dougb [Tue, 29 Jan 2008 00:33:16 +0000 (00:33 +0000)]
MFC a more limited set of changes that make sense for this branch:
1. GC the nfslocking script, which has been superseded by lockd and statd
2. Add security warning to rc.d/jail
3. Add stop_cmd=':' to those rc.d scripts that do not start services,
but did not already have a stop_cmd.
mtm [Mon, 28 Jan 2008 18:55:57 +0000 (18:55 +0000)]
MFC:
Rev. 1.6 made it impossible to use rc.d/kerberos with the krb5 port.
Re-implement the change so that the script once again works with
the krb5 port.
mtm [Mon, 28 Jan 2008 07:37:08 +0000 (07:37 +0000)]
MFC: ver. 1.82-1.83
Fix an error in bit shifting logic for network addresses. The route
command would add incorrect routing entries if network numbers weren't
fully "spelled" out according to their class. For example:
# route add 128.0/16 (works)
# route add 128/16 (doesn't work)
# route add 193.0.0/24 (works)
# route add 193/24 (doesn't work)
Also, rework the way a netmask is deduced from network number if
it [netmask] is not specified.
dds [Sun, 27 Jan 2008 08:07:15 +0000 (08:07 +0000)]
MFC: A new configuration variable, daily_status_mail_rejects_shorten, allows
the rejected mail reports to tally the rejects per blacklist without
providing details about individual sender hosts. The default configuration
keeps the reports in their original form.
delphij [Sat, 26 Jan 2008 21:59:10 +0000 (21:59 +0000)]
MFC revision 1.7
date: 2008/01/12 00:11:26; author: delphij; state: Exp; lines: +4 -4
- Handle the case where interface from "middle" is missing by
more carefully inspecting the return value from sysctl(3). [1]
- Use calloc instead of malloc+memset of zero.
mtm [Sat, 26 Jan 2008 07:08:48 +0000 (07:08 +0000)]
MFC: rev. 1.110
----------------------------------------------------------------------------
Instead of manually freeing the packet options structure (and not even doing
a good job of it) in the copypktopts() function, just call ip6_clearpktopts()
directly. Otherwise, the callers of this function would end up freeing the
memory twice.
kensmith [Wed, 23 Jan 2008 20:19:18 +0000 (20:19 +0000)]
MFC:
Add fsck_4.2bsd and fsck_ufs as hard links to fsck_ffs in /stand on
the MFS image so that (for example) "fsck /dev/ad0s1a" will work.
Without this you needed (for example) "fsck -t ffs /dev/ad0s1a" (or
needed to run fsck_ffs instead of fsck).
jhb [Wed, 23 Jan 2008 18:03:15 +0000 (18:03 +0000)]
MFC: Fix some minor issues such as using read/modify/write for updating
the configuration register and add a header file to hold HPET register
constants.
jhb [Sat, 19 Jan 2008 15:38:13 +0000 (15:38 +0000)]
MFC: Split the intr_table_lock into an sx lock used for most things, and a
spin lock to protect intrcnt_index. Originally I had this as a spin lock
so interrupt code could use it to lookup sources. However, we don't
actually do that because it would add a lot of overhead to interrupts,
and if we ever do support removing interrupt sources, we can use other
means to safely do so w/o locking in the interrupt handling code.
This fixes a LOR in the most recent MSI MFC and was a part of the original
commit to HEAD that included the changes in the most recent MSI MFC.
jhb [Thu, 17 Jan 2008 21:04:51 +0000 (21:04 +0000)]
MFC: Force consistent use of the mountpoint's credentials when connecting
to the NFS server by temporarily changing the current thread's credentials
to that of the mountpoint while establishing the connection.
cognet [Wed, 16 Jan 2008 22:45:03 +0000 (22:45 +0000)]
MFC rev 1.14:
Back when I committed the arm port, I've been asked to move
memcpy/memset/memcmp and friends from libkern/arm to arm/arm/support.S, and so
I did, but in the process, I didn't add the appropriate copyrights.
