ƒ²n159182 191 228 130 118 117 228 140 533 145 243 370 165 433 158 179 158 179 285 537 319 193 570 212 148 271 165 321 396 349 244 347 212 158 130 260 522 398 298 134 208 268 253 117 150 187 251 307 177 181 238 479 199 122 187 141 202 227 886 124 307 272 140 142 297 115 126 245 2445 241 187 184 135 146 173 277 284 436 176 452 280 354 239 370 587 312 186 392 427 2484 312 406 346 304 208 246 241 353 219 407 405 128 110 265 293 959 237 177 136 262 237 188 133 177 180 194 136 206 334 147 114 215 133 303 239 981 148 220 322 183 184 784 545 164 164 170 208 208 219 122 188 186 243 128 133 175 646 171 204 150 662 153 229 377 336 414 171 122 248 149 264 145 141 224 248 694 209 199 150 493 164 197 138 154 152 145 321 252 127 215 361 244 148 372 240 160 1042 272 290 545 230 193 189 K 10 svn:author V 3 jhb K 8 svn:date V 27 2006-06-02T20:35:39.000000Z K 7 svn:log V 135 Conditionally acquire Giant in netgraph callouts to honor mpsafenet=0. Reported by: sekes MFC after: 1 week END K 10 svn:author V 3 sam K 8 svn:date V 27 2006-06-02T23:14:40.000000Z K 7 svn:log V 38 add missed calls to bpf_peers_present END K 10 svn:author V 7 davidxu K 8 svn:date V 27 2006-06-03T00:19:40.000000Z K 7 svn:log V 22 Remove unused member. END K 10 svn:author V 6 scottl K 8 svn:date V 27 2006-06-03T01:52:11.000000Z K 7 svn:log V 22 Remove stale entries. END K 10 svn:author V 4 csjp K 8 svn:date V 27 2006-06-03T06:37:00.000000Z K 7 svn:log V 134 Make sure we don't try to dereference the the if_bpf pointer when bpf has not been compiled into the the kernel. Submitted by: benno END K 10 svn:author V 6 mjacob K 8 svn:date V 27 2006-06-03T07:19:44.000000Z K 7 svn:log V 45 allow this to compile cleanly under RELENG_4 END K 10 svn:author V 5 krion K 8 svn:date V 27 2006-06-03T07:20:17.000000Z K 7 svn:log V 438 MFC: process.c: 1.40 date: 2006/05/27 19:32:28; author: krion; state: Exp; lines: +1 -2 Fix using "P" command on empty pattern space. If the "P" command is used once on a non-empty pattern space and then again on an empty pattern space, the second usage restores the pattern space length to the length that it had when the first "P" was used. PR: bin/96052 Submitted by: Andrey Zholos END K 10 svn:author V 6 mjacob K 8 svn:date V 27 2006-06-03T07:21:09.000000Z K 7 svn:log V 50 MFC: allow this to compile cleanly under RELENG_4 END K 10 svn:author V 7 iedowse K 8 svn:date V 27 2006-06-03T10:37:42.000000Z K 7 svn:log V 146 Allow zero-length read/write operations to get through to the hardware. Also set both the read and write timeouts from the USB_SET_TIMEOUT ioctl. END K 10 svn:author V 7 stefanf K 8 svn:date V 27 2006-06-03T15:38:08.000000Z K 7 svn:log V 273 MFC: - POSIX special built-ins (builtin.defs 1.19, main.c 1.28, mkbuiltins 1.16, eval.c 1.51, exec.c 1.29, exec.h 1.15, options.c 1.25) - Fix el_gets() buffer handling (input.c 1.23). - Sort 'set' output (var.c 1.31). - Document that '#' starts a comment (sh.1 1.118). END K 10 svn:author V 4 csjp K 8 svn:date V 27 2006-06-03T18:16:54.000000Z K 7 svn:log V 72 Temporarily include files so that our macro checks do something useful. END K 10 svn:author V 4 csjp K 8 svn:date V 27 2006-06-03T18:48:14.000000Z K 7 svn:log V 339 Back out previous two commits, this caused some problems in the namespace resulting in some build failures. Instead, to fix the problem of bpf not being present, check the pointer before dereferencing it. This is a temporary bandaid until we can decide on how we want to handle the bpf code not being present. This will be fixed shortly. END K 10 svn:author V 3 imp K 8 svn:date V 27 2006-06-03T18:57:28.000000Z K 7 svn:log V 66 Succeed for writing bus value... nobody that calls must care :-( END K 10 svn:author V 3 imp K 8 svn:date V 27 2006-06-03T18:58:48.000000Z K 7 svn:log V 87 Fix a couple printf's to be properly terminated. Use a better name for the cbb thread. END K 10 svn:author V 3 imp K 8 svn:date V 27 2006-06-03T19:07:16.000000Z K 7 svn:log V 66 The interrupt routine is pci specific. Move it into pccbb_pci.c. END K 10 svn:author V 3 imp K 8 svn:date V 27 2006-06-03T19:16:45.000000Z K 7 svn:log V 87 Move shutdown, and pci specific methods into pccbb_pci.c. Many more are needed still. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-03T19:29:26.000000Z K 7 svn:log V 188 Acquire udbinfo lock after call to soreserve() rather than before, as it is not required. This simplifies error-handling, and reduces the time that this lock is held. MFC after: 1 month END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-03T19:37:08.000000Z K 7 svn:log V 440 When entering a timer on a tcpcb, don't continue processing if it has been dropped. This prevents a bug introduced during the socket/pcb refcounting work from occuring, in which occasionally the retransmit timer may fire after a connection has been reset, resulting in the resulting R|A TCP packet having a source port of 0, as the port reservation has been released. While here, fixing up some RUNLOCK->WUNLOCK bugs. MFC after: 1 month END K 10 svn:author V 6 obrien K 8 svn:date V 27 2006-06-03T20:34:56.000000Z K 7 svn:log V 223 Increase the field widths of flt (total number of page faults), fr (pages freed), & cs (CPU context switch rate). 'vmstat 1' output is now lined up for today's typical machines vs. a VAX. [tested my modest 1.6ghz laptop] END K 10 svn:author V 3 jhb K 8 svn:date V 27 2006-06-03T20:37:56.000000Z K 7 svn:log V 100 Use PCI bus accessors rather than reading config registers directly to get the subvendor device id. END K 10 svn:author V 3 jhb K 8 svn:date V 27 2006-06-03T20:41:55.000000Z K 7 svn:log V 477 - Switch on the full 32-bit device ID to avoid collisions between the vendor-specific device ids across vendors. - Include the revision in the dc_devs[] array instead of special casing the revid handling in dc_devtype(). - Use PCI bus accessors to read registers instead of pci_read_config() where possible. - Use an 8-bit write to update the latency timer. - Use PCIR_xxx constants and remove unused DC_xxx related to standard PCI config registers. MFC after: 1 week END K 10 svn:author V 3 jhb K 8 svn:date V 27 2006-06-03T20:44:01.000000Z K 7 svn:log V 119 Style fix to be more like _mtx_lock_sleep(): use 'while (!foo) { ... }' instead of 'for (;;) { if (foo) break; ... }'. END K 10 svn:author V 3 jhb K 8 svn:date V 27 2006-06-03T20:45:00.000000Z K 7 svn:log V 56 Simplify mtx_owner() so it only reads m->mtx_lock once. END K 10 svn:author V 3 jhb K 8 svn:date V 27 2006-06-03T20:49:44.000000Z K 7 svn:log V 178 In the case of reentering the debugger due to an attempt to perform a context switch while in the debugger, reenter the debugger sooner before performing any statistics updates. END K 10 svn:author V 3 