Го^75390
188
1044
233
389
229
802
257
318
161
683
126
182
279
724
244
273
167
113
237
176
113
108
131
118
120
177
157
206
251
303
298
188
252
1575
127
510
206
1033
224
138
342
125
438
166
214
178
139
133
981
176
173
166
108
170
102
143
134
133
286
421
133
251
429
131
1052
420
202
310
1877
176
135
315
241
181
165
203
160
142
132
166
121
127
266
161
159
144
188
169
115
165
224
418
276
222
388
232
203
201
202
272
197
267
327
302
207
241
178
172
173
712
216
241
122
222
930
239
130
130
179
150
133
206
121
152
346
265
218
157
269
568
131
284
133
453
139
197
493
221
212
243
148
151
158
246
200
606
441
224
418
143
139
166
132
208
119
129
127
118
161
202
347
134
237
174
162
156
118
132
630
128
165
181
362
648
180
130
793
288
812
226
327
370
2312
240
1249
151
139
130
257

K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-10T19:23:41.000000Z
K 7
svn:log
V 948
MFC:  bring in GCC 2.95.3 + official sjlj exception fixes.

Approved by:	jkh

The the setjump/longjump exception handling fixes are from GCC 2.95.3.test3
and were removed from GCC 2.95.3.test4 and the subsequent release due
to bootstrap problems on HP-UX.  However, they were very well tested and
fixed major problems on all other platforms.  Including all the all the BSD's.
OpenBSD and FreeBSD 5-current both use these official sjlj patches.

W/o this upgrade the following program segmentation faults if compiled
with -O2 (but not -Os or -O or -O0) on 4.2FreeBSD.
There are some large C++ libraries where segfaults also occur, even at -O.

#include <stdio.h>

class A {
public:
  A() { printf("c'tor A\n"); }
  ~A(){ printf("d'tor A\n"); }
};

class foo : public A {
public:
  foo()  { printf("C'tor foo\n"); throw 8; }
  ~foo() { printf("D'tor foo\n"); }
};

int main(){
  try { foo fii; }
  catch (int){ printf("catch ...\n"); }
  return 0;
}

END
K 10
svn:author
V 3
ume
K 8
svn:date
V 27
2001-04-10T19:32:19.000000Z
K 7
svn:log
V 140
MFC 1.21 -> 1.23
  - Make per-address input packet counts for lo0 work.
  - Reject packets to fe80::xxxx%lo0 (xxxx != 1).

Approved by:	jkh

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-10T21:04:32.000000Z
K 7
svn:log
V 296
Add an MI API for sending IPI's.  I used the same API present on the alpha
because:
 - it used a better namespace (smp_ipi_* rather than *_ipi),
 - it used better constant names for the IPI's (IPI_* rather than
   X*_OFFSET), and
 - this API also somewhat exists for both alpha and ia64 already.

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-10T21:34:13.000000Z
K 7
svn:log
V 136
Remove the BETTER_CLOCK #ifdef's.  The code is on by default and is here
to stay for the foreseeable future.

OK'd by:	peter (the idea)

END
K 10
svn:author
V 7
iedowse
K 8
svn:date
V 27
2001-04-10T22:05:47.000000Z
K 7
svn:log
V 705
Split out all the RPC code into a separate function and address a
number of issues:

- Fix background mounts; these were broken in revision 1.40.
- Don't give up before trying all addresses returned by getaddrinfo().
- Use protocol-independent routines where possible.
- Improve error reporting for RPC errors.
- In non-background mode, give up after trying all protocols once.
- Use daemon(3) instead of rolling our own version.
- Never go ahead with the mount() syscall until we have received
  a reply from the remote nfsd; this is especially important with
  non-interruptible mounts, as otherwise a mistyped command might
  require a reboot to correct.

Reviewed by:	alfred, Martin Blapp <mb@imp.ch>

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-10T22:11:01.000000Z
K 7
svn:log
V 164
Catch up to the dirpref changes by copying new fields in the alternate
superblock from the original superblock so that differences in those new
fields are ignored.

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-10T22:18:21.000000Z
K 7
svn:log
V 225
Remove the old APIC I/O higher level IPI API in favor of the newer MI
API for IPI's that isn't tied to the Intel APIC.  MD code can still use
the apic_ipi() function or dink with the apic directly if needed to send
MD IPI's.

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-10T22:22:01.000000Z
K 7
svn:log
V 69
Remove constants defining the bitmasks of the old giant kernel lock.

END
K 10
svn:author
V 5
brian
K 8
svn:date
V 27
2001-04-10T23:16:55.000000Z
K 7
svn:log
V 588
o The -s limit is ARG_MAX - 4K, not ARG_MAX - 2K.
o Mention that the current environment is part of the -s calculation.
o Add a BUGS section that warns against executing a program that increases
  the size of the argument list or the size of the environment.

  I have wondered for a while what the difference is between

    get a big list | xargs sudo command

  which fails and

    get a big list | sudo xargs command

  which succeeds.  The answer is that in the first case, sudo expands
  the environment and pushes the amount of data passed into execve over
  the E2BIG threshold.

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-10T23:53:32.000000Z
K 7
svn:log
V 31
Removed these old 2.9.x files.

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-11T00:12:48.000000Z
K 7
svn:log
V 87
Remove MIPS support.
It has rotted quite badly and no one has provided updates for it.

END
K 10
svn:author
V 7
iedowse
K 8
svn:date
V 27
2001-04-11T00:21:16.000000Z
K 7
svn:log
V 182
Fix a typo relating to the "-U" (force UDP for mount protocol)
option. When specified, make sure to use the correct netid for the
getnetconfigent() call, and also in error messages.

END
K 10
svn:author
V 5
peter
K 8
svn:date
V 27
2001-04-11T00:39:20.000000Z
K 7
svn:log
V 629
Create debug.hashstat.[raw]nchash and debug.hashstat.[raw]nfsnode to
enable easy access to the hash chain stats.  The raw prefixed versions
dump an integer array to userland with the chain lengths.  This cheats
and calls it an array of 'struct int' rather than 'int' or sysctl -a
faithfully dumps out the 128K array on an average machine.  The non-raw
versions return 4 integers: count, number of chains used, maximum chain
length, and percentage utilization (fixed point, multiplied by 100).
The raw forms are more useful for analyzing the hash distribution, while
the other form can be read easily by humans and stats loggers.

END
K 10
svn:author
V 6
murray
K 8
svn:date
V 27
2001-04-11T02:12:14.000000Z
K 7
svn:log
V 148
Source rc.conf so that named.restart can restart named with the correct
flags.

PR:		misc/25049
Submitted by:	Richard Roderick <richard@gohome.net>

END
K 10
svn:author
V 6
jedgar
K 8
svn:date
V 27
2001-04-11T02:19:01.000000Z
K 7
svn:log
V 177
Correct the following defines to match the POSIX.1e spec:

  ACL_PERM_EXEC  -> ACL_EXECUTE
  ACL_PERM_READ  -> ACL_READ
  ACL_PERM_WRITE -> ACL_WRITE

Obtained from:	TrustedBSD

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-11T02:21:13.000000Z
K 7
svn:log
V 72
Properly set `KERNEL' w/in the "doSTDKERNEL:" target.

