CVS log for src/sys/kern/kern_pax.c

Up to [cvs.netbsd.org] / src / sys / kern

Request diff between arbitrary revisions

Default branch: MAIN

Revision 1.25.4.1 / (download) - annotate - [select for diffs], Tue Apr 17 00:08:25 2012 UTC (5 weeks, 4 days ago) by yamt
Branch: yamt-pagecache
Changes since 1.25: +5 -4 lines
Diff to previous 1.25 (colored) next main 1.26 (colored)

sync with head

First step of random number subsystem rework described in
<20111022023242.BA26F14A158@mail.netbsd.org>.  This change includes
the following:

	An initial cleanup and minor reorganization of the entropy pool
	code in sys/dev/rnd.c and sys/dev/rndpool.c.  Several bugs are
	fixed.  Some effort is made to accumulate entropy more quickly at
	boot time.

	A generic interface, "rndsink", is added, for stream generators to
	request that they be re-keyed with good quality entropy from the pool
	as soon as it is available.

	The arc4random()/arc4randbytes() implementation in libkern is
	adjusted to use the rndsink interface for rekeying, which helps
	address the problem of low-quality keys at boot time.

	An implementation of the FIPS 140-2 statistical tests for random
	number generator quality is provided (libkern/rngtest.c).  This
	is based on Greg Rose's implementation from Qualcomm.

	A new random stream generator, nist_ctr_drbg, is provided.  It is
	based on an implementation of the NIST SP800-90 CTR_DRBG by
	Henric Jungheim.  This generator users AES in a modified counter
	mode to generate a backtracking-resistant random stream.

	An abstraction layer, "cprng", is provided for in-kernel consumers
	of randomness.  The arc4random/arc4randbytes API is deprecated for
	in-kernel use.  It is replaced by "cprng_strong".  The current
	cprng_fast implementation wraps the existing arc4random
	implementation.  The current cprng_strong implementation wraps the
	new CTR_DRBG implementation.  Both interfaces are rekeyed from
	the entropy pool automatically at intervals justifiable from best
	current cryptographic practice.

	In some quick tests, cprng_fast() is about the same speed as
	the old arc4randbytes(), and cprng_strong() is about 20% faster
	than rnd_extract_data().  Performance is expected to improve.

	The AES code in src/crypto/rijndael is no longer an optional
	kernel component, as it is required by cprng_strong, which is
	not an optional kernel component.

	The entropy pool output is subjected to the rngtest tests at
	startup time; if it fails, the system will reboot.  There is
	approximately a 3/10000 chance of a false positive from these
	tests.  Entropy pool _input_ from hardware random numbers is
	subjected to the rngtest tests at attach time, as well as the
	FIPS continuous-output test, to detect bad or stuck hardware
	RNGs; if any are detected, they are detached, but the system
	continues to run.

	A problem with rndctl(8) is fixed -- datastructures with
	pointers in arrays are no longer passed to userspace (this
	was not a security problem, but rather a major issue for
	compat32).  A new kernel will require a new rndctl.

	The sysctl kern.arandom() and kern.urandom() nodes are hooked
	up to the new generators, but the /dev/*random pseudodevices
	are not, yet.

	Manual pages for the new kernel interfaces are forthcoming.

Revision 1.24.2.1 / (download) - annotate - [select for diffs], Mon Jun 6 09:09:30 2011 UTC (11 months, 2 weeks ago) by jruoho
Branch: jruoho-x86intr
Changes since 1.24: +11 -14 lines
Diff to previous 1.24 (colored) next main 1.25 (colored)

Sync with HEAD.

Revision 1.22.20.3 / (download) - annotate - [select for diffs], Tue May 31 03:05:01 2011 UTC (11 months, 3 weeks ago) by rmind
Branch: rmind-uvmplock
Changes since 1.22.20.2: +9 -12 lines
Diff to previous 1.22.20.2 (colored) to branchpoint 1.22 (colored) next main 1.23 (colored)

sync with head

Revision 1.22.16.1 / (download) - annotate - [select for diffs], Fri May 20 08:11:27 2011 UTC (12 months ago) by matt
Branch: matt-nb5-mips64
Changes since 1.22: +4 -2 lines
Diff to previous 1.22 (colored) next main 1.23 (colored)

bring matt-nb5-mips64 up to date with netbsd-5-1-RELEASE (except compat).

Revision 1.25 / (download) - annotate - [select for diffs], Sun Apr 24 18:46:22 2011 UTC (13 months ago) by rmind
Branch: MAIN
CVS Tags: yamt-pagecache-base3, yamt-pagecache-base2, yamt-pagecache-base, rmind-uvmplock-nbase, rmind-uvmplock-base, jmcneill-audiomp3-base, jmcneill-audiomp3, cherry-xenmp-base, cherry-xenmp
Branch point for: yamt-pagecache
Changes since 1.24: +11 -14 lines
Diff to previous 1.24 (colored)

- Replace few malloc(9) uses with kmem(9).
- Rename buf_malloc() to buf_alloc(), fix comments.
- Remove some unnecessary inclusions.

