From owner-p4-projects@FreeBSD.ORG Sun May 24 00:53:47 2009
Return-Path:
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id B3F8F1065672; Sun, 24 May 2009 00:53:46 +0000 (UTC)
Delivered-To: perforce@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
by hub.freebsd.org (Postfix) with ESMTP id 71D6C106564A
for ; Sun, 24 May 2009 00:53:46 +0000 (UTC)
(envelope-from nikron@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
[IPv6:2001:4f8:fff6::29])
by mx1.freebsd.org (Postfix) with ESMTP id 4581D8FC25
for ; Sun, 24 May 2009 00:53:46 +0000 (UTC)
(envelope-from nikron@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4O0ribw042737
for ; Sun, 24 May 2009 00:53:44 GMT
(envelope-from nikron@FreeBSD.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4O0rioN042735
for perforce@freebsd.org; Sun, 24 May 2009 00:53:44 GMT
(envelope-from nikron@FreeBSD.org)
Date: Sun, 24 May 2009 00:53:44 GMT
Message-Id: <200905240053.n4O0rioN042735@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
nikron@FreeBSD.org using -f
From: Nikhil Bysani
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 162620 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 24 May 2009 00:53:47 -0000
http://perforce.freebsd.org/chv.cgi?CH=162620
Change 162620 by nikron@nmfreebsd on 2009/05/24 00:53:05
File for Milestones NetworkManager port GSoC project.
Submitted by: Nikhil Bysani
Affected files ...
.. //depot/projects/soc2009/nm-port/Milestones#1 add
Differences ...
From owner-p4-projects@FreeBSD.ORG Sun May 24 01:25:17 2009
Return-Path:
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id 5055B1065674; Sun, 24 May 2009 01:25:17 +0000 (UTC)
Delivered-To: perforce@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
by hub.freebsd.org (Postfix) with ESMTP id 107321065670
for ; Sun, 24 May 2009 01:25:17 +0000 (UTC)
(envelope-from nikron@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
[IPv6:2001:4f8:fff6::29])
by mx1.freebsd.org (Postfix) with ESMTP id F2BD98FC12
for ; Sun, 24 May 2009 01:25:16 +0000 (UTC)
(envelope-from nikron@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4O1PGtU046100
for ; Sun, 24 May 2009 01:25:16 GMT
(envelope-from nikron@FreeBSD.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4O1PGgn046098
for perforce@freebsd.org; Sun, 24 May 2009 01:25:16 GMT
(envelope-from nikron@FreeBSD.org)
Date: Sun, 24 May 2009 01:25:16 GMT
Message-Id: <200905240125.n4O1PGgn046098@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
nikron@FreeBSD.org using -f
From: Nikhil Bysani
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 162622 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 24 May 2009 01:25:18 -0000
http://perforce.freebsd.org/chv.cgi?CH=162622
Change 162622 by nikron@nmfreebsd on 2009/05/24 01:25:05
Milestones for nm-port.
Submitted by: Nikhil Bysani
Affected files ...
.. //depot/projects/soc2009/nm-port/Milestones#2 edit
Differences ...
==== //depot/projects/soc2009/nm-port/Milestones#2 (text+ko) ====
@@ -1,0 +1,6 @@
+May 23 - 30th, Get Network Manager to compile on FreeBSD (no functionality)
+May 30 - June 13th Get Ethernet working
+June 13th - June 27th Get Wireless working.
+June 27th - July 6th Pass test cases in ethernet/wireless.
+July 6th - July 24th Have generally working NetworkManager daemon.
+July 24th - August 17th Complete extra components such as plugins and nm-applet if possible, try to commit to upstream.
From owner-p4-projects@FreeBSD.ORG Sun May 24 06:51:55 2009
Return-Path:
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id 74C3E1065675; Sun, 24 May 2009 06:51:54 +0000 (UTC)
Delivered-To: perforce@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
by hub.freebsd.org (Postfix) with ESMTP id 34136106566C
for ; Sun, 24 May 2009 06:51:54 +0000 (UTC)
(envelope-from pgj@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
[IPv6:2001:4f8:fff6::29])
by mx1.freebsd.org (Postfix) with ESMTP id 20EB98FC17
for ; Sun, 24 May 2009 06:51:54 +0000 (UTC)
(envelope-from pgj@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4O6psbl085274
for ; Sun, 24 May 2009 06:51:54 GMT
(envelope-from pgj@FreeBSD.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4O6prgT085272
for perforce@freebsd.org; Sun, 24 May 2009 06:51:53 GMT
(envelope-from pgj@FreeBSD.org)
Date: Sun, 24 May 2009 06:51:53 GMT
Message-Id: <200905240651.n4O6prgT085272@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
pgj@FreeBSD.org using -f
From: Gabor Pali
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 162626 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 24 May 2009 06:51:56 -0000
http://perforce.freebsd.org/chv.cgi?CH=162626
Change 162626 by pgj@petymeg on 2009/05/24 06:51:28
IFC
Affected files ...
.. //depot/projects/docproj_hu/doc/en_US.ISO8859-1/share/sgml/authors.ent#28 integrate
.. //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/books/handbook/firewalls/chapter.sgml#17 integrate
.. //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/books/handbook/kernelconfig/chapter.sgml#13 integrate
.. //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/books/handbook/mirrors/chapter.sgml#29 integrate
.. //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/books/handbook/multimedia/chapter.sgml#7 integrate
.. //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/share/sgml/glossary/freebsd-glossary.sgml#14 integrate
.. //depot/projects/docproj_hu/doc/share/pgpkeys/jilles.key#1 branch
.. //depot/projects/docproj_hu/doc/share/pgpkeys/pgpkeys-developers.sgml#22 integrate
.. //depot/projects/docproj_hu/doc/share/pgpkeys/pgpkeys.ent#22 integrate
.. //depot/projects/docproj_hu/doc/share/pgpkeys/stas.key#3 integrate
.. //depot/projects/docproj_hu/doc/share/pgpkeys/tota.key#1 branch
.. //depot/projects/docproj_hu/doc/share/sgml/mirrors.xml#8 integrate
.. //depot/projects/docproj_hu/src/release/doc/en_US.ISO8859-1/relnotes/article.sgml#12 integrate
.. //depot/projects/docproj_hu/src/release/doc/share/misc/dev.archlist.txt#6 integrate
.. //depot/projects/docproj_hu/src_7/release/doc/en_US.ISO8859-1/errata/article.sgml#7 integrate
.. //depot/projects/docproj_hu/www/en/developers.sgml#24 integrate
.. //depot/projects/docproj_hu/www/en/projects/ideas/ideas.xml#11 integrate
.. //depot/projects/docproj_hu/www/en/releases/7.2R/errata.html#4 integrate
.. //depot/projects/docproj_hu/www/share/sgml/events.xml#16 integrate
.. //depot/projects/docproj_hu/www/share/sgml/news.xml#56 integrate
Differences ...
==== //depot/projects/docproj_hu/doc/en_US.ISO8859-1/share/sgml/authors.ent#28 (text+ko) ====
@@ -13,7 +13,7 @@
builds for the other languages, and we will poke fun of you
in public.
- $FreeBSD: doc/en_US.ISO8859-1/share/sgml/authors.ent,v 1.477 2009/05/05 09:13:27 snb Exp $
+ $FreeBSD: doc/en_US.ISO8859-1/share/sgml/authors.ent,v 1.479 2009/05/22 21:46:28 jilles Exp $
-->
aaron@FreeBSD.org">
@@ -496,6 +496,8 @@
jhs@FreeBSD.org">
+jilles@FreeBSD.org">
+
jim@FreeBSD.org">
jinmei@FreeBSD.org">
@@ -1084,6 +1086,8 @@
toshi@FreeBSD.org">
+tota@FreeBSD.org">
+
trasz@FreeBSD.org">
trevor@FreeBSD.org">
==== //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/books/handbook/firewalls/chapter.sgml#17 (text+ko) ====
@@ -1,7 +1,7 @@
@@ -1256,6 +1256,11 @@
&pgpkey.nyan;
+
+ &a.tota;
+ &pgpkey.tota;
+
+
&a.itetcu;
&pgpkey.itetcu;
@@ -1301,6 +1306,11 @@
&pgpkey.yar;
+
+ &a.jilles;
+ &pgpkey.jilles;
+
+
&a.ganbold;
&pgpkey.ganbold;
==== //depot/projects/docproj_hu/doc/share/pgpkeys/pgpkeys.ent#22 (text+ko) ====
@@ -1,5 +1,5 @@
-
+
@@ -124,6 +124,7 @@
+
@@ -284,6 +285,7 @@
+
==== //depot/projects/docproj_hu/doc/share/pgpkeys/stas.key#3 (text+ko) ====
@@ -1,55 +1,191 @@
-
+
+uid Stanislav Sedov
+uid Stanislav Sedov (Corporate email)
+uid Stanislav Sedov (Corporate email)
+uid Stanislav Sedov (Corporate email)
+uid Stanislav Sedov (Corporate email)
uid Stanislav Sedov
-uid Stanislav Sedov (Corporate email)
-uid Stanislav Sedov
-sub 1024g/B47898B1 2006-05-20 [expires: 2011-05-19]
+sub 4096R/6FD2025F 2009-05-23
+sub 4096R/98BC2774 2009-05-23
]]>
==== //depot/projects/docproj_hu/doc/share/sgml/mirrors.xml#8 (text+ko) ====
@@ -2,7 +2,7 @@
- $FreeBSD: doc/share/sgml/mirrors.xml,v 1.78 2009/02/23 12:27:32 pgj Exp $
+ $FreeBSD: doc/share/sgml/mirrors.xml,v 1.81 2009/05/21 21:02:58 joerg Exp $
@@ -1461,6 +1461,8 @@
ftp.ru.FreeBSD.orgftp://ftp.ru.FreeBSD.org/pub/FreeBSD/
+ http://ftp.ru.FreeBSD.org/FreeBSD/
+
@@ -1580,6 +1582,8 @@
ftp://ftp.sk.FreeBSD.org/pub/FreeBSD/http://ftp.sk.FreeBSD.org/pub/FreeBSD/http://ftp.sk.FreeBSD.org/pub/FreeBSD/
+
+
==== //depot/projects/docproj_hu/src/release/doc/en_US.ISO8859-1/relnotes/article.sgml#12 (text+ko) ====
@@ -17,7 +17,7 @@
The &os; Project
- $FreeBSD: src/release/doc/en_US.ISO8859-1/relnotes/article.sgml,v 1.1100 2009/05/11 07:57:29 delphij Exp $
+ $FreeBSD: src/release/doc/en_US.ISO8859-1/relnotes/article.sgml,v 1.1101 2009/05/18 22:46:59 delphij Exp $2000
@@ -443,6 +443,9 @@
CVS has been updated from 1.11.17
to a post-1.11.22 snapshot from 10 March 2008.
+ FILE has been updated from 4.23
+ to 5.03.
+
hostapd has been
updated from 0.5.8 to 0.5.10.
==== //depot/projects/docproj_hu/src/release/doc/share/misc/dev.archlist.txt#6 (text+ko) ====
@@ -23,7 +23,7 @@
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
# SUCH DAMAGE.
#
-# $FreeBSD: src/release/doc/share/misc/dev.archlist.txt,v 1.109 2009/04/17 15:54:41 nyan Exp $
+# $FreeBSD: src/release/doc/share/misc/dev.archlist.txt,v 1.110 2009/05/21 10:04:51 brueffer Exp $
#
#
@@ -93,7 +93,6 @@
nfe i386,amd64
ng_bt3c i386,pc98,amd64
ng_ubt i386,pc98,amd64
-nge i386,pc98,amd64
nsp i386,pc98
nve i386,amd64
nxge i386,amd64
==== //depot/projects/docproj_hu/src_7/release/doc/en_US.ISO8859-1/errata/article.sgml#7 (text+ko) ====
@@ -37,7 +37,7 @@
The &os; Project
- $FreeBSD: src/release/doc/en_US.ISO8859-1/errata/article.sgml,v 1.73.4.13 2009/05/04 19:00:25 hrs Exp $
+ $FreeBSD: src/release/doc/en_US.ISO8859-1/errata/article.sgml,v 1.73.4.14 2009/05/20 00:55:26 hrs Exp $2008
@@ -183,6 +183,15 @@
Errata Notice to fix this problem is planned after the
release.
