Commit Graph

4384 Commits

Author SHA1 Message Date
elad
bb74ea2d6b oops, forgot to handle new abi for "query", noted by he@, thanks! 2006-07-14 22:42:05 +00:00
elad
1c8d298b89 move security.setid_core.* to kern.coredump.setid.*, as requested by yamt@. 2006-07-14 21:55:19 +00:00
elad
b5d09ef065 okay, since there was no way to divide this to two commits, here it goes..
introduce fileassoc(9), a kernel interface for associating meta-data with
files using in-kernel memory. this is very similar to what we had in
veriexec till now, only abstracted so it can be used more easily by more
consumers.

this also prompted the redesign of the interface, making it work on vnodes
and mounts and not directly on devices and inodes. internally, we still
use file-id but that's gonna change soon... the interface will remain
consistent.

as a result, veriexec went under some heavy changes to conform to the new
interface. since we no longer use device numbers to identify file-systems,
the veriexec sysctl stuff changed too: kern.veriexec.count.dev_N is now
kern.veriexec.tableN.* where 'N' is NOT the device number but rather a
way to distinguish several mounts.

also worth noting is the plugging of unmount/delete operations
wrt/fileassoc and veriexec.

tons of input from yamt@, wrstuden@, martin@, and christos@.
2006-07-14 18:41:40 +00:00
yamt
ff6f0069a4 prtsig: remove a mysterious abort(). 2006-07-14 05:43:49 +00:00
martin
50edcae7de Trying the old "ifconfig <name> x.x.x.x down" issue again:
if the kernel does not set the interface up after we set an address,
do it explicitly, unless we (previously) set it down on user request.

This will allow the network drivers to be "fixed" while keeping visible
behaviour the same. Part of fixing PR 30694.
2006-07-13 14:02:03 +00:00
kardel
e386d70092 accept either "time_second" or "time" as kernel timevariable in
order to support common userland in enviroments where
timecounter kernels and non timecounter kernel co-exist
(e.g. xen & i386)
2006-07-09 06:43:16 +00:00
tsutsui
835463e99a Misc fixes for sl(4) and slattach(8) man pages:
- note that ifconfig(8) create subcommand is required before slattach(8)
- network addresses aren't defined by slattach(8) but ifconfig(8)
- Add a BUGS section in slattach(8) to note that currently there is no way to
  specify/see an interface name to be attached
- move description about link[0-2] flags from slattach(8) to sl(4)
  (rather than adding a new description...)
- move description about SLIP limitations to a new BUGS section in sl(4)
- remove inappropriate MLINKS of slip.8 to slattach.8
- create MLINKS of slip.4 to sl.4 instead
- add some more xrefs

Ok'ed by christos, and closes PR kern/33672 and PR bin/33923.
2006-07-08 17:22:14 +00:00
ross
a75e5e7741 Replace complicated test for ELFSIZE 64 with #ifdef _LP64 which is
the netbsd convention. Rig the old test temporarily to a #error
sanity check.
2006-07-08 05:49:01 +00:00
hubertf
33bed52cb8 Replace strcpy() call with strlcpy() call.
OK'd by christos@
2006-07-07 17:25:01 +00:00
drochner
c6b8e0a9fe fix an Xref 2006-06-30 15:51:36 +00:00
lukem
272515842e Support MAKEVERBOSE.
Use CLEANFILES to cleanup temp files instead of rm.
Cosmetic tweaks.
2006-06-28 15:03:00 +00:00
lukem
a0f0fb81a8 Convert to using CC instead of LD, as LDFLAGS is for CC not LD. 2006-06-28 15:00:51 +00:00
hubertf
c1f1683df1 * constify
* replace two calls to strncpy() with strlcpy(), eliminating some
   magic numbers

OK'd by christos@
2006-06-26 22:42:45 +00:00
christos
29c1a4c22e GCC4 fixes from Mike Pumford 2006-06-25 21:32:39 +00:00
wiz
abefac52de Use Dv for a macro; new sentence, new line. 2006-06-24 07:57:07 +00:00
perseant
1c57171fe3 Change LFCNWRAP{STOP,GO} to make them more suitable for snapshotting; in
particular, the caller can now choose whether to wait for the condition
to be met, and if the caller of LFCNWRAPSTOP dies or otherwise closes
the descriptor, the filesystem is started again.  Updated the ckckp
regression test to use the new semantics.

dump_lfs(8) now uses the fcntls to implement LFS-style snapshotting through
the -X flag, addressing PR#33457 albeit not using fss(4).  Fixed a couple
other problems with dump_lfs that manifested themselves during testing.
2006-06-24 05:28:54 +00:00
mrg
9bf1d4a9b8 work around some GCC4 internal problems on m68000 platform.
document the hack, and update another GCC4 list.
2006-06-24 05:21:11 +00:00
gdamore
a5c89047c0 Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@,
NetBSD Foundation Membership still pending.)  This stack was written by
Iain under sponsorship from Itronix Inc.

The stack includes support for rfcomm networking (networking via your
bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets.

