272461 |
03-Oct-2014 |
gjb |
Copy stable/10@r272459 to releng/10.1 as part of the 10.1-RELEASE process.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
271844 |
18-Sep-2014 |
pjd |
MFC r271577:
Fix descriptors leak.
PR: bin/191002 Reported by: Ryan Steinmetz Submitted by: mjg Approved by: re (gjb)
|
267573 |
17-Jun-2014 |
brueffer |
MFC: r267478
MFp4: change 1191346
In print_header32_tok(), correct printing in the XML case. This lead to invalid XML files before.
PR: 176259 Submitted by: zi
|
259073 |
07-Dec-2013 |
peter |
Hoist all the mergeinfo up to the root in preparation for enforcing merges to the root only. All MFC's were rerecorded to the root.
Going forward, if an MFC includes mergeinfo, it will need to be made to the root and committed from the root. Merges with --ignore-ancestry or diff | patch can go anywhere.
The mergeinfo in HEAD is in a bad state from years of neglect and manual tampering and this was branched into 10.x. This confuses the coalescing code and prevents it from doing its job.
Approved by: re (gjb, implicit)
|
256281 |
10-Oct-2013 |
gjb |
Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.
Approved by: re (implicit) Sponsored by: The FreeBSD Foundation
|
253541 |
22-Jul-2013 |
cperciva |
Remove weirdly-named autofoo file. This is not needed for the (FreeBSD) build, and freebsd-update chokes on it.
9.2-RELEASE candidate.
Approved by: rwatson MFC after: 3 days
|
250926 |
23-May-2013 |
jkim |
Work around build breakages with GCC 4.2.
Reported by: tinderbox
|
248599 |
21-Mar-2013 |
pjd |
Implement chflagsat(2) system call, similar to fchmodat(2), but operates on file flags.
Reviewed by: kib, jilles Sponsored by: The FreeBSD Foundation
|
247667 |
02-Mar-2013 |
pjd |
- Implement two new system calls:
int bindat(int fd, int s, const struct sockaddr *addr, socklen_t addrlen); int connectat(int fd, int s, const struct sockaddr *name, socklen_t namelen);
which allow to bind and connect respectively to a UNIX domain socket with a path relative to the directory associated with the given file descriptor 'fd'.
- Add manual pages for the new syscalls.
- Make the new syscalls available for processes in capability mode sandbox.
- Add capability rights CAP_BINDAT and CAP_CONNECTAT that has to be present on the directory descriptor for the syscalls to work.
- Update audit(4) to support those two new syscalls and to handle path in sockaddr_un structure relative to the given directory descriptor.
- Update procstat(1) to recognize the new capability rights.
- Document the new capability rights in cap_rights_limit(2).
Sponsored by: The FreeBSD Foundation Discussed with: rwatson, jilles, kib, des
|
247602 |
02-Mar-2013 |
pjd |
Merge Capsicum overhaul:
- Capability is no longer separate descriptor type. Now every descriptor has set of its own capability rights.
- The cap_new(2) system call is left, but it is no longer documented and should not be used in new code.
- The new syscall cap_rights_limit(2) should be used instead of cap_new(2), which limits capability rights of the given descriptor without creating a new one.
- The cap_getrights(2) syscall is renamed to cap_rights_get(2).
- If CAP_IOCTL capability right is present we can further reduce allowed ioctls list with the new cap_ioctls_limit(2) syscall. List of allowed ioctls can be retrived with cap_ioctls_get(2) syscall.
- If CAP_FCNTL capability right is present we can further reduce fcntls that can be used with the new cap_fcntls_limit(2) syscall and retrive them with cap_fcntls_get(2).
- To support ioctl and fcntl white-listing the filedesc structure was heavly modified.
- The audit subsystem, kdump and procstat tools were updated to recognize new syscalls.
