Robert Watson f93bfb23dc Add internal 'mac_policy_count' counter to the MAC Framework, which is a ... count of the number of registered policies. Rather than unconditionally locking sockets before passing them into MAC, lock them in the MAC entry points only if mac_policy_count is non-zero. This avoids locking overhead for a number of socket system calls when no policies are registered, eliminating measurable overhead for the MAC Framework for the socket subsystem when there are no active policies. Possibly socket locks should be acquired by policies if they are required for socket labels, which would further avoid locking overhead when there are policies but they don't require labeling of sockets, or possibly don't even implement socket controls. Obtained from: TrustedBSD Project		2009-06-02 18:26:17 +00:00
..
bus_if.m
clock_if.m
cpufreq_if.m
device_if.m
genassym.sh
imgact_aout.c
imgact_elf32.c
imgact_elf64.c
imgact_elf.c	Fix KBI breakage by r190520 which affects older linux.ko binaries:	2009-04-05 09:27:19 +00:00
imgact_gzip.c
imgact_shell.c
inflate.c
init_main.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
init_sysent.c	Regenerate generated syscall files following changes to struct sysent in	2009-06-01 16:14:38 +00:00
kern_acct.c	Remove the thread argument from the FSD (File-System Dependent) parts of	2009-05-11 15:33:26 +00:00
kern_alq.c	Remove VOP_LEASE and supporting functions. This hasn't been used since	2009-04-10 10:52:19 +00:00
kern_clock.c	Mark the clock sysctls as MPSAFE.	2009-05-18 12:03:43 +00:00
kern_condvar.c	Remove unused variables p' and unneeded assignments of rval'.	2009-02-26 13:00:13 +00:00
kern_conf.c	Add an extension to the character device interface that allows character	2009-06-01 21:32:52 +00:00
kern_cons.c	Remove unneeded variable `ocn_mute'.	2009-02-26 13:01:45 +00:00
kern_context.c
kern_cpu.c	Provide a new CPU device driver ivar to report the nominal speed of the	2009-05-31 08:59:15 +00:00
kern_cpuset.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
kern_ctf.c
kern_descrip.c	- Use an acquire barrier to increment f_count in fget_unlocked and	2009-06-02 06:55:32 +00:00
kern_dtrace.c
kern_environment.c	Correctly sanity-check timer IDs. [SA-09:06]	2009-03-23 00:00:50 +00:00
kern_event.c
kern_exec.c	Supply AT_EXECPATH auxinfo entry to the interpreter, both for native and	2009-03-17 12:53:28 +00:00
kern_exit.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
kern_fail.c	fail(9) support:	2009-05-27 16:36:54 +00:00
kern_fork.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
kern_idle.c
kern_intr.c	Binding interrupts to a CPU consists of two parts: setting up CPU	2009-05-18 14:02:55 +00:00
kern_jail.c	Place hostnames and similar information fully under the prison system.	2009-05-29 21:27:12 +00:00
kern_kthread.c
kern_ktr.c
kern_ktrace.c	Remove VOP_LEASE and supporting functions. This hasn't been used since	2009-04-10 10:52:19 +00:00
kern_linker.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
kern_lock.c	Handle lock recursion differenty by always checking against LO_RECURSABLE	2009-06-02 13:03:35 +00:00
kern_lockf.c	The advisory lock may be activated or activated and removed during the	2009-05-24 12:39:38 +00:00
