summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* s/trailing NULL/trailing NUL/Juli Mallett2002-08-192-2/+2
| | | | Notes: svn path=/head/; revision=102117
* New release note: SA-02:38.Bruce A. Mah2002-08-192-0/+14
| | | | Notes: svn path=/head/; revision=102116
* Break out mac_check_pipe_op() into component check entry points:Robert Watson2002-08-1919-122/+684
| | | | | | | | | | | | | | mac_check_pipe_poll(), mac_check_pipe_read(), mac_check_pipe_stat(), and mac_check_pipe_write(). This is improves consistency with other access control entry points and permits security modules to only control the object methods that they are interested in, avoiding switch statements. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=102115
* Don't read the PCI config space during mii operations. Instead save whetherDoug Ambrisko2002-08-192-3/+9
| | | | | | | | | | | | or not we have to limit the PHY detection in the softc structure. Then just check the flag. Suggested by: jdp Reviewed by: jdp MFC after: 3 days Notes: svn path=/head/; revision=102113
* Break out mac_check_vnode_op() into three seperate checks:Robert Watson2002-08-1923-189/+764
| | | | | | | | | | | | | mac_check_vnode_poll(), mac_check_vnode_read(), mac_check_vnode_write(). This improves the consistency with other existing vnode checks, and allows policies to avoid implementing switch statements to determine what operations they do and do not want to authorize. Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=102112
* Add a new `-H' modifier, which when combined with `-p' or `-P' allows to dumpMaxim Sobolev2002-08-192-14/+38
| | | | | | | full console history. Notes: svn path=/head/; revision=102111
* 1. Allow information about current history size be retrieved using ioctl(2);Maxim Sobolev2002-08-192-5/+47
| | | | | | | | 2. modify screen dumpung routine, so that in addition to visible area, it allows to grab any portion of history buffer as well. Notes: svn path=/head/; revision=102108
* Cater for ich4 quirks.Orion Hodson2002-08-192-9/+29
| | | | | | | | Reported by: Jacob Rhoden Tested by: Jacob Rhoden, mp Notes: svn path=/head/; revision=102106
* Assert process locks in proces-related access control checks.Robert Watson2002-08-199-0/+54
| | | | | | | | Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=102103
* Add a missing vnode assertion for the exec() check.Robert Watson2002-08-199-0/+18
| | | | | | | | Obtained from: TrustedBSD Project Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=102102
* Previous deltas (promisc mode) were a subject of:Maxim Sobolev2002-08-190-0/+0
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=102100
* Implement user-setable promiscuous mode (a new `promisc' flag for ifconfig(8)).Maxim Sobolev2002-08-195-4/+22
| | | | | | | | | | | | Also, for all interfaces in this mode pass all ethernet frames to upper layer, even those not addressed to our own MAC, which allows packets encapsulated in those frames be processed with packet filters (ipfw(8) et al). Emphatically requested by: Anton Turygin <pa3op@ukr-link.net> Valuable suggestions by: fenner Notes: svn path=/head/; revision=102099
* One more (hopefully the last one) step in cleaning up the syntax,Luigi Rizzo2002-08-192-61/+102
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | following Julian's good suggestion: since you can specify any match pattern as an option, rules now have the following format: [<proto> from <src> to <dst>] [options] i.e. the first part is now entirely optional (and left there just for compatibility with ipfw1 rulesets). Add a "-c" flag to show/list rules in the compact form (i.e. without the "ip from any to any" part) when possible. The default is to include it so that scripts processing ipfw's canonical output will still work. Note that as part of this cleanup (and to remove ambiguity), MAC fields now can only be specified in the options part. Update the manpage to reflect the syntax. Clarify the behaviour when a match is attempted on fields which are not present in the packet, e.g. port numbers on non TCP/UDP packets, and the "not" operator is specified. E.g. ipfw add allow not src-port 80 will match also ICMP packets because they do not have port numbers, so "src-port 80" will fail and "not src-port 80" will succeed. For such cases it is advised to insert further options to prevent undesired results (e.g. in the case above, "ipfw add allow proto tcp not src-port 80"). We definitely need to rewrite the parser using lex and yacc! Notes: svn path=/head/; revision=102098
