The NetBSD Project

CVS log for src/sys/dev/Attic/verified_exec.c

[BACK] Up to [cvs.NetBSD.org] / src / sys / dev

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.67.2.2, Sun Dec 3 11:36:58 2017 UTC (3 years, 1 month ago) by jdolecek
Branch: tls-maxphys
Changes since 1.67.2.1: +2 -2 lines
FILE REMOVED

update from HEAD

Revision 1.69.4.2, Sun Dec 27 12:09:48 2015 UTC (5 years ago) by skrll
Branch: nick-nhusb
Changes since 1.69.4.1: +2 -2 lines
FILE REMOVED

Sync with HEAD (as of 26th Dec)

Revision 1.72, Wed Dec 9 18:25:32 2015 UTC (5 years, 1 month ago) by maxv
Branch: MAIN
CVS Tags: thorpej-futex-base, prg-localcount2-base3, prg-localcount2-base2, prg-localcount2-base1, prg-localcount2-base, prg-localcount2, phil-wifi-20200421, phil-wifi-20200411, phil-wifi-20200406, pgoyette-localcount-base, pgoyette-localcount-20170426, pgoyette-localcount-20170320, pgoyette-localcount-20170107, pgoyette-localcount-20161104, pgoyette-localcount-20160806, pgoyette-localcount-20160726, pgoyette-localcount, pgoyette-compat-merge-20190127, pgoyette-compat-base, pgoyette-compat-20190127, pgoyette-compat-20190118, pgoyette-compat-1226, pgoyette-compat-1126, pgoyette-compat-1020, pgoyette-compat-0930, pgoyette-compat-0906, pgoyette-compat-0728, pgoyette-compat-0625, pgoyette-compat-0521, pgoyette-compat-0502, pgoyette-compat-0422, pgoyette-compat-0415, pgoyette-compat-0407, pgoyette-compat-0330, pgoyette-compat-0322, pgoyette-compat-0315, pgoyette-compat, perseant-stdc-iso10646-base, perseant-stdc-iso10646, localcount-20160914, isaki-audio2-base, isaki-audio2, bouyer-xenpvh-base2, bouyer-xenpvh-base1, bouyer-xenpvh-base, bouyer-xenpvh, bouyer-socketcan-base1, bouyer-socketcan-base, bouyer-socketcan, ad-namecache-base3, ad-namecache-base2, ad-namecache-base1, ad-namecache-base, ad-namecache, HEAD
Changes since 1.71: +2 -2 lines
FILE REMOVED

Rename verified_exec.c -> veriexec.c.

The old log is now in Attic/.

Revision 1.69.4.1 / (download) - annotate - [select for diffs], Sat Jun 6 14:40:06 2015 UTC (5 years, 7 months ago) by skrll
Branch: nick-nhusb
Changes since 1.69: +7 -41 lines
Diff to previous 1.69 (colored)

Sync with HEAD

Revision 1.69.2.1 / (download) - annotate - [select for diffs], Tue May 19 04:42:32 2015 UTC (5 years, 8 months ago) by snj
Branch: netbsd-7
CVS Tags: netbsd-7-nhusb-base-20170116, netbsd-7-nhusb-base, netbsd-7-nhusb, netbsd-7-2-RELEASE, netbsd-7-1-RELEASE, netbsd-7-1-RC2, netbsd-7-1-RC1, netbsd-7-1-2-RELEASE, netbsd-7-1-1-RELEASE, netbsd-7-1, netbsd-7-0-RELEASE, netbsd-7-0-RC3, netbsd-7-0-RC2, netbsd-7-0-RC1, netbsd-7-0-2-RELEASE, netbsd-7-0-1-RELEASE, netbsd-7-0
Changes since 1.69: +7 -41 lines
Diff to previous 1.69 (colored) next main 1.70 (colored)

Pull up following revision(s) (requested by maxv in ticket #764):
	sbin/veriexecctl/veriexecctl.c: revision 1.38
	share/man/man9/veriexec.9: revision 1.10
	sys/conf/files: revision 1.1128
	sys/dev/verified_exec.c: revisions 1.70, 1.71
	sys/kern/kern_veriexec.c: revisions 1.1-1.8
	sys/kern/kern_verifiedexec.c: delete
Rename kern_verifiedexec.c to kern_veriexec.c. "Veriexec" is the name of
the subsystem, not "Verifiedexec".

The revisions of kern_verifiedexec.c are now in Attic/.

No change between kern_verifiedexec.c and kern_veriexec.c.

Also, update the man page accordingly.

Okayed by christos@ and blymn@ some months ago.
--
KNF
--
Don't mix veriexec lock and file lock in veriexec_file_verify().

Now:
 - 'veriexec_op_lock' needs to be held when calling veriexec_file_verify()
 - the 'file_lock_state' argument indicates if the file is locked
 - add some KASSERTs
--
Instead of duplicating code, add veriexec_fp_status(). Also reorder a
useless goto.
--
Make veriexec_renamechk() more readable. Also add a KASSERT on vte_count.

No real functional change
--
If we already have an entry for the file being loaded, return EEXIST, don't
silently skip it.
--
Remove FreeBSD.

ok elad@
--
KASSERT x then y, not (x && y).
--
KNF
--
Not to add even more confusion in an already overcomplicated subsystem,
remove the FreeBSD code. This code is likely to be outdated, and Veriexec
is in all cases not available on FreeBSD.
--
Be a bit more verbose if the kernel rejects a file

Revision 1.71 / (download) - annotate - [select for diffs], Sun Apr 26 09:45:40 2015 UTC (5 years, 8 months ago) by maxv
Branch: MAIN
CVS Tags: nick-nhusb-base-20150921, nick-nhusb-base-20150606
Changes since 1.70: +0 -34 lines
Diff to previous 1.70 (colored)

Not to add even more confusion in an already overcomplicated subsystem,
remove the FreeBSD code. This code is likely to be outdated, and Veriexec
is in all cases not available on FreeBSD.

Revision 1.70 / (download) - annotate - [select for diffs], Sun Apr 26 09:38:01 2015 UTC (5 years, 8 months ago) by maxv
Branch: MAIN
Changes since 1.69: +14 -14 lines
Diff to previous 1.69 (colored)

KNF

Revision 1.67.2.1 / (download) - annotate - [select for diffs], Wed Aug 20 00:03:35 2014 UTC (6 years, 5 months ago) by tls
Branch: tls-maxphys
Changes since 1.67: +14 -13 lines
Diff to previous 1.67 (colored)

Rebase to HEAD as of a few days ago.

Revision 1.68.2.1 / (download) - annotate - [select for diffs], Sun Aug 10 06:54:50 2014 UTC (6 years, 5 months ago) by tls
Branch: tls-earlyentropy
Changes since 1.68: +3 -2 lines
Diff to previous 1.68 (colored) next main 1.69 (colored)

Rebase.

Revision 1.69 / (download) - annotate - [select for diffs], Fri Jul 25 08:10:35 2014 UTC (6 years, 6 months ago) by dholland
Branch: MAIN
CVS Tags: tls-maxphys-base, tls-earlyentropy-base, nick-nhusb-base-20150406, nick-nhusb-base, netbsd-7-base
Branch point for: nick-nhusb, netbsd-7
Changes since 1.68: +3 -2 lines
Diff to previous 1.68 (colored)

Add d_discard to all struct cdevsw instances I could find.

All have been set to "nodiscard"; some should get a real implementation.

Revision 1.66.12.2 / (download) - annotate - [select for diffs], Thu May 22 11:40:19 2014 UTC (6 years, 8 months ago) by yamt
Branch: yamt-pagecache
Changes since 1.66.12.1: +13 -13 lines
Diff to previous 1.66.12.1 (colored) to branchpoint 1.66 (colored) next main 1.67 (colored)

sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs.  ("Protocol error: too many arguments")

Revision 1.67.4.1 / (download) - annotate - [select for diffs], Sun May 18 17:45:35 2014 UTC (6 years, 8 months ago) by rmind
Branch: rmind-smpnet
Changes since 1.67: +13 -13 lines
Diff to previous 1.67 (colored) next main 1.68 (colored)

sync with head

Revision 1.68 / (download) - annotate - [select for diffs], Sun Mar 16 05:20:26 2014 UTC (6 years, 10 months ago) by dholland
Branch: MAIN
CVS Tags: yamt-pagecache-base9, rmind-smpnet-nbase, rmind-smpnet-base, riastradh-xf86-video-intel-2-7-1-pre-2-21-15, riastradh-drm2-base3
Branch point for: tls-earlyentropy
Changes since 1.67: +13 -13 lines
Diff to previous 1.67 (colored)

Change (mostly mechanically) every cdevsw/bdevsw I can find to use
designated initializers.

I have not built every extant kernel so I have probably broken at
least one build; however I've also found and fixed some wrong
cdevsw/bdevsw entries so even if so I think we come out ahead.

Revision 1.66.12.1 / (download) - annotate - [select for diffs], Tue Apr 17 00:07:26 2012 UTC (8 years, 9 months ago) by yamt
Branch: yamt-pagecache
CVS Tags: yamt-pagecache-tag8
Changes since 1.66: +9 -11 lines
Diff to previous 1.66 (colored)

sync with head

Revision 1.66.16.1 / (download) - annotate - [select for diffs], Thu Apr 5 21:33:24 2012 UTC (8 years, 9 months ago) by mrg
Branch: jmcneill-usbmp
Changes since 1.66: +9 -11 lines
Diff to previous 1.66 (colored) next main 1.67 (colored)

sync to latest -current.

Revision 1.67 / (download) - annotate - [select for diffs], Tue Mar 13 18:40:30 2012 UTC (8 years, 10 months ago) by elad
Branch: MAIN
CVS Tags: yamt-pagecache-base8, yamt-pagecache-base7, yamt-pagecache-base6, yamt-pagecache-base5, yamt-pagecache-base4, riastradh-drm2-base2, riastradh-drm2-base1, riastradh-drm2-base, riastradh-drm2, khorben-n900, jmcneill-usbmp-base9, jmcneill-usbmp-base8, jmcneill-usbmp-base10, agc-symver-base, agc-symver
Branch point for: tls-maxphys, rmind-smpnet
Changes since 1.66: +9 -11 lines
Diff to previous 1.66 (colored)

Replace the remaining KAUTH_GENERIC_ISSUSER authorization calls with
something meaningful. All relevant documentation has been updated or
written.