Revision 1.22.20.2 / (download) - annotate - [select for diffs], Sat Mar 5 20:55:15 2011 UTC (14 months, 3 weeks ago) by rmind
Branch: rmind-uvmplock
Changes since 1.22.20.1: +4 -2 lines
Diff to previous 1.22.20.1 (colored) to branchpoint 1.22 (colored)

sync with head

Revision 1.22.18.2 / (download) - annotate - [select for diffs], Fri Oct 22 07:22:27 2010 UTC (19 months ago) by uebayasi
Branch: uebayasi-xip
Changes since 1.22.18.1: +2 -0 lines
Diff to previous 1.22.18.1 (colored) to branchpoint 1.22 (colored) next main 1.23 (colored)

Sync with HEAD (-D20101022).

Revision 1.20.10.3 / (download) - annotate - [select for diffs], Sat Oct 9 03:32:31 2010 UTC (19 months, 2 weeks ago) by yamt
Branch: yamt-nfs-mp
Changes since 1.20.10.2: +4 -2 lines
Diff to previous 1.20.10.2 (colored) to branchpoint 1.20 (colored) next main 1.21 (colored)

sync with head

Revision 1.22.14.1 / (download) - annotate - [select for diffs], Tue Aug 31 10:55:34 2010 UTC (20 months, 3 weeks ago) by bouyer
Branch: netbsd-5-0
Changes since 1.22: +4 -2 lines
Diff to previous 1.22 (colored) next main 1.23 (colored)

Pull up following revision(s) (requested by christos in ticket #1444):
	sys/kern/kern_pax.c: revision 1.24
	sys/kern/exec_subr.c: revision 1.65
Fix issues with stack allocation and pax aslr:
- since the size is unsigned, don't check just that it is > 0, but limit
  it to the MAXSSIZ
- if the stack size is reduced because of aslr, make sure we reduce the
  actual allocation by the same size so that the size does not wrap around.
NB: Must be pulled up to 5.x!

Revision 1.22.8.1 / (download) - annotate - [select for diffs], Tue Aug 31 10:55:00 2010 UTC (20 months, 3 weeks ago) by bouyer
Branch: netbsd-5
CVS Tags: netbsd-5-1-RELEASE, netbsd-5-1-RC4, netbsd-5-1-2-RELEASE, netbsd-5-1-1-RELEASE, netbsd-5-1, matt-nb5-pq3-base, matt-nb5-pq3
Changes since 1.22: +4 -2 lines
Diff to previous 1.22 (colored) next main 1.23 (colored)

Pull up following revision(s) (requested by christos in ticket #1444):
	sys/kern/kern_pax.c: revision 1.24
	sys/kern/exec_subr.c: revision 1.65
Fix issues with stack allocation and pax aslr:
- since the size is unsigned, don't check just that it is > 0, but limit
  it to the MAXSSIZ
- if the stack size is reduced because of aslr, make sure we reduce the
  actual allocation by the same size so that the size does not wrap around.
NB: Must be pulled up to 5.x!

Revision 1.24 / (download) - annotate - [select for diffs], Mon Aug 23 20:53:08 2010 UTC (21 months ago) by christos
Branch: MAIN
CVS Tags: yamt-nfs-mp-base11, uebayasi-xip-base4, uebayasi-xip-base3, matt-mips64-premerge-20101231, jruoho-x86intr-base, bouyer-quota2-nbase, bouyer-quota2-base, bouyer-quota2
Branch point for: jruoho-x86intr
Changes since 1.23: +4 -2 lines
Diff to previous 1.23 (colored)

Fix issues with stack allocation and pax aslr:
- since the size is unsigned, don't check just that it is > 0, but limit
  it to the MAXSSIZ
- if the stack size is reduced because of aslr, make sure we reduce the
  actual allocation by the same size so that the size does not wrap around.
NB: Must be pulled up to 5.x!

Revision 1.20.10.2 / (download) - annotate - [select for diffs], Wed Aug 11 22:54:39 2010 UTC (21 months, 2 weeks ago) by yamt
Branch: yamt-nfs-mp
Changes since 1.20.10.1: +6 -6 lines
Diff to previous 1.20.10.1 (colored) to branchpoint 1.20 (colored)

sync with head.

Revision 1.22.20.1 / (download) - annotate - [select for diffs], Sun May 30 05:17:57 2010 UTC (23 months, 3 weeks ago) by rmind
Branch: rmind-uvmplock
Changes since 1.22: +6 -6 lines
Diff to previous 1.22 (colored)

sync with head

Revision 1.22.18.1 / (download) - annotate - [select for diffs], Fri Apr 30 14:44:10 2010 UTC (2 years ago) by uebayasi
Branch: uebayasi-xip
Changes since 1.22: +6 -6 lines
Diff to previous 1.22 (colored)

Sync with HEAD.

