16454 want IP_MINTTL socket option
16474 sctp returns wrong error for IPPROTO_IP on non-IPv4
Reviewed by: C Fraire <cfraire@me.com>
Reviewed by: Andy Fiddaman <illumos@fiddaman.net>
R

16454 want IP_MINTTL socket option
16474 sctp returns wrong error for IPPROTO_IP on non-IPv4
Reviewed by: C Fraire <cfraire@me.com>
Reviewed by: Andy Fiddaman <illumos@fiddaman.net>
Reviewed by: Dan McDonald <danmcd@mnx.io>
Reviewed by: Jason King <jason.brian.king+illumos@gmail.com>
Approved by: Gordon Ross <gordon.w.ross@gmail.com>

show more ...

5798 fexecve() needed per POSIX 2008
Portions contributed by: Garrett D'Amore <garrett@damore.org>
Reviewed by: Dan Cross <cross@oxidecomputer.com>
Reviewed by: Bill Sommerfeld <sommerfel

5798 fexecve() needed per POSIX 2008
Portions contributed by: Garrett D'Amore <garrett@damore.org>
Reviewed by: Dan Cross <cross@oxidecomputer.com>
Reviewed by: Bill Sommerfeld <sommerfeld@hamachi.org>
Approved by: Gordon Ross <gordon.w.ross@gmail.com>

show more ...

16055 truss should not be isaexec'd
Reviewed by: Toomas Soome <tsoome@me.com>
Reviewed by: Igor Kozhukhov <igor@dilos.org>
Reviewed by: Gordon Ross <Gordon.W.Ross@gmail.com>
Approved

16055 truss should not be isaexec'd
Reviewed by: Toomas Soome <tsoome@me.com>
Reviewed by: Igor Kozhukhov <igor@dilos.org>
Reviewed by: Gordon Ross <Gordon.W.Ross@gmail.com>
Approved by: Patrick Mooney <pmooney@pfmooney.com>

show more ...

15119 truss could support IP, IPv6 sockopts
15115 IP_DONTFRAG could use docs
Reviewed by: Ryan Zezeski <ryan@oxide.computer>
Approved by: Richard Lowe <richlowe@richlowe.net>

14768 retire nca
Reviewed by: Peter Tribble <peter.tribble@gmail.com>
Reviewed by: Andy Fiddaman <andy@omnios.org>
Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
Approve

14768 retire nca
Reviewed by: Peter Tribble <peter.tribble@gmail.com>
Reviewed by: Andy Fiddaman <andy@omnios.org>
Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
Approved by: Robert Mustacchi <rm@fingolfin.org>

show more ...

14205 Want UDP src port hashing for VXLAN
Reviewed by: Andy Fiddaman <andy@omnios.org>
Reviewed by: Toomas Soome <tsoome@me.com>
Approved by: Dan McDonald <danmcd@joyent.com>

12159 truss psflags printing is broken
Reviewed by: Toomas Soome <tsoome@me.com>
Approved by: Robert Mustacchi <rm@fingolfin.org>

12126 truss: passing argument 1 to restrict-qualified parameter aliases with argument 4
Reviewed by: C Fraire <cfraire@me.com>
Approved by: Robert Mustacchi <rm@fingolfin.org>

11554 Want TCP_CONGESTION socket option
Reviewed by: Yuri Pankov <yuri.pankov@nexenta.com>
Approved by: Richard Lowe <richlowe@richlowe.net>

11442 truss: NULL pointer errors
Reviewed by: Andy Fiddaman <andy@omniosce.org>
Approved by: Dan McDonald <danmcd@joyent.com>

7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (ASLR)
7031 noexec_user_stack should be a security-flag
7032 want a means t

7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (ASLR)
7031 noexec_user_stack should be a security-flag
7032 want a means to forbid mappings around NULL
Reviewed by: Robert Mustacchi <rm@joyent.com>
Reviewed by: Josef 'Jeff' Sipek <jeffpc@josefsipek.net>
Reviewed by: Patrick Mooney <pmooney@joyent.com>
Approved by: Dan McDonald <danmcd@omniti.com>

show more ...

6818 add MADV_PURGE to provide busted Linux MADV_DONTNEED semantics
Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
Reviewed by: Cody Mello <melloc@joyent.com>
Approved by: G

6818 add MADV_PURGE to provide busted Linux MADV_DONTNEED semantics
Reviewed by: Hans Rosenfeld <rosenfeld@grumpf.hope-2000.org>
Reviewed by: Cody Mello <melloc@joyent.com>
Approved by: Garrett D'Amore <garrett@damore.org>

show more ...

6227 truss(1M) doesn't show TCP_KEEPIDLE, TCP_KEEPCNT, and TCP_KEEPINTVL
Reviewed by: Dan McDonald <danmcd@omniti.com>
Reviewed by: Richard PALO <richard@netbsd.org>
Reviewed by: Toomas S

6227 truss(1M) doesn't show TCP_KEEPIDLE, TCP_KEEPCNT, and TCP_KEEPINTVL
Reviewed by: Dan McDonald <danmcd@omniti.com>
Reviewed by: Richard PALO <richard@netbsd.org>
Reviewed by: Toomas Soome <tsoome@me.com>
Approved by: Robert Mustacchi <rm@joyent.com>

show more ...