+ [20090507] A bug was found in the &man.fxp.4; driver. This
+ would cause poor TCP performance when TSO is enabled, and the
+ receiver has a smaller MSS than the interface MTU setting. To
+ workaround this issue, one can disable TSO by using
+ &man.ifconfig.8; parameter (per interface
+ basis) or setting net.inet.tcp.tso to
+ 0 (globally on the system). An Errata Notice
+ to fix this problem is planned after the release.
+
Late-Breaking News and Corrections
@@ -190,5 +199,10 @@
&man.malloc.3; implementation and threading library has been
committed to the RELENG_7 branch for public
testing.
+
+ [20090507] A patch to solve the bug in the &man.fxp.4;
+ driver that caused poor TCP performance has been committed to
+ the RELENG_7 branch for public
+ testing.
==== //depot/projects/docproj_hu/www/en/developers.sgml#24 (text+ko) ====
@@ -6,7 +6,7 @@
us to update author names, or the representation of those names (such
as adding email addresses), by just editing a single file.
-$FreeBSD: www/en/developers.sgml,v 1.219 2009/05/05 09:23:45 snb Exp $
+$FreeBSD: www/en/developers.sgml,v 1.221 2009/05/22 22:04:35 jilles Exp $
-->
@@ -249,6 +249,7 @@
+
@@ -542,6 +543,7 @@
+
==== //depot/projects/docproj_hu/www/en/projects/ideas/ideas.xml#11 (text+ko) ====
@@ -15,7 +15,7 @@
- $FreeBSD: www/en/projects/ideas/ideas.xml,v 1.130 2009/03/26 14:14:18 brooks Exp $
+ $FreeBSD: www/en/projects/ideas/ideas.xml,v 1.132 2009/05/22 20:48:46 danger Exp $
@@ -373,7 +373,7 @@
In some recent operating systems, it is common that crashes are
automatically reported to its vendor, which is very helpful for
finding hidden problems that can not be easily triggered by usual
- test cases. Newer GNOME applications also has similar functionalities.
+ test cases. Newer GNOME applications also have similar functionalities.
This project would consist two parts. One is some improvements over
the current savecore rc.d script to teach it how to collect necessary
@@ -578,8 +578,8 @@
In early 2007 we started a project was started to support the
- building of linux device drivers on FreeBSD.
+
In early 2007 we started a project to support
+ building Linux device drivers on FreeBSD.
This was done through an in-kernel emulation layer, which
implements part of the linux kernel API on top of the FreeBSD
kernel API. The initial implementation was good enough to
@@ -588,7 +588,7 @@
href="http://info.iet.unipi.it/~luigi/FreeBSD/linux_bsd_kld.html">here.
The code is actually available as a port, devel/linux-kmod-compat,
and a popular driver that uses this infrastructure is
- multimedia/linux-gspca-kmod .
+ multimedia/linux-gspca-kmod.
We would like to use a similar approach to add support
for DVB devices, which are widely supported in Linux
==== //depot/projects/docproj_hu/www/en/releases/7.2R/errata.html#4 (text+ko) ====
@@ -19,7 +19,7 @@
@@ -122,6 +122,17 @@
lagg(4) driver
in the LACP (IEEE 802.3ad Link Aggregation Control Protocol) mode. An Errata Notice to
fix this problem is planned after the release.
+
+
[20090507] A bug was found in the fxp(4) driver. This
+would cause poor TCP performance when TSO is enabled, and the receiver has a smaller MSS
+than the interface MTU setting. To workaround this issue, one can disable TSO by using
+ifconfig(8)
+-tso parameter (per interface basis) or setting net.inet.tcp.tso to 0 (globally on the
+system). An Errata Notice to fix this problem is planned after the release.
@@ -134,6 +145,12 @@
malloc(3)
implementation and threading library has been committed to the RELENG_7 branch for public testing.
+
+
[20090507] A patch to solve the bug in the fxp(4) driver that
+caused poor TCP performance has been committed to the RELENG_7
+branch for public testing.
==== //depot/projects/docproj_hu/www/share/sgml/events.xml#16 (text+ko) ====
@@ -10,7 +10,7 @@
- $FreeBSD: www/share/sgml/events.xml,v 1.71 2009/04/14 12:29:35 jkoshy Exp $
+ $FreeBSD: www/share/sgml/events.xml,v 1.72 2009/05/18 12:53:22 brueffer Exp $
@@ -30,7 +30,7 @@
UKCambridge
- Universe of Cambridge
+ University of CambridgeThe ninth annual European BSD Conference will take place
@@ -38,6 +38,57 @@
track, tutorials, and FreeBSD developer summit.
+
+ FrOSCon 2009
+ http://www.froscon.org/
+
+ 2009
+ 8
+ 22
+
+
+ 2009
+ 8
+ 23
+
+
+ Germany
+ Sankt Augustin
+ Fachhochschule Bonn-Rhein-Sieg
+ Grantham-Allee 20
+
+ FrOSCon is a two day conference on Free Software
+ and Open Source, taking place in Sankt Augustin near the cities
+ of Bonn and Cologne. The conference revolves around a rich schedule
+ of talks, highlighting current topics in Free Software and Open
+ Source.
+
+
+
+ Kernel Conference Australia 2009
+ http://www.kernelconference.net/
+
+ 2009
+ 7
+ 15
+
+
+ 2009
+ 7
+ 17
+
+
+ Australia
+ Brisbane
+ University of Queensland
+
+
+ Kernel Conference Australia is a Kernel-focused technical conference.
+ Any and all Open Source kernels and the technologies within those kernels are open
+ for discussion. The only hard criteria is that the kernel must be covered by an
+ OSI-approved license.
+
+
BSDday Argentina 2009http://www.bsdday.com.ar/
==== //depot/projects/docproj_hu/www/share/sgml/news.xml#56 (text+ko) ====
@@ -25,7 +25,7 @@
- $FreeBSD: www/share/sgml/news.xml,v 1.254 2009/05/11 07:40:46 murray Exp $
+ $FreeBSD: www/share/sgml/news.xml,v 1.256 2009/05/22 22:08:41 jilles Exp $
@@ -36,6 +36,24 @@
5
+ 22
+
+
+
+
+
+
+ 10
From owner-p4-projects@FreeBSD.ORG Sun May 24 07:30:35 2009
Return-Path:
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id 4C39E1065676; Sun, 24 May 2009 07:30:34 +0000 (UTC)
Delivered-To: perforce@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
by hub.freebsd.org (Postfix) with ESMTP id E369F1065673
for ; Sun, 24 May 2009 07:30:33 +0000 (UTC)
(envelope-from syl@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
[IPv6:2001:4f8:fff6::29])
by mx1.freebsd.org (Postfix) with ESMTP id C904F8FC17
for ; Sun, 24 May 2009 07:30:33 +0000 (UTC)
(envelope-from syl@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4O7UXvb091743
for ; Sun, 24 May 2009 07:30:33 GMT
(envelope-from syl@FreeBSD.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4O7UXPd091741
for perforce@freebsd.org; Sun, 24 May 2009 07:30:33 GMT
(envelope-from syl@FreeBSD.org)
Date: Sun, 24 May 2009 07:30:33 GMT
Message-Id: <200905240730.n4O7UXPd091741@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
syl@FreeBSD.org using -f
From: Sylvestre Gallon
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 162627 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 24 May 2009 07:30:36 -0000
http://perforce.freebsd.org/chv.cgi?CH=162627
Change 162627 by syl@syl_rincewind on 2009/05/24 07:30:23
Implement SoC file for at91sam9261ek.
Import header for sam9261 registers and pio.
Add AT91SAM9261EK config file.
Affected files ...
.. //depot/projects/soc2009/syl_usb/src/sys/arm/at91/at91_pio_sam9261.h#1 add
.. //depot/projects/soc2009/syl_usb/src/sys/arm/at91/at91sam9261reg.h#1 add
.. //depot/projects/soc2009/syl_usb/src/sys/arm/at91/board_at91sam9261ek.c#2 edit
.. //depot/projects/soc2009/syl_usb/src/sys/arm/at91/files.at91#3 edit
.. //depot/projects/soc2009/syl_usb/src/sys/arm/at91/soc_at91rm9200.c#4 edit
.. //depot/projects/soc2009/syl_usb/src/sys/arm/at91/soc_at91sam9261.c#3 edit
.. //depot/projects/soc2009/syl_usb/src/sys/arm/at91/std.at91sam9261ek#1 add
.. //depot/projects/soc2009/syl_usb/src/sys/arm/conf/AT91SAM9261EK#1 add
Differences ...
==== //depot/projects/soc2009/syl_usb/src/sys/arm/at91/board_at91sam9261ek.c#2 (text+ko) ====
@@ -1,0 +1,36 @@
+/*-
+ * Copyright (c) 2009 Sylvestre Gallon. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ * notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ * notice, this list of conditions and the following disclaimer in the
+ * documentation and/or other materials provided with the distribution.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
+ * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
+ * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
+ * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
+ * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
+ * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
+ * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
+ * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
+ * SUCH DAMAGE.
+ */
+
+#include
+#include
+#include
+
+#include
+
+long
+board_init(void)
+{
+ return (at91_ramsize());
+}
==== //depot/projects/soc2009/syl_usb/src/sys/arm/at91/files.at91#3 (text) ====
@@ -22,7 +22,7 @@
# All the SoC we support
#
arm/at91/soc_at91rm9200.c optional at91rm9200
-arm/at91/soc_ar91sam9261.c optional at91sam9261
+arm/at91/soc_at91sam9261.c optional at91sam9261
#
# All the boards we support
#
@@ -30,4 +30,4 @@
arm/at91/board_hl200.c optional at91_board_hl200
arm/at91/board_kb920x.c optional at91_board_kb920x
arm/at91/board_tsc4370.c optional at91_board_tsc4370
-arm/at91/board_at91sam9261ek optional at91_board_at91sam9261ek
+arm/at91/board_at91sam9261ek.c optional at91_board_at91sam9261ek
==== //depot/projects/soc2009/syl_usb/src/sys/arm/at91/soc_at91rm9200.c#4 (text+ko) ====
@@ -275,9 +275,6 @@
{ 0, 0, 0, 0, 0 }
};
-/*
- * Attach stuff SoC dependant.
- */
void
soc_attach(struct at91_softc *sc)
{
==== //depot/projects/soc2009/syl_usb/src/sys/arm/at91/soc_at91sam9261.c#3 (text+ko) ====
@@ -23,10 +23,165 @@
* SUCH DAMAGE.
*/
+
+#include
+#include
+#include
+#include
+
+#include
+#include
+
/*
* Need to calcul the master clock instead of fixing an
* hard coded value.
*/
+uint32_t at91_master_clock = 198656000/2;
-uint32_t at91_master_clock = 198656000/2;
+/* Static device mappings. */
+const struct pmap_devmap at91_devmap[] = {
+ /*
+ * Map the on-board devices VA == PA so that we can access them
+ * with the MMU on or off.
+ */
+ {
+ /*
+ * This at least maps the interrupt controller, the UART
+ * and the timer. Other devices should use newbus to
+ * map their memory anyway.
+ */
+ 0xdff00000,
+ 0xfff00000,
+ 0x100000,
+ VM_PROT_READ|VM_PROT_WRITE,
+ PTE_NOCACHE,
+ },
+ /*
+ * We can't just map the OHCI registers VA == PA, because
+ * AT91RM92_OHCI_BASE belongs to the userland address space.
+ * We could just choose a different virtual address, but a better
+ * solution would probably be to just use pmap_mapdev() to allocate
+ * KVA, as we don't need the OHCI controller before the vm
+ * initialization is done. However, the AT91 resource allocation
+ * system doesn't know how to use pmap_mapdev() yet.
+ */
+ {
+ /*
+ * Add the ohci controller, and anything else that might be
+ * on this chip select for a VA/PA mapping.
+ */
+ AT91SAM9261_OHCI_BASE,
+ AT91SAM9261_OHCI_PA_BASE,
+ AT91SAM9261_OHCI_SIZE,
+ VM_PROT_READ|VM_PROT_WRITE,
+ PTE_NOCACHE,
+ },
+ {
+ 0,
+ 0,
+ 0,
+ 0,
+ 0,
+ }
+};
+
+/*
+ * Standard priority levels for the system. 0 is lowest and 7 is highest.
+ * These values are the ones Atmel uses for its Linux port, which differ
+ * a little form the ones that are in the standard distribution. Also,
+ * the ones marked with 'TWEEK' are different based on experience.
