7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (ASLR)
7031 noexec_user_stack should be a security-flag
7032 want a means t

7029 want per-process exploit mitigation features (secflags)
7030 want basic address space layout randomization (ASLR)
7031 noexec_user_stack should be a security-flag
7032 want a means to forbid mappings around NULL
Reviewed by: Robert Mustacchi <rm@joyent.com>
Reviewed by: Josef 'Jeff' Sipek <jeffpc@josefsipek.net>
Reviewed by: Patrick Mooney <pmooney@joyent.com>
Approved by: Dan McDonald <danmcd@omniti.com>

show more ...

6965547 verify_cfg support is no longer required by several brands

4963290 RFE: implement flexible zone administration that doesn't require uid=0 (fix copyright)

4963290 RFE: implement flexible zone administration that doesn't require uid=0
PSARC/2010/132 Delegated Administration for Zones

PSARC 2010/067 Interim modernization updates
6915312 ON should be able to build IPS packages natively
6281004 docbook.dtd is obsolete and unused
6490919 strange file in onnv-gate
6878

PSARC 2010/067 Interim modernization updates
6915312 ON should be able to build IPS packages natively
6281004 docbook.dtd is obsolete and unused
6490919 strange file in onnv-gate
6878498 update tools proto ${ROOT} to include ${MACH} and make nightly.sh copy it into parent repository
6888427 SVM packages should drop legacy objects
6893530 Some header files can be opened up
6903324 sharemgr should either use isaexec or not build 64-bit commands
6920651 mktpl will inadvertently reuse stale license files for empty license lists
6920674 svvs kmods should not be built during an open build
Portions contributed by Rich Lowe <richlowe@richlowe.net>

