Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
184,191 Commits 606 Branches 0 Tags
Commit Graph

184191 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
phx
c9394f466a SystemV-R4 ABI for M68k returns pointers in %a0, so we have to make sure 
that CERROR returns -1 in %a0 in addition to %d0 and %d1, to make functions
like mmap(2), mremap(2), shmat(2) or sbrk(2) return -1 in case of an error.
A side effect of this bug was a segfault caused by jemalloc, when mmap()
failed.
 2009-10-03 22:28:33 +00:00
elad
458410e7b5 Oops, forgot to make sched_listener static. Pointed out by rmind@, thansk! 2009-10-03 21:21:56 +00:00
elad
54d08ac134 Update a comment. No functional change. 2009-10-03 21:03:55 +00:00
jmcneill
74436af5d8 add dummy opt_via_c7temp.h, spotted by Andreas Gustafsson. 2009-10-03 20:56:39 +00:00
elad
a39251ecc2 Introduce time_wraps() to check if setting the time will wrap it (or 
close to it). Useful for secmodels.

Replace open-coded form with it in secmodel code (securelevel, keylock).

Note: I need to find a way to make secmodel_keylock.c ~<100 lines.
 2009-10-03 20:48:42 +00:00
pooka
a611f250f5 Report the root hub as self-powered. Works better when attaching 
power-hungry devices.
 2009-10-03 20:46:49 +00:00
elad
7f720ad562 KAUTH_GENERIC_CANSEE -> KAUTH_REQ_NETWORK_SOCKET_CANSEE. 
Not quite the same semantics but it's okay. Once our sockets have
credentials (and they will) it's all the same.
 2009-10-03 20:24:39 +00:00
apb
c8cd35993a Add an additional check for whether to rebuild make. This fixes a problem 
I saw where building first without and then with OBJMACHINE confused
build.sh into not building a new nbmake in the new TOOLDIR.
 2009-10-03 19:19:59 +00:00
pooka
8d655ed84b probe and attach ugen0 through ugen3 2009-10-03 19:07:33 +00:00
pooka
cbdc6e568f pass unit number in mainbus attach args 2009-10-03 19:06:35 +00:00
christos
7770393bf8 add type attributes in a few more places. 2009-10-03 17:09:18 +00:00
jmcneill
92ddd35b74 from Jukka Ruohonen: 
- Remove redundant assertions.
 - Properly check for NULL pointers.
 - No real need to keep track whether the internal event handler is installed.
 - Add a missing function to pass possible extra information associated with
   an event. Mentioned in the specification.
 2009-10-03 15:49:21 +00:00
jmcneill
d0d1a0e6c3 Enable viapcib 2009-10-03 13:37:27 +00:00
zafer
efcbcb0cf3 remove trailing whitespace. (hi wiz!) 2009-10-03 12:45:15 +00:00
martin
b7d9979e0d When creating /etc/fstab: 
for the first swap partition use type sw,dp instead of sw, so dump device
gets configured correctly if swap is not on the second partition.
Fixes PR install/42148.
 2009-10-03 12:00:00 +00:00
wiz
0fe31f2e87 Drop trailing whitespace. 2009-10-03 07:37:01 +00:00
elad
5b3a96a24d Move KAUTH_NETWORK_BIND::KAUTH_REQ_NETWORK_BIND_PORT policy back to the 
subsystem (or close to it).

Note: Revisit KAUTH_REQ_NETWORK_BIND_PRIVPORT.
 2009-10-03 03:59:39 +00:00
elad
82ce55ed44 Move policies for KAUTH_PROCESS_{CANSEE,CORENAME,STOPFLAG,FORK} back to 
the subsystem.

