Skip to content

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
branch: user/luigi/ipf…
Commits on Jun 5, 2009
  1. sync with head

    luigi authored
  2. sync ipfw-related changes with head

    luigi authored
  3. sync with head

    luigi authored
  4. fix some comments

    luigi authored
  5. another batch of small changes to move ipfw-related stuff

    luigi authored
    into its own directory, and reduce header dependencies.
Commits on Jun 4, 2009
  1. Prepare to move ipfw and dummynet in a private subdir,

    luigi authored
    and split headers to separate kernel and userland stuff.
    
    Submitted by:	Marta Carbone (partly, for her gsoc project)
Commits on Jun 3, 2009
  1. @stass

    - Style(9) improvements.

    stass authored
    - Convert all K&R definitions to ANSI equialents.
    - Retire bsd_malloc and bsd_free macros and
      use malloc/free directly.
    - Drop some unused debugging calls.
    
    This commit brings no functional changes.
  2. @stass

    - Sync our copies of ext2fs Linux headers to current Linux versions.

    stass authored
      Minimize differencies between our ext2fs headers and relevant Linux
      versions by using EXT2_SB macro to access the superblock fields. Most
      of the differencies in access to these fields are now hidden inside
      this macro.
    - Rename the s_db_per_group field of ext2fs_sb_info to s_gdb_count
      to reflect the similar change in Linux headers. New name also seem
      to be more appropriate for this field.
    - Use proper types for s_first_inode and s_inode_size in-core superblock
      fields. Now they reflec types used in the on-disk superblock version.
    - Add support for older filesystem revisions that doesn't have proper
      s_first_ino and s_inode_size fields in the on-disk superblock. In these
      cases predefined values for these fields are used.
    - Add simple sanity checks for s_first_inode and s_inode_size correctness.
    
    Reviewed by:	bde (previous version)
    MFC after:	2 weeks
  3. @snb

    Add vm_lowmem event handler for dirhash. This will cause dirhashes to be

    snb authored
    deleted when the system is low on memory. This ought to allow an increase to
    vfs.ufs.dirhash_maxmem on machines that have lots of memory, without
    degrading performance by having too much memory reserved for dirhash when
    other things need it. The default value for dirhash_maxmem is being kept at
    2MB for now, though.
    
    This work was mostly done during the 2008 Google Summer of Code.
    
    Approved by:	dwmalone (mentor), re
    MFC after:	3 months
  4. lchflags(2) takes int, not u_long like chflags(2) and fchflags(2).

    pjd authored
    Strange, isn't it?
    
    Pointed out by:	bde
  5. Correct comment.

    pjd authored
  6. @rwatson

    By default, label all network interfaces as biba/equal on attach. This

    rwatson authored
    makes it easier for first-time users to configure and work with biba as
    remote acess is still allowed.  Effectively, this means that, by default,
    only local security properties, not distributed ones, are enforced.
    
    Obtained from:	TrustedBSD Project
  7. @EdSchouten

    Use ISO C99 style inline semantics in msun.

    EdSchouten authored
    Because we use ISO C99 nowadays, we can just get rid of enforcing
    GNU89-style inlining.
  8. calls callout_drain(9) to un-schedule a scan timer to prevent a page

    weongyo authored
    fault in softclock.
    
    Submitted by:	sam
    Reviewed by:	jhb, sam (original version), thompsa
Commits on Jun 2, 2009
  1. @rwatson

    Mark MAC Framework sx and rm locks as NOWITNESS to suppress warnings …

    rwatson authored
    …that
    
    might arise from WITNESS not understanding its locking protocol, which
    should be deadlock-free.  Currently these warnings generally don't occur,
    but as object locking is pushed into policies for some object types, they
    would otherwise occur more often.
    
    Obtained from:	TrustedBSD Project
  2. Add support for the experimental nfs subsystem to the scripts in

    rmacklem authored
    /etc/rc.d. They use the following new rc variables:
      nfsv4_server_enable - set to "YES" to run the experimental server
      nfsuserd_enable - set to "YES" to run nfsuserd for NFSv4 client and
        server
      nfsuserd_flags - command line flags for nfsuserd
      nfscbd_enable - set to "YES" to run the experimental nfs client's
        NFSv4 callback daemon
      nfscbd_flags - command line flags for nfscbd
    
    Reviewed by:	dougb
    Approved by:	kib (mentor)
  3. improve raw xmit failure handling

    sam authored
  4. count frag tx failures as an ifnet error

    sam authored
  5. fix comment

    sam authored
  6. restart tdma beacons after vap destroy

    sam authored
  7. fix typo

    sam authored
  8. fix setting of ni_txrate

    sam authored
    Submitted by:	"Paul B. Mahol" <onemda@gmail.com>
  9. partially fix mode setting; this no longer returns an error but still

    sam authored
    needs to handle the case where the vap is up+running
    
    Noticed by:	"Paul B. Mahol" <onemda@gmail.com>
  10. @thompsa

    Place the fifo and ref counting variables on the stack to prevent races.

    thompsa authored
    Submitted by:	Hans Petter Selasky
  11. move ifq_detach from if_detach to if_free; this permits callers to

    sam authored
    reference if_snd in the period between detach+free which helps simplify
    detach code
    
    Reviewed by:	jhb, rwatson
  12. @rwatson

    Remove MAC kernel config files and add "options MAC" to GENERIC, with…

    rwatson authored
    … the
    
    goal of shipping 8.0 with MAC support in the default kernel.  No policies
    will be compiled in or enabled by default, but it will now be possible to
    load them at boot or runtime without a kernel recompile.
    
    While the framework is not believed to impose measurable overhead when no
    policies are loaded (a result of optimization over the past few months in
    HEAD), we'll continue to benchmark and optimize as the release approaches.
    Please keep an eye out for performance or functionality regressions that
    could be a result of this change.
    
    Approved by:	re (kensmith)
    Obtained from:	TrustedBSD Project
  13. Initialize iov and iovlen before use.

    pjd authored
    Reported by:	Lucius Windschuh <lwindschuh@googlemail.com>
  14. @rwatson

    Add internal 'mac_policy_count' counter to the MAC Framework, which is a

    rwatson authored
    count of the number of registered policies.
    
    Rather than unconditionally locking sockets before passing them into MAC,
    lock them in the MAC entry points only if mac_policy_count is non-zero.
    
    This avoids locking overhead for a number of socket system calls when no
    policies are registered, eliminating measurable overhead for the MAC
    Framework for the socket subsystem when there are no active policies.
    
    Possibly socket locks should be acquired by policies if they are required
    for socket labels, which would further avoid locking overhead when there
    are policies but they don't require labeling of sockets, or possibly
    don't even implement socket controls.
    
    Obtained from:	TrustedBSD Project
  15. @lulf

    - Use volatile for signal variables.

    lulf authored
    Suggested by:	Jaakko Heinonen <jh -at- saunalahti.fi>
  16. @thompsa

    Reorgansise the logic for tranversing the pipe list.

    thompsa authored
    Submitted by:	Hans Petter Selasky
  17. @thompsa

    Fix compile after the removal of bsd_udev.

    thompsa authored
    Submitted by:	Hans Petter Selasky
  18. @thompsa

    Fix multithread issue where the is_uref variable was not set and cleared

    thompsa authored
    properly in the CDEV private data.
    
    Submitted by:	Hans Petter Selasky
Something went wrong with that request. Please try again.