summaryrefslogtreecommitdiff
path: root/sys/conf
AgeCommit message (Collapse)Author
2019-05-04Improve the interaction between efifb(4), inteldrm(4) and radeondrm(4)Mark Kettenis
when we have a serial console by introducing the notion of a "primary" graphics device. The primary graphics device is the one set up and used by firmware (BIOS, UEFI). The goal is to make sure that wsdisplay0 and drm0 reliably attach to the primary graphics device such that X works out of the box even if you have multiple cards or if you are using a serial console. This also fixes the situation where inteldrm(4) or radeondrm(4) would take over the console on UEFI systems even if the kernel was booted with a serial console. ok jsg@
2019-04-28the bufcachepercent=80 experiment has exposed a few problems...Theo de Raadt
2019-04-22disable mobileip(4)David Gwynne
it's not great in several dimensions, so this is a first step to removing it. if noone has a (reasonable) teary i'll start removing the code in a few weeks. "kill it with fire" deraadt@
2019-04-20as discussed with beck, crank dma-range bufcache to a high numberTheo de Raadt
(he suggested 90 but I prefer 80). This is so we learn the downside from user reports.
2019-04-13renable POOL_DEBUGTheo de Raadt
2019-04-13unlock tree, we are now working on 6.5-currentTheo de Raadt
2019-04-05it is POOL_DEBUG disable timeTheo de Raadt
2019-04-02Move to 6.5 release rathe than -beta. That means "pkg_add -u -Dsnap"Theo de Raadt
becomes the norm until release is out.
2019-03-18Add kubsan(4), a undefined behavior sanitizer for the kernel. It'santon
capable of detecting undefined behavior at runtime and all findings are printed to the system console, including the offending line in the source code. kubsan is limited to architectures using Clang as their default compiler and is not enabled by default. Derived from the NetBSD implementation. ok kettenis@ visa@
2019-03-18enable mpip(4)David Gwynne
ok deraadt@
2019-02-28list mpls as a depend for mpe and mpw, dont require bridge to build mpwDavid Gwynne
mpe doesnt need ether as a depend while im here.
2019-02-28add mpip(4)David Gwynne
ok claudio@
2019-02-26crank to 6.5-betaTheo de Raadt
2019-02-26Introduce safe memory reclamation, a mechanism for reclaiming sharedVisa Hankala
objects that readers can access without locking. This provides a basis for read-copy-update operations. Readers access SMR-protected shared objects inside SMR read-side critical section where sleeping is not allowed. To reclaim an SMR-protected object, the writer has to ensure mutual exclusion of other writers, remove the object's shared reference and wait until read-side references cannot exist any longer. As an alternative to waiting, the writer can schedule a callback that gets invoked when reclamation is safe. The mechanism relies on CPU quiescent states to determine when an SMR-protected object is ready for reclamation. The <sys/smr.h> header additionally provides an implementation of singly- and doubly-linked lists that can be used together with SMR. These lists allow lockless read access with a concurrent writer. Discussed with many OK mpi@ sashan@
2018-12-20add bpe(4) or Backbone Provider Edge interfacesDavid Gwynne
Backbone refers to 802.1ah or 802.1Q Provider Backbone Bridges (PBB), or mac-in-mac, which is like vlans except it completely encapsulates the inner packet rather than just add a shim to it. This removes the need for Backbone Core Bridges (ie, switches between bpe instances) to know all the addresses on all the networks.
2018-10-18Re-enable POOL_DEBUG for -current.Lawrence Teo
ok deraadt@
2018-10-13we are now working on 6.4-currentTheo de Raadt
2018-10-08POOL_DEBUG is disabled for releaseTheo de Raadt
2018-09-29unmark -beta. There is still development happening, and we aren'tTheo de Raadt
locked in stone yet, but the clock starts ticking...
2018-08-21Rework kcov kernel config. Instead of treating kcov as both an option and aanton
pseudo-device, get rid of the option. Enabling kcov now requires the following line to be added to the kernel config: pseudo-device kcov 1 This is how pseudo devices are enabled in general. A side-effect of this change is that dev/kcov.c will no longer be compiled by default. Prodded by deraadt@; ok mpi@ visa@
2018-08-10crank to 6.4-betaTheo de Raadt
2018-07-13Unveiling unveil(2).Bob Beck
This brings unveil into the tree, disabled by default - Currently this will return EPERM on all attempts to use it until we are fully certain it is ready for people to start using, but this now allows for others to do more tweaking and experimentation. Still needs to send the unveil's across forks and execs before fully enabling. Many thanks to robert@ and deraadt@ for extensive testing. ok deraadt@
2018-07-10Remove raw_usrreq and raw_cb, nothing is using them anymore.Claudio Jeker
OK mpi@
2018-07-02Allow pluart(4) to attach to acpi(4).Mark Kettenis
ok mlarkin@, patrick@
2018-04-20add a small driver for AMDs cryptographic co processor.David Gwynne
the hardware provides crypto offload, zlib offload, and an rng. this code only supports the rng at the moment. this device is present on their amd seatlle platforms, and very present on their epyc stuff. ok kettenis@ jmatthew@
2018-03-27take us to 6.3-currentTheo de Raadt
2018-03-14disable POOL_DEBUG for releaseSebastian Benoit
ok deraadt@
2018-03-14we head to release soonTheo de Raadt
2018-02-28oops, skipped a step cranking to 6.3-betaTheo de Raadt
2018-02-28move to 6.3-betaTheo de Raadt
2018-02-14prune files.* entries that refer to files not in treeJonathan Gray
ok krw@ mpi@
2018-02-14kern_mutex.c is gone.Martin Pieuchot
2018-02-07dcoppa@ and bluhm@ noted that i accidentally removed POOL_DEBUGDavid Gwynne
put it back.