--HG--
rename : usr/src/cmd/oamuser/user/stdprofile => usr/src/cmd/nsadmin/dot-profile.sh
rename : usr/src/cmd/nsadmin/profile => usr/src/cmd/nsadmin/etc-profile.sh
rename : usr/src/pkgdefs/common_files/i.manifest => usr/src/cmd/svc/common/i.manifest
rename : usr/src/pkgdefs/common_files/r.manifest => usr/src/cmd/svc/common/r.manifest
rename : usr/src/lib/brand/native/Makefile => usr/src/lib/brand/ipkg/Makefile
rename : usr/src/lib/brand/native/zone/Makefile => usr/src/lib/brand/ipkg/zone/Makefile
rename : usr/src/lib/brand/native/zone/SUNWblank.xml => usr/src/lib/brand/ipkg/zone/SUNWblank.xml
rename : usr/src/lib/brand/native/zone/SUNWdefault.xml => usr/src/lib/brand/ipkg/zone/SUNWdefault.xml
rename : usr/src/lib/brand/native/zone/config.xml => usr/src/lib/brand/ipkg/zone/config.xml
rename : usr/src/lib/brand/native/zone/platform.xml => usr/src/lib/brand/ipkg/zone/platform.xml
rename : usr/src/lib/brand/native/Makefile => usr/src/lib/brand/labeled/Makefile
rename : usr/src/lib/brand/native/zone/Makefile => usr/src/lib/brand/labeled/zone/Makefile
rename : usr/src/lib/brand/native/zone/config.xml => usr/src/lib/brand/labeled/zone/config.xml
rename : usr/src/lib/brand/native/zone/platform.xml => usr/src/lib/brand/labeled/zone/platform.xml
rename : usr/src/lib/brand/native/zone/common.ksh => usr/src/lib/brand/shared/common.ksh
rename : usr/src/lib/brand/native/zone/query.ksh => usr/src/lib/brand/shared/query.ksh
rename : usr/src/lib/brand/native/zone/uninstall.ksh => usr/src/lib/brand/shared/uninstall.ksh
rename : usr/src/pkgdefs/common_files/i.rbac => usr/src/lib/libsecdb/common/i.rbac
rename : usr/src/pkgdefs/common_files/r.rbac => usr/src/lib/libsecdb/common/r.rbac
rename : usr/src/pkgdefs/license_files/cr_ATT => usr/src/pkg/license_files/cr_ATT
rename : usr/src/pkgdefs/SUNWfipe/cr_Intel => usr/src/pkg/license_files/cr_Intel.SUNWfipe
rename : usr/src/pkgdefs/SUNWintgige/cr_Intel => usr/src/pkg/license_files/cr_Intel.SUNWintgige
rename : usr/src/pkgdefs/license_files/cr_Sun => usr/src/pkg/license_files/cr_Sun
rename : usr/src/pkgdefs/SUNWgrub/grubcredits => usr/src/pkg/license_files/grubcredits
rename : usr/src/pkgdefs/SUNWcsl/lic_AMD => usr/src/pkg/license_files/lic_AMD
rename : usr/src/pkgdefs/license_files/lic_CDDL => usr/src/pkg/license_files/lic_CDDL
rename : usr/src/pkgdefs/SUNWemlxs/lic_Emulex => usr/src/pkg/license_files/lic_Emulex
rename : usr/src/pkgdefs/license_files/lic_GPLv2 => usr/src/pkg/license_files/lic_GPLv2
rename : usr/src/pkgdefs/CPQary3/lic_HP => usr/src/pkg/license_files/lic_HP
rename : usr/src/tools/opensolaris/BINARYLICENSE.txt => usr/src/pkg/license_files/lic_OSBL
rename : usr/src/pkgdefs/license_files/lic_OSBL_preamble => usr/src/pkg/license_files/lic_OSBL_preamble
rename : usr/src/pkgdefs/SUNWqlc/lic_Qlogic => usr/src/pkg/license_files/lic_Qlogic
rename : usr/src/pkgdefs/SUNWhwdata/LICENSE => usr/src/pkg/license_files/lic_SUNWhwdata
rename : usr/src/pkgdefs/SUNWroute/copyright.in => usr/src/pkg/license_files/lic_SUNWroute
rename : usr/src/pkgdefs/SUNWgss/gss_license => usr/src/pkg/license_files/lic_gss
rename : usr/src/pkgdefs/license_files/license_in_headers => usr/src/pkg/license_files/license_in_headers
rename : usr/src/uts/intel/os/solaris.xpm.gz => usr/src/uts/intel/os/solaris.xpm

show more ...

PSARC 2009/253 S10C
6666646 Solaris 10 zones on OpenSolaris binary (supported) distributions

--HG--
rename : usr/src/lib/brand/sn1/Makefile => usr/src/lib/brand/solaris10/Makefile

PSARC 2009/253 S10C
6666646 Solaris 10 zones on OpenSolaris binary (supported) distributions

