src/sys/kern/sysv_msg.c, branch releng/4.5

o MFC of System V IPC disabling in jail():

2000-11-01T17:58:06+00:00

  1.8       +6 -1      src/sys/kern/kern_jail.c
  1.26      +17 -1     src/sys/kern/sysv_msg.c
  1.29      +14 -1     src/sys/kern/sysv_sem.c
  1.49      +20 -1     src/sys/kern/sysv_shm.c
  1.10      +2 -1      src/sys/sys/jail.h

  Log:
  o Deny access to System V IPC from within jail by default, as in the
    current implementation, jail neither virtualizes the Sys V IPC namespace,
    nor provides inter-jail protections on IPC objects.
  o Support for System V IPC can be enabled by setting jail.sysvipc_allowed=1
    using sysctl.
  o This is not the "real fix" which involves virtualizing the System V
    IPC namespace, but prevents processes within jail from influencing those
    outside of jail when not approved by the administrator.

  Reported by:  Paulo Fragoso

MFC: 1.25: Initialize variable to avoid strange stuff

2000-09-19T23:00:18+00:00

MFC: pmap interface optimizations, optionally physically backed SYSVSHM.

2000-08-04T22:31:11+00:00

$Id$ -> $FreeBSD$

1999-08-28T01:08:13+00:00

Change suser_xxx() to suser() where it applies.

1999-04-27T12:21:16+00:00

Suser() simplification:

1999-04-27T11:18:52+00:00

1:
  s/suser/suser_xxx/

2:
  Add new function: suser(struct proc *), prototyped in .

3:
  s/suser_xxx(\([a-zA-Z0-9_]*\)->p_ucred, \&\1->p_acflag)/suser(\1)/

The remaining suser_xxx() calls will be scrutinized and dealt with
later.

There may be some unneeded #include , but they are left
as an exercise for Bruce.

More changes to the suser() API will come along with the "jail" code.

The function msgrcv() could copy larger data than it should do

1999-04-21T13:30:01+00:00

under some circumstances.
PR:		kern/10765
Submitted by:	Yasuhito FUTATSUKI

Use suser() to determine super-user-ness, don't examine cr_uid directly.

1999-01-30T12:21:49+00:00

Eradicate the variable "time" from the kernel, using various measures.

1998-03-30T09:56:58+00:00

"time" wasn't a atomic variable, so splfoo() protection were needed
around any access to it, unless you just wanted the seconds part.

Most uses of time.tv_sec now uses the new variable time_second instead.

gettime() changed to getmicrotime(0.

Remove a couple of unneeded splfoo() protections, the new getmicrotime()
is atomic, (until Bruce sets a breakpoint in it).

A couple of places needed random data, so use read_random() instead
of mucking about with time which isn't random.

Add a new nfs_curusec() function.

Mark a couple of bogosities involving the now disappeard time variable.

Update ffs_update() to avoid the weird "== &time" checks, by fixing the
one remaining call that passwd &time as args.

Change profiling in ncr.c to use ticks instead of time.  Resolution is
the same.

Add new function "tvtohz()" to avoid the bogus "splfoo(), add time, call
hzto() which subtracts time" sequences.

Reviewed by:	bde

Move the "retval" (3rd) parameter from all syscall functions and put

1997-11-06T19:29:57+00:00

it in struct proc instead.

This fixes a boatload of compiler warning, and removes a lot of cruft
from the sources.

I have not removed the /*ARGSUSED*/, they will require some looking at.

libkvm, ps and other userland struct proc frobbing programs will need
recompiled.