Most of these changes were brought up in the following messages:

    http://mail-index.netbsd.org/tech-kern/2012/01/18/msg012490.html
    http://mail-index.netbsd.org/tech-kern/2012/01/19/msg012502.html
    http://mail-index.netbsd.org/tech-kern/2012/02/17/msg012728.html

Thanks to christos, manu, njoly, and jmmv for input.

Huge thanks to pgoyette for spinning these changes through some build
cycles and ATF.

Revision 1.64.2.2 / (download) - annotate - [select for diffs], Thu Jul 23 23:31:45 2009 UTC (11 years, 6 months ago) by jym
Branch: jym-xensuspend
Changes since 1.64.2.1: +13 -15 lines
Diff to previous 1.64.2.1 (colored) to branchpoint 1.64 (colored) next main 1.65 (colored)

Sync with HEAD.

Revision 1.63.12.3 / (download) - annotate - [select for diffs], Sat Jul 18 14:52:59 2009 UTC (11 years, 6 months ago) by yamt
Branch: yamt-nfs-mp
Changes since 1.63.12.2: +13 -15 lines
Diff to previous 1.63.12.2 (colored) to branchpoint 1.63 (colored) next main 1.64 (colored)

sync with head.

Revision 1.66 / (download) - annotate - [select for diffs], Mon Jun 29 05:08:17 2009 UTC (11 years, 6 months ago) by dholland
Branch: MAIN
CVS Tags: yamt-pagecache-base3, yamt-pagecache-base2, yamt-pagecache-base, yamt-nfs-mp-base9, yamt-nfs-mp-base8, yamt-nfs-mp-base7, yamt-nfs-mp-base6, yamt-nfs-mp-base11, yamt-nfs-mp-base10, uebayasi-xip-base4, uebayasi-xip-base3, uebayasi-xip-base2, uebayasi-xip-base1, uebayasi-xip-base, uebayasi-xip, rmind-uvmplock-nbase, rmind-uvmplock-base, rmind-uvmplock, netbsd-6-base, netbsd-6-1-RELEASE, netbsd-6-1-RC4, netbsd-6-1-RC3, netbsd-6-1-RC2, netbsd-6-1-RC1, netbsd-6-1-5-RELEASE, netbsd-6-1-4-RELEASE, netbsd-6-1-3-RELEASE, netbsd-6-1-2-RELEASE, netbsd-6-1-1-RELEASE, netbsd-6-1, netbsd-6-0-RELEASE, netbsd-6-0-RC2, netbsd-6-0-RC1, netbsd-6-0-6-RELEASE, netbsd-6-0-5-RELEASE, netbsd-6-0-4-RELEASE, netbsd-6-0-3-RELEASE, netbsd-6-0-2-RELEASE, netbsd-6-0-1-RELEASE, netbsd-6-0, netbsd-6, matt-premerge-20091211, matt-nb6-plus-nbase, matt-nb6-plus-base, matt-nb6-plus, matt-mips64-premerge-20101231, jymxensuspend-base, jym-xensuspend-nbase, jruoho-x86intr-base, jruoho-x86intr, jmcneill-usbmp-pre-base2, jmcneill-usbmp-base7, jmcneill-usbmp-base6, jmcneill-usbmp-base5, jmcneill-usbmp-base4, jmcneill-usbmp-base3, jmcneill-usbmp-base2, jmcneill-usbmp-base, jmcneill-audiomp3-base, jmcneill-audiomp3, cherry-xenmp-base, cherry-xenmp, bouyer-quota2-nbase, bouyer-quota2-base, bouyer-quota2
Branch point for: yamt-pagecache, jmcneill-usbmp
Changes since 1.65: +13 -15 lines
Diff to previous 1.65 (colored)

Convert 67 namei call sites to use namei_simple, in these functions:

check_console, veriexecclose, veriexec_delete, veriexec_file_add,
emul_find_root, coff_load_shlib (sh3 version), coff_load_shlib,
compat_20_sys_statfs, compat_20_netbsd32_statfs,
ELFNAME2(netbsd32,probe_noteless), darwin_sys_statfs,
ibcs2_sys_statfs, ibcs2_sys_statvfs, linux_sys_uselib,
osf1_sys_statfs, sunos_sys_statfs, sunos32_sys_statfs,
ultrix_sys_statfs, do_sys_mount, fss_create_files (3 of 4),
adosfs_mount, cd9660_mount, coda_ioctl, coda_mount, ext2fs_mount,
ffs_mount, filecore_mount, hfs_mount, lfs_mount, msdosfs_mount,
ntfs_mount, sysvbfs_mount, udf_mount, union_mount, sys_chflags,
sys_lchflags, sys_chmod, sys_lchmod, sys_chown, sys_lchown,
sys___posix_chown, sys___posix_lchown, sys_link, do_sys_pstatvfs,
sys_quotactl, sys_revoke, sys_truncate, do_sys_utimes, sys_extattrctl,
sys_extattr_set_file, sys_extattr_set_link, sys_extattr_get_file,
sys_extattr_get_link, sys_extattr_delete_file,
sys_extattr_delete_link, sys_extattr_list_file, sys_extattr_list_link,
sys_setxattr, sys_lsetxattr, sys_getxattr, sys_lgetxattr,
sys_listxattr, sys_llistxattr, sys_removexattr, sys_lremovexattr

All have been scrutinized (several times, in fact) and compile-tested,
but not all have been explicitly tested in action.

XXX: While I haven't (intentionally) changed the use or nonuse of
XXX: TRYEMULROOT in any of these places, I'm not convinced all the
XXX: uses are correct; an audit might be desirable.

Revision 1.63.12.2 / (download) - annotate - [select for diffs], Sat May 16 10:41:18 2009 UTC (11 years, 8 months ago) by yamt
Branch: yamt-nfs-mp
Changes since 1.63.12.1: +3 -3 lines
Diff to previous 1.63.12.1 (colored) to branchpoint 1.63 (colored)

sync with head

Revision 1.64.2.1 / (download) - annotate - [select for diffs], Wed May 13 17:19:05 2009 UTC (11 years, 8 months ago) by jym
Branch: jym-xensuspend
Changes since 1.64: +3 -3 lines
Diff to previous 1.64 (colored)

Sync with HEAD.

Commit is split, to avoid a "too many arguments" protocol error.

Revision 1.65 / (download) - annotate - [select for diffs], Tue May 12 14:16:35 2009 UTC (11 years, 8 months ago) by cegger
Branch: MAIN
CVS Tags: yamt-nfs-mp-base5, yamt-nfs-mp-base4, jym-xensuspend-base
Changes since 1.64: +3 -3 lines
Diff to previous 1.64 (colored)

struct device * -> device_t, no functional changes intended.

Revision 1.63.12.1 / (download) - annotate - [select for diffs], Mon May 4 08:12:33 2009 UTC (11 years, 8 months ago) by yamt
Branch: yamt-nfs-mp
Changes since 1.63: +18 -6 lines
Diff to previous 1.63 (colored)

sync with head.

Revision 1.63.20.1 / (download) - annotate - [select for diffs], Mon Jan 19 13:17:51 2009 UTC (12 years ago) by skrll
Branch: nick-hppapmap
Changes since 1.63: +18 -6 lines
Diff to previous 1.63 (colored) next main 1.64 (colored)

Sync with HEAD.

Revision 1.63.8.1 / (download) - annotate - [select for diffs], Sat Jan 17 13:28:52 2009 UTC (12 years ago) by mjf
Branch: mjf-devfs2
Changes since 1.63: +18 -6 lines
Diff to previous 1.63 (colored) next main 1.64 (colored)

Sync with HEAD.

Revision 1.63.22.1 / (download) - annotate - [select for diffs], Thu Dec 18 00:56:27 2008 UTC (12 years, 1 month ago) by snj
Branch: netbsd-5
CVS Tags: netbsd-5-2-RELEASE, netbsd-5-2-RC1, netbsd-5-2-3-RELEASE, netbsd-5-2-2-RELEASE, netbsd-5-2-1-RELEASE, netbsd-5-2, netbsd-5-1-RELEASE, netbsd-5-1-RC4, netbsd-5-1-RC3, netbsd-5-1-RC2, netbsd-5-1-RC1, netbsd-5-1-5-RELEASE, netbsd-5-1-4-RELEASE, netbsd-5-1-3-RELEASE, netbsd-5-1-2-RELEASE, netbsd-5-1-1-RELEASE, netbsd-5-1, netbsd-5-0-RELEASE, netbsd-5-0-RC4, netbsd-5-0-RC3, netbsd-5-0-RC2, netbsd-5-0-RC1, netbsd-5-0-2-RELEASE, netbsd-5-0-1-RELEASE, netbsd-5-0, matt-nb5-pq3-base, matt-nb5-pq3, matt-nb5-mips64-u2-k2-k4-k7-k8-k9, matt-nb5-mips64-u1-k1-k5, matt-nb5-mips64-premerge-20101231, matt-nb5-mips64-premerge-20091211, matt-nb5-mips64-k15, matt-nb5-mips64, matt-nb4-mips64-k7-u2a-k9b
Changes since 1.63: +18 -6 lines
Diff to previous 1.63 (colored) next main 1.64 (colored)

Pull up following revision(s) (requested by elad in ticket #189):
	sys/dev/verified_exec.c: revision 1.64
	sys/kern/kern_verifiedexec.c: revision 1.112
PR/39559: Juan RP: veriexec(4): too easy to cause a NULL dereference
    through it in kernel
Patch from PR applied with tiny modifications, thanks!
Discussed with blymn@ a while ago.

Revision 1.64 / (download) - annotate - [select for diffs], Sun Dec 14 23:20:23 2008 UTC (12 years, 1 month ago) by elad
Branch: MAIN
CVS Tags: yamt-nfs-mp-base3, nick-hppapmap-base4, nick-hppapmap-base3, nick-hppapmap-base2, nick-hppapmap-base, mjf-devfs2-base
Branch point for: jym-xensuspend
Changes since 1.63: +18 -6 lines
Diff to previous 1.63 (colored)

PR/39559: Juan RP: veriexec(4): too easy to cause a NULL dereference
    through it in kernel

Patch from PR applied with tiny modifications, thanks!

Discussed with blymn@ a while ago.

Revision 1.18.2.5 / (download) - annotate - [select for diffs], Mon Jan 21 09:42:27 2008 UTC (13 years ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.18.2.4: +4 -8 lines
Diff to previous 1.18.2.4 (colored) next main 1.19 (colored)

sync with head

Revision 1.61.8.1 / (download) - annotate - [select for diffs], Wed Jan 9 01:52:15 2008 UTC (13 years ago) by matt
Branch: matt-armv6
Changes since 1.61: +4 -8 lines
Diff to previous 1.61 (colored) next main 1.62 (colored)

sync with HEAD

Revision 1.61.16.1 / (download) - annotate - [select for diffs], Wed Dec 26 19:45:58 2007 UTC (13 years, 1 month ago) by ad
Branch: vmlocking2
Changes since 1.61: +4 -8 lines
Diff to previous 1.61 (colored) next main 1.62 (colored)

Sync with head.

