Changes in std

Changes in std http://nxr.netbsd.org/rss/src/sys/conf/std en Copyright 2005 Java Make swap encryption truly optional, rather than just able to be default-disabled - New option VMSWAP_ENCRYPTION (enabled by default in conf/std along with VMSWAP) - Remove the "aes" attribute from VMSWAP and hand it to VMSWAP_ENCRYPTION. - Conditionalize all code and data related to swap encryption on the new VMSWAP_ENCRYPTION option. While the swap encryption code itself is not that large, it drags in the AES code if enabled. If a constrained platform doesn't care about encrypted swap, this lets it not pay the cost for AES. /src/sys/conf/std - 1.26 Sat Jul 18 01:06:15 UTC 2026 thorpej Our security(7) manual page has long documented the functionality enabled by secmodel_extensions. It's thus not really optional, and declaring it so causes an odd mismatch in behavior between MODULAR and non-modular kernels. It's tiny, just add it to std. /src/sys/conf/std - 1.25 Sun Mar 29 00:02:29 UTC 2026 tls conf/std: Update comment over rnd(4) to reflect current reality. PR kern/46728 /src/sys/conf/std - 1.24 Tue Mar 26 10:56:34 UTC 2024 riastradh Merge the [pgoyette-compat] branch /src/sys/conf/std - 1.23 Sun Jan 27 02:08:41 UTC 2019 pgoyette branches: 1.22.14; 1.22.16; * Split sys/kern/sys_process.c into three parts: 1 - ptrace(2) syscall for native emulation 2 - common ptrace(2) syscall code (shared with compat_netbsd32) 3 - support routines that are shared with PROCFS and/or KTRACE * Add module glue for #1 and #2. Both modules will be built-in to the kernel if "options PTRACE" is included in the config file (this is the default, defined in sys/conf/std). * Mark the ptrace(2) syscall as modular in syscalls.master (generated files will be committed shortly). * Conditionalize all remaining portions of PTRACE code on a new kernel option PTRACE_HOOKS. XXX Instead of PROCFS depending on 'options PTRACE', we should probably just add a procfs attribute to the sys/kern/sys_process.c file's entry in files.kern, and add PROCFS to the "#if defineds" for process_domem(). It's really confusing to have two different ways of requiring this file. /src/sys/conf/std - 1.22 Wed Nov 02 00:11:59 UTC 2016 pgoyette branches: 1.21.2; Always include the "vfs" attribute (module). Although all of the ufs/xxx file systems depend on the vfs attribute, it is not required that any file system actually be built-in to the kernel. (At least on some architectures, file system modules can be loaded at boot time.) /src/sys/conf/std - 1.21 Sat Nov 14 07:31:13 UTC 2015 pgoyette branches: 1.20.2; config(1), config(5): Introduce "select" o Introduce a new selection directive "select" to select an attribute (as a module) and its dependencies. o Support "no select" too. o Stop abusing "options" to select an attribute. o Bump config(1) version. /src/sys/conf/std - 1.20 Fri Oct 31 07:38:36 UTC 2014 uebayasi Define net attribute. Always select it for now. /src/sys/conf/std - 1.19 Fri Oct 10 00:46:32 UTC 2014 uebayasi Use option dependency to always select KERN (and its dependencies). /src/sys/conf/std - 1.18 Fri Oct 10 09:31:40 UTC 2014 uebayasi Define "machdep" attribute and mark files (in amd64 and x86). /src/sys/conf/std - 1.17 Fri Oct 10 09:13:21 UTC 2014 uebayasi Define "uvm" attribute and mark files. /src/sys/conf/std - 1.16 Fri Oct 10 08:24:54 UTC 2014 uebayasi Define "kern" attribute (a.k.a module). Mark kern_*.c (and some others) as "kern". Always select "kern" in sys/conf/std. /src/sys/conf/std - 1.15 Fri Oct 10 08:18:04 UTC 2014 uebayasi branches: 1.14.8; The rnd pseudo-device is not really optional, because it is in the same source file as the entropy-pool code itself. Move it to std. This will be cleaned up more when I split the sources up as they should be. This fixes build breaks on several ports. Thanks to Havard Eidnes for pointing them out. /src/sys/conf/std - 1.14 Tue Nov 22 21:25:42 UTC 2011 