71918 82 343 177 155 182 330 287 751 523 267 137 122 196 159 169 121 139 139 157 228 239 652 134 136 309 141 165 169 270 535 149 334 269 135 125 432 130 119 138 128 262 258 218 132 123 255 351 153 391 155 155 434 168 410 262 187 299 152 157 695 292 104 217 149 160 913 1337 196 191 367 212 123 144 185 447 138 169 112 113 131 119 121 228 K 10 svn:author V 3 nik K 8 svn:date V 27 2001-02-02T03:29:09.000000Z K 7 svn:log V 250 Structure the options listing to be more standard. The PR also included documentation for other options, but upon inspection of the source these options aren't used. PR: docs/24149 Submitted by: Jesse Monroy, Jr. END K 10 svn:author V 3 nik K 8 svn:date V 27 2001-02-02T03:32:03.000000Z K 7 svn:log V 85 Fix typo. PR: docs/23936 Submitted by: Garret Rooney END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-02T03:32:11.000000Z K 7 svn:log V 61 KASSERT that the minor number passed to make_dev() is valid. END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-02T03:32:25.000000Z K 7 svn:log V 88 Pass the minor number rather than the unit number to make_dev() from the clone handler. END K 10 svn:author V 4 grog K 8 svn:date V 27 2001-02-02T07:14:13.000000Z K 7 svn:log V 236 Allocate lock table and mutex not only for parity plexes, but also for striped plexes. This prevents various panics introduced in the last rewrite of the locking code. Suffered by: "Niels Chr. Bank-Pedersen" END K 10 svn:author V 6 msmith K 8 svn:date V 27 2001-02-02T08:31:50.000000Z K 7 svn:log V 191 Patch the reintroduced (~0 << 32) == 1 bug with a cryptic but functional version. This should fix the read-before-write problem again. Obtained from: "Adam J. Richter" END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-02T08:33:47.000000Z K 7 svn:log V 656 MFC a few things related to buildkernel: - add the reinstallkernel target (does a make reinstall) - prefer KERNCONF to KERNEL, but accept KERNEL anyway (with a pointer to KERNCONF, but not as annoying as on -current) - use 'make clean' instead of 'config -r' - add a NO_KERNELCLEAN option to avoid a clean. NOCLEAN is respected. - buildkernel checks to see if a kernel name was supplied - Allow changing the installed kernel name.. eg: make buildkernel KERNCONF=GENERIC INSTKERNNAME=kernel.GENERIC These should largely be transparent and should not break anything or anyone. It should enable consistant doc targets between -current and RELENG_4 now. END K 10 svn:author V 3 dfr K 8 svn:date V 27 2001-02-02T10:20:30.000000Z K 7 svn:log V 430 * Move exception_return to exception.s which is a more logical home for it. * Optimise the return path for syscalls so that they only restore a minimal set of registers instead of performing a full exception_return. A new flag in the trapframe indicates that the frame only holds partial state. When it is necessary to perform a full state restore (e.g. after an execve or signal), the flag is cleared to force a full restore. END K 10 svn:author V 7 asmodai K 8 svn:date V 27 2001-02-02T10:53:02.000000Z K 7 svn:log V 170 Fix tftpd and tftp to support file transfers of over 65535 blocks (about 31 MB - 32 MB). Submitted (partially) by: Pascal Hofstee END K 10 svn:author V 6 julian K 8 svn:date V 27 2001-02-02T11:59:27.000000Z K 7 svn:log V 42 MFC: Don't dereferrence freed structures. END K 10 svn:author V 3 bde K 8 svn:date V 27 2001-02-02T12:51:22.000000Z K 7 svn:log V 30 Removed vestiges of vop_mmap. END K 10 svn:author V 6 nectar K 8 svn:date V 27 2001-02-02T13:22:43.000000Z K 7 svn:log V 100 strcpy -> strlcpy paranoia Submitted by: Mike Heffner Reviewed by: freebsd-audit END K 10 svn:author V 6 julian K 8 svn:date V 27 2001-02-02T13:36:39.000000Z K 7 svn:log V 64 MF4: Don't dereference pointers we haven't checked to be valid. END K 10 svn:author V 5 joerg K 8 svn:date V 27 2001-02-02T16:12:58.000000Z K 7 svn:log V 75 MFC: rev 1.103, prevent the Maxoptix Tahiti 1 from responding on all LUNs. END K 10 svn:author V 2 cg K 8 svn:date V 27 2001-02-02T16:41:06.000000Z K 7 svn:log V 30 quieten the esscontrol device END K 10 svn:author V 4 bmah