37417ef match description of VOP_PUTPAGES with reality 2006-11-28 19:26:30 +00:00
elad
8bb202af97 Move ktrace, ptrace, systrace, and procfs to use kauth(9).
First, remove process_checkioperm() calls from MD code. Similar checks
using kauth(9) routines (on the process scope, using appropriate action)
are done in the callers.

Add secmodel back-end to handle each subsystem.
2006-11-28 17:27:09 +00:00
elad
21bc112176 Implement Veriexec's raw disk policy on-top of kauth(9)'s device scope,
using both the rawio_spec and passthru actions to detect raw disk
activity. Same for kernel memory policy.

Update documentation (no longer need to expose veriexec_rawchk()) and
remove all Veriexec-related bits from specfs.
2006-11-26 20:27:27 +00:00
dsl
d23b6980be Comment where make's internal copy of .OBJDIR gets changed 2006-11-26 20:09:57 +00:00
wiz
dee9175769 Bump date for previous. 2006-11-26 16:36:06 +00:00
elad
df07d5d652 I wanted to do this for so long: veriexec_init_fp_ops() -> veriexec_init(). 2006-11-26 16:22:36 +00:00
drochner
29d30258a4 mk.conf might refer to all kinds of make variables, so we can't just pull
it in without everything else (reported by martin). So revert to 1.485
which did at least work for everyone.
2006-11-26 13:59:49 +00:00
jmmv
175531f6ed Mention the maximum line length allowed in the passwd file.
Inspired by PR misc/34664.
2006-11-26 11:43:48 +00:00
jmmv
964c039645 Explain that groups can be defined using multiple lines due to the fixed
line length used to parse the file.  Closes PR misc/34664.
2006-11-26 11:35:39 +00:00
christos
2c8c97cf53 Add LevelOne WNC-0301USB 2006-11-25 21:44:44 +00:00
elad
6a55f622e6 First take of MI boot(8) man-page, suggested by agc@.
Okay agc@.
2006-11-25 17:43:47 +00:00
christos
c0179c282a spell precede; from Zafer 2006-11-25 16:48:31 +00:00
tnozaki
16b9b1a8bf use mapper_zone to avoid pivot conversion by ucs. 2006-11-25 15:30:44 +00:00
scw
512f329f66 Document disk_blocksize(9). 2006-11-25 12:00:25 +00:00
tnozaki
0a9d990226 1. add iconv support for Lao language - CP1133, MULELAO-1.
2. add alias Thai language: TIS620, ISO-IR-166.
2006-11-25 10:27:22 +00:00
wiz
fa34b615d2 Correct spelling of "immediate(ly)". From Zafer. 2006-11-24 21:23:07 +00:00
christos
1665d5e960 fix spelling of accommodate; from Zapher. 2006-11-24 19:46:58 +00:00
christos
3d98aa3f4b fix spelling of accidentally; from Zapher 2006-11-24 19:37:02 +00:00
drochner
0c2df71a45 fix previous: need to pull in <bsd.obj.mk> to get the real .OBJDIR 2006-11-24 12:02:55 +00:00
rpaulo
785b8e0981 WARNING: input date is in the past! 2006-11-23 18:02:15 +00:00
elad
6d74a5fdc7 Document Veriexec strict levels (hm, maybe we should have veriexec(8)?)
as requested by Adam Hamsik.
2006-11-23 13:23:22 +00:00
martin
6a3c1d7aeb When checking wether we are debugging, look for -g in ${CFLAGS} instead
of ${COPTS}. The latter explicitly includes the former and ${DBG}, where
the -g most likely is hidden.
2006-11-23 12:05:26 +00:00
rpaulo
370be902f0 WARNING: date is in the future! 2006-11-23 04:12:51 +00:00
rpaulo
5423539f94 New EtherIP driver based on tap(4) and gif(4) by Hans Rosenfeld.
Notable changes:
	* Fixes PR 34268.
	* Separates the code from gif(4) (which is more cleaner).
	* Allows the usage of STP (Spanning Tree Protocol).
	* Removed EtherIP implementation from gif(4)/tap(4).

Some input from Christos.
2006-11-23 04:07:07 +00:00
tnozaki
dec2eb4c9d 1. move GB*.esdb from i18n/esdb/MISC to i18n/esdb/GB directory.
2. add iconv support for Chinese Tradisional GB12345.
2006-11-23 03:25:24 +00:00
hubertf
1ee989e6be Don't try to handle symlinks on versions of the SSH File Transfer Protocol
that don't support it, e.g. the Solaris 9/x86 sshd (SSH-2.0-Sun_SSH_1.0;
..._1.1 from Solaris 10/x86 is fine)

OK'd by pooka@
2006-11-23 01:51:15 +00:00
tnozaki
8033a5b008 1. add iconv support for following encodings:
Chinese Simplefied
        HZ, HZ8 - 7/8bit stateful encoding, see RFC1842,1843. (libHZ)
        zW      - 7bit stateful encoding, see RFC1842. (libZW)
2. add citrus_prop.[ch] - parser for encoding module's init parameter strings.
2006-11-22 23:38:25 +00:00
dsl
503ea65cd7 If we only want .OBJDIR printed, there is no point parsing the default
make rules, nor reading Makefile.
It is rather a shame we can't stop .depend being parsed as well.
Quite possibly one could argue that nothing in .depend should affect the
output of 'make -V xxxx'.
2006-11-22 22:04:57 +00:00
elad
2664dc174c Add missing items to the securelevel implications list.
Now it is complete.
2006-11-22 21:00:30 +00:00
tnozaki
9b1aff8258 add fallback mapping. 2006-11-22 20:22:30 +00:00
elad
eb704f9789 SSP is not enabled by default, update documentation.
Pointed out by yamt@, thanks!
2006-11-22 13:00:02 +00:00
elad
4b316db1d1 Introduce KAUTH_REQ_MACHDEP_{ALPHA,X86}_UNMANAGEDMEM to handle access
to unmanaged memory.

These are the last two securelevel references in the MD code.
2006-11-22 12:12:51 +00:00
elad
a84fee7faf Initial implementation of PaX Segvguard (this is still work-in-progress,
it's just to get it out of my local tree).
2006-11-22 02:02:51 +00:00
pooka
118c65eb6d * update comments
* puffs_nextdent() takes a directory type, not vtype, so translate
  that before calling it.  fixes find & other fts-stuff.
2006-11-21 23:19:45 +00:00