futimesat() - Add futimesat() legacy system call

* Add legacy call for FreeBSD compatibility

Whitespace cleanups

socket: Implement the SO_USER_COOKIE option

This socket option allows to attach an arbitrary uint32_t value to a
socket as the user-defined cookie/metadata, and then the cookie can be
used in the ke

socket: Implement the SO_USER_COOKIE option

This socket option allows to attach an arbitrary uint32_t value to a
socket as the user-defined cookie/metadata, and then the cookie can be
used in the kernel help manipulate the traffic of the socket.

For example, this socket option can be set by WireGuard and then matched
in IPFW to help control the WireGuard traffic.

This commit is mostly derived from FreeBSD, but I decided to also
support this option in getsockopt().

Note that the support of this option in IPFW (and PF and others) is
still need to be implemented. I'd like to do it in the future but it
may take quite some efforts. This commit alone doesn't achieve much
benefits, but it helps port the WireGuard code from FreeBSD, so commit
it first.

Bump __DragonFly_version.

Credit: https://github.com/freebsd/freebsd-src/commit/d5e8d236f4009fc2611f996c317e94b2c8649cf5

show more ...

getsockopt.2: Improve manpage markups a bit

Obtained-from: FreeBSD

kernel - Add per-process capability-based restrictions

* This new system allows userland to set capability restrictions which
turns off numerous kernel features and root accesses. These restricti

kernel - Add per-process capability-based restrictions

* This new system allows userland to set capability restrictions which
turns off numerous kernel features and root accesses. These restrictions
are inherited by sub-processes recursively. Once set, restrictions cannot
be removed.

Basic restrictions that mimic an unadorned jail can be enabled without
creating a jail, but generally speaking real security also requires
creating a chrooted filesystem topology, and a jail is still needed
to really segregate processes from each other. If you do so, however,
you can (for example) disable mount/umount and most global root-only
features.

* Add new system calls and a manual page for syscap_get(2) and syscap_set(2)

* Add sys/caps.h

* Add the "setcaps" userland utility and manual page.

* Remove priv.9 and the priv_check infrastructure, replacing it with
a newly designed caps infrastructure.

* The intention is to add path restriction lists and similar features to
improve jailess security in the near future, and to optimize the
priv_check code.

show more ...

getttyent.3: Tweak manpage markup a bit

ttys: Add 'ifexists' option to enable ttys only if exists

Implement the 'ifexists' ttys option in init(8) to enable a tty only if
it exists. This allows one to turn off getty for ttys that aren't
p

ttys: Add 'ifexists' option to enable ttys only if exists

Implement the 'ifexists' ttys option in init(8) to enable a tty only if
it exists. This allows one to turn off getty for ttys that aren't
present (e.g., on a headless system), and thus prevent getty error logs
from filling up /var/log/messages; e.g.,

------
Sep 20 09:13:07 microserver getty[236362]: open /dev/ttyv0: No such file or directory
Sep 20 09:13:07 microserver getty[236404]: open /dev/ttyv0: No such file or directory
Sep 20 09:13:07 microserver getty[236405]: open /dev/ttyv0: No such file or directory
Sep 20 09:13:07 microserver getty[236406]: open /dev/ttyv0: No such file or directory
Sep 20 09:13:07 microserver getty[236407]: open /dev/ttyv0: No such file or directory
Sep 20 09:13:07 microserver init: getty repeating too quickly on port /dev/ttyv0, sleeping 30 secs
------

Update the ttys(5) and getttyent(3) man pages accordingly.

The updates to ttys files will follow.

Discussed-with: dillon
Credit: https://reviews.freebsd.org/D10037

show more ...

libc - pthread_key_create() adjustments

* Have libc's stub conditionals ignore any error return from
pthread_key_create() stubs, in case we decide to change the
stub in the future.

* Change pth

libc - pthread_key_create() adjustments

* Have libc's stub conditionals ignore any error return from
pthread_key_create() stubs, in case we decide to change the
stub in the future.