Revision 1.62.4.1 / (download) - annotate - [select for diffs], Thu Dec 13 21:55:21 2007 UTC (13 years, 1 month ago) by bouyer
Branch: bouyer-xeni386
CVS Tags: bouyer-xeni386-merge1
Changes since 1.62: +2 -6 lines
Diff to previous 1.62 (colored) next main 1.63 (colored)

Sync with HEAD

Revision 1.62.2.1 / (download) - annotate - [select for diffs], Tue Dec 11 15:22:27 2007 UTC (13 years, 1 month ago) by yamt
Branch: yamt-kmem
Changes since 1.62: +2 -6 lines
Diff to previous 1.62 (colored) next main 1.63 (colored)

sync with head.

Revision 1.63 / (download) - annotate - [select for diffs], Tue Dec 11 12:16:14 2007 UTC (13 years, 1 month ago) by lukem
Branch: MAIN
CVS Tags: yamt-pf42-baseX, yamt-pf42-base4, yamt-pf42-base3, yamt-pf42-base2, yamt-pf42-base, yamt-pf42, yamt-nfs-mp-base2, yamt-nfs-mp-base, yamt-lazymbuf-base15, yamt-lazymbuf-base14, yamt-kmem-base3, yamt-kmem-base2, wrstuden-revivesa-base-4, wrstuden-revivesa-base-3, wrstuden-revivesa-base-2, wrstuden-revivesa-base-1, wrstuden-revivesa-base, wrstuden-revivesa, vmlocking2-base3, simonb-wapbl-nbase, simonb-wapbl-base, simonb-wapbl, nick-net80211-sync-base, nick-net80211-sync, netbsd-5-base, mjf-devfs-base, matt-mips64-base2, matt-armv6-nbase, matt-armv6-base, keiichi-mipv6-nbase, keiichi-mipv6-base, keiichi-mipv6, hpcarm-cleanup-nbase, hpcarm-cleanup-base, haad-nbase2, haad-dm-base2, haad-dm-base1, haad-dm-base, haad-dm, cube-autoconf-base, cube-autoconf, bouyer-xeni386-nbase, bouyer-xeni386-base, ad-socklock-base1, ad-audiomp2-base, ad-audiomp2
Branch point for: yamt-nfs-mp, nick-hppapmap, netbsd-5, mjf-devfs2
Changes since 1.62: +2 -6 lines
Diff to previous 1.62 (colored)

remove borken/unnecessary __RCSID

Revision 1.61.6.1 / (download) - annotate - [select for diffs], Sun Dec 9 19:37:43 2007 UTC (13 years, 1 month ago) by jmcneill
Branch: jmcneill-pm
Changes since 1.61: +5 -5 lines
Diff to previous 1.61 (colored) next main 1.62 (colored)

Sync with HEAD.

Revision 1.62 / (download) - annotate - [select for diffs], Sat Dec 8 19:29:41 2007 UTC (13 years, 1 month ago) by pooka
Branch: MAIN
CVS Tags: yamt-kmem-base, jmcneill-pm-base
Branch point for: yamt-kmem, bouyer-xeni386
Changes since 1.61: +5 -5 lines
Diff to previous 1.61 (colored)

Remove cn_lwp from struct componentname.  curlwp should be used
from on.  The NDINIT() macro no longer takes the lwp parameter and
associates the credentials of the calling thread with the namei
structure.

Revision 1.18.2.4 / (download) - annotate - [select for diffs], Mon Sep 3 14:33:17 2007 UTC (13 years, 4 months ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.18.2.3: +104 -76 lines
Diff to previous 1.18.2.3 (colored)

sync with head.

Revision 1.59.4.1 / (download) - annotate - [select for diffs], Wed Jul 11 20:05:05 2007 UTC (13 years, 6 months ago) by mjf
Branch: mjf-ufs-trans
Changes since 1.59: +104 -76 lines
Diff to previous 1.59 (colored) next main 1.60 (colored)

Sync with head.

Revision 1.61 / (download) - annotate - [select for diffs], Mon Jul 9 21:00:29 2007 UTC (13 years, 6 months ago) by ad
Branch: MAIN
CVS Tags: yamt-x86pmap-base4, yamt-x86pmap-base3, yamt-x86pmap-base2, yamt-x86pmap-base, yamt-x86pmap, vmlocking2-base2, vmlocking2-base1, vmlocking-nbase, vmlocking-base, reinoud-bufcleanup-nbase, reinoud-bufcleanup-base, nick-csl-alignment-base5, nick-csl-alignment-base, nick-csl-alignment, mjf-ufs-trans-base, mjf-devfs, matt-mips64-base, matt-mips64, matt-armv6-prevmlocking, jmcneill-base, hpcarm-cleanup, bouyer-xenamd64-base2, bouyer-xenamd64-base, bouyer-xenamd64
Branch point for: vmlocking2, matt-armv6, jmcneill-pm
Changes since 1.60: +4 -3 lines
Diff to previous 1.60 (colored)

Merge some of the less invasive changes from the vmlocking branch:

- kthread, callout, devsw API changes
- select()/poll() improvements
- miscellaneous MT safety improvements

Revision 1.59.2.2 / (download) - annotate - [select for diffs], Sun May 27 14:29:57 2007 UTC (13 years, 8 months ago) by ad
Branch: vmlocking
Changes since 1.59.2.1: +103 -76 lines
Diff to previous 1.59.2.1 (colored) to branchpoint 1.59 (colored) next main 1.60 (colored)

Sync with head.

Revision 1.58.2.2 / (download) - annotate - [select for diffs], Thu May 17 13:41:23 2007 UTC (13 years, 8 months ago) by yamt
Branch: yamt-idlelwp
Changes since 1.58.2.1: +103 -76 lines
Diff to previous 1.58.2.1 (colored) to branchpoint 1.58 (colored) next main 1.59 (colored)

sync with head.

Revision 1.60 / (download) - annotate - [select for diffs], Tue May 15 19:47:45 2007 UTC (13 years, 8 months ago) by elad
Branch: MAIN
CVS Tags: yamt-idlelwp-base8
Changes since 1.59: +103 -76 lines
Diff to previous 1.59 (colored)

Some Veriexec stuff that's been rotting in my tree for months.

Bug fixes:
  - Fix crash reported by Scott Ellis on current-users@.

  - Fix race conditions in enforcing the Veriexec rename and remove
    policies. These are NOT security issues.

  - Fix memory leak in rename handling when overwriting a monitored
    file.

  - Fix table deletion logic.

  - Don't prevent query requests if not in learning mode.


KPI updates:
  - fileassoc_table_run() now takes a cookie to pass to the callback.

  - veriexec_table_add() was removed, it is now done internally. As a
    result, there's no longer a need for VERIEXEC_TABLESIZE.

  - veriexec_report() was removed, it is now internal.

  - Perform sanity checks on the entry type, and enforce default type
    in veriexec_file_add() rather than in veriexecctl.

  - Add veriexec_flush(), used to delete all Veriexec tables, and
    veriexec_dump(), used to fill an array with all Veriexec entries.


New features:
  - Add a '-k' flag to veriexecctl, to keep the filenames in the kernel
    database. This allows Veriexec to produce slightly more accurate
    logs under certain circumstances. In the future, this can be either
    replaced by vnode->pathname translation, or combined with it.

  - Add a VERIEXEC_DUMP ioctl, to dump the entire Veriexec database.
    This can be used to recover a database if the file was lost.
    Example usage:

        # veriexecctl dump > /etc/signatures

    Note that only entries with the filename kept (that is, were loaded
    with the '-k' flag) will be dumped.

    Idea from Brett Lymn.

  - Add a VERIEXEC_FLUSH ioctl, to delete all Veriexec entries. Sample
    usage:

        # veriexecctl flush

  - Add a 'veriexec_flags' rc(8) variable, and make its default have
    the '-k' flag. On systems using the default signatures file
    (generaetd from running 'veriexecgen' with no arguments), this will
    use additional 32kb of kernel memory on average.

  - Add a '-e' flag to veriexecctl, to evaluate the fingerprint during
    load. This is done automatically for files marked as 'untrusted'.


Misc. stuff:
  - The code for veriexecctl was massively simplified as a result of
    eliminating the need for VERIEXEC_TABLESIZE, and now uses a single
    pass of the signatures file, making the loading somewhat faster.

  - Lots of minor fixes found using the (still under development)
    Veriexec regression testsuite.

  - Some of the messages Veriexec prints were improved.

  - Various documentation fixes.


All relevant man-pages were updated to reflect the above changes.

Binary compatibility with existing veriexecctl binaries is maintained.

Revision 1.59.2.1 / (download) - annotate - [select for diffs], Thu Apr 5 21:57:43 2007 UTC (13 years, 9 months ago) by ad
Branch: vmlocking
Changes since 1.59: +4 -3 lines
Diff to previous 1.59 (colored)

Compile fixes.

Revision 1.58.2.1 / (download) - annotate - [select for diffs], Mon Mar 12 05:53:06 2007 UTC (13 years, 10 months ago) by rmind
Branch: yamt-idlelwp
Changes since 1.58: +4 -4 lines
Diff to previous 1.58 (colored)

Sync with HEAD.

Revision 1.59 / (download) - annotate - [select for diffs], Sun Mar 4 06:01:43 2007 UTC (13 years, 10 months ago) by christos
Branch: MAIN
CVS Tags: thorpej-atomic-base, thorpej-atomic, reinoud-bufcleanup
Branch point for: vmlocking, mjf-ufs-trans
Changes since 1.58: +4 -4 lines
Diff to previous 1.58 (colored)

Kill caddr_t; there will be some MI fallout, but it will be fixed shortly.

Revision 1.18.2.3 / (download) - annotate - [select for diffs], Mon Feb 26 09:09:56 2007 UTC (13 years, 11 months ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.18.2.2: +33 -41 lines
Diff to previous 1.18.2.2 (colored)

sync with head.

Revision 1.43.2.3 / (download) - annotate - [select for diffs], Fri Feb 9 21:03:51 2007 UTC (13 years, 11 months ago) by ad
Branch: newlock2
Changes since 1.43.2.2: +4 -3 lines
Diff to previous 1.43.2.2 (colored) to branchpoint 1.43 (colored) next main 1.44 (colored)

Sync with HEAD.

