summaryrefslogtreecommitdiff
path: root/sys/conf/files
AgeCommit message (Collapse)Author
2018-08-21Rework kcov kernel config. Instead of treating kcov as both an option and aanton
pseudo-device, get rid of the option. Enabling kcov now requires the following line to be added to the kernel config: pseudo-device kcov 1 This is how pseudo devices are enabled in general. A side-effect of this change is that dev/kcov.c will no longer be compiled by default. Prodded by deraadt@; ok mpi@ visa@
2018-07-13Unveiling unveil(2).Bob Beck
This brings unveil into the tree, disabled by default - Currently this will return EPERM on all attempts to use it until we are fully certain it is ready for people to start using, but this now allows for others to do more tweaking and experimentation. Still needs to send the unveil's across forks and execs before fully enabling. Many thanks to robert@ and deraadt@ for extensive testing. ok deraadt@
2018-07-10Remove raw_usrreq and raw_cb, nothing is using them anymore.Claudio Jeker
OK mpi@
2018-07-02Allow pluart(4) to attach to acpi(4).Mark Kettenis
ok mlarkin@, patrick@
2018-04-20add a small driver for AMDs cryptographic co processor.David Gwynne
the hardware provides crypto offload, zlib offload, and an rng. this code only supports the rng at the moment. this device is present on their amd seatlle platforms, and very present on their epyc stuff. ok kettenis@ jmatthew@
2018-02-14prune files.* entries that refer to files not in treeJonathan Gray
ok krw@ mpi@
2018-02-14kern_mutex.c is gone.Martin Pieuchot
2018-02-07split mobileip(4) out from the gre(4) driver.David Gwynne
having mobileip in gre makes it hard to cut gre up. the current mobileip code is also broken, so this is def and improvement. it also makes it easy to disable and remove mobileip in the future. ok claudio@ henning@
2018-02-06syncookies for pf.Henning Brauer
when syncookies are on, pf will blindly answer each and every SYN with a syncookie-SYNACK. Upon reception of the ACK completing the 3WHS, pf will reconstruct the original SYN, shove it through pf_test, where state will be created if the ruleset permits it. Then massage the freshly created state (we won't see the SYNACK), set up the sequence number modulator, and call into the existing synproxy code to start the 3WHS with the backend host. Add an - somewhat basic for now - adaptive mode where syncookies get enabled if a certain percentage of the state table is filled up with half-open tcp connections. This makes pf firewalls resilient against large synflood attacks. syncookies are off by default until we gained more experience, considered experimental for now. see http://bulabula.org/papers/2017/bsdcan/ for more details. joint work with sashan@, widely discussed and with lots of input by many
2017-11-16Add PCI attachment for dwiic(4) needed by Intel 100 Series machinesJoshua Stein
ok kettenis
2017-11-14remove MALLOC_DEBUGDavid Gwynne
the code has rotted, and obviously hasnt been used for ages. it is also hard to make mpsafe. if we need something like this again it would be better to do it from scratch. ok tedu@ visa@
2017-11-03Inline trivial functions from raw_cb.c and tedu it.Florian Obser
Suggested by and OK mpi, OK visa
2017-10-11Add bwfm(4), a driver for Broadcom FullMAC WiFi controllers. ThePatrick Wildt
FullMAC, in comparison to SoftMAC, does most WiFi handling in the firmware that's running on the controller. This means we have to work around the net80211 stack while still implementing all the WiFi interfaces to userland. This driver is still in early development. So far it can connect to open WiFis over the USB bus. SDIO and PCIe support, for devices like the Raspberry Pi 3 or the Macbooks, is not yet implemented. Also mbufs on the transmit path leak and are not yet freed. ok stsp@
2017-09-12Remove option DDB_STRUCTINFO. Now that ddb(4) is CTF aware, similarMartin Pieuchot
functionnalities are available in GENERIC. ok jasper@, deraadt@, guenther@, dlg@
2017-08-11Merge DDBCTF into DDB.Martin Pieuchot
2017-07-31Give back some space to the ramdisk by compiling net/radix.c onlyFlorian Obser
if we compile pf, ipsec, pipex or nfsserver. Suggested by mpi some time ago. Tweak & OK bluhm deraadt assumes it's fair
2017-07-30Switch installer to Allotment Routing Table (ART).Florian Obser
Prompted by a bugreport by naddy that IPv6 autoconfiguration is broken in the installer. OK mpi, "go for it" deraadt
2017-06-28hfsc.c should depend on pf instead of inetMike Belopuhov
Discussed with and OK henning@ at d2k17 as a part of a larger diff.
