Fix execve/fexecve system call auditing.

Approved by: so
Security: FreeBSD-EN-20:19.audit

Fix FreeBSD Linux ABI kernel panic.

Approved by: so
Security: FreeBSD-EN-20:17.linuxthread

Fix sendmsg(2) privilege escalation.

Approved by: so
Security: FreeBSD-SA-20:23.sendmsg
Security: CVE-2020-7460

Fix kernel panic in LinuxKPI subsystem.

Approved by: so
Security: FreeBSD-EN-20:14.linuxpki

MFC r352207:
Use true and false when dealing with bool type in the LinuxKPI.
No functional change.

Sponsored by: Mellanox Technologies

MFC r352206:
Fix synchronous work drain issue in the LinuxKPI.

A work callback may restart itself. Loop in the drain function to see if the
work has been rescheduled and stop the subsequent reschedu

MFC r352206:
Fix synchronous work drain issue in the LinuxKPI.

A work callback may restart itself. Loop in the drain function to see if the
work has been rescheduled and stop the subsequent reschedules, if any.

Sponsored by: Mellanox Technologies

show more ...

MFC r352205:
Fix broken DECLARE_TASKLET() macro after r347852.

Sponsored by: Mellanox Technologies

LinuxKPI: Limit exposure of new field in dev_pm_ops to LinuxKPI >= 50000.

This will fix a suspend/resume issue that occurs on drm-kmod packages
build on 12.0 and run on 12.1.

Approved by: imp (ment

LinuxKPI: Limit exposure of new field in dev_pm_ops to LinuxKPI >= 50000.

This will fix a suspend/resume issue that occurs on drm-kmod packages
build on 12.0 and run on 12.1.

Approved by: imp (mentor)

show more ...

MFC r346445: Enable ioremap for aarch64 in the LinuxKPI

Required for Mellanox drivers (e.g. on Ampere eMAG at Packet.com).

PR: 237055
Submitted by: Greg V <[email protected]>

MFC r351693:
Use DEVICE memory instead of UNCACHEABLE on aarch64 in ioremap() in the LinuxKPI.
This fixes system hangs on reading device registers on aarch64.

Tested with: Marvell MACCHIATObin (Arma

MFC r351693:
Use DEVICE memory instead of UNCACHEABLE on aarch64 in ioremap() in the LinuxKPI.
This fixes system hangs on reading device registers on aarch64.

Tested with: Marvell MACCHIATObin (Armada8k) + mlx4en, amdgpu
Submitted by: Greg V <[email protected]>
Differential Revision: https://reviews.freebsd.org/D20789
Sponsored by: Mellanox Technologies

show more ...

MFC r345103:
Implement more PCI speed related functions and macros in the LinuxKPI.

Submitted by: Johannes Lundberg <[email protected]>
Sponsored by: Limelight Networks
Sponsored by: Mellanox Te

MFC r345103:
Implement more PCI speed related functions and macros in the LinuxKPI.

Submitted by: Johannes Lundberg <[email protected]>
Sponsored by: Limelight Networks
Sponsored by: Mellanox Technologies

show more ...

MFC r345100:
Implement task_euid() and get_task_state() function macros in the LinuxKPI.

Submitted by: Johannes Lundberg <[email protected]>
Sponsored by: Limelight Networks
Sponsored by: Mellan

MFC r345100:
Implement task_euid() and get_task_state() function macros in the LinuxKPI.

Submitted by: Johannes Lundberg <[email protected]>
Sponsored by: Limelight Networks
Sponsored by: Mellanox Technologies

show more ...

MFC r351773:
Add procctl(PROC_STACKGAP_CTL).

PR: 239894

MFC r351937:
LinuxKPI: Improve sysfs support.

- Add functions for creating and merging sysfs groups.
- Add sysfs_streq function to compare strings ignoring newline from the
sysctl userland call.
-

MFC r351937:
LinuxKPI: Improve sysfs support.

- Add functions for creating and merging sysfs groups.
- Add sysfs_streq function to compare strings ignoring newline from the
sysctl userland call.
- Add a call to sysfs_create_groups in device_add.
- Remove duplicate header include.
- Bump __FreeBSD_version.