Revision 1.58 / (download) - annotate - [select for diffs], Thu Feb 8 04:22:27 2007 UTC (13 years, 11 months ago) by elad
Branch: MAIN
CVS Tags: post-newlock2-merge, newlock2-nbase, newlock2-base, ad-audiomp-base, ad-audiomp
Branch point for: yamt-idlelwp
Changes since 1.57: +4 -3 lines
Diff to previous 1.57 (colored)

Plug leak "that can never happen".

Revision 1.52.2.1 / (download) - annotate - [select for diffs], Fri Jan 19 22:12:47 2007 UTC (14 years ago) by bouyer
Branch: netbsd-4
CVS Tags: wrstuden-fixsa-newbase, wrstuden-fixsa-base-1, wrstuden-fixsa-base, wrstuden-fixsa, netbsd-4-0-RELEASE, netbsd-4-0-RC5, netbsd-4-0-RC4, netbsd-4-0-RC3, netbsd-4-0-RC2, netbsd-4-0-RC1, netbsd-4-0-1-RELEASE, netbsd-4-0, matt-nb4-arm-base, matt-nb4-arm
Changes since 1.52: +5 -5 lines
Diff to previous 1.52 (colored) next main 1.53 (colored)

Pull up following revision(s) (requested by elad in ticket #362):
	sys/dev/verified_exec.c: revision 1.57
	sys/sys/verified_exec.h: revision 1.53
	sys/kern/kern_verifiedexec.c: revision 1.94
	share/man/man9/veriexec.9: revision 1.13
veriexec_file_delete() and veriexec_table_delete() now take 'struct lwp *'
too.

Revision 1.43.2.2 / (download) - annotate - [select for diffs], Fri Jan 12 00:57:34 2007 UTC (14 years ago) by ad
Branch: newlock2
Changes since 1.43.2.1: +102 -257 lines
Diff to previous 1.43.2.1 (colored) to branchpoint 1.43 (colored)

Sync with head.

Revision 1.57 / (download) - annotate - [select for diffs], Thu Jan 11 16:24:47 2007 UTC (14 years ago) by elad
Branch: MAIN
Changes since 1.56: +5 -5 lines
Diff to previous 1.56 (colored)

veriexec_file_delete() and veriexec_table_delete() now take 'struct lwp *'
too.

Revision 1.56 / (download) - annotate - [select for diffs], Thu Jan 11 15:08:47 2007 UTC (14 years ago) by elad
Branch: MAIN
Changes since 1.55: +11 -18 lines
Diff to previous 1.55 (colored)

Use veriexec_report() instead of checking 'veriexec_verbose' and calling
log(9).

Revision 1.55 / (download) - annotate - [select for diffs], Tue Jan 9 12:49:36 2007 UTC (14 years ago) by elad
Branch: MAIN
Changes since 1.54: +4 -7 lines
Diff to previous 1.54 (colored)

Remove advertising clause from all of my stuff.

Revision 1.54 / (download) - annotate - [select for diffs], Sun Jan 7 13:55:17 2007 UTC (14 years ago) by elad
Branch: MAIN
Changes since 1.53: +24 -22 lines
Diff to previous 1.53 (colored)

Update copyright/license, okay blymn@ few days ago.

Revision 1.53 / (download) - annotate - [select for diffs], Thu Jan 4 18:44:45 2007 UTC (14 years ago) by elad
Branch: MAIN
Changes since 1.52: +4 -5 lines
Diff to previous 1.52 (colored)

Consistent usage of KAUTH_GENERIC_ISSUSER.

Revision 1.18.2.2 / (download) - annotate - [select for diffs], Sat Dec 30 20:47:50 2006 UTC (14 years ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.18.2.1: +103 -260 lines
Diff to previous 1.18.2.1 (colored)

sync with head.

Revision 1.43.4.2 / (download) - annotate - [select for diffs], Sun Dec 10 07:16:53 2006 UTC (14 years, 1 month ago) by yamt
Branch: yamt-splraiseipl
Changes since 1.43.4.1: +83 -235 lines
Diff to previous 1.43.4.1 (colored) to branchpoint 1.43 (colored) next main 1.44 (colored)

sync with head.

Revision 1.52 / (download) - annotate - [select for diffs], Thu Nov 30 16:53:48 2006 UTC (14 years, 1 month ago) by elad
Branch: MAIN
CVS Tags: yamt-splraiseipl-base5, yamt-splraiseipl-base4, yamt-splraiseipl-base3, netbsd-4-base
Branch point for: netbsd-4
Changes since 1.51: +30 -11 lines
Diff to previous 1.51 (colored)

More cleaning... split veriexec_delete() to veriexec_file_delete() to
handle a single entry and veriexec_table_delete() to handle an entire
table. veriexec_convert() now takes a struct vnode *, and made
veriexec_table_lookup() take struct mount * (that's entirely internal
now).

Tested on amd64, built successfully on amd64, i386, sparc, and sparc64.

Revision 1.51 / (download) - annotate - [select for diffs], Thu Nov 30 01:09:47 2006 UTC (14 years, 1 month ago) by elad
Branch: MAIN
Changes since 1.50: +21 -232 lines
Diff to previous 1.50 (colored)

Massive restructuring and cleanup of Veriexec, mainly in preparation
for work on some future functionality.

  - Veriexec data-structures are no longer exposed.

  - Thanks to using proplib for data passing now, the interface
    changes further to accomodate that.

    Introduce four new functions. First, veriexec_file_add(), to add
    a new file to be monitored by Veriexec, to replace both
    veriexec_load() and veriexec_hashadd(). veriexec_table_add(), to
    replace veriexec_newtable(), will be used to optimize hash table
    size (during preload), and finally, veriexec_convert(), to convert
    an internal entry to one userland can read.

  - Introduce veriexec_unmountchk(), to enforce Veriexec unmount
    policy. This cleans up a bit of code in kern/vfs_syscalls.c.

  - Rename veriexec_tblfind() with veriexec_table_lookup(), and make
    it static. More functions that became static: veriexec_fp_cmp(),
    veriexec_fp_calc().

  - veriexec_verify() no longer returns the entry as well, but just
    sets a boolean indicating whether an entry was found or not.

  - veriexec_purge() now takes a struct vnode *.

  - veriexec_add_fp_name() was merged into veriexec_add_fp_ops(), that
    changed its name to veriexec_fpops_add(). veriexec_find_ops() was
    also renamed to veriexec_fpops_lookup().

    Also on the fp-ops front, the three function types used to initialize,
    update, and finalize a hash context were renamed to
    veriexec_fpop_init_t, veriexec_fpop_update_t, and veriexec_fpop_final_t
    respectively.

  - Introduce a new malloc(9) type, M_VERIEXEC, and use it instead of
    M_TEMP, so we can tell exactly how much memory is used by Veriexec.

  - And, most importantly, whitespace and indentation nits.

Built successfuly for amd64, i386, sparc, and sparc64. Tested on amd64.

Revision 1.50 / (download) - annotate - [select for diffs], Tue Nov 28 22:22:02 2006 UTC (14 years, 1 month ago) by elad
Branch: MAIN
Changes since 1.49: +94 -47 lines
Diff to previous 1.49 (colored)

Make Veriexec use proplib(3) for kernel-userland data passing.

Obviously, this breaks the already unstable Veriexec ABI, but that's
it. Some cool additions are planned to be introduced, and this just
makes it so that NetBSD 4.0 users will be able to easily use them as
well.

This also removes the fingerprint type name limit, so relevant code
was adjusted.

Thoroughly tested (even uncovered a bug in proplib! thanks for fixing
that cube@!). Documentation updated.

Revision 1.49 / (download) - annotate - [select for diffs], Mon Nov 27 23:05:18 2006 UTC (14 years, 1 month ago) by elad
Branch: MAIN
Changes since 1.48: +3 -4 lines
Diff to previous 1.48 (colored)

No need to copy fp_type twice.

Revision 1.43.2.1 / (download) - annotate - [select for diffs], Sat Nov 18 21:34:03 2006 UTC (14 years, 2 months ago) by ad
Branch: newlock2
Changes since 1.43: +49 -54 lines
Diff to previous 1.43 (colored)

Sync with head.

Revision 1.48 / (download) - annotate - [select for diffs], Thu Nov 16 01:32:45 2006 UTC (14 years, 2 months ago) by christos
Branch: MAIN
Changes since 1.47: +11 -11 lines
Diff to previous 1.47 (colored)

__unused removal on arguments; approved by core.

Revision 1.47 / (download) - annotate - [select for diffs], Mon Oct 30 12:37:08 2006 UTC (14 years, 2 months ago) by elad
Branch: MAIN
Changes since 1.46: +30 -14 lines
Diff to previous 1.46 (colored)

Don't use memcmp() and memcpy() on userspace addresses.

Pointed out by mrg@, thanks.

This also makes it so a malicious root user can't panic the kernel by
passing junk pointers.

Revision 1.46 / (download) - annotate - [select for diffs], Mon Oct 30 00:30:20 2006 UTC (14 years, 2 months ago) by elad
Branch: MAIN
Changes since 1.45: +16 -19 lines
Diff to previous 1.45 (colored)

Simplify and rework duplication check code.

If we already have an entry, we only print a message mentioning it if the
fingerprints mismatch; that may indicate a security issue.

If the fingerprints match, there's a good chance it's the same file
appearing multiple times as a hard-link, in which case print a message
only if the verbose level is 1 or more.

Revision 1.45 / (download) - annotate - [select for diffs], Sat Oct 28 15:13:11 2006 UTC (14 years, 2 months ago) by elad
Branch: MAIN
Changes since 1.44: +4 -23 lines
Diff to previous 1.44 (colored)

Remove bogus sanity check.

The passed size doesn't mean anything really and can only help detect
corrupted configuration files, which should be done in userland anyway.

Note it's possible to trigger a kernel panic by passing a junk
pointer in the 'fingerprint' member of the parameters, but then again
that's true for anything that copies in data from a userland-supplied
pointer. And we have plenty of those.

At the moment, Veriexec only allows the super-user to open the pseudo
device, so it's ~okay. Maybe we should address that in copy(9) or
something?