--HG--
rename : usr/src/lib/brand/sn1/Makefile => usr/src/lib/brand/solaris10/Makefile
rename : usr/src/lib/brand/sn1/Makefile.sn1 => usr/src/lib/brand/solaris10/Makefile.s10
rename : usr/src/lib/brand/lx/cmd/Makefile => usr/src/lib/brand/solaris10/cmd/Makefile
rename : usr/src/lib/brand/lx/cmd/lx_native.sh => usr/src/lib/brand/solaris10/cmd/s10_native.sh
rename : usr/src/lib/brand/sn1/librtld_db/Makefile => usr/src/lib/brand/solaris10/librtld_db/Makefile
rename : usr/src/lib/brand/sn1/librtld_db/Makefile.com => usr/src/lib/brand/solaris10/librtld_db/Makefile.com
rename : usr/src/lib/brand/sn1/librtld_db/amd64/Makefile => usr/src/lib/brand/solaris10/librtld_db/amd64/Makefile
rename : usr/src/lib/brand/sn1/librtld_db/common/mapfile-vers => usr/src/lib/brand/solaris10/librtld_db/common/mapfile-vers
rename : usr/src/lib/brand/sn1/librtld_db/common/mapfile-vers.64 => usr/src/lib/brand/solaris10/librtld_db/common/mapfile-vers.64
rename : usr/src/lib/brand/sn1/librtld_db/common/sn1_librtld_db.c => usr/src/lib/brand/solaris10/librtld_db/common/solaris10_librtld_db.c
rename : usr/src/lib/brand/sn1/librtld_db/i386/Makefile => usr/src/lib/brand/solaris10/librtld_db/i386/Makefile
rename : usr/src/lib/brand/sn1/librtld_db/sparc/Makefile => usr/src/lib/brand/solaris10/librtld_db/sparc/Makefile
rename : usr/src/lib/brand/sn1/librtld_db/sparcv9/Makefile => usr/src/lib/brand/solaris10/librtld_db/sparcv9/Makefile
rename : usr/src/lib/brand/sn1/sn1_brand/Makefile => usr/src/lib/brand/solaris10/s10_brand/Makefile
rename : usr/src/lib/brand/sn1/sn1_brand/Makefile.com => usr/src/lib/brand/solaris10/s10_brand/Makefile.com
rename : usr/src/lib/brand/sn1/sn1_brand/amd64/Makefile => usr/src/lib/brand/solaris10/s10_brand/amd64/Makefile
rename : usr/src/lib/brand/sn1/sn1_brand/amd64/sn1_crt.s => usr/src/lib/brand/solaris10/s10_brand/amd64/s10_crt.s
rename : usr/src/lib/brand/sn1/sn1_brand/amd64/sn1_handler.s => usr/src/lib/brand/solaris10/s10_brand/amd64/s10_handler.s
rename : usr/src/lib/brand/sn1/sn1_brand/amd64/sn1_runexe.s => usr/src/lib/brand/solaris10/s10_brand/amd64/s10_runexe.s
rename : usr/src/lib/brand/sn1/sn1_brand/common/mapfile-vers => usr/src/lib/brand/solaris10/s10_brand/common/mapfile-vers
rename : usr/src/lib/brand/sn1/sn1_brand/common/offsets.in => usr/src/lib/brand/solaris10/s10_brand/common/offsets.in
rename : usr/src/lib/brand/sn1/sn1_brand/common/sn1_brand.c => usr/src/lib/brand/solaris10/s10_brand/common/s10_brand.c
rename : usr/src/lib/brand/sn1/sn1_brand/i386/Makefile => usr/src/lib/brand/solaris10/s10_brand/i386/Makefile
rename : usr/src/lib/brand/sn1/sn1_brand/i386/sn1_crt.s => usr/src/lib/brand/solaris10/s10_brand/i386/s10_crt.s
rename : usr/src/lib/brand/sn1/sn1_brand/i386/sn1_handler.s => usr/src/lib/brand/solaris10/s10_brand/i386/s10_handler.s
rename : usr/src/lib/brand/sn1/sn1_brand/i386/sn1_runexe.s => usr/src/lib/brand/solaris10/s10_brand/i386/s10_runexe.s
rename : usr/src/lib/brand/sn1/sn1_brand/sparc/Makefile => usr/src/lib/brand/solaris10/s10_brand/sparc/Makefile
rename : usr/src/lib/brand/sn1/sn1_brand/sparc/sn1_crt.s => usr/src/lib/brand/solaris10/s10_brand/sparc/s10_crt.s
rename : usr/src/lib/brand/sn1/sn1_brand/sparc/sn1_handler.s => usr/src/lib/brand/solaris10/s10_brand/sparc/s10_handler.s
rename : usr/src/lib/brand/sn1/sn1_brand/sparc/sn1_runexe.s => usr/src/lib/brand/solaris10/s10_brand/sparc/s10_runexe.s