- Capability rights were revised and eventhough I tried hard to provide backward API and ABI compatibility there are some incompatible changes that are described in detail below:
CAP_CREATE old behaviour: - Allow for openat(2)+O_CREAT. - Allow for linkat(2). - Allow for symlinkat(2). CAP_CREATE new behaviour: - Allow for openat(2)+O_CREAT.
Added CAP_LINKAT: - Allow for linkat(2). ABI: Reuses CAP_RMDIR bit. - Allow to be target for renameat(2).
Added CAP_SYMLINKAT: - Allow for symlinkat(2).
Removed CAP_DELETE. Old behaviour: - Allow for unlinkat(2) when removing non-directory object. - Allow to be source for renameat(2).
Removed CAP_RMDIR. Old behaviour: - Allow for unlinkat(2) when removing directory.
Added CAP_RENAMEAT: - Required for source directory for the renameat(2) syscall.
Added CAP_UNLINKAT (effectively it replaces CAP_DELETE and CAP_RMDIR): - Allow for unlinkat(2) on any object. - Required if target of renameat(2) exists and will be removed by this call.
Removed CAP_MAPEXEC.
CAP_MMAP old behaviour: - Allow for mmap(2) with any combination of PROT_NONE, PROT_READ and PROT_WRITE. CAP_MMAP new behaviour: - Allow for mmap(2)+PROT_NONE.
Added CAP_MMAP_R: - Allow for mmap(PROT_READ). Added CAP_MMAP_W: - Allow for mmap(PROT_WRITE). Added CAP_MMAP_X: - Allow for mmap(PROT_EXEC). Added CAP_MMAP_RW: - Allow for mmap(PROT_READ | PROT_WRITE). Added CAP_MMAP_RX: - Allow for mmap(PROT_READ | PROT_EXEC). Added CAP_MMAP_WX: - Allow for mmap(PROT_WRITE | PROT_EXEC). Added CAP_MMAP_RWX: - Allow for mmap(PROT_READ | PROT_WRITE | PROT_EXEC).
Renamed CAP_MKDIR to CAP_MKDIRAT. Renamed CAP_MKFIFO to CAP_MKFIFOAT. Renamed CAP_MKNODE to CAP_MKNODEAT.
CAP_READ old behaviour: - Allow pread(2). - Disallow read(2), readv(2) (if there is no CAP_SEEK). CAP_READ new behaviour: - Allow read(2), readv(2). - Disallow pread(2) (CAP_SEEK was also required).
CAP_WRITE old behaviour: - Allow pwrite(2). - Disallow write(2), writev(2) (if there is no CAP_SEEK). CAP_WRITE new behaviour: - Allow write(2), writev(2). - Disallow pwrite(2) (CAP_SEEK was also required).
Added convinient defines:
#define CAP_PREAD (CAP_SEEK | CAP_READ) #define CAP_PWRITE (CAP_SEEK | CAP_WRITE) #define CAP_MMAP_R (CAP_MMAP | CAP_SEEK | CAP_READ) #define CAP_MMAP_W (CAP_MMAP | CAP_SEEK | CAP_WRITE) #define CAP_MMAP_X (CAP_MMAP | CAP_SEEK | 0x0000000000000008ULL) #define CAP_MMAP_RW (CAP_MMAP_R | CAP_MMAP_W) #define CAP_MMAP_RX (CAP_MMAP_R | CAP_MMAP_X) #define CAP_MMAP_WX (CAP_MMAP_W | CAP_MMAP_X) #define CAP_MMAP_RWX (CAP_MMAP_R | CAP_MMAP_W | CAP_MMAP_X) #define CAP_RECV CAP_READ #define CAP_SEND CAP_WRITE
#define CAP_SOCK_CLIENT \ (CAP_CONNECT | CAP_GETPEERNAME | CAP_GETSOCKNAME | CAP_GETSOCKOPT | \ CAP_PEELOFF | CAP_RECV | CAP_SEND | CAP_SETSOCKOPT | CAP_SHUTDOWN) #define CAP_SOCK_SERVER \ (CAP_ACCEPT | CAP_BIND | CAP_GETPEERNAME | CAP_GETSOCKNAME | \ CAP_GETSOCKOPT | CAP_LISTEN | CAP_PEELOFF | CAP_RECV | CAP_SEND | \ CAP_SETSOCKOPT | CAP_SHUTDOWN)