2018-02-07split mobileip(4) out from the gre(4) driver.David Gwynne
having mobileip in gre makes it hard to cut gre up. the current mobileip code is also broken, so this is def and improvement. it also makes it easy to disable and remove mobileip in the future. ok claudio@ henning@
2018-02-06syncookies for pf.Henning Brauer
when syncookies are on, pf will blindly answer each and every SYN with a syncookie-SYNACK. Upon reception of the ACK completing the 3WHS, pf will reconstruct the original SYN, shove it through pf_test, where state will be created if the ruleset permits it. Then massage the freshly created state (we won't see the SYNACK), set up the sequence number modulator, and call into the existing synproxy code to start the 3WHS with the backend host. Add an - somewhat basic for now - adaptive mode where syncookies get enabled if a certain percentage of the state table is filled up with half-open tcp connections. This makes pf firewalls resilient against large synflood attacks. syncookies are off by default until we gained more experience, considered experimental for now. see http://bulabula.org/papers/2017/bsdcan/ for more details. joint work with sashan@, widely discussed and with lots of input by many
2018-02-06Run newvers.sh with umask 007 to work around permission issues thatTheo Buehler
cause 'make release' fail the first time around after building GENERIC if /usr/obj/ wasn't cleaned out properly. The proper fix would be to implement privdrop for kernel builds but this is trickier than it looks at first sight. discussed with deraadt
2018-02-05Remove tcp_acounts, some tcp_usrreq() counting from 1981. AlsoAlexander Bluhm
remove the #ifdef KPROF which seems to be unused since that year. OK mpi@
2018-01-25Use a new LDFLAGS variable to pass "-melf_i386_obsd" on amd64.Martin Pieuchot
Makes the linker generate a correct i386 gap.o file. ok kettenis@, deraadt@
2017-11-16Add PCI attachment for dwiic(4) needed by Intel 100 Series machinesJoshua Stein
ok kettenis
2017-11-14remove MALLOC_DEBUGDavid Gwynne
the code has rotted, and obviously hasnt been used for ages. it is also hard to make mpsafe. if we need something like this again it would be better to do it from scratch. ok tedu@ visa@
2017-11-03Inline trivial functions from raw_cb.c and tedu it.Florian Obser
Suggested by and OK mpi, OK visa
2017-10-25Remove the TCP_FACK option and associated #if{,n}def code.job
TCP_FACK was disabled by provos@ in June 1999. TCP_FACK is an algorithm that decides that when something is lost, all not SACKed packets until the most forward SACK are lost. It may be a correct estimate, if network does not reorder packets. OK visa@ mpi@ mikeb@
2017-10-22Unconditionally enable TCP selective acknowledgements (SACK)Mike Belopuhov
OK deraadt, mpi, visa, job
2017-10-11Add bwfm(4), a driver for Broadcom FullMAC WiFi controllers. ThePatrick Wildt
FullMAC, in comparison to SoftMAC, does most WiFi handling in the firmware that's running on the controller. This means we have to work around the net80211 stack while still implementing all the WiFi interfaces to userland. This driver is still in early development. So far it can connect to open WiFis over the USB bus. SDIO and PCIe support, for devices like the Raspberry Pi 3 or the Macbooks, is not yet implemented. Also mbufs on the transmit path leak and are not yet freed. ok stsp@
2017-10-04re-enable POOL_DEBUG after the releaseChristian Weisgerber
2017-10-04reminder to create <version>.html and roll errata pages for release.Sebastian Benoit
ok deraadt@
2017-10-046.2-current, back to workTheo de Raadt
2017-10-03work around config(8) modifying bss, using __attribute__ ((section(".data"))).Theo de Raadt
From yasuoka. I really want this fixed in a different way after release is finished.
2017-09-26disable POOL_DEBUG for releaseJonathan Gray
ok deraadt@
2017-09-25take us out of -betaTheo de Raadt