kern_lockstat.c	Add the OpenSolaris dtrace lockstat provider. The lockstat provider	2009-05-26 20:28:22 +00:00
kern_malloc.c	Retire kern.vm.kmem.size. It was marked as obsolete prior to 5.2, so	2009-05-09 19:00:47 +00:00
kern_mbuf.c
kern_mib.c	Place hostnames and similar information fully under the prison system.	2009-05-29 21:27:12 +00:00
kern_module.c
kern_mtxpool.c
kern_mutex.c	Remove extra cpu_spinwait() invocations. This should really only be used	2009-05-29 14:03:34 +00:00
kern_ntptime.c
kern_osd.c	Make the rmlock(9) interface a bit more like the rwlock(9) interface:	2009-05-29 10:52:37 +00:00
kern_physio.c
kern_pmc.c
kern_poll.c	Reimplement the netisr framework in order to support parallel netisr	2009-06-01 10:41:38 +00:00
kern_priv.c	Reduce the verbosity of SDT trace points for DTrace by defining several	2009-03-03 17:15:05 +00:00
kern_proc.c	Add a flags field to struct ucred, and export that via kinfo_proc,	2009-06-01 20:26:51 +00:00
kern_prot.c	Add internal 'mac_policy_count' counter to the MAC Framework, which is a	2009-06-02 18:26:17 +00:00
kern_resource.c
kern_rmlock.c	Minor style tweak.	2009-05-29 14:25:51 +00:00
kern_rwlock.c	Handle lock recursion differenty by always checking against LO_RECURSABLE	2009-06-02 13:03:35 +00:00
kern_sdt.c
kern_sema.c
kern_shutdown.c	Place hostnames and similar information fully under the prison system.	2009-05-29 21:27:12 +00:00
kern_sig.c	Remove VOP_LEASE and supporting functions. This hasn't been used since	2009-04-10 10:52:19 +00:00
kern_subr.c
kern_switch.c
kern_sx.c	Handle lock recursion differenty by always checking against LO_RECURSABLE	2009-06-02 13:03:35 +00:00
kern_synch.c	Remove even more unneeded variable assignments.	2009-02-26 15:51:54 +00:00
kern_syscalls.c
kern_sysctl.c	Remove do-nothing code that was required to dirty the old buffer on Alpha.	2009-05-15 21:34:58 +00:00
kern_tc.c	Remove conditionally compiled time counter statistics; tools like	2009-04-11 22:01:40 +00:00
kern_thr.c	Remove even more unneeded variable assignments.	2009-02-26 15:51:54 +00:00
kern_thread.c	- Implement a new mechanism for resetting lock profiling. We now	2009-03-15 06:41:47 +00:00
kern_time.c	Remove VOP_LEASE and supporting functions. This hasn't been used since	2009-04-10 10:52:19 +00:00
kern_timeout.c
kern_umtx.c	Make UMTX_OP_WAIT_UINT actually wait for an unsigned integer on 64-bits	2009-04-13 05:21:17 +00:00
kern_uuid.c	Lock the interface address list while iterating a network interface's	2009-04-19 21:36:18 +00:00
kern_vimage.c	Introduce an interm userland-kernel API for creating vnets and	2009-05-31 12:10:04 +00:00
kern_xxx.c	Place hostnames and similar information fully under the prison system.	2009-05-29 21:27:12 +00:00
ksched.c
link_elf_obj.c	Add the ksyms(4) pseudo driver. The ksyms driver allows a process to	2009-05-26 21:39:09 +00:00
link_elf.c	Add the ksyms(4) pseudo driver. The ksyms driver allows a process to	2009-05-26 21:39:09 +00:00
linker_if.m	Add the ksyms(4) pseudo driver. The ksyms driver allows a process to	2009-05-26 21:39:09 +00:00
Make.tags.inc
Makefile
makesyscalls.sh	Add 'sy_flags', a currently unused per-syscall entry flags field that will	2009-06-01 16:13:06 +00:00
md4c.c