Added defines for backward API compatibility:
#define CAP_MAPEXEC CAP_MMAP_X #define CAP_DELETE CAP_UNLINKAT #define CAP_MKDIR CAP_MKDIRAT #define CAP_RMDIR CAP_UNLINKAT #define CAP_MKFIFO CAP_MKFIFOAT #define CAP_MKNOD CAP_MKNODAT #define CAP_SOCK_ALL (CAP_SOCK_CLIENT | CAP_SOCK_SERVER)
Sponsored by: The FreeBSD Foundation Reviewed by: Christoph Mallon <christoph.mallon@gmx.de> Many aspects discussed with: rwatson, benl, jonathan ABI compatibility discussed with: kib
|
247442 |
28-Feb-2013 |
pjd |
When we are waiting for new trail files we may have been disconnected and reconnected in the meantime. Check if reset is set before opening next trail file, as not doing so will result in sending OPEN message with the same file name twice and this is illegal - the second OPEN is send without first closing previous trail file.
|
246925 |
18-Feb-2013 |
pjd |
Allow [] in remote address, which fixes IPv6 support.
Reported by: simon
|
244265 |
15-Dec-2012 |
rwatson |
Merge OpenBSM 1.2-alpha3 from the vendor branch to 10-CURRENT; this version included various upstreamed patches from the FreeBSD base to make OpenBSM compile more easily with bmake, higher warning levels, clang, and several other loose ends.
Obtained from: TrustedBSD Project
|
243750 |
01-Dec-2012 |
rwatson |
Merge OpenBSM 1.2-alpha2 from vendor branch to FreeBSD 10-CURRENT; the primary new feature is auditdistd.
Obtained from: TrustedBSD Project Sponsored by: The FreeBSD Foundation (auditdistd)
|
234034 |
08-Apr-2012 |
rwatson |
Merge a local fix to OpenBSM's libauditd to avoid a directory descriptor leak when iterating over possible audit trail directories. This fix will be merged upstream in an identical form, but hasn't yet appeared in an OpenBSM release.
Submitted by: guido Obtained from: TrustedBSD Project MFC after: 3 days
|
223758 |
04-Jul-2011 |
attilio |
With retirement of cpumask_t and usage of cpuset_t for representing a mask of CPUs, pc_other_cpus and pc_cpumask become highly inefficient.
Remove them and replace their usage with custom pc_cpuid magic (as, atm, pc_cpumask can be easilly represented by (1 << pc_cpuid) and pc_other_cpus by (all_cpus & ~(1 << pc_cpuid))).
This change is not targeted for MFC because of struct pcpu members removal and dependency by cpumask_t retirement.
MD review by: marcel, marius, alc Tested by: pluknet MD testing by: marcel, marius, gonzo, andreast
|
222813 |
07-Jun-2011 |
attilio |
etire the cpumask_t type and replace it with cpuset_t usage.
This is intended to fix the bug where cpu mask objects are capped to 32. MAXCPU, then, can now arbitrarely bumped to whatever value. Anyway, as long as several structures in the kernel are statically allocated and sized as MAXCPU, it is suggested to keep it as low as possible for the time being.