K 8 svn:date V 27 2001-02-02T17:02:05.000000Z K 7 svn:log V 46 BIND update now has security advisory number. END K 10 svn:author V 4 bmah K 8 svn:date V 27 2001-02-02T17:08:05.000000Z K 7 svn:log V 46 BIND update now has security advisory number. END K 10 svn:author V 4 bmah K 8 svn:date V 27 2001-02-02T17:34:35.000000Z K 7 svn:log V 64 MFC: "make buildkernel" changes (especially KERNEL->KERNCONF). END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-02T18:35:29.000000Z K 7 svn:log V 135 Only superuser can create symlinks. Give symlinks mode 755 by default to avoid triggering alert eyes. (the mode isn't use on symlinks) END K 10 svn:author V 6 jlemon K 8 svn:date V 27 2001-02-02T18:48:25.000000Z K 7 svn:log V 143 When turning off TCP_NOPUSH, call tcp_output to immediately flush out any data pending in the buffer. Submitted by: Tony Finch END K 10 svn:author V 2 cg K 8 svn:date V 27 2001-02-02T19:49:14.000000Z K 7 svn:log V 560 MFC: kobj functionality this does not change the general driver interface or affect any system other than altering the build process slightly. the process of generating .c and .h files from .m files is changed by the introduction of makeops.pl which simply determines if it is being run on a device interface .m file or a kobj .m file and calls makedevops.pl or makeobjops.pl as appropriate. the determination is done by checking for the presence of 'KOBJ' in the first line of the file- this should be in a comment. Approved by: dfr (in principle), -arch END K 10 svn:author V 8 dwmalone K 8 svn:date V 27 2001-02-02T21:06:51.000000Z K 7 svn:log V 37 MFC: 1.39 Fix up references to lint. END K 10 svn:author V 6 dillon K 8 svn:date V 27 2001-02-02T21:16:34.000000Z K 7 svn:log V 41 MFC 1.19, imply -c when -S is specified. END K 10 svn:author V 6 dillon K 8 svn:date V 27 2001-02-02T21:20:24.000000Z K 7 svn:log V 213 MFC 1.148, 1.149 - use mark/scan to avoid cpu loop waiting for interrupt when a buffer is skipped due to being busy. Continue to ensure that a MNT_WAIT fsync drains all buffers to avoid panic in umount/vinvalbuf END K 10 svn:author V 6 dillon K 8 svn:date V 27 2001-02-02T21:22:44.000000Z K 7 svn:log V 46 MFC 1.81, fix race between syncer and umount. END K 10 svn:author V 8 dwmalone K 8 svn:date V 27 2001-02-02T21:26:38.000000Z K 7 svn:log V 68 MFC: 1.27 Allow overallocated programs to lower their memory usage. END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-02T22:35:13.000000Z K 7 svn:log V 77 Unfortunately low-altitude overflights is not enough to make penguins crash. END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-02T22:54:41.000000Z K 7 svn:log V 177 At the point in time where most devices are created, we don't know what time it is because boottime is not yet initialized. Finagle the relevant fields when we get the chance. END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-03T00:31:39.000000Z K 7 svn:log V 440 o Allow non-root users to open /dev/tun* (remove suser() in tunopen()) o Change the default device permissions to 0600 root:wheel (were uucp:dialer) o Only let root (suser()) change the MTU This makes it possible for an administrator to open up the permissions on /dev/tun*, letting non-root programs service a tun interface. Co-operation is still required with a priviledged program that will configure the interface side of things. END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-03T00:32:17.000000Z K 7 svn:log V 55 Change the permissions on /dev/tun* to 0600 root:wheel END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-03T01:28:46.000000Z K 7 svn:log V 239 Pick up all messages* files less than two days old rather than just messages{,.0*} when looking for login failures and refused connections. PR: 23415 Mostly submitted by: phk Convert a few " "s to tabs while I'm here - for consistency. END K 10 svn:author V 2 cg K 8 svn:date V 27 2001-02-03T01:29:12.000000Z K 7 svn:log V 177 MFC of many improvements, including kobjification, new sb8/sb16 code, setblocksize support for lower latencies. this is the sound code from -current as of 