Reviewed by:	jhb

END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-11T02:33:07.000000Z
K 7
svn:log
V 20
v4.2 initial import

END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-11T02:33:07.000000Z
K 7
svn:log
V 143
This commit was generated by cvs2svn to compensate for changes in r75406,
which included commits to RCS files with non-trunk default branches.

END
K 10
svn:author
V 7
cvs2svn
K 8
svn:date
V 27
2001-04-11T02:33:08.000000Z
K 7
svn:log
V 80
This commit was manufactured by cvs2svn to create tag
'libreadline-vendor-v4_2'.
END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-11T03:15:56.000000Z
K 7
svn:log
V 20
Merge local changes

END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-11T03:49:54.000000Z
K 7
svn:log
V 15
Upgrade to 4.2

END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-11T04:07:38.000000Z
K 7
svn:log
V 38
Remove conflicting readline prototype

END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-11T04:27:10.000000Z
K 7
svn:log
V 25
Upgrade for readline 4.2

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-11T06:16:52.000000Z
K 7
svn:log
V 25
Missed one in rev 1.608.

END
K 10
svn:author
V 3
imp
K 8
svn:date
V 27
2001-04-11T06:40:35.000000Z
K 7
svn:log
V 85
Add O2Micro's OZ6872 Cardbus bridge.

Submitted by: Robert Sexton <robert@kudra.com>

END
K 10
svn:author
V 2
bp
K 8
svn:date
V 27
2001-04-11T09:00:09.000000Z
K 7
svn:log
V 66
Actually install include/fs/smbfs and include/netsmb directories.

END
K 10
svn:author
V 2
bp
K 8
svn:date
V 27
2001-04-11T09:20:33.000000Z
K 7
svn:log
V 114
Add forgotten files for NETSMBCRYPTO option (may be DES based encryption
should be enabled by default, not sure).

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-11T16:15:19.000000Z
K 7
svn:log
V 155
The internal declaration for tilde_expand() now conflicts with the one
that was finally added to the readline headers in readline 4.2.

Submitted by:	ache

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-11T16:20:11.000000Z
K 7
svn:log
V 210
Parse the various argument registers in the printtrap() function so that
one doesn't have to go grab a reference manual to decode them by hand every
time the alpha kernel falls over.

Reviewed by:	drew, -alpha

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-11T16:23:58.000000Z
K 7
svn:log
V 204
New release notes:  vidcontrol(1) update (submitted by sobomax).

Modified release notes:  Note MFC of gcc-2.95.3, libreadline 4.2.

Clarify Maestro-3/Allegro driver loading issues (submitted by scottl).

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-11T16:25:23.000000Z
K 7
svn:log
V 95
MFC:  gcc-2.95.3, clarify ESS Maestro-3/Allegro loading issues.

Approved by:	jkh (implicitly)

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-11T17:06:02.000000Z
K 7
svn:log
V 159
Rename the IPI API from smp_ipi_* to ipi_* since the smp_ prefix is just
"redundant noise" and to match the IPI constant namespace (IPI_*).

Requested by:	bde

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-11T17:21:14.000000Z
K 7
svn:log
V 1477
o First pass at an inter-process authorization regression testing suite.
  This test utility attempts to evaluate the current kernel policy
  for authorization inter-process activities, currently ptrace(),
  kill(, SIGHUP), getpriority(), and setpriority().  The utility creates
  pairs of processes, initializes their credential sets to useful
  cases, and reports on whether the results are in keeping with hard-coded
  safety expectations.

o Currently, this utility relies on the availability of __setugid(),
  an uncomitted system call used for managing the P_SUGID bit.  Due to
  continuing discussion of optional regression testing kernel components
  ("options REGRESSION") I'll hold off on committing that until the
  discussion has reached its natural termination.

o A number of additional testing factors should be taken into account
  in the testing, including tests for different classes of signals,
  interactions with process session characteristics, I/O signalling,
  broadcast activities such as broadcast signalling, mass priority
  setting, and to take into group-related aspects of credentials.
  Additional operations should also be taken into account, such as ktrace,
  debugging attach using procfs, and so on.

o This testing suite is intended to prevent the introduction of bugs
  in the upcoming sets of authorization changes associated with the
  introduction of process capabilities and mandatory access control.

Obtained from: TrustedBSD Project

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-11T18:50:50.000000Z
K 7
svn:log
V 35
Stick proc0 in the PID hash table.

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-11T19:29:24.000000Z
K 7
svn:log
V 413
o Introduce "options REGRESSION", a kernel option which enables
  interfaces and functionality intended for use during correctness and
  regression testing.  Features enabled by "options REGRESSION" may
  in and of themselves introduce security or correctness problems if
  used improperly, and so are not intended for use in production
  systems, only in testing environments.

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 3
imp
K 8
svn:date
V 27
2001-04-11T20:18:29.000000Z
K 7
svn:log
V 113
Add #define for IBM3765.
Fix SWAMPBOX.  It had actiontec's ID.
Reorder pnpids so they are in alphabetical order.

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-11T20:20:40.000000Z
K 7
svn:log
V 936
o Introduce a new system call, __setsugid(), which allows a process to
  toggle the P_SUGID bit explicitly, rather than relying on it being
  set implicitly by other protection and credential logic.  This feature
  is introduced to support inter-process authorization regression testing
  by simplifying userland credential management allowing the easy
  isolation and reproduction of authorization events with specific
  security contexts.  This feature is enabled only by "options REGRESSION"
  and is not intended to be used by applications.  While the feature is
  not known to introduce security vulnerabilities, it does allow
  processes to enter previously inaccessible parts of the credential
  state machine, and is therefore disabled by default.  It may not
  constitute a risk, and therefore in the future pending further analysis
  (and appropriate need) may become a published interface.

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-11T20:21:37.000000Z
K 7
svn:log
V 127
o Regenerated following introduction of __setugid() system call for
  "options REGRESSION".

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 3
imp
K 8
svn:date
V 27
2001-04-11T20:22:16.000000Z
K 7
svn:log
V 46
Add IBM3765 to newcard's pcic pnp device list

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-11T20:23:23.000000Z
K 7
svn:log
V 245
o Enable -DSETSUGID_SUPPORTED in inter-process authorization regression
  test by default, as setugid() is now part of the base kernel (assuming
  (options REGRESSION) has been enabled for the running kernel).

Obtained from: TrustedBSD Project

END
K 10
svn:author
V 2
bp
K 8
svn:date
V 27
2001-04-11T21:35:51.000000Z
K 7
svn:log
V 34
Pull constants from netsmb/smb.h.

END
K 10
svn:author
V 3
nik
K 8
svn:date
V 27
2001-04-11T21:50:13.000000Z
K 7
svn:log
V 345
Consensus on -stable (and #fightclub) is that "standard-supfile" should
default to the branch from which the code came.  So if you pull down
RELENG_4 it defaults to RELENG_4, get -current and 'tag=.'.  And when
we get the 'bug fix only' branch for 4.3, standard-supfile on that
branch should point specifically at that branch.

Approved by:	jkh

END
K 10
svn:author
V 7
cvs2svn
K 8
svn:date
V 27
2001-04-11T21:50:14.000000Z
K 7
svn:log
V 70
This commit was manufactured by cvs2svn to create branch 'RELENG_4_4'.
END
K 10
svn:author
V 6
archie
K 8
svn:date
V 27
2001-04-11T22:04:47.000000Z
K 7
svn:log
V 118
Don't reference a node after we dropped a reference to it
(same as in previous checkin, but in a different function).