rename : usr/src/lib/brand/sn1/sn1_brand/sparcv9/Makefile => usr/src/lib/brand/solaris10/s10_brand/sparcv9/Makefile
rename : usr/src/lib/brand/sn1/sn1_brand/sys/sn1_misc.h => usr/src/lib/brand/solaris10/s10_brand/sys/s10_misc.h
rename : usr/src/lib/brand/sn1/sn1_brand/Makefile => usr/src/lib/brand/solaris10/s10_npreload/Makefile
rename : usr/src/lib/brand/lx/lx_support/Makefile => usr/src/lib/brand/solaris10/s10_support/Makefile
rename : usr/src/lib/brand/sn1/zone/Makefile => usr/src/lib/brand/solaris10/zone/Makefile
rename : usr/src/lib/brand/sn1/zone/SUNWsn1.xml => usr/src/lib/brand/solaris10/zone/SUNWsolaris10.xml
rename : usr/src/lib/brand/sn1/zone/config.xml => usr/src/lib/brand/solaris10/zone/config.xml
rename : usr/src/lib/brand/native/zone/p2v.ksh => usr/src/lib/brand/solaris10/zone/p2v.ksh
rename : usr/src/lib/brand/native/zone/pkgrm.conf => usr/src/lib/brand/solaris10/zone/pkgrm.conf
rename : usr/src/lib/brand/native/zone/pkgrm.lst => usr/src/lib/brand/solaris10/zone/pkgrm.lst
rename : usr/src/lib/brand/sn1/zone/platform.xml => usr/src/lib/brand/solaris10/zone/platform.xml
rename : usr/src/lib/brand/sn1/zone/sn1_boot.sh => usr/src/lib/brand/solaris10/zone/s10_boot.ksh
rename : usr/src/lib/brand/native/zone/smf_disable.conf => usr/src/lib/brand/solaris10/zone/smf_disable.conf
rename : usr/src/lib/brand/native/zone/smf_disable.lst => usr/src/lib/brand/solaris10/zone/smf_disable.lst
rename : usr/src/pkgdefs/SUNWsn1rint/Makefile => usr/src/pkgdefs/SUNWs10brandr/Makefile
rename : usr/src/pkgdefs/SUNWsn1rint/depend => usr/src/pkgdefs/SUNWs10brandr/depend
rename : usr/src/pkgdefs/SUNWsn1rint/pkginfo.tmpl => usr/src/pkgdefs/SUNWs10brandr/pkginfo.tmpl
rename : usr/src/pkgdefs/SUNWsn1rint/prototype_com => usr/src/pkgdefs/SUNWs10brandr/prototype_com
rename : usr/src/pkgdefs/SUNWsn1rint/prototype_i386 => usr/src/pkgdefs/SUNWs10brandr/prototype_i386
rename : usr/src/pkgdefs/SUNWsn1rint/prototype_sparc => usr/src/pkgdefs/SUNWs10brandr/prototype_sparc
rename : usr/src/pkgdefs/SUNWsn1uint/Makefile => usr/src/pkgdefs/SUNWs10brandu/Makefile
rename : usr/src/pkgdefs/SUNWsn1uint/depend => usr/src/pkgdefs/SUNWs10brandu/depend
rename : usr/src/pkgdefs/SUNWsn1uint/pkginfo.tmpl => usr/src/pkgdefs/SUNWs10brandu/pkginfo.tmpl
rename : usr/src/pkgdefs/SUNWsn1uint/prototype_com => usr/src/pkgdefs/SUNWs10brandu/prototype_com
rename : usr/src/pkgdefs/SUNWsn1uint/prototype_i386 => usr/src/pkgdefs/SUNWs10brandu/prototype_i386
rename : usr/src/pkgdefs/SUNWsn1uint/prototype_sparc => usr/src/pkgdefs/SUNWs10brandu/prototype_sparc
rename : usr/src/uts/common/brand/sn1/sn1_brand.c => usr/src/uts/common/brand/solaris10/s10_brand.c
rename : usr/src/uts/common/brand/sn1/sn1_brand.h => usr/src/uts/common/brand/solaris10/s10_brand.h
rename : usr/src/uts/common/brand/sn1/sn1_offsets.in => usr/src/uts/common/brand/solaris10/s10_offsets.in
rename : usr/src/uts/intel/brand/sn1/sn1_brand_asm.s => usr/src/uts/intel/brand/solaris10/s10_brand_asm.s
rename : usr/src/uts/intel/sn1_brand/Makefile => usr/src/uts/intel/s10_brand/Makefile
rename : usr/src/uts/sun4/brand/sn1/sn1_brand_asm.s => usr/src/uts/sun4/brand/solaris10/s10_brand_asm.s
rename : usr/src/uts/sun4u/sn1_brand/Makefile => usr/src/uts/sun4u/s10_brand/Makefile
rename : usr/src/uts/sun4v/sn1_brand/Makefile => usr/src/uts/sun4v/s10_brand/Makefile