Revision 1.23 / (download) - annotate - [select for diffs], Mon Mar 15 20:35:20 2010 UTC (2 years, 2 months ago) by christos
Branch: MAIN
CVS Tags: yamt-nfs-mp-base10, uebayasi-xip-base2, uebayasi-xip-base1
Changes since 1.22: +6 -6 lines
Diff to previous 1.22 (colored)

rename DEBUG_ASLR -> PAX_ASLR_DEBUG

Revision 1.20.10.1 / (download) - annotate - [select for diffs], Mon May 4 08:13:46 2009 UTC (3 years ago) by yamt
Branch: yamt-nfs-mp
Changes since 1.20: +15 -65 lines
Diff to previous 1.20 (colored)

sync with head.

Revision 1.20.12.1 / (download) - annotate - [select for diffs], Mon Jun 23 04:31:50 2008 UTC (3 years, 11 months ago) by wrstuden
Branch: wrstuden-revivesa
Changes since 1.20: +15 -65 lines
Diff to previous 1.20 (colored) next main 1.21 (colored)

Sync w/ -current. 34 merge conflicts to follow.

Revision 1.20.8.1 / (download) - annotate - [select for diffs], Tue Jun 17 09:15:03 2008 UTC (3 years, 11 months ago) by yamt
Branch: yamt-pf42
Changes since 1.20: +15 -65 lines
Diff to previous 1.20 (colored) next main 1.21 (colored)

sync with head.

Revision 1.20.6.1 / (download) - annotate - [select for diffs], Thu Jun 5 19:14:36 2008 UTC (3 years, 11 months ago) by mjf
Branch: mjf-devfs2
Changes since 1.20: +15 -65 lines
Diff to previous 1.20 (colored) next main 1.21 (colored)

Sync with HEAD.

Also fix build.

Revision 1.22 / (download) - annotate - [select for diffs], Wed Jun 4 12:26:20 2008 UTC (3 years, 11 months ago) by ad
Branch: MAIN
CVS Tags: yamt-pf42-base4, yamt-nfs-mp-base9, yamt-nfs-mp-base8, yamt-nfs-mp-base7, yamt-nfs-mp-base6, yamt-nfs-mp-base5, yamt-nfs-mp-base4, yamt-nfs-mp-base3, wrstuden-revivesa-base-4, wrstuden-revivesa-base-3, wrstuden-revivesa-base-2, wrstuden-revivesa-base-1, wrstuden-revivesa-base, uebayasi-xip-base, simonb-wapbl-nbase, simonb-wapbl-base, simonb-wapbl, nick-hppapmap-base4, nick-hppapmap-base3, nick-hppapmap-base2, nick-hppapmap-base, nick-hppapmap, netbsd-5-base, netbsd-5-1-RC3, netbsd-5-1-RC2, netbsd-5-1-RC1, netbsd-5-0-RELEASE, netbsd-5-0-RC4, netbsd-5-0-RC3, netbsd-5-0-RC2, netbsd-5-0-RC1, netbsd-5-0-2-RELEASE, netbsd-5-0-1-RELEASE, mjf-devfs2-base, matt-premerge-20091211, matt-nb5-mips64-u2-k2-k4-k7-k8-k9, matt-nb5-mips64-u1-k1-k5, matt-nb5-mips64-premerge-20101231, matt-nb5-mips64-premerge-20091211, matt-nb5-mips64-k15, matt-nb4-mips64-k7-u2a-k9b, matt-mips64-base2, jymxensuspend-base, jym-xensuspend-nbase, jym-xensuspend-base, jym-xensuspend, haad-nbase2, haad-dm-base2, haad-dm-base1, haad-dm-base, haad-dm, ad-audiomp2-base, ad-audiomp2
Branch point for: uebayasi-xip, rmind-uvmplock, netbsd-5-0, netbsd-5, matt-nb5-mips64
Changes since 1.21: +8 -8 lines
Diff to previous 1.21 (colored)

Fix broken enable test; fixes random coredumps.

Revision 1.21 / (download) - annotate - [select for diffs], Tue Jun 3 22:14:24 2008 UTC (3 years, 11 months ago) by ad
Branch: MAIN
Changes since 1.20: +15 -65 lines
Diff to previous 1.20 (colored)

Don't use proc specificdata. Speeds up mmap() and others.

Revision 1.17.6.1 / (download) - annotate - [select for diffs], Mon Feb 18 21:06:46 2008 UTC (4 years, 3 months ago) by mjf
Branch: mjf-devfs
Changes since 1.17: +160 -5 lines
Diff to previous 1.17 (colored) next main 1.18 (colored)

Sync with HEAD.