END
K 10
svn:author
V 6
jedgar
K 8
svn:date
V 27
2001-04-11T22:09:51.000000Z
K 7
svn:log
V 83
Revamp acl_create_entry() so it actually works.

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 5
brian
K 8
svn:date
V 27
2001-04-11T22:42:54.000000Z
K 7
svn:log
V 45
Introduce -osid and -otsid

Submitted by: dd

END
K 10
svn:author
V 3
imp
K 8
svn:date
V 27
2001-04-11T22:49:00.000000Z
K 7
svn:log
V 41
Fix minor typo in comment.  112x -> 12xx

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-12T02:38:08.000000Z
K 7
svn:log
V 884
o Replace p_cankill() with p_cansignal(), remove wrappage of p_can()
  from signal authorization checking.
o p_cansignal() takes three arguments: subject process, object process,
  and signal number, unlike p_cankill(), which only took into account
  the processes and not the signal number, improving the abstraction
  such that CANSIGNAL() from kern_sig.c can now also be eliminated;
  previously CANSIGNAL() special-cased the handling of SIGCONT based
  on process session.  privused is now deprecated.
o The new p_cansignal() further limits the set of signals that may
  be delivered to processes with P_SUGID set, and restructures the
  access control check to allow it to be extended more easily.
o These changes take into account work done by the OpenBSD Project,
  as well as by Robert Watson and Thomas Moestl on the TrustedBSD
  Project.

Obtained from:  TrustedBSD Project

END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-12T03:33:13.000000Z
K 7
svn:log
V 83
Comment out one of many editline.3 MLINKS conflicting with libreadline
(history.3)

END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-12T09:54:44.000000Z
K 7
svn:log
V 80
Install history.3 as rlhistory.3 to not conflict with existing libedit function

END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-12T09:57:12.000000Z
K 7
svn:log
V 73
Back out history.3 link removing - conflict fixed in libreadline instead

END
K 10
svn:author
V 7
n_hibma
K 8
svn:date
V 27
2001-04-12T10:59:30.000000Z
K 7
svn:log
V 12
From NetBSD

END
K 10
svn:author
V 7
n_hibma
K 8
svn:date
V 27
2001-04-12T11:04:08.000000Z
K 7
svn:log
V 74
TDK ids

Submitted by:	Hidetoshi Shimokawa <simokawa@sat.t.u-tokyo.ac.jp>

END
K 10
svn:author
V 7
n_hibma
K 8
svn:date
V 27
2001-04-12T11:08:59.000000Z
K 7
svn:log
V 7
Regen.

END
K 10
svn:author
V 4
kato
K 8
svn:date
V 27
2001-04-12T12:26:40.000000Z
K 7
svn:log
V 50
Merged from files.i386 revisions 1.359 and 1.360.

END
K 10
svn:author
V 4
kato
K 8
svn:date
V 27
2001-04-12T12:28:42.000000Z
K 7
svn:log
V 41
Merged from options.i386 revision 1.147.

END
K 10
svn:author
V 4
ache
K 8
svn:date
V 27
2001-04-12T17:18:46.000000Z
K 7
svn:log
V 40
Activate backward-compatible prototypes

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-12T17:46:20.000000Z
K 7
svn:log
V 189
o Expand inter-process authorization regression test to include
  signalling with sigsegv as one of the tests.
o Teach errno_to_string() about ENOTSUPP.

Obtained from:  TrustedBSD Project

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-12T19:39:00.000000Z
K 7
svn:log
V 324
o Reduce information leakage into jails by adding invocations of
  p_can(...P_CAN_SEE...) to getpgid(), getsid(), and setpgid(),
  blocking these operations on processes that should not be visible
  by the requesting process.  Required to reduce information leakage
  in MAC environments.

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 5
brian
K 8
svn:date
V 27
2001-04-12T20:04:54.000000Z
K 7
svn:log
V 39
Correct some markup

Submitted by:	bde

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-12T20:46:26.000000Z
K 7
svn:log
V 154
o Limit process information leakage by introducing a p_can(...P_CAN_SEE...)
  in rtprio()'s RTP_LOOKIP implementation.

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-12T21:32:02.000000Z
K 7
svn:log
V 332
o Make kqueue's filt_procattach() function use the error value returned
  by p_can(...P_CAN_SEE), rather than returning EACCES directly.  This
  brings the error code used here into line with similar arrangements
  elsewhere, and prevents the leakage of pid usage information.

Reviewed by:	jlemon
Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-12T21:50:03.000000Z
K 7
svn:log
V 36
remove truncated part from commment

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-12T22:46:07.000000Z
K 7
svn:log
V 955
o Disable two "allow this" exceptions in p_cansched()m retricting the
  ability of unprivileged processes to modify the scheduling properties
  of daemons temporarily taking on unprivileged effective credentials.
  These cases (p1->p_cred->p_ruid == p2->p_ucred->cr_uid) and
  (p1->p_ucred->cr_uid == p2->p_ucred->cr_uid), respectively permitting
  a subject process to influence the scheduling of a daemon if the subject
  process has the same real uid or effective uid as the daemon's effective
  uid.  This removes a number of the warning cases identified by the
  proc_to_proc iner-process authorization regression test.
o As these are new restrictions, we'll have to watch out carefully for
  possible side effects on running code: they seem reasonable to me,
  but it's possible this change might have to be backed out if problems
  are experienced.

Reported by:	src/tools/regression/security/proc_to_proc/testuid
Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 8
gshapiro
K 8
svn:date
V 27
2001-04-13T01:31:17.000000Z
K 7
svn:log
V 322
Match ip6fw's command line options to those of ipfw (specifically, added
the ability to use a preprocessor, use the -q (quiet) flag when reading
from a file).  The source used is from ipfw.

Clean up exit codes while I am here.

KAME has been informed and plans on integrating these patches into their
own source as well.

END
K 10
svn:author
V 8
gshapiro
K 8
svn:date
V 27
2001-04-13T01:40:27.000000Z
K 7
svn:log
V 104
With the recent change to ip6fw, it is safe to return to using ${fw6cmd}
which may include the -q flag.

END
K 10
svn:author
V 5
peter
K 8
svn:date
V 27
2001-04-13T01:45:22.000000Z
K 7
svn:log
V 215
Remove the 'DO NOT EDIT THIS FILE' crud that we spit out with 'crontab -l'.
Otherwise, "crontab -l > file; vi file; crontab file" adds an extra set
of "DO NOT EDIT" markers each and every time which is a bit silly.