imp K 8 svn:date V 27 2006-06-03T21:05:36.000000Z K 7 svn:log V 73 Since we turn off the interrupts, we don't need to disestablish our ISR. END K 10 svn:author V 3 imp K 8 svn:date V 27 2006-06-03T21:10:50.000000Z K 7 svn:log V 228 We don't have a ISA specific shutdown routine at this time, so remove it. We just moved it to be pci specific, so this was causing compile problems (linking problems, so I didn't notice since I unwisely just built the module). END K 10 svn:author V 3 jhb K 8 svn:date V 27 2006-06-03T21:11:33.000000Z K 7 svn:log V 303 Bah, fix fat finger in last. Invert the ~ on MTX_FLAGMASK as it's non-intuitive for the ~ to be built into the mask. All the users now explicitly ~ the mask. In addition, add MTX_UNOWNED to the mask even though it technically isn't a flag. This should unbreak mtx_owner(). Quickly spotted by: kris END K 10 svn:author V 7 rodrigc K 8 svn:date V 27 2006-06-03T21:20:37.000000Z K 7 svn:log V 252 Check the sectorsize of the underlying disk before trying to bread() the UFS superblock. Should eliminate crashes when trying to do: mount -t ufs on an audio CD. PR: kern/85893 Reported by: Russell Francis MFC after: 1 week END K 10 svn:author V 7 rodrigc K 8 svn:date V 27 2006-06-03T21:47:11.000000Z K 7 svn:log V 147 MFC: 1.207: Add "errmsg" to list of global mount options. 1.225: Add "update" mount option to global_opts array, for use with vfs_filteropt(). END K 10 svn:author V 5 wilko K 8 svn:date V 27 2006-06-03T23:10:46.000000Z K 7 svn:log V 252 Testing has shown that the stability problems (panic tracebacks showing lockmgr) encountered with "make -jX release" for X > 1 and running on SMP hardware are gone once PREEMPTION is disabled. Better ideas on fixing the problem are more than welcome. END K 10 svn:author V 4 kris K 8 svn:date V 27 2006-06-03T23:20:45.000000Z K 7 svn:log V 118 Strengthen wording; the KTR_ENTRIES value *must* be a power of two since the code depends on this. MFC after: 1 week END K 10 svn:author V 4 kris K 8 svn:date V 27 2006-06-03T23:30:16.000000Z K 7 svn:log V 65 Note that KTR_ENTRIES must be a power of two. MFC after: 1 week END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-03T23:39:13.000000Z K 7 svn:log V 38 Document more bits. Reviewed by: brd END K 10 svn:author V 3 gnn K 8 svn:date V 27 2006-06-04T03:11:09.000000Z K 7 svn:log V 167 Extend the notdef #ifdef to cover the packet copy as there is no point in doing that if we're not doing the rest of the work. Submitted by: thompsa MFC after: 1 week END K 10 svn:author V 5 dougb K 8 svn:date V 27 2006-06-04T06:38:00.000000Z K 7 svn:log V 427 If NO_BIND_MTREE is set, we don't have anywhere to install the namedb files to, so don't try. The PR indicates that NO_BIND_NAMED would also trigger this problem, but I was unable to reproduce it. This is going directly to RELENG_6 because testing shows that HEAD is not affected by this issue, likely due to the renovation of the make knobs in that branch. PR: misc/97188 Submitted by: Peter Losher END K 10 svn:author V 3 njl K 8 svn:date V 27 2006-06-04T08:04:19.000000Z K 7 svn:log V 305 Clean up many of the debugging messages and move them under bootverbose. Move the code for printing timer statistics into a test function instead of an ifdef (accessible via the debug.acpi.hpet_test tunable). Also use defines for register offsets instead of magic values. Courtesy of: slow flight to HK END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-04T09:31:34.000000Z K 7 svn:log V 201 Push acquisition of pcbinfo lock out of tcp_usr_attach() into tcp_attach() after the call to soreserve(), as it doesn't require the global lock. Rearrange inpcb locking here also. MFC after: 1 month END K 10 svn:author V 5 maxim K 8 svn:date V 27 2006-06-04T10:19:34.000000Z K 7 svn:log V 40 MFC rev. 1.257: add missed error check. END K 10 svn:author V 5 maxim K 8 svn:date V 27 2006-06-04T10:23:08.000000Z K 7 svn:log V 113 MFC rev. 1.31 du.1 and rev. 1.39 du.c: implement "-n" flag, ignore files and directories with "nodump" flag set. END K 10 svn:author V 5 maxim K 8 svn:date V 27 2006-06-04T10:28:56.000000Z K 7 svn:log V 173 MFC getent(1) import: a program retrieves and displays entries from the administrative database specified by database, using the lookup order specified in nsswitch.conf(5). END K 10 svn:author V 5 maxim K 8 svn:date V 27 2006-06-04T10:48:06.000000Z K 7 svn:log V 158 Sync with HEAD: take an account a media sectorsize for medium and bigsize calculation; -r and -w keys to load and save a worklist; add man page; amd64 fixes. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T12:15:59.000000Z K 7 svn:log V 25 Kill an unused argument. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T13:45:04.000000Z K 7 svn:log V 58 Don't forget to destroy the sc_freeqlock mutex on detach. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T14:13:17.000000Z K 7 svn:log V 95 Add support for the CRD_F_KEY_EXPLICIT flag for both encryption and authentication operations. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T14:14:35.000000Z K 7 svn:log V 158 Add support for the CRD_F_KEY_EXPLICIT flag for both encryption and authentication operations. Unfortunately I've no hardware, so I only compiled-tested it. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T14:20:47.000000Z K 7 svn:log V 214 - Add defines with hash length for each hash algorithm. - Add defines with block length for each HMAC algorithm. - Add AES_BLOCK_LEN define which is an alias for RIJNDAEL128_BLOCK_LEN. - Add NULL_BLOCK_LEN define. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T14:25:16.000000Z K 7 svn:log V 85 Rename AALG_MAX_RESULT_LEN to HASH_MAX_LEN to look more constent with other defines. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T14:29:42.000000Z K 7 svn:log V 89 Rename HMAC_BLOCK_MAXLEN to HMAC_MAX_BLOCK_LEN to be consistent with EALG_MAX_BLOCK_LEN. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T14:36:42.000000Z K 7 svn:log V 145 - Use define of an algorithm with the biggest block length to describe EALG_MAX_BLOCK_LEN instead of hardcoded value. - Kill an unused define. END K 10 svn:author V 7 iedowse K 8 svn:date V 27 2006-06-04T14:42:38.000000Z K 7 svn:log V 382 Add a sleep lock that protects access to sequences of blocking axe_cmd() calls. Without this the device can get confused if multiple threads attempt these operations concurrently. The problem was easily reproducible by running "ifconfig axe0" in a loop because eventually it would conflict with axe_tick_task(). A similar approach is probably required in all USB ethernet drivers. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T14:49:34.000000Z K 7 svn:log V 106 - Remove HMAC_BLOCK_LEN, it serves no purpose. - Use defines of used algorithm instead of HMAC_BLOCK_LEN. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T15:00:52.000000Z K 7 svn:log V 30 Use defines from cryptodev.h. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T15:10:12.000000Z K 7 svn:log V 95 Move COPYDATA() and COPYBACK() macros to cryptodev.h, they will be used in padlock(4) as well. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T15:11:59.000000Z K 7 svn:log V 49 Use newly added defines instead of magic values. END K 10 svn:author V 3 pav K 8 svn:date V 27 2006-06-04T15:39:19.000000Z K 7 svn:log V 109 - Fix markup PR: docs/98471 Submitted by: Tsurutani Naoki MFC after: 1 day END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T19:32:32.000000Z K 7 svn:log V 134 Change '#if INET' and '#if INET6' to '#ifdef INET' and '#ifdef INET6'. This unbreaks compiling a kernel with FAST_IPSEC and no INET6. END K 10 svn:author V 6 marcel K 8 svn:date V 27 2006-06-04T20:26:13.000000Z K 7 svn:log V 790 Fix unaligned memory accesses on Alpha and possible other platforms. By using a pointer to struct dos_partition, we implicitly tell the compiler that the pointer is 4-bytes aligned, even though we know that's not the case. The fact that we only dereference the pointer to access a byte-wide field (field dp_ptyp) is not a guarantee that the compiler will in fact use a byte-wide load. On some platforms it's more efficient to use long word or quad word loads and use bit-shifting and bit-masking to get the intended byte. On those platforms an misaligned load will be the result. The fix is to use byte-wide pointer arithmetic based on sizeof() and offsetof() to avoid invalid casts which avoids that the compiler makes invalid assumptions. Backtrace provided by: wilko@ MFC after: 1 week END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T22:06:17.000000Z K 7 svn:log V 32 Add regression tests for IPsec. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T22:12:08.000000Z K 7 svn:log V 214 Prefer hardware crypto over software crypto. Before the change if a hardware crypto driver was loaded after the software crypto driver, calling crypto_newsession() with hard=0, will always choose software crypto. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T22:15:13.000000Z K 7 svn:log V 179 - Replace COPYDATA() and COPYBACK() macros with crypto_copydata() and crypto_copyback() functions. - Add crypto_apply() function. This will allow for more code simplification. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-04T22:17:25.000000Z K 7 svn:log V 48 Use newly added functions to simplify the code. END K 10 svn:author V 6 obrien K 8 svn:date V 27 2006-06-05T03:47:14.000000Z K 7 svn:log V 47 Use an option form better matching the manual. END K 10 svn:author V 3 alc K 8 svn:date V 27 2006-06-05T06:08:21.000000Z K 7 svn:log V 204 MFamd64 Eliminate unnecessary, recursive acquisitions and releases of the page queues lock by free_pv_entry() and pmap_remove_pages(). Reduce the scope of the page queues lock in pmap_remove_pages(). END K 10 svn:author V 3 pav K 8 svn:date V 27 2006-06-05T08:14:48.000000Z K 7 svn:log V 23 - MFC 1.20: Fix markup END K 10 svn:author V 7 delphij K 8 svn:date V 27 2006-06-05T08:51:14.000000Z K 7 svn:log V 30 Include strings.h for bzero() END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T10:06:51.000000Z K 7 svn:log V 148 Add audit.h to mkioctls inclusion list: audit pipe ioctls need access to the audit types. Submitted by: wsalamon Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T10:52:12.000000Z K 7 svn:log V 2347 Vendor branch import of TrustedBSD OpenBSM 1.0 alpha 6: - Use AU_TO_WRITE and AU_NO_TO_WRITE for the 'keep' argument to au_close(); previously we used hard-coded 0 and 1 values. - Add man page for au_open(), au_write(), au_close(), and au_close_buffer(). - Support a more complete range of data types for the arbitrary data token: add AUR_CHAR (alias to AUR_BYTE), remove AUR_LONG, add AUR_INT32 (alias to AUR_INT), add AUR_INT64. - Add au_close_token(), which allows writing a single token_t to a memory buffer. Not likely to be used much by applications, but useful for writing test tools. - Modify au_to_file() so that it accepts a timeval in user space, not just kernel -- this is not a Solaris BSM API so can be modified without causing compatibility issues. - Define a new API, au_to_header32_tm(), which adds a struct timeval argument to the ordinary au_to_header32(), which is now implemented by wrapping au_to_header32_tm() and calling gettimeofday(). #ifndef KERNEL the APIs that invoke gettimeofday(), rather than having a variable definition. Don't try to retrieve time zone information using gettimeofday(), as it's not needed, and introduces possible failure modes. - Don't perform byte order transformations on the addr/machine fields of the terminal ID that appears in the process32/subject32 tokens. These are assumed to be IP addresses, and as such, to be in network byte order. - Universally, APIs now assume that IP addresses and ports are provided in network byte order. APIs now generally provide these types in network byte order when decoding. - Beginnings of an OpenBSM test framework can now be found in openbsm/test. This code is not built or installed by default. - auditd now assigns more appropriate syslog levels to its debugging and error information. - Support for audit filters introduced: audit filters are dynamically loaded shared objects that run in the context of a new daemon, auditfilterd. The daemon reads from an audit pipe and feeds both BSM and parsed versions of records to shared objects using a module API. This will provide a framework for the writing of intrusion detection services. - New utility API, audit_submit(), added to capture common elements of audit record submission for many applications. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T10:52:12.000000Z K 7 svn:log V 144 This commit was generated by cvs2svn to compensate for changes in r159248, which included commits to RCS files with non-trunk default branches. END K 10 svn:author V 7 cvs2svn K 8 svn:date V 27 2006-06-05T10:52:13.000000Z K 7 svn:log V 91 This commit was manufactured by cvs2svn to create tag 'openbsm-vendor-OPENBSM_1_0_ALPHA_6'. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T11:06:32.000000Z K 7 svn:log V 88 Regenerate config.h from OpenBSM 1.0 alpha 6 import. Obtained from: TrustedBSD Project END K 10 svn:author V 4 nyan K 8 svn:date V 27 2006-06-05T11:53:36.000000Z K 7 svn:log V 42 MFi386: revisions 1.627, 1.628 and 1.629. END K 10 svn:author V 4 nyan K 8 svn:date V 27 2006-06-05T11:55:20.000000Z K 7 svn:log V 53 Add Fn+F7 hotkey (suspend) support. Tested by: nork END K 10 svn:author V 7 iedowse K 8 svn:date V 27 2006-06-05T11:59:07.000000Z K 7 svn:log V 77 MFC: add the Tripp-Lite U209-000-R serial adapter PR: usb/78543, usb/93347 END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T12:53:44.000000Z K 7 svn:log V 180 Add audit_submit.3 to the set of man pages built and installed with libbsm. This interface is new as of OpenBSM 1.0 alpha 6. Submitted by: csjp Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T12:55:45.000000Z K 7 svn:log V 187 Merge OpenBSM 1.0 alpha 6 changes to bsm/audit.h into src/sys: respell statistics variables. Submitted by: Martin Fong Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T13:00:52.000000Z K 7 svn:log V 339 Merge OpenBSM 1.0 alpha 6 version of audit_record.h to src/sys: - Cleanup of AUR_ data types. - Comment fixes. - au_close_token() definition. - Break out of kernel vs. user space token interfaces for headers. Note: this may briefly break the kernel build until other kernel files are updated to match. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T13:02:34.000000Z K 7 svn:log V 80 Audit path passed to the acct() system call. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T13:13:02.000000Z K 7 svn:log V 355 Merge OpenBSM 1.0 alpha 6 changes for BSM token creation to src/sys/security/audit: - Clarify and clean up AUR_ types to match Solaris. - Clean up use of host vs. network byte order for IP addresses. - Remove combined user/kernel implementations of some token creation calls, such as au_to_file(), header calls, etc. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T13:34:23.000000Z K 7 svn:log V 183 Audit command, uid arguments for quotactl(). Audit the mode argument to mkfifo(). Audit the target path passed to symlink(). Submitted by: wsalamon Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T13:43:57.000000Z K 7 svn:log V 257 Rename audit_cv to audit_worker_cv, as it wakes up the audit worker. Rename audit_commit_cv to audit_watermark_cv, since it is there to wake up threads waiting on hitting the low watermark. Describe properly in comment. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T13:45:05.000000Z K 7 svn:log V 142 Use struct kaudit_queue instead of a hand-crafted queue type for audit records in the audit_worker thread. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T13:46:55.000000Z K 7 svn:log V 273 Assert audit mtx in audit_worker_drain(). Break out logic to call audit_record_write() and handle error conditions into audit_worker_process_record(). This will be the future home of some logic now present in audit_record_write() also. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T13:50:02.000000Z K 7 svn:log V 490 Pull BSM conversion logic out of audit_record_write(), as well as knowledge of user vs. kernel audit records into audit_worker_process_record(). This largely confines vnode knowledge to audit_record_write(), but avoids that logic knowing about BSM as opposed to byte streams. This will allow us to improve our ability to support real-time audit stream processing by audit pipe consumers while auditing is disabled, but this support is not yet complete. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T14:09:59.000000Z K 7 svn:log V 215 No longer unconditionally drain the audit record queue if there is not an active audit trail: instead, continue to iterate through each record in case an audit pipe is interested. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T14:11:28.000000Z K 7 svn:log V 90 Shorten audit record zone name. Perforce change: 93598 Obtained from: TrustedBSD Project END K 10 svn:author V 7 iedowse K 8 svn:date V 27 2006-06-05T14:44:39.000000Z K 7 svn:log V 295 Fix a number of cases where ugen would panic, especially when the device went away while open or if you tried to change the config number while devices were open. Based on the patch from the PR with a number of changes as discussed with the submitter. PR: usb/97271 Submitted by: Anish Mistry END K 10 svn:author V 3 kib K 8 svn:date V 27 2006-06-05T14:48:02.000000Z K 7 svn:log V 334 Temporary workaround to prevent leak of Giant from nfsd when calling lookup(). Reviewed by: tegge Tested by: "Arno J. Klaassen" , "Rong-en Fan" , Dmitriy Kirhlarov , Dmitry Pryanishnikov MFC after: 1 week Approved by: kan, pjd (mentors) END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T14:48:17.000000Z K 7 svn:log V 2386 Introduce support for per-audit pipe preselection independent from the global audit trail configuration. This allows applications consuming audit trails to specify parameters for which audit records are of interest, including selecting records not required by the global trail. Allowing application interest specification without changing the global configuration allows intrusion detection systems to run without interfering with global auditing or each other (if multiple are present). To implement this: - Kernel audit records now carry a flag to indicate whether they have been selected by the global trail or by the audit pipe subsystem, set during record commit, so that this information is available after BSM conversion when delivering the BSM to the trail and audit pipes in the audit worker thread asynchronously. Preselection by either record target will cause the record to be kept. - Similar changes to preselection when the audit record is created when the system call is entering: consult both the global trail and pipes. - au_preselect() now accepts the class in order to avoid repeatedly looking up the mask for each preselection test. - Define a series of ioctls that allow applications to specify whether they want to track the global trail, or program their own preselection parameters: they may specify their own flags and naflags masks, similar to the global masks of the same name, as well as a set of per-auid masks. They also set a per-pipe mode specifying whether they track the global trail, or user their own -- the door is left open for future additional modes. A new ioctl is defined to allow a user process to flush the current audit pipe queue, which can be used after reprogramming pre-selection to make sure that only records of interest are received in future reads. - Audit pipe data structures are extended to hold the additional fields necessary to support preselection. By default, audit pipes track the global trail, so "praudit /dev/auditpipe" will track the global audit trail even though praudit doesn't program the audit pipe selection model. - Comment about the complexities of potentially adding partial read support to audit pipes. By using a set of ioctls, applications can select which records are of interest, and toggle the preselection mode. Obtained from: TrustedBSD Project END K 10 svn:author V 3 kib K 8 