Technical notes on this commit itself: - More functions to handle with cpuset_t objects are introduced. The most notable are cpusetobj_ffs() (which calculates a ffs(3) for a cpuset_t object), cpusetobj_strprint() (which prepares a string representing a cpuset_t object) and cpusetobj_strscan() (which creates a valid cpuset_t starting from a string representation). - pc_cpumask and pc_other_cpus are target to be removed soon. With the moving from cpumask_t to cpuset_t they are now inefficient and not really useful. Anyway, for the time being, please note that access to pcpu datas is protected by sched_pin() in order to avoid migrating the CPU while reading more than one (possible) word - Please note that size of cpuset_t objects may differ between kernel and userland. While this is not directly related to the patch itself, it is good to understand that concept and possibly use the patch as a reference on how to deal with cpuset_t objects in userland, when accessing kernland members. - KTR_CPUMASK is changed and now is represented through a string, to be set as the example reported in NOTES.
Please additively note that no MAXCPU is bumped in this patch, but private testing has been done until to MAXCPU=128 on a real 8x8x2(htt) machine (amd64).
Please note that the FreeBSD version is not yet bumped because of the upcoming pcpu changes. However, note that this patch is not targeted for MFC.
People to thank for the time spent on this patch: - sbruno, pluknet and Nicholas Esborn (nick AT desert DOT net) tested several revision of the patches and really helped in improving stability of this work. - marius fixed several bugs in the sparc64 implementation and reviewed patches related to ktr. - jeff and jhb discussed the basic approach followed. - kib and marcel made targeted review on some specific part of the patch. - marius, art, nwhitehorn and andreast reviewed MD specific part of the patch. - marius, andreast, gonzo, nwhitehorn and jceel tested MD specific implementations of the patch. - Other people have made contributions on other patches that have been already committed and have been listed separately.
Companies that should be mentioned for having participated at several degrees: - Yahoo! for having offered the machines used for testing on big count of CPUs. - The FreeBSD Foundation for having sponsored my devsummit attendance, which has been instrumental. - Sandvine for having offered offices and infrastructure during development.
(I really hope I didn't forget anyone, if it happened I apologize in advance).
|
222286 |
25-May-2011 |
ru |
[mdoc] Fixed .Dt call.
|
207736 |
07-May-2010 |
mckusick |
Merger of the quota64 project into head.
This joint work of Dag-Erling Smørgrav and myself updates the FFS quota system to support both traditional 32-bit and new 64-bit quotas (for those of you who want to put 2+Tb quotas on your users).
By default quotas are not compiled into the kernel. To include them in your kernel configuration you need to specify:
options QUOTA # Enable FFS quotas
If you are already running with the current 32-bit quotas, they should continue to work just as they have in the past. If you wish to convert to using 64-bit quotas, use `quotacheck -c 64'; if you wish to revert from 64-bit quotas back to 32-bit quotas, use `quotacheck -c 32'.
There is a new library of functions to simplify the use of the quota system, do `man quotafile' for details. If your application is currently using the quotactl(2), it is highly recommended that you convert your application to use the quotafile interface. Note that existing binaries will continue to work.
Special thanks to John Kozubik of rsync.net for getting me interested in pursuing 64-bit quota support and for funding part of my development time on this project.
|
196031 |
02-Aug-2009 |
rwatson |
Import OpenBSM 1.1p2 from vendor branch to 8-CURRENT. This patch release addresses several minor issues:
- Fix audit_event definitions of AUE_OPENAT_RWT and AUE_OPENAT_RWTC. - Fix build on Linux. - Fix printing of class masks in the audump tool.
MFC after: 3 weeks Obtained from: TrustedBSD Project Approved by: re (kib)
|
195740 |
17-Jul-2009 |
rwatson |
Import OpenBSM 1.1p1 from vendor branch to 8-CURRENT, populating contrib/openbsm and a subset also imported into sys/security/audit. This patch release addresses several minor issues:
- Fixes to AUT_SOCKUNIX token parsing. - IPv6 support for au_to_me(3). - Improved robustness in the parsing of audit_control, especially long flags/naflags strings and whitespace in all fields. - Add missing conversion of a number of FreeBSD/Mac OS X errnos to/from BSM error number space.
