opnsense-src/sys/dev
Christian S.J. Peron 8677689134 Ensure that file flags such as schg, sappnd (and others) are honored
by md(4). Before this change, it was possible to by-pass these flags
by creating memory disks which used a file as a backing store and
writing to the device.

This was discussed by the security team, and although this is problematic,
it was decided that it was not critical as we never guarantee that root will
be restricted.

This change implements the following behavior changes:

-If the user specifies the readonly flag, unset write operations before
 opening the file. If the FWRITE mask is unset, the device will be
 created with the MD_READONLY mask set. (readonly)
-Add a check in g_md_access which checks to see if the MD_READONLY mask
 is set, if so return EROFS
-Do not gracefully downgrade access modes without telling the user. Instead
 make the user specify their intentions for the device (assuming the file is
 read only). This seems like the more correct way to handle things.

This is a RELENG_6 candidate.

PR:		kern/84635
Reviewed by:	phk
2005-08-17 01:24:55 +00:00
..
aac
acpi_support
acpica Modify the fix in rev 1.16 slightly. Instead of setting the cap to zero, 2005-08-11 17:12:57 +00:00
adlink
advansys
agp
aha
ahb
aic
aic7xxx
amd
amr
an
ar
arcmsr
arl
asr
ata Add support for the Promise PDC4071[89] chips used on fx the Fasttrak TX4300. 2005-08-12 16:54:11 +00:00
ath correct CTS duration calculation; SIFS+ACK should use the xmit rate not 2005-08-12 23:11:44 +00:00
atkbdc
auxio
awi fix handling of the current channel (missed in previous commit) 2005-08-13 00:30:26 +00:00
bfe
bge
bktr
buslogic
cardbus
ciss
cm
cnw
cp
cpufreq
cs
ct
ctau
cx
cy
dc Use device_printf() and if_printf() and remove dc_unit from softc. 2005-08-10 20:33:46 +00:00
dcons
de
dec
digi
dpt
drm
ed
eisa
em
en
ep
esp
ex
exca
fatm
fb
fdc
fe
firewire
fxp
gem
gfb
harp
hatm
hfa
hifn
hme - Use callout_init_mtx() to close races between hme_stop() and hme_tick(). 2005-08-10 20:12:25 +00:00
hptmv
hwpmc
ic
ichsmb
ichwd
ida
idt
ie
ieee488
if_ndis
iicbus
iir
io
ips
ipw
isp
ispfw
iwi
ixgb
joy
kbd
kbdmux
led
lge
lnc
mc146818
mca
mcd
md Ensure that file flags such as schg, sappnd (and others) are honored 2005-08-17 01:24:55 +00:00
mem
mii
mk48txx
mlx
mly
mpt
mse
my Fixup locking in if_my(4) and mark it MPSAFE: 2005-08-16 20:39:30 +00:00
ncv
nge
nmdm
nsp
null
nve
ofw
owi
patm
pbio
pccard
pccbb
pcf
pci
pdq
ppbus
ppc
pst
puc
ral
random
ray
rc
re
rndtest
rp
sab
safe
sbni
sbsh
scd
sf Use if_printf() and device_printf() and axe sf_unit from the softc as a 2005-08-10 20:24:39 +00:00
si
sio
sk * Solve "No PHY found" problem for more Yukon Lite variants. 2005-08-13 11:13:12 +00:00
smbus
sn Some preliminary support for Megahertz XJEM and CCEM (same cards really) 2005-08-15 18:28:49 +00:00
snc
snp
sound
speaker
sr
stg
streams
sx
sym
syscons
tdfx
tga
ti
trm
twa
twe
tx
txp
uart - Change the code that determines whether to use a serial console and 2005-08-15 20:58:36 +00:00
ubsec
usb
utopia
vge
vkbd
vr
vx
watchdog
wds
wi fix media_status so devd recognizes the device as an 802.11 interface 2005-08-13 00:04:42 +00:00
wl
xe
zs