svn:date V 27 2006-06-05T14:59:33.000000Z K 7 svn:log V 219 Replace absolute addressing in the call instructions with position-independend calls. This eliminates TEXTREL from libc, making its text segment relocatable. PR: i386/85242 Approved by: kan (mentor) MFC after: 1 month END K 10 svn:author V 6 marius K 8 svn:date V 27 2006-06-05T15:14:14.000000Z K 7 svn:log V 310 Revert the part of rev. 1.3 which changed the software style to be set to ILACC rather than PCnet-PCI as VMware doesn't implement ILACC compatibility, resulting in the VMware virtual machine to crash if enabled. Add a comment regarding usage of ILACC vs. PCnet-PCI mode. Reported and tested by: gnn, wsalamon END K 10 svn:author V 3 njl K 8 svn:date V 27 2006-06-05T15:19:59.000000Z K 7 svn:log V 253 MFC 1.220: Add support for reset_register rebooting. Note that this is not the exact right place for this code since it runs a little earlier than the normal reset SYSINIT. However, it appears to work fine and can be backed out if it causes problems. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T15:26:09.000000Z K 7 svn:log V 207 Break out description of the audit pipe facility from audit.4 into a new man page, auditpipe.4, which describes the behavior of audit pipes, the ioctls, preselection, etc. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T15:32:07.000000Z K 7 svn:log V 111 Audit some arguments to nmount(), mount(), umount(). Submitted by: wsalamon Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T15:38:12.000000Z K 7 svn:log V 149 Consistently use audit_free() to free records, rather than directly invoking uma_zfree(). Perforce change: 96652 Obtained from: TrustedBSD Project END K 10 svn:author V 3 yar K 8 svn:date V 27 2006-06-05T15:50:34.000000Z K 7 svn:log V 148 Fix compilation of ftpcmd.y without -DINET6. Respect MK_INET6_SUPPORT in Makefile. Requested by: Attila Nagy MFC after: 1 week END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T16:12:00.000000Z K 7 svn:log V 256 When generating the process token, need to check whether the process was sucessfully audited. Otherwise, generate the PID token. This change covers the pid < 0 cases, and pid lookup failure cases. Submitted by: wsalamon Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T16:14:49.000000Z K 7 svn:log V 122 When generating BSM tokens for mkfifo(), include mode argument. Submitted by: wsalamon Obtained from: TrustedBSD Project END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-05T16:22:04.000000Z K 7 svn:log V 314 - Pretend to accelerate various HMAC algorithms, so padlock(4) can be used with fast_ipsec(4) and geli(8) authentication (comming soon). If consumer requests only for HMAC algorithm (without encryption), return EINVAL. - Add support for the CRD_F_KEY_EXPLICIT flag, for both encryption and authentication. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-05T16:24:31.000000Z K 7 svn:log V 312 - Document that padlock(4) pretends to accelerate HMAC algorithms. - Remove "device cryptodev" as it is not needed for compiling padlock(4) into the kernel. Actually it is not advisable, because padlock instructions can be used directly from userland, so passing the work through the kernel is a bad idea. END K 10 svn:author V 5 brian K 8 svn:date V 27 2006-06-05T16:25:45.000000Z K 7 svn:log V 34 MFC: Add missing -s documentation END K 10 svn:author V 4 joel K 8 svn:date V 27 2006-06-05T16:31:57.000000Z K 7 svn:log V 17 Fix minor typos. END K 10 svn:author V 7 ghelmer K 8 svn:date V 27 2006-06-05T16:41:27.000000Z K 7 svn:log V 168 Upon further review, DES prefers this change over that in revision 1.13 to resolve the directory access problem for processes with P_SUGID flag set. Suggested by: des END K 10 svn:author V 8 kensmith K 8 svn:date V 27 2006-06-05T17:05:09.000000Z K 7 svn:log V 195 MFC v1.898: > date: 2006/01/30 14:24:31; author: kensmith; state: Exp; lines: +1 -0 > Enable splitting up the MFSROOT floppy on amd64, the contents now overflow > one floppy's worth of space. END K 10 svn:author V 3 sam K 8 svn:date V 27 2006-06-05T17:43:51.000000Z K 7 svn:log V 866 Version 0.9.17.2: o define HAL_SOFTC, HAL_BUS_TAG, and HAL_BUS_HANDLE to be machine independent; this fixes portability issues with bsd systems o add ah_disable api for turning off operation of both MAC and PHY o add ah_getAntennaSwitch and ah_setAntennaSwitch api's for better control of antenna usage and diversity o add ah_setAckCTSRate and ah_setAckCTSRate for controlling tx rate of h/w generated frames o add ah_setBeaconTimers api for simpler setting of the beacon timer registers o remove ah_waitForBeaconDone api o add HAL_TXDESC_DURENA flag to enable h/w duration setting in tx descriptor o correct documentation of min/max tx power units (.5 dBm) o switch arm, mips, and powerpc builds to use functions for register read/write operations o fix sparc builds to not reference %g2 and %g3 registers o add public builds for SoC's MFC after: 1 month END K 10 svn:author V 3 sam K 8 svn:date V 27 2006-06-05T17:43:51.000000Z K 7 svn:log V 144 This commit was generated by cvs2svn to compensate for changes in r159285, which included commits to RCS files with non-trunk default branches. END K 10 svn:author V 7 cvs2svn K 8 svn:date V 27 2006-06-05T17:43:52.000000Z K 7 svn:log V 81 This commit was manufactured by cvs2svn to create tag 'ath-vendor-sys-V0_9_17_2'. END K 10 svn:author V 3 sam K 8 svn:date V 27 2006-06-05T17:46:41.000000Z K 7 svn:log V 44 resolve merge conflicts MFC after: 1 month END K 10 svn:author V 6 marius K 8 svn:date V 27 2006-06-05T17:48:54.000000Z K 7 svn:log V 166 - Declare the PnP map const. - Add devices found in V210 to the PnP map. - Don't leak memory if we didn't find a match for a node in the PnP map. MFC after: 2 weeks END K 10 svn:author V 3 sam K 8 svn:date V 27 2006-06-05T17:51:20.000000Z K 7 svn:log V 144 move hal bus+tag externalization to the bus glue code where it belongs; this is a noop on all current freebsd architectures MFC after: 1 month END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2006-06-05T17:59:46.000000Z K 7 svn:log V 91 Add altq(4) support. Reviewed by: mlaier Approved by: rwatson (mentor) MFC after: 2 weeks END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2006-06-05T18:02:36.000000Z K 7 svn:log V 36 my(4) provides support now as well. END K 10 svn:author V 6 emaste K 8 svn:date V 27 2006-06-05T18:21:29.000000Z K 7 svn:log V 82 Fix cut-n-pasteo: use the i386 version #define for i386 dumps, not the amd64 one. END K 10 svn:author V 7 delphij K 8 svn:date V 27 2006-06-05T18:22:13.000000Z K 7 svn:log V 84 - ANSIfy. - Remove two unnecessary casts. These changes would help gcc4 compile. END K 10 svn:author V 4 jkim K 8 svn:date V 