MFC after: 3 weeks Obtained from: TrustedBSD Project Sponsored by: Apple, Inc. Approved by: re (kib)
|
191273 |
19-Apr-2009 |
rwatson |
Merge OpenBSM 1.1 from OpenBSM vendor branch to head.
OpenBSM history for imported revision below for reference.
MFC after: 2 weeks Sponsored by: Apple, Inc. Obtained from: TrustedBSD Project
OpenBSM 1.1
- Change auditon(2) parameters and data structures to be 32/64-bit architecture independent. Add more information to man page about auditon(2) parameters. - Add wrapper functions for auditon(2) to use legacy commands when the new commands are not supported. - Add default for 'expire-after' in audit_control to expire trail files when the audit directory is more than 10 megabytes ('10M'). - Interface to convert between local and BSM fcntl(2) command values has been added: au_bsm_to_fcntl_cmd(3) and au_fcntl_cmd_to_bsm(3), along with definitions of constants in audit_fcntl.h. - A bug, introduced in OpenBSM 1.1 alpha 4, in which AUT_RETURN32 tokens generated by audit_submit(3) were improperly encoded has been fixed. - Fix example in audit_submit(3) man page. Also, make it clear that we want the audit ID as the argument. - A new audit event class 'aa', for post-login authentication and authorization events, has been added.
|
189301 |
03-Mar-2009 |
rwatson |
Update config.h for OpenBSM 1.1 beta1.
MFC after: 1 month
|
189279 |
02-Mar-2009 |
rwatson |
Merge OpenBSM 1.1 beta 1 from OpenBSM vendor branch to head, both contrib/openbsm (svn merge) and src/sys/{bsm,security/audit} (manual merge).
OpenBSM history for imported revision below for reference.
MFC after: 1 month Sponsored by: Apple, Inc. Obtained from: TrustedBSD Project
OpenBSM 1.1 beta 1
- The filesz parameter in audit_control(5) now accepts suffixes: 'B' for Bytes, 'K' for Kilobytes, 'M' for Megabytes, and 'G' for Gigabytes. For legacy support no suffix defaults to bytes. - Audit trail log expiration support added. It is configured in audit_control(5) with the expire-after parameter. If there is no expire-after parameter in audit_control(5), the default, then the audit trail files are not expired and removed. See audit_control(5) for more information. - Change defaults in audit_control: warn at 5% rather than 20% free for audit partitions, rotate automatically at 2mb, and set the default policy to cnt,argv rather than cnt so that execve(2) arguments are captured if AUE_EXECVE events are audited. These may provide more usable defaults for many users. - Use au_domain_to_bsm(3) and au_socket_type_to_bsm(3) to convert au_to_socket_ex(3) arguments to BSM format. - Fix error encoding AUT_IPC_PERM tokens.
|
187214 |
14-Jan-2009 |
rwatson |
Merge OpenBSM alpha 5 from OpenBSM vendor branch to head, both contrib/openbsm (svn merge) and src/sys/{bsm,security/audit} (manual merge). Hook up bsm_domain.c and bsm_socket_type.c to the libbsm build along with man pages, add audit_bsm_domain.c and audit_bsm_socket_type.c to the kernel environment.
OpenBSM history for imported revisions below for reference.
MFC after: 1 month Sponsored by: Apple Inc. Obtained from: TrustedBSD Project
OpenBSM 1.1 alpha 5
- Stub libauditd(3) man page added. - All BSM error number constants with BSM_ERRNO_. - Interfaces to convert between local and BSM socket types and protocol families have been added: au_bsm_to_domain(3), au_bsm_to_socket_type(3), au_domain_to_bsm(3), and au_socket_type_to_bsm(3), along with definitions of constants in audit_domain.h and audit_socket_type.h. This improves interoperability by converting local constant spaces, which vary by OS, to and from Solaris constants (where available) or OpenBSM constants for protocol domains not present in Solaris (a fair number). These routines should be used when generating and interpreting extended socket tokens. - Fix build warnings with full gcc warnings enabled on most supported platforms. - Don't compile error strings into bsm_errno.c when building it in the kernel environment. - When started by launchd, use the label com.apple.auditd rather than org.trustedbsd.auditd.
