‚¤n168873 127 630 128 320 192 331 493 526 283 148 168 214 605 258 173 420 171 206 175 186 603 257 491 529 519 293 238 138 288 222 720 729 240 114 220 167 134 447 350 116 114 141 153 151 170 146 109 134 380 601 155 185 242 194 1012 119 224 419 171 538 142 717 606 155 119 211 179 309 152 151 159 323 967 205 160 820 196 663 204 769 156 213 620 470 421 182 156 446 526 147 328 252 200 130 328 236 182 368 379 222 205 164 223 106 278 334 163 206 174 158 164 151 622 185 235 353 234 242 210 176 176 210 242 144 113 142 212 174 K 10 svn:author V 6 scottl K 8 svn:date V 27 2007-04-19T18:53:52.000000Z K 7 svn:log V 534 Up until now, the free SCB pool received only a small initial allocation, and new SCBs were allocated on demand later if needed. This has two problems. First, allocating SCBs involves allocating contiguous memory, and if memory is exhausted then the VM will try to page out to satisfy the request, leading to recursion and deadlock. The second problem is that it can cause lock order reversals due to parts of the VM still being under Giant. Fix the problem be allocating the full pool at driver attach, when it is safe to do so. END K 10 svn:author V 6 scottl K 8 svn:date V 27 2007-04-19T22:18:15.000000Z K 7 svn:log V 33 Fix a leaked lock in dashutdown. END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-19T22:38:38.000000Z K 7 svn:log V 227 MFC recent small fixes: main.c 1.37: Kill a prototype for the defunct inplace_edit(). process.c 1.41: Make the comment for cspace() match reality. process.c 1.43: Put the MATCH() macro's value in parentheses for safety. END K 10 svn:author V 6 scottl K 8 svn:date V 27 2007-04-19T22:46:26.000000Z K 7 svn:log V 97 Inline cam_periph_lock|unlock to make debugging easier. Use more CAM_SIM_LOCK() more uniformly. END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-19T22:53:21.000000Z K 7 svn:log V 238 MFC rev 1.4: Add missing newline to correct failure of the regression test. According to IEEE Std 1003.1, 2004 "Whenever the pattern space is written to standard output or a named file, sed shall immediately follow it with a ." END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-19T23:04:51.000000Z K 7 svn:log V 400 MFC: Make the `c' function not forget to print the text in some cases. Add respective regression tests. 1.42 src/usr.bin/sed/process.c 1.12 src/tools/regression/usr.bin/sed/regress.sh 1.1 src/tools/regression/usr.bin/sed/regress.c0.out 1.1 src/tools/regression/usr.bin/sed/regress.c1.out 1.1 src/tools/regression/usr.bin/sed/regress.c2.out 1.1 src/tools/regression/usr.bin/sed/regress.c3.out END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-19T23:19:43.000000Z K 7 svn:log V 433 MFC: Don't forget to close the range if we branched over its end and had no chance to match it by the 2nd address precisely. Otherwise the unclosed range would bogusly extend to the end of stream. Add a regression test. Explain the decision in the `POSIX' file. 1.44 src/usr.bin/sed/process.c 1.2-1.4 src/usr.bin/sed/POSIX 1.13 src/tools/regression/usr.bin/sed/regress.sh 1.1 src/tools/regression/usr.bin/sed/regress.b2a.out END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-19T23:29:05.000000Z K 7 svn:log V 190 MFC 1.2-1.4: Explain the change in sed behaviour WRT jumping over the 2nd address. Add $FreeBSD$. (Forgot to cvs up -j this file when doing MFC for the respective change to the sed code.) END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-19T23:34:10.000000Z K 7 svn:log V 56 Eliminate gratuitous difference from HEAD (style only). END K 10 svn:author V 6 scottl K 8 svn:date V 27 2007-04-19T23:34:51.000000Z K 7 svn:log V 73 Retire the spl() markers. Add in some minor missed locking as a result. END K 10 svn:author V 5 ariff K 8 svn:date V 27 2007-04-20T01:28:51.000000Z K 7 svn:log V 119 Unbreak module / driver attach breakage. Both snd_envy24 and snd_envy24ht mistakenly rely on wrong snd_spicds version. END K 10 svn:author V 7 trhodes K 8 svn:date V 27 2007-04-20T01:47:05.000000Z K 7 svn:log V 508 In some cases, like whenever devfs file times are zero, the fix(aa) will not be applied to dev entries. This leaves us with file times like "Jan 1 1970." Work around this problem by replacing the tv_sec == 0 check with a <= 3600 check. It's doubtful anyone will be booting within an hour of the Epoch, let alone care about a few seconds worth of nonzero timestamps. It's a hackish work around, but it does work and I have not experienced any negatives in my testing. Discussed with: bde "Ok with me: phk END K 10 svn:author V 6 grehan K 8 svn:date V 27 2007-04-20T03:24:59.000000Z K 7 svn:log V 