Reviewed by: hselasky
Approved by: imp (mentor), hselasky

show more ...

MFC r351701:
LinuxKPI: Add sysfs create/remove functions that handles multiple files in one call.

Reviewed by: hps
Approved by: imp (mentor), hps

MFC r351009:
Implement pci_enable_msi() and pci_disable_msi() in the LinuxKPI.
This patch makes the DRM graphics driver in ports usable on aarch64.

Submitted by: Greg V <[email protected]>

MFC r351009:
Implement pci_enable_msi() and pci_disable_msi() in the LinuxKPI.
This patch makes the DRM graphics driver in ports usable on aarch64.

Submitted by: Greg V <[email protected]>
Differential Revision: https://reviews.freebsd.org/D21008
Sponsored by: Mellanox Technologies

show more ...

MFC r347387:
Fix memory leak of PCI BUS structure in the LinuxKPI.

Sponsored by: Mellanox Technologies

MFC r350863:
compat/linux: Remove obsoleted and somewhat confusing comments related to COMPAT_43.

MFC r348446:

makesyscalls.sh: always use absolute path for syscalls.conf

syscalls.conf is included using "." which per the Open Group:

If file does not contain a <slash>, the shell shall use the

MFC r348446:

makesyscalls.sh: always use absolute path for syscalls.conf

syscalls.conf is included using "." which per the Open Group:

If file does not contain a <slash>, the shell shall use the search
path specified by PATH to find the directory containing file.

POSIX shells don't fall back to the current working directory.

Submitted by: Nathaniel Wesley Filardo <[email protected]>
Reviewed by: bdrewery
Sponsored by: DARPA, AFRL
Differential Revision: https://reviews.freebsd.org/D20476

show more ...

MFC r340424:

Use the main capabilities.conf for freebsd32.

Allow the location of capabilities.conf to be configured.

Also allow a per-abi syscall prefix to be configured with the
abi_func_prefix s

MFC r340424:

Use the main capabilities.conf for freebsd32.

Allow the location of capabilities.conf to be configured.

Also allow a per-abi syscall prefix to be configured with the
abi_func_prefix syscalls.conf variable and check syscalls against
entries in capabilities.conf with and without the prefix amended.

Take advantage of these two features to allow use shared
capabilities.conf
between the default syscall vector and the freebsd32 compatability
layer. We've been inconsistent about keeping the two in sync as
evidenced by the bugs fixed in r340294. This eliminates that problem
going forward.

Reviewed by: kib
Obtained from: CheriBSD
Sponsored by: DARPA, AFRL
Differential Revision: https://reviews.freebsd.org/D17932

show more ...

Regenerate to add @generated tag in generated files.

This is a manual merge of r347230.

MFC r351194:
Change locking requirements for VOP_UNSET_TEXT().

MFC r350421:
Avoid relying on header pollution from sys/refcount.h.

MFC r350464: kern_shm_open: push O_CLOEXEC into caller control

The motivation for this change is to allow wrappers around shm to be written
that don't set CLOEXEC. kern_shm_open currently accepts O_

MFC r350464: kern_shm_open: push O_CLOEXEC into caller control

The motivation for this change is to allow wrappers around shm to be written
that don't set CLOEXEC. kern_shm_open currently accepts O_CLOEXEC but sets
it unconditionally. kern_shm_open is used by the shm_open(2) syscall, which
is mandated by POSIX to set CLOEXEC, and CloudABI's sys_fd_create1().
Presumably O_CLOEXEC is intended in the latter caller, but it's unclear from
the context.

sys_shm_open() now unconditionally sets O_CLOEXEC to meet POSIX
requirements, and a comment has been dropped in to kern_fd_open() to explain
the situation and add a pointer to where O_CLOEXEC setting is maintained for
shm_open(2) correctness. CloudABI's sys_fd_create1() also unconditionally
sets O_CLOEXEC to match previous behavior.

This also has the side-effect of making flags correctly reflect the
O_CLOEXEC status on this fd for the rest of kern_shm_open(), but a
glance-over leads me to believe that it didn't really matter.

show more ...

MFC r350484, r350607, r350608:
Make randomized stack gap between strings and pointers to argv/envs.