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-13T03:06:22.000000Z
K 7
svn:log
V 1779
o Disallow two "allow this" exceptions in p_cansignal() restricting
  the ability of unprivileged processes to deliver arbitrary signals
  to daemons temporarily taking on unprivileged effective credentials
  when P_SUGID is not set on the target process:
  Removed:
     (p1->p_cred->cr_ruid != ps->p_cred->cr_uid)
     (p1->p_ucred->cr_uid != ps->p_cred->cr_uid)
o Replace two "allow this" exceptions in p_cansignal() restricting
  the ability of unprivileged processes to deliver arbitrary signals
  to daemons temporarily taking on unprivileged effective credentials
  when P_SUGID is set on the target process:
  Replaced:
     (p1->p_cred->p_ruid != p2->p_ucred->cr_uid)
     (p1->p_cred->cr_uid != p2->p_ucred->cr_uid)
  With:
     (p1->p_cred->p_ruid != p2->p_ucred->p_svuid)
     (p1->p_ucred->cr_uid != p2->p_ucred->p_svuid)
o These changes have the effect of making the uid-based handling of
  both P_SUGID and non-P_SUGID signal delivery consistent, following
  these four general cases:
     p1's ruid equals p2's ruid
     p1's euid equals p2's ruid
     p1's ruid equals p2's svuid
     p1's euid equals p2's svuid
  The P_SUGID and non-P_SUGID cases can now be largely collapsed,
  and I'll commit this in a few days if no immediate problems are
  encountered with this set of changes.
o These changes remove a number of warning cases identified by the
  proc_to_proc inter-process authorization regression test.
o As these are new restrictions, we'll have to watch out carefully for
  possible side effects on running code: they seem reasonable to me,
  but it's possible this change might have to be backed out if problems
  are experienced.

Submitted by:		src/tools/regression/security/proc_to_proc/testuid
Reviewed by:		tmm
Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-13T03:50:37.000000Z
K 7
svn:log
V 81
Make SOMAXCONN a kernel option.

Submitted by: Terry Lambert <terry@lambert.org>

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-13T06:49:47.000000Z
K 7
svn:log
V 44
Update comment to match ipfw/ipfw.c,v 1.95.

END
K 10
svn:author
V 2
dd
K 8
svn:date
V 27
2001-04-13T06:54:05.000000Z
K 7
svn:log
V 223
Back out most of revision 1.28: lists of diagnostics must use -diag,
not -tag.  Instead, put a period after the error messages to aide
those using dumb terminals not capable of properly displaying markup.

Requested by:	ru

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-13T06:56:16.000000Z
K 7
svn:log
V 149
People, please read the README file!!!

: These files use 4 space indentation, and other than in the header
: comments, should not contain any tabs.

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-13T08:07:37.000000Z
K 7
svn:log
V 86
Use a macro wrapper over printf along with KASSERT to reduce the amount
of code here.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-13T08:14:58.000000Z
K 7
svn:log
V 74
Document /usr/include/fs/smbfs and /usr/include/netsmb.

Submitted by:	bp

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-13T08:31:38.000000Z
K 7
svn:log
V 110
- Add a comment at the start of the spin locks list.
- The alpha SMP code uses an "ap boot" spinlock as well.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-13T08:49:52.000000Z
K 7
svn:log
V 69
mdoc(7) police: removed hard sentence breaks introduced in rev.1.10.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-13T09:15:16.000000Z
K 7
svn:log
V 51
mdoc(7) police: Fixed typo and markup in rev.1.11.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-13T09:17:56.000000Z
K 7
svn:log
V 41
mdoc(7) police: Fixed markup in rev.1.5.

END
K 10
svn:author
V 5
markm
K 8
svn:date
V 27
2001-04-13T09:29:34.000000Z
K 7
svn:log
V 72
Handle a rare but fatal race invoked sometimes when SIGSTOP is
invoked.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-13T09:33:03.000000Z
K 7
svn:log
V 30
mdoc(7) police: Fixed markup.

END
K 10
svn:author
V 6
murray
K 8
svn:date
V 27
2001-04-13T09:37:25.000000Z
K 7
svn:log
V 32
Generate useful error messages.

END
K 10
svn:author
V 5
markm
K 8
svn:date
V 27
2001-04-13T09:46:54.000000Z
K 7
svn:log
V 171
Make this more lint-friendly. This file seems to be invoked in just
about any .c file that includes a .h, and lint produces copious
whining because of the asm ...; stuff.

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-13T10:15:53.000000Z
K 7
svn:log
V 66
convert if/panic -> KASSERT, explain what triggered the assertion

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-13T10:22:14.000000Z
K 7
svn:log
V 64
use %p for pointer printf, include sys/systm.h for printf proto

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-13T10:23:32.000000Z
K 7
svn:log
V 49
protect pbufs and associated counts with a mutex

END
K 10
svn:author
V 2
bp
K 8
svn:date
V 27
2001-04-13T10:50:48.000000Z
K 7
svn:log
V 97
This file also depends on sys/types.h and sys/ioccom.h.
Remove some old junk.

Submitted by:	bde

END
K 10
svn:author
V 2
bp
K 8
svn:date
V 27
2001-04-13T10:53:56.000000Z
K 7
svn:log
V 78
All NETSMB* options should use opt_netsmb.h file (the joy of multiple repos).

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-13T11:15:40.000000Z
K 7
svn:log
V 20
if/panic -> KASSERT

END
K 10
svn:author
V 2
bp
K 8
svn:date
V 27
2001-04-13T11:26:54.000000Z
K 7
svn:log
V 74
Move VT_SMBFS definition to the proper place. Undefine VI_LOCK/VI_UNLOCK.

END
K 10
svn:author
V 2
bp
K 8
svn:date
V 27
2001-04-13T12:11:19.000000Z
K 7
svn:log
V 132
Add smbfs module. Currently it includes smbfs, netsmb and DES parts.
Kernel should be compiled with options LIBMCHAIN and LIBICONV.

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-13T14:33:45.000000Z
K 7
svn:log
V 321
o Since uid checks in p_cansignal() are now identical between P_SUGID
  and non-P_SUGID cases, simplify p_cansignal() logic so that the
  P_SUGID masking of possible signals is independent from uid checks,
  removing redundant code and generally improving readability.

Reviewed by:	tmm
Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 4
nate
K 8
svn:date
V 27
2001-04-13T15:13:15.000000Z
K 7
svn:log
V 182
- Newer versions of bind log denied secondary zone tranfers with
  'denied AXFR', not 'unapproved AXFR'.

This is an MFC candidate.

PR:		misc/26529
Submitted by:	duwde@duwde.com.br

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-13T16:09:40.000000Z
K 7
svn:log
V 125
o s/debug/ptrace/ since shortly there will be tests involving other
  forms of debugging.

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-13T16:11:20.000000Z
K 7
svn:log
V 294
New release notes:  wx(4) supports new cards (submitted by mjacob),

Add missing CMedia and Crystal Semiconductor sound chips (submitted by
orion).

Fix estimate of 5.0-RELEASE release date (submitted by dd).

ntpd(8) security fix cross-reference to SA-01:31.

Fix typo: s/maestreo3/maestro3/.

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-13T16:13:10.000000Z
K 7
svn:log
V 138
MFC:  Fix typo s/maestreo3/maestro3/, SA-01:31, add missing C-Media
and Crystal Semiconductor sound chips.

Approved by:	jkh (implicitly)

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-13T16:25:25.000000Z
K 7
svn:log
V 106
o Add inter-process authorization uid regression testing for ktrace().

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-13T16:38:34.000000Z
K 7
svn:log
V 104
o Add a comment identifying the "privileged on privileged" scenario.

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 4
nate
K 8
svn:date
V 27
2001-04-13T16:49:34.000000Z
K 7
svn:log
V 108
MFC: Correct identify denied secondary zone transfer messages.