01:00GMT 2001/02/03. END K 10 svn:author V 2 cg K 8 svn:date V 27 2001-02-03T01:40:27.000000Z K 7 svn:log V 44 oops, left these out of my previous commit. END K 10 svn:author V 2 cg K 8 svn:date V 27 2001-02-03T02:07:12.000000Z K 7 svn:log V 34 update sound modules for new code END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2001-02-03T02:09:20.000000Z K 7 svn:log V 335 o Reinstate Kerberos IV support for sshd when MAKE_KERBEROS4 is compiled in. This involves a commented out sshd line to match the remainder of the commented out pam_kerberosIV.so entries. This doesn't quite restore the correct behavior, as ticket files are not managed properly, but it's an improvement. Forgotten by: green END K 10 svn:author V 2 cg K 8 svn:date V 27 2001-02-03T02:09:24.000000Z K 7 svn:log V 39 new newpcm driver modules for sb8/sb16 END K 10 svn:author V 2 cg K 8 svn:date V 27 2001-02-03T02:13:03.000000Z K 7 svn:log V 28 remove old sb newpcm driver END K 10 svn:author V 2 cg K 8 svn:date V 27 2001-02-03T02:14:47.000000Z K 7 svn:log V 47 remove old sb driver, add new sb8/sb16 drivers END K 10 svn:author V 2 cg K 8 svn:date V 27 2001-02-03T02:56:36.000000Z K 7 svn:log V 37 properly #ifdef dynamic sysctl stuff END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-03T03:26:39.000000Z K 7 svn:log V 167 Conditionalize the alpha interrupt preemption for now to buy us some time to sort out the quirks. Add 'options PREEMPTION' to test it on the Alpha. Reviewed by: jhb END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-03T08:56:52.000000Z K 7 svn:log V 163 Move wicontrol from i386 to MI section. (yes, it compiles on alpha, where theoretically NEWCARD might work one day). if_wi.c is in the MI config section already. END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-03T11:46:35.000000Z K 7 svn:log V 125 Use macro api rather than fondle its implementation detals. Created with: /usr/bin/sed Reviewed by: /sbin/md5 END K 10 svn:author V 8 groudier K 8 svn:date V 27 2001-02-03T16:16:27.000000Z K 7 svn:log V 35 MFC: from sym_hipd.c revision 1.23 END K 10 svn:author V 3 sos K 8 svn:date V 27 2001-02-03T16:16:40.000000Z K 7 svn:log V 31 MFC: Add acdNt* device nodes. END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-03T16:29:10.000000Z K 7 svn:log V 162 Use LIST_FOREACH() to traverse ifp->if_multiaddrs list, instead of implementation details. Created with: /usr/sbin/sed Reviewed with: /sbin/md5 END K 10 svn:author V 6 julian K 8 svn:date V 27 2001-02-03T17:25:21.000000Z K 7 svn:log V 255 Make the code act the same in the case of BRIDGE being defined, but not turned on, and the case of it not being defined at all. i.e. Disabling bridging re-enables some of the checks it disables. Submitted by: "Rogier R. Mulhuijzen" END K 10 svn:author V 5 wilko K 8 svn:date V 27 2001-02-03T18:38:24.000000Z K 7 svn:log V 59 Document API CS20 support. HARDWARE.TXT update to follow. END K 10 svn:author V 3 jkh K 8 svn:date V 27 2001-02-03T20:56:32.000000Z K 7 svn:log V 298 Add a -g flag for verifying an installed package against its recorded checksums (to see if it's been modified post-installation). Naturally, this mechanism is only as secure as the contents of /var/db/pkg if you're using it for auditing purposes. Submitted by: Roman Shterenzon END K 10 svn:author V 3 bsd K 8 svn:date V 27 2001-02-03T21:21:55.000000Z K 7 svn:log V 63 MFC: rev 1.20 - print out the device name when the mount fails END K 10 svn:author V 3 bsd K 8 svn:date V 27 2001-02-03T21:22:39.000000Z K 7 svn:log V 63 MFC: rev 1.16 - print out the device name when the mount fails END K 10 svn:author V 7 iedowse K 8 svn:date V 27 2001-02-03T21:25:32.000000Z K 7 svn:log V 337 Use the correct flags field when checking for a read-only filesystem in ufs_dirbad(). The mnt_stat.f_flags field is only updated by the syscalls *statfs and getfsstat, so mnt_flag should be used instead. This only affects whether or not a panic is generated on detection of certain types of directory corruption. Reviewed by: mckusick END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-03T23:31:31.000000Z