summaryrefslogtreecommitdiff
path: root/sys/kern
AgeCommit message (Expand)Author
2015-08-23recompute len when the path is absolute as canonpath could have shrink itSebastien Marie
2015-08-22Move to tame(int flags, char *paths[]) API/ABI.Theo de Raadt
2015-08-21Whitelist TIOCGPGRP (for tcgetpgrp()) in TAME_IOCTL.Doug Hogan
2015-08-21re-enable *8.David Gwynne
2015-08-20reactivate tame()Theo de Raadt
2015-08-14provide ml_requeue and mq_requeue for prepending mbufs on lists/queuesDavid Gwynne
2015-08-12Remove last two 'uses' of d_subtype in tree. No point in settingKenneth R Westerback
2015-08-03Unfortunately netstat did not show sockets without file descriptorsAlexander Bluhm
2015-08-01Fix free() of uninitialized variable introduced in previous commit.Philip Guenther
2015-07-29Neuter tame(2) with ENOSYS for upcoming release cycle, in a fairlyTheo de Raadt
2015-07-29Zap a couple of extra blank lines that keep showing up in diffs I'mKenneth R Westerback
2015-07-28Convert sectors to DEV_BSIZE block values were necessary to find,Kenneth R Westerback
2015-07-28normalize disclaimer to license.template; noted by reykTheo de Raadt
2015-07-28For unix domain sequenced packet socket pairs the ruby regressionAlexander Bluhm
2015-07-28Add ktracing of structs iovec, msghdr, and cmsghdr for {,p}{read,write}v(),Philip Guenther
2015-07-27Rather than disabling tame to coredump, leave it enabled but flag thatTheo de Raadt
2015-07-27enforce tame by disabling all TAME_ flags if tame_fail() is reach, and not onlySebastien Marie
2015-07-27tame check of msghdr should be done after checking for copyin failurePhilip Guenther
2015-07-26Always initialize the b_error field and B_ERROR flag before usingKenneth R Westerback
2015-07-23Revert attempted GPT code cleanup. Too much code, too little testing.Kenneth R Westerback
2015-07-23remove the POOL_NEEDS_CATCHUP macro, it isnt used.David Gwynne
2015-07-23Replace TIOCSWINSZ with TIOCGWINSZ in tame(2).Doug Hogan
2015-07-22Slam signal handlers harder in tame_fail(), found by semarie.Theo de Raadt
2015-07-22memory leak in execve with systrace, plus some unreachable codeTheo de Raadt
2015-07-21Always permit kbind (for dynamic linking) and add __thrsigdivert to thePhilip Guenther
2015-07-21hookup octeonJasper Lievisse Adriaanse
2015-07-20Move `ticks' declaration to sys/kernel.h.Masao Uebayashi
2015-07-20Fix tty hiwat handling a bitStefan Fritsch
2015-07-20crudely canonicalize paths before taming them. ok deraadt dougTed Unangst
2015-07-20Move the construction of p_tamenote from sys_open() to doopenat(), so thatTheo de Raadt
2015-07-20Allow the sched_yield, __thrsleep, __thrwakeup, and __threxit syscallsJeremy Evans
2015-07-20In _TM_SELF, permit uname(3); OK deraadt@.Ingo Schwarze
2015-07-20Be more paranoid and don't let any ioctls through with invalid fileNicholas Marriott
2015-07-20Don't try to dereference fp if it is NULL, ok deraadtNicholas Marriott
2015-07-20tame_cmsg_send and tame_cmsg_recv are called with the data set to a fileNicholas Marriott
2015-07-20getpagesize() may occur late in programs; permit itTheo de Raadt
2015-07-20Add setgroups(2) to TAME_PROC, ok deraadtNicholas Marriott
2015-07-20In TAME_IOCTL, permit BIOCGSTATS on a vnode. We don't drill down deeperTheo de Raadt
2015-07-20rebuildPhilip Guenther
2015-07-20Add kbind, a syscall for ld.so to use to securely and efficiently updatePhilip Guenther
2015-07-20Fix annoying console spew when we can't write the core file. use log instead.Bob Beck
2015-07-19Repair various strncmp lengths, noticed by Brandon CaseyTheo de Raadt
2015-07-19Change uvm_page[re]alloc_multi to actually use the flags passed in, and returnBob Beck
2015-07-19Use two 2q caches for the buffer cache, moving previously warm buffers from theBob Beck
2015-07-19Make KTR_SYSRET records variables variables sized, leaving out thePhilip Guenther
2015-07-19syncTheo de Raadt
2015-07-19tame(2) is a subsystem which restricts programs into a "reduced featureTheo de Raadt
2015-07-18Change unp_scan() and its callbacks to pass the array of struct file **Philip Guenther
2015-07-18Kill emul left-over.Martin Pieuchot
2015-07-17manage spd entries by using the radix api directly instead ofBret Lambert