162 Add ofw bus methods to the ppc nexus driver. This will be used in future EFIKA platform support. PR: 111522 Submitted by: Andrew Turner, andrew at fubar geek nz END K 10 svn:author V 5 kmacy K 8 svn:date V 27 2007-04-20T05:06:02.000000Z K 7 svn:log V 79 Fix memory leak in m_collapse (CID 1843) Found by: Coverity Submitted by: jhb END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-20T05:12:48.000000Z K 7 svn:log V 322 Include a note in the sendmail 8.14.1 release note regarding the libmilter update. Unfortunately, this problem (the need to recompile filters) was found after the MFC. The release engineering team has asked for this instead of doing a full backout of sendmail 8.14 in the RELENG_[456] branches. Requested by: re (bmah) END K 10 svn:author V 5 kmacy K 8 svn:date V 27 2007-04-20T05:12:54.000000Z K 7 svn:log V 77 Eliminate CID 1842 by comparing against (type != EXT_MBUF) => refcnt != NULL END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-20T05:13:17.000000Z K 7 svn:log V 108 Include a note in the sendmail 8.14.1 release note regarding the libmilter update. Requested by: re (bmah) END K 10 svn:author V 5 kmacy K 8 svn:date V 27 2007-04-20T05:16:42.000000Z K 7 svn:log V 81 Free cluster if we fail to create the dmamap. Fixes CID 1829 Found by: Coverity END K 10 svn:author V 5 kmacy K 8 svn:date V 27 2007-04-20T05:45:46.000000Z K 7 svn:log V 92 Schedule the ithread on the same cpu as the interrupt Tested by: kmacy Submitted by: jeffr END K 10 svn:author V 4 fjoe K 8 svn:date V 27 2007-04-20T06:25:45.000000Z K 7 svn:log V 509 When remaking makefiles check that mtime has actually changed. This fixes infinite restart in the following case: Makefile: foo foo: bar do-something Unlike GNU make, BSD make considers "Makefile" node as remade even if "foo" is up-to-date and was not actually rebuilt. GNU make does not consider nodes without commands as remade if child nodes were not actually rebuilt. Most probably, more proper fix would be to bring BSD make behaviour in-line with GNU make but this would be more intrusive change. END K 10 svn:author V 4 fjoe K 8 svn:date V 27 2007-04-20T06:33:25.000000Z K 7 svn:log V 163 Improve logging when -dm is specified: if the node is considered out-of-date print not only "modified before source" message but also the path of youngest source. END K 10 svn:author V 6 adrian K 8 svn:date V 27 2007-04-20T07:21:09.000000Z K 7 svn:log V 395 NanoBSD modifications: * Break out the boot0 loader selection into a variable - NANO_BOOTLOADER - so people like me with VGA consoles can override the default (which is to use boot0sio) * Put the boot0 configuration options in NANO_BOOT0CFG in case you want to override the defaults. * Modify nanobsd.8 to reflect the changes and hint the console default is serial. MFC after: 2 weeks END K 10 svn:author V 3 mav K 8 svn:date V 27 2007-04-20T08:22:57.000000Z K 7 svn:log V 436 - Fixed mistakes in latency and xmitBytes calculation math which lead to ineffective multilink packet distribution plans. - Changed bytesInQueue calculation math to have more precise information about links utilization. - Taken rough account of the link overhead. Better way to do it could be to get exact overhead from user-level, but I have not done it to keep binary compatibility. Reviewed by: archie Approved by: glebius (mentor) END K 10 svn:author V 3 mav K 8 svn:date V 27 2007-04-20T08:38:18.000000Z K 7 svn:log V 426 - Changed sequence numbers processing to avoid incorrect timeout waiting when one of links is inactive and have stale sequence number. To avoid this sequence numbers of all links are getting updated on every successful packet reassembling. - ng_ppp_bump_mseq function created to simplify code. - ng_ppp_frag_drop function separated from ng_ppp_frag_process to simplify code. Reviewed by: archie Approved by: glebius (mentor) END K 10 svn:author V 3 mav K 8 svn:date V 27 2007-04-20T08:42:08.000000Z K 7 svn:log V 200 Optimized packet distribution plan for the equal links case. Do not split packet on fragments smaller then MP_MIN_FRAG_LEN to reduce total overhead. Reviewed by: archie Approved by: glebius (mentor) END K 10 svn:author V 3 mav K 8 svn:date V 27 2007-04-20T08:44:40.000000Z K 7 svn:log V 145 Added m_tag_copy_chain() call to copy original outgoing packet tags to all of it's fragments. Reviewed by: archie Approved by: glebius (mentor) END K 10 svn:author V 7 trhodes K 8 svn:date V 27 2007-04-20T09:08:20.000000Z K 7 svn:log V 42 Remove references to S/Key and list OPIE. END K 10 svn:author V 5 andre K 8 svn:date V 27 2007-04-20T13:30:08.000000Z K 7 svn:log V 