K 7 svn:log V 74 Don't specify root:wheel for tun*, it's the default. Pointed out by: bde END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-04T01:08:22.000000Z K 7 svn:log V 315 Untangle some cunfusion between the CLOSE_STAYDOWN, CLOSE_LCP and CLOSE_NORMAL meanings. CLOSE_NORMAL doesn't change the currently required state, the others do. This should stop ppp from entering DATALINK_READY when LCP shutdown doesn't end up happening cleanly. Bump our version number to reflect this change. END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-04T01:08:24.000000Z K 7 svn:log V 167 Make the MPPE MasterKey Invalid messages a bit clearer (it now complains that you can't do MPPE without CHAP81). Reset MasterKeyValid to zero when we hit phase DEAD. END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-04T01:08:26.000000Z K 7 svn:log V 93 Don't send an authentication failure response if we fail sending a radius accounting packet. END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-04T01:12:42.000000Z K 7 svn:log V 204 MFC: Fix CLOSE_STAYDOWN/CLOSE_LCP confusion Make the MPPE MasterKey Invalid messages clearer Reset MasterKeyValid to zero when we hit phase DEAD. Handle radius accounting failures properly END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-04T01:20:33.000000Z K 7 svn:log V 58 MPPE_MasterKeyValid is only there if HAVE_DES is defined. END K 10 svn:author V 5 brian K 8 svn:date V 27 2001-02-04T01:20:51.000000Z K 7 svn:log V 63 MFC: MPPE_MasterKeyValid is only there if HAVE_DES is defined. END K 10 svn:author V 7 iedowse K 8 svn:date V 27 2001-02-04T01:52:11.000000Z K 7 svn:log V 598 Extend the sanity checks in ufs_lookup to ensure that each directory entry fits within its DIRBLKSIZ block. The surrounding code is extremely fragile with respect to corruption of the directory entry 'd_reclen' field; if directory corruption occurs, it can blindly scan forward beyond the end of the filesystem block. Usually this results in a 'fault on nofault entry' panic. Directory corruption is now much more likely to be detected, resulting in a 'ufs_dirbad' panic. If the filesystem is read-only, it will simply print a warning message, and skip the corrupted block. Reviewed by: mckusick END K 10 svn:author V 5 mckay K 8 svn:date V 27 2001-02-04T02:02:38.000000Z K 7 svn:log V 197 In the hope of saving others from hours of tedious recovery work, document that cp still isn't very useful for recursive copies even with the -R flag. This is because hard links are broken by cp. END K 10 svn:author V 5 mckay K 8 svn:date V 27 2001-02-04T02:05:16.000000Z K 7 svn:log V 10 Spelling. END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-04T04:13:12.000000Z K 7 svn:log V 122 Grumble, I broke this file with a vi accident before commit. :-( Submitted by: Christian Weisgerber END K 10 svn:author V 5 toshi K 8 svn:date V 27 2001-02-04T04:38:38.000000Z K 7 svn:log V 55 MFC: Add support for SMC91C100FD chip of MELCO LPC-TX. END K 10 svn:author V 5 toshi K 8 svn:date V 27 2001-02-04T04:41:34.000000Z K 7 svn:log V 66 MFC (1.23): Add support for PC-card router configuration. (MFPAO) END K 10 svn:author V 7 rwatson K 8 svn:date V 27 2001-02-04T05:48:59.000000Z K 7 svn:log V 816 A recent commit (1.131.2.13) removed the security fix associated with FreeBSD-SA-01:08, breaking the "established" TCP matching flag even more than it was prior to the security advisory. Reinstate the fix by restoring the conditional assocated with entering tcpflg_match(). Reported by a number of people via send-pr, security-officer, et al., including: Steven Farmer Bernd Luevelsmeyer Andrew Gordon Thanks to those people for bringing this to our attention in such a timely manner. An updated advisory and/or announcement to the freebsd-stable mailing list will be forthcoming, once all parties have confirmed that this resolves the problems they were experiencing. PR: 24833 Approved by: security-officer Slap on the wrist to: luigi END K 10 svn:author V 6 dillon K 8 svn:date V 27 2001-02-04T06:19:28.000000Z K 7 svn:log V 1240 This commit