+ */
+
+int at91_irq_prio[32] =
+{
+ 7, /* Advanced Interrupt Controller (FIQ) */
+ 7, /* System Peripherals */
+ 1, /* Parallel IO Controller A */
+ 1, /* Parallel IO Controller B */
+ 1, /* Parallel IO Controller C */
+ 0,
+ 5, /* USART 0 */
+ 5, /* USART 1 */
+ 5, /* USART 2 */
+ 0, /* Multimedia Card Interface */
+ 2, /* USB Device Port */
+ 6, /* Two-Wire Interface */
+ 5, /* Serial Peripheral Interface 0 */
+ 5, /* Serial Peripheral Interface 1 */
+ 4, /* Serial Synchronous Controller 0 */
+ 4, /* Serial Synchronous Controller 1 */
+ 4, /* Serial Synchronous Controller 2 */
+ 0, /* Timer Counter 0 */
+ 0, /* Timer Counter 1 */
+ 0, /* Timer Counter 2 */
+ 2, /* USB Host Port */
+ 3, /* LCD Controller */
+ 0,
+ 0,
+ 0,
+ 0,
+ 0,
+ 0,
+ 0,
+ 0, /* Advanced Interface Controller (IRQ0) */
+ 0, /* Advanced Interface Controller (IRQ1) */
+ 0 /* Advanced Interrupt Controller (IRQ2) */
+};
+
+struct cpu_devs at91_devs[] =
+{
+ /* PIO need to be check */
+ {
+ "at91_udp", 0,
+ AT91SAM9261_BASE + AT91SAM9261_UDP_BASE, AT91SAM9261_UDP_SIZE,
+ AT91SAM9261_IRQ_UDP, AT91SAM9261_IRQ_PIOB
+ },
+ {
+ "ohci", 0,
+ AT91SAM9261_OHCI_BASE, AT91SAM9261_OHCI_SIZE,
+ AT91SAM9261_IRQ_UHP
+ },
+ { 0, 0, 0, 0, 0 }
+};
+
+void
+soc_attach(struct at91_softc *sc)
+{
+ if (rman_manage_region(&sc->sc_mem_rman, AT91SAM9261_OHCI_BASE,
+ AT91SAM9261_OHCI_BASE + AT91SAM9261_OHCI_SIZE - 1) != 0)
+ panic("at91_attach: failed to set up ohci memory");
+}
+
+/*
+ * Accessor for BASE SYS_BASE SYS_SIZE and IRQ_SYSTEM
+ */
+
+uint32_t
+at91_sys_base(void)
+{
+ return (AT91SAM9261_SYS_BASE);
+}
+
+uint32_t
+at91_sys_size(void)
+{
+ return (AT91SAM9261_SYS_SIZE);
+}
+
+uint32_t
+at91_base(void)
+{
+ return (AT91SAM9261_BASE);
+}
+
+uint32_t
+at91_irq_sys(void)
+{
+ return (AT91SAM9261_IRQ_SYSTEM);
+}
+uint32_t
+at91_sdramc_base(void)
+{
+ return (AT91SAM9261_SDRAMC_BASE);
+}
From owner-p4-projects@FreeBSD.ORG Sun May 24 10:18:24 2009
Return-Path:
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id 8D65A1065672; Sun, 24 May 2009 10:18:24 +0000 (UTC)
Delivered-To: perforce@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
by hub.freebsd.org (Postfix) with ESMTP id 4E4D2106564A
for ; Sun, 24 May 2009 10:18:24 +0000 (UTC)
(envelope-from trasz@freebsd.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
[IPv6:2001:4f8:fff6::29])
by mx1.freebsd.org (Postfix) with ESMTP id 3CA638FC0A
for ; Sun, 24 May 2009 10:18:24 +0000 (UTC)
(envelope-from trasz@freebsd.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4OAIOqq017546
for ; Sun, 24 May 2009 10:18:24 GMT
(envelope-from trasz@freebsd.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4OAIOYF017544
for perforce@freebsd.org; Sun, 24 May 2009 10:18:24 GMT
(envelope-from trasz@freebsd.org)
Date: Sun, 24 May 2009 10:18:24 GMT
Message-Id: <200905241018.n4OAIOYF017544@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
trasz@freebsd.org using -f
From: Edward Tomasz Napierala
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 162631 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 24 May 2009 10:18:25 -0000
http://perforce.freebsd.org/chv.cgi?CH=162631
Change 162631 by trasz@trasz_victim on 2009/05/24 10:17:50
Remove unneccessary includes.
Affected files ...
.. //depot/projects/soc2008/trasz_nfs4acl/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/acl_compat.c#12 edit
.. //depot/projects/soc2008/trasz_nfs4acl/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/acl_compat.h#3 edit
Differences ...
==== //depot/projects/soc2008/trasz_nfs4acl/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/acl_compat.c#12 (text+ko) ====
@@ -29,45 +29,10 @@
#include
#include
-
-/* XXX: Most of these isn't needed either. */
#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
+#include
#include
-#include
-#include
-#include
#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
-#include
#include "acl_compat.h"
==== //depot/projects/soc2008/trasz_nfs4acl/sys/cddl/contrib/opensolaris/uts/common/fs/zfs/acl_compat.h#3 (text+ko) ====
@@ -33,4 +33,3 @@
int acl_from_aces(struct acl *aclp, const ace_t *aces, int nentries);
#endif /* ACL_COMPAT_H */
-
From owner-p4-projects@FreeBSD.ORG Sun May 24 10:18:25 2009
Return-Path:
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id ED2321065739; Sun, 24 May 2009 10:18:24 +0000 (UTC)
Delivered-To: perforce@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
by hub.freebsd.org (Postfix) with ESMTP id 67960106566B
for ; Sun, 24 May 2009 10:18:24 +0000 (UTC)
(envelope-from trasz@freebsd.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
[IPv6:2001:4f8:fff6::29])
by mx1.freebsd.org (Postfix) with ESMTP id 544648FC1C
for ; Sun, 24 May 2009 10:18:24 +0000 (UTC)
(envelope-from trasz@freebsd.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4OAIO7G017553
for ; Sun, 24 May 2009 10:18:24 GMT
(envelope-from trasz@freebsd.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4OAIOxb017549
for perforce@freebsd.org; Sun, 24 May 2009 10:18:24 GMT
(envelope-from trasz@freebsd.org)
Date: Sun, 24 May 2009 10:18:24 GMT
Message-Id: <200905241018.n4OAIOxb017549@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
trasz@freebsd.org using -f
From: Edward Tomasz Napierala
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 162632 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 24 May 2009 10:18:26 -0000
http://perforce.freebsd.org/chv.cgi?CH=162632
Change 162632 by trasz@trasz_victim on 2009/05/24 10:18:02
IFC.
Affected files ...
.. //depot/projects/soc2008/trasz_nfs4acl/ObsoleteFiles.inc#24 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/share/man/man4/ipsec.4#2 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/conf/NOTES#32 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/kern/kern_jail.c#18 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/ip_ipsec.c#9 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/tcp_subr.c#21 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/udp_usrreq.c#21 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/udp_var.h#5 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/vinet.h#11 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netinet6/ip6_ipsec.c#7 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netinet6/udp6_usrreq.c#17 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netipsec/ipsec.c#14 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netipsec/ipsec.h#9 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netipsec/ipsec6.h#5 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/netipsec/vipsec.h#7 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/nfsclient/bootp_subr.c#8 integrate
.. //depot/projects/soc2008/trasz_nfs4acl/sys/sys/acl.h#36 edit
.. //depot/projects/soc2008/trasz_nfs4acl/sys/sys/param.h#25 integrate
Differences ...
==== //depot/projects/soc2008/trasz_nfs4acl/ObsoleteFiles.inc#24 (text+ko) ====
@@ -1,5 +1,5 @@
#
-# $FreeBSD: src/ObsoleteFiles.inc,v 1.189 2009/05/22 13:57:44 rwatson Exp $
+# $FreeBSD: src/ObsoleteFiles.inc,v 1.190 2009/05/23 16:54:07 antoine Exp $
#
# This file lists old files (OLD_FILES), libraries (OLD_LIBS) and
# directories (OLD_DIRS) which should get removed at an update. Recently
@@ -18,7 +18,11 @@
OLD_FILES+=etc/rc.d/idmapd
OLD_FILES+=sbin/idmapd
OLD_FILES+=sbin/mount_nfs4
+OLD_FILES+=usr/share/man/man8/idmapd.8.gz
OLD_FILES+=usr/share/man/man8/mount_nfs4.8.gz
+# 20090513: removal of legacy versions of USB network interface drivers
+OLD_FILES+=usr/include/legacy/dev/usb/if_upgtvar.h
+OLD_FILES+=usr/include/legacy/dev/usb/usb_ethersubr.h
# 20090417: removal of legacy versions of USB network interface drivers
OLD_FILES+=usr/include/legacy/dev/usb/if_auereg.h
OLD_FILES+=usr/include/legacy/dev/usb/if_axereg.h
==== //depot/projects/soc2008/trasz_nfs4acl/share/man/man4/ipsec.4#2 (text+ko) ====
@@ -27,9 +27,9 @@
.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
.\" SUCH DAMAGE.
.\"
-.\" $FreeBSD: src/share/man/man4/ipsec.4,v 1.22 2007/08/05 16:16:14 bz Exp $
+.\" $FreeBSD: src/share/man/man4/ipsec.4,v 1.23 2009/05/23 16:42:38 bz Exp $
.\"
-.Dd August 5, 2007
+.Dd May 23, 2009
.Dt IPSEC 4
.Os
.Sh NAME
@@ -37,7 +37,6 @@
.Nd Internet Protocol Security protocol
.Sh SYNOPSIS
.Cd "options IPSEC"
-.Cd "options IPSEC_FILTERTUNNEL"
.Cd "device crypto"
.Pp
.In sys/types.h
@@ -88,9 +87,12 @@
.Pp
To properly filter on the inner packets of an
.Nm
-tunnel with firewalls, add
-.Cd "options IPSEC_FILTERTUNNEL"
-to the kernel configuration file.
+tunnel with firewalls, you can change the values of the following sysctls
+.Bl -column net.inet6.ipsec6.filtertunnel default enable
+.It Sy "Name Default Enable"
+.It net.inet.ipsec.filtertunnel 0 1
+.It net.inet6.ipsec6.filtertunnel 0 1
+.El
.\"
.Ss Kernel interface
.Nm
==== //depot/projects/soc2008/trasz_nfs4acl/sys/conf/NOTES#32 (text+ko) ====
@@ -1,4 +1,4 @@
-# $FreeBSD: src/sys/conf/NOTES,v 1.1538 2009/05/10 00:00:25 kuriyama Exp $
+# $FreeBSD: src/sys/conf/NOTES,v 1.1539 2009/05/23 16:42:38 bz Exp $
#
# NOTES -- Lines that can be cut/pasted into kernel and hints configs.
#
@@ -524,9 +524,10 @@
options IPSEC #IP security (requires device crypto)
#options IPSEC_DEBUG #debug for IP security
#
-# Set IPSEC_FILTERTUNNEL to force packets coming through a tunnel
-# to be processed by any configured packet filtering twice.
-# The default is that packets coming out of a tunnel are _not_ processed;
+# #DEPRECATED#
+# Set IPSEC_FILTERTUNNEL to change the default of the sysctl to force packets
+# coming through a tunnel to be processed by any configured packet filtering
+# twice. The default is that packets coming out of a tunnel are _not_ processed;
# they are assumed trusted.
#
# IPSEC history is preserved for such packets, and can be filtered
==== //depot/projects/soc2008/trasz_nfs4acl/sys/kern/kern_jail.c#18 (text+ko) ====
@@ -27,7 +27,7 @@
*/
#include
-__FBSDID("$FreeBSD: src/sys/kern/kern_jail.c,v 1.100 2009/05/08 14:11:06 zec Exp $");
+__FBSDID("$FreeBSD: src/sys/kern/kern_jail.c,v 1.101 2009/05/23 16:13:26 jamie Exp $");
#include "opt_ddb.h"
#include "opt_inet.h"
@@ -1196,14 +1196,6 @@
if (flags & ~JAIL_GET_MASK)
return (EINVAL);
- if (jailed(td->td_ucred)) {
- /*
- * Don't allow a jailed process to see any jails,
- * not even its own.
