kernel - Add per-process capability-based restrictions* This new system allows userland to set capability restrictions which turns off numerous kernel features and root accesses. These restricti
kernel - Add per-process capability-based restrictions* This new system allows userland to set capability restrictions which turns off numerous kernel features and root accesses. These restrictions are inherited by sub-processes recursively. Once set, restrictions cannot be removed. Basic restrictions that mimic an unadorned jail can be enabled without creating a jail, but generally speaking real security also requires creating a chrooted filesystem topology, and a jail is still needed to really segregate processes from each other. If you do so, however, you can (for example) disable mount/umount and most global root-only features.* Add new system calls and a manual page for syscap_get(2) and syscap_set(2)* Add sys/caps.h* Add the "setcaps" userland utility and manual page.* Remove priv.9 and the priv_check infrastructure, replacing it with a newly designed caps infrastructure.* The intention is to add path restriction lists and similar features to improve jailess security in the near future, and to optimize the priv_check code.
show more ...
kernel: Remove opt_vm.h include from files that don't actually need it.
drm: retry page fault handler on buffer data in transitFixes Xorg crash on a connect/disconnect monitor when using amdgpu withmodesetting driver. Crash occured because buffer object was in transit
drm: retry page fault handler on buffer data in transitFixes Xorg crash on a connect/disconnect monitor when using amdgpu withmodesetting driver. Crash occured because buffer object was in transitstate. Added retry loop that allows up to 100 iterations allowing buffer objectto "catch up". During testing around 30-40 iterations were observed.Co-authored-by: Matthew Dillon <dillon@apollo.backplane.com>
drm/ttm: Update to match amdgpu driver, Linux 4.19 based
drm: Update to Linux 4.15.18* Create /dev/dri/renderD* devices Generally handle /dev entries creation as close to Linux as possible.* Add drm master support Sync authentification code with Li
drm: Update to Linux 4.15.18* Create /dev/dri/renderD* devices Generally handle /dev entries creation as close to Linux as possible.* Add drm master support Sync authentification code with Linux 4.15.18* handle vm_mm->mmap_sem in ttm page fault operations* Update dma-fence code from OpenBSD* This commit contains sleep/wakeup and other changes from Matthew Dillon <dillon@apollo.backplane.com>
kernel - Incorporate drm79.patch to master, cleaned up* Should fix a number of niggling issues in master now, that are already incorporated into the next drm sync.
kernel - Change pager interface to pass page index 2/2* Adjust the DRM calls to vm_pager_get_page() to pass the page index.* Greatly simplify drm/linux_shmem.c and drm/ttm/ttm_bo_vm.c, removi
kernel - Change pager interface to pass page index 2/2* Adjust the DRM calls to vm_pager_get_page() to pass the page index.* Greatly simplify drm/linux_shmem.c and drm/ttm/ttm_bo_vm.c, removing the need to deal with placemarker pages for VM faults on OBJT_MGTDEVICE objects.
drm/ttm: Use workqueues everywhereRemove the last direct usage of taskqueues.
drm: fix a bug in ttm_bo_add_to_lru()
drm: Update to Linux 4.12.14* Initial Geminilake support* Support improvements and model-specific bug fixes for Broxton, Haswell, Broadwell, Skylake and Kabylake hardware* Various generic i91
drm: Update to Linux 4.12.14* Initial Geminilake support* Support improvements and model-specific bug fixes for Broxton, Haswell, Broadwell, Skylake and Kabylake hardware* Various generic i915 bug fixes, including page flipping and memory corruption issues* Minor radeon bug fixes
drm: Update base driver to Linux 4.10.17Thanks to Matthew Dillon <dillon@apollo.backplane.com>for some VM fixes.
drm/linux/dma-buf: Rename struct fence to dma_fence
drm/i915: Update DRIVER_DATE to 20161024
drm: Fix lockinit() calls in previous commitLK_EXCLUSIVE is a lockmgr() argument, not a lockinit() one.