represents work mainly submitted by Tor and slightly modified by myself. It solves a serious vm_map corruption problem that can occur with the buffer cache when block sizes > 64K are used. This code has been heavily tested in -stable but only tested somewhat on -current. An MFC will occur in a few days. My additions include the vm_map_simplify_entry() and minor buffer cache boundry case fix. Make the buffer cache use a system map for buffer cache KVM rather then a normal map. Ensure that VM objects are not allocated for system maps. There were cases where a buffer map could wind up with a backing VM object -- normally harmless, but this could also result in the buffer cache blocking in places where it assumes no blocking will occur, possibly resulting in corrupted maps. Fix a minor boundry case in the buffer cache size limit is reached that could result in non-optimal code. Add vm_map_simplify_entry() calls to prevent 'creeping proliferation' of vm_map_entry's in the buffer cache's vm_map. Previously only a simple linear optimization was made. (The buffer vm_map typically has only a handful of vm_map_entry's. This stabilizes it at that level permanently). PR: 20609 Submitted by: (Tor Egge) tegge END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-04T07:00:47.000000Z K 7 svn:log V 101 All the world is not an i386. Merge rev 1.438 of i386/i386/machdep.c. Make buffer_map a system map. END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-04T08:23:14.000000Z K 7 svn:log V 97 Zap some bad examples: opt_foo.h: touch opt_foo.h .. is unnecessary - kmod.mk does this for us. END K 10 svn:author V 6 julian K 8 svn:date V 27 2001-02-04T09:25:14.000000Z K 7 svn:log V 271 MFC: 1.74->1.75 Make the code act the same in the case of BRIDGE being defined, but not turned on, and the case of it not being defined at all. i.e. Disabling bridging re-enables some of the checks it disables. Submitted by: "Rogier R. Mulhuijzen" END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-04T10:06:24.000000Z K 7 svn:log V 119 Remove a sizeof(void *) == sizeof(int) assumption. Submitted by: Loren James Rittle END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-04T10:34:45.000000Z K 7 svn:log V 31 Use macro API to END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-04T10:52:25.000000Z K 7 svn:log V 50 Zap obsolete (died with LKM) EXPORT_SYMS variable END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-04T11:18:15.000000Z K 7 svn:log V 93 Remove the LABPC driver. Doesn't work, no maintainer, more promising code exists elsewhere. END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-04T11:46:17.000000Z K 7 svn:log V 352 Pull the rug from under the 'LKM Compatability' macro - PSEUDO_SET(). There are two 3rd party code chunks using this still - the IPv6 stuff and i4b. Give them a private copy as an alternative to changing them too much. XXX sys/kernel.h still has a #include in it. I will be taking this out shortly - this affects a number of drivers. END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-04T11:47:16.000000Z K 7 svn:log V 46 Warn if people include vn(4) in their config. END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-04T11:53:51.000000Z K 7 svn:log V 77 Remove a DIAGNOSTIC check which belongs in if anyplace at all. END K 10 svn:author V 5 wilko K 8 svn:date V 27 2001-02-04T12:11:09.000000Z K 7 svn:log V 18 Document API CS20 END K 10 svn:author V 5 wilko K 8 svn:date V 27 2001-02-04T12:11:56.000000Z K 7 svn:log V 19 Document API CS20. END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-04T12:35:22.000000Z K 7 svn:log V 37 Remove some stray traces of KMODDEPS END K 10 svn:author V 5 peter K 8 svn:date V 27 2001-02-04T12:36:50.000000Z K 7 svn:log V 25 'device agp' was missing END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-04T12:37:48.000000Z K 7 svn:log V 29 Use macro API. END K 10 svn:author V 3 phk K 8 svn:date V 27 2001-02-04T13:13:25.000000Z K 7 svn:log V 135 Mechanical change to use macro API instead of fondling implementation details. Created with: sed(1) Reviewed by: md5(1) END