Revision 1.3.10.7 / (download) - annotate - [select for diffs], Mon Jan 21 09:46:08 2008 UTC (4 years, 4 months ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.3.10.6: +160 -5 lines
Diff to previous 1.3.10.6 (colored) to branchpoint 1.3 (colored) next main 1.4 (colored)

sync with head

Revision 1.16.8.2 / (download) - annotate - [select for diffs], Wed Jan 9 01:56:05 2008 UTC (4 years, 4 months ago) by matt
Branch: matt-armv6
Changes since 1.16.8.1: +160 -5 lines
Diff to previous 1.16.8.1 (colored) to branchpoint 1.16 (colored) next main 1.17 (colored)

sync with HEAD

Revision 1.17.12.1 / (download) - annotate - [select for diffs], Wed Jan 2 21:55:55 2008 UTC (4 years, 4 months ago) by bouyer
Branch: bouyer-xeni386
CVS Tags: bouyer-xeni386-merge1
Changes since 1.17: +160 -5 lines
Diff to previous 1.17 (colored) next main 1.18 (colored)

Sync with HEAD

Revision 1.20 / (download) - annotate - [select for diffs], Fri Dec 28 17:14:51 2007 UTC (4 years, 4 months ago) by elad
Branch: MAIN
CVS Tags: yamt-pf42-baseX, yamt-pf42-base3, yamt-pf42-base2, yamt-pf42-base, yamt-nfs-mp-base2, yamt-nfs-mp-base, yamt-lazymbuf-base15, yamt-lazymbuf-base14, nick-net80211-sync-base, nick-net80211-sync, mjf-devfs-base, matt-armv6-nbase, matt-armv6-base, keiichi-mipv6-nbase, keiichi-mipv6-base, keiichi-mipv6, hpcarm-cleanup-nbase, hpcarm-cleanup-base, bouyer-xeni386-nbase, bouyer-xeni386-base, ad-socklock-base1
Branch point for: yamt-pf42, yamt-nfs-mp, wrstuden-revivesa, mjf-devfs2
Changes since 1.19: +3 -3 lines
Diff to previous 1.19 (colored)

Provide 8 more bits of stack randomization, from the PaX author.

While here, don't make too much use of one random value, and call
arc4random() directly. Allows for the removal of 'ep_random' from the
exec_package.

Prompted by and okay christos@.

Revision 1.19 / (download) - annotate - [select for diffs], Thu Dec 27 15:21:53 2007 UTC (4 years, 4 months ago) by elad
Branch: MAIN
Changes since 1.18: +20 -3 lines
Diff to previous 1.18 (colored)

PAX_ASLR_DELTA_PROG_LEN -> PAX_ASLR_DELTA_EXEC_LEN, and put it in pax.h.
Export randomized bits # for stack and exec base too via sysctl.

okay christos@.

Revision 1.18 / (download) - annotate - [select for diffs], Wed Dec 26 22:11:51 2007 UTC (4 years, 5 months ago) by christos
Branch: MAIN
Changes since 1.17: +145 -7 lines
Diff to previous 1.17 (colored)

Add PaX ASLR (Address Space Layout Randomization) [from elad and myself]

For regular (non PIE) executables randomization is enabled for:
    1. The data segment
    2. The stack

For PIE executables(*) randomization is enabled for:
    1. The program itself
    2. All shared libraries
    3. The data segment
    4. The stack

(*) To generate a PIE executable:
    - compile everything with -fPIC
    - link with -shared-libgcc -Wl,-pie

This feature is experimental, and might change. To use selectively add
    options PAX_ASLR=0
in your kernel.

Currently we are using 12 bits for the stack, program, and data segment and
16 or 24 bits for mmap, depending on __LP64__.

Revision 1.16.8.1 / (download) - annotate - [select for diffs], Tue Nov 6 23:31:46 2007 UTC (4 years, 6 months ago) by matt
Branch: matt-armv6
CVS Tags: matt-armv6-prevmlocking
Changes since 1.16: +4 -1 lines
Diff to previous 1.16 (colored)

sync with HEAD

Revision 1.3.10.6 / (download) - annotate - [select for diffs], Sat Oct 27 11:35:25 2007 UTC (4 years, 6 months ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.3.10.5: +4 -1 lines
Diff to previous 1.3.10.5 (colored) to branchpoint 1.3 (colored)

sync with head.

Revision 1.15.4.2 / (download) - annotate - [select for diffs], Tue Oct 9 13:44:27 2007 UTC (4 years, 7 months ago) by ad
Branch: vmlocking
Changes since 1.15.4.1: +4 -1 lines
Diff to previous 1.15.4.1 (colored) to branchpoint 1.15 (colored) next main 1.16 (colored)

Sync with head.

Revision 1.16.6.1 / (download) - annotate - [select for diffs], Tue Oct 2 18:29:00 2007 UTC (4 years, 7 months ago) by joerg
Branch: jmcneill-pm
Changes since 1.16: +4 -1 lines
Diff to previous 1.16 (colored) next main 1.17 (colored)

Sync with HEAD.