- */
- vfs_opterror(opts, "jail not found");
- return (ENOENT);
- }
/* Get the parameter list. */
error = vfs_buildopts(optuio, &opts);
@@ -1211,6 +1203,12 @@
return (error);
errmsg_pos = vfs_getopt_pos(opts, "errmsg");
+ /* Don't allow a jailed process to see any jails, not even its own. */
+ if (jailed(td->td_ucred)) {
+ vfs_opterror(opts, "jail not found");
+ return (ENOENT);
+ }
+
/*
* Find the prison specified by one of: lastjid, jid, name.
*/
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/ip_ipsec.c#9 (text+ko) ====
@@ -28,7 +28,7 @@
*/
#include
-__FBSDID("$FreeBSD: src/sys/netinet/ip_ipsec.c,v 1.17 2009/04/28 11:10:33 trasz Exp $");
+__FBSDID("$FreeBSD: src/sys/netinet/ip_ipsec.c,v 1.18 2009/05/23 16:42:38 bz Exp $");
#include "opt_ipsec.h"
#include "opt_sctp.h"
@@ -71,6 +71,10 @@
extern struct protosw inetsw[];
+#ifdef VIMAGE_GLOBALS
+int ip4_ipsec_filtertunnel;
+#endif
+
/*
* Check if we have to jump over firewall processing for this packet.
* Called from ip_input().
@@ -79,11 +83,14 @@
int
ip_ipsec_filtertunnel(struct mbuf *m)
{
-#if defined(IPSEC) && !defined(IPSEC_FILTERTUNNEL)
+#if defined(IPSEC)
+ INIT_VNET_IPSEC(curvnet);
+
/*
* Bypass packet filtering for packets from a tunnel.
*/
- if (m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL)
+ if (!V_ip4_ipsec_filtertunnel &&
+ m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL)
return 1;
#endif
return 0;
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/tcp_subr.c#21 (text+ko) ====
@@ -30,7 +30,7 @@
*/
#include
-__FBSDID("$FreeBSD: src/sys/netinet/tcp_subr.c,v 1.340 2009/04/30 13:36:26 zec Exp $");
+__FBSDID("$FreeBSD: src/sys/netinet/tcp_subr.c,v 1.341 2009/05/23 17:02:30 bz Exp $");
#include "opt_compat.h"
#include "opt_inet.h"
@@ -373,7 +373,7 @@
&V_tcbinfo.ipi_hashmask);
V_tcbinfo.ipi_porthashbase = hashinit(hashsize, M_PCB,
&V_tcbinfo.ipi_porthashmask);
- V_tcbinfo.ipi_zone = uma_zcreate("inpcb", sizeof(struct inpcb),
+ V_tcbinfo.ipi_zone = uma_zcreate("tcp_inpcb", sizeof(struct inpcb),
NULL, NULL, tcp_inpcb_init, NULL, UMA_ALIGN_PTR, UMA_ZONE_NOFREE);
uma_zone_set_max(V_tcbinfo.ipi_zone, maxsockets);
/*
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/udp_usrreq.c#21 (text+ko) ====
@@ -32,7 +32,7 @@
*/
#include
-__FBSDID("$FreeBSD: src/sys/netinet/udp_usrreq.c,v 1.253 2009/04/30 13:36:26 zec Exp $");
+__FBSDID("$FreeBSD: src/sys/netinet/udp_usrreq.c,v 1.254 2009/05/23 16:51:13 bz Exp $");
#include "opt_ipfw.h"
#include "opt_inet6.h"
@@ -137,6 +137,7 @@
#ifdef VIMAGE_GLOBALS
struct inpcbhead udb; /* from udp_var.h */
struct inpcbinfo udbinfo;
+static uma_zone_t udpcb_zone;
struct udpstat udpstat; /* from udp_var.h */
#endif
@@ -158,6 +159,7 @@
INIT_VNET_INET(curvnet);
uma_zone_set_max(V_udbinfo.ipi_zone, maxsockets);
+ uma_zone_set_max(V_udpcb_zone, maxsockets);
}
static int
@@ -187,13 +189,39 @@
&V_udbinfo.ipi_hashmask);
V_udbinfo.ipi_porthashbase = hashinit(UDBHASHSIZE, M_PCB,
&V_udbinfo.ipi_porthashmask);
- V_udbinfo.ipi_zone = uma_zcreate("udpcb", sizeof(struct inpcb), NULL,
- NULL, udp_inpcb_init, NULL, UMA_ALIGN_PTR, UMA_ZONE_NOFREE);
+ V_udbinfo.ipi_zone = uma_zcreate("udp_inpcb", sizeof(struct inpcb),
+ NULL, NULL, udp_inpcb_init, NULL, UMA_ALIGN_PTR, UMA_ZONE_NOFREE);
uma_zone_set_max(V_udbinfo.ipi_zone, maxsockets);
+
+ V_udpcb_zone = uma_zcreate("udpcb", sizeof(struct udpcb),
+ NULL, NULL, NULL, NULL, UMA_ALIGN_PTR, UMA_ZONE_NOFREE);
+ uma_zone_set_max(V_udpcb_zone, maxsockets);
+
EVENTHANDLER_REGISTER(maxsockets_change, udp_zone_change, NULL,
EVENTHANDLER_PRI_ANY);
}
+int
+udp_newudpcb(struct inpcb *inp)
+{
+ INIT_VNET_INET(curvnet);
+ struct udpcb *up;
+
+ up = uma_zalloc(V_udpcb_zone, M_NOWAIT | M_ZERO);
+ if (up == NULL)
+ return (ENOBUFS);
+ inp->inp_ppcb = up;
+ return (0);
+}
+
+void
+udp_discardcb(struct udpcb *up)
+{
+ INIT_VNET_INET(curvnet);
+
+ uma_zfree(V_udpcb_zone, up);
+}
+
/*
* Subroutine of udp_input(), which appends the provided mbuf chain to the
* passed pcb/socket. The caller must provide a sockaddr_in via udp_in that
@@ -272,6 +300,7 @@
struct udphdr *uh;
struct ifnet *ifp;
struct inpcb *inp;
+ struct udpcb *up;
int len;
struct ip save_ip;
struct sockaddr_in udp_in;
@@ -455,28 +484,25 @@
struct mbuf *n;
n = m_copy(m, 0, M_COPYALL);
- if (last->inp_ppcb == NULL) {
+ up = intoudpcb(last);
+ if (up->u_tun_func == NULL) {
if (n != NULL)
udp_append(last,
ip, n,
iphlen +
sizeof(struct udphdr),
&udp_in);
- INP_RUNLOCK(last);
} else {
/*
* Engage the tunneling protocol we
* will have to leave the info_lock
* up, since we are hunting through
* multiple UDP's.
- *
*/
- udp_tun_func_t tunnel_func;
- tunnel_func = (udp_tun_func_t)last->inp_ppcb;
- tunnel_func(n, iphlen, last);
- INP_RUNLOCK(last);
+ (*up->u_tun_func)(n, iphlen, last);
}
+ INP_RUNLOCK(last);
}
last = inp;
/*
@@ -501,22 +527,18 @@
UDPSTAT_INC(udps_noportbcast);
goto badheadlocked;
}
- if (last->inp_ppcb == NULL) {
+ up = intoudpcb(last);
+ if (up->u_tun_func == NULL) {
udp_append(last, ip, m, iphlen + sizeof(struct udphdr),
&udp_in);
- INP_RUNLOCK(last);
- INP_INFO_RUNLOCK(&V_udbinfo);
} else {
/*
* Engage the tunneling protocol.
*/
- udp_tun_func_t tunnel_func;
-
- tunnel_func = (udp_tun_func_t)last->inp_ppcb;
- tunnel_func(m, iphlen, last);
- INP_RUNLOCK(last);
- INP_INFO_RUNLOCK(&V_udbinfo);
+ (*up->u_tun_func)(m, iphlen, last);
}
+ INP_RUNLOCK(last);
+ INP_INFO_RUNLOCK(&V_udbinfo);
return;
}
@@ -560,18 +582,16 @@
INP_RUNLOCK(inp);
goto badunlocked;
}
- if (inp->inp_ppcb != NULL) {
+ up = intoudpcb(inp);
+ if (up->u_tun_func == NULL) {
+ udp_append(inp, ip, m, iphlen + sizeof(struct udphdr), &udp_in);
+ } else {
/*
* Engage the tunneling protocol.
*/
- udp_tun_func_t tunnel_func;
- tunnel_func = (udp_tun_func_t)inp->inp_ppcb;
- tunnel_func(m, iphlen, inp);
- INP_RUNLOCK(inp);
- return;
+ (*up->u_tun_func)(m, iphlen, inp);
}
- udp_append(inp, ip, m, iphlen + sizeof(struct udphdr), &udp_in);
INP_RUNLOCK(inp);
return;
@@ -1142,18 +1162,19 @@
}
inp = (struct inpcb *)so->so_pcb;
- INP_INFO_WUNLOCK(&V_udbinfo);
inp->inp_vflag |= INP_IPV4;
inp->inp_ip_ttl = V_ip_defttl;
- /*
- * UDP does not have a per-protocol pcb (inp->inp_ppcb).
- * We use this pointer for kernel tunneling pointer.
- * If we ever need to have a protocol block we will
- * need to move this function pointer there. Null
- * in this pointer means "do the normal thing".
- */
- inp->inp_ppcb = NULL;
+
+ error = udp_newudpcb(inp);
+ if (error) {
+ in_pcbdetach(inp);
+ in_pcbfree(inp);
+ INP_INFO_WUNLOCK(&V_udbinfo);
+ return (error);
+ }
+
INP_WUNLOCK(inp);
+ INP_INFO_WUNLOCK(&V_udbinfo);
return (0);
}
@@ -1161,24 +1182,26 @@
udp_set_kernel_tunneling(struct socket *so, udp_tun_func_t f)
{
struct inpcb *inp;
+ struct udpcb *up;
- inp = (struct inpcb *)so->so_pcb;
KASSERT(so->so_type == SOCK_DGRAM, ("udp_set_kernel_tunneling: !dgram"));
KASSERT(so->so_pcb != NULL, ("udp_set_kernel_tunneling: NULL inp"));
if (so->so_type != SOCK_DGRAM) {
/* Not UDP socket... sorry! */
return (ENOTSUP);
}
+ inp = (struct inpcb *)so->so_pcb;
if (inp == NULL) {
/* NULL INP? */
return (EINVAL);
}
INP_WLOCK(inp);
- if (inp->inp_ppcb != NULL) {
+ up = intoudpcb(inp);
+ if (up->u_tun_func != NULL) {
INP_WUNLOCK(inp);
return (EBUSY);
}
- inp->inp_ppcb = f;
+ up->u_tun_func = f;
INP_WUNLOCK(inp);
return (0);
}
@@ -1256,6 +1279,7 @@
{
INIT_VNET_INET(so->so_vnet);
struct inpcb *inp;
+ struct udpcb *up;
inp = sotoinpcb(so);
KASSERT(inp != NULL, ("udp_detach: inp == NULL"));
@@ -1263,9 +1287,13 @@
("udp_detach: not disconnected"));
INP_INFO_WLOCK(&V_udbinfo);
INP_WLOCK(inp);
+ up = intoudpcb(inp);
+ KASSERT(up != NULL, ("%s: up == NULL", __func__));
+ inp->inp_ppcb = NULL;
in_pcbdetach(inp);
in_pcbfree(inp);
INP_INFO_WUNLOCK(&V_udbinfo);
+ udp_discardcb(up);
}
static int
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/udp_var.h#5 (text+ko) ====
@@ -28,7 +28,7 @@
* SUCH DAMAGE.
*
* @(#)udp_var.h 8.1 (Berkeley) 6/10/93
- * $FreeBSD: src/sys/netinet/udp_var.h,v 1.36 2009/04/12 11:42:40 rwatson Exp $
+ * $FreeBSD: src/sys/netinet/udp_var.h,v 1.37 2009/05/23 16:51:13 bz Exp $
*/
#ifndef _NETINET_UDP_VAR_H_
@@ -51,6 +51,19 @@
#define ui_ulen ui_u.uh_ulen
#define ui_sum ui_u.uh_sum
+typedef void(*udp_tun_func_t)(struct mbuf *, int off, struct inpcb *);
+
+/*
+ * UDP control block; one per udp.