* Forced commit to correct a PR number in the previous commit. It is bin/40177.Maxim Konovalov2002-08-190-0/+0
| | | | | | | Pointed out by: obrien Notes: svn path=/head/; revision=102097
* Move internal defines from ctype.h hereAndrey A. Chernov2002-08-191-0/+4
| | | | Notes: svn path=/head/; revision=102096
* Fix last-minute typo which breaks the world.Maxim Sobolev2002-08-191-1/+1
| | | | | | | Submitted by: many Notes: svn path=/head/; revision=102095
* Move internal defines from here to libc/locale/wcwidth.cAndrey A. Chernov2002-08-192-6/+0
| | | | Notes: svn path=/head/; revision=102094
* Properly define SWIDTH1, add autowidth (was SWIDTH1)Andrey A. Chernov2002-08-192-2/+4
| | | | Notes: svn path=/head/; revision=102093
* mdoc(7) police: fixed the document date.Ruslan Ermilov2002-08-191-1/+1
| | | | | | | Submitted by: iedowse Notes: svn path=/head/; revision=102091
* First snapshot of UFS2 EA support.Poul-Henning Kamp2002-08-191-7/+228
| | | | | | | Sponsored by: DARPA & NAI Labs. Notes: svn path=/head/; revision=102090
* Remove the SIS_LOCK/SIS_UNLOCK from sis_attach(). It makes WITNESSPoul-Henning Kamp2002-08-191-3/+0
| | | | | | | barf and there seem to be little room for contention during attach. Notes: svn path=/head/; revision=102089
* Keep a copy of the credential used to mount filesystems around soPoul-Henning Kamp2002-08-193-4/+9
| | | | | | | | | | | | | | | | | | | | we can check and use it later on. Change the pieces of code which relied on mount->mnt_stat.f_owner to check which user mounted the filesystem. This became needed as the EA code needs to be able to allocate blocks for "system" EA users like ACLs. There seems to be some half-baked (probably only quarter- actually) notion that the superuser for a given filesystem is the user who mounted it, but this has far from been carried through. It is unclear if it should be. Sponsored by: DARPA & NAI Labs. Notes: svn path=/head/; revision=102088
* Major cleanup of the parser and printing routines in an attempt toLuigi Rizzo2002-08-192-209/+375
| | | | | | | | | | | | | | | | | | | | | | render the syntax less ambiguous. Now rules can be in one of these two forms <action> <protocol> from <src> to <dst> [options] <action> MAC dst-mac src-mac mac-type [options] however you can now specify MAC and IP header fields as options e.g. ipfw add allow all from any to any mac-type arp ipfw add allow all from any to any { dst-ip me or src-ip me } which makes complex expressions a lot easier to write and parse. The "all from any to any" part is there just for backward compatibility. Manpage updated accordingly. Notes: svn path=/head/; revision=102087
* Raise limit for port lists to 30 entries/ranges.Luigi Rizzo2002-08-191-6/+4
| | | | | | | | Remove a duplicate "logging" message, and identify the firewall as ipfw2 in the boot message. Notes: svn path=/head/; revision=102086
* Leave room for a trailing NUL not a NULL, that's not an ASCII character.Juli Mallett2002-08-192-2/+2
| | | | Notes: svn path=/head/; revision=102085
* Remove local prototypes for main().Juli Mallett2002-08-1916-20/+0
| | | | Notes: svn path=/head/; revision=102084
* Add a unary -not operator ala -false and !, for sake of completeness.Juli Mallett2002-08-192-0/+2
| | | | | | | | Obtained from: OpenDarwin MFC after: 1 week Notes: svn path=/head/; revision=102083
* Added rules to generate .c files from .m files. Run mkdep on these .cBruce Evans2002-08-191-3/+10
| | | | | | | files. This fixes at least "make" (without -j) after "make clean". Notes: svn path=/head/; revision=102082
* New release notes: chmod(1) -v -v; od(1) -A, -N, -j, -s, -tJohan Karlsson2002-08-192-8/+30
| | | | | | | | | | | MFCs noted: biff(1) b; cp(1) -n; mv(1) -n; od(1) -A, -N, -j, -s, -t Release note modified: mv(1) -n Reviewed by: bmah Notes: svn path=/head/; revision=102080
* Last commit should also have saidJohan Karlsson2002-08-180-0/+0
| | | | | | | | PR: bin/39816 Submitted by: Dan Lukes <dan@obluda.cz> Notes: svn path=/head/; revision=102077
* Remove unused variable. camcontrol is now WARNS=2 clean on i386.Johan Karlsson2002-08-181-1/+0
| | | | | | | Approved by: ken, sheldonh (mentor) Notes: svn path=/head/; revision=102076
* A side effect of some debugging: prototypify and deregister.Poul-Henning Kamp2002-08-181-45/+18