Revision 1.17 / (download) - annotate - [select for diffs], Fri Sep 21 19:14:12 2007 UTC (4 years, 8 months ago) by dsl
Branch: MAIN
CVS Tags: yamt-x86pmap-base4, yamt-x86pmap-base3, yamt-x86pmap-base2, yamt-x86pmap-base, yamt-x86pmap, yamt-kmem-base3, yamt-kmem-base2, yamt-kmem-base, yamt-kmem, vmlocking2-base3, vmlocking2-base2, vmlocking2-base1, vmlocking2, vmlocking-nbase, vmlocking-base, reinoud-bufcleanup-nbase, reinoud-bufcleanup-base, jmcneill-pm-base, jmcneill-base, cube-autoconf-base, cube-autoconf, bouyer-xenamd64-base2, bouyer-xenamd64-base, bouyer-xenamd64
Branch point for: mjf-devfs, bouyer-xeni386
Changes since 1.16: +4 -1 lines
Diff to previous 1.16 (colored)

Include sys/cdefs.h first.

Revision 1.3.10.5 / (download) - annotate - [select for diffs], Mon Sep 3 14:40:52 2007 UTC (4 years, 8 months ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.3.10.4: +6 -7 lines
Diff to previous 1.3.10.4 (colored) to branchpoint 1.3 (colored)

sync with head.

Revision 1.8.2.1.2.1 / (download) - annotate - [select for diffs], Mon Sep 3 07:05:03 2007 UTC (4 years, 8 months ago) by wrstuden
Branch: wrstuden-fixsa
Changes since 1.8.2.1: +6 -7 lines
Diff to previous 1.8.2.1 (colored) next main 1.8.2.2 (colored)

Sync w/ NetBSD-4-RC_1

Revision 1.15.4.1 / (download) - annotate - [select for diffs], Sun Jul 15 13:27:37 2007 UTC (4 years, 10 months ago) by ad
Branch: vmlocking
Changes since 1.15: +6 -7 lines
Diff to previous 1.15 (colored)

Sync with head.

Revision 1.15.6.1 / (download) - annotate - [select for diffs], Wed Jul 11 20:09:52 2007 UTC (4 years, 10 months ago) by mjf
Branch: mjf-ufs-trans
Changes since 1.15: +6 -7 lines
Diff to previous 1.15 (colored) next main 1.16 (colored)

Sync with head.

Revision 1.8.2.2 / (download) - annotate - [select for diffs], Mon Jul 9 10:30:56 2007 UTC (4 years, 10 months ago) by liamjfoy
Branch: netbsd-4
CVS Tags: wrstuden-fixsa-newbase, wrstuden-fixsa-base-1, wrstuden-fixsa-base, netbsd-4-0-RELEASE, netbsd-4-0-RC5, netbsd-4-0-RC4, netbsd-4-0-RC3, netbsd-4-0-RC2, netbsd-4-0-RC1, netbsd-4-0-1-RELEASE, netbsd-4-0, matt-nb4-arm-base, matt-nb4-arm
Changes since 1.8.2.1: +5 -6 lines
Diff to previous 1.8.2.1 (colored) to branchpoint 1.8 (colored) next main 1.9 (colored)

Pull up following revision(s) (requested by christos in ticket #755):
	sys/sys/pax.h: revision 1.9
	sys/sys/exec_elf.h: revision 1.90
	usr.sbin/paxctl/paxctl.c: revision 1.2
	sys/kern/kern_pax.c: revision 1.16
	sys/sys/exec.h: revision 1.117
	sys/kern/exec_elf32.c: revision 1.124
	libexec/ld.elf_so/sysident.h: revision 1.14
Use an elf note to handle pax arguments. This is a temporary solution to
avoid wasting OS flag bits. In the future we'll probably use fileassoc to
achieve this (once there is a way to make fileassoc persistent) or in the
shorter term libelf, so that we can add and remove the note on demand instead
of burning bits on each binary. Of course since this is a tool, this means
that we'll need to think about how to handle libelf...

Revision 1.16 / (download) - annotate - [select for diffs], Sun Jun 24 20:35:37 2007 UTC (4 years, 11 months ago) by christos
Branch: MAIN
CVS Tags: nick-csl-alignment-base5, nick-csl-alignment-base, nick-csl-alignment, mjf-ufs-trans-base, matt-mips64-base, matt-mips64, hpcarm-cleanup
Branch point for: matt-armv6, jmcneill-pm
Changes since 1.15: +6 -7 lines
Diff to previous 1.15 (colored)

Use an elf note to handle pax arguments. This is a temporary solution to
avoid wasting OS flag bits. In the future we'll probably use fileassoc to
achieve this (once there is a way to make fileassoc persistent) or in the
shorter term libelf, so that we can add and remove the note on demand instead
of burning bits on each binary. Of course since this is a tool, this means
that we'll need to think about how to handle libelf...

Revision 1.13.2.1 / (download) - annotate - [select for diffs], Tue Feb 27 16:54:22 2007 UTC (5 years, 2 months ago) by yamt
Branch: yamt-idlelwp
Changes since 1.13: +5 -5 lines
Diff to previous 1.13 (colored) next main 1.14 (colored)

- sync with head.
- move sched_changepri back to kern_synch.c as it doesn't know PPQ anymore.

