NetBSD/sbin
elad 8fc0d7a9c3 Introduce per-page fingerprints in Veriexec.
This closes a hole pointed out by Thor Lancelot Simon on tech-kern ~3
years ago.

The problem was with running binaries from remote storage, where our
kernel (and Veriexec) has no control over any changes to files.

An attacker could, after the fingerprint has been verified and
program loaded to memory, inject malicious code into the backing
store on the remote storage, followed by a forced flush, causing
a page-in of the malicious data from backing store, bypassing
integrity checks.

Initial implementation by Brett Lymn.
2005-10-05 13:48:48 +00:00
..
atactl
badsect
bim
brconfig
ccdconfig namespace sanity: no need to include <sys/device.h> 2005-09-08 14:50:02 +00:00
cgdconfig - constify. 2005-06-27 03:07:45 +00:00
chkconfig
clri
disklabel Sync DK types and FS types with <sys/disklabel.h>. 2005-09-21 14:51:20 +00:00
dkctl
dmesg Make is worthwhile haveing #ifdef SMALL by making the Makefile set it when 2005-09-05 20:56:41 +00:00
drvctl
dump Argument is read-blocksize, not "read blocksize". From YOMURA Masanori in private mail. 2005-09-11 23:36:55 +00:00
dump_lfs
edlabel Allow this to build under -Wcast-qual -Werror by adding const to a few 2005-06-28 18:14:45 +00:00
fastboot
fdisk When building as host tool don't include "../../include/util.h". 2005-08-27 22:43:40 +00:00
fsck
fsck_ext2fs Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
fsck_ffs Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
fsck_lfs Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
fsck_msdos
fsdb 64 bit inode changes 2005-08-19 02:07:18 +00:00
fsirand
ifconfig Commit a straggler: use the new SIOCG80211STATS/SIOCG80211ZSTATS 2005-09-15 23:35:15 +00:00
init Mark up more paths with .Pa, and 2005-07-01 17:07:33 +00:00
ldconfig
lmcctl
mbrlabel
mknod fix setmode error handling. 2005-10-01 20:23:54 +00:00
modload
modunload
mount
mount_ados Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
mount_cd9660 Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
mount_ext2fs Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
mount_fdesc
mount_ffs Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
mount_filecore Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
mount_kernfs
mount_lfs Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
mount_msdos Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
mount_nfs
mount_ntfs Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
mount_null
mount_overlay
mount_portal
mount_procfs Bump date for previous. 2005-10-03 19:17:49 +00:00
mount_ptyfs
mount_smbfs
mount_tmpfs Do not use stdbool.h; it breaks the build on ports using gcc 2.x (such as 2005-09-30 14:25:07 +00:00
mount_umap Sync usage with manpage. 2005-09-11 23:40:54 +00:00
mount_union
newbtconf .An -nosplit 2005-09-30 20:18:12 +00:00
newfs Apply the NFS exports list rototill patch: 2005-09-23 12:10:31 +00:00
newfs_lfs make this compile again. 2005-09-13 04:40:25 +00:00
newfs_msdos
nologin
pdisk
ping
ping6
pppoectl
raidctl
rcorder
reboot
resize_ffs
resize_lfs
restore Use crypto/rmd160.h. 2005-09-25 04:16:22 +00:00
rndctl
route Add full IPv6 syntax support when route is built with -DSMALL and -DINET6. 2005-08-31 02:58:30 +00:00
routed
rtsol
savecore
scan_ffs Specify the scan_ffs manpage, otherwise it will use scan_ffs.1. 2005-09-10 23:15:52 +00:00
scsictl
setkey
shutdown
slattach
swapctl
sysctl Document security level for sysctl and security.curtain. 2005-10-03 22:22:10 +00:00
ttyflags
tunefs
umount
veriexecctl Introduce per-page fingerprints in Veriexec. 2005-10-05 13:48:48 +00:00
vinum Add const to a duplicate declaration of sd_state(). 2005-07-05 22:21:38 +00:00
wdogctl If ioctl(,WDOGIOC_SMODE,) fails, kill the child process before 2005-08-31 18:28:58 +00:00
wsconsctl Fix typo. From YOMURA Masanori in private mail. 2005-09-11 23:50:46 +00:00
Makefile Initial addition of tmpfs, an efficient memory file-system. This project 2005-09-10 19:20:48 +00:00
Makefile.inc