+ */
+struct udpcb {
+ udp_tun_func_t u_tun_func; /* UDP kernel tunneling callback. */
+ u_int u_flags; /* Generic UDP flags. */
+};
+
+#define intoudpcb(ip) ((struct udpcb *)(ip)->inp_ppcb)
+#define sotoudpcb(so) (intoudpcb(sotoinpcb(so)))
+
struct udpstat {
/* input statistics: */
u_long udps_ipackets; /* total input packets */
@@ -110,14 +123,15 @@
extern u_long udp_recvspace;
extern int udp_log_in_vain;
+int udp_newudpcb(struct inpcb *);
+void udp_discardcb(struct udpcb *);
+
void udp_ctlinput(int, struct sockaddr *, void *);
void udp_init(void);
void udp_input(struct mbuf *, int);
struct inpcb *udp_notify(struct inpcb *inp, int errno);
int udp_shutdown(struct socket *so);
-
-typedef void(*udp_tun_func_t)(struct mbuf *, int off, struct inpcb *);
int udp_set_kernel_tunneling(struct socket *so, udp_tun_func_t f);
#endif
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netinet/vinet.h#11 (text+ko) ====
@@ -27,7 +27,7 @@
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*
- * $FreeBSD: src/sys/netinet/vinet.h,v 1.15 2009/05/02 08:16:26 zec Exp $
+ * $FreeBSD: src/sys/netinet/vinet.h,v 1.16 2009/05/23 16:51:13 bz Exp $
*/
#ifndef _NETINET_VINET_H_
@@ -149,6 +149,7 @@
struct inpcbhead _udb;
struct inpcbinfo _udbinfo;
+ uma_zone_t _udpcb_zone;
struct udpstat _udpstat;
int _udp_blackhole;
@@ -373,6 +374,7 @@
#define V_twq_2msl VNET_INET(twq_2msl)
#define V_udb VNET_INET(udb)
#define V_udbinfo VNET_INET(udbinfo)
+#define V_udpcb_zone VNET_INET(udpcb_zone)
#define V_udp_blackhole VNET_INET(udp_blackhole)
#define V_udpstat VNET_INET(udpstat)
#define V_useloopback VNET_INET(useloopback)
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netinet6/ip6_ipsec.c#7 (text+ko) ====
@@ -28,7 +28,7 @@
*/
#include
-__FBSDID("$FreeBSD: src/sys/netinet6/ip6_ipsec.c,v 1.15 2009/02/08 09:27:07 bz Exp $");
+__FBSDID("$FreeBSD: src/sys/netinet6/ip6_ipsec.c,v 1.16 2009/05/23 16:42:38 bz Exp $");
#include "opt_ipsec.h"
@@ -76,6 +76,10 @@
extern struct protosw inet6sw[];
+#ifdef VIMAGE_GLOBALS
+int ip6_ipsec6_filtertunnel;
+#endif
+
/*
* Check if we have to jump over firewall processing for this packet.
* Called from ip_input().
@@ -84,11 +88,14 @@
int
ip6_ipsec_filtertunnel(struct mbuf *m)
{
-#if defined(IPSEC) && !defined(IPSEC_FILTERTUNNEL)
+#if defined(IPSEC)
+ INIT_VNET_IPSEC(curvnet);
+
/*
* Bypass packet filtering for packets from a tunnel.
*/
- if (m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL)
+ if (!V_ip6_ipsec6_filtertunnel &&
+ m_tag_find(m, PACKET_TAG_IPSEC_IN_DONE, NULL) != NULL)
return 1;
#endif
return 0;
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netinet6/udp6_usrreq.c#17 (text+ko) ====
@@ -63,7 +63,7 @@
*/
#include
-__FBSDID("$FreeBSD: src/sys/netinet6/udp6_usrreq.c,v 1.110 2009/05/01 11:05:24 bms Exp $");
+__FBSDID("$FreeBSD: src/sys/netinet6/udp6_usrreq.c,v 1.111 2009/05/23 16:51:13 bz Exp $");
#include "opt_inet.h"
#include "opt_inet6.h"
@@ -181,6 +181,7 @@
struct ip6_hdr *ip6;
struct udphdr *uh;
struct inpcb *inp;
+ struct udpcb *up;
int off = *offp;
int plen, ulen;
struct sockaddr_in6 fromsa;
@@ -315,7 +316,10 @@
if ((n = m_copy(m, 0, M_COPYALL)) != NULL) {
INP_RLOCK(last);
- if (last->inp_ppcb != NULL) {
+ up = intoudpcb(last);
+ if (up->u_tun_func == NULL) {
+ udp6_append(last, n, off, &fromsa);
+ } else {
/*
* Engage the tunneling
* protocol we will have to
@@ -324,15 +328,9 @@
* through multiple UDP's.
*
*/
- udp_tun_func_t tunnel_func;
-
- tunnel_func = (udp_tun_func_t)last->inp_ppcb;
- tunnel_func(n, off, last);
- INP_RUNLOCK(last);
- } else {
- udp6_append(last, n, off, &fromsa);
- INP_RUNLOCK(last);
+ (*up->u_tun_func)(n, off, last);
}
+ INP_RUNLOCK(last);
}
}
last = inp;
@@ -361,18 +359,15 @@
}
INP_RLOCK(last);
INP_INFO_RUNLOCK(&V_udbinfo);
- if (last->inp_ppcb != NULL) {
+ up = intoudpcb(last);
+ if (up->u_tun_func == NULL) {
+ udp6_append(last, m, off, &fromsa);
+ } else {
/*
* Engage the tunneling protocol.
*/
- udp_tun_func_t tunnel_func;
-
- tunnel_func = (udp_tun_func_t)inp->inp_ppcb;
- tunnel_func(m, off, last);
- INP_RUNLOCK(last);
- return (IPPROTO_DONE);
+ (*up->u_tun_func)(m, off, last);
}
- udp6_append(last, m, off, &fromsa);
INP_RUNLOCK(last);
return (IPPROTO_DONE);
}
@@ -409,18 +404,16 @@
}
INP_RLOCK(inp);
INP_INFO_RUNLOCK(&V_udbinfo);
- if (inp->inp_ppcb != NULL) {
+ up = intoudpcb(inp);
+ if (up->u_tun_func == NULL) {
+ udp6_append(inp, m, off, &fromsa);
+ } else {
/*
* Engage the tunneling protocol.
*/
- udp_tun_func_t tunnel_func;
- tunnel_func = (udp_tun_func_t)inp->inp_ppcb;
- tunnel_func(m, off, inp);
- INP_RUNLOCK(inp);
- return (IPPROTO_DONE);
+ (*up->u_tun_func)(m, off, inp);
}
- udp6_append(inp, m, off, &fromsa);
INP_RUNLOCK(inp);
return (IPPROTO_DONE);
@@ -820,7 +813,6 @@
return (error);
}
inp = (struct inpcb *)so->so_pcb;
- INP_INFO_WUNLOCK(&V_udbinfo);
inp->inp_vflag |= INP_IPV6;
if ((inp->inp_flags & IN6P_IPV6_V6ONLY) == 0)
inp->inp_vflag |= INP_IPV4;
@@ -833,7 +825,16 @@
* which may match an IPv4-mapped IPv6 address.
*/
inp->inp_ip_ttl = V_ip_defttl;
+
+ error = udp_newudpcb(inp);
+ if (error) {
+ in_pcbdetach(inp);
+ in_pcbfree(inp);
+ INP_INFO_WUNLOCK(&V_udbinfo);
+ return (error);
+ }
INP_WUNLOCK(inp);
+ INP_INFO_WUNLOCK(&V_udbinfo);
return (0);
}
@@ -968,15 +969,19 @@
{
INIT_VNET_INET(so->so_vnet);
struct inpcb *inp;
+ struct udpcb *up;
inp = sotoinpcb(so);
KASSERT(inp != NULL, ("udp6_detach: inp == NULL"));
INP_INFO_WLOCK(&V_udbinfo);
INP_WLOCK(inp);
+ up = intoudpcb(inp);
+ KASSERT(up != NULL, ("%s: up == NULL", __func__));
in_pcbdetach(inp);
in_pcbfree(inp);
INP_INFO_WUNLOCK(&V_udbinfo);
+ udp_discardcb(up);
}
static int
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netipsec/ipsec.c#14 (text+ko) ====
@@ -1,4 +1,4 @@
-/* $FreeBSD: src/sys/netipsec/ipsec.c,v 1.49 2009/04/30 13:36:26 zec Exp $ */
+/* $FreeBSD: src/sys/netipsec/ipsec.c,v 1.50 2009/05/23 16:42:38 bz Exp $ */
/* $KAME: ipsec.c,v 1.103 2001/05/24 07:14:18 sakane Exp $ */
/*-
@@ -167,6 +167,9 @@
SYSCTL_V_STRUCT(V_NET, vnet_ipsec, _net_inet_ipsec, OID_AUTO,
ipsecstats, CTLFLAG_RD, ipsec4stat, ipsecstat,
"IPsec IPv4 statistics.");
+SYSCTL_V_INT(V_NET, vnet_ipsec, _net_inet_ipsec, OID_AUTO,
+ filtertunnel, CTLFLAG_RW, ip4_ipsec_filtertunnel, 0,
+ "If set filter packets from an IPsec tunnel.");
#ifdef REGRESSION
#ifdef VIMAGE_GLOBALS
@@ -228,6 +231,9 @@
SYSCTL_V_STRUCT(V_NET, vnet_ipsec, _net_inet6_ipsec6, IPSECCTL_STATS,
ipsecstats, CTLFLAG_RD, ipsec6stat, ipsecstat,
"IPsec IPv6 statistics.");
+SYSCTL_V_INT(V_NET, vnet_ipsec, _net_inet6_ipsec6, OID_AUTO,
+ filtertunnel, CTLFLAG_RW, ip6_ipsec6_filtertunnel, 0,
+ "If set filter packets from an IPsec tunnel.");
#endif /* INET6 */
static int ipsec_setspidx_inpcb __P((struct mbuf *, struct inpcb *));
@@ -273,6 +279,11 @@
V_ip4_ah_net_deflev = IPSEC_LEVEL_USE;
V_ip4_ipsec_ecn = 0; /* ECN ignore(-1)/forbidden(0)/allowed(1) */
V_ip4_esp_randpad = -1;
+#ifdef IPSEC_FILTERTUNNEL
+ V_ip4_ipsec_filtertunnel = 1;
+#else
+ V_ip4_ipsec_filtertunnel = 0;
+#endif
V_crypto_support = CRYPTOCAP_F_HARDWARE | CRYPTOCAP_F_SOFTWARE;
@@ -287,6 +298,11 @@
V_ip6_ah_trans_deflev = IPSEC_LEVEL_USE;
V_ip6_ah_net_deflev = IPSEC_LEVEL_USE;
V_ip6_ipsec_ecn = 0; /* ECN ignore(-1)/forbidden(0)/allowed(1) */
+#ifdef IPSEC_FILTERTUNNEL
+ V_ip6_ipsec6_filtertunnel = 1;
+#else
+ V_ip6_ipsec6_filtertunnel = 0;
+#endif
#endif
}
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netipsec/ipsec.h#9 (text+ko) ====
@@ -1,4 +1,4 @@
-/* $FreeBSD: src/sys/netipsec/ipsec.h,v 1.23 2009/02/08 09:27:07 bz Exp $ */
+/* $FreeBSD: src/sys/netipsec/ipsec.h,v 1.24 2009/05/23 16:42:38 bz Exp $ */
/* $KAME: ipsec.h,v 1.53 2001/11/20 08:32:38 itojun Exp $ */
/*-
@@ -348,6 +348,7 @@
extern int ip4_ah_offsetmask;
extern int ip4_ipsec_dfbit;
extern int ip4_ipsec_ecn;
+extern int ip4_ipsec_filtertunnel;
extern int ip4_esp_randpad;
extern int crypto_support;
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netipsec/ipsec6.h#5 (text+ko) ====
@@ -1,4 +1,4 @@
-/* $FreeBSD: src/sys/netipsec/ipsec6.h,v 1.7 2009/02/08 09:27:07 bz Exp $ */
+/* $FreeBSD: src/sys/netipsec/ipsec6.h,v 1.8 2009/05/23 16:42:38 bz Exp $ */
/* $KAME: ipsec.h,v 1.44 2001/03/23 08:08:47 itojun Exp $ */
/*-
@@ -47,6 +47,7 @@
extern int ip6_ah_trans_deflev;
extern int ip6_ah_net_deflev;
extern int ip6_ipsec_ecn;
+extern int ip6_ipsec6_filtertunnel;
struct inpcb;
==== //depot/projects/soc2008/trasz_nfs4acl/sys/netipsec/vipsec.h#7 (text+ko) ====
@@ -27,7 +27,7 @@
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*
- * $FreeBSD: src/sys/netipsec/vipsec.h,v 1.8 2009/05/02 08:16:26 zec Exp $
+ * $FreeBSD: src/sys/netipsec/vipsec.h,v 1.9 2009/05/23 16:42:38 bz Exp $
*/
#ifndef _NETIPSEC_VIPSEC_H_
@@ -57,6 +57,7 @@