drm: Replace all Linux spinlocks by lockmgr locks* The DragonFly kernel can sleep in different circumstances than Linux* Linux driver code has not been written to prevent it* Make all Linux spi
drm: Replace all Linux spinlocks by lockmgr locks* The DragonFly kernel can sleep in different circumstances than Linux* Linux driver code has not been written to prevent it* Make all Linux spinlock_t spinlocks lockmgr locks and avoid potential problems once and for all
drm: Update generic, ttm and radeon code to Linux 4.9* Generally cleanup non driver-specific code and increase its robustness* DisplayPort support improvements* Atomic modesetting improvement
drm: Update generic, ttm and radeon code to Linux 4.9* Generally cleanup non driver-specific code and increase its robustness* DisplayPort support improvements* Atomic modesetting improvements* Radeon performance and stability improvements* drm/i915 stays based on Linux 4.7.10 with Linux 4.19 changes for nowReviewed-by: Romick
drm/ttm: Partially sync the vm fault code with LinuxPrevent crashes with Mesa-using applications.
drm/radeon: Update to Linux 4.7.10* Various bugfixes, especially related to Displayport and vblank handling* Sea Islands and Southern Islands GPUs support improvements* Various quirks to fix
drm/radeon: Update to Linux 4.7.10* Various bugfixes, especially related to Displayport and vblank handling* Sea Islands and Southern Islands GPUs support improvements* Various quirks to fix problems for specific cards, mostly Radeon R7 370 and Radeon R9 270X models
drm/radeon: Update to Linux 4.4.180* Bugfixes and workaround for hardware issues, including quirks for various R7 370 and R9 270 models* VT switching fixes from dillon@* Fan management improv
drm/radeon: Update to Linux 4.4.180* Bugfixes and workaround for hardware issues, including quirks for various R7 370 and R9 270 models* VT switching fixes from dillon@* Fan management improvements* Improved support for 120+ Hz monitors
drm/radeon: Upgrade to Linux 3.19.8* Various bug fixes and hardware bug workarounds* Fan control improvements, especially on Southern Islands (SI) and Sea Islands (CI) GPUs* Performance impro
drm/radeon: Upgrade to Linux 3.19.8* Various bug fixes and hardware bug workarounds* Fan control improvements, especially on Southern Islands (SI) and Sea Islands (CI) GPUs* Performance improvements due to better memory management
kernel - VM rework part 14 - Core pmap work, stabilize for X/drm* Don't gratuitously change the vm_page flags in the drm code. The vm_phys_fictitious_reg_range() code in drm_vm.c was clearing
kernel - VM rework part 14 - Core pmap work, stabilize for X/drm* Don't gratuitously change the vm_page flags in the drm code. The vm_phys_fictitious_reg_range() code in drm_vm.c was clearing PG_UNMANAGED. It was only luck that this worked before, but because these are faked pages, PG_UNMANAGED must be set or the system will implode trying to convert the physical address back to a vm_page in certain routines. The ttm code was setting PG_FICTITIOUS in order to prevent the page from getting into the active or inactive queues (they had a conditional test for PG_FICTITIOUS). But ttm never cleared the bit before freeing the page. Remove the hack and instead fix it in vm_page.c* in vm_object_terminate(), allow the case where there are still wired pages in a OBJT_MGTDEVICE object that has wound up on a queue (don't complain about it). This situation arises because the ttm code uses the contig malloc API which returns wired pages. NOTE: vm_page_activate()/vm_page_deactivate() are allowed to mess with wired pages. Wired pages are not anything 'special' to the queues, which allows us to avoid messing with the queues when pages are assigned to the buffer cache.
drm/ttm: Fix a deadlock involving fictitious VM pagesThis prevents processes getting hung in "ttm_unm" state.
drm: Sync ttm and radeon drivers with Linux 3.18
drm/ttm: Sync with Linux 3.16
drm/ttm: Remove two useless files
1234