Note: Consider killing the signal listener and sticking
      KAUTH_PROCESS_SIGNAL here as well.
 2009-10-03 03:38:31 +00:00
elad
e62043d705 One less include. 2009-10-03 03:02:55 +00:00
elad
50c13fc074 Make modstat output look pretty again. 2009-10-03 02:27:43 +00:00
elad
2bf6c7c405 We only care about KAUTH_NETWORK_ROUTE. 2009-10-03 02:22:22 +00:00
elad
eab999856c Make this file a little bit smaller by collapsing cases. 2009-10-03 02:06:11 +00:00
elad
0dd621a02d Move clockctl policy exception back to the subsystem. 2009-10-03 02:01:12 +00:00
elad
0a0bbb40a7 secmodel_bsd44_curtain -> secmodel_suser_curtain (static). 2009-10-03 01:52:14 +00:00
elad
cee5cd7dd4 Move default network interface policy back to the subsystem. 2009-10-03 01:46:39 +00:00
elad
111de3833c Finish moving socket policy to the subsystem. 2009-10-03 01:41:39 +00:00
christos
3da8ec1b81 accept struct { ... } __packed name; 2009-10-03 01:35:20 +00:00
elad
452ced03bd Move sched policy back to the subsystem. 2009-10-03 01:30:25 +00:00
elad
6991fd9ea2 Move firewall/NAT policy back to respective subsystems (pf, ipf). 
Note: the ipf code contains a lot of ifdefs, some of them for NetBSD
versions that are no longer maintained. It won't make the code more
readable, but we should consider removing them.
 2009-10-03 00:37:01 +00:00
elad
212f5fa214 Move kevent policy back to the subsystem. 2009-10-03 00:14:07 +00:00
elad
abc7a4290b Put module loading policy back in the subsystem. 
Revisit: consider moving kauth_init() above module_init() in main().
 2009-10-03 00:06:37 +00:00
tsarna
3c8b3fccbd Make signals match what OS X and the manpage say. Implement toggles for 
debug and packet trace logging.

Make this conditional on HAVE_SIGINFO. Presumably lack of SIGINFO as a
standard posix feature is why they went with different signals here in
the first place, but since we have it, let's use it.
 2009-10-03 00:03:05 +00:00
elad
1f98cab201 Put the tty opening policy back in the subsystem. 
Remove include we don't need from the secmodel code.
 2009-10-02 23:58:53 +00:00
elad
510083464f Move some of the socket policy back to the subsystem. 
Remove include we don't need in the secmodel code.
 2009-10-02 23:50:16 +00:00
elad
8751f894d8 Put signal delivery policy back in the subsystem. 2009-10-02 23:24:15 +00:00
elad
c2ba1b2a75 Remove includes we don't need. 2009-10-02 23:18:12 +00:00
elad
9f0d81cf10 Move routing socket security policy back to the subsystem. 2009-10-02 23:16:21 +00:00
elad
198c6aa6f5 - Squeeze function declarations where possible, 
- KAUTH_RESULT_DEFER is the default (set at the beginning of each listener)
  and as such does not need to be set explicitly in the switches.
 2009-10-02 23:06:33 +00:00
elad
51f0d6a0eb Put procfs policy back in the subsystem. 2009-10-02 23:00:02 +00:00
elad
09f3ac9e2f Stick nice policy in its own subsystem and call the listener "resource" 
rather than "rlimit"...
 2009-10-02 22:46:18 +00:00
elad
bcc5014bd0 Move rlimit policy back to the subsystem. 
For this we needed proc_uidmatch() exposed, which makes a lot of sense,
so put it back in sys_process.c for use in other places as well.
 2009-10-02 22:38:45 +00:00
elad
2ae3a70827 Move ptrace's security policy back to the subsystem itself. 
Add a ptrace_init() so we have a place to register the listener; called
next to ktrinit().
 2009-10-02 22:18:56 +00:00
elad
9a472060de Let the ipkdb subsystem allow operations related to it rather than wrongly 
doing so in the suser secmodel.
 2009-10-02 22:05:52 +00:00
elad
40cc528a28 Move psets security policy back to the subsystem and keep suser logic only 
in the suser secmodel code.
 2009-10-02 21:56:28 +00:00
christos
17b31cc3a2 handle bit fields in packed structures. 2009-10-02 21:49:30 +00:00
elad
932cd15f91 Move ktrace's subsystem security policy to the subsystem itself, and keep 
just the suser-related logic in the suser secmodel.
 2009-10-02 21:47:35 +00:00
roy
e301526e91 Import dhcpcd-5.1.1 2009-10-02 21:44:02 +00:00
roy
9f9d7a83f9 Fix building dhcpcd-5.1.1 2009-10-02 21:40:16 +00:00
roy
0b3ae6da92 Add back dhcpcd.conf 2009-10-02 21:36:41 +00:00
roy
cc2e8e7e32 Import dhcpcd-5.1.1 
Changes from dhcpcd-5.0.7 include
* Only allow hardware families we know by default (over-ridable)
* Fix persistent and timeout 0 options
* Fix parsing of escape code sequencies
* Don't bring up interfaces brought down when handling new interfaces
* Allow un-encapsulated vendor option
* Don't null terminate gratuitously when handling quotes
* Fix various typos and grammatical errors
* dhcpcd.conf simplified a little
 2009-10-02 21:31:01 +00:00