FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=releng%2F5.0 2002-12-19T09:40:13Z 2002-12-19T09:40:13Z Alfred Perlstein alfred@FreeBSD.org 2002-12-19T09:40:13Z urn:sha1:aae80a515c8a9ce6048a7e9057eb37f7a21502dd Approved by: re@ (rwatson) 2002-12-13T06:54:34Z cvs2svn cvs2svn@FreeBSD.org 2002-12-13T06:54:34Z urn:sha1:d2f155c07e16e50966e66ae4dd29d1bad4863918 2002-12-08T18:30:44Z Ian Dowse iedowse@FreeBSD.org 2002-12-08T18:30:44Z urn:sha1:42d5b03cfcc4f08da79a5b15bbe6d47799efe8f2 the same as fcntl() except that it supports the new 64-bit file locking commands (LINUX_F_GETLK64 etc) that use the `flock64' structure. We had been interpreting all flock structures passed to fcntl64() as `struct flock64' instead of only the ones from F_*64 commands. The glibc in linux_base-7 uses fcntl64() by default, but the bug was often non-fatal since the misinterpretation typically only causes junk to appear in the `l_len' field and most junk values are accepted as valid range lengths. The result is occasional EINVAL errors from F_SETLK and a few bytes after the supplied `struct flock' getting clobbered during F_GETLK. PR: kern/37656 Reviewed by: marcel Approved by: re MFC after: 1 week 2002-11-16T23:48:14Z Daniel Eischen deischen@FreeBSD.org 2002-11-16T23:48:14Z urn:sha1:84b427ce23ede64f7f6cff0cfe94033bff64e74d 2002-11-16T15:15:17Z Daniel Eischen deischen@FreeBSD.org 2002-11-16T15:15:17Z urn:sha1:a4b04278f0030e437f9a8af013a7584693dfe8ec in kern/syscalls.master. 2002-11-05T17:51:56Z Robert Watson rwatson@FreeBSD.org 2002-11-05T17:51:56Z urn:sha1:670cb89bf4cd20d6bca1b9c6d29fc60142733ad8 (1) Permit userland applications to request a change of label atomic with an execve() via mac_execve(). This is required for the SEBSD port of SELinux/FLASK. Attempts to invoke this without MAC compiled in result in ENOSYS, as with all other MAC system calls. Complexity, if desired, is present in policy modules, rather than the framework. (2) Permit policies to have access to both the label of the vnode being executed as well as the interpreter if it's a shell script or related UNIX nonsense. Because we can't hold both vnode locks at the same time, cache the interpreter label. SEBSD relies on this because it supports secure transitioning via shell script executables. Other policies might want to take both labels into account during an integrity or confidentiality decision at execve()-time. Approved by: re Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2002-11-05T01:59:56Z Robert Watson rwatson@FreeBSD.org 2002-11-05T01:59:56Z urn:sha1:450ffb44271dbe567126386a7517ad400926271d describes an image activation instance. Instead, make use of the existing fname structure entry, and introduce two new entries, userspace_argv, and userspace_envv. With the addition of mac_execve(), this divorces the image structure from the specifics of the execve() system call, removes a redundant pointer, etc. No semantic change from current behavior, but it means that the structure doesn't depend on syscalls.master-generated includes. There seems to be some redundant initialization of imgact entries, which I have maintained, but which could probably use some cleaning up at some point. Obtained from: TrustedBSD Project Sponsored by: DARPA, Network Associates Laboratories 2002-11-02T23:55:30Z Robert Watson rwatson@FreeBSD.org 2002-11-02T23:55:30Z urn:sha1:fabb3caa9e826703c0b2aad9a2cdd36b1bd67db3 2002-10-21T22:27:36Z Julian Elischer julian@FreeBSD.org 2002-10-21T22:27:36Z urn:sha1:1dab89f156a461071c11caa150e55ce4683e6d3c It is never used. I left it there from pre-KSE days as I didn't know if I'd need it or not but now I know I don't.. It's functionality is in TDI_IWAIT in the thread. 2002-10-19T22:25:31Z Peter Wemm peter@FreeBSD.org 2002-10-19T22:25:31Z urn:sha1:8556393bb2245a5c5bc35dc1256f6c1c6664fd91