Revision 1.43.4.1 / (download) - annotate - [select for diffs], Sun Oct 22 06:05:28 2006 UTC (14 years, 3 months ago) by yamt
Branch: yamt-splraiseipl
Changes since 1.43: +5 -4 lines
Diff to previous 1.43 (colored)

sync with head

Revision 1.44 / (download) - annotate - [select for diffs], Thu Oct 12 01:30:51 2006 UTC (14 years, 3 months ago) by christos
Branch: MAIN
CVS Tags: yamt-splraiseipl-base2
Changes since 1.43: +5 -4 lines
Diff to previous 1.43 (colored)

- sprinkle __unused on function decls.
- fix a couple of unused bugs
- no more -Wno-unused for i386

Revision 1.31.8.4 / (download) - annotate - [select for diffs], Thu Sep 14 12:31:26 2006 UTC (14 years, 4 months ago) by yamt
Branch: yamt-pdpolicy
Changes since 1.31.8.3: +6 -5 lines
Diff to previous 1.31.8.3 (colored) to branchpoint 1.31 (colored) next main 1.32 (colored)

sync with head.

Revision 1.31.4.1 / (download) - annotate - [select for diffs], Sat Sep 9 02:49:09 2006 UTC (14 years, 4 months ago) by rpaulo
Branch: rpaulo-netinet-merge-pcb
Changes since 1.31: +168 -169 lines
Diff to previous 1.31 (colored) next main 1.32 (colored)

sync with head

Revision 1.41.2.1 / (download) - annotate - [select for diffs], Fri Sep 8 03:11:50 2006 UTC (14 years, 4 months ago) by riz
Branch: abandoned-netbsd-4
Changes since 1.41: +5 -5 lines
Diff to previous 1.41 (colored) next main 1.42 (colored)

Pull up following revision(s) (requested by elad in ticket #121):
	sbin/veriexecctl/veriexecctl_parse.y: revision 1.16
	sys/dev/verified_exec.c: revision 1.43
Fix two horrible bugs found during a routine audit session with Brett Lymn.
First one was incorrectly loading entries -- we were treating each file as
a mount, which resulted in huge mess. I have no excuse for how I didn't
catch this earlier.
Second, use the table name we create for the Veriexec sysctl node and not
the fixed "table0".
Both are fileassoc(9) integration fallout.

Revision 1.43 / (download) - annotate - [select for diffs], Tue Sep 5 13:02:16 2006 UTC (14 years, 4 months ago) by elad
Branch: MAIN
CVS Tags: yamt-splraiseipl-base, yamt-pdpolicy-base9, rpaulo-netinet-merge-pcb-base
Branch point for: yamt-splraiseipl, newlock2
Changes since 1.42: +5 -5 lines
Diff to previous 1.42 (colored)

Fix two horrible bugs found during a routine audit session with Brett Lymn.

First one was incorrectly loading entries -- we were treating each file as
a mount, which resulted in huge mess. I have no excuse for how I didn't
catch this earlier.

Second, use the table name we create for the Veriexec sysctl node and not
the fixed "table0".

Both are fileassoc(9) integration fallout.

Revision 1.42 / (download) - annotate - [select for diffs], Sun Sep 3 21:38:23 2006 UTC (14 years, 4 months ago) by christos
Branch: MAIN
Changes since 1.41: +4 -3 lines
Diff to previous 1.41 (colored)

add missing initializer

Revision 1.31.8.3 / (download) - annotate - [select for diffs], Fri Aug 11 15:43:52 2006 UTC (14 years, 5 months ago) by yamt
Branch: yamt-pdpolicy
Changes since 1.31.8.2: +164 -171 lines
Diff to previous 1.31.8.2 (colored) to branchpoint 1.31 (colored)

sync with head

Revision 1.41 / (download) - annotate - [select for diffs], Mon Jul 24 21:32:39 2006 UTC (14 years, 6 months ago) by elad
Branch: MAIN
CVS Tags: yamt-pdpolicy-base8, yamt-pdpolicy-base7, abandoned-netbsd-4-base
Branch point for: abandoned-netbsd-4
Changes since 1.40: +4 -4 lines
Diff to previous 1.40 (colored)

replace magic numbers for strict levels (0-3) with defines.

Revision 1.40 / (download) - annotate - [select for diffs], Mon Jul 24 21:15:05 2006 UTC (14 years, 6 months ago) by elad
Branch: MAIN
Changes since 1.39: +4 -6 lines
Diff to previous 1.39 (colored)

finally do things properly. veriexec_report() takes flags, not three ints.

Revision 1.39 / (download) - annotate - [select for diffs], Fri Jul 21 16:48:48 2006 UTC (14 years, 6 months ago) by ad
Branch: MAIN
Changes since 1.38: +6 -6 lines
Diff to previous 1.38 (colored)

- Use the LWP cached credentials where sane.
- Minor cosmetic changes.

Revision 1.38 / (download) - annotate - [select for diffs], Sat Jul 15 16:48:51 2006 UTC (14 years, 6 months ago) by elad
Branch: MAIN
Changes since 1.37: +4 -4 lines
Diff to previous 1.37 (colored)

update my email on the copyright to @netbsd.org

Revision 1.37 / (download) - annotate - [select for diffs], Sat Jul 15 16:43:35 2006 UTC (14 years, 6 months ago) by elad
Branch: MAIN
Changes since 1.36: +3 -24 lines
Diff to previous 1.36 (colored)

move veriexec_clear() from dev/verified_exec.c to kern/kern_verifiedexec.c

Revision 1.36 / (download) - annotate - [select for diffs], Sat Jul 15 16:33:16 2006 UTC (14 years, 6 months ago) by elad
Branch: MAIN
Changes since 1.35: +65 -77 lines
Diff to previous 1.35 (colored)

some cleanup and fixes:
  - fix possible panic and vfs refcnt issue
  - use log(9) instead of printf(9) where possible
  - indent
  - stop logging fsid/fileid

Revision 1.35 / (download) - annotate - [select for diffs], Fri Jul 14 18:41:40 2006 UTC (14 years, 6 months ago) by elad
Branch: MAIN
Changes since 1.34: +137 -109 lines
Diff to previous 1.34 (colored)

okay, since there was no way to divide this to two commits, here it goes..

introduce fileassoc(9), a kernel interface for associating meta-data with
files using in-kernel memory. this is very similar to what we had in
veriexec till now, only abstracted so it can be used more easily by more
consumers.

this also prompted the redesign of the interface, making it work on vnodes
and mounts and not directly on devices and inodes. internally, we still
use file-id but that's gonna change soon... the interface will remain
consistent.

as a result, veriexec went under some heavy changes to conform to the new
interface. since we no longer use device numbers to identify file-systems,
the veriexec sysctl stuff changed too: kern.veriexec.count.dev_N is now
kern.veriexec.tableN.* where 'N' is NOT the device number but rather a
way to distinguish several mounts.

also worth noting is the plugging of unmount/delete operations
wrt/fileassoc and veriexec.

tons of input from yamt@, wrstuden@, martin@, and christos@.

Revision 1.31.8.2 / (download) - annotate - [select for diffs], Mon Jun 26 12:50:37 2006 UTC (14 years, 7 months ago) by yamt
Branch: yamt-pdpolicy
Changes since 1.31.8.1: +8 -7 lines
Diff to previous 1.31.8.1 (colored) to branchpoint 1.31 (colored)

sync with head.

Revision 1.18.2.1 / (download) - annotate - [select for diffs], Wed Jun 21 15:02:12 2006 UTC (14 years, 7 months ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.18: +256 -150 lines
Diff to previous 1.18 (colored)

sync with head.

Revision 1.33.2.1 / (download) - annotate - [select for diffs], Mon Jun 19 03:58:11 2006 UTC (14 years, 7 months ago) by chap
Branch: chap-midi
Changes since 1.33: +8 -7 lines
Diff to previous 1.33 (colored) next main 1.34 (colored)

Sync with head.

Revision 1.31.6.1 / (download) - annotate - [select for diffs], Thu Jun 1 22:36:03 2006 UTC (14 years, 7 months ago) by kardel
Branch: simonb-timecounters
CVS Tags: simonb-timcounters-final
Changes since 1.31: +16 -11 lines
Diff to previous 1.31 (colored) next main 1.32 (colored)

Sync with head.

Revision 1.34 / (download) - annotate - [select for diffs], Thu May 25 11:24:00 2006 UTC (14 years, 8 months ago) by blymn
Branch: MAIN
CVS Tags: yamt-pdpolicy-base6, simonb-timecounters-base, gdamore-uart-base, gdamore-uart, chap-midi-nbase, chap-midi-base
Changes since 1.33: +8 -7 lines
Diff to previous 1.33 (colored)

Include kauth header for function prototypes
Whitespace cleanup.

Revision 1.31.12.1 / (download) - annotate - [select for diffs], Wed May 24 15:50:07 2006 UTC (14 years, 8 months ago) by tron
Branch: peter-altq
Changes since 1.31: +11 -7 lines
Diff to previous 1.31 (colored) next main 1.32 (colored)

Merge 2006-05-24 NetBSD-current into the "peter-altq" branch.

Revision 1.31.8.1 / (download) - annotate - [select for diffs], Wed May 24 10:57:36 2006 UTC (14 years, 8 months ago) by yamt
Branch: yamt-pdpolicy
Changes since 1.31: +11 -7 lines
Diff to previous 1.31 (colored)

sync with head.

Revision 1.33 / (download) - annotate - [select for diffs], Sun May 14 21:42:26 2006 UTC (14 years, 8 months ago) by elad
Branch: MAIN
CVS Tags: yamt-pdpolicy-base5
Branch point for: chap-midi
Changes since 1.32: +8 -6 lines
Diff to previous 1.32 (colored)

integrate kauth.

Revision 1.31.10.3 / (download) - annotate - [select for diffs], Thu May 11 23:28:05 2006 UTC (14 years, 8 months ago) by elad
Branch: elad-kernelauth
Changes since 1.31.10.2: +6 -4 lines
Diff to previous 1.31.10.2 (colored) to branchpoint 1.31 (colored) next main 1.32 (colored)

sync with head

Revision 1.32 / (download) - annotate - [select for diffs], Sat May 6 13:25:36 2006 UTC (14 years, 8 months ago) by elad
Branch: MAIN
CVS Tags: elad-kernelauth-base
Changes since 1.31: +6 -4 lines
Diff to previous 1.31 (colored)

add missing vrele(), from blymn@.

Revision 1.31.10.2 / (download) - annotate - [select for diffs], Fri Mar 10 14:39:01 2006 UTC (14 years, 10 months ago) by elad
Branch: elad-kernelauth
Changes since 1.31.10.1: +4 -4 lines
Diff to previous 1.31.10.1 (colored) to branchpoint 1.31 (colored)

generic_authorize() -> kauth_authorize_generic().

