NetBSD/sys/kern
elad 5888b16eef Some changes in veriexec.
New features:

  - Add a veriexec_report() routine to make most reporting consistent and
    remove some common code.
  - Add 'strict' mode that controls how veriexec behaves.
  - Add sysctl knobs:
     o kern.veriexec.verbose controls verbosity levels. Value: 0, 1.
     o kern.veriexec.strict controls strict level. Values: 0, 1, 2. See
       documentation in sysctl(3) for details.
     o kern.veriexec.algorithms returns a string with a space separated
       list of supported hashing algorithms in veriexec.
  - Updated documentation in man pages for sysctl(3) and sysctl(8).

Bug fixes:

  - veriexec_removechk(): Code cleanup + handle FINGERPRINT_NOTEVAL
    correctly.
  - exec_script(): Don't pass 0 as flag when executing a script; use the
    defined VERIEXEC_INDIRECT - which is 1. Makes indirect execution
    enforcement work.
  - Fix some printing formats and types..
2005-05-19 20:16:19 +00:00
..
bufq_disksort.c lookup bufq using link_set rather than a switch statement. 2004-11-25 04:52:23 +00:00
bufq_fcfs.c lookup bufq using link_set rather than a switch statement. 2004-11-25 04:52:23 +00:00
bufq_priocscan.c bufq_priocscan_get: don't update state in the case of !remove. fix BUFQ_PEEK. 2005-03-03 05:00:22 +00:00
bufq_readprio.c lookup bufq using link_set rather than a switch statement. 2004-11-25 04:52:23 +00:00
cnmagic.c
core_elf32.c There's no need to pass a proc value when using UIO_SYSSPACE with 2004-09-17 14:11:20 +00:00
core_elf64.c
core_netbsd.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
exec_aout.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
exec_conf.c First work on COMPAT_LINUX/amd64 2005-05-03 16:26:27 +00:00
exec_ecoff.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
exec_elf32.c Fix some things regarding COMPAT_NETBSD32 and limits/VM addresses. 2005-03-26 05:12:34 +00:00
exec_elf64.c
exec_macho.c Recognize bundles as mach-O executables 2004-09-04 23:21:26 +00:00
exec_script.c Some changes in veriexec. 2005-05-19 20:16:19 +00:00
exec_subr.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
genassym.awk
genassym.sh nuke trailing whitespace 2005-02-26 21:34:55 +00:00
genlintstub.awk nuke trailing whitespace 2005-02-26 21:34:55 +00:00
init_main.c Move the MI printing of `copyright' to the MD cpu_startup() code 2005-04-25 15:02:02 +00:00
init_sysctl.c Some changes in veriexec. 2005-05-19 20:16:19 +00:00
init_sysent.c regen 2005-02-26 23:58:19 +00:00
kern_acct.c sys_acct: use VOP_SETATTR instead of VOP_TRUNCATE as the latter's 2004-12-13 08:46:43 +00:00
kern_clock.c Copyright maintenance. 2005-03-02 11:05:34 +00:00
kern_descrip.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kern_drvctl.c add a "drvctl" pseudo-device as userland interface to the autoconf 2004-08-18 12:19:29 +00:00
kern_event.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kern_exec.c Rototill of the verified exec functionality. 2005-04-20 13:44:45 +00:00
kern_exit.c Panic strings should not end with \n. 2005-05-08 18:44:39 +00:00
kern_fork.c Add P_CLDSIGIGN, P_NOCLDSTOP and P_NOCLDWAIT to the list of flags we want 2005-05-17 19:22:19 +00:00
kern_kcont.c
kern_ksyms.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kern_kthread.c
kern_ktrace.c Don't de-reference a NULL ktd on error. Fix from enami, thanks. 2005-02-09 16:15:16 +00:00
kern_lkm.c `lkmlookup()' is called with its name argument either from kernel or from 2005-04-12 14:13:16 +00:00
kern_lock.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kern_lwp.c Don't panic when lwp_suspend finds an LWP on another CPU, just return 2005-02-12 21:39:00 +00:00
kern_malloc_debug.c merge yamt-km branch. 2005-04-01 11:59:21 +00:00
kern_malloc.c merge yamt-km branch. 2005-04-01 11:59:21 +00:00
kern_microtime.c cc_microset: #if 0 out a diagnositc printf. 2005-01-23 08:39:51 +00:00
kern_ntptime.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kern_physio.c
kern_proc.c proclist_foreach_call: tweak an assertion to deal with the case that 2004-10-03 22:26:35 +00:00
kern_prot.c
kern_ras.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kern_resource.c lock all uses of uidhash. provide macros to lock and unlock. based on more 2005-05-09 11:10:07 +00:00
kern_sa.c Copyright maintenance. 2005-03-02 11:05:34 +00:00
kern_sig.c Reset SIGCHLD handler if it is ignored, and clear the P_CLDSIGIGN bit. It 2005-04-09 16:07:52 +00:00
kern_subr.c Add IFNET_FOREACH and IFADDR_FOREACH macros and start using them. 2005-01-24 21:25:09 +00:00
