Aren/NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b82dcdacf5
NetBSD/sys/dev
History
elad 8fc0d7a9c3 Introduce per-page fingerprints in Veriexec. 
This closes a hole pointed out by Thor Lancelot Simon on tech-kern ~3
years ago.

The problem was with running binaries from remote storage, where our
kernel (and Veriexec) has no control over any changes to files.

An attacker could, after the fingerprint has been verified and
program loaded to memory, inject malicious code into the backing
store on the remote storage, followed by a forced flush, causing
a page-in of the malicious data from backing store, bypassing
integrity checks.

Initial implementation by Brett Lymn.
2005-10-05 13:48:48 +00:00
..
acpi reduce the last commit to its essence; the rest was 2005-07-11 18:31:12 +00:00
apm
arcbios Change the driver open function's conditional for overriding exclusive tty 2005-09-06 21:40:37 +00:00
ata Fix typo in comment from previous revision. 2005-09-05 22:55:31 +00:00
bi Fixes due to cast-qual addition. 2005-06-27 11:05:24 +00:00
bluetooth bthcipoll must not return <sys/errno.h> error codes, return POLLERR/POLLHUP 2005-07-02 07:50:34 +00:00
cardbus remove the useless (always 0) device number from cardbus driver state, 2005-09-09 14:50:58 +00:00
dec Change the driver open function's conditional for overriding exclusive tty 2005-09-06 21:40:37 +00:00
dkwedge Set sc->sc_cfdata.cf_fstate to FSTATE_STAR rather than FSTATE_NOTFOUND 2005-09-28 18:25:19 +00:00
dmover
ebus
eisa kill a number of autoconf submatch functions which follow the 2005-08-25 22:33:18 +00:00
gpib s/locdesc_t/int/g 2005-08-26 12:42:11 +00:00
gpio Import general purpose I/O framework from OpenBSD. 2005-09-27 02:34:02 +00:00
hpc Change the driver open function's conditional for overriding exclusive tty 2005-09-06 21:40:37 +00:00
i2c Shuffle thermal sensor numbering so temp0 is always the on-chip sensor and temp1 2005-09-11 20:26:15 +00:00
i2o kill a number of autoconf submatch functions which follow the 2005-08-25 22:33:18 +00:00
ic PR/31455: Robert Elz: ex (905[BC]) cards can hang in -current kernels 2005-10-04 17:37:26 +00:00
ieee1394 Remove '#if defined(cobalt)'. 2005-08-29 17:20:31 +00:00
ir PR-30566: Poll must not return <sys/errno.h> values. 2005-06-21 14:01:11 +00:00
isa Attach to gpiobus. From OpenBSD. 2005-09-27 02:56:27 +00:00
isapnp s/locdesc_t/int/g 2005-08-26 12:42:11 +00:00
marvell Change the driver open function's conditional for overriding exclusive tty 2005-09-06 21:40:37 +00:00
mca kill some more simple submatch() functions, use config_stdsubmatch() 2005-08-26 11:20:33 +00:00
microcode u_int8_t -> uint8_t 2005-06-27 03:36:25 +00:00
mii Fix misstake regen. 2005-08-28 15:39:12 +00:00
mscp Fixes due to cast-qual addition. 2005-06-27 11:05:24 +00:00
mvme Fix const fallout. 2005-06-03 08:49:03 +00:00
news
ofisa
ofw Now that OF_read and OF_write have different signatures, we need to 2005-06-09 12:23:23 +00:00
pci Regen with PCI ids for Intel pro/1000 PT pci-e gigabit ethernet. 2005-10-05 00:46:00 +00:00
pckbport kill a number of autoconf submatch functions which follow the 2005-08-25 22:33:18 +00:00
pcmcia fix compilation with debugging on. 2005-09-08 18:41:50 +00:00
podulebus Adapt to compiling with -Wcast-qual by constifying a char* field. 2005-06-09 09:15:28 +00:00
ppbus s/locdesc_t/int/g 2005-08-26 12:42:11 +00:00
qbus Change the driver open function's conditional for overriding exclusive tty 2005-09-06 21:40:37 +00:00
raidframe Re-work the handling of incoming I/O in RAIDframe: 2005-09-25 19:47:17 +00:00
rasops We don't need <sys/bswap.h> here. 2005-09-03 22:55:55 +00:00
rcons make this compile after Wcast-qual 2005-06-01 17:05:16 +00:00
sbus Change the driver open function's conditional for overriding exclusive tty 2005-09-06 21:40:37 +00:00
scsipi Cleanup and fix cd_size() function; it was returning wrong results. 2005-09-06 22:19:14 +00:00
smbus
std
sun Remove spurious debug output accidently commited in revision 1.44. 2005-09-28 21:36:23 +00:00
sysmon
tc s/locdesc_t/int/g 2005-08-26 12:42:11 +00:00
usb Tweak to make sure the enum size is not affected 2005-09-24 12:03:31 +00:00
vinum Follow up after adding const by doing some more. 2005-07-05 22:20:47 +00:00
vme s/locdesc_t/int/g 2005-08-26 12:42:11 +00:00
wscons Change the driver open function's conditional for overriding exclusive tty 2005-09-06 21:40:37 +00:00
wsfont Extend the gallant font to full ISO8859-1. Content provided by der Mouse, 2005-09-19 19:27:31 +00:00
xmi
auconv.c
auconv.h correct some position names. 2005-06-18 11:22:12 +00:00
audio_if.h
audio.c PR-30566: Poll must not return <sys/errno.h> values. 2005-06-21 14:01:11 +00:00
audiobell.c
audiobellvar.h
audiovar.h
aurateconv.c add missing const. 2005-05-31 00:48:57 +00:00
ccd.c use pseudo_disk_{init,attach,detach} where appropriate. 2005-08-20 12:01:04 +00:00
ccdvar.h
cgd_crypto.c
cgd_crypto.h
cgd.c add wedge support to xbd and cgd. 2005-08-20 12:03:52 +00:00
cgdvar.h no reason for those not to be const. 2005-06-27 03:00:03 +00:00
clock_subr.c
clock_subr.h Fix the various todr_gettime() and todr_settime() fallouts from 2005-06-04 20:14:24 +00:00
clockctl.c
cninit.c
cons.c PR-30566: Poll must not return <sys/errno.h> values. 2005-06-21 14:01:11 +00:00
cons.h
DEVNAMES added a few missing device names 2005-09-27 14:47:41 +00:00
dksubr.c add wedge support to xbd and cgd. 2005-08-20 12:03:52 +00:00
dkvar.h add wedge support to xbd and cgd. 2005-08-20 12:03:52 +00:00
fss.c
fssvar.h
kloader.c Remove the casts in the previous commit and use %zx. 2005-09-24 17:00:20 +00:00
kloader.h
kttcp.c
kttcpio.h
ld.c
ldvar.h
Makefile
md_root.c
md.c
md.h
midi_if.h
midi.c PR-30566: Poll must not return <sys/errno.h> values. 2005-06-21 14:01:11 +00:00
midisyn.c
midisynvar.h
midivar.h
mm.c
mulaw.c
mulaw.h
nullcons_subr.c
radio_if.h
radio.c
radiovar.h
rnd.c
rndpool.c
sequencer.c more cast-qual and shadow fallout 2005-06-01 18:41:51 +00:00
sequencervar.h
verified_exec.c Introduce per-page fingerprints in Veriexec. 2005-10-05 13:48:48 +00:00
vnd.c Fix logic error in vndiocget. 2005-08-28 08:56:14 +00:00
vndvar.h 64 bit inode changes. 2005-08-19 02:03:49 +00:00