Revision 1.31.10.1 / (download) - annotate - [select for diffs], Wed Mar 8 01:44:48 2006 UTC (14 years, 10 months ago) by elad
Branch: elad-kernelauth
Changes since 1.31: +8 -6 lines
Diff to previous 1.31 (colored)

Adapt to kernel authorization KPI.

Revision 1.31 / (download) - annotate - [select for diffs], Mon Dec 12 21:47:58 2005 UTC (15 years, 1 month ago) by elad
Branch: MAIN
CVS Tags: yamt-uio_vmspace-base5, yamt-uio_vmspace, yamt-pdpolicy-base4, yamt-pdpolicy-base3, yamt-pdpolicy-base2, yamt-pdpolicy-base, peter-altq-base
Branch point for: yamt-pdpolicy, simonb-timecounters, rpaulo-netinet-merge-pcb, peter-altq, elad-kernelauth
Changes since 1.30: +35 -3 lines
Diff to previous 1.30 (colored)

Add and document a "query" keyword to veriexecctl. Usage:

	/sbin/veriexecctl query /path/to/file

will print out filename, device, inode, evaluation status, entry flags,
fingerprint, and fingerprinting algorithm.

Revision 1.30 / (download) - annotate - [select for diffs], Mon Dec 12 16:26:33 2005 UTC (15 years, 1 month ago) by elad
Branch: MAIN
Changes since 1.29: +8 -8 lines
Diff to previous 1.29 (colored)

Catch up with ktrace-lwp merge.

While I'm here, stop using cur{lwp,proc}.

Revision 1.29 / (download) - annotate - [select for diffs], Sun Dec 11 12:20:53 2005 UTC (15 years, 1 month ago) by christos
Branch: MAIN
Changes since 1.28: +10 -10 lines
Diff to previous 1.28 (colored)

merge ktrace-lwp.

Revision 1.3.2.8 / (download) - annotate - [select for diffs], Sun Dec 11 10:28:47 2005 UTC (15 years, 1 month ago) by christos
Branch: ktrace-lwp
Changes since 1.3.2.7: +209 -149 lines
Diff to previous 1.3.2.7 (colored) next main 1.4 (colored)

Sync with head.

Revision 1.28 / (download) - annotate - [select for diffs], Sat Dec 10 02:10:00 2005 UTC (15 years, 1 month ago) by elad
Branch: MAIN
CVS Tags: ktrace-lwp-base
Changes since 1.27: +62 -3 lines
Diff to previous 1.27 (colored)

Add and document a VERIEXEC_DELETE operation for Veriexec.

We can now delete an entry from the tables using

	veriexecctl delete /path/to/file

or remove an entire table using

	veriexecctl delete /mount_point

(any directory will work for the mount point it's on)

Revision 1.27 / (download) - annotate - [select for diffs], Sat Dec 10 01:04:17 2005 UTC (15 years, 1 month ago) by elad
Branch: MAIN
Changes since 1.26: +151 -141 lines
Diff to previous 1.26 (colored)

Refactor the code that creates a new table and loads entries to its own
functions (veriexec_newtable and veriexec_load). No functional change.

Revision 1.25.6.1 / (download) - annotate - [select for diffs], Tue Nov 29 21:23:08 2005 UTC (15 years, 1 month ago) by yamt
Branch: yamt-readahead
Changes since 1.25: +3 -12 lines
Diff to previous 1.25 (colored) next main 1.26 (colored)

sync with head.

Revision 1.26 / (download) - annotate - [select for diffs], Fri Nov 25 12:02:09 2005 UTC (15 years, 2 months ago) by elad
Branch: MAIN
CVS Tags: yamt-readahead-base3
Changes since 1.25: +3 -12 lines
Diff to previous 1.25 (colored)

Remove few no longer needed XXX comments about fsid/fileid being
not the same type as dev_t/ino_t.

Revision 1.3.2.7 / (download) - annotate - [select for diffs], Thu Nov 10 14:03:00 2005 UTC (15 years, 2 months ago) by skrll
Branch: ktrace-lwp
Changes since 1.3.2.6: +269 -187 lines
Diff to previous 1.3.2.6 (colored)

Sync with HEAD. Here we go again...

Revision 1.25 / (download) - annotate - [select for diffs], Fri Oct 7 18:07:46 2005 UTC (15 years, 3 months ago) by elad
Branch: MAIN
CVS Tags: yamt-vop-base3, yamt-vop-base2, yamt-vop-base, yamt-vop, yamt-readahead-pervnode, yamt-readahead-perfile, yamt-readahead-base2, yamt-readahead-base, thorpej-vnode-attr-base, thorpej-vnode-attr
Branch point for: yamt-readahead
Changes since 1.24: +5 -4 lines
Diff to previous 1.24 (colored)

Various fixes from blymn@ and myself.

Also, put genfs changes under #if 0, and don't do per-page fingerprints
until this is properly discussed, as requested by yamt@.

Revision 1.24 / (download) - annotate - [select for diffs], Wed Oct 5 13:48:48 2005 UTC (15 years, 3 months ago) by elad
Branch: MAIN
Changes since 1.23: +6 -3 lines
Diff to previous 1.23 (colored)

Introduce per-page fingerprints in Veriexec.

This closes a hole pointed out by Thor Lancelot Simon on tech-kern ~3
years ago.

The problem was with running binaries from remote storage, where our
kernel (and Veriexec) has no control over any changes to files.

An attacker could, after the fingerprint has been verified and
program loaded to memory, inject malicious code into the backing
store on the remote storage, followed by a forced flush, causing
a page-in of the malicious data from backing store, bypassing
integrity checks.

Initial implementation by Brett Lymn.

Revision 1.23 / (download) - annotate - [select for diffs], Fri Aug 19 16:58:29 2005 UTC (15 years, 5 months ago) by christos
Branch: MAIN
Changes since 1.22: +12 -9 lines
Diff to previous 1.22 (colored)

more 64 bit inode lossage.

Revision 1.5.2.16 / (download) - annotate - [select for diffs], Tue Aug 16 12:43:17 2005 UTC (15 years, 5 months ago) by tron
Branch: netbsd-3
CVS Tags: netbsd-3-1-RELEASE, netbsd-3-1-RC4, netbsd-3-1-RC3, netbsd-3-1-RC2, netbsd-3-1-RC1, netbsd-3-1-1-RELEASE, netbsd-3-1, netbsd-3-0-RELEASE, netbsd-3-0-RC6, netbsd-3-0-RC5, netbsd-3-0-RC4, netbsd-3-0-RC3, netbsd-3-0-RC2, netbsd-3-0-RC1, netbsd-3-0-3-RELEASE, netbsd-3-0-2-RELEASE, netbsd-3-0-1-RELEASE, netbsd-3-0
Changes since 1.5.2.15: +15 -6 lines
Diff to previous 1.5.2.15 (colored) to branchpoint 1.5 (colored) next main 1.6 (colored)

Pull up revision 1.21 (requested by elad in ticket #669):
The veriexec API uses dev_t and ino_t for device and inode numbers.
VOP_GETATTR() fills a struct vattr, where va_fsid and va_fileid (device
and inode..) are typed as long.
Add some casts when using these values and surround them with XXXs about
the potential size mismatch, as long can be 64 bits but dev_t and ino_t
are always 32 bits. This is safe because *for now* we're still using
32 bit inode numbers.
Discussed with blymn@.

Revision 1.5.2.15 / (download) - annotate - [select for diffs], Tue Aug 16 12:34:57 2005 UTC (15 years, 5 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.14: +3 -3 lines
Diff to previous 1.5.2.14 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.20 via patch (requested by elad in ticket #668):
Fix printing formats.
  - size_t is %zu
  - dev_t is uint32_t is %u
  - long is %ld

Revision 1.5.2.14 / (download) - annotate - [select for diffs], Mon Aug 15 12:38:03 2005 UTC (15 years, 5 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.13: +14 -21 lines
Diff to previous 1.5.2.13 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.19 (requested by elad in ticket #654):
Change how we handle duplicates in the signatures file.
Just give collision information (filename, device, inode, old and new
entry type and algorithm, and note if the fingerprint is the same or not.

Revision 1.22 / (download) - annotate - [select for diffs], Sat Aug 13 13:06:35 2005 UTC (15 years, 5 months ago) by elad
Branch: MAIN
Changes since 1.21: +4 -4 lines
Diff to previous 1.21 (colored)

Oops. Put back braces...

Revision 1.21 / (download) - annotate - [select for diffs], Sat Aug 13 12:56:44 2005 UTC (15 years, 5 months ago) by elad
Branch: MAIN
Changes since 1.20: +15 -6 lines
Diff to previous 1.20 (colored)

The veriexec API uses dev_t and ino_t for device and inode numbers.
VOP_GETATTR() fills a struct vattr, where va_fsid and va_fileid (device
and inode..) are typed as long.

Add some casts when using these values and surround them with XXXs about
the potential size mismatch, as long can be 64 bits but dev_t and ino_t
are always 32 bits. This is safe because *for now* we're still using
32 bit inode numbers.

Discussed with blymn@.

Revision 1.20 / (download) - annotate - [select for diffs], Sat Aug 13 12:08:34 2005 UTC (15 years, 5 months ago) by elad
Branch: MAIN
Changes since 1.19: +9 -9 lines
Diff to previous 1.19 (colored)

Fix printing formats.
  - size_t is %zu
  - dev_t is uint32_t is %u
  - long is %ld

Revision 1.19 / (download) - annotate - [select for diffs], Wed Aug 3 18:05:16 2005 UTC (15 years, 5 months ago) by elad
Branch: MAIN
Changes since 1.18: +17 -24 lines
Diff to previous 1.18 (colored)

Change how we handle duplicates in the signatures file.
Just give collision information (filename, device, inode, old and new
entry type and algorithm, and note if the fingerprint is the same or not.

Revision 1.5.2.13 / (download) - annotate - [select for diffs], Sat Jul 2 17:39:10 2005 UTC (15 years, 6 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.12: +4 -4 lines
Diff to previous 1.5.2.12 (colored) to branchpoint 1.5 (colored)

Backout pullup of revision 1.12, it shouldn't have pulled up.

Revision 1.5.2.12 / (download) - annotate - [select for diffs], Sat Jul 2 15:58:47 2005 UTC (15 years, 6 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.11: +13 -9 lines
Diff to previous 1.5.2.11 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.18 (requested by elad in ticket #487):
Remove veriexec_dprintf() calls forgotten in last commit.