27 2006-06-05T18:34:13.000000Z K 7 svn:log V 100 MFC: Move SiS 760 to where it belongs. PR: 98094 Submitted by: Mike M < mmcgus at yahoo dot com > END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2006-06-05T19:20:13.000000Z K 7 svn:log V 39 MFC: rev 1.17 Fix a formatting issue. END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2006-06-05T19:30:28.000000Z K 7 svn:log V 108 MFC: Convert to use a SYNPOSIS section that mentions kernel modules. Also add "device scbus" where needed. END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2006-06-05T19:31:57.000000Z K 7 svn:log V 236 MFC: rev. 1.23 Make this example more real world usable: When the manpage first appeared is not interesting, when the driver appeared is. Most people who use this example leave the manpage appearance date in and the driver date out. END K 10 svn:author V 6 mjacob K 8 svn:date V 27 2006-06-05T19:46:55.000000Z K 7 svn:log V 52 Just a very quick update to get *close* to reality. END K 10 svn:author V 5 maxim K 8 svn:date V 27 2006-06-05T19:55:44.000000Z K 7 svn:log V 20 o Add missed comma. END K 10 svn:author V 4 fjoe K 8 svn:date V 27 2006-06-05T20:06:29.000000Z K 7 svn:log V 121 Fix kernel panic in rt2661_tx_intr() if no frames has been sent. Obtained from: OpenBSD (sys/dev/ic/rt2661.c rev. 1.15) END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2006-06-05T20:29:31.000000Z K 7 svn:log V 36 Some mdoc and wording improvements. END K 10 svn:author V 3 alc K 8 svn:date V 27 2006-06-05T20:35:27.000000Z K 7 svn:log V 210 Introduce the function pmap_enter_object(). It maps a sequence of resident pages from the same object. Use it in vm_map_pmap_enter() to reduce the locking overhead of premapping objects. Reviewed by: tegge@ END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-05T21:13:22.000000Z K 7 svn:log V 146 Add g_duplicate_bio() function which does the same thing what g_clone_bio() is doing, but g_duplicate_bio() allocates new bio with M_WAITOK flag. END K 10 svn:author V 6 qingli K 8 svn:date V 27 2006-06-05T21:20:21.000000Z K 7 svn:log V 885 Assuming the interface has an address of x.x.x.195, a mask of 255.255.255.0, and a default route with gateway x.x.x.1. Now if the address mask is changed to something more specific, e.g., 255.255.255.128, then after the mask change the default gateway is no longer reachable. Since the default route is still present in the routing table, when the output code tries to resolve the address of the default gateway in function rt_check(), again, the default route will be returned by rtalloc1(). Because the lock is currently held on the rtentry structure, one more attempt to hold the lock will trigger a crash due to "lock recursed on non-recursive mutex ..." This is a general problem. The fix checks for the above condition so that an existing route entry is not mistaken for a new cloned route. Approriately, an ENETUNREACH error is returned back to the caller Approved by: andre END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-05T21:25:19.000000Z K 7 svn:log V 56 Make kern.geom.eli.overwrites sysctl a tunable as well. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-05T21:38:54.000000Z K 7 svn:log V 127 Implement data integrity verification (data authentication) for geli(8). Supported by: Wheel Sp. z o.o. (http://www.wheel.pl) END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-05T21:40:54.000000Z K 7 svn:log V 229 Userland bits of geli(8) data authentication. Now, encryption algorithm is given using '-e' option, not '-a'. The '-a' option is now used to specify authentication algorithm. Supported by: Wheel Sp. z o.o. (http://www.wheel.pl) END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-05T21:42:26.000000Z K 7 svn:log V 91 Connect new GELI files to the build. Supported by: Wheel Sp. z o.o. (http://www.wheel.pl) END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-05T21:43:51.000000Z K 7 svn:log V 92 Document geli(8) data authentication. Supported by: Wheel Sp. z o.o. (http://www.wheel.pl) END K 10 svn:author V 6 mjacob K 8 svn:date V 27 2006-06-05T22:22:14.000000Z K 7 svn:log V 688 Add PIM_SEQSCAN for HBA misc flags and code that understands what to do with it. This forces us to scan targets sequentially, not in parallel. The reason we might want to do this is that SPI negotiation might not work right at the SIM level if we try to do it in parallel. We *could* fix this for each SIM where this is broken, but it's a lot harder to do that when we can simply ask CAM to probe sequentially. If PIM_SEQSCAN is not set (default), the original behaviour for probing is unchanged. LUN probing is still done in parallel for each target in either case. While we're at it, clean up some resource leakage for error cases. Reviewed by: ken, scott, scsi@ MFC after: 1 week END K 10 svn:author V 6 mjacob K 8 svn:date V 27 2006-06-05T22:25:49.000000Z K 7 svn:log V 449 Do some source && comment cleanup. Clean out the abortive start to homegrown, per-mpt, Domain Validation. This should really be done at a higher level. Use the PIM_SEQSCAN flag for U320- this seems to correct cases of being unable to consistently negotiate U320 in the cases where I'd seen this before. Between this and other recent checkins, this driver is pretty close to being ready for MFC. Reviewed by: scottl, ken, scsi@ MFC after: 1 week END K 10 svn:author V 7 cvs2svn K 8 svn:date V 27 2006-06-05T22:25:50.000000Z K 7 svn:log V 68 This commit was manufactured by cvs2svn to create branch 'RELENG_4'. END K 10 svn:author V 7 cvs2svn K 8 svn:date V 27 2006-06-05T22:25:51.000000Z K 7 svn:log V 68 This commit was manufactured by cvs2svn to create branch 'RELENG_5'. END K 10 svn:author V 4 bmah K 8 svn:date V 27 2006-06-05T22:26:57.000000Z K 7 svn:log V 77 Delete a sentence related to merged features that doesn't apply to RELENG_*. END K 10 svn:author V 4 bmah K 8 svn:date V 27 2006-06-05T22:28:35.000000Z K 7 svn:log V 114 We shouldn't have any MFC markers on any codeline except for HEAD, so remove the entity definition from RELENG_6. END K 10 svn:author V 4 bmah K 8 svn:date V 27 2006-06-05T22:30:45.000000Z K 7 svn:log V 114 We shouldn't have any MFC markers on any codeline except for HEAD, so remove the entity definition from RELENG_5. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-05T22:36:12.000000Z K 7 svn:log V 122 Remove use of Giant around vn_open() in audit trail setup. Submitted by: jhb, wsalamon Obtained from: TrustedBSD Project END K 10 svn:author V 6 avatar K 8 svn:date V 27 2006-06-05T22:59:14.000000Z K 7 svn:log V 27 Fixing a typo in rev1.196. END K 10 svn:author V 6 avatar K 8 svn:date V 27 2006-06-05T23:06:03.000000Z K 7 svn:log V 93 Really fix the typo this time: it should be sc->sc_drvbpf to be verified, not ic->ic_drvbpf. END K 10 svn:author V 6 cognet K 8 svn:date V 27 2006-06-05T23:42:47.000000Z K 7 svn:log V 91 vm_page_alloc_contig() can sleep, so don't even think about using it in the M_NOWAIT case. END K 10 svn:author V 6 cognet K 8 svn:date V 27 2006-06-06T01:14:12.000000Z K 7 svn:log V 147 Make VERBOSE_INIT_ARM compile by fixing various printf formats, and add it as an option. Submitted by: Max N. Boyarov END K 10 svn:author V 3 alc K 8 svn:date V 27 2006-06-06T02:00:08.000000Z K 7 svn:log V 36 Add a stub for pmap_enter_object(). END K 10 svn:author V 3 alc K 8 svn:date V 27 2006-06-06T02:02:10.000000Z K 7 svn:log V 41 Correct a typo in the previous revision. END K 10 svn:author V 3 alc K 8 svn:date V 27 2006-06-06T04:32:20.000000Z K 7 svn:log V 83 Add partial pmap locking. Eliminate the unused allpmaps list. Tested by: cognet@ END K 10 svn:author V 7 delphij K 8 svn:date V 27 2006-06-06T05:01:12.000000Z K 7 svn:log V 549 Cleanups for mailwrapper(8): - K&R -> ANSI prototype [O] - Do not bother to do free right before exit() or execve() [O] - Remove some dead code in addarg() - Make additional parameters specified in mailer.conf(5) actually work and document the fact. [N] - Avoid using __progname but instead use getprogname() and setprogname() to provide more sensible messages. [O, N] - Update $OpenBSD$ and $NetBSD$ to reflect the fact that we have sync'ed with their code. - WARNS=6 Obtained from/Inspired by: OpenBSD [O], NetBSD [N] (partially) END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-06T06:44:19.000000Z K 7 svn:log V 79 - Update regression tests after recent changes. - Verify various sector sizes. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-06T06:46:51.000000Z K 7 svn:log V 111 Add regression tests for geli(8) authentication feature. Supported by: Wheel Sp. z o.o. (http://www.wheel.pl) END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-06T07:10:42.000000Z K 7 svn:log V 58 Remove section committed by mistake. It is not yet ready. END K 10 svn:author V 7 glebius K 8 svn:date V 27 2006-06-06T08:03:49.000000Z K 7 svn:log V 565 The procedure of raceless switching between polling mode and taskqueued interrupt mode is going to be quite complex. Since the polling mode is considered legacy feature for em(4) driver, the decision is made to make polling and new interrupt handler mutually exclusive, selected at compile time. If kernel is compiled with DEVICE_POLLING, the fast taskqueued interrupt handler code is disabled and the em_poll() and legacy em_intr() functions are enabled. Otherwise, legacy functions are disabled and only em_intr_fast() code is compiled. Discussed with: scottl END K 10 svn:author V 7 glebius K 8 svn:date V 27 2006-06-06T08:05:27.000000Z K 7 svn:log V 57 Use NET_CALLOUT_MPSAFE for netgraph callout initializer. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2006-06-06T08:43:27.000000Z K 7 svn:log V 132 Extract pointer value for mnt_stat from vp after the NULL check, not before. Coverity ID: 134394 Found with: Coverity Prevent (tm) END K 10 svn:author V 3 flz K 8 svn:date V 27 2006-06-06T09:47:09.000000Z K 7 svn:log V 284 MFC: - Fix amd startup when amd is installed from ports. - Add the according amd_program default value in defaults. src/etc/rc.d/amd: rev 1.16 -> 1.17 src/etc/defaults/rc.conf: rev 1.277 -> 1.278 PR: conf/82738 Submitted by: TAOKA Fumiyoshi END K 10 svn:author V 3 flz K 8 svn:date V 27 2006-06-06T10:35:55.000000Z K 7 svn:log V 243 MFC: - Harmless typo (s/overide/override/). - Sync rc.subr with NetBSD. - Merge some documentation bits. src/share/man/man8/rc.subr.8: rev 1.10 -> 1.11 src/etc/rc.subr: rev 1.49 -> 1.51, 1.55 -> 1.56 Obtained from: NetBSD END K 10 svn:author V 3 flz K 8 svn:date V 27 2006-06-06T11:17:09.000000Z K 7 svn:log V 321 MFC: - Add new ntpd_config variable so that people can override it in rc.conf. - Add default value in /etc/defaults/rc.conf. - Add documentation bits to rc.conf(5). src/etc/rc.d/ntpd: rev 1.12 -> 1.13 src/share/man/man5/rc.conf.5: rev 1.292 -> 1.293 src/etc/defaults/rc.conf: rev 1.280 -> 1.281 END K 10 svn:author V 7 glebius K 8 svn:date V 27 2006-06-06T11:21:08.000000Z K 7 svn:log V 75 Print pfsync interface status if either syncpeer or syncdev is configured. END K 10 svn:author V 7 davidxu K 8 svn:date V 27 2006-06-06T12:26:17.000000Z K 7 svn:log V 26 Make ke_rqindex unsigned. END K 10 svn:author V 7 glebius K 8 svn:date V 27 2006-06-06T12:35:53.000000Z K 7 svn:log V 151 - Note that the synchronisation interface needs to be up and have an IP address assigned. - Add "quick" keyword to pf.conf example. PR: docs/85209 END K 10 svn:author V 3 ume K 8 svn:date V 27 2006-06-06T12:55:58.000000Z K 7 svn:log V 57 Add `reload' which invalidates the cache for every user. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-06T13:32:26.000000Z K 7 svn:log V 171 Don't increase hst_obytes field twice - it is already done at the begining of the function. It was wrong anyway, because we also support uio's structures, not only mbufs. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-06T13:58:12.000000Z K 7 svn:log V 53 Handle errors in the same way it is done in safe(4). END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2006-06-06T14:02:13.000000Z K 7 svn:log V 44 Mdoc cleanup and some wording improvements. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-06T14:48:19.000000Z K 7 svn:log V 131 - Unbreak the build when geli is compiled into the kernel (on as module), by silencing unfounded compiler warning. Reported by: END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-06T14:50:34.000000Z K 7 svn:log V 155 Force commit as I forgot to document: - Don't initialize crp_olen, it should be set by the driver. - crp_ilen should contain length of the entier buffer. END K 10 svn:author V 3 flz K 8 svn:date V 27 2006-06-06T15:04:39.000000Z K 7 svn:log V 601 MFC: - Change the "jail_" prefix for internal script variables. This fixes an issue where some global jail_* variables were overriden in the script. [1] - Change "jid" to "jname" in rc.conf(5), since it's more a jail name than a jail id. [1] - Update examples and comments in defaults/rc.conf to advertise new variables and the fact that some of the jail-specific variables may be made jail-global. [2] src/share/man/man5/rc.conf.5: rev 1.293 -> 1.294 src/etc/rc.d/jail: rev 1.31 -> 1.32 src/etc/defaults/rc.conf: rev 1.282 -> 1.283 Reported by: pjd [1], clsung [2] END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-06T15:04:52.000000Z K 7 svn:log V 116 When DIAGNOSTIC is defined, verify if we don't free crypto requests from the crypto queue or from the return queue. END K 10 svn:author V 4 nyan K 8 svn:date V 27 