Revision 1.3.10.4 / (download) - annotate - [select for diffs], Mon Feb 26 09:11:08 2007 UTC (5 years, 2 months ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.3.10.3: +7 -13 lines
Diff to previous 1.3.10.3 (colored) to branchpoint 1.3 (colored)

sync with head.

Revision 1.15 / (download) - annotate - [select for diffs], Thu Feb 22 06:34:43 2007 UTC (5 years, 3 months ago) by thorpej
Branch: MAIN
CVS Tags: yamt-idlelwp-base8, thorpej-atomic-base, thorpej-atomic, reinoud-bufcleanup, ad-audiomp-base, ad-audiomp
Branch point for: vmlocking, mjf-ufs-trans
Changes since 1.14: +3 -3 lines
Diff to previous 1.14 (colored)

TRUE -> true, FALSE -> false

Revision 1.14 / (download) - annotate - [select for diffs], Wed Feb 21 23:00:04 2007 UTC (5 years, 3 months ago) by thorpej
Branch: MAIN
Changes since 1.13: +3 -3 lines
Diff to previous 1.13 (colored)

Replace the Mach-derived boolean_t type with the C99 bool type.  A
future commit will replace use of TRUE and FALSE with true and false.

Revision 1.3.14.3 / (download) - annotate - [select for diffs], Fri Feb 9 21:03:53 2007 UTC (5 years, 3 months ago) by ad
Branch: newlock2
Changes since 1.3.14.2: +2 -5 lines
Diff to previous 1.3.14.2 (colored) to branchpoint 1.3 (colored) next main 1.4 (colored)

Sync with HEAD.

Revision 1.13 / (download) - annotate - [select for diffs], Tue Feb 6 01:09:48 2007 UTC (5 years, 3 months ago) by elad
Branch: MAIN
CVS Tags: post-newlock2-merge, newlock2-nbase, newlock2-base
Branch point for: yamt-idlelwp
Changes since 1.12: +2 -5 lines
Diff to previous 1.12 (colored)

PR/35253: YAMAMOTO Takashi: fileassoc hash size problem

fileassoc_table_add() was removed from the KPI and made internal. From now
fileassoc(9) will manage the optimal table size internally.

Input from and okay yamt@.

Revision 1.3.14.2 / (download) - annotate - [select for diffs], Fri Jan 12 01:04:06 2007 UTC (5 years, 4 months ago) by ad
Branch: newlock2
Changes since 1.3.14.1: +310 -17 lines
Diff to previous 1.3.14.1 (colored) to branchpoint 1.3 (colored)

Sync with head.

Revision 1.12 / (download) - annotate - [select for diffs], Tue Jan 9 12:49:36 2007 UTC (5 years, 4 months ago) by elad
Branch: MAIN
Changes since 1.11: +2 -5 lines
Diff to previous 1.11 (colored)

Remove advertising clause from all of my stuff.

Revision 1.8.2.1 / (download) - annotate - [select for diffs], Thu Jan 4 18:54:30 2007 UTC (5 years, 4 months ago) by bouyer
Branch: netbsd-4
Branch point for: wrstuden-fixsa
Changes since 1.8: +2 -2 lines
Diff to previous 1.8 (colored)

Pull up following revision(s) (requested by elad in ticket #314):
	sys/kern/kern_verifiedexec.c: revision 1.86
	sys/kern/kern_pax.c: revision 1.11
Fix copy/paste error: Veriexec's sysctl setup routine was named after
PaX's.

Revision 1.3.10.3 / (download) - annotate - [select for diffs], Sat Dec 30 20:50:05 2006 UTC (5 years, 4 months ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.3.10.2: +314 -19 lines
Diff to previous 1.3.10.2 (colored) to branchpoint 1.3 (colored)

sync with head.

Revision 1.11 / (download) - annotate - [select for diffs], Tue Dec 26 19:31:33 2006 UTC (5 years, 5 months ago) by elad
Branch: MAIN
Changes since 1.10: +2 -2 lines
Diff to previous 1.10 (colored)

Fix copy/paste error: Veriexec's sysctl setup routine was named after
PaX's.

Revision 1.10 / (download) - annotate - [select for diffs], Sat Dec 23 08:35:43 2006 UTC (5 years, 5 months ago) by yamt
Branch: MAIN
Changes since 1.9: +9 -9 lines
Diff to previous 1.9 (colored)

- remove the fileassoc "tabledata" functionality.  use mountspecific instead.
- make pax_segvguard_cb static.

tested and ok'ed by elad.

Revision 1.3.18.3 / (download) - annotate - [select for diffs], Mon Dec 18 11:42:15 2006 UTC (5 years, 5 months ago) by yamt
Branch: yamt-splraiseipl
Changes since 1.3.18.2: +11 -3 lines
Diff to previous 1.3.18.2 (colored) to branchpoint 1.3 (colored) next main 1.4 (colored)

sync with head.

