From owner-svn-soc-all@FreeBSD.ORG Sun Aug 5 16:28:37 2012 Return-Path: Delivered-To: svn-soc-all@FreeBSD.org Received: from socsvn.FreeBSD.org (unknown [IPv6:2001:4f8:fff6::2f]) by hub.freebsd.org (Postfix) with SMTP id 301891065670 for ; Sun, 5 Aug 2012 16:28:35 +0000 (UTC) (envelope-from gpf@FreeBSD.org) Received: by socsvn.FreeBSD.org (sSMTP sendmail emulation); Sun, 05 Aug 2012 16:28:35 +0000 Date: Sun, 05 Aug 2012 16:28:35 +0000 From: gpf@FreeBSD.org To: svn-soc-all@FreeBSD.org MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Message-Id: <20120805162835.301891065670@hub.freebsd.org> Cc: Subject: socsvn commit: r240108 - soc2012/gpf/pefs_kmod/sys/fs/pefs X-BeenThere: svn-soc-all@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: SVN commit messages for the entire Summer of Code repository List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 05 Aug 2012 16:28:37 -0000 Author: gpf Date: Sun Aug 5 16:28:34 2012 New Revision: 240108 URL: http://svnweb.FreeBSD.org/socsvn/?view=rev&rev=240108 Log: -declare sysctl var vfs.pefs.exec.enable that will be used for dbg purposes while coding immutable file execution control in sys/kern/kern_exec.c Modified: soc2012/gpf/pefs_kmod/sys/fs/pefs/pefs_vfsops.c Modified: soc2012/gpf/pefs_kmod/sys/fs/pefs/pefs_vfsops.c ============================================================================== --- soc2012/gpf/pefs_kmod/sys/fs/pefs/pefs_vfsops.c Sun Aug 5 15:55:36 2012 (r240107) +++ soc2012/gpf/pefs_kmod/sys/fs/pefs/pefs_vfsops.c Sun Aug 5 16:28:34 2012 (r240108) @@ -44,6 +44,7 @@ #include #include #include +#include #include #include @@ -618,6 +619,14 @@ .vfs_vget = pefs_vget, }; +/* XXXgpf: declare our debugging sysctl for kern_exec.c */ +SYSCTL_NODE(_vfs_pefs, OID_AUTO, exec, CTLFLAG_RW, 0, + "PEFS kern_exec.c stuff"); + +int pefs_exec_enable = 0; +SYSCTL_INT(_vfs_pefs_exec, OID_AUTO, enable, CTLFLAG_RW, + &pefs_exec_enable, 0, "Enable exec protection"); + VFS_SET(pefs_vfsops, pefs, VFCF_LOOPBACK); MODULE_DEPEND(pefs, crypto, 1, 1, 1); #ifdef PEFS_AESNI