PR:             misc/26529
Approved by:	jkh

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-13T17:14:53.000000Z
K 7
svn:log
V 179
People are still having problems with i586_* on UP machines and SMP
machines, so just hack it to disable them for now until it can be fixed.

Inspired by hair pulling of:	asmodai

END
K 10
svn:author
V 3
ben
K 8
svn:date
V 27
2001-04-13T17:59:48.000000Z
K 7
svn:log
V 104
MFC rev 1.31: Allow ident requests with trailing junk following
the terminating "\n".

Approved by:	jkh

END
K 10
svn:author
V 6
jedgar
K 8
svn:date
V 27
2001-04-13T19:14:38.000000Z
K 7
svn:log
V 171
Add the remaining POSIX.1e ACL definitions:
  ACL_UNDEFINED_TAG, ACL_UNDEFINED_ID, ACL_FIRST_ENTRY, ACL_NEXT_ENTRY

Reviewed by:	rwatson
Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 6
jedgar
K 8
svn:date
V 27
2001-04-13T19:24:28.000000Z
K 7
svn:log
V 231
Convert getfacl to the ACL editing library functions.  getfacl should
now compile/work on any POSIX.1e-compliant implementation (also tested
against the current Linux patches).

Review by:	rwatson
Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 6
jedgar
K 8
svn:date
V 27
2001-04-13T19:37:04.000000Z
K 7
svn:log
V 206
Add acl_get_perm_np(3), a non-portable function to check if a
permission is in a permission set, required for third-party
applications such as Samba.

Reviewed by:	rwatson
Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 5
wilko
K 8
svn:date
V 27
2001-04-13T19:47:07.000000Z
K 7
svn:log
V 112
Update boot capabilities for Adaptec 2940-series

Obtained from:	axp-list@redhat.com / Jay.Estabrook@compaq.com

END
K 10
svn:author
V 2
dd
K 8
svn:date
V 27
2001-04-13T19:49:07.000000Z
K 7
svn:log
V 149
mdoc(7) police: rename the DIAGNOSTICS section to ERRORS to match the
content, and correct the parameters to the -tag list therein.

Reviewed by:	ru

END
K 10
svn:author
V 2
dd
K 8
svn:date
V 27
2001-04-13T19:59:47.000000Z
K 7
svn:log
V 87
mdoc(7) police: properly use a -diag list in the DIAGNOSTICS section.

Reviewed by:	ru

END
K 10
svn:author
V 2
dd
K 8
svn:date
V 27
2001-04-13T20:43:59.000000Z
K 7
svn:log
V 81
mdoc(7) police: misc. markup fixes in the DIAGNOSTICS section.

Submitted by:	ru

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-13T23:20:16.000000Z
K 7
svn:log
V 78
Turn -b (BSD socket compat mode) back on by default, as we don't have TLI/XTI

END
K 10
svn:author
V 8
mckusick
K 8
svn:date
V 27
2001-04-13T23:54:49.000000Z
K 7
svn:log
V 614
Do not allow the soft updates flag to be set if the filesystem is dirty.
Because the kernel will allow the mounting of unclean filesystems when
the soft updates flag is set, it is important that only soft updates
style inconsistencies (missing blocks and inodes) be present. Otherwise
a panic may ensue. It is also important that the filesystem be in a clean
state when the soft updates flag is set because the background fsck uses
the fact that the flag is set to indicate that it is safe to run. If
background fsck encounters non-soft updates style inconsistencies, it
will exit with unexpected inconsistencies.

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-14T01:49:32.000000Z
K 7
svn:log
V 120
Remove the filename_completion_function() extern that conflicts with the
latest version of this fuction in Readline 4.2

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-14T02:10:05.000000Z
K 7
svn:log
V 145
*sigh*... when trying to dike out the `ncr' driver, I was getting the `sym'
driver too because it had "ncr" in its comment.

Submitted by:	joerg

END
K 10
svn:author
V 3
jkh
K 8
svn:date
V 27
2001-04-14T02:32:22.000000Z
K 7
svn:log
V 30
MFC: load streams before svr4

END
K 10
svn:author
V 2
dd
K 8
svn:date
V 27
2001-04-14T02:34:59.000000Z
K 7
svn:log
V 130
Add ``RETURN VALUES'' and ``ERRORS'' sections since getpgid(2) can
fail.  Also fix a minor grammar nit (it's -> its).

PR:		26520

END
K 10
svn:author
V 8
mckusick
K 8
svn:date
V 27
2001-04-14T05:26:28.000000Z
K 7
svn:log
V 832
This checkin adds support in ufs/ffs for the FS_NEEDSFSCK flag.
It is described in ufs/ffs/fs.h as follows:

/*
 * Filesystem flags.
 *
 * Note that the FS_NEEDSFSCK flag is set and cleared only by the
 * fsck utility. It is set when background fsck finds an unexpected
 * inconsistency which requires a traditional foreground fsck to be
 * run. Such inconsistencies should only be found after an uncorrectable
 * disk error. A foreground fsck will clear the FS_NEEDSFSCK flag when
 * it has successfully cleaned up the filesystem. The kernel uses this
 * flag to enforce that inconsistent filesystems be mounted read-only.
 */
#define FS_UNCLEAN    0x01	/* filesystem not clean at mount */
#define FS_DOSOFTDEP  0x02	/* filesystem using soft dependencies */
#define FS_NEEDSFSCK  0x04	/* filesystem needs sync fsck before mount */

END
K 10
svn:author
V 5
wilko
K 8
svn:date
V 27
2001-04-14T08:29:23.000000Z
K 7
svn:log
V 144
Update boot capabilities for Adaptec 2940-series

Approved by:	jkh (implicitely)
Obtained from:  axp-list@redhat.com / Jay.Estabrook@compaq.com

END
K 10
svn:author
V 5
markm
K 8
svn:date
V 27
2001-04-14T09:48:26.000000Z
K 7
svn:log
V 36
Toss into attic stuff we don't use.

END
K 10
svn:author
V 4
dirk
K 8
svn:date
V 27
2001-04-14T10:05:01.000000Z
K 7
svn:log
V 37
Log denied IXFR, too.

MFC canidate.

END
K 10
svn:author
V 3
jkh
K 8
svn:date
V 27
2001-04-14T12:21:56.000000Z
K 7
svn:log
V 87
Properly redraw the options screen when this option is selected.

Submitted by:	olgeni

END
K 10
svn:author
V 3
jkh
K 8
svn:date
V 27
2001-04-14T12:26:03.000000Z
K 7
svn:log
V 58
MFS: deal with svr4 module's dependency on streams module

END
K 10
svn:author
V 4
dirk
K 8
svn:date
V 27
2001-04-14T13:45:08.000000Z
K 7
svn:log
V 40
MFC: Log denied IXFR.

Approved by:	jkh

END
K 10
svn:author
V 5
brian
K 8
svn:date
V 27
2001-04-14T15:32:16.000000Z
K 7
svn:log
V 111
New-busify and ansify.

I've cleaned up a bit of the formatting here, but it's still a long way
from style(9).

END
K 10
svn:author
V 5
brian
K 8
svn:date
V 27
2001-04-14T15:36:45.000000Z
K 7
svn:log
V 27
dgm now builds as a module

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-14T16:20:34.000000Z
K 7
svn:log
V 59
MFC:  ntpd(8) vulnerability fix cross-references SA-01:31.