Revision 1.9 / (download) - annotate - [select for diffs], Mon Dec 11 15:24:28 2006 UTC (5 years, 5 months ago) by yamt
Branch: MAIN
CVS Tags: yamt-splraiseipl-base5, yamt-splraiseipl-base4
Changes since 1.8: +11 -3 lines
Diff to previous 1.8 (colored)

- remove a static configuration, FILEASSOC_NHOOKS.  do it dynamically instead.
- make fileassoc_t a pointer and remove FILEASSOC_INVAL.
- clean up kern_fileassoc.c.  unify duplicated code.
- unexport fileassoc_init using RUN_ONCE(9).
- plug memory leaks in fileassoc_file_delete and fileassoc_table_delete.
- always call callbacks, regardless of the value of the associated data.

ok'ed by elad.

Revision 1.3.18.2 / (download) - annotate - [select for diffs], Sun Dec 10 07:18:44 2006 UTC (5 years, 5 months ago) by yamt
Branch: yamt-splraiseipl
Changes since 1.3.18.1: +304 -17 lines
Diff to previous 1.3.18.1 (colored) to branchpoint 1.3 (colored)

sync with head.

Revision 1.8 / (download) - annotate - [select for diffs], Wed Nov 22 02:02:51 2006 UTC (5 years, 6 months ago) by elad
Branch: MAIN
CVS Tags: yamt-splraiseipl-base3, netbsd-4-base
Branch point for: netbsd-4
Changes since 1.7: +259 -2 lines
Diff to previous 1.7 (colored)

Initial implementation of PaX Segvguard (this is still work-in-progress,
it's just to get it out of my local tree).

Revision 1.7 / (download) - annotate - [select for diffs], Wed Nov 22 00:41:38 2006 UTC (5 years, 6 months ago) by elad
Branch: MAIN
Changes since 1.6: +42 -11 lines
Diff to previous 1.6 (colored)

Make PaX MPROTECT use specificdata(9), freeing up two P_* flags.
While here, make more generic for upcoming PaX features.

Revision 1.3.14.1 / (download) - annotate - [select for diffs], Sat Nov 18 21:39:22 2006 UTC (5 years, 6 months ago) by ad
Branch: newlock2
Changes since 1.3: +5 -6 lines
Diff to previous 1.3 (colored)

Sync with head.

Revision 1.6 / (download) - annotate - [select for diffs], Wed Nov 1 09:36:28 2006 UTC (5 years, 6 months ago) by yamt
Branch: MAIN
Changes since 1.5: +3 -4 lines
Diff to previous 1.5 (colored)

- remove an unnecessary #include.
- make some variables static.

Revision 1.5 / (download) - annotate - [select for diffs], Wed Oct 25 20:55:11 2006 UTC (5 years, 7 months ago) by cbiere
Branch: MAIN
Changes since 1.4: +2 -2 lines
Diff to previous 1.4 (colored)

Added missing whitespace in sysctl description string. PR kern/34915.

Revision 1.3.18.1 / (download) - annotate - [select for diffs], Sun Oct 22 06:07:10 2006 UTC (5 years, 7 months ago) by yamt
Branch: yamt-splraiseipl
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored)

sync with head

Revision 1.4 / (download) - annotate - [select for diffs], Tue Sep 26 14:48:40 2006 UTC (5 years, 8 months ago) by elad
Branch: MAIN
CVS Tags: yamt-splraiseipl-base2
Changes since 1.3: +2 -2 lines
Diff to previous 1.3 (colored)

Change the PaX mprotect(2) restrictions' "global_protection" knob to
just "global" -- it's shorter and more readable. Update documentation.

Revision 1.3.16.2 / (download) - annotate - [select for diffs], Sat Sep 9 02:57:16 2006 UTC (5 years, 8 months ago) by rpaulo
Branch: rpaulo-netinet-merge-pcb
Changes since 1.3.16.1: +111 -0 lines
Diff to previous 1.3.16.1 (colored) to branchpoint 1.3 (colored) next main 1.4 (colored)

sync with head

Revision 1.3.10.2 / (download) - annotate - [select for diffs], Wed Jun 21 15:09:37 2006 UTC (5 years, 11 months ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.3.10.1: +111 -0 lines
Diff to previous 1.3.10.1 (colored) to branchpoint 1.3 (colored)

sync with head.

Revision 1.2.2.1 / (download) - annotate - [select for diffs], Mon Jun 19 04:07:15 2006 UTC (5 years, 11 months ago) by chap
Branch: chap-midi
Changes since 1.2: +8 -13 lines
Diff to previous 1.2 (colored) next main 1.3 (colored)

Sync with head.

Revision 1.3.6.2 / (download) - annotate - [select for diffs], Thu Jun 1 22:38:07 2006 UTC (5 years, 11 months ago) by kardel
Branch: simonb-timecounters
CVS Tags: simonb-timcounters-final
Changes since 1.3.6.1: +111 -0 lines
Diff to previous 1.3.6.1 (colored) to branchpoint 1.3 (colored) next main 1.4 (colored)

Sync with head.

