wireguard-openbsd/sys/kern/vfs_syscalls.c, branch jd/queueboosts

Move unveil data structures away from the proc.h header into the

2020-03-19T13:55:20Z

implementation file. Pushing the assignment of ps_uvpcwd down to unveil_add() is required but it doesn't introduce any functional change. ok mpi@ semarie@

In order to unlock flock(2), make writes to the f_iflags field of struct

2020-03-13T10:07:01Z

file atomic. This also gets rid of the last kernel lock protected field in the scope of struct file. ok mpi@ visa@

Acquire fdplock when updating fd_cmask. This moves the code

2020-01-30T15:36:11Z

toward MP-safety. OK mpi@, anton@

add a new __tmpfd system call that creates a new unnamed file in /tmp.

2020-01-26T04:28:18Z

intended for shm/fd passing, but for programs that may otherwise like filesystem access. ok beck deraadt kettenis

Clear mount operation argument flags from mnt_flag after mount.

2020-01-18T08:40:19Z

OK bluhm@

Convert the vnode list at the mount point into a tailq. During

2020-01-10T10:33:34Z

unmount this list is traversed and the dirty vnodes are flushed to disk. Forced unmount expects that the list is empty after flushing, otherwise the kernel panics with "dangling vnode". As the write to disk can sleep, new vnodes may be inserted. If softdep is enabled, resolving the dependencies creates new dirty vnodes and inserts them to the list. To fix the panic, let insmntque() insert new vnodes at the tail of the list. Then vflush() will still catch them while traversing the list in forward direction. OK tedu@ millert@ visa@

Eliminate the sketchy use of ps_mainproc here by making unveil_add_vnode()

2019-11-29T20:58:17Z

take a struct proc* instead of a struct process*, and vice versa making unveil_lookup() take a process* instead of a proc*. ok beck@

Don't use LOCKPARENT on namei calls for realpath(). We don't

2019-11-26T00:26:36Z

require this anymore since we now behave like posix. Fixes a problem where a symlink to / would return ENOTDIR because the parent could not be locked - noticed by Raimo Niskanen ok guenther@ deraadt@

Fix vn_open to require an op of 0, and 0 or KERNELPATH only as flags.

2019-10-06T16:24:14Z

sweep tree to correct NDIINT op and flags ahead of time. document the requirement. This allows KERNELPATH to be used to bypass unveil for crash dumps with nosuidcoredump=2 or 3 ok visa@ deraadt@ florian@

Make readlink require UNVEIL_READ instead of UNVEIL_INSPECT only

2019-08-31T17:59:33Z

since realpath() is now a system call ok deraadt@