|
186648 |
31-Dec-2008 |
rwatson |
Update config.h for OpenBSM 1.1 alpha 4.
|
186647 |
31-Dec-2008 |
rwatson |
Merge OpenBSM alpha 4 from OpenBSM vendor branch to head, both contrib/openbsm (svn merge) and src/sys/{bsm,security/audit} (manual merge). Add libauditd build parts and add to auditd's linkage; force libbsm to build before libauditd.
OpenBSM history for imported revisions below for reference.
MFC after: 1 month Sponsored by: Apple Inc. Obtained from: TrustedBSD Project
OpenBSM 1.1 alpha 4
- With the addition of BSM error number mapping, we also need to map the local error number passed to audit_submit(3) to a BSM error number, rather than have the caller perform that conversion. - Reallocate user audit events to avoid collisions with Solaris; adopt a more formal allocation scheme, and add some events allocated in Solaris that will be of immediate use on other platforms. - Add an event for Calife. - Add au_strerror(3), which allows generating strings for BSM errors directly, rather than requiring applications to map to the local error space, which might not be able to entirely represent the BSM error number space. - Major auditd rewrite for launchd(8) support. Add libauditd library that is shared between launchd and auditd. - Add AUDIT_TRIGGER_INITIALIZE trigger (sent via 'audit -i') for (re)starting auditing under launchd(8) on Mac OS X. - Add 'current' symlink to active audit trail. - Add crash recovery of previous audit trail file when detected on audit startup that it has not been properly terminated. - Add the event AUE_audit_recovery to indicated when an audit trail file has been recovered from not being properly terminated. This event is stored in the new audit trail file and includes the path of recovered audit trail file. - Mac OS X and FreeBSD dependent code in auditd.c is separated into auditd_darwin.c and auditd_fbsd.c files. - Add an event for the posix_spawn(2) and fsgetpath(2) Mac OS X system calls. - For Mac OS X, we use ASL(3) instead of syslog(3) for logging. - Add support for NOTICE level logging.
OpenBSM 1.1 alpha 3
- Add two new functions, au_bsm_to_errno() and au_errno_to_bsm(), to map between BSM error numbers (largely the Solaris definitions) and local errno(2) values for 32-bit and 64-bit return tokens. This is required as operating systems don't agree on some of the values of more recent error numbers. - Fix a bug how au_to_exec_args(3) and au_to_exec_env(3) calculates the total size for the token. This buge. - Deprecated Darwin constants, such as TRAILER_PAD_MAGIC, removed.
|
185573 |
02-Dec-2008 |
rwatson |
Merge OpenBSM 1.1 alpha 2 from the OpenBSM vendor branch to head, both contrib/openbsm (svn merge) and sys/{bsm,security/audit} (manual merge).
- Add OpenBSM contrib tree to include paths for audit(8) and auditd(8). - Merge support for new tokens, fixes to existing token generation to audit_bsm_token.c. - Synchronize bsm includes and definitions.
OpenBSM history for imported revisions below for reference.
MFC after: 1 month Sponsored by: Apple Inc. Obtained from: TrustedBSD Project
--
OpenBSM 1.1 alpha 2
- Include files in OpenBSM are now broken out into two parts: library builds required solely for user space, and system includes, which may also be required for use in the kernels of systems integrating OpenBSM. Submitted by Stacey Son. - Configure option --with-native-includes allows forcing the use of native include for system includes, rather than the versions bundled with OpenBSM. This is intended specifically for platforms that ship OpenBSM, have adapted versions of the system includes in a kernel source tree, and will use the OpenBSM build infrastructure with an unmodified OpenBSM distribution, allowing the customized system includes to be used with the OpenBSM build. Submitted by Stacey Son. - Various strcpy()'s/strcat()'s have been changed to strlcpy()'s/strlcat()'s or asprintf(). Added compat/strlcpy.h for Linux. - Remove compatibility defines for old Darwin token constant names; now only BSM token names are provided and used. - Add support for extended header tokens, which contain space for information on the host generating the record. - Add support for setting extended host information in the kernel, which is used for setting host information in extended header tokens. The audit_control file now supports a "host" parameter which can be used by auditd to set the information; if not present, the kernel parameters won't be set and auditd uses unextended headers for records that it generates.