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-14T16:43:14.000000Z
K 7
svn:log
V 252
Hardware listing updates:

Make listings of dc(4)-supported cards consistent with manpage
(submitted by fenner).

amr(4) supports the Dell PERC 3/DCL (submitted by
Vivek Khera <khera@kciLink.com>).

Properly capitalize "Ethernet" and variants thereof.

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-14T16:45:06.000000Z
K 7
svn:log
V 171
MFC:  dc(4)-supported cards update, amr(0) supports Dell PERC 3/DCL,
properly capitalize "Ethernet", sysinstall(8) default partition sizes.

Approved by:	jkh (implicitly)

END
K 10
svn:author
V 8
mckusick
K 8
svn:date
V 27
2001-04-14T18:32:09.000000Z
K 7
svn:log
V 120
Update to describe use of mdconfig instead of deprecated vnconfig.

Submitted by:	Steve Ames <steve@virtual-voodoo.com>

END
K 10
svn:author
V 3
sos
K 8
svn:date
V 27
2001-04-14T18:33:08.000000Z
K 7
svn:log
V 65
The VIA 586 chip does UDMA from rev 0x3 onwards.

MFC candidate!

END
K 10
svn:author
V 5
brian
K 8
svn:date
V 27
2001-04-14T18:51:39.000000Z
K 7
svn:log
V 174
Suggest that kernels are built with ``cd /usr/src; make buildkernel''
Add a comment saying that our softc is automatically allocated by the
parent bus.
Fix lots of spellings

END
K 10
svn:author
V 5
markm
K 8
svn:date
V 27
2001-04-14T20:42:04.000000Z
K 7
svn:log
V 473
Back out wrapping the asm ... ; bits in #ifndef lint macros. There
are some good reasons for not doing this, even if the linting of
the code breaks.

1) If lint were ever to understand the stuff inside the macros,
   that would break the checks.

2) There are ways to use __GNUC__ to exclude overly specific
   code.

3) (Not yet practical) Lint(1) needs to properlyu understand
   all of te code we actually run.

Complained about by:	bde
Education by:		jake, jhb, eivind

END
K 10
svn:author
V 5
brian
K 8
svn:date
V 27
2001-04-14T21:33:58.000000Z
K 7
svn:log
V 37
Call strlen() once instead of twice.

END
K 10
svn:author
V 3
jkh
K 8
svn:date
V 27
2001-04-14T22:29:31.000000Z
K 7
svn:log
V 191
Get the crypto checksums in the right file.  This bug has been
around for a very long time and it's my fault.  Sorry. :)

PR:		20311
Submitted by:	Makoto MATSUSHITA <matusita@jp.freebsd.org>

END
K 10
svn:author
V 3
jkh
K 8
svn:date
V 27
2001-04-14T22:29:49.000000Z
K 7
svn:log
V 41
MFC: crypto checksums go to correct file

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-15T00:33:00.000000Z
K 7
svn:log
V 359
Reorder some of the release notes items so that related items are
adjacent (as an example, pkg_* items were scattered throughout the
file).  Hopefully done without adding or subtracting items from
each architecture's release notes.  This is no substitute for a more
coherent organization, but it will do for now.

Fix some minor grammar and punctuation nits.

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-15T10:22:04.000000Z
K 7
svn:log
V 44
use TAILQ_FOREACH, fix a comment's location

END
K 10
svn:author
V 6
alfred
K 8
svn:date
V 27
2001-04-15T12:04:05.000000Z
K 7
svn:log
V 101
note that VOP_STRATEGY may block.

Learned from: vm/swap_pager.c comment above swap_pager_putpages()

END
K 10
svn:author
V 3
phk
K 8
svn:date
V 27
2001-04-15T13:44:05.000000Z
K 7
svn:log
V 400
In the /etc/rc startup script a soft link is created from /var/run/log to
/dev/log like this: if [ ! -h /dev/log ];
The man page for test(1) says that the -h switch is depracated and that
users should NOT rely on it being available. It suggest the -L switch instead.
They both do the same thing: check for the existence of the symbolic link.

PR:		26596
Submitted by:	mikem <mike_makonnen@yahoo.com>

END
K 10
svn:author
V 6
jedgar
K 8
svn:date
V 27
2001-04-15T15:21:15.000000Z
K 7
svn:log
V 125
Correct a bogus cast in acl_get_qualifier() causing invalid
ID's to be stored in the ACL.

Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-15T19:34:40.000000Z
K 7
svn:log
V 116
Apply rev 1.48 (only dike out the `ncr' driver, not every line with the
[sub]string "ncr" in it) to the Alpha also.

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-15T19:37:28.000000Z
K 7
svn:log
V 147
Turn on kernel debugging support (DDB, INVARIANTS, INVARIANT_SUPPORT, WITNESS)
by default while SMPng is still being developed.

Submitted by:	jhb

END
K 10
svn:author
V 2
dd
K 8
svn:date
V 27
2001-04-15T19:40:22.000000Z
K 7
svn:log
V 57
Document getresgid and getresuid calls.

Reviewed by:	ru

END
K 10
svn:author
V 2
dd
K 8
svn:date
V 27
2001-04-15T19:41:44.000000Z
K 7
svn:log
V 60
Make links from setresuid.2 to getresgid.2 and getresuid.2.

END
K 10
svn:author
V 2
dd
K 8
svn:date
V 27
2001-04-15T19:53:47.000000Z
K 7
svn:log
V 67
Grammar police: "its", not "it's", is the possessive form of "it".

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-15T20:01:02.000000Z
K 7
svn:log
V 150
Rev 1.11 introduced a bug where the processing became case insensative for
username to rm.

PR:		25961
Submitted by:	Linh Pham <lplist@closedsrc.org>

END
K 10
svn:author
V 5
dougb
K 8
svn:date
V 27
2001-04-15T20:38:01.000000Z
K 7
svn:log
V 105
Forced commit to point out that PR 25961 was actually originated by
Dan Langille <dan@freebsddiary.org>.

END
K 10
svn:author
V 5
dougb
K 8
svn:date
V 27
2001-04-15T20:43:49.000000Z
K 7
svn:log
V 511
Add a more useful solution to the problem of password files with more than
one user who differs only by case. The other perl tools assume (or enforce)
the all lowercase requirement, therefore making the search through
master.passwd case insensitive seemed a reasonable optimization, IMO.

I understand, although I do not sympathize with, the argument that someone
might want to do this on purpose, and might subsequently want to use the
wrong tool for the job. So, this fix should hopefully satisfy both camps.

END
K 10
svn:author
V 3
phk
K 8
svn:date
V 27
2001-04-15T20:59:29.000000Z
K 7
svn:log
V 348
Add the "SITE MD5 filename" facility.

This allows you to determine if the file on the other side is the same
as the one you have without transferring the entire file to compare.

Needless to say, if the server end lies to you this check doesn't work,
but on the other hand, if it lies to you about the files checksum,
what can you trust from it ?

END
K 10
svn:author
V 4
grog
K 8
svn:date
V 27
2001-04-16T05:29:54.000000Z
K 7
svn:log
V 130
open_drive: Recognize drives located on Mylex RAID controllers.