int _ip4_ah_offsetmask;
int _ip4_ipsec_dfbit;
int _ip4_ipsec_ecn;
+ int _ip4_ipsec_filtertunnel;
int _ip4_esp_randpad;
int _ipsec_replay;
@@ -90,6 +91,7 @@
int _ip6_ah_trans_deflev;
int _ip6_ah_net_deflev;
int _ip6_ipsec_ecn;
+ int _ip6_ipsec6_filtertunnel;
int _ah_enable;
int _ah_cleartos;
@@ -142,12 +144,14 @@
#define V_ip4_esp_trans_deflev VNET_IPSEC(ip4_esp_trans_deflev)
#define V_ip4_ipsec_dfbit VNET_IPSEC(ip4_ipsec_dfbit)
#define V_ip4_ipsec_ecn VNET_IPSEC(ip4_ipsec_ecn)
+#define V_ip4_ipsec_filtertunnel VNET_IPSEC(ip4_ipsec_filtertunnel)
#define V_ip6_ah_net_deflev VNET_IPSEC(ip6_ah_net_deflev)
#define V_ip6_ah_trans_deflev VNET_IPSEC(ip6_ah_trans_deflev)
#define V_ip6_esp_net_deflev VNET_IPSEC(ip6_esp_net_deflev)
#define V_ip6_esp_randpad VNET_IPSEC(ip6_esp_randpad)
#define V_ip6_esp_trans_deflev VNET_IPSEC(ip6_esp_trans_deflev)
#define V_ip6_ipsec_ecn VNET_IPSEC(ip6_ipsec_ecn)
+#define V_ip6_ipsec6_filtertunnel VNET_IPSEC(ip6_ipsec6_filtertunnel)
#define V_ipcomp_enable VNET_IPSEC(ipcomp_enable)
#define V_ipcompstat VNET_IPSEC(ipcompstat)
#define V_ipip_allow VNET_IPSEC(ipip_allow)
==== //depot/projects/soc2008/trasz_nfs4acl/sys/nfsclient/bootp_subr.c#8 (text+ko) ====
@@ -41,7 +41,7 @@
*/
#include
-__FBSDID("$FreeBSD: src/sys/nfsclient/bootp_subr.c,v 1.78 2009/05/23 00:07:55 bz Exp $");
+__FBSDID("$FreeBSD: src/sys/nfsclient/bootp_subr.c,v 1.79 2009/05/23 16:27:42 bz Exp $");
#include "opt_route.h"
#include "opt_bootp.h"
@@ -359,6 +359,7 @@
void
bootpboot_p_rtlist(void)
{
+ INIT_VNET_NET(curvnet);
printf("Routing table:\n");
RADIX_NODE_HEAD_RLOCK(V_rt_tables[0][AF_INET]); /* could sleep XXX */
@@ -383,6 +384,7 @@
void
bootpboot_p_iflist(void)
{
+ INIT_VNET_NET(curvnet);
struct ifnet *ifp;
struct ifaddr *ifa;
@@ -1592,6 +1594,7 @@
void
bootpc_init(void)
{
+ INIT_VNET_NET(curvnet);
struct bootpc_ifcontext *ifctx, *nctx; /* Interface BOOTP contexts */
struct bootpc_globalcontext *gctx; /* Global BOOTP context */
struct ifnet *ifp;
==== //depot/projects/soc2008/trasz_nfs4acl/sys/sys/acl.h#36 (text+ko) ====
@@ -1,5 +1,6 @@
/*-
* Copyright (c) 1999-2001 Robert N. M. Watson
+ * Copyright (c) 2008 Edward Tomasz Napierała
* All rights reserved.
*
* This software was developed by Robert Watson for the TrustedBSD Project.
@@ -25,7 +26,7 @@
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*
- * $FreeBSD: src/sys/sys/acl.h,v 1.32 2009/05/22 15:56:43 trasz Exp $
+ * $FreeBSD: src/sys/sys/acl.h,v 1.33 2009/05/23 17:09:47 trasz Exp $
*/
/*
* Developed by the TrustedBSD Project.
@@ -40,7 +41,7 @@
#include
/*
- * POSIX.1e ACL types and related constants.
+ * POSIX.1e and NFSv4 ACL types and related constants.
*/
typedef uint32_t acl_tag_t;
@@ -53,7 +54,7 @@
/*
* With 254 entries, "struct acl_t_struct" is exactly one 4kB page big.
- * Note that with NFS4 ACLs, the maximum number of ACL entries one
+ * Note that with NFSv4 ACLs, the maximum number of ACL entries one
* may set on file or directory is about half of ACL_MAX_ENTRIES.
*
* If you increase this, you might also need to increase
@@ -110,7 +111,7 @@
/*
* Internal ACL structure, used in libc, kernel APIs and for on-disk
- * storage of NFS4 ACLs. POSIX.1e ACLs use "struct oldacl" for on-disk
+ * storage of NFSv4 ACLs. POSIX.1e ACLs use "struct oldacl" for on-disk
* storage.
*/
struct acl {
@@ -167,7 +168,7 @@
#define ACL_EVERYONE 0x00000040
/*
- * Possible valid values for ae_entry_type field.
+ * Possible valid values for ae_entry_type field, valid only for NFSv4 ACLs.
*/
#define ACL_ENTRY_TYPE_ALLOW 0x0100
#define ACL_ENTRY_TYPE_DENY 0x0200
@@ -185,7 +186,7 @@
#define ACL_TYPE_NFS4 0x00000004
/*
- * Possible flags in ae_perm field for POSIX.1e ACLs. Note
+ * Possible bits in ae_perm field for POSIX.1e ACLs. Note
* that ACL_EXECUTE may be used in both NFSv4 and POSIX.1e ACLs.
*/
#define ACL_EXECUTE 0x0001
@@ -196,25 +197,25 @@
#define ACL_POSIX1E_BITS (ACL_EXECUTE | ACL_WRITE | ACL_READ)
/*
- * Possible flags in ae_perm field for NFSv4 ACLs.
+ * Possible bits in ae_perm field for NFSv4 ACLs.
*/
-#define ACL_READ_DATA 0x00000020
-#define ACL_LIST_DIRECTORY 0x00000020
-#define ACL_WRITE_DATA 0x00000040
-#define ACL_ADD_FILE 0x00000040
-#define ACL_APPEND_DATA 0x00000080
-#define ACL_ADD_SUBDIRECTORY 0x00000080
-#define ACL_READ_NAMED_ATTRS 0x00000100
-#define ACL_WRITE_NAMED_ATTRS 0x00000200
+#define ACL_READ_DATA 0x00000008
+#define ACL_LIST_DIRECTORY 0x00000008
+#define ACL_WRITE_DATA 0x00000010
+#define ACL_ADD_FILE 0x00000010
+#define ACL_APPEND_DATA 0x00000020
+#define ACL_ADD_SUBDIRECTORY 0x00000020
+#define ACL_READ_NAMED_ATTRS 0x00000040
+#define ACL_WRITE_NAMED_ATTRS 0x00000080
/* ACL_EXECUTE is defined above. */
-#define ACL_DELETE_CHILD 0x00000400
-#define ACL_READ_ATTRIBUTES 0x00000800
-#define ACL_WRITE_ATTRIBUTES 0x00001000
-#define ACL_DELETE 0x00002000
-#define ACL_READ_ACL 0x00004000
-#define ACL_WRITE_ACL 0x00008000
-#define ACL_WRITE_OWNER 0x00010000
-#define ACL_SYNCHRONIZE 0x00020000
+#define ACL_DELETE_CHILD 0x00000100
+#define ACL_READ_ATTRIBUTES 0x00000200
+#define ACL_WRITE_ATTRIBUTES 0x00000400
+#define ACL_DELETE 0x00000800
+#define ACL_READ_ACL 0x00001000
+#define ACL_WRITE_ACL 0x00002000
+#define ACL_WRITE_OWNER 0x00004000
+#define ACL_SYNCHRONIZE 0x00008000
#define ACL_NFS4_PERM_BITS (ACL_READ_DATA | ACL_WRITE_DATA | \
ACL_APPEND_DATA | ACL_READ_NAMED_ATTRS | ACL_WRITE_NAMED_ATTRS | \
@@ -266,6 +267,7 @@
#define ACL_PRESERVE_MASK (~ACL_OVERRIDE_MASK)
#ifdef _KERNEL
+
/*
* Filesystem-independent code to move back and forth between POSIX mode and
* POSIX.1e ACL representations.
==== //depot/projects/soc2008/trasz_nfs4acl/sys/sys/param.h#25 (text+ko) ====
>>> TRUNCATED FOR MAIL (1000 lines) <<<
From owner-p4-projects@FreeBSD.ORG Sun May 24 10:22:29 2009
Return-Path:
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id 35D231065670; Sun, 24 May 2009 10:22:29 +0000 (UTC)
Delivered-To: perforce@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
by hub.freebsd.org (Postfix) with ESMTP id E9CA2106566B
for ; Sun, 24 May 2009 10:22:28 +0000 (UTC)
(envelope-from pgj@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
[IPv6:2001:4f8:fff6::29])
by mx1.freebsd.org (Postfix) with ESMTP id D730E8FC0C
for ; Sun, 24 May 2009 10:22:28 +0000 (UTC)
(envelope-from pgj@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4OAMSGS017895
for ; Sun, 24 May 2009 10:22:28 GMT
(envelope-from pgj@FreeBSD.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4OAMSDD017893
for perforce@freebsd.org; Sun, 24 May 2009 10:22:28 GMT
(envelope-from pgj@FreeBSD.org)
Date: Sun, 24 May 2009 10:22:28 GMT
Message-Id: <200905241022.n4OAMSDD017893@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
pgj@FreeBSD.org using -f
From: Gabor Pali
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 162633 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 24 May 2009 10:22:29 -0000
http://perforce.freebsd.org/chv.cgi?CH=162633
Change 162633 by pgj@petymeg on 2009/05/24 10:21:53
MFen (doc):
1.87 -> 1.89 hu_HU.ISO8859-2/books/handbook/firewalls/chapter.sgml
1.116 -> 1.118 hu_HU.ISO8859-2/books/handbook/network-servers/chapter.sgml
Affected files ...
.. //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/books/handbook/firewalls/chapter.sgml#18 edit
.. //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/books/handbook/network-servers/chapter.sgml#27 edit
Differences ...
==== //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/books/handbook/firewalls/chapter.sgml#18 (text+ko) ====
@@ -7,7 +7,7 @@
==== //depot/projects/docproj_hu/doc/hu_HU.ISO8859-2/books/handbook/network-servers/chapter.sgml#27 (text+ko) ====
@@ -7,7 +7,7 @@
@@ -3501,7 +3501,7 @@
protokoll
DHCP
- internetes szoftverkonzorcium
+ internetes rendszerkonzorcium
(ISC)A Dinamikus állomáskonfigurációs
@@ -3511,8 +3511,8 @@
és miként tudja azon belül megszerezni a
kommunikációhoz szükséges
információkat. A &os; 6.0 elõtti
- változatai az ISC (Internet Software Consortium, vagyis
- az internetes szoftverkonzorcium) által kidolgozott DHCP
+ változatai az ISC (Internet Systems Consortium, vagyis
+ az internetes rendszerkonzorcium) által kidolgozott DHCP
kliens (&man.dhclient.8;) implementációját
tartalmazzák. A késõbbi verziókban
pedig az OpenBSD 3.7 verziójából
@@ -3785,7 +3785,7 @@
Ebben a szakaszban arról olvashatunk, hogy
miként kell egy &os; típusú rendszert
DHCP szervernek beállítani, ha az ISC
- (internetes szoftverkonzorcium) DHCP szerverét
+ (internetes rendszerkonzorcium) DHCP szerverét
használjuk.Ez a szerver nem része a &os;-nek, ezért a
@@ -4156,7 +4156,7 @@
tárolnak és táraznak.A BIND fejlesztését jelenleg az Internet
- Software Consortium ()
+ Systems Consortium ()
felügyeli.