193 o Plug memory leak in syncache_add() on MAC label allocation failure. o Simplify code flow with 'done' goto label. o Remove mbuf argument from syncache_respond(). It doesn't make use of it. END K 10 svn:author V 5 andre K 8 svn:date V 27 2007-04-20T13:36:48.000000Z K 7 svn:log V 127 Only update TCP timestamp on SYN duplication if it is present on current SYN in syncache_add(). Otherwise disable timestamps. END K 10 svn:author V 5 andre K 8 svn:date V 27 2007-04-20T13:51:34.000000Z K 7 svn:log V 625 Simplifly syncache_expand() and clarify its semantics. Zero is returned when the ACK is invalid and doesn't belong to any registered connection, either in syncache or through SYN cookies. True but a NULL struct socket is returned when the 3WHS completed but the socket could not be created due to insufficient resources or limits reached. For both cases an RST is sent back in tcp_input(). A logic error leading to a panic is fixed where syncache_expand() would free the mbuf on socket allocation failure but tcp_input() later supplies it to tcp_dropwithreset() to issue a RST to the peer. Reported by: kris (the panic) END K 10 svn:author V 5 andre K 8 svn:date V 27 2007-04-20T14:34:54.000000Z K 7 svn:log V 634 Remove bogus check for accept queue length and associated failure handling from the incoming SYN handling section of tcp_input(). Enforcement of the accept queue limits is done by sonewconn() after the 3WHS is completed. It is not necessary to have an earlier check before a connection request enters the SYN cache awaiting the full handshake. It rather limits the effectiveness of the syncache by preventing legit and illegit connections from entering it and having them shaken out before we hit the real limit which may have vanished by then. Change return value of syncache_add() to void. No status communication is required. END K 10 svn:author V 5 andre K 8 svn:date V 27 2007-04-20T15:08:09.000000Z K 7 svn:log V 145 o Remove unused and redundant TCP option definitions o Replace usage of MAX_TCPOPTLEN with the correctly constructed and derived MAX_TCPOPTLEN END K 10 svn:author V 5 andre K 8 svn:date V 27 2007-04-20T15:21:29.000000Z K 7 svn:log V 20 Add more KASSERT's. END K 10 svn:author V 5 andre K 8 svn:date V 27 2007-04-20T15:28:01.000000Z K 7 svn:log V 125 o Remove unncessary TOF_SIGLEN flag from struct tcpopt o Correctly set to->to_signature in tcp_dooptions() o Update comments END K 10 svn:author V 8 kientzle K 8 svn:date V 27 2007-04-20T15:32:13.000000Z K 7 svn:log V 70 Fix a memory leak in the uname/gname lookup cache. Thanks to: VMiklos END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2007-04-20T15:38:06.000000Z K 7 svn:log V 37 Xref linsysfs(5). MFC after: 3 days END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2007-04-20T16:12:31.000000Z K 7 svn:log V 349 New release notes: - IPLware 3.33 support for pc98 - CAM MPSAFE - ahc(4) and ahd(4) MPSAFE - pseudofs(9) and consumers MPSAFE - OpenBSM 1.0 alpha 14 - lastcomm -X flag - ftpd(8) RFC2389 and RFC2640 support Modified release notes: - ncurses was updated from version 5.2-20020615 While here, moved the lagg(4) and XFS entries to the correct places. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-20T18:49:41.000000Z K 7 svn:log V 253 Merge ip_fw2.c:1.163 to RELENG_6: Shorten text string for ip_fw2 dynamic rules zone by removing the word "zone", which is generally not present in zone names. This reduces the incidence of line-wrapping in "vmstat -z " using 80-column displays. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-20T19:00:43.000000Z K 7 svn:log V 24 Fix length calculation. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-20T19:01:42.000000Z K 7 svn:log V 22 Test sending 0 bytes. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-20T19:49:20.000000Z K 7 svn:log V 49 Don't reinvent vm_page_grab(). Reviewed by: ups END K 10 svn:author V 6 marcel K 8 svn:date V 27 2007-04-20T22:53:20.000000Z K 7 svn:log V 58 MFC rev. 1.41: Better handle the -F case. PR: bin/101979 END K 10 svn:author V 6 marcel K 8 svn:date V 27 2007-04-20T22:58:25.000000Z K 7 svn:log V 56 MFC rev. 1.10: Add PCI IDs for the HP RMP3 serial port. END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2007-04-20T23:47:30.000000Z K 7 svn:log V 73 Spring cleaning: Remove worm(4) manpage, the driver was removed pre-3.0. END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2007-04-21T00:05:35.000000Z K 7 svn:log V 49 Remove useless FILES section. MFC after: 3 days END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2007-04-21T00:18:37.000000Z K 7 svn:log V 12 Add