2017-05-29Add hibernate support for nvme(4). This creates a separate IO queue that isJonathan Matthew
only active during hibernation, preallocating the the submission and completion queues during attach as they need to be page-aligned. tested on an x270 that successfully hibernates now. ok dlg@
2017-05-29PFKEY version 2 is the only pfkey version supported. No need for extraClaudio Jeker
abstraction. First step of making PF_KEY a bit more like PF_ROUTE. OK mpi@
2017-05-15Hook up FQ-CoDel to the tree and enable configuration in the pfctl(8)Mike Belopuhov
OK sthen, visa
2017-04-30Constant time AES implementationMike Belopuhov
This introduces a 32-bit constant time AES implementation from Thomas Pornin originally for BearSSL and then adjusted by Thomas and myself to fit OpenBSD kernel. One of the additional features is an API for encryption and decryption subkey expansion in the format specified by NIST in FIPS 197. Tested by myself and naddy@, ok djm@
2017-04-30Unifdef KGDB.Martin Pieuchot
It doesn't compile und hasn't been working during the last decade. ok kettenis@, deraadt@
2017-04-28Add futex(2) syscall based on a sane subset of its Linux equivalent.Martin Pieuchot
The syscall is marked NOLOCK and only FUTEX_WAIT grabs the KERNEL_LOCK() because of PCATCH and the signal nightmare. Serialization of threads is currently done with a global & exclusive rwlock. Note that the current implementation still use copyin(9) which is not guaranteed to be atomic. Committing now such that remaining issues can be addressed in-tree. With inputs from guenther@, kettenis@ and visa@. ok deraadt@, visa@
2017-04-20Hook up mutex(9) to witness(4).Visa Hankala
2017-04-20Add a port of witness(4) lock validation tool from FreeBSD.Visa Hankala
Go-ahead from kettenis@, guenther@, deraadt@
2017-02-08In exec_elf.c: expand ELFNAME(), ELFNAME2(), and ELFNAMEEND() exceptPhilip Guenther
leaving out the size, so that ELFNAME2(exec,makecmds) becomes exec_elf_makecmds instead of exec_elf{32,64}_makecmds and then delete the ELFNAME2() and ELFNAMEEND() macros. Move the prototypes for functions local to exec_elf.c to there from exec_elf.h. Simplify the SMALL_KERNEL conditionals around the ELF coredump code. Change exec_conf.c to use the size-generic names and macros Remove exec_elf{32,64}.c and just build exec_elf.c; delete the _KERN_DO_ELF and _KERN_DO_ELF64 #defines. ok jca@, encouragement from deraadt@ and tom@
2017-01-22define virtio in conf/filesReyk Floeter
This unbreaks build on archs that are non-pv but PCI because I moved virtio out of files.pci but kept a virtio dependency for the virtio_pci driver. Issue report and fix suggested by visa@ and miod@
2017-01-13Always compile the mira code if net80211 is included.Stefan Sperling
Should unbreak the tree on many platforms broken since athn(4) 11n commit.
