Home | History | Annotate | Download | only in kern
History log of /src/external/cddl/osnet/sys/kern/policy.c
RevisionDateAuthorComments
 1.10  30-Mar-2022  christos Add link our policy.
 1.9  28-Aug-2020  hannken Glue operation secpolicy_fs_mount() passes wrong arguments to
operation kauth_authorize_system().

KAUTH_SYSTEM_MOUNT / KAUTH_REQ_SYSTEM_MOUNT_NEW wants the to be
covered vnode and the mount flags, not the mount structure.

Fix for PR kern/55602: zpool panic on mounting zfs filesystem
 1.8  16-May-2020  christos Add ACL support for FFS. From FreeBSD.
 1.7  28-May-2018  chs branches: 1.7.4;
merge a new version of the CDDL dtrace and ZFS code.
this changes the upstream vendor from OpenSolaris to FreeBSD,
and this version is based on FreeBSD svn r315983.

in addition to the 10 years of improvements from upstream,
this version also has these NetBSD-specific enhancements:
- dtrace FBT probes can now be placed in kernel modules.
- ZFS now supports mmap().
 1.6  19-Oct-2012  riastradh branches: 1.6.28;
Let's try that again without the static...
 1.5  19-Oct-2012  riastradh Add omitted secpolicy_vnode_utime_modify, for zfs.
 1.4  18-Oct-2012  riastradh Take a first whack at making zfs permissions work.

zfs_access uses secpolicy_vnode_access, so it makes no sense for the
latter to call VOP_ACCESS!

Everything seems to return EACCES instead of EPERM, probably because
that's what kauth returns. This should be fixed, but that may
require some nontrivial surgery to zfs's calls to secpolicy_*, which
is where kauth gets involved.

This commit imports some code from illumos to implement the routine
secpolicy_vnode_setattr. This shouldn't be outside dist/, but for
now it is expedient to do so. We ought to fix that, along with all
the other CDDL code outside dist/, when we next import a newer
version of zfs.
 1.3  15-Oct-2012  riastradh secpolicy_vnode_access must be called with the vnode lock held.

Don't unlock the vnode and then tell the caller about what the world
was like while the vnode was locked. The world changes fast.
 1.2  24-Jun-2010  hannken branches: 1.2.6; 1.2.12;
Clean up vnode lock operations pass 2:

VOP_UNLOCK(vp, flags) -> VOP_UNLOCK(vp): Remove the unneeded flags argument.

Welcome to 5.99.32.

Discussed on tech-kern.
 1.1  07-Aug-2009  haad Add NetBSD Solaris compat code and reachover Makefiles. Most of code written
by Andrew Doran some of it by me.

This is still work in progress code. There are known issues. Zfs can panic
your system still. I will commit integration bits and needed kernel bits
later when we fix most obvious bugs. This code need some support from our
kernel which I will commit in a separate patch and therefore itnot work yet.

Issues:

1) Support for openat/fstatat syscalls.
2) getnewvnode locking against myself panic when reclaiming vnodes
3) Replace solaris taskq with our workqueue which doesn't need to alloc
anything during work.
4) Investigate problems with NO_WAIT allocations.

Oked by core@ and ad@.
 1.2.12.1  20-Nov-2012  tls Resync to 2012-11-19 00:00:00 UTC
 1.2.6.1  30-Oct-2012  yamt sync with head
 1.6.28.1  25-Jun-2018  pgoyette Sync with HEAD
 1.7.4.1  28-Aug-2020  martin Pull up following revision(s) (requested by hannken in ticket #1066):

external/cddl/osnet/sys/kern/policy.c: revision 1.9

Glue operation secpolicy_fs_mount() passes wrong arguments to
operation kauth_authorize_system().

KAUTH_SYSTEM_MOUNT / KAUTH_REQ_SYSTEM_MOUNT_NEW wants the to be
covered vnode and the mount flags, not the mount structure.

Fix for PR kern/55602: zpool panic on mounting zfs filesystem

RSS XML Feed