kern_synch.c Copyright maintenance. 2005-03-02 11:05:34 +00:00
kern_sysctl.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kern_systrace.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kern_time.c Copyright maintenance. 2005-03-02 11:05:34 +00:00
kern_timeout.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kern_uuid.c Add IFNET_FOREACH and IFADDR_FOREACH macros and start using them. 2005-01-24 21:25:09 +00:00
kern_verifiedexec.c Some changes in veriexec. 2005-05-19 20:16:19 +00:00
kern_xxx.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
kgdb_stub.c Yes, it was a cool trick >20 years ago to use "0123456789abcdef"[a] to 2005-05-17 04:14:57 +00:00
Make.tags.inc
Makefile nuke trailing whitespace 2005-02-26 21:34:55 +00:00
makesyscalls.sh get rid of trailing spaces in the "created from" line (constructed by 2005-02-26 23:32:31 +00:00
subr_autoconf.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
subr_blist.c don't #include unnecessary headers. 2005-04-07 12:12:51 +00:00
subr_devsw.c
subr_disk_mbr.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
subr_disk.c introduce a function to drain bufq and use it where appropriate. 2005-03-31 11:28:53 +00:00
subr_evcnt.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
subr_extent.c Fix off-by-one bug which would cause a region at the end of the extent 2005-03-15 18:22:24 +00:00
subr_log.c
subr_pool.c merge yamt-km branch. 2005-04-01 11:59:21 +00:00
subr_prf.c Yes, it was a cool trick >20 years ago to use "0123456789abcdef"[a] to 2005-05-17 04:14:57 +00:00
subr_prof.c
subr_prop.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
subr_userconf.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
subr_xxx.c
sys_generic.c Add the code for pselect and pollts. Add selcommon and pollcommon to 2005-02-25 19:56:07 +00:00
sys_pipe.c merge yamt-km branch. 2005-04-01 11:59:21 +00:00
sys_pmc.c
sys_process.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
sys_socket.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
syscalls.c regen 2005-02-26 23:58:19 +00:00
syscalls.conf
syscalls.master Add pselect and pollts 2005-02-25 19:53:56 +00:00
sysv_ipc.c
sysv_msg.c merge yamt-km branch. 2005-04-01 11:59:21 +00:00
sysv_sem.c merge yamt-km branch. 2005-04-01 11:59:21 +00:00
sysv_shm.c merge yamt-km branch. 2005-04-01 11:59:21 +00:00
tty_bsdpty.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
tty_conf.c The definition of IRFRAMEDISC (10) is incorrect since the value is dynamic. 2005-04-10 14:28:11 +00:00
tty_ptm.c Cloning cleanup: 2004-11-30 04:25:43 +00:00
tty_pty.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
tty_subr.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
tty_tb.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
tty_tty.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
tty.c Panic strings should not end with \n. 2005-05-08 18:44:39 +00:00
uipc_domain.c Add the following nodes to the sysctl tree: 2005-03-09 05:07:19 +00:00
uipc_mbuf2.c In m_pulldown avoid a prepend to the next mbuf in the chain if the result 2005-05-06 09:40:40 +00:00
uipc_mbuf.c merge yamt-km branch. 2005-04-01 11:59:21 +00:00
uipc_proto.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
uipc_sem.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
uipc_socket2.c PR/30154: YAMAMOTO Takashi: tcp_close locking botch 2005-05-07 17:42:09 +00:00
uipc_socket.c Panic strings should not end with \n. 2005-05-08 18:44:39 +00:00
uipc_syscalls.c nuke trailing whitespace 2005-02-26 21:34:55 +00:00
uipc_usrreq.c PR/30154: YAMAMOTO Takashi: tcp_close locking botch 2005-05-07 17:42:09 +00:00
vfs_bio.c merge yamt-km branch. 2005-04-01 11:59:21 +00:00
vfs_cache.c
vfs_getcwd.c There's no need to pass a proc value when using UIO_SYSSPACE with 2004-09-17 14:11:20 +00:00
vfs_init.c - Define a VFS_ATTACH() macro that places a reference to a vfsops structure 2005-03-29 02:41:05 +00:00
vfs_lockf.c don't unlock twice. 2005-05-09 23:40:20 +00:00
vfs_lookup.c Panic strings should not end with \n. 2005-05-08 18:44:39 +00:00
vfs_subr.c Rototill of the verified exec functionality. 2005-04-20 13:44:45 +00:00
vfs_syscalls.c Rototill of the verified exec functionality. 2005-04-20 13:44:45 +00:00
vfs_vnops.c Rototill of the verified exec functionality. 2005-04-20 13:44:45 +00:00
vnode_if.c regen 2005-02-26 22:15:10 +00:00
vnode_if.sh remove some trailing spaces in generated output when removing $s from $NetBSD$ 2005-02-26 22:06:38 +00:00
vnode_if.src revert trailing whitespace change -- it had unintended consequences 2005-02-26 22:14:39 +00:00