@@ -4199,8 +4199,7 @@
- named, BIND,
- névszerver (name server)
+ named, BINDA &os;-n belüli BIND névszerver
különbözõ
megnevezései.
@@ -4218,9 +4217,7 @@
Inverz névfeloldás (reverse
DNS)
- A rendes névfeloldás
- ellentéte, vagyis az
- IP-címek
+ Az IP-címek
leképzése hálózati
nevekre.
@@ -4258,8 +4255,9 @@
- A .
- gyökérzóna.
+ A gyökérzónára a
+ leírásokban általában
+ . néven szoktak hivatkozni.
@@ -4278,8 +4276,8 @@
A 1.168.192.in-addr.arpa egy olyan
zóna, amelyek a 192.168.1.*
- IP-tartományban szereplõ
- összes címet jelöli.
+ IP-címtartományban
+ szereplõ összes címet jelöli.
@@ -4451,11 +4449,13 @@
A named alapértelmezett
beállítása szerint egy &man.chroot.8;
környezetben futó egyszerû
- névfeloldást végzõ szerver. Ezzel a
+ névfeloldást végzõ szerver, amely a
+ helyi IPv4 interfészen (127.0.0.1) fogadja a
+ kéréseket. Ezzel a
beállítással a következõ
parancson keresztül tudjuk elindítani:
- &prompt.root; /etc/rc.d/named forcestart
+ &prompt.root; /etc/rc.d/named onestartHa engedélyezni akarjuk a
named démont minden egyes
@@ -4503,32 +4503,6 @@
részét.
- A make-localhost
- használata
-
- Ha a helyi gépen egy központi
- zónát akarunk beállítani, akkor
- lépjünk be az /etc/namedb könyvtárba
- és futtassuk le a következõ parancsot:
-
- &prompt.root; sh make-localhost
-
- Ha nem történt semmilyen hiba, akkor a
- master
- alkönyvtárban most meg kell jelennie egy új
- állománynak. A helyi
- tartománynévhez tartozó
- állomány a localhost.rev,
- valamint IPv6 környezetben a
- localhost-v6.rev. Alapértelmezett
- konfigurációs állományként
- a named.conf ehhez tartalmaz minden
- szükséges információt.
-
-
-
- /etc/namedb/named.conf// $FreeBSD$
@@ -4544,6 +4518,7 @@
//
options {
+ // A chroot könyvtárhoz relatív elérési út, amennyiben létezik
directory "/etc/namedb";
pid-file "/var/run/named/pid";
dump-file "/var/dump/named_dump.db";
@@ -4562,12 +4537,12 @@
// egy IPv6 címet, vagy az "any" kulcsszót.
// listen-on-v6 { ::1; };
-// A "forwarders" blokk mellett a következõ sorral megkérhetjük a
-// névszervert, hogy önmagától soha nem kezdeményezzen kéréseket,
-// hanem mindig az iménti helyen megjelölt szerverekhez irányítsa
-// ezeket:
-//
-// forward only;
+// Az alábbi zónákat már a lentebb található üres zónák eleve lefedik.
+// Ha tehát a lenti üres zónákat kivesszük a konfigurációból, akkor
+// ezeket a sorokat is tegyük megjegyzésbe.
+ disable-empty-zone "255.255.255.255.IN-ADDR.ARPA";
+ disable-empty-zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
+ disable-empty-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA";
// Ha a szolgáltatónk névszervert is elérhetõvé tett számunkra, akkor
// itt adjuk meg annak az IP-címét és engedélyezzük az alábbi sort.
@@ -4577,7 +4552,23 @@
forwarders {
127.0.0.1;
};
-*/
+*
+
+// Ha a 'forwarders' rész nem üres, akkor alapértelmezés szerint a
+// 'forward first' értékkel rendelkezik. Ekkor a kérést a helyi szerver
+// kapja abban az esetben, amikor a 'forwarders' részben megadott
+// szerverek nem tudják megválaszolni. Emellett a névszerverben a
+// következõ sor hozzáadásával letilthatjuk, hogy önmagától ne
+// kezdeményezzen kéréseket:
+// forward only;
+
+// Ha a kérések továbbítását az /etc/resolv.conf állományban megadott
+// bejegyzések mentén szeretnénk automatikusan konfigurálni, akkor vegyük
+// ki a megjegyzésbõl az alábbi sort és adjuk hozzá az /etc/rc.conf
+// állományhoz a name_auto_forward=yes sort. Emellett használható még a
+// named_auto_forward_only beállítás is (amely fentebb leírt funkciót
+// valósítja meg).
+// include "/etc/namedb/auto_forward.conf";
Ahogy arról a megjegyzésekben is szó
esik, úgy tudjuk aktiválni a
@@ -4609,65 +4600,220 @@
/*
- * Ha köztünk és az elérni kívánt névszerverek között tûzfal
- * is található, akkor az alábbi "query-source" direktívát is
- * engedélyeznünk kell. A BIND korábbi változatait mindig az
- * 53-as porton keresztül küldték el a kéréseiket, de BIND
- * nyolcadik verziójától kezdve alapértelmezés szerint
- * erre a feladatra már egy véletlenszerûen választott, nem
- * privilegizált UDP portot használnak.
+ A BIND legújabb változataiban alapértelmezés szerint minden egyes
+ kimenõ kérésnél más, véletlenszerûen választott UDP portot
+ használnak, ezáltal jelentõs mértékben csökkenthetõ a gyorsítótár
+ meghamisíthatóságának (cache poisoning) esélye. Javasoljuk
+ mindenkinek, hogy használják ki ezt a lehetõséget és eszerint
+ állítsák be a tûzfalakat.
+
+ Ha nem sikerül a tûzfalat hozzáigazítani ehhez a
+ viselkedéshez AKKOR ÉS CSAK IS AKKOR engedélyezzük a lenti
+ beállítást. Alkalmazásával sokkal kevésbé lesz ellenálló a
+ névszerver a különbözõ hamisítási kísérletekkel szemben,
+ ezért lehetõség szerint kerüljük el.
+
+ Az NNNNN helyére egy 49160 és 65530 közti számot kell
+ beírnunk.
*/
- // query-source address * port 53;
+ // query-source address * port NNNNN;
};
// Ha engedélyezzük a helyi névszervert, akkor az /etc/resolv.conf
// állományban elsõ helyen megadni a 127.0.0.1 címet. Sõt, az
// /etc/rc.conf állományból se felejtsük ki.
+// A hagyományos "root-hints" megoldás. Használjuk ezt VAGY a lentebb
+// megadott alárendelt zónákat.
+zone "." { type hint; file "named.root"; };
+
+/* Több szempontból is elõnyös, ha a következõ zónákat alárendeljük a
+ gyökér névfeloldó szervereknek:
+ 1. A helyi felhasználók kéréseit gyorsabban tudjuk feloldalni.
+ 2. A gyökérszerverek felé nem megy semmilyen hamis forgalom.
+ 3. A gyökérszerverek meghibásodása vagy elosztott DoS támadás
+ esetén rugalmasabban tudunk reagálni.
+
+ Másfelöl azonban ez a módszer a "hints" állomány alkalmazásával
+ szemben több felügyeletet igényel, mivel figyelnünk kell, nehogy
+ egy váratlan meghibásodás mûködésképtelenné tegye a
+ szerverünket. Ez a megoldás leginkább a sok klienst kiszolgáló
+ névszerverek esetén bizonyulhat jövedelmezõbbnek. Óvatosan
+ bánjunk vele!
+
+ A módszer alkalmazásához vegyük ki a megjegyzésbõl a következõ
+ bejegyzéseket és tegyük megjegyzésbe a fenti hint zónát.
+*/
+
zone "." {
- type hint;
- file "named.root";
+ type slave;
+ file "slave/root.slave";
+ masters {
+ 192.5.5.241; // F.ROOT-SERVERS.NET.
+ };
+ notify no;
};
-zone "0.0.127.IN-ADDR.ARPA" {
- type master;
- file "master/localhost.rev";
+zone "arpa" {
+ type slave;
+ file "slave/arpa.slave";
+ masters {
+ 192.5.5.241; // F.ROOT-SERVERS.NET.
+ };
+ notify no;
+}
+
+zone "in-addr.arpa" {
+ type slave;
+ file "slave/in-addr.arpa.slave";
+ masters {
+ 192.5.5.241; // F.ROOT-SERVERS.NET.
+ };
+ notify no;
};
+*/
+
+/* Az alábbi zónák helyi kiszolgálásával meg tudjuk akadályozni, hogy
+ a belõlük indított kérések elhagyják a hálózatunkat és a elérjük
+ a gyökér névfeloldó szervereket. Ez a megközelítés két komoly
+ elõnnyel rendelkezik:
+ 1. A helyi felhasználók kéréseit gyorsabban tudjuk
+ megválaszolni.
+ 2. A gyökérszerverek felé nem továbbítódik semmilyen hamis
+ forgalom.
+*/
+// RFC 1912
+zone "localhost" { type master; file "master/localhost-forward.db"; };
+zone "127.in-addr.arpa" { type master; file "master/localhost-reverse.db"; };
+zone "255.in-addr.arpa" { type master; file "master/empty.db"; };
+
+// A helyi IPv6 címek részére létrehozott RFC 1912-szerû zóna
+zone "0.ip6.arpa" { type master; file "master/localhost-reverse.db"; };
+
+// "Ez" a hálózat (RFC 1912 és 3330)
+zone "0.in-addr.arpa" { type master; file "master/empty.db"; };
+
+// Magáncélú hálózatok (RFC 1918)
+zone "10.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "16.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "17.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "18.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "19.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "20.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "21.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "22.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "23.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "24.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "25.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "26.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "27.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "28.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "29.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "30.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "31.172.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "168.192.in-addr.arpa" { type master; file "master/empty.db"; };
+
+// Helyi link/APIPA (RFC 3330 és 3927)
+zone "254.169.in-addr.arpa" { type master; file "master/empty.db"; };
+
+// Dokumentációs próbahálózat (RFC 3330)
+zone "2.0.192.in-addr.arpa" { type master; file "master/empty.db"; };
+
+// Útválasztási teljesítmény tesztelésére (RFC 3330)
+zone "18.198.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "19.198.in-addr.arpa" { type master; file "master/empty.db"; };
+
+// Az IANA részére fentartott - a régi E osztályú címtér
+zone "240.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "241.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "242.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "243.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "244.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "245.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "246.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "247.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "248.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "249.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "250.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "251.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "252.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "253.in-addr.arpa" { type master; file "master/empty.db"; };
+zone "254.in-addr.arpa" { type master; file "master/empty.db"; };
+
+// Hozzárendelés nélküli IPv6-címek (RFC 4291)
+zone "1.ip6.arpa" { type master; file "master/empty.db"; };
+zone "3.ip6.arpa" { type master; file "master/empty.db"; };
+zone "4.ip6.arpa" { type master; file "master/empty.db"; };
+zone "5.ip6.arpa" { type master; file "master/empty.db"; };
+zone "6.ip6.arpa" { type master; file "master/empty.db"; };
+zone "7.ip6.arpa" { type master; file "master/empty.db"; };
+zone "8.ip6.arpa" { type master; file "master/empty.db"; };
+zone "9.ip6.arpa" { type master; file "master/empty.db"; };
+zone "a.ip6.arpa" { type master; file "master/empty.db"; };
+zone "b.ip6.arpa" { type master; file "master/empty.db"; };
+zone "c.ip6.arpa" { type master; file "master/empty.db"; };
+zone "d.ip6.arpa" { type master; file "master/empty.db"; };
+zone "e.ip6.arpa" { type master; file "master/empty.db"; };
+zone "0.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "1.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "2.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "3.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "4.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "5.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "6.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "7.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "8.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "9.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "a.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "b.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "0.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "1.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "2.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "3.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "4.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "5.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "6.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "7.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+
+// IPv6 ULA (RFC 4193)
+zone "c.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "d.f.ip6.arpa" { type master; file "master/empty.db"; };
-// RFC 3152
-zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA" {
- type master;
- file "master/localhost-v6.rev";
-};
+// IPv6 helyi link (RFC 4291)
+zone "8.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "9.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "a.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "b.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+
+// Elavult IPv6 helyi címek (RFC 3879)
+zone "c.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "d.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "e.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+zone "f.e.f.ip6.arpa" { type master; file "master/empty.db"; };
+
+// Az IP6.INT már elavult (RFC 4159)
+zone "ip6.int" { type master; file "master/empty.db"; };
// FONTOS: Ne használjuk ezeket az IP-címeket, mert nem valódiak,
// csupán illusztrációs és dokumentációs célokból adtuk meg!