Reported by:	Matt Groener <root@groenquist.com>
Approved by:	jkh

END
K 10
svn:author
V 5
luigi
K 8
svn:date
V 27
2001-04-16T06:37:03.000000Z
K 7
svn:log
V 323
New script to help creation of shared readonly diskless partition.
It also has some instructions on how to setup the client and
the server. I have been using this code for over 2 years
on RELENG_3 and later RELENG_4. Have not tried on CURRENT, but
in case there are any issues these are in /etc/rc and
/etc/rc.diskless{12}

END
K 10
svn:author
V 4
kato
K 8
svn:date
V 27
2001-04-16T09:13:51.000000Z
K 7
svn:log
V 50
Merged from sys/conf/options.i386 revision 1.148.

END
K 10
svn:author
V 4
kato
K 8
svn:date
V 27
2001-04-16T09:15:40.000000Z
K 7
svn:log
V 46
Merged from sys/i386/isa/npx.c revision 1.95.

END
K 10
svn:author
V 4
jhay
K 8
svn:date
V 27
2001-04-16T13:05:05.000000Z
K 7
svn:log
V 73
Update to the 2001-04-02 version of the nanokernel code from Dave Mills.

END
K 10
svn:author
V 4
jhay
K 8
svn:date
V 27
2001-04-16T13:20:39.000000Z
K 7
svn:log
V 39
Move the isa parts to a separate file.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-16T14:51:11.000000Z
K 7
svn:log
V 116
Document that SITE extensions are disabled for anonymous logins.

Obtained from:	logdaemon package by Wietse Venema

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-16T15:06:19.000000Z
K 7
svn:log
V 28
mdoc(7) police: fix markup.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-16T15:06:57.000000Z
K 7
svn:log
V 38
mdoc(7) police: add missing .El call.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-16T15:12:58.000000Z
K 7
svn:log
V 36
mdoc(7) police: prepare for mdocNG.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-16T15:14:07.000000Z
K 7
svn:log
V 27
mdoc(7) police: cosmetics.

END
K 10
svn:author
V 6
obrien
K 8
svn:date
V 27
2001-04-16T15:17:27.000000Z
K 7
svn:log
V 66
Grrr, get the right change from the the machine I tested this on.

END
K 10
svn:author
V 2
ru
K 8
svn:date
V 27
2001-04-16T15:18:16.000000Z
K 7
svn:log
V 110
mdoc(7) police: Prepare for mdocNG.

The .Cd macro does not cause a line break until in the SYNOPSIS section.

END
K 10
svn:author
V 3
ken
K 8
svn:date
V 27
2001-04-16T15:53:54.000000Z
K 7
svn:log
V 254
Fix an off-by-2 error in periphdriver_register().  The read side of the
bcopy would go off the end of the array by two elements, which sometimes
causes a panic if it happens to cross into a page that isn't mapped.

Submitted by:	gibbs
Reviewed by:	peter

END
K 10
svn:author
V 5
markm
K 8
svn:date
V 27
2001-04-16T17:04:41.000000Z
K 7
svn:log
V 40
Add missing sound module.

OK'ed by:	cg

END
K 10
svn:author
V 8
gshapiro
K 8
svn:date
V 27
2001-04-16T18:36:35.000000Z
K 7
svn:log
V 139
Clean up temporary file(s) and directory when m4 exits without falling
through main() (e.g., signals or calls to errx()).

PR:		conf/25715

END
K 10
svn:author
V 6
jesper
K 8
svn:date
V 27
2001-04-16T21:14:13.000000Z
K 7
svn:log
V 79
Fix typo s/thissystem/this system/

Submitted by:	Stephen <sdk@shell.yuck.net>

END
K 10
svn:author
V 3
sos
K 8
svn:date
V 27
2001-04-16T21:22:34.000000Z
K 7
svn:log
V 70
Add support the the Intel ICH2 mobile

Tidy chip name printing a bit.

END
K 10
svn:author
V 3
jkh
K 8
svn:date
V 27
2001-04-16T21:27:52.000000Z
K 7
svn:log
V 64
Add windowmaker and sawfish to "must have" package set on disc1

END
K 10
svn:author
V 3
jkh
K 8
svn:date
V 27
2001-04-16T21:49:42.000000Z
K 7
svn:log
V 26
It's now over 5000 ports.

END
K 10
svn:author
V 5
green
K 8
svn:date
V 27
2001-04-16T22:20:26.000000Z
K 7
svn:log
V 38
Support the empty "PASS\r\n" command.

END
K 10
svn:author
V 8
mckusick
K 8
svn:date
V 27
2001-04-16T22:22:21.000000Z
K 7
svn:log
V 532
Minor background cleanups:
1) Set the FS_NEEDSFSCK flag when unexpected problems are encountered.
2) Clear the FS_NEEDSFSCK flag after a successful foreground cleanup.
3) Refuse to run in background when the FS_NEEDSFSCK flag is set.
4) Avoid taking and removing a snapshot when the filesystem is already clean.
5) Properly implement the force cleaning (-f) flag when in preen mode.

Note that you need to have revision 1.21 (date: 2001/04/14 05:26:28) of
fs.h installed in <ufs/ffs/fs.h> defining FS_NEEDSFSCK for this to compile.

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-17T02:22:16.000000Z
K 7
svn:log
V 35
s/Over 4500 ports/Over 5000 ports/

END
K 10
svn:author
V 4
bmah
K 8
svn:date
V 27
2001-04-17T02:24:03.000000Z
K 7
svn:log
V 72
MFC:  s/Over 4500 ports/Over 5000 ports/

Approved by:	jkh (implicitly)

END
K 10
svn:author
V 6
jedgar
K 8
svn:date
V 27
2001-04-17T02:33:20.000000Z
K 7
svn:log
V 86
Limit number of paths returned via glob() for authorized users
using tilde expansion.

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-17T02:41:41.000000Z
K 7
svn:log
V 269
- Stop other CPU's in the SMP case when we enter ddb.
- Add a new ddb command: 'show pcpu' similar to the i386 command added
  recently.  By default it displays the current CPU's info, but an optional
  argument can specify the logical ID of a specific CPU to examine.

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-17T02:44:35.000000Z
K 7
svn:log
V 555
In exception_return(), test for usermode before testing the IPL to see if
we should call ast().  This allows us to branch to a separate Lkernelret
label so we can fixup the saved t7 register in the trapframe.  Otherwise
we can run into a problem on SMP systems where a process is interrupted by
a trap or interrupt on one CPU, migrates to another CPU, and then returns
with the t7 in the stack clobbering the CPU's t7.  As a result, two CPU's
would both point to the same per-CPU data and things would go downhill from
there.

Sleuthing help by:	gallatin

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-17T02:46:13.000000Z
K 7
svn:log
V 88
Add a cpu_throw() function that secondary CPU's can use for their first
context switch.

END
K 10
svn:author
V 6
jedgar
K 8
svn:date
V 27
2001-04-17T02:47:36.000000Z
K 7
svn:log
V 35
MFC 1.74: globbing limits for ftpd

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-17T02:50:05.000000Z
K 7
svn:log
V 700
- Fix memory barriers in atomic operations so that the barriers are always
  "inside" of locked regions.  That is, an acquire atomic operation will
  always enforce a memory barrier after the atomic operation and a release
  operation will always enforce a memory barrier before the atomic
  operation.
- Explicitly use 'mb' instead of 'wmb' in release atomic operations.  The
  'wmb' memory barrier is not strong enough to guarantee coherence with
  other processors.  This is effectively a nop since alpha_wmb() actually
  performs a 'mb' and not a 'wmb', but I wanted the code to be more
  correct since at some point in the future alpha_wmb()'s implementation
  may switch to being a real 'wmb'.