markus. END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2007-04-21T00:25:05.000000Z K 7 svn:log V 37 Bah, sorting alphabetically is hard. END K 10 svn:author V 8 sepotvin K 8 svn:date V 27 2007-04-21T01:14:48.000000Z K 7 svn:log V 282 Add support for specifying a minimal size for vm.kmem_size in the loader via vm.kmem_size_min. Useful when using ZFS to make sure that vm.kmem size will be at least 256mb (for example) without forcing a particular value via vm.kmem_size. Approved by: njl (mentor) Reviewed by: alc END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-21T01:21:36.000000Z K 7 svn:log V 508 Change the semantics of -i (in-place editing) so that it treats each file independently from other files. The new semantics are desired in the most of practical cases, e.g.: delete lines 5-9 from each file. Keep the previous semantics of -i under a new option, -I, which uses a single continuous address space covering all files to edit in-place -- they are too cool to just drop them. Add regression tests for -i and -I. Approved by: dds Compared with: GNU sed Discussed on: -hackers MFC after: 2 weeks END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-21T01:22:51.000000Z K 7 svn:log V 63 Don't forget to bump document date after changing the content. END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-21T03:00:19.000000Z K 7 svn:log V 93 Add a missing link: if_edsc.4 -> edsc.4 . Network interface manpages should have such links. END K 10 svn:author V 3 hrs K 8 svn:date V 27 2007-04-21T03:45:18.000000Z K 7 svn:log V 149 Update release notes: - hw.pci.do_powerstate split into hw.pci.do_power_nodriver and hw.pci.do_power_resume. Pointed out by: pluknet at gmail.com END K 10 svn:author V 3 mtm K 8 svn:date V 27 2007-04-21T11:23:33.000000Z K 7 svn:log V 101 Regression tests for recent changes to inet6_rth_* family of functions regarding RFC3542 compliance. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-21T12:02:57.000000Z K 7 svn:log V 919 MFp4: @118370 Correct typo. @118371 Integrate changes from vendor. @118491 Show backtrace on unexpected code paths. @118494 Integrate changes from vendor. @118504 Fix sendfile(2). I had two ways of fixing it: 1. Fixing sendfile(2) itself to use VOP_GETPAGES() instead of hacking around with vn_rdwr(UIO_NOCOPY), which was suggested by ups. 2. Modify ZFS behaviour to handle this special case. Although 1 is more correct, I've choosen 2, because hack from 1 have a side-effect of beeing faster - it reads ahead MAXBSIZE bytes instead of reading page by page. This is not easy to implement with VOP_GETPAGES(), at least not for me in this very moment. Reported by: Andrey V. Elsukov @118525 Reorganize the code to reduce diff. @118526 This code path is expected. It is simply when file is opened with O_FSYNC flag. Reported by: kris Reported by: Michal Suszko END K 10 svn:author V 6 jkoshy K 8 svn:date V 27 2007-04-21T12:04:03.000000Z K 7 svn:log V 24 Correct a sanity check. END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-21T13:01:04.000000Z K 7 svn:log V 131 MFC: edsc(4) -- a dummy Ethernet driver for testing, benchmarking, and getting an easy intro to writing network interface drivers. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-21T13:17:23.000000Z K 7 svn:log V 326 Improve sharenfs option handling, so it is possible to give hosts list. Before the change the command above: # zfs set sharenfs=freefall.freebsd.org,69.147.83.54 tank/foo was translated to: /tank/foo -freefall.freebsd.org -69.147.83.54 instead of: /tank/foo freefall.freebsd.org 69.147.83.54 This commit corrects this. END K 10 svn:author V 3 ups K 8 svn:date V 27 2007-04-21T14:17:30.000000Z K 7 svn:log V 79 Modify TLB invalidation handling. Reviewed by: alc@, peter@ MFC after: 1 week END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-21T18:11:19.000000Z K 7 svn:log V 441 Attempt to rationalize NFS privileges: - Replace PRIV_NFSD with PRIV_NFS_DAEMON, add PRIV_NFS_LOCKD. - Use PRIV_NFS_DAEMON in the NFS server. - In the NFS client, move the privilege check from nfslockdans(), which occurs every time a write is performed on /dev/nfslock, and instead do it in nfslock_open() just once. This allows us to avoid checking the saved uid for root, and just use the effective on open. Use PRIV_NFS_LOCKD. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-21T18:14:04.000000Z K 7 svn:log V 46 Teach netinet6 to use PRIV_NETINET_REUSEPORT. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-21T22:08:48.000000Z K 7 svn:log V 620 Allow MAC policy modules to control access to audit configuration system calls. Add MAC Framework entry points and MAC policy entry points for audit(), auditctl(), auditon(), setaudit(), aud setauid(). MAC Framework entry points are only added for audit system calls where additional argument context may be useful for policy decision-making; other audit system calls without arguments may be controlled via the priv(9) entry points. Update various policy modules to implement audit-related checks, and in some cases, other missing system-related checks. Obtained from: TrustedBSD Project Sponsored by: SPARTA, Inc. END K 10 svn:author V 3 imp K 8 svn:date V 27 2007-04-21T22:47:35.000000Z K 7 svn:log V 513 Because there are so many more partitions on pc98 than on wintel (16 vs 4), supress all unused partition output unless -v is specified. This makes operating on a 'typical' disk with one partition less painful. The 30 lines needed for the empty partitions no longer scroll the useful information off the screen. When the user requests a specific partition, the unused information is not suppressed. Also add the partition name to the -s output. Initialize the partition name to 'FreeBSD' when -I is specified. END K 10 svn:author V 8 tmclaugh K 8 svn:date V 27 2007-04-21T23:44:36.000000Z K 7 svn:log V 58 Add xride who was mentored by me and co-mentored by garga END K 10 svn:author V 8 tmclaugh K 8 svn:date V 27 2007-04-21T23:47:09.000000Z K 7 svn:log V 22 mezz was my co-mentor END K 10 svn:author V 8 cperciva K 8 svn:date V 27 2007-04-22T00:12:10.000000Z K 7 svn:log V 113 Add myself. Edwin was my "mentor", even though he released me from mentorship before approving a single commit. END K 10 svn:author V 8 cperciva K 8 svn:date V 27 2007-04-22T00:44:51.000000Z K 7 svn:log V 82 Fix sorting in previous commit. Pointed out by: brueffer Pointy hat to: cperciva END K 10 svn:author V 8 tmclaugh K 8 svn:date V 27 2007-04-22T02:36:08.000000Z K 7 svn:log V 211 Trace my mentor lineage as far back as I can determine. Not really sure how to handle committers who no longer have a ports commit bit but are still active in other repos. Maybe a new node definition? *shrug* END K 10 svn:author V 4 kris K 8 svn:date V 27 2007-04-22T06:20:12.000000Z K 7 svn:log V 59 Add some notes clarifying usage and a couple of known bugs END K 10 svn:author V 5 maxim K 8 svn:date V 27 2007-04-22T08:37:21.000000Z K 7 svn:log V 57 MFC rev. 1.8: IFNAMSIZ includes a terminating null byte. END K 10 svn:author V 3 des K 8 svn:date V 27 2007-04-22T08:41:52.000000Z K 7 svn:log V 67 Now that we're MPSAFE, tell namei() to acquire Giant if necessary. END K 10 svn:author V 3 rrs K 8 svn:date V 27 2007-04-22T11:06:27.000000Z K 7 svn:log V 230 - Somehow the disable fragment option got lost. We could set/clear it but would not do it. Now we will. - Moved to latest socket api for extended sndrcv info struct. - Moved to support all new levels of fragment interleave. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-22T11:35:15.000000Z K 7 svn:log V 870 Perform overdue clean up mac_test policy: - Add a more detailed comment describing the mac_test policy. - Add COUNTER_DECL() and COUNTER_INC() macros to declare and manage various test counters, reducing the verbosity of the test policy quite a bit. - Add LABEL_CHECK() macro to abbreviate normal validation of labels. Unlike the previous check macros, this checks for a NULL label and doesn't test NULL labels. This means that optionally passed labels will now be handled automatically, although in the case of optional credentials, NULL-checks are still required. - Add LABEL_DESTROY() macro to abbreviate the handling of label validation and tear-down. - Add LABEL_NOTFREE() macro to abbreviate check for non-free labels. - Normalize the names of counters, magic values. - Remove unused policy "enabled" flag. Obtained from: TrustedBSD Project END K 10 svn:author V 3 rrs K 8 svn:date V 27 2007-04-22T12:12:38.000000Z K 7 svn:log V 112 Moves the PCB features and flags from sctp_pcb.h to sctp.h so that netstat can access and display these values. END K 10 svn:author V 3 phk K 8 svn:date V 27 2007-04-22T12:55:36.000000Z K 7 svn:log V 68 Run if_vr(4) through FlexeLint and clean some of the cobwebs found. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-22T13:29:37.000000Z K 7 svn:log V 723 Further MAC test policy cleanup and enhancement: - Redistribute counter declarations to where they are used, rather than at the file header, so it's more clear where we do (and don't) have counters. - Add many more counters, one per policy entry point, so that many individual access controls and object life cycle events are tracked. - Perform counter increments for label destruction explicitly in entry point functions rather than in LABEL_DESTROY(). - Use LABEL_INIT() instead of SLOT_SET() directly in label init functions to be symmetric with destruction. - Align counter names more carefully with entry point names. - More constant and variable name normalization. Obtained from: TrustedBSD Project END K 10 svn:author V 3 phk K 8 svn:date V 27 2007-04-22T14:57:05.000000Z K 7 svn:log V 103 Don't rename fields with #define. Collapse two semantically identical structs. Add missing vr_ prefix. END K 10 svn:author V 6 jkoshy K 8 svn:date V 27 2007-04-22T15:00:39.000000Z K 7 svn:log V 567 MFP4: Enhancements and bug-fixes to pmcstat(8): - The '-c' option now takes a comma-separated list of CPU numbers, or a literal '*' denoting all CPUs in the system. Subsequent system PMCs are allocated on the CPUs so specified. Change the default behaviour to allocate system PMCs on all CPUs, not just CPU 0. Update the manual page and add an example of how to use the new functionality. - Attach PMCs to a (commandline) child process more reliably. This fixes a long standing bug in counting events incurred by short-lived processes. END K 10 svn:author V 3 phk K 8 svn:date V 27 2007-04-22T15:09:03.000000Z K 7 svn:log V 111 Initialize the physical next pointer in the tx descriptors when we initialize instead of in the start routine. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-22T15:31:22.000000Z K 7 svn:log V 672 Remove MAC Framework access control check entry points made redundant with the introduction of priv(9) and MAC Framework entry points for privilege checking/granting. These entry points exactly aligned with privileges and provided no additional security context: - mac_check_sysarch_ioperm() - mac_check_kld_unload() - mac_check_settime() - mac_check_system_nfsd() Add mpo_priv_check() implementations to Biba and LOMAC policies, which, for each privilege, determine if they can be granted to processes considered unprivileged by those two policies. These mostly, but not entirely, align with the set of privileges granted in jails. Obtained from: TrustedBSD Project END K 10 svn:author V 3 phk K 8 svn:date V 27 2007-04-22T15:48:29.000000Z K 7 svn:log V 64 Remove further cobwebs: Two layers of pointless substructures. END K 10 svn:author V 3 phk K 8 svn:date V 27 2007-04-22T15:58:56.000000Z K 7 svn:log V 120 Remove the old software bit-banging MII interface, we started using the Rhines shiftregisters in four years ago (1.60). END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-22T16:18:10.000000Z K 7 svn:log V 523 In the MAC Framework implementation, file systems have two per-mountpoint labels: the mount label (label of the mountpoint) and the fs label (label of the file system). In practice, policies appear to only ever use one, and the distinction is not helpful. Combine mnt_mntlabel and mnt_fslabel into a single mnt_label, and eliminate extra machinery required to maintain the additional label. Update policies to reflect removal of extra entry points and label. Obtained from: TrustedBSD Project Sponsored by: SPARTA, Inc. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-22T19:55:56.000000Z K 7 svn:log V 373 Normalize variable naming in the MAC Framework by adopting the normal variable name conventions for arguments passed into the framework -- for example, name network interfaces 'ifp', sockets 'so', mounts 'mp', mbufs 'm', processes 'p', etc, wherever possible. Previously there was significant variation in this regard. Normalize copyright lists to ranges where sensible. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-22T20:55:08.000000Z K 7 svn:log V 328 When zfs dataset has jailed=on property, it won't be mounted with 'zfs mount -a' from the main system - this is by design, as mountpoint may be set to dangerous value. This all means, that such file system has to be mounted from within a jail. To make it easier, reorganize rc.d/zfs script so it can be used from within a jail. END K 10 svn:author V 5 erwin K 8 svn:date V 27 2007-04-22T21:11:46.000000Z K 7 svn:log V 88 Clement has stepped down from portmgr. Thanks for all your work! Reminded by: brueffer END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-22T21:16:15.000000Z K 7 svn:log V 64 Fix st_rdev handling (implement it, actually). Reported by: gj END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-22T21:18:40.000000Z K 7 svn:log V 353 Fix 'zpool status -v'. To get object number we should use ZFS_DIRENT_OBJ() macro, as za_first_integer field also contains type. This should be fixed in ZFS itself, but this bug