OpenBSM 1.1 alpha 1
- Add option to auditreduce(1) which allows users to invert sense of matching, such that BSM records that do not match, are selected. - Fix bug in audit_write() where we commit an incomplete record in the event there is an error writing the subject token. This was submitted by Diego Giagio. - Build support for Mac OS X 10.5.1 submitted by Eric Hall. - Fix a bug which resulted in host XML attributes not being arguments so that const strings can be passed as arguments to tokens. This patch was submitted by Xin LI. - Modify the -m option so users can select more then one audit event. - For Mac OS X, added Mach IPC support for audit trigger messages. - Fixed a bug in getacna() which resulted in a locking problem on Mac OS X. - Added LOG_PERROR flag to openlog when -d option is used with auditd. - AUE events added for Mac OS X Leopard system calls.
|
184901 |
13-Nov-2008 |
rwatson |
Bootstrap merge history for OpenBSM.
|
173147 |
29-Oct-2007 |
rwatson |
Regenerate config.h after import of OpenBSM 1.0.
Obtained from: TrustedBSD Project
|
173146 |
29-Oct-2007 |
rwatson |
Resolve conflicts from import of OpenBSM 1.0: maintain $FreeBSD$ tags in /etc/security audit configuration files.
|
173144 |
29-Oct-2007 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r173143, which included commits to RCS files with non-trunk default branches.
|
171541 |
22-Jul-2007 |
rwatson |
Update generated OpenBSM config.h for OpenBSM 1.0 alpha15 update.
Approved by: re (hrs)
|
171540 |
22-Jul-2007 |
rwatson |
Resolve conflicts from import of OpenBSM 1.0 alpha15 ($FreeBSD$/$P4$ conflict).
Approved by: re (hrs)
|
171538 |
22-Jul-2007 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r171537, which included commits to RCS files with non-trunk default branches.
|
168781 |
16-Apr-2007 |
rwatson |
Regenerate config.h from OpenBSM 1.0 alpha 14 import.
|
168780 |
16-Apr-2007 |
rwatson |
Resolve conflicts from OpenBSM 1.0 alpha 14 import.
|
168778 |
16-Apr-2007 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r168777, which included commits to RCS files with non-trunk default branches.
|
162626 |
25-Sep-2006 |
rwatson |
Resolve conflicts from OpenBSM 1.0 alpha 12 import.
Obtained from: TrustedBSD Project
|
162622 |
25-Sep-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r162621, which included commits to RCS files with non-trunk default branches.
|
162507 |
21-Sep-2006 |
rwatson |
Update config.h for OpenBSM 1.0 alpha 11 import: strlcat is now detected by configure.
|
162506 |
21-Sep-2006 |
rwatson |
Resolve conflicts from OpenBSM 1.0 alpha 11 vendor import: we have locally added $FreeBSD$ to /etc configuration files to assist mergemaster.
|
162504 |
21-Sep-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r162503, which included commits to RCS files with non-trunk default branches.
|
161866 |
02-Sep-2006 |
rwatson |
Note removal of certain contrib/openbsm/bsm include files from FreeBSD development branches, they exist only in the vendor branch.