show more ...

PSARC 2009/373 Clearview IP Tunneling
PSARC 2009/410 Datalink Administration from Non-Global Zones
6858533 Clearview IP Tunneling
4861777 *snoop* cannot snoop on tunnel interfaces
501

PSARC 2009/373 Clearview IP Tunneling
PSARC 2009/410 Datalink Administration from Non-Global Zones
6858533 Clearview IP Tunneling
4861777 *snoop* cannot snoop on tunnel interfaces
5010680 M_IOCTL interface between ip and tun is horribly wrong
5029727 tun prints bogus debug messages when receiving multicast packets on 6to4 tunnels
6835873 dlpi_walk() silently fails in an exclusive zone
4152864 must not allow two tunnels to have the same tsrc/tdst pair
6855902 link and flow kstats are too promiscuous
6218826 need to be able to tunnel into a zone
4505468 network interface names can confuse, lie, and deceive
4524756 tun_wproc() takes up too much stack
6417373 tun_wproc_mdata assertion failures
4627970 scalability problems with IP in IP tunnels
4674797 ifparse_ifspec() will not correctly parse ipv6 tunnels
6509231 dladm should show links in exclusive stack zone
4793233 tun driver should include addr in DL_PHYS_ADDR_ACK for non-zero lengths
6795831 ZONE_*_DATALINK syscalls should take datalink_id_t as argument
6791472 mac module doesn't allow MAC addresses < 6 bytes
6618091 Race condition trips ASSERT() in tun.c's SIOCSLIFNAME path
6837580 bogus mi_active check in mac_set_mtu()
6868083 libinetutil: ofmt_open()'s template argument should be const
6870313 libdladm: needless dladm_init_linkprop() in i_dladm_aggr_up()
6872221 panic in dls_devnet_close() if "mtu" property is being set
4289774 Change to the interface-id does not change IPv6 link-local address
6873561 unable to create links with 31 character link names
6874666 changing a link property can accidentally destroy it
6874682 removing a link attribute corrupts the attribute list
6875167 IPCL_ISV6 conn flag is set but never used
6881764 itp reference leak in ipsec_construct_inverse_acquire()
6881951 dladm delete-vlan can no longer delete persistent-only VLANs

--HG--
rename : usr/src/uts/common/inet/tun.h => usr/src/uts/common/inet/iptun.h
rename : usr/src/uts/common/inet/ip/tun.c => usr/src/uts/common/inet/iptun/iptun.c
rename : usr/src/uts/intel/tun/Makefile => usr/src/uts/intel/iptun/Makefile
rename : usr/src/uts/sparc/tun/Makefile => usr/src/uts/sparc/iptun/Makefile

show more ...

PSARC 2009/317 Solaris PPP/PPPoE Updates
4695172 3COM has its own incompatible dialect of PPPoE
4704518 security checks on chap peer name cause interoperability problems
4711045 pppd shou