Revision 1.5.2.11 / (download) - annotate - [select for diffs], Sat Jul 2 15:58:23 2005 UTC (15 years, 6 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.10: +28 -31 lines
Diff to previous 1.5.2.10 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.17 (requested by elad in ticket #487):
- Use more calls to veriexec_report() where possible.
- Change #ifdef VERIFIED_EXEC_VERBOSE to another verbose level, 2. Add
sysctl(3) bits.
- Simplify access type conflict handling during load. This depends on
the values of access type defines to be ordered from least to most
'strict'.

Revision 1.5.2.10 / (download) - annotate - [select for diffs], Sat Jul 2 15:53:46 2005 UTC (15 years, 6 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.9: +12 -13 lines
Diff to previous 1.5.2.9 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.16 (requested by elad in ticket #487):
- Avoid pollution of struct vnode. Save the fingerprint evaluation status
in the veriexec table entry; the lookups are very cheap now. Suggested
by Chuq.
- Handle non-regular (!VREG) files correctly).
- Remove (no longer needed) FINGERPRINT_NOENTRY.

Revision 1.5.2.9 / (download) - annotate - [select for diffs], Sat Jul 2 15:51:20 2005 UTC (15 years, 6 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.8: +6 -9 lines
Diff to previous 1.5.2.8 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.15 (requested by elad in ticket #487):
More veriexec changes:
- Better organize strict level. Now we have 4 levels:
- Level 0, learning mode: Warnings only about anything that might've
resulted in 'access denied' or similar in a higher strict level.
- Level 1, IDS mode:
- Deny access on fingerprint mismatch.
- Deny modification of veriexec tables.
- Level 2, IPS mode:
- All implications of strict level 1.
- Deny write access to monitored files.
- Prevent removal of monitored files.
- Enforce access type - 'direct', 'indirect', or 'file'.
- Level 3, lockdown mode:
- All implications of strict level 2.
- Prevent creation of new files.
- Deny access to non-monitored files.
- Update sysctl(3) man-page with above. (date bumped too :)
- Remove FINGERPRINT_INDIRECT from possible fp_status values; it's no
longer needed.
- Simplify veriexec_removechk() in light of new strict level policies.
- Eliminate use of 'securelevel'; veriexec now behaves according to
its strict level only.

Revision 1.5.2.8 / (download) - annotate - [select for diffs], Sat Jul 2 15:50:08 2005 UTC (15 years, 6 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.7: +6 -6 lines
Diff to previous 1.5.2.7 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.14 (requested by elad in ticket #487):
Since NetBSD operates in securelevel -1 by default, don't rely on the
securelevel alone when checking if the veriexec tables can be modified;
also check if the strict level is above 0.

Revision 1.5.2.7 / (download) - annotate - [select for diffs], Sat Jul 2 15:49:51 2005 UTC (15 years, 6 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.6: +7 -4 lines
Diff to previous 1.5.2.6 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.13 (requested by elad in ticket #487):
Don't allow unprivileged users to open the veriexec device.
While I'm here, explicit 'int' for 'veriexec_device_usage'.

Revision 1.5.2.6 / (download) - annotate - [select for diffs], Sat Jul 2 15:45:13 2005 UTC (15 years, 6 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.5: +4 -4 lines
Diff to previous 1.5.2.5 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.12 (requested by elad in ticket #487):
fix a printf format argument type.

Revision 1.18 / (download) - annotate - [select for diffs], Mon Jun 20 15:32:29 2005 UTC (15 years, 7 months ago) by elad
Branch: MAIN
Branch point for: yamt-lazymbuf
Changes since 1.17: +13 -9 lines
Diff to previous 1.17 (colored)

Remove veriexec_dprintf() calls forgotten in last commit.

Revision 1.17 / (download) - annotate - [select for diffs], Mon Jun 20 15:06:18 2005 UTC (15 years, 7 months ago) by elad
Branch: MAIN
Changes since 1.16: +28 -31 lines
Diff to previous 1.16 (colored)

- Use more calls to veriexec_report() where possible.

- Change #ifdef VERIFIED_EXEC_VERBOSE to another verbose level, 2. Add
  sysctl(3) bits.

- Simplify access type conflict handling during load. This depends on
  the values of access type defines to be ordered from least to most
  'strict'.

Revision 1.16 / (download) - annotate - [select for diffs], Sun Jun 19 18:22:36 2005 UTC (15 years, 7 months ago) by elad
Branch: MAIN
Changes since 1.15: +12 -13 lines
Diff to previous 1.15 (colored)

- Avoid pollution of struct vnode. Save the fingerprint evaluation status
  in the veriexec table entry; the lookups are very cheap now. Suggested
  by Chuq.

- Handle non-regular (!VREG) files correctly).

- Remove (no longer needed) FINGERPRINT_NOENTRY.

Revision 1.15 / (download) - annotate - [select for diffs], Fri Jun 17 17:46:18 2005 UTC (15 years, 7 months ago) by elad
Branch: MAIN
Changes since 1.14: +6 -9 lines
Diff to previous 1.14 (colored)

More veriexec changes:

- Better organize strict level. Now we have 4 levels:
  - Level 0, learning mode: Warnings only about anything that might've
      resulted in 'access denied' or similar in a higher strict level.

  - Level 1, IDS mode:
    - Deny access on fingerprint mismatch.
    - Deny modification of veriexec tables.

  - Level 2, IPS mode:
    - All implications of strict level 1.
    - Deny write access to monitored files.
    - Prevent removal of monitored files.
    - Enforce access type - 'direct', 'indirect', or 'file'.

  - Level 3, lockdown mode:
    - All implications of strict level 2.
    - Prevent creation of new files.
    - Deny access to non-monitored files.

- Update sysctl(3) man-page with above. (date bumped too :)

- Remove FINGERPRINT_INDIRECT from possible fp_status values; it's no
  longer needed.

- Simplify veriexec_removechk() in light of new strict level policies.

- Eliminate use of 'securelevel'; veriexec now behaves according to
  its strict level only.

Revision 1.14 / (download) - annotate - [select for diffs], Thu Jun 16 15:45:48 2005 UTC (15 years, 7 months ago) by elad
Branch: MAIN
Changes since 1.13: +6 -6 lines
Diff to previous 1.13 (colored)

Since NetBSD operates in securelevel -1 by default, don't rely on the
securelevel alone when checking if the veriexec tables can be modified;
also check if the strict level is above 0.

Revision 1.13 / (download) - annotate - [select for diffs], Thu Jun 16 15:41:36 2005 UTC (15 years, 7 months ago) by elad
Branch: MAIN
Changes since 1.12: +7 -4 lines
Diff to previous 1.12 (colored)

Don't allow unprivileged users to open the veriexec device.
While I'm here, explicit 'int' for 'veriexec_device_usage'.

Revision 1.4.2.1 / (download) - annotate - [select for diffs], Sat Jun 11 12:31:41 2005 UTC (15 years, 7 months ago) by tron
Branch: netbsd-2-0
CVS Tags: netbsd-2-0-3-RELEASE
Changes since 1.4: +2 -2 lines
Diff to previous 1.4 (colored) next main 1.5 (colored)

Pull up revision 1.6 (requested by kleink in ticket #1988):
Use UIO_SYSSPACE for NDINIT. Found by Eike Dehling.

Revision 1.5.2.5 / (download) - annotate - [select for diffs], Fri Jun 10 15:29:58 2005 UTC (15 years, 7 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.4: +7 -3 lines
Diff to previous 1.5.2.4 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.11 (requested by elad in ticket #389):
Don't create duplicate tables for the same device.

Revision 1.5.2.4 / (download) - annotate - [select for diffs], Fri Jun 10 15:15:57 2005 UTC (15 years, 7 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.3: +15 -3 lines
Diff to previous 1.5.2.3 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.10 (requested by elad in ticket #389):
Add indication for number of fingerprinted files on each device.
When a table is created for a new device, a new variable is created
under the kern.veriexec.count node named "dev_<id>". For example,
dev_0, dev_3, etc.

Revision 1.5.2.3 / (download) - annotate - [select for diffs], Fri Jun 10 15:12:11 2005 UTC (15 years, 7 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.2: +5 -21 lines
Diff to previous 1.5.2.2 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.9 (requested by elad in ticket #389):
Remove common code for returning supported fingerprints. This is done now
via sysctl(8) using kern.veriexec.algorithms.
Also add an entry for the 'algorithms' variable in sysctl.8 forgotten in
the last commit.

Revision 1.5.2.2 / (download) - annotate - [select for diffs], Fri Jun 10 15:10:10 2005 UTC (15 years, 7 months ago) by tron
Branch: netbsd-3
Changes since 1.5.2.1: +259 -185 lines
Diff to previous 1.5.2.1 (colored) to branchpoint 1.5 (colored)

Pull up revision 1.8 (requested by elad in ticket #389):
Some changes in veriexec.
New features:
- Add a veriexec_report() routine to make most reporting consistent and
remove some common code.
- Add 'strict' mode that controls how veriexec behaves.
- Add sysctl knobs:
o kern.veriexec.verbose controls verbosity levels. Value: 0, 1.
o kern.veriexec.strict controls strict level. Values: 0, 1, 2. See
documentation in sysctl(3) for details.
o kern.veriexec.algorithms returns a string with a space separated
list of supported hashing algorithms in veriexec.
- Updated documentation in man pages for sysctl(3) and sysctl(8).
Bug fixes:
- veriexec_removechk(): Code cleanup + handle FINGERPRINT_NOTEVAL
correctly.
- exec_script(): Don't pass 0 as flag when executing a script; use the
defined VERIEXEC_INDIRECT - which is 1. Makes indirect execution
enforcement work.
- Fix some printing formats and types..

Revision 1.5.2.1 / (download) - annotate - [select for diffs], Fri Jun 10 14:37:56 2005 UTC (15 years, 7 months ago) by tron
Branch: netbsd-3
Changes since 1.5: +3 -3 lines
Diff to previous 1.5 (colored)

Pull up revision 1.6 (requested by elad in ticket #389):
Use UIO_SYSSPACE for NDINIT. Found by Eike Dehling.

Revision 1.12 / (download) - annotate - [select for diffs], Mon Jun 6 02:48:20 2005 UTC (15 years, 7 months ago) by christos
Branch: MAIN
Changes since 1.11: +4 -4 lines
Diff to previous 1.11 (colored)

fix a printf format argument type.

Revision 1.11 / (download) - annotate - [select for diffs], Fri Jun 3 13:21:35 2005 UTC (15 years, 7 months ago) by elad
Branch: MAIN
Changes since 1.10: +7 -3 lines
Diff to previous 1.10 (colored)

Don't create duplicate tables for the same device.