Obtained from: TrustedBSD Project
|
161864 |
02-Sep-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r161863, which included commits to RCS files with non-trunk default branches.
|
161819 |
01-Sep-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r161818, which included commits to RCS files with non-trunk default branches.
|
161793 |
01-Sep-2006 |
rwatson |
Remove duplicated include files from HEAD that appear in both contrib/openbsm/bsm and sys/bsm. This will help avoid triggering problems due to an inconsistent include order between the base and lib32 builds. We will continue to import these files on the vendor branch. Files used purely in user space (audit_uevents.h) are not removed.
Suggested by: ru
|
161702 |
28-Aug-2006 |
imp |
This commit was generated by cvs2svn to compensate for changes in r161701, which included commits to RCS files with non-trunk default branches.
|
161636 |
26-Aug-2006 |
rwatson |
Update FreeBSD upgrade notes for OpenBSM.
Obtained from: TrustedBSD Project
|
161634 |
26-Aug-2006 |
rwatson |
Update for OpenBSM 1.0 alpha 9.
Obtained from: TrustedBSD Project
|
161633 |
26-Aug-2006 |
rwatson |
Resolove conflicts from OpenBSM 1.0 alpha 9 into audit_event.
Obtained from: TrustedBSD Project
|
161631 |
26-Aug-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r161630, which included commits to RCS files with non-trunk default branches.
|
159988 |
27-Jun-2006 |
rwatson |
Resolve conflicts from OpenBSM 1.0 alpha 7 import.
Obtained from: TrustedBSD Project
|
159986 |
27-Jun-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r159985, which included commits to RCS files with non-trunk default branches.
|
159984 |
27-Jun-2006 |
rwatson |
Modify import instructions to include "-n" in the sample command line for the CVS import, and suggest removing it for the real import, rather than suggesting it for testing. This will hopefully prevent me (and others) from making errors.
|
159251 |
05-Jun-2006 |
rwatson |
Regenerate config.h from OpenBSM 1.0 alpha 6 import.
Obtained from: TrustedBSD Project
|
159249 |
05-Jun-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r159248, which included commits to RCS files with non-trunk default branches.
|
157137 |
26-Mar-2006 |
rwatson |
Take contrib/openbsm/etc configuration files off the vendor branch in order to add $FreeBSD$ tags, which helps mergemaster better manage updating them.
Requested by: several Obtained from: TrustedBSD Project
|
156310 |
05-Mar-2006 |
rwatson |
Fix spelling error.
Submitted by: remko
|
156294 |
04-Mar-2006 |
rwatson |
Delete file from FreeBSD vendor branch of OpenBSM that has been removed from the TrustedBSD OpenBSM distribution.
Obtained from: TrustedBSD Project
|
156288 |
04-Mar-2006 |
rwatson |
Update FreeBSD import instructions for OpenBSM based on the new autoconf and automake OpenBSM world order.
Obtained from: TrustedBSD Project
|
156287 |
04-Mar-2006 |
rwatson |
Add generated config.h for FreeBSD.
Obtained from: TrustedBSD Project
|
156286 |
04-Mar-2006 |
rwatson |
Remove files deleted in the OpenBSM distribution from the OpenBSM vendor branch.
Obtained from: TrustedBSD Project
|
156284 |
04-Mar-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r156283, which included commits to RCS files with non-trunk default branches.
|
155519 |
11-Feb-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r155518, which included commits to RCS files with non-trunk default branches.
|
155365 |
06-Feb-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r155364, which included commits to RCS files with non-trunk default branches.
|
155363 |
06-Feb-2006 |
rwatson |
Correct typo in sample CVS import line: must specify full path to the CVS repository on repoman.
|
155310 |
04-Feb-2006 |
rwatson |
Add a brief FREEBSD-upgrade file to provide direction on how to perform OpenBSM upgrades. Right now, this is very easy, but in the future it will probably become more complicated.
|
155291 |
04-Feb-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r155290, which included commits to RCS files with non-trunk default branches.
|
155132 |
31-Jan-2006 |
rwatson |
This commit was generated by cvs2svn to compensate for changes in r155131, which included commits to RCS files with non-trunk default branches.
|