Revision 1.3.4.2 / (download) - annotate - [select for diffs], Wed May 24 15:50:40 2006 UTC (6 years ago) by tron
Branch: peter-altq
Changes since 1.3.4.1: +111 -0 lines
Diff to previous 1.3.4.1 (colored) to branchpoint 1.3 (colored) next main 1.4 (colored)

Merge 2006-05-24 NetBSD-current into the "peter-altq" branch.

Revision 1.3.2.2 / (download) - annotate - [select for diffs], Wed May 24 10:58:41 2006 UTC (6 years ago) by yamt
Branch: yamt-pdpolicy
Changes since 1.3.2.1: +111 -0 lines
Diff to previous 1.3.2.1 (colored) to branchpoint 1.3 (colored) next main 1.4 (colored)

sync with head.

Revision 1.3.16.1, Sat May 20 15:45:37 2006 UTC (6 years ago) by rpaulo
Branch: rpaulo-netinet-merge-pcb
Changes since 1.3: +0 -111 lines
FILE REMOVED

file kern_pax.c was added on branch rpaulo-netinet-merge-pcb on 2006-09-09 02:57:16 +0000

Revision 1.3.10.1, Sat May 20 15:45:37 2006 UTC (6 years ago) by yamt
Branch: yamt-lazymbuf
Changes since 1.3: +0 -111 lines
FILE REMOVED

file kern_pax.c was added on branch yamt-lazymbuf on 2006-06-21 15:09:37 +0000

Revision 1.3.6.1, Sat May 20 15:45:37 2006 UTC (6 years ago) by kardel
Branch: simonb-timecounters
Changes since 1.3: +0 -111 lines
FILE REMOVED

file kern_pax.c was added on branch simonb-timecounters on 2006-06-01 22:38:07 +0000

Revision 1.3.4.1, Sat May 20 15:45:37 2006 UTC (6 years ago) by tron
Branch: peter-altq
Changes since 1.3: +0 -111 lines
FILE REMOVED

file kern_pax.c was added on branch peter-altq on 2006-05-24 15:50:40 +0000

Revision 1.3.2.1, Sat May 20 15:45:37 2006 UTC (6 years ago) by yamt
Branch: yamt-pdpolicy
Changes since 1.3: +0 -111 lines
FILE REMOVED

file kern_pax.c was added on branch yamt-pdpolicy on 2006-05-24 10:58:41 +0000

Revision 1.3 / (download) - annotate - [select for diffs], Sat May 20 15:45:37 2006 UTC (6 years ago) by elad
Branch: MAIN
CVS Tags: yamt-splraiseipl-base, yamt-pdpolicy-base9, yamt-pdpolicy-base8, yamt-pdpolicy-base7, yamt-pdpolicy-base6, yamt-pdpolicy-base5, simonb-timecounters-base, rpaulo-netinet-merge-pcb-base, gdamore-uart-base, gdamore-uart, chap-midi-nbase, chap-midi-base, abandoned-netbsd-4-base, abandoned-netbsd-4
Branch point for: yamt-splraiseipl, yamt-pdpolicy, yamt-lazymbuf, simonb-timecounters, rpaulo-netinet-merge-pcb, peter-altq, newlock2
Changes since 1.2: +8 -13 lines
Diff to previous 1.2 (colored)

Better implementation of PaX MPROTECT, after looking some more into the
code and not trying to use temporary solutions.

Lots of comments and help from YAMAMOTO Takashi, also thanks to the PaX
author for being quick to recognize that something fishy's going on. :)

Hook up in mmap/vmcmd rather than (ugh!) uvm_map_protect().

Next time I suggest to commit a temporary solution just revoke my
commit bit.

Revision 1.2 / (download) - annotate - [select for diffs], Thu May 18 17:33:18 2006 UTC (6 years ago) by elad
Branch: MAIN
Branch point for: chap-midi
Changes since 1.1: +7 -7 lines
Diff to previous 1.1 (colored)

CTLFLAG_IMMEDIATE doesn't do what I thought it did. from yamt@, thanks!

Revision 1.1 / (download) - annotate - [select for diffs], Tue May 16 00:08:25 2006 UTC (6 years ago) by elad
Branch: MAIN

Introduce PaX MPROTECT -- mprotect(2) restrictions used to strengthen
W^X mappings.

Disabled by default.

First proposed in:

	http://mail-index.netbsd.org/tech-security/2005/12/18/0000.html

More information in:

	http://pax.grsecurity.net/docs/mprotect.txt

Read relevant parts of options(4) and sysctl(3) before using!

Lots of thanks to the PaX author and Matt Thomas.

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.

Diffs between
and

Preferred Diff type:
View only Branch:
Sort log by:

CVSweb <webmaster@jp.NetBSD.org>