2006-06-06T15:20:06.000000Z K 7 svn:log V 105 Use the acpi_event_sleep_button_sleep() function instead of the acpi_SetSleepState(). Submitted by: njl END K 10 svn:author V 3 ume K 8 svn:date V 27 2006-06-06T15:34:50.000000Z K 7 svn:log V 58 `flush' is appropriate than `reload'. Requested by: ceri END K 10 svn:author V 3 imp K 8 svn:date V 27 2006-06-06T16:24:54.000000Z K 7 svn:log V 400 Create a new target 'buildenvvars'. This target reports the build environment for cross building (the same one you'd get interactively in make buildenv). This cannot be a simple make -f Makefile.inc1 -V WMAKEENV because in PATH is not set correctly unless one takes a trip through the Makefile/Makefile.inc1 indirection, the logic of which is too large to reproduce outside of Makefiles. END K 10 svn:author V 4 emax K 8 svn:date V 27 2006-06-06T16:58:19.000000Z K 7 svn:log V 71 Fix an unwanted gcc4 warning. Submitted by: delphij MFC after: 3 days END K 10 svn:author V 7 trhodes K 8 svn:date V 27 2006-06-06T17:22:55.000000Z K 7 svn:log V 100 Sync to p4: o Add shutdown KEYWORD; o Remove PID check; o Stop auditd with '-t' o General cleanup. END K 10 svn:author V 3 alc K 8 svn:date V 27 2006-06-06T17:27:53.000000Z K 7 svn:log V 46 Add partial pmap locking. Tested by: cognet@ END K 10 svn:author V 3 imp K 8 svn:date V 27 2006-06-06T18:07:58.000000Z K 7 svn:log V 62 Also need to quote values so they can be passed on correctly. END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2006-06-06T19:03:51.000000Z K 7 svn:log V 55 Clarify and merge two sentences. Discussed with: pjd END K 10 svn:author V 3 kan K 8 svn:date V 27 2006-06-06T19:31:45.000000Z K 7 svn:log V 53 Garbage collect library we did not compile for ages. END K 10 svn:author V 6 marius K 8 svn:date V 27 2006-06-06T20:03:37.000000Z K 7 svn:log V 225 MFC: 1.61 Revert the (int *) -> (intptr_t *) conversion done as part of rev. 1.59 (MFC'ed in rev. 1.55.2.3) for IOCTLs where casting data to intptr_t * isn't the right thing to do, fixing tap(4) on big-endian LP64 machines. END K 10 svn:author V 6 marius K 8 svn:date V 27 2006-06-06T20:10:07.000000Z K 7 svn:log V 156 MFC: 1.8 For _Qp_{fge,fgt,fle,flt}() the SCD states that "Exceptions mimic fcmpeq", this means they should set the cmpe flag when calling __fpu_compare(). END K 10 svn:author V 6 cognet K 8 svn:date V 27 2006-06-06T20:47:59.000000Z K 7 svn:log V 32 Remove a bogus, useless, "i++". END K 10 svn:author V 6 cognet K 8 svn:date V 27 2006-06-06T21:06:57.000000Z K 7 svn:log V 119 Convert the last offender, the SA1110 port, to ARM32_NEW_VM_LAYOUT, and completely nuke the !ARM32_NEW_VM_LAYOUT case. END K 10 svn:author V 7 rodrigc K 8 svn:date V 27 2006-06-06T21:56:49.000000Z K 7 svn:log V 264 For network filesystems (NFS, samba, etc.), do not pass "export" nmount() parameter to try to delete an NFS export. It won't work, and will log a spurious warning to syslog. Tested by: Arno J. Klaassen MFC after: 3 days END K 10 svn:author V 3 pjd K 8 svn:date V 27 2006-06-06T22:06:24.000000Z K 7 svn:log V 151 Allow to use the old -a option to specify an encryption algorithm to use (for backward compatibility), but print a warning to inform about the change. END K 10 svn:author V 7 delphij K 8 svn:date V 27 2006-06-07T01:43:26.000000Z K 7 svn:log V 52 Use calloc() instead of zeroing the memory our own. END K 10 svn:author V 7 trhodes K 8 svn:date V 27 2006-06-07T03:33:48.000000Z K 7 svn:log V 275 Simply running ``make world'' will bomb unless you dig up the undocumented HISTORICAL_MAKE_WORLD variable and set it. Note it here so the blow up will not really be a surprise to people who read. Link the buildingworld chapter of our handbook in the README while I'm here. END K 10 svn:author V 7 trhodes K 8 svn:date V 27 2006-06-07T04:58:54.000000Z K 7 svn:log V 143 Add adding_user.8 to SEE ALSO, note that usernames may contain any character but not being with a hyphen, similar to adding_user.8. PR: 35732 END K 10 svn:author V 3 imp K 8 svn:date V 27 2006-06-07T05:36:10.000000Z K 7 svn:log V 68 Remove sa1_cache_clean_addr. It isn't needed. Submitted by: kevlo END K 10 svn:author V 7 yongari K 8 svn:date V 27 2006-06-07T09:05:20.000000Z K 7 svn:log V 945 Fix watchdog timeout errors seen on a few systems. SK-NET GENESIS document says reading SK_ISSR should stop generating further interrupts(Since we drop a driver lock before invoking ifp->if_input handler we should disable interrupts in ISR in order to protect integrity of softc from subsequent interrupts). But it seems that there is possibility of loosing interrupts between reading SK_ISSR and determining which interrupts are reported. To cope with the situation we continuously read SK_ISSR register until there are no interrupts. However, it seems that the above work around doesn't fix all cases. To protect watchdog handler from triggering false alarm add a work around code which try to reclaim pending Tx descriptors before resetting hardware. This should fix occasional watchdog timeout errors seen on this driver. Reported by: Frank Behrens Tested by: Frank Behrens END K 10 svn:author V 3 flz K 8 svn:date V 27 2006-06-07T10:20:57.000000Z K 7 svn:log V 179 Reflect latest changes in rc.subr wrt prefix/etcdir variables being set automatically by load_rc_config. With help from: ru (mdoc-fu) Reviewed by: brueffer Approved by: cperciva END K 10 svn:author V 7 glebius K 8 svn:date V 27 2006-06-07T10:26:51.000000Z K 7 svn:log V 193 Add section describing how ARP load balancing works and its limitations: - Can't load balance behind router - ARP balancing + pfsync probably won't work PR: kern/93829 Wording by: scottl END K 10 svn:author V 3 flz K 8 svn:date V 27 2006-06-07T10:33:36.000000Z K 7 svn:log V 452 MFC: - Set a two read-only variables (${prefix} and ${etcdir}). This is especially useful when using /etc/rc.d scripts with third-party software installed from ports. - Fix rc.d/sshd to work with openssh from ports using ${etcdir} instead of hardcoded /etc. - Reflect prefix/etcdir changes in rc.subr.8. src/etc/rc.d/sshd: rev 1.9 -> 1.10 src/etc/rc.subr: rev 1.51 -> 1.52 src/share/man/man8/rc.subr.8: rev 1.11 -> 1.12 END K 10 svn:author V 3 flz K 8 svn:date V 27 2006-06-07T10:35:33.000000Z K 7 svn:log V 137 MFC: - Fix rc.d/sshd test on kern.random.sys.seeded. src/etc/rc.d/sshd: rev 1.10 -> 1.11 PR: conf/94377 Submitted by: dwhite END K 10 svn:author V 6 cognet K 8 svn:date V 27 2006-06-07T11:28:17.000000Z K 7 svn:log V 98 Now that we use pmap_mapdev_boostrap(), we can get ride of the got_mmu hack. Submitted by: kevlo END K 10 svn:author V 7 glebius K 8 svn:date V 27 2006-06-07T12:26:23.000000Z K 7 svn:log V 93 Add device IDs for Linksys PCMPC200 Cardbus card. PR: kern/75582 Submitted by: Gary Palmer END