* Change pthread_key_create() to start allocating keys at key #1
to work around issues with third party programs making assumptions
about the valid key range.

show more ...

Remove two empty private namespaces. One was commented out anyway.

ktrace/kdump: Implement sysctl tracing.

Useful to know which sysctls exactly are being accessed.

Adapted-from: FreeBSD

libc: Fix a typo. It's local storage, not locale storage.

libc: Sort SRCS in stdio/.

libc: Fix installation of fopencookie.3 man page

Meanwhile, fix the MLINKS error of having odd number of items, which was
causing the warning: 'warn: empty MLINK: yp_unbind.3 3'

libc/ukp_setproctitle: Properly handle skipping the executable's name.

If fmt begins with a "-" character, the executable's name should be
skipped. Our fast version of setproctitle() - which is used

libc/ukp_setproctitle: Properly handle skipping the executable's name.

If fmt begins with a "-" character, the executable's name should be
skipped. Our fast version of setproctitle() - which is used after the
10th call to setproctitle() - was not handling that correctly.

While here, fix the case where NULL is passed to setproctitle(), which
restores the process title to its original value. Just defer back to
setproctitle() in this case. Thanks to aly for catching that.

Dragonfly-bug: <https://bugs.dragonflybsd.org/issues/3319>

show more ...

libc - Port chacha20 from FreeBSD for arc4random()

* Port chacha20 from FreeBSD to replace the arc4random() suite.

Requested-by: Zoltan Keri

kldstat(2): Support to report module's full path

Add 'pathname' field to 'kld_file_stat' and 'linker_file' structs,
enable the kldstat(2) syscall to report the full path of modules.
This also allows

kldstat(2): Support to report module's full path

Add 'pathname' field to 'kld_file_stat' and 'linker_file' structs,
enable the kldstat(2) syscall to report the full path of modules.
This also allows kldstat(8) to print the full path of loaded modules,
which may be helpful in debugging.

Bump __DragonFly_version due to syscall interface change.

Obtained-from: FreeBSD (revision 172862, commit
1676805c186f5dea36d331a982480d7d9693b126)

See also: https://lists.dragonflybsd.org/pipermail/users/2023-January/428489.html

show more ...

libc/fopencookie: Additional fix which I forgot in a431bfe52a2aad0a18c.

Fixes buildworld.

<stdio.h>: Fix issues introduced with the fopencookie() changes.

a765cedf26cef470ba7deee42c365f0221690a1a added fopencookie() and
associated types from FreeBSD but it introduced a number of issues:

<stdio.h>: Fix issues introduced with the fopencookie() changes.

a765cedf26cef470ba7deee42c365f0221690a1a added fopencookie() and
associated types from FreeBSD but it introduced a number of issues:

* Wrong parentheses caused it to try to (re-)typedef the ssize_t type.
Fixed by removing parentheses and using __ssize_t. This fixes
graphics/png as pointed out by David Shao. ssize_t isn't available
in the compilation environment that graphics/png uses.

* Use off_t which is 64 bits in DragonFly. No need for off64_t.

* Put everything under __BSD_VISIBLE because it is not standard.

* While here, bump the manpage's date properly.

Reported-by: David Shao
Dragonfly-bug: <https://bugs.dragonflybsd.org/issues/3343>

show more ...

For manual pages from ports, show the ports category/name only the first
time the page is mentioned but not every time.

fopencookie(3): Add a wrapper around funopen(3)

- Minor adjustment to _flags since ours reside on the public
interface.
- Untested. A unit test would be a good thing to have :)

Taken from :

fopencookie(3): Add a wrapper around funopen(3)

- Minor adjustment to _flags since ours reside on the public
interface.
- Untested. A unit test would be a good thing to have :)

Taken from : FreeBSD 877a840c080f
FreeBSD-Review: https://reviews.freebsd.org/D6282

show more ...