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-17T02:51:28.000000Z
K 7
svn:log
V 195
- Add appropriate #ifndef/#define/#endif to protect against multiple
  inclusions.
- Blow away all evidence of a static curpcb as curpcb is a per-CPU variable
  and this definition is now bogus.

END
K 10
svn:author
V 5
peter
K 8
svn:date
V 27
2001-04-17T03:03:45.000000Z
K 7
svn:log
V 717
Previous clobbered a work-in-progress.  Here is the merged result:

Limit the "pathname" glob to one item, as that is what all users of it
are expecting, except for LIST.

Always glob, instead of when the first character is a ~.  For example,
if you had directories ~/x1, and ~/x2, then "cwd x[1]" would fail, but
"cwd ~/x[1]" would work since it was globbed due to the ~ character.
Also, "cwd ~/x[12]" used to arbitarily work as it used the first
expansion (ie: x1) without an error.  Make it return '550 ambiguous'
instead of '550 not found' so that the user can see the difference.

For LIST, just use the user supplied string as the popen does the glob.

Problem noticed by:  Ajay Mittal <amittal@iprg.nokia.com>

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-17T03:34:52.000000Z
K 7
svn:log
V 133
Exit and re-enter the critical section while spinning for a spinlock so
that interrupts can come in while we are waiting for a lock.

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-17T03:35:38.000000Z
K 7
svn:log
V 234
Check to see if enroll() returns NULL in the witness initialization.  This
can happen if witness runs out of resources during initialization or if
witness_skipspin is enabled.

Sleuthing by:	Peter Jeremy <peter.jeremy@alcatel.com.au>

END
K 10
svn:author
V 3
jhb
K 8
svn:date
V 27
2001-04-17T04:18:08.000000Z
K 7
svn:log
V 277
Blow away the panic mutex in favor of using a single atomic_cmpset() on a
panic_cpu shared variable.  I used a simple atomic operation here instead
of a spin lock as it seemed to be excessive overhead.  Also, this can avoid
recursive panics if, for example, witness is broken.

END
K 10
svn:author
V 7
rwatson
K 8
svn:date
V 27
2001-04-17T04:33:34.000000Z
K 7
svn:log
V 2214
In my first reading of POSIX.1e, I misinterpreted handling of the
ACL_USER_OBJ and ACL_GROUP_OBJ fields, believing that modification of the
access ACL could be used by privileged processes to change file/directory
ownership.  In fact, this is incorrect; ACL_*_OBJ (+ ACL_MASK and
ACL_OTHER) should have undefined ae_id fields; this commit attempts
to correct that misunderstanding.

o Modify arguments to vaccess_acl_posix1e() to accept the uid and gid
  associated with the vnode, as those can no longer be extracted from
  the ACL passed as an argument.  Perform all comparisons against
  the passed arguments.  This actually has the effect of simplifying
  a number of components of this call, as well as reducing the indent
  level, but now seperates handling of ACL_GROUP_OBJ from ACL_GROUP.

o Modify acl_posix1e_check() to return EINVAL if the ae_id field of
  any of the ACL_{USER_OBJ,GROUP_OBJ,MASK,OTHER} entries is a value
  other than ACL_UNDEFINED_ID.  As a temporary work-around to allow
  clean upgrades, set the ae_id field to ACL_UNDEFINED_ID before
  each check so that this cannot cause a failure in the short term
  (this work-around will be removed when the userland libraries and
  utilities are updated to take this change into account).

o Modify ufs_sync_acl_from_inode() so that it forces
  ACL_{USER_OBJ,GROUP_OBJ,MASK,OTHER} ae_id fields to ACL_UNDEFINED_ID
  when synchronizing the ACL from the inode.

o Modify ufs_sync_inode_from_acl to not propagate uid and gid
  information to the inode from the ACL during ACL update.  Also
  modify the masking of permission bits that may be set from
  ALLPERMS to (S_IRWXU|S_IRWXG|S_IRWXO), as ACLs currently do not
  carry none-ACCESSPERMS (S_ISUID, S_ISGID, S_ISTXT).

o Modify ufs_getacl() so that when it emulates an access ACL from
  the inode, it initializes the ae_id fields to ACL_UNDEFINED_ID.

o Clean up ufs_setacl() substantially since it is no longer possible
  to perform chown/chgrp operations using vop_setacl(), so all the
  access control for that can be eliminated.

o Modify ufs_access() so that it passes owner uid and gid information
  into vaccess_acl_posix1e().

Pointed out by:	jedger
Obtained from:	TrustedBSD Project

END
K 10
svn:author
V 8
mckusick
K 8
svn:date
V 27
2001-04-17T05:06:37.000000Z
K 7
svn:log
V 142
Background fsck sysctl operations must use vn_start_write and
vn_finished_write so that they do not attempt to modify a
suspended filesystem.

END
K 10
svn:author
V 8
mckusick
K 8
svn:date
V 27
2001-04-17T05:37:51.000000Z
K 7
svn:log
V 1150
Add debugging option to always read/write cylinder groups as full
sized blocks. To enable this option, use: `sysctl -w debug.bigcgs=1'.
Add debugging option to disable background writes of cylinder
groups. To enable this option, use: `sysctl -w debug.dobkgrdwrite=0'.
These debugging options should be tried on systems that are panicing
with corrupted cylinder group maps to see if it makes the problem
go away. The set of panics in question are:

	ffs_clusteralloc: map mismatch
	ffs_nodealloccg: map corrupted
	ffs_nodealloccg: block not in map
	ffs_alloccg: map corrupted
	ffs_alloccg: block not in map
	ffs_alloccgblk: cyl groups corrupted
	ffs_alloccgblk: can't find blk in cyl
	ffs_checkblk: partially free fragment

The following panics are less likely to be related to this problem,
but might be helped by these debugging options:

	ffs_valloc: dup alloc
	ffs_blkfree: freeing free block
	ffs_blkfree: freeing free frag
	ffs_vfree: freeing free inode

If you try these options, please report whether they helped reduce your
bitmap corruption panics to Kirk McKusick at <mckusick@mckusick.com>
and to Matt Dillon <dillon@earth.backplane.com>.

END
K 10
svn:author
V 4
kris
K 8
svn:date
V 27
2001-04-17T07:21:48.000000Z
K 7
svn:log
V 58
Add a missing argument to an error message format string.

END
K 10
svn:author
V 4
kris
K 8
svn:date
V 27
2001-04-17T07:32:37.000000Z
K 7
svn:log
V 46
Remove spurious extra format string argument.

END
K 10
svn:author
V 4
kris
K 8
svn:date
V 27
2001-04-17T07:35:41.000000Z
K 7
svn:log
V 37
'%' is not a valid format string :-)

END
K 10
svn:author
V 4
kris
K 8
svn:date
V 27
2001-04-17T07:46:38.000000Z
K 7
svn:log
V 163
-Wnon-const-format sweep: make format strings const char *'s, add
__printflike()/__printf0like() to function prototypes, as appropriate.

Reviewed by:	bde, -audit

END