is not visible on Solaris, because there, type is not stored in za_first_integer. On the other hand it will be visible on MacOS X. Reported by: Barry Pederson END K 10 svn:author V 3 njl K 8 svn:date V 27 2007-04-22T22:33:29.000000Z K 7 svn:log V 433 Add back the original behavior of changing the entire directory path at once (CWD a/b/c vs. 3 CWDs). If an error occurs, we fall back to the default method of a single CWD per directory element. Since this is technically a violation of the basic FTP RFC, this behavior is under a compile-time option FTP_COMBINE_CWDS and is off by default. It should work with most Unix-based FTP daemons and can save latency. MFC after: 2 weeks END K 10 svn:author V 3 rrs K 8 svn:date V 27 2007-04-23T00:51:49.000000Z K 7 svn:log V 55 Fixes cut and paste bug using wrong pointer reference. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-23T00:52:07.000000Z K 7 svn:log V 235 MFp4: Reduce diff against vendor code: - Move FreeBSD-specific code to zfs_freebsd_*() functions in zfs_vnops.c and keep original functions as similar to vendor's code as possible. - Add various includes back, now that we have them. END K 10 svn:author V 8 deischen K 8 svn:date V 27 2007-04-23T03:24:33.000000Z K 7 svn:log V 154 When generating the version map file, order versions oldest first to make it easier for rtld to choose the oldest version of a symbol. Sumbitted by: kan END K 10 svn:author V 8 deischen K 8 svn:date V 27 2007-04-23T03:36:14.000000Z K 7 svn:log V 102 Add a reference and lock the target thread when setting its name. Submitted by: davidxu (via libthr) END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2007-04-23T04:48:23.000000Z K 7 svn:log V 33 MFC: rev. 1.6 Xref linsysfs(5). END K 10 svn:author V 3 sam K 8 svn:date V 27 2007-04-23T05:51:18.000000Z K 7 svn:log V 235 o fix a buffer overflow in save_key() that occurs with 104-bit wep o make some variables parameters (frequency of crack, and maximum channel) o try to spoof mac if association fails Submitted by: Andrea Bittau END K 10 svn:author V 3 sam K 8 svn:date V 27 2007-04-23T05:57:06.000000Z K 7 svn:log V 143 make dev.ath.N.ledpin have an immediate effect PR: kern/111810 Submitted by: Henrik Brix Andersen MFC after: 1 week END K 10 svn:author V 3 alc K 8 svn:date V 27 2007-04-23T06:12:24.000000Z K 7 svn:log V 90 Add synchronization. Eliminate the acquisition and release of Giant. Reviewed by: tegge END K 10 svn:author V 6 matteo K 8 svn:date V 27 2007-04-23T07:09:25.000000Z K 7 svn:log V 272 1)Make it possible for rpcbind(8) to bind TCP listening socket to an IP other than INADDR_ANY. 2) Add the -6 option to specify "IPv6 only". Glanced at by: bms Requested by: bms [2] PR: bin/84494 [1] Approved by: silence from maintainer (~2 weeks) [1] MFC after: 2 weeks END K 10 svn:author V 3 gnn K 8 svn:date V 27 2007-04-23T09:32:04.000000Z K 7 svn:log V 286 Turn off route header processing for now due to issues pointed out by Philippe Biondi and Arnaud Ebalard. This is a temporary fix until more discussion can be had on the exact risks involved in allowing source routing in IPv6 Submitted by: itojun Reviewed by: jinmei MFC after: 1 day END K 10 svn:author V 3 yar K 8 svn:date V 27 2007-04-23T11:43:22.000000Z K 7 svn:log V 129 Insert explicit space between the output fields to prevent them from running together when a field overflows. MFC after: 1 week END K 10 svn:author V 3 phk K 8 svn:date V 27 2007-04-23T12:17:27.000000Z K 7 svn:log V 112 Improve reporting in recoverdisk a good deal. Submitted by: Ulrich Spoerlein PR: 111630 END K 10 svn:author V 3 phk K 8 svn:date V 27 2007-04-23T12:19:02.000000Z K 7 svn:log V 72 Add VLAN capability. Submitted by: Slawa Olhovchenkov END K 10 svn:author V 3 phk K 8 svn:date V 27 2007-04-23T12:42:15.000000Z K 7 svn:log V 130 Make it possible to specify an initial state for the LED. Requested by: Henrik Brix Andersen PR: 112008 END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-23T12:53:00.000000Z K 7 svn:log V 14 Correct typo. END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-23T13:15:23.000000Z K 7 svn:log V 181 Apply variable name normalization to MAC policies: adopt global conventions for the naming of variables associated with specific data structures. Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-23T13:36:54.000000Z K 7 svn:log V 237 Rename mac*devfsdirent*() to mac*devfs*() to synchronize with SEDarwin, where similar data structures exist to support devfs and the MAC Framework, but are named differently. Obtained from: TrustedBSD Project Sponsored by: SPARTA, Inc. END K 10 svn:author V 3 pjd K 8 svn:date V 27 2007-04-23T13:47:49.000000Z K 7 svn:log V 71 Too much diff reduction. 