2016-12-15Remove rasops2 (2-bit color depth) functions, they are unused.Frederic Cambus
It seems unlikely that any future new platform will ever need them. OK mpi@
2016-11-30Enable mira in kernel builds.Stefan Sperling
For now, only build mira if the iwm(4) or iwn(4) drivers are also built since other wifi drivers don't even have 11n support yet. This limits platforms affected by this change to i386 and amd64. make release on i386/amd64 platforms tested by tb@ (thanks!) ok tb@ mpi@ kettenis@
2016-11-14Remove radix_mpath dragons.Martin Pieuchot
This code insn't used since ART is the default. ok vgross@
2016-10-21add generalised access to per cpu data structures and counters.David Gwynne
both the cpumem and counters api simply allocates memory for each cpu in the system that can be used for arbitrary per cpu data (via cpumem), or a versioned set of counters per cpu (counters). there is an alternate backend for uniprocessor systems that basically turns the percpu data access into an immediate access to a single allocation. there is also support for percpu data structures that are available at boot time by providing an allocation for the boot cpu. after autoconf, these allocations have to be resized to provide for all cpus that were enumerated by boot. ok mpi@
2016-09-16teach ddb(4) about CTF. currently it only loads the CTF and uses it on amd64Jasper Lievisse Adriaanse
to lookup the number of function parameters. however having this basic facility allows us to expand it's usage. currently hidden behind the (disabled) DDBCTF kernel option as some of the required tools are not available in base yet. in addition to that one also needs recent bootblocks that load the .SUNW_ctf kernel section. discussed with mpi@ over many a cider and ale in cambridge feedback and ok guenther@ mpi@
2016-09-15enable the subr_tree version of red-black trees again.David Gwynne
the problem with the .h file pulling in sys/param.h for NULL, which in turn goes and pulls in a ton of MI insanity, has been fixed. ok deraadt@
2016-09-09disable subr_tree code for nowDavid Gwynne
2016-09-06zap bha, hiding outside dev/ treeTed Unangst
2016-09-05enable the subr_tree version of red-black treesDavid Gwynne
2016-09-04Introduce Dynamic Profiling, a ddb(4) based & gprof compatible kernelMartin Pieuchot
profiling framework. Code patching is used to enable probes when entering functions. The probes will call a mcount()-like function to match the behavior of a GPROF kernel. Currently only available on amd64 and guarded under DDBPROF. Support for other archs will follow soon. A new sysctl knob, ddb.console, need to be set to 1 in securelevel 0 to be able to use this feature. Inputs and ok guenther@
2016-09-03Add in the (disabled) kernel glue for BFDPeter Hessler
OK claudio@, henning@
2016-09-01Import switch(4), an in-kernel OpenFlow switch which can work alone.Kazuya Goda
switch(4) currently supports OpenFlow 1.3.5. Currently, it's disabled by the kernel config. With help from yasuoka@ reyk@ jsg@. ok deraadt@ yasuoka@ reyk@ henning@
2016-08-13Add the core of the code for dwge(4), a driver for the Synopsis DesignwareMark Kettenis
GMAC core which is used on the Allwinner A20 SoCs and later SoCs in the Allwinner family. Since this core is very likely to show up the base of other devices, it gets to live here in dev/ic. Ported from NetBSD (where it is named awge(4)) by patrick@. Some further fixes by me. ok deraadt@
2016-08-11fuse requires ufs_ihash.cMartin Natano
ok mpi
2016-08-05Switch the sunxi platform over to the new interrupt establish API. ThisMark Kettenis
involves turning sxiahci(4) into a real driver that dynamically attaches. ehci(4) now also attaches dynamically. ok jsg@, patrick@
2016-08-05imxahci(4) needs ahci.cMark Kettenis
2016-06-17urtwn device now needs rtwn.c, even if rtwn device isn't builtPhilip Guenther
ok mpi@ jca@ mglocker@
2016-05-03Stop using a soft-interrupt context to process incoming network packets.Martin Pieuchot
Use a new task that runs holding the KERNEL_LOCK to execute mp-unsafe code. Our current goal is to progressively move input functions to the unlocked task. This gives a small performance boost confirmed by Hrvoje Popovski's IPv4 forwarding measurement: before: after: send receive send receive 400kpps 400kpps 400kpps 400kpps 500kpps 500kpps 500kpps 500kpps 600kpps 600kpps 600kpps 600kpps 650kpps 650kpps 650kpps 640kpps 700kpps 700kpps 700kpps 700kpps 720kpps 640kpps 720kpps 710kpps 800kpps 640kpps 800kpps 650kpps 1.4Mpps 570kpps 1.4Mpps 590kpps 14Mpps 570kpps 14Mpps 590kpps ok kettenis@, bluhm@, dlg@
2016-04-25remove systraceTed Unangst
2016-04-19Keep db_write_cmd() in the only place where it is used, just like we didMartin Pieuchot
with db_show_regs().
2016-03-25Free some more space in kernel - for network code, of course - by removalVadim Zhukov
of three unused FS-related functions. okay mpi@ and beck@