bms [Sun, 14 May 2006 14:22:49 +0000 (14:22 +0000)]
Fix a long-standing limitation in IPv4 multicast group membership.
By making the imo_membership array a dynamically allocated vector,
this minimizes disruption to existing IPv4 multicast code. This
change breaks the ABI for the kernel module ip_mroute.ko, and may
cause a small amount of churn for folks working on the IGMPv3 merge.
Previously, sockets were subject to a compile-time limitation on
the number of IPv4 group memberships, which was hard-coded to 20.
The imo_membership relationship, however, is 1:1 with regards to
a tuple of multicast group address and interface address. Users who
ran routing protocols such as OSPF ran into this limitation on machines
with a large system interface tree.
rodrigc [Sun, 14 May 2006 01:51:38 +0000 (01:51 +0000)]
For nmount(), if "rw" is specified as a mount option,
add "noro" to the list of mount options. This allows
a read-only mount to be converted to read-write via:
mount -u -o rw
cognet [Sat, 13 May 2006 23:41:16 +0000 (23:41 +0000)]
Resurrect Skyeye support :
Add a new option, SKYEYE_WORKAROUNDS, which as the name suggests adds
workarounds for things skyeye doesn't simulate. Specifically :
- Use USART0 instead of DBGU as the console, make it not use DMA, and manually provoke an interrupt when we're done in the transmit function.
- Skyeye maintains an internal counter for clock, but apparently there's
no way to access it, so hack the timecounter code to return a value which
is increased at every clock interrupts. This is gross, but I didn't find a
better way to implement timecounters without hacking Skyeye to get the
counter value.
- Force the write-back of PTEs once we're done writing them, even if they
are supposed to be write-through. I don't know why I have to do that.
alc [Sat, 13 May 2006 20:05:44 +0000 (20:05 +0000)]
Simplify the implementation of vm_fault_additional_pages() based upon the
object's memq being ordered. Specifically, replace repeated calls to
vm_page_lookup() by two simple constant-time operations.
hm [Sat, 13 May 2006 14:59:58 +0000 (14:59 +0000)]
PR: bin/71663
Submitted by: Dan Lukes
Reviewed by: hm@
fix compile warnings in isdnd and isdntest. some more
compile time warnings also mentioned in this PR were
already fixed in an earlier commit today.
des [Sat, 13 May 2006 13:47:45 +0000 (13:47 +0000)]
Introduce a namespace munging hack inspired by NetBSD to avoid polluting
the namespace of applications which inadvertantly link in libssh (usually
through pam_ssh)
cel [Sat, 13 May 2006 00:16:35 +0000 (00:16 +0000)]
Add better sanity checking to the logic that handles ioctl processing
for nfsclient and nfs4client in order to prevent local root users
from panicing the system.
PR: kern/77463
Submitted by: Wojciech A. Koszek
Reviewed by: cel, rees
MFC after: 2 weeks
Security: Local root users can panic the system at will
marcel [Fri, 12 May 2006 23:24:45 +0000 (23:24 +0000)]
o A divisor of 0 is perfectly valid. Reserve -1 for an invalid
divisor. This allows us to set the line speed to the maximum
of 1/4 of the device clock.
o Disable the baudrate generator before programming the line
settings, including baudrate, and enable it afterwards.
keramida [Fri, 12 May 2006 22:43:07 +0000 (22:43 +0000)]
Check the return code of sc_clean_up() in the only place where it
was not checked at all. There is only one case when sc_clean_up()
can fail, because of wait_scrn_saver_stop(), but it doesn't hurt
to check anyway.
bmah [Fri, 12 May 2006 19:31:29 +0000 (19:31 +0000)]
Fix typo in last commit: traceroute(8) -e, not traceroute(8) -c.
Submitted by: Rong-En Fan grafan at gmail dot com
Pointy hat to: Thunderbird, for a too-small default font size
Not ready for reading glasses yet: bmah
mlaier [Fri, 12 May 2006 19:17:34 +0000 (19:17 +0000)]
Move etc/rc.firewall6 to ipfw2+v6, update related rc.d and periodic scripts.
Since ipfw2 now does dual-stack, statistics for IPv6 come from the ipfw
scripts as well.
keramida [Fri, 12 May 2006 17:42:48 +0000 (17:42 +0000)]
apropos(1) does not expand *roff macros that should appear in .Nd
text and, as a result, 'FreeBSD' is not visible in apropos output
when security(7) is displayed. Fix this buglet by using a
literal 'FreeBSD' string in .Nd
mlaier [Fri, 12 May 2006 16:15:34 +0000 (16:15 +0000)]
Put debugging messages related to inconsistent ticket numbers under misc and
wrap it __FreeBSD__ specific as I couldn't figure out which version of
OpenBSD I got it from.
keramida [Fri, 12 May 2006 12:55:56 +0000 (12:55 +0000)]
After a mini-discussion with Sam Leffler, remove the hardcoded
list of Atheros-based cards from ath(4). The online list is
always more up to date, anyway.
This invalidates:
PR: docs/95360
Submitted by: Erik Nordstr:om Andersen <erik@erik-n-andersen.dk>
cperciva [Fri, 12 May 2006 10:42:40 +0000 (10:42 +0000)]
Use 'rm -rf foo/bar' to remove a port instead of 'rm -rf foo/bar/'.