5830 want arc4random(3C) suite
5802 want getentropy(3C)
5803 want getrandom(2)
5804 want explicit_bzero(3C)
5805 want MC_INHERIT_ZERO
5806 uuid_generate can leak its cache in edge

5830 want arc4random(3C) suite
5802 want getentropy(3C)
5803 want getrandom(2)
5804 want explicit_bzero(3C)
5805 want MC_INHERIT_ZERO
5806 uuid_generate can leak its cache in edge conditions
Reviewed by: Jerry Jelinek <jerry.jelinek@joyent.com>
Reviewed by: Joshua M. Clulow <josh@sysmgr.org>
Reviewed by: Josef 'Jeff' Sipek <josef.sipek@nexenta.com>
Reviewed by: Garrett D'Amore <garrett@damore.org>
Approved by: Garrett D'Amore <garrett@damore.org>

show more ...

3785 Implement MAP_32BIT flag to mmap()
Reviewed by: Albert Lee <trisk@nexenta.com>
Reviewed by: Dan McDonald <danmcd@nexenta.com>
Reviewed by: Robert Mustacchi <rm@joyent.com>
Approv

3785 Implement MAP_32BIT flag to mmap()
Reviewed by: Albert Lee <trisk@nexenta.com>
Reviewed by: Dan McDonald <danmcd@nexenta.com>
Reviewed by: Robert Mustacchi <rm@joyent.com>
Approved by: Dan McDonald <danmcd@nexenta.com>

show more ...

3713 Implement accept4() (fix lint)

3713 Implement accept4()
3714 Implement pipe2()
3715 Implement dup3()
3716 Implement mkostemp() and mkostemps()
3719 so_socketpair syscall should preserve FD_CLOEXEC flag
Reviewed

3713 Implement accept4()
3714 Implement pipe2()
3715 Implement dup3()
3716 Implement mkostemp() and mkostemps()
3719 so_socketpair syscall should preserve FD_CLOEXEC flag
Reviewed by: Dan McDonald <danmcd@nexenta.com>
Reviewed by: Robert Mustacchi <rm@joyent.com>
Approved by: Garrett D'Amore <garrett@damore.org>

show more ...

3666 Implement SOCK_CLOEXEC flag to socket()
Reviewed by Dan McDonald <danmcd@nexenta.com>
Reviewed by Robert Mustacchi <rm@joyent.com>
Approved by Garrett D'Amore <garrett@damore.org>

merge with onnv_147
Reviewed by: garrett@nexenta.com
Approved by: garrett@nexenta.com

PSARC/2009/590 Socket Filter Framework
6939085 Socket Filter Framework
6802067 connect_failed kernel socket callback is not triggered
6776450 time spent in tcp_close could be reduced/defe

PSARC/2009/590 Socket Filter Framework
6939085 Socket Filter Framework
6802067 connect_failed kernel socket callback is not triggered
6776450 time spent in tcp_close could be reduced/deferred to a worker thread
6828586 assertion failed: family == 26, file: ../../common/fs/sockfs/socksyscalls.c, line: 1608
6802078 kernel socket 'newconn' callback is passing rcv queue size as an argument

show more ...

PSARC 2010/235 POSIX 1003.1-2008 *at(2) syscalls
6910251 need support for all POSIX.1-2008 *at(2) syscalls
6964835 mknod(2) auditing omits the pathname for invalid arguments

PSARC 2010/151 new socket options for TCP timers
6955557 Various new TCP socket options

PSARC 2009/377 In-kernel pfexec implementation.
PSARC 2009/378 Basic File Privileges
PSARC 2010/072 RBAC update: user attrs from profiles
4912090 pfzsh(1) should exist
4912093 pfbash(

PSARC 2009/377 In-kernel pfexec implementation.
PSARC 2009/378 Basic File Privileges
PSARC 2010/072 RBAC update: user attrs from profiles
4912090 pfzsh(1) should exist
4912093 pfbash(1) should exist
4912096 pftcsh(1) should exist
6440298 Expand the basic privilege set in order to restrict file access
6859862 Move pfexec into the kernel
6919171 cred_t sidesteps kmem_debug; we need to be able to detect bad hold/free when they occur
6923721 The new SYS_SMB privilege is not backward compatible
6937562 autofs doesn't remove its door when the zone shuts down
6937727 Zones stuck on deathrow; netstack_zone keeps a credential reference to the zone
6940159 Implement PSARC 2010/072

show more ...

PSARC 2009/657 delete obsolete system call traps
6906485 delete obsolete system call traps

--HG--
rename : usr/src/cmd/truss/xstat.c => usr/src/cmd/truss/stat.c
rename : usr/src/

PSARC 2009/657 delete obsolete system call traps
6906485 delete obsolete system call traps

--HG--
rename : usr/src/cmd/truss/xstat.c => usr/src/cmd/truss/stat.c
rename : usr/src/lib/libc/port/gen/dup2.c => usr/src/lib/libc/port/gen/dup.c
rename : usr/src/lib/libc/port/sys/libc_fcntl.c => usr/src/lib/libc/port/sys/fcntl.c
rename : usr/src/lib/libc/port/sys/libc_open.c => usr/src/lib/libc/port/sys/open.c

show more ...

6898247 The definition BSM_AUDITON is never used.