PSARC 2009/317 Solaris PPP/PPPoE Updates
4695172 3COM has its own incompatible dialect of PPPoE
4704518 security checks on chap peer name cause interoperability problems
4711045 pppd should not be discarding debug information on fatal signals
4711046 pppoec should provide a way to limit match against wildcard service
4714306 sppptun should not use M_ERROR to signal protocol problems
4743677 pppd can trigger latent access server bug
4750809 pppd needs lint cleanup
4947676 spppcomp_wput() allows an unprivileged process to "hang" the system.
5058886 PPPD misses first LCP configuration request
5060749 need a way to log demand-dial action at higher priority
5093264 PPPoE server can omit Service-Name tag in PADS response
6291911 ugly preremove script in SUNWpppdt causes messages on pkgrm from zone
6589814 pppd disavows bad echo-reply count
6636684 PPP should work in non-global exclusive-stack zones
6637245 sppp driver has half-baked _mi_driver_info function
6704096 SUNWpppdu and SUNWpppdr package dependency and content issues
6753945 sppptun doesn't honor clearview vanity naming feature.

show more ...

6768929 zoneadm attach fails on sn1 branded zones with /sbin/sh: /etc/zones/<zonename>.xml: cannot create
6758808 spurious handle close for brands without hook

6553514 native zone svr4 pkg code should be moved into zone callbacks
6621020 zlogin tries to write unneeded zero-length message and hangs
6704382 Upgrade process with zones freezes everytime

6553514 native zone svr4 pkg code should be moved into zone callbacks
6621020 zlogin tries to write unneeded zero-length message and hangs
6704382 Upgrade process with zones freezes everytime using GUI installer on ultra 45 with 1024 MB of memory
6724480 wrong reference in embedded help for zoneadm
6588602 libbrand '%*' token expansion is a mess
6705863 brand dtd says zoneroot but it should be zonepath

--HG--
rename : usr/src/cmd/zoneadm/sw_cmp.c => deleted_files/usr/src/cmd/zoneadm/sw_cmp.c
rename : usr/src/lib/brand/native/zone/postclone.sh => deleted_files/usr/src/lib/brand/native/zone/postclone.sh

show more ...

PSARC 2008/289 Least Privilege for xVM
6674678 PSARC 2008/289 Least Privilege for xVM

PSARC 2008/046 Process Contract Decorations
5079353 RFE: contract 'decoration' with service FMRI

6575612 some brands need a post-install hook to be installed
6574267 zlogin error msgs for non-native zones could be under .SUNWnative

6558487 zlogin should not call getpwnam() after zone_enter() during non-interactive zlogin -l
6561300 zlogin error messages are not locale specific for non-native zones

6516265 an exclusive zone with "limitpriv" other than "default" will panic the machine
6518710 sbd will not run with IP Instances putback to snv_57

PSARC/2004/580 zone/project.max-locked-memory Resource Controls
PSARC/2006/463 Amendment_to_zone_project.max-locked-memory_Resource_Controls
5053609 RFE: need zone.max-locked-memory rctl

PSARC/2004/580 zone/project.max-locked-memory Resource Controls
PSARC/2006/463 Amendment_to_zone_project.max-locked-memory_Resource_Controls
5053609 RFE: need zone.max-locked-memory rctl
4691104 Need mlock capability without requiring superuser privileges

show more ...

PSARC/2005/471 BrandZ: Support for non-native zones
6374606 ::nm -D without an object may not work on processes in zones
6409350 BrandZ project integration into Solaris
6455289 pthread_se

PSARC/2005/471 BrandZ: Support for non-native zones
6374606 ::nm -D without an object may not work on processes in zones
6409350 BrandZ project integration into Solaris
6455289 pthread_setschedparam() should return EPERM rather than panic libc
6455591 setpriority(3C) gets errno wrong for deficient privileges failure
6458178 fifofs doesn't support lofs mounts of fifos
6460380 Attempted open() of a symlink with the O_NOFOLLOW flag set returns EINVAL, not ELOOP
6463857 renice(1) errors erroneously

--HG--
rename : usr/src/lib/libzonecfg/zones/SUNWblank.xml => usr/src/lib/brand/native/zone/SUNWblank.xml
rename : usr/src/lib/libzonecfg/zones/SUNWdefault.xml => usr/src/lib/brand/native/zone/SUNWdefault.xml

show more ...