From owner-cvs-all  Mon Dec  3  8:12:46 2001
Delivered-To: cvs-all@freebsd.org
Received: from freefall.freebsd.org (freefall.FreeBSD.org [216.136.204.21])
	by hub.freebsd.org (Postfix) with ESMTP
	id ABB0237B41B; Mon,  3 Dec 2001 08:12:28 -0800 (PST)
Received: (from rwatson@localhost)
	by freefall.freebsd.org (8.11.6/8.11.6) id fB3GCSC96244;
	Mon, 3 Dec 2001 08:12:28 -0800 (PST)
	(envelope-from rwatson)
Message-Id: <200112031612.fB3GCSC96244@freefall.freebsd.org>
From: Robert Watson <rwatson@FreeBSD.org>
Date: Mon, 3 Dec 2001 08:12:28 -0800 (PST)
To: cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject: cvs commit: src/sys/compat/linprocfs linprocfs.c src/sys/compat/linux
         linux_mib.c linux_mib.h linux_misc.c src/sys/fs/procfs
         procfs_status.c src/sys/kern kern_jail.c kern_mib.c kern_prot.c
         src/sys/netinet in_pcb.c src/sys/sys jail.h
X-FreeBSD-CVS-Branch: HEAD
Sender: owner-cvs-all@FreeBSD.ORG
Precedence: bulk
List-ID: <cvs-all.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20cvs-all>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20cvs-all>
X-Loop: FreeBSD.ORG

rwatson     2001/12/03 08:12:28 PST

  Modified files:
    sys/compat/linprocfs linprocfs.c 
    sys/compat/linux     linux_mib.c linux_mib.h linux_misc.c 
    sys/fs/procfs        procfs_status.c 
    sys/kern             kern_jail.c kern_mib.c kern_prot.c 
    sys/netinet          in_pcb.c 
    sys/sys              jail.h 
  Log:
  o Introduce pr_mtx into struct prison, providing protection for the
    mutable contents of struct prison (hostname, securelevel, refcount,
    pr_linux, ...)
  o Generally introduce mtx_lock()/mtx_unlock() calls throughout kern/
    so as to enforce these protections, in particular, in kern_mib.c
    protection sysctl access to the hostname and securelevel, as well as
    kern_prot.c access to the securelevel for access control purposes.
  o Rewrite linux emulator abstractions for accessing per-jail linux
    mib entries (osname, osrelease, osversion) so that they don't return
    a pointer to the text in the struct linux_prison, rather, a copy
    to an array passed into the calls.  Likewise, update linprocfs to
    use these primitives.
  o Update in_pcb.c to always use prison_getip() rather than directly
    accessing struct prison.
  
  Reviewed by:    jhb
  
  Revision  Changes    Path
  1.44      +8 -3      src/sys/compat/linprocfs/linprocfs.c
  1.15      +97 -35    src/sys/compat/linux/linux_mib.c
  1.4       +3 -3      src/sys/compat/linux/linux_mib.h
  1.111     +4 -3      src/sys/compat/linux/linux_misc.c
  1.37      +7 -4      src/sys/fs/procfs/procfs_status.c
  1.17      +17 -0     src/sys/kern/kern_jail.c
  1.53      +32 -4     src/sys/kern/kern_mib.c
  1.127     +8 -2      src/sys/kern/kern_prot.c
  1.95      +2 -2      src/sys/netinet/in_pcb.c
  1.13      +18 -9     src/sys/sys/jail.h

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message