md5c.c
p1003_1b.c
posix4_mib.c
sched_4bsd.c
sched_ule.c	- Fix non-SMP build by encapsulating idle spin logic in a macro.	2009-04-29 23:04:31 +00:00
serdev_if.m
stack_protector.c
subr_acl_posix1e.c	Make 'struct acl' larger, as required to support NFSv4 ACLs. Provide	2009-05-22 15:56:43 +00:00
subr_autoconf.c	Prefer ANSI function definitions to K&R ones.	2009-02-03 07:52:07 +00:00
subr_blist.c
subr_bufring.c
subr_bus.c	Fix a typo.	2009-05-20 17:19:30 +00:00
subr_clist.c	Remove a stale comment from the clists code.	2009-02-09 11:27:56 +00:00
subr_clock.c
subr_devstat.c	Use NULL in preference to 0 in pointer contexts.	2009-02-03 07:54:42 +00:00
subr_disk.c	Clarify and reimplement the bioq API so that bioq_disksort() has	2009-02-13 11:36:32 +00:00
subr_eventhandler.c
subr_fattime.c
subr_firmware.c	Use NULL in preference to 0 for pointers.	2009-02-03 07:51:11 +00:00
subr_hints.c
subr_kdb.c	Spell NULL properly, use (void) rather than () for functions with no	2009-05-09 19:08:22 +00:00
subr_kobj.c	Use NULL in preference to 0 in pointer contexts.	2009-02-03 07:54:42 +00:00
subr_lock.c	- Implement a new mechanism for resetting lock profiling. We now	2009-03-15 06:41:47 +00:00
subr_log.c
subr_mbpool.c
subr_mchain.c
subr_module.c
subr_msgbuf.c
subr_param.c	Improve the description of a few sysctls.	2009-03-23 20:18:06 +00:00
subr_pcpu.c	Change the curvnet variable from a global const struct vnet *,	2009-05-05 10:56:12 +00:00
subr_power.c
subr_prf.c	Remove redundant code in printf() and vprintf().	2009-02-27 13:28:54 +00:00
subr_prof.c	Use ANSI function definition for profil.	2009-02-03 07:52:36 +00:00
subr_rman.c	sysctl_rman: report shared resources to devinfo	2009-05-19 14:08:21 +00:00
subr_rtc.c	Clean up MI inittodr(9) and kill noop code.	2009-03-23 21:16:21 +00:00
subr_sbuf.c
subr_scanf.c
subr_sglist.c	Add a simple API to manage scatter/gather lists of phyiscal addresses.	2009-06-01 20:35:39 +00:00
subr_sleepqueue.c
subr_smp.c	- Remove the bogus idle thread state code. This may have a race in it	2009-04-29 03:15:43 +00:00
subr_stack.c
subr_taskqueue.c	Remove semicolon left in the last commit	2009-02-13 18:51:39 +00:00
subr_trap.c
subr_turnstile.c
subr_unit.c
subr_witness.c	Add minimal ZFS lock hierarchy	2009-05-20 02:51:48 +00:00
sys_generic.c	- Implement a lockless file descriptor lookup algorithm in	2009-05-14 03:24:22 +00:00
sys_pipe.c	- Make maxpipekva a signed long rather than an unsigned long as overflow	2009-03-10 21:28:43 +00:00
sys_process.c	Use the p_sysent->sv_flags flag SV_ILP32 to detect 32bit process	2009-03-02 18:43:50 +00:00
sys_socket.c	Add internal 'mac_policy_count' counter to the MAC Framework, which is a	2009-06-02 18:26:17 +00:00
syscalls.c	Regen for new jail system calls in r191673.	2009-04-29 21:50:13 +00:00
syscalls.master	Introduce the extensible jail framework, using the same "name=value"	2009-04-29 21:14:15 +00:00
systrace_args.c	Regen for new jail system calls in r191673.	2009-04-29 21:50:13 +00:00
sysv_ipc.c
sysv_msg.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
sysv_sem.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
sysv_shm.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
tty_compat.c