//
// Az alárendelt zónák beállításaira vonatkozó bejegyzések. Érdemes
// ilyet beállítani legalább ahhoz a zónához, amelyhez a tartományunk is
-// tartozik. Az elsõdleges zónához tartozó IP-címet érdeklõdjük meg
+// tartozik. Az elsõdleges névszerverhez tartozó IP-címet érdeklõdjük meg
// az illetékes hálózati rendszergazdától.
//
-// Soha ne felejtsünk el megadni zónát az inverz kereséshez
-// IN-ADDR.ARPA)! (A neve a IP-cím tagjainak fordított sorrendjébõl
-// származik, amelyhez hozzátoldunk még egy ".IN-ADDR.ARPA" részt.)
+// Soha ne felejtsünk el megadni zónát az inverz kereséshez! A neve az IP-cím
+// tagjainak fordított sorrendjébõl // származik, amelyhez hozzátoldunk még egy
+// ".IN-ADDR.ARPA" (illetve IPv6 esetén ".IP6.ARPA") részt.
//
// Mielõtt nekilátnánk egy elsõdleges zóna beállításának, gondoljuk
// végig, hogy tényleg a megfelelõ szinten ismerjük a névfeloldás és
// a BIND mûködését. Gyakran ugyanis egyáltalán nem nyilvánvaló
-// csapdákba tudunk esni. Egy alárendelt zóna beállítása sokkal
-// egyszerûbb feladat.
+// csapdákba tudunk esni. Egy alárendelt zóna beállítása általában sokkal egyszerûbb feladat.
//
// FONTOS: Ne kövessük vakon a most következõ példát :-) Helyette inkább
// valódi neveket és címeket adjunk meg.
-/* Példa központi zónára
-zone "minta.net" {
- type master;
- file "master/minta.net";
-};
-*/
-
/* Példa dinamikus zónára
key "mintaorgkulcs" {
algorithm hmac-md5;
@@ -4682,14 +4828,7 @@
};
*/
-/* Példa közvetlen és inverz alárendelt zónákra
-zone "minta.com" {
- type slave;
- file "slave/minta.com";
- masters {
- 192.168.1.1;
- };
-};
+/* Példa inverz alárendelt zónákra
zone "1.168.192.in-addr.arpa" {
type slave;
file "slave/1.168.192.in-addr.arpa";
@@ -4741,7 +4880,6 @@
átküldött zóna
információk alapján képes helyette
kiszolgálni a kéréseket.
-
@@ -4758,13 +4896,13 @@
/etc/namedb/master/néven.org
érhetõ el) tartalma az alábbi:
- $TTL 3600 ; 1 óra
+ $TTL 3600 ; alapértelmezés szerint 1 óra
minta.org. IN SOA ns1.minta.org. admin.minta.org. (
2006051501 ; sorozatszám
10800 ; frissítés
3600 ; ismétlés
604800 ; lejárat
- 86400 ; minimális TTL
+ 300 ; TTL negatív válasz
)
; névszerverek
@@ -4785,19 +4923,16 @@
levelezes IN A 192.168.1.5
; álnevek
-www IN CNAME @
+www IN CNAME minta.org.A .-ra végzõdõ
hálózati nevek abszolút nevek, míg
minden más . nélküli
név az õsére vezehetõ vissza
- (tehát relatív). Például a
- www a
- www.õs. A
- kitalált zóna állományunkban itt
- most az õs a minta.org, így a
- www névbõl a
- www.minta.org név keletkezik.
+ (tehát relatív). Például az
+ ns1 névbõl az
+ ns1.minta.org
+ keletkezik.
A zóna állományok
felépítése a következõ:
@@ -4870,9 +5005,7 @@
10800 ; 3 óránként frissítsünk
3600 ; 1 óra után próbálkozzunk újra
604800 ; 1 hét után jár le
- 86400 ) ; a minimális TTL 1 nap
-
-
+ 300 ) ; TTL negatív válasz
@@ -4933,15 +5066,14 @@
- IN NS ns1.minta.org.
+ IN NS ns1.minta.org.
Ez egy NS bejegyzés. A zónához
tartozó minden hitelesített névszervernek
lennie kell legalább egy ilyen
bejegyzésének.
-
-localhost IN A 127.0.0.1
+ localhost IN A 127.0.0.1
ns1 IN A 192.168.1.2
ns2 IN A 192.168.1.3
mx IN A 192.168.1.4
@@ -4953,35 +5085,29 @@
192.168.1.2 címre
képzõdik le.
-
- IN A 192.168.1.1
+ IN A 192.168.1.1Ez a sor 192.168.1.1
címet rendeli az aktuális õshöz, amely
jelen esetünkben az example.org.
-
-www IN CNAME @
+ www IN CNAME @A kanonikus neveket tároló rekordokat
általában egy gép álneveihez
használjuk. Ebben a példában a
www a fõgép egyik
- álneve, amely itt a minta.org (192.168.1.1) tartomány. A CNAME
- rekordok tehát álnevek megadására
- használhatóak, vagy egyetlen
- állománynév körkörös
- rendszerû (round robin típusú)
- feloldására több gép
- között.
+ álneve, amely itt éppenséggel a minta.org (192.168.1.1) tartományneve. A
+ CNAME rekordok mellé más típusú
+ rekordokat ugyanarra a hálózati névre
+ soha ne adjunk meg.
MX rekord
-
- IN MX 10 levelezes.minta.org.
+ IN MX 10 levelezes.minta.org.Az MX rekord adja meg, hogy milyen levelezõ szerverek
felelõsek a zónába érkezõ
@@ -5015,7 +5141,7 @@
10800 ; frissítés
3600 ; ismétlés
604800 ; lejárat
- 3600 ) ; minimum
+ 300 ) ; TTL negatív válasz
IN NS ns1.minta.org.
IN NS ns2.minta.org.
@@ -5031,6 +5157,11 @@
IP-címek és hálózati nevek
összerendelését.
+ Érdemes megemlíteni, hogy a PTR rekordok
+ jobb oldalán álló nevek
+ mindegyikének teljes hálózati
+ névnek kell lennie (vagyis . karakterrel
+ kell végzõdnie).
@@ -5045,15 +5176,13 @@
A gyorsítótárazó
- névszerver az a névszerver, amelyik egyik
- zónában sem hitelesített. Egyszerûen
- csak öncélú kéréseket
- küld, és a kapott válaszokat megjegyzi. A
- beállításához mindössze annyit
- kell tennünk, hogy az eddigiekhez hasonlóan, de
- zónák nélkül beállítunk
- egy névszervert.
-
+ névszerver az a névszerver, amely elsõdleges
+ feladata a rekurzív kérések
+ kiszolgálása. Egyszerûen
+ továbbítja a beérkezõ
+ kéréseket, majd megjegyzi azokat, így
+ késõbb közvetlenül tud
+ válaszolni.
@@ -5100,41 +5229,34 @@
- Az ISC
+ Az ISC
BIND hivatalos honlapja (angolul)
- Az ISC BIND
+ Az ISC BIND
hivatalos fóruma (angolul)
- A BIND9 GYIK (angolul)
-
-
-
- O'Reilly DNS and
+ url="http://www.oreilly.com/catalog/dns5/">O'Reilly DNS and
BIND 5th EditionRFC1034 -
+ url="http://www.rfc-editor.org/rfc/rfc1034.txt">RFC1034 -
Domain Names - Concepts and FacilitiesRFC1035 -
+ url="http://www.rfc-editor.org/rfc/rfc1035.txt">RFC1035 -
Domain Names - Implementation and
Specification
-
From owner-p4-projects@FreeBSD.ORG Sun May 24 11:10:18 2009
Return-Path:
Delivered-To: p4-projects@freebsd.org
Received: by hub.freebsd.org (Postfix, from userid 32767)
id 9CBCC106567C; Sun, 24 May 2009 11:10:17 +0000 (UTC)
Delivered-To: perforce@FreeBSD.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
by hub.freebsd.org (Postfix) with ESMTP id 3C3661065679
for ; Sun, 24 May 2009 11:10:17 +0000 (UTC)
(envelope-from pgj@FreeBSD.org)
Received: from repoman.freebsd.org (repoman.freebsd.org
[IPv6:2001:4f8:fff6::29])
by mx1.freebsd.org (Postfix) with ESMTP id 1B51B8FC08
for ; Sun, 24 May 2009 11:10:17 +0000 (UTC)
(envelope-from pgj@FreeBSD.org)
Received: from repoman.freebsd.org (localhost [127.0.0.1])
by repoman.freebsd.org (8.14.3/8.14.3) with ESMTP id n4OBAG3n022425
for ; Sun, 24 May 2009 11:10:16 GMT
(envelope-from pgj@FreeBSD.org)
Received: (from perforce@localhost)
by repoman.freebsd.org (8.14.3/8.14.3/Submit) id n4OBAG0K022423
for perforce@freebsd.org; Sun, 24 May 2009 11:10:16 GMT
(envelope-from pgj@FreeBSD.org)
Date: Sun, 24 May 2009 11:10:16 GMT
Message-Id: <200905241110.n4OBAG0K022423@repoman.freebsd.org>
X-Authentication-Warning: repoman.freebsd.org: perforce set sender to
pgj@FreeBSD.org using -f
From: Gabor Pali
To: Perforce Change Reviews
Cc:
Subject: PERFORCE change 162634 for review
X-BeenThere: p4-projects@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: p4 projects tree changes
List-Unsubscribe: ,
List-Archive:
List-Post:
List-Help:
List-Subscribe: ,
X-List-Received-Date: Sun, 24 May 2009 11:10:18 -0000
http://perforce.freebsd.org/chv.cgi?CH=162634
Change 162634 by pgj@petymeg on 2009/05/24 11:09:56
MFen (www):
1.71 -> 1.72 hu/share/sgml/events.xml
1.254 -> 1.256 hu/share/sgml/news.xml
Affected files ...
.. //depot/projects/docproj_hu/www/hu/share/sgml/events.xml#7 edit
.. //depot/projects/docproj_hu/www/hu/share/sgml/news.xml#26 edit
Differences ...
==== //depot/projects/docproj_hu/www/hu/share/sgml/events.xml#7 (text+ko) ====
@@ -11,7 +11,7 @@
@@ -48,6 +48,67 @@
és egy fejlesztõi gyûlés.
+
+ FrOSCon 2009
+ http://www.froscon.org/
+
+ 2009
+ 8
+ 22
+
+
+ 2009
+ 8
+ 23
+
+
+ Németország
+ Sankt Augustin
+ Fachhochschule Bonn-Rhein-Sieg
+ Grantham-Allee 20
+
+
+ A FrOSCon egy szabad szoftverekrõl és a
+ nyílt forráskódról szóló
+ kétnapos konferencia, amely a Bonn és Köln
+ közelében található Sankt Augustin
+ városában kerül megrendezésre. A
+ konferencia tartalmát gazdagon díszítik
+ különbözõ szabad szoftveres és
+ nyílt forráskóddal foglalkozó
+ elõadások.
+
+
+
+ Kernel Conference Australia 2009
+ http://www.kernelconference.net/
+
+ 2009
+ 7
+ 15
+
+
+ 2009
+ 7
+ 17
+
+
+ Ausztrália
+ Brisbane
+ Queenslandi Egyetem
+
+
+ A Kernel Conference Australia elsõsorban a
+ rendszermagok és azok mûködésére
+ fókuszáló szakmai konferencia. Itt helyet
+ kapnak mindenféle nyílt
+ forráskódú rendszermagok és a
+ bennük alkalmazott technológiák. Egyetlen
+ megszorítás velük kapcsolatban, hogy a
+ fejlesztésük valamilyen OSI által elfogadott
+ licensz alapján történjen.
+
+
BSDday Argentina 2009http://www.bsdday.com.ar/
==== //depot/projects/docproj_hu/www/hu/share/sgml/news.xml#26 (text+ko) ====
@@ -5,7 +5,7 @@
@@ -22,6 +22,24 @@
5
+ 22
+
+
+