Revision 1.10 / (download) - annotate - [select for diffs], Sun May 22 22:34:01 2005 UTC (15 years, 8 months ago) by elad
Branch: MAIN
Changes since 1.9: +15 -3 lines
Diff to previous 1.9 (colored)

Add indication for number of fingerprinted files on each device.

When a table is created for a new device, a new variable is created
under the kern.veriexec.count node named "dev_<id>". For example,
dev_0, dev_3, etc.

Revision 1.9 / (download) - annotate - [select for diffs], Fri May 20 19:52:52 2005 UTC (15 years, 8 months ago) by elad
Branch: MAIN
Changes since 1.8: +5 -21 lines
Diff to previous 1.8 (colored)

Remove common code for returning supported fingerprints. This is done now
via sysctl(8) using kern.veriexec.algorithms.

Also add an entry for the 'algorithms' variable in sysctl.8 forgotten in
the last commit.

Revision 1.8 / (download) - annotate - [select for diffs], Thu May 19 20:16:19 2005 UTC (15 years, 8 months ago) by elad
Branch: MAIN
Changes since 1.7: +11 -11 lines
Diff to previous 1.7 (colored)

Some changes in veriexec.

New features:

  - Add a veriexec_report() routine to make most reporting consistent and
    remove some common code.
  - Add 'strict' mode that controls how veriexec behaves.
  - Add sysctl knobs:
     o kern.veriexec.verbose controls verbosity levels. Value: 0, 1.
     o kern.veriexec.strict controls strict level. Values: 0, 1, 2. See
       documentation in sysctl(3) for details.
     o kern.veriexec.algorithms returns a string with a space separated
       list of supported hashing algorithms in veriexec.
  - Updated documentation in man pages for sysctl(3) and sysctl(8).

Bug fixes:

  - veriexec_removechk(): Code cleanup + handle FINGERPRINT_NOTEVAL
    correctly.
  - exec_script(): Don't pass 0 as flag when executing a script; use the
    defined VERIEXEC_INDIRECT - which is 1. Makes indirect execution
    enforcement work.
  - Fix some printing formats and types..

Revision 1.4.6.1 / (download) - annotate - [select for diffs], Sun May 15 00:59:13 2005 UTC (15 years, 8 months ago) by riz
Branch: netbsd-2
CVS Tags: netbsd-2-1-RELEASE, netbsd-2-1-RC6, netbsd-2-1-RC5, netbsd-2-1-RC4, netbsd-2-1-RC3, netbsd-2-1-RC2, netbsd-2-1-RC1, netbsd-2-1
Changes since 1.4: +3 -3 lines
Diff to previous 1.4 (colored) next main 1.5 (colored)

Pull up revision 1.6 (requested by cube in ticket #1505):
Use UIO_SYSSPACE for NDINIT. Found by Eike Dehling.

Revision 1.4.8.1 / (download) - annotate - [select for diffs], Fri Apr 29 11:28:44 2005 UTC (15 years, 8 months ago) by kent
Branch: kent-audio2
Changes since 1.4: +260 -186 lines
Diff to previous 1.4 (colored) next main 1.5 (colored)

sync with -current

Revision 1.7 / (download) - annotate - [select for diffs], Wed Apr 20 13:44:45 2005 UTC (15 years, 9 months ago) by blymn
Branch: MAIN
CVS Tags: kent-audio2-base
Changes since 1.6: +260 -186 lines
Diff to previous 1.6 (colored)

Rototill of the verified exec functionality.
  * We now use hash tables instead of a list to store the in kernel
    fingerprints.
  * Fingerprint methods handling has been made more flexible, it is now
    even simpler to add new methods.
  * the loader no longer passes in magic numbers representing the
    fingerprint method so veriexecctl is not longer kernel specific.
  * fingerprint methods can be tailored out using options in the kernel
    config file.
  * more fingerprint methods added - rmd160, sha256/384/512
  * veriexecctl can now report the fingerprint methods supported by the
    running kernel.
  * regularised the naming of some portions of veriexec.

Revision 1.6 / (download) - annotate - [select for diffs], Sun Apr 3 17:29:15 2005 UTC (15 years, 9 months ago) by martin
Branch: MAIN
Changes since 1.5: +3 -3 lines
Diff to previous 1.5 (colored)

Use UIO_SYSSPACE for NDINIT. Found by Eike Dehling.

Revision 1.4.10.1 / (download) - annotate - [select for diffs], Sat Mar 19 08:33:53 2005 UTC (15 years, 10 months ago) by yamt
Branch: yamt-km
Changes since 1.4: +5 -5 lines
Diff to previous 1.4 (colored) next main 1.5 (colored)

sync with head.  xen and whitespace.  xen part is not finished.

Revision 1.3.2.6 / (download) - annotate - [select for diffs], Fri Mar 4 16:40:54 2005 UTC (15 years, 10 months ago) by skrll
Branch: ktrace-lwp
Changes since 1.3.2.5: +5 -5 lines
Diff to previous 1.3.2.5 (colored)

Sync with HEAD.

Hi Perry!

Revision 1.5 / (download) - annotate - [select for diffs], Sun Feb 27 00:26:58 2005 UTC (15 years, 10 months ago) by perry
Branch: MAIN
CVS Tags: yamt-km-base4, yamt-km-base3, netbsd-3-base
Branch point for: netbsd-3
Changes since 1.4: +5 -5 lines
Diff to previous 1.4 (colored)

nuke trailing whitespace

Revision 1.3.2.5 / (download) - annotate - [select for diffs], Mon Jan 24 08:59:40 2005 UTC (16 years ago) by skrll
Branch: ktrace-lwp
Changes since 1.3.2.4: +10 -12 lines
Diff to previous 1.3.2.4 (colored)

Adapt to branch.

Revision 1.3.2.4 / (download) - annotate - [select for diffs], Tue Sep 21 13:26:26 2004 UTC (16 years, 4 months ago) by skrll
Branch: ktrace-lwp
Changes since 1.3.2.3: +8 -5 lines
Diff to previous 1.3.2.3 (colored)

Fix the sync with head I botched.

Revision 1.3.2.3 / (download) - annotate - [select for diffs], Sat Sep 18 14:44:28 2004 UTC (16 years, 4 months ago) by skrll
Branch: ktrace-lwp
Changes since 1.3.2.2: +4 -7 lines
Diff to previous 1.3.2.2 (colored)

Sync with HEAD.

Revision 1.3.2.2 / (download) - annotate - [select for diffs], Tue Aug 3 10:44:54 2004 UTC (16 years, 5 months ago) by skrll
Branch: ktrace-lwp
Changes since 1.3.2.1: +4 -1 lines
Diff to previous 1.3.2.1 (colored)

Sync with HEAD

Revision 1.4 / (download) - annotate - [select for diffs], Mon Jul 14 15:47:04 2003 UTC (17 years, 6 months ago) by lukem
Branch: MAIN
CVS Tags: yamt-km-base2, yamt-km-base, netbsd-2-base, netbsd-2-0-base, netbsd-2-0-RELEASE, netbsd-2-0-RC5, netbsd-2-0-RC4, netbsd-2-0-RC3, netbsd-2-0-RC2, netbsd-2-0-RC1, netbsd-2-0-2-RELEASE, netbsd-2-0-1-RELEASE, kent-audio1-beforemerge, kent-audio1-base, kent-audio1
Branch point for: yamt-km, netbsd-2-0, netbsd-2, kent-audio2
Changes since 1.3: +4 -1 lines
Diff to previous 1.3 (colored)

add missing __KERNEL_RCSID()

Revision 1.3.2.1 / (download) - annotate - [select for diffs], Wed Jul 2 15:26:01 2003 UTC (17 years, 6 months ago) by darrenr
Branch: ktrace-lwp
Changes since 1.3: +7 -4 lines
Diff to previous 1.3 (colored)

Apply the aborted ktrace-lwp changes to a specific branch.  This is just for
others to review, I'm concerned that patch fuziness may have resulted in some
errant code being generated but I'll look at that later by comparing the diff
from the base to the branch with the file I attempt to apply to it.  This will,
at the very least, put the changes in a better context for others to review
them and attempt to tinker with removing passing of 'struct lwp' through
the kernel.

Revision 1.3 / (download) - annotate - [select for diffs], Sun Jun 29 22:30:03 2003 UTC (17 years, 6 months ago) by fvdl
Branch: MAIN
Branch point for: ktrace-lwp
Changes since 1.2: +3 -6 lines
Diff to previous 1.2 (colored)

Back out the lwp/ktrace changes. They contained a lot of colateral damage,
and need to be examined and discussed more.

Revision 1.2 / (download) - annotate - [select for diffs], Sat Jun 28 14:21:32 2003 UTC (17 years, 7 months ago) by darrenr
Branch: MAIN
Changes since 1.1: +7 -4 lines
Diff to previous 1.1 (colored)

Pass lwp pointers throughtout the kernel, as required, so that the lwpid can
be inserted into ktrace records.  The general change has been to replace
"struct proc *" with "struct lwp *" in various function prototypes, pass
the lwp through and use l_proc to get the process pointer when needed.

Bump the kernel rev up to 1.6V

Revision 1.1.2.2 / (download) - annotate - [select for diffs], Mon Nov 11 22:08:53 2002 UTC (18 years, 2 months ago) by nathanw
Branch: nathanw_sa
CVS Tags: nathanw_sa_end
Changes since 1.1.2.1: +253 -0 lines
Diff to previous 1.1.2.1 (colored) to branchpoint 1.1 (colored) next main 1.2 (colored)

Catch up to -current

Revision 1.1.2.1, Tue Oct 29 12:31:22 2002 UTC (18 years, 2 months ago) by nathanw
Branch: nathanw_sa
Changes since 1.1: +0 -253 lines
FILE REMOVED

file verified_exec.c was added on branch nathanw_sa on 2002-11-11 22:08:53 +0000

Revision 1.1 / (download) - annotate - [select for diffs], Tue Oct 29 12:31:22 2002 UTC (18 years, 2 months ago) by blymn
Branch: MAIN
CVS Tags: nathanw_sa_before_merge, nathanw_sa_base, gmcgarry_ucred_base, gmcgarry_ucred, gmcgarry_ctxsw_base, gmcgarry_ctxsw, fvdl_fs64_base
Branch point for: nathanw_sa

Added support for fingerprinted executables aka verified exec

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.




CVSweb <webmaster@jp.NetBSD.org>