When /usr/ports/foo/bar is a symlink pointing outside the tree, this
deletes the symlink instead of the directory it points to.
mlaier [Fri, 12 May 2006 04:41:27 +0000 (04:41 +0000)]
Reintroduce net.inet6.ip6.fw.enable sysctl to dis/enable the ipv6 processing
seperately. Also use pfil hook/unhook instead of keeping the check
functions in pfil just to return there based on the sysctl. While here fix
some whitespace on a nearby SYSCTL_ macro.
benno [Fri, 12 May 2006 02:01:38 +0000 (02:01 +0000)]
Add a new kernel config option, VERBOSE_SYSINIT.
When porting FreeBSD to a new platform, one of the more useful things to do is
get mi_startup() to let you know which SYSINIT it's up to. Most people tend to
whack a printf in the SYSINIT loop to print the address of the function it's
about to call. Going one better, jhb made a version that uses DDB to look up
the name of the function and print that instead. This version is essentially
his with the addition of some ifdeffery to make it optional and to allow it to
work (although using only the function address, not the symbol) if you forgot
to enable DDB.
All the cool bits by: jhb
Approved by: scottl, rink, cognet, imp
bmah [Thu, 11 May 2006 19:17:17 +0000 (19:17 +0000)]
For some reason, it looks like SA-06:{10,11,12,13} were not mentioned
in HEAD's release notes, even though the issues involved were applied
(and fixed). Copy their descriptions from one of the RELENG_*
branches (RELENG_5 in this case).
SA-06:08 and SA-06:09 were not applicable to code on HEAD and thus not
mentioned.
njl [Thu, 11 May 2006 17:35:44 +0000 (17:35 +0000)]
Add support for the VIA C7-M processor family.
Remove an unnecessary check of the table's bus clock. CPUs that
support this feature export only the high/low settings via the MSR,
packed into 32 bits.
keramida [Thu, 11 May 2006 17:23:03 +0000 (17:23 +0000)]
The 'device fd' line became obsolete some years ago, when the transition
to device hints was committed. The GENERIC kernel configuration lost
its 'device fd' line at revision 1.260, committed by peter@ on
2000/06/13 22:28:46 UTC.
Delete the reference to 'device fd', to avoid kernel build breakage like
the one described in the PR audit trail.
cognet [Thu, 11 May 2006 14:30:28 +0000 (14:30 +0000)]
Get this to compile :
- The prototype of uart_bus_probe() hasn't been changed in cvs yet, so use the
old one.
- Add at91_pdcreg.h, needed by uart_dev_at91usart.c.
flz [Thu, 11 May 2006 14:23:43 +0000 (14:23 +0000)]
- Change the "jail_" prefix for internal script variables. This fixes an
issue where some global jail_* variables were overriden in the script. [1]
- Change "jid" to "jname" in rc.conf(5), since it's more a jail name than a
jail id. [1]
- Update examples and comments in defaults/rc.conf to advertise new
variables and the fact that some of the jail-specific variables may be made
jail-global. [2]
Reported by: pjd [1], clsung [2]
Approved by: cperciva
X-MFC after: i got sufficient testing from people using rc.d/jail
matteo [Thu, 11 May 2006 13:29:01 +0000 (13:29 +0000)]
if we fail to start a jail and jail_foobar_*fs_enable or jail_foobar_mount_enable were set, umount those filesystem before exiting. If we set up an alias for jail's IP, remove that alias before exiting.
cjc [Thu, 11 May 2006 06:30:18 +0000 (06:30 +0000)]
Option for setting a fixed destination port. This is useful for tracing
to a host behind a firewall where only specific services are allowed.
For example, to trace the hops to an HTTP server behind a firewall,
wollman [Thu, 11 May 2006 04:50:25 +0000 (04:50 +0000)]
Merge from vendor branch.
Updates to historic rules only for: part of Alaska, Algeria, Bulgaria,
Colombia, Easter Island, Italy, Malta, Mexico, Mongolia, Montserrat,
Puerto Rico, Poland, Russia, South Korea, Spain, part of North Dakota,
United Kingdom, Uruguay, Uzbekistan
Updates to current and future rules for: Guatemala, Haiti, Honduras,
part of Indiana, Iran, Nicaragua, Palestinian Territories, Sri Lanka,
Tunisia,
Updates to future rules only for: Canada, Thule AFB in Greenland
I uncovered these in a sweep of items that need to be merged to
the 5.4 release notes. It's possible that all of these items
should have been in the 6.1 release notes (not confirmed).
wollman [Thu, 11 May 2006 04:28:59 +0000 (04:28 +0000)]
Vendor import tzdata2006g. Too many changes to summarize here; of
particular importance to those living in the Western Hemisphere as
many non-U.S. zones will be changing DST rules next year to match the
U.S.
Obtained from: Arthur David Olson, ftp://elsie.nci.nih.gov/
cokane [Wed, 10 May 2006 20:32:57 +0000 (20:32 +0000)]
Fix the wording about the blocksize (-b) parameter. The existing
wording makes it look like pax archives > 32256 bytes are not
POSIX-compliant! Correct this to state that pax archives with
block sizes > 32256 are not POSIX compliant...and settle our fears.