| | | | Notes: svn path=/head/; revision=102074
* Finished removing env(1) commands, as in rev.1.13 but non-broken. SetBruce Evans2002-08-181-5/+5
| | | | | | | | | | the environment for the last command of the pipeline (xargs) instead of too early in the broken version or using an extra env process for each command spawned by xargs as in rev.1.12. Fixed a nearby English error. Notes: svn path=/head/; revision=102073
* Correctly handle empty path arguments, e.g., whereis -S -f biff.Johan Karlsson2002-08-181-7/+3
| | | | | | | Approved by: joerg, sheldonh (mentor) Notes: svn path=/head/; revision=102072
* Clarify the explanation of the behavior for setuid programs byJohn Polstra2002-08-181-2/+2
| | | | | | | | | | | | noting that the restrictions do not apply if the user invoking the program is also the owner of the program. Also, capitalize a section header properly. PR: misc/41180 Notes: svn path=/head/; revision=102070
* Include <nlist.h> for nlist interfaces instead of depending on namespaceBruce Evans2002-08-183-0/+3
| | | | | | | pollution in <kvm.h>. Notes: svn path=/head/; revision=102069
* Use essentially the same formatting of the CPU stats percentages as inBruce Evans2002-08-181-1/+1
| | | | | | | | | | | | vmstat so that they never coalesce. Both iostat and vmstat need larger fixes to prevent wide fields from unnecessarily messing up the alignment of all subsequent fields. PR: 41674 MFC-after: 3 days Notes: svn path=/head/; revision=102068
* Include <nlist.h> for nlist interfaces instead of depending on namespaceBruce Evans2002-08-181-0/+1
| | | | | | | pollution in <kvm.h>. Notes: svn path=/head/; revision=102067
* Provide an iso8859 table similar to share/misc/ascii.Jens Schweikhardt2002-08-182-1/+41
| | | | | | | | | PR: misc/11553 Submitted by: Oliver Fromme <olli@fromme.com> MFC after: 1 week Notes: svn path=/head/; revision=102065
* Apply reference counting patch. Fixes problem of two applicationsOrion Hodson2002-08-181-35/+33
| | | | | | | | | | | | | opening the device, eg one read only and one write only, and the reference count being non-zero when both exit rendering device permanently busy. PR: kern/35004 Submitted by: Bill Wells MFC after: 3 days Notes: svn path=/head/; revision=102064
* Fix args for contigmalloc, cosmetics.Søren Schmidt2002-08-183-85/+88
| | | | Notes: svn path=/head/; revision=102058
* Add dev# for pst driverSøren Schmidt2002-08-181-0/+1
| | | | Notes: svn path=/head/; revision=102057
* Use uhci_pci_match to return the device description and rework theJosef Karthauser2002-08-182-56/+44
| | | | | | | vendor description code. Notes: svn path=/head/; revision=102056
* Add a comment to remind that uhci_pci_match will never return NULL.Josef Karthauser2002-08-182-12/+22
| | | | | | | | Don't display the "New UHCI DeviceId" message unless booting verbosely. Use a switch statement for the vendor match code. Notes: svn path=/head/; revision=102055
* Increase size of ifnet.if_flags from 16 bits (short) to 32 bits (int). To avoidMaxim Sobolev2002-08-1820-62/+64
| | | | | | | | | | breaking application ABI use unused ifreq.ifru_flags[1] for upper 16 bits in SIOCSIFFLAGS and SIOCGIFFLAGS ioctl's. Reviewed by: -hackers, -net Notes: svn path=/head/; revision=102052
* Avoid accessing the current job's process table in the child part ofTim J. Robbins2002-08-181-3/+5
| | | | | | | | | forkshell() after it has been freed. This caused mysterious behaviour when anything but the first command in a pipeline tried to access the terminal when the `junk' malloc() option was enabled (which is the default). Notes: svn path=/head/; revision=102051
* Implement the ISO C90 Amd.1 restartable wide and multibyte characterTim J. Robbins2002-08-1814-13/+1020
| | | | | | | | manipulation functions mbrlen(), mbrtowc(), mbsinit(), mbsrtowcs(), wcrtomb(), wcsrtombs(). Notes: svn path=/head/; revision=102050
* Catch up to rev 1.8 of sys/alpha/osf1/osf1_mount.c.Mike Barcroft2002-08-181-1/+2
| | | | Notes: svn path=/head/; revision=102048
* Whitespace fix.Bruce A. Mah2002-08-182-4/+4
| | | | | | | | PR: 41587 Submitted by: David "Siebörger" <drs@rucus.ru.ac.za> Notes: svn path=/head/; revision=102047
* Misc fixups.Bruce A. Mah2002-08-182-6/+6
| | | | | | | | PR: 41587 Submitted by: David "Siebörger" <drs@rucus.ru.ac.za> Notes: svn path=/head/; revision=102046
generated by cgit v1.2.3 (git 2.25.1) at 2025-11-08 17:24:12 +0000