'cmd' has to be u_long. Reported by: delphij END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-23T14:41:34.000000Z K 7 svn:log V 109 Audit pathnames looked up in swapon(2) and swapoff(2). MFC after: 2 weeks Obtained from: TrustedBSD Project END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2007-04-23T14:46:59.000000Z K 7 svn:log V 78 Add au_to_zonename.3 alias for au_token.3. Obtained from: TrustedBSD Project END K 10 svn:author V 3 mav K 8 svn:date V 27 2007-04-23T15:25:14.000000Z K 7 svn:log V 66 Global xmit stats calculation fix. Approved by: glebius (mentor) END K 10 svn:author V 6 scottl K 8 svn:date V 27 2007-04-23T18:01:44.000000Z K 7 svn:log V 69 Remove obsolete headers. Move kernel specific headers under #ifdefs END K 10 svn:author V 3 jhb K 8 svn:date V 27 2007-04-23T18:03:57.000000Z K 7 svn:log V 59 MFC: Correct word index calculation in pci_pending_msix(). END K 10 svn:author V 3 jhb K 8 svn:date V 27 2007-04-23T18:08:59.000000Z K 7 svn:log V 529 MFC: Don't go to a whole lot of extra work to handle the race where the new file descriptor is closed out from under us in kern_open(). This race is already handled and the file will be closed when kern_open() does an fdrop just before returning. In addition, by handling the race early, this opens the code up to an obscure bug where opening a devfs file could replace f_ops in the file object so that fdrop() will try to close the vnode, but f_vnode never gets set, so the vnode close routine panics due to the NULL f_vnode. END K 10 svn:author V 3 des K 8 svn:date V 27 2007-04-23T19:17:01.000000Z K 7 svn:log V 93 Fix old locking bugs which were revealed when pseudofs was made MPSAFE. Submitted by: tegge END K 10 svn:author V 5 andre K 8 svn:date V 27 2007-04-23T19:41:47.000000Z K 7 svn:log V 140 o Fix INP lock leak in the minttl case o Remove indirection in the decision of unlocking inp o Further annotation of locking in tcp_input() END K 10 svn:author V 4 bmah K 8 svn:date V 27 2007-04-23T21:52:14.000000Z K 7 svn:log V 259 Mostly-cosmetic fixes in low-memory warning messages: o Fix linewrap issues. o Fix two typos (s/Recomended/Recommended/ and s/tunning/tuning/) o Remove a couple of extra instances of the word "of". o Update names of kmem_size variables. Approved by: pjd END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-23T22:11:27.000000Z K 7 svn:log V 136 Bring in sendmail.org code from the future 8.14.2 release which restores ABI compatibility to users of the libmilter.so shared library. END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-23T22:11:27.000000Z K 7 svn:log V 144 This commit was generated by cvs2svn to compensate for changes in r168988, which included commits to RCS files with non-trunk default branches. END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-23T22:15:07.000000Z K 7 svn:log V 112 Add a new note to revoke the 20070408 note. Is is no longer necessary to recompile milters. MFC after: 4 days END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-23T22:23:54.000000Z K 7 svn:log V 79 Forced commit to .mc files to force creation of new .cf files for mergemaster. END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-23T22:30:23.000000Z K 7 svn:log V 79 Forced commit to .mc files to force creation of new .cf files for mergemaster. END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-23T22:32:30.000000Z K 7 svn:log V 112 For completeness, also copy over the Copyright year changes from the sendmail.org repo on these modified files. END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-23T22:32:30.000000Z K 7 svn:log V 144 This commit was generated by cvs2svn to compensate for changes in r168993, which included commits to RCS files with non-trunk default branches. END K 10 svn:author V 8 gshapiro K 8 svn:date V 27 2007-04-23T22:48:13.000000Z K 7 svn:log V 47 Remove release note about recompiling milters. END K 10 svn:author V 3 jhb K 8 svn:date V 27 2007-04-23T22:53:01.000000Z K 7 svn:log V 21 Tweak printf string. END K 10 svn:author V 8 brueffer K 8 svn:date V 27 2007-04-24T04:47:21.000000Z K 7 svn:log V 45 MFC: rev. 1.4 Remove useless FILES section. END K 10 svn:author V 3 phk K 8 svn:date V 27 2007-04-24T06:29:27.000000Z K 7 svn:log V 119 Get endianess right. Why would an XML library need to know about endianess anyway ?? Prodded by, long time ago: ahze END K 10 svn:author V 8 simokawa K 8 svn:date V 27 2007-04-24T06:30:06.000000Z K 7 svn:log V 77 If compressed length is zero, return a zero-filled block. MFC after: 1 week END