tty_info.c	Print an extra newline when not at the first column already.	2009-05-17 16:17:48 +00:00
tty_inq.c	Enable secure TTY input buffer flushing by default.	2009-05-21 16:48:06 +00:00
tty_outq.c	Use unsigned longs for the TTY's sysctl stats.	2009-02-26 10:28:32 +00:00
tty_pts.c	Last minute TTY API change: remove mutex argument from tty_alloc().	2009-05-29 06:41:23 +00:00
tty_pty.c	Don't use PTY name as format string, even though it isn't insecure here.	2009-02-26 10:14:10 +00:00
tty_tty.c
tty_ttydisc.c	If we have a regular rint handler, never go into rint_bypass mode.	2009-05-07 17:39:23 +00:00
tty.c	Last minute TTY API change: remove mutex argument from tty_alloc().	2009-05-29 06:41:23 +00:00
uipc_accf.c
uipc_cow.c
uipc_debug.c	Add missing socket options.	2009-05-26 09:19:21 +00:00
uipc_domain.c	Introduce vnet module registration / initialization framework with	2009-04-11 05:58:58 +00:00
uipc_mbuf2.c
uipc_mbuf.c	Remove unneeded include.	2009-06-02 15:59:46 +00:00
uipc_mqueue.c	Remove the thread argument from the FSD (File-System Dependent) parts of	2009-05-11 15:33:26 +00:00
uipc_sem.c	Ensure that the semaphore value is re-checked after sem_lock	2009-03-12 10:36:39 +00:00
uipc_shm.c	Correct a boundary case error in the management of a page's dirty bits by	2009-06-02 08:02:27 +00:00
uipc_sockbuf.c	Rework socket upcalls to close some races with setup/teardown of upcalls.	2009-06-01 21:17:03 +00:00
uipc_socket.c	Add internal 'mac_policy_count' counter to the MAC Framework, which is a	2009-06-02 18:26:17 +00:00
uipc_syscalls.c	Add internal 'mac_policy_count' counter to the MAC Framework, which is a	2009-06-02 18:26:17 +00:00
uipc_usrreq.c	Add internal 'mac_policy_count' counter to the MAC Framework, which is a	2009-06-02 18:26:17 +00:00
vfs_acl.c	Make 'struct acl' larger, as required to support NFSv4 ACLs. Provide	2009-05-22 15:56:43 +00:00
vfs_aio.c	Rework socket upcalls to close some races with setup/teardown of upcalls.	2009-06-01 21:17:03 +00:00
vfs_bio.c	Eliminate a comment describing code that was deleted over eight years ago.	2009-06-01 06:12:08 +00:00
vfs_cache.c	Unbreak the build. Add missed probes.	2009-05-31 20:16:06 +00:00
vfs_cluster.c
vfs_default.c	Add VOP_ACCESSX, which can be used to query for newly added V*	2009-05-30 13:59:05 +00:00
vfs_export.c	Remove the thread argument from the FSD (File-System Dependent) parts of	2009-05-11 15:33:26 +00:00
vfs_extattr.c	Remove the thread argument from the FSD (File-System Dependent) parts of	2009-05-11 15:33:26 +00:00
vfs_hash.c
vfs_init.c	Expand the scope of the sysctllock sx lock to protect the sysctl tree itself.	2009-02-06 14:51:32 +00:00
vfs_lookup.c	Let vfs_lookup() return ENOTDIR if the path has a trailing slash and	2009-05-29 10:02:44 +00:00
vfs_mount.c	sys/boot/common.c	2009-06-01 01:02:30 +00:00
vfs_subr.c	Remove the now invalid (and possibly unused) debug.mpsafevfs	2009-05-30 23:52:23 +00:00
vfs_syscalls.c	Add hierarchical jails. A jail may further virtualize its environment	2009-05-27 14:11:23 +00:00
vfs_vnops.c	Remove the thread argument from the FSD (File-System Dependent) parts of	2009-05-11 15:33:26 +00:00
vnode_if.src	Add VOP_ACCESSX, which can be used to query for newly added V*	2009-05-30 13:59:05 +00:00