This is a major oversight from me, and I apology to the NetBSD people for it.
mux [Wed, 9 Jan 2008 15:38:49 +0000 (15:38 +0000)]
MFC route.c@1.125 and route.h@1.68:
Add a workaround for a deadlock between the rt_setgate() and rt_check()
functions. It is easily triggered by running routed, and, I expect, by
running any other daemon that uses routing sockets.
delphij [Wed, 9 Jan 2008 08:55:51 +0000 (08:55 +0000)]
MFC important fixes by sos@:
Implement a workaround of the datacorruption problem on ServerWorks
HT1000 chipsets. The HT1000 DMA engine seems to not always like 64K
transfers and sometimes barfs data all over memory leading to instant
chrash and burn.
Also fix 48bit adressing issues, apparently newer chips needs 16bit
writes and not the usual fifo thing.
HW donated by: Travis Mikalson at TerraNovaNet
Original work: sos
gabor [Fri, 4 Jan 2008 13:32:32 +0000 (13:32 +0000)]
MFC
r1.62:
- Document icase variable of make search, which can be used to control
case-sensitivity
r1.63:
- Document PORT_DBDIR
r1.64:
- Remove incomplete sentence fragment
mav [Sat, 29 Dec 2007 17:35:32 +0000 (17:35 +0000)]
MFC rev. 1.22
Increase control channel xmit queue to 128 packets.
Previous value 16 was too small for real LAC as temporal activity
spike cound easily overflow queue demanding tunnel disconnection due
to possible state inconsistency.
thompsa [Sat, 29 Dec 2007 17:29:11 +0000 (17:29 +0000)]
MFC r1.8
Fix a panic where if the mbuf was consumed by the filter for requeueing
(dummynet), ipsec_filter() would return the empty error code and the ipsec
code would continue to forward/deference the null mbuf.
kensmith [Sat, 29 Dec 2007 06:20:30 +0000 (06:20 +0000)]
MFC v1.117:
> Plug a memory leak. Once any given package (e.g. perl) was installed
> we would leak a saved screen for every other package we tried to install
> that listed perl as one of its dependencies. When installing things
> like gnome and kde that wound up being a LOT of leaked memory.
While here clean up some whitespace nits that are differences between
this branch and the others.
kensmith [Sat, 29 Dec 2007 06:19:18 +0000 (06:19 +0000)]
MFC v1.78 and v1.79:
Remove process limits for datasize and stacksize which are unlimited
during a "normal login" (thanks to /etc/login.conf) but not when
sysinstall is running as part of an installation. Fixups for error
messages and a comment that became untrue.
kensmith [Mon, 24 Dec 2007 06:42:35 +0000 (06:42 +0000)]
MFC v1.116:
> For the INDEX file to be used on disc1 of the 7.0-RELEASE the longest
> "build dependencies" field is 5,108 characters which overflows the
> length of the junk buffer by a teeny bit. This whole section needs
> much more error checking but for now just completely ignore stuff
> we have no interest in instead of copying it to someplace we don't
> use in the process.
rwatson [Sat, 22 Dec 2007 15:08:09 +0000 (15:08 +0000)]
Merge mac_posix_sem.c:1.12 from HEAD to RELENG_6:
Fix a MAC label leak for POSIX semaphores, in which per-policy labels
would be properly disposed of, but the global label structure for the
semaphore wouldn't be freed.
Reported by: tanyong <tanyong at ercist dot iscas dot ac dot cn>,
zhouzhouyi
rwatson [Sat, 22 Dec 2007 15:06:51 +0000 (15:06 +0000)]
Merge in6_pcb.c:1.86 from HEAD to RELENG_6:
Fix leaking MAC labels for IPv6 inpcbs by adding missing MAC label
destroy call; this transpired because the inpcb alloc path for IPv4/IPv6
is the same code, but IPv6 has a separate free path. The results was
that as new IPv6 TCP connections were created, kernel memory would
gradually leak.
Reported by: tanyong <tanyong at ercist dot iscas dot ac dot cn>,
zhouzhouyi
thompsa [Fri, 21 Dec 2007 05:34:35 +0000 (05:34 +0000)]
MFC r1.25
- Use the macro to check the port status has it will also test if its
administratively down (!IFF_UP)
- Use the same parameters to lagg_link_active() to get the backup port as in
the output path, this didnt actually matter in practice as sc_primary is
always the first on the port list.