tls branches: 1.13.2; 1.13.12; Remove uarea swap-out functionality: - Addresses the issue described in PR/38828. - Some simplification in threading and sleepq subsystems. - Eliminates pmap_collect() and, as a side note, allows pmap optimisations. - Eliminates XS_CTL_DATA_ONSTACK in scsipi code. - Avoids few scans on LWP list and thus potentially long holds of proc_lock. - Cuts ~1.5k lines of code. Reduces amd64 kernel size by ~4k. - Removes __SWAP_BROKEN cases. Tested on x86, mips, acorn32 (thanks <mpumford>) and partly tested on acorn26 (thanks to <bjh21>). Discussed on <tech-kern>, reviewed by <ad>. /src/sys/conf/std - 1.13 Wed Oct 21 21:12:05 UTC 2009 rmind Tab police. /src/sys/conf/std - 1.12 Mon Aug 10 11:46:42 UTC 2009 simonb Add [default] option to make UAREAs swappable. Disabling the option makes them unswappable and therefore allocatable using KSEG/BAT/etc. /src/sys/conf/std - 1.11 Sun Aug 09 21:58:03 UTC 2009 matt - Conditionalise POSIX aio and mqueue, but include them by default. - Add a COMPAT_NETBSD attribute. Emit if any compat options are used. /src/sys/conf/std - 1.10 Fri Nov 14 23:28:30 UTC 2008 ad branches: 1.9.22; 1.9.26; 1.9.32; 1.9.34; 1.9.36; Add cpuctl(8). For now this is not much more than a toy for debugging and benchmarking that allows taking CPUs online/offline. /src/sys/conf/std - 1.9 Sat Aug 04 11:03:00 UTC 2007 ad branches: 1.8.2; 1.8.6; merge yamt-idlelwp branch. asked by core@. some ports still needs work. from doc/BRANCHES: idle lwp, and some changes depending on it. 1. separate context switching and thread scheduling. (cf. gmcgarry_ctxsw) 2. implement idle lwp. 3. clean up related MD/MI interfaces. 4. make scheduler(s) modular. /src/sys/conf/std - 1.8 Thu May 17 14:51:37 UTC 2007 yamt branches: 1.7.6; 1.7.10; 1.7.12; First take at security model abstraction. - Add a few scopes to the kernel: system, network, and machdep. - Add a few more actions/sub-actions (requests), and start using them as opposed to the KAUTH_GENERIC_ISSUSER place-holders. - Introduce a basic set of listeners that implement our "traditional" security model, called "bsd44". This is the default (and only) model we have at the moment. - Update all relevant documentation. - Add some code and docs to help folks who want to actually use this stuff: * There's a sample overlay model, sitting on-top of "bsd44", for fast experimenting with tweaking just a subset of an existing model. This is pretty cool because it's *really* straightforward to do stuff you had to use ugly hacks for until now... * And of course, documentation describing how to do the above for quick reference, including code samples. All of these changes were tested for regressions using a Python-based testsuite that will be (I hope) available soon via pkgsrc. Information about the tests, and how to write new ones, can be found on: http://kauth.linbsd.org/kauthwiki NOTE FOR DEVELOPERS: *PLEASE* don't add any code that does any of the following: - Uses a KAUTH_GENERIC_ISSUSER kauth(9) request, - Checks 'securelevel' directly, - Checks a uid/gid directly. (or if you feel you have to, contact me first) This is still work in progress; It's far from being done, but now it'll be a lot easier. Relevant mailing list threads: http://mail-index.netbsd.org/tech-security/2006/01/25/0011.html http://mail-index.netbsd.org/tech-security/2006/03/24/0001.html http://mail-index.netbsd.org/tech-security/2006/04/18/0000.html http://mail-index.netbsd.org/tech-security/2006/05/15/0000.html http://mail-index.netbsd.org/tech-security/2006/08/01/0000.html http://mail-index.netbsd.org/tech-security/2006/08/25/0000.html Many thanks to YAMAMOTO Takashi, Matt Thomas, and Christos Zoulas for help stablizing kauth(9). Full credit for the regression tests, making sure these changes didn't break anything, goes to Matt Fleming and Jaime Fournier. Happy birthday Randi! :) /src/sys/conf/std - 1.7 Fri Sep 08 20:58:57 UTC 2006 elad