Drivers for both PCMCIA and USB bluetooth controllers are included.
2006-06-19 15:44:33 +00:00
christos
ea14c28779 fix typo 2006-06-17 02:16:19 +00:00
elad
70e875f636 strcpy -> strlcpy
okay christos
2006-06-16 23:49:22 +00:00
elad
d10cf99230 fix incorrect usage of strncpy() to (an internal implementation of)
estrlcpy().

okay christos
2006-06-16 23:48:35 +00:00
tron
2ab5da17ce Adapt ifconfig(8) to new return value from socket(2). This stops
ifconfig(8) from printing errors like "ifconfig: socket: Address
family not supported by protocol family" when examining the status
of a network interface.
2006-06-14 11:05:42 +00:00
christos
65c3a16644 PR/33695: Arnaud Lacombe: Add compatibility syntax for FreeBSD interoperability. 2006-06-11 15:51:31 +00:00
kardel
75418af90c support timecounters (struct time gone, use time_second then) 2006-06-07 20:56:19 +00:00
christos
0bf2e0005a fix gcc warning. 2006-06-07 15:27:13 +00:00
christos
c4c1a29bd4 don't use uint32_t when you mean size_t. 2006-06-06 16:19:11 +00:00
christos
657e8b0071 fsck_lfs does not us fsutil.c; perhaps it should? revert to perror for now. 2006-06-05 23:27:36 +00:00
christos
0268f6ea4e s/perror/perr 2006-06-05 16:53:14 +00:00
christos
6a6266cc74 s/perror/perr/ so that we can make it varyadic. Overloading stdio's perror()
sneaky.
2006-06-05 16:52:05 +00:00
christos
15f3040f9f - don't leak memory on allocation failure.
- s/perror/perr and print how much we were trying to allocate.
2006-06-05 16:51:18 +00:00
christos
0ca3098868 Use SA_NOKERNINFO instead of playing with the tty. 2006-06-03 18:19:55 +00:00
christos
e5ea88eb01 PR/33633: Yoshito Komatsu: /sbin/fdisk does not work
Downgrade error getting heads to a warning.
2006-06-02 17:40:34 +00:00
christos
53516f73e1 Factor out the tty code and explain we prefer to stop in the ^Z bg case
when we exit, rather than kill the tty setting.
2006-06-01 18:04:08 +00:00
christos
8d1784140b PR/33623: Chuck Cranor: Ping stops when ran in the background
because it tries to set the tty not to print kerninfo. Change it
to only only play with the tty when ping is running in the foreground
(and will not stop when calling tcsetattr()). In my opinion, it is
preferable to print the kerninfo line with the ping info message
rather than to mess with the tty, but that's just me.
2006-06-01 15:59:31 +00:00
liamjfoy
27f99986a6 bump date (.Dd) 2006-05-29 19:35:31 +00:00
liamjfoy
10f12d58af document Common Address Redundancy Protocol sysctls, aka CARP
ok joerg@
2006-05-29 19:11:16 +00:00
yamt
b1af57a6ba remove __POOL_EXPOSE. 2006-05-27 09:14:03 +00:00
christos
7d40b7b07f Coverity CID 830: Fix dead code issue 2006-05-25 15:32:17 +00:00
jnemeth
13eb323a11 Coverity CID 3447: Add extraneous checks to shut up Coverity. 2006-05-23 22:35:20 +00:00
christos
e73d73289c Coverity CID 3287: Comment out dead code. 2006-05-23 01:03:16 +00:00
christos
124bff0089 PR/33522: Peter Bex: Sanity checks to avoid zerodivide. 2006-05-21 16:00:17 +00:00
yamt
ebeaf83fb7 do not keep to use nfsv3 filehandle when falling back to nfsv2. 2006-05-20 08:06:48 +00:00
yamt
ae4a112295 replace a magic constant with a macro. 2006-05-20 07:56:28 +00:00
yamt
248ca69bad copy missing copyright notices from
getnfsargs.c and sys/arch/i386/stand/libsa/nfs.c.
2006-05-20 07:48:39 +00:00
christos
326dc9f020 Coverity CID 3275: Plug memory leak. 2006-05-19 14:52:39 +00:00
christos
e70330c76d Coverity CID 3656,3655: Plug memory leak. 2006-05-19 14:50:32 +00:00
liamjfoy
4876c304b1 Integrate Common Address Redundancy Procotol (CARP) from OpenBSD
'pseudo-device	carp'

Thanks to: joerg@ christos@ riz@ and others who tested
Ok: core@
2006-05-18 09:05:49 +00:00
rpaulo
25ff2bc882 Replace the way we calculate the standard deviation with the unbiased form
for non-related samples. There are several websites that explain why we
should use this form instead of the normal formula to compute the std. dev.
(Wikipedia is one of them).
Also, ping(8) (where this "new" formula came from) already does it this way
so, I'm trying to score some extra points by making both utilities behave
the same way.

Thanks to wrtstuden@ for the initial clarification.
2006-05-18 02:14:22 +00:00
rpaulo
83dc99da2a There are no broadcast addresses in IPv6, so, kill a leftover from the
ping(8) man page.
2006-05-18 00:50:08 +00:00
elad
04d63f90b5 Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen
W^X mappings.

Disabled by default.

First proposed in:

	http://mail-index.netbsd.org/tech-security/2005/12/18/0000.html

More information in:

	http://pax.grsecurity.net/docs/mprotect.txt

Read relevant parts of options(4) and sysctl(3) before using!

Lots of thanks to the PaX author and Matt Thomas.
2006-05-16 00:08:24 +00:00