Source-Changes-HG archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
[src/trunk]: src/sys/arch Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in...
details: https://anonhg.NetBSD.org/src/rev/10bda2b5bc57
branches: trunk
changeset: 841075:10bda2b5bc57
user: sevan <sevan%NetBSD.org@localhost>
date: Fri Apr 26 21:40:28 2019 +0000
description:
Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.
diffstat:
sys/arch/acorn32/conf/GENERIC | 21 +++++----------------
sys/arch/alpha/conf/GENERIC | 24 +++++-------------------
sys/arch/amd64/conf/GENERIC | 22 ++++------------------
sys/arch/amiga/conf/GENERIC | 21 +++++----------------
sys/arch/amigappc/conf/GENERIC | 21 +++++----------------
sys/arch/arc/conf/GENERIC | 21 +++++----------------
sys/arch/bebox/conf/GENERIC | 25 +++++--------------------
sys/arch/cats/conf/GENERIC | 19 ++++---------------
sys/arch/cesfic/conf/GENERIC | 19 ++++---------------
sys/arch/cobalt/conf/GENERIC | 21 +++++----------------
sys/arch/evbarm/conf/GENERIC.common | 19 +++----------------
sys/arch/evbmips/conf/ADM5120 | 7 +++++--
sys/arch/evbmips/conf/ADM5120-NB | 7 +++++--
sys/arch/evbmips/conf/ADM5120-USB | 6 ++++--
sys/arch/evbmips/conf/ALCHEMY | 7 +++++--
sys/arch/evbmips/conf/AP30 | 7 +++++--
sys/arch/evbmips/conf/CI20 | 6 ++++--
sys/arch/evbmips/conf/CPMBR1400 | 5 ++++-
sys/arch/evbmips/conf/DB120 | 7 +++++--
sys/arch/evbmips/conf/ERLITE | 7 +++++--
sys/arch/evbmips/conf/GDIUM | 19 ++++---------------
sys/arch/evbmips/conf/LOONGSON | 19 ++++---------------
sys/arch/evbmips/conf/MALTA | 7 +++++--
sys/arch/evbmips/conf/MERAKI | 7 +++++--
sys/arch/evbmips/conf/RB153 | 7 +++++--
sys/arch/evbmips/conf/RB433UAH | 7 +++++--
sys/arch/evbmips/conf/SBMIPS | 19 ++++---------------
sys/arch/evbmips/conf/XLSATX | 7 +++++--
sys/arch/evbmips/conf/ZYXELKX | 5 ++++-
sys/arch/evbppc/conf/EV64260 | 10 +++++++++-
sys/arch/evbppc/conf/EXPLORA451 | 7 +++++--
sys/arch/evbppc/conf/MPC8536DS | 12 ++++++++++--
sys/arch/evbppc/conf/MPC8548CDS | 12 ++++++++++--
sys/arch/evbppc/conf/OPENBLOCKS200 | 10 +++++++++-
sys/arch/evbppc/conf/OPENBLOCKS266 | 12 ++++++++++--
sys/arch/evbppc/conf/OPENBLOCKS600 | 11 +++++++++--
sys/arch/evbppc/conf/P2020DS | 12 ++++++++++--
sys/arch/evbppc/conf/P2020RDB | 12 ++++++++++--
sys/arch/evbppc/conf/PMPPC | 9 ++++++++-
sys/arch/evbppc/conf/RB800 | 12 ++++++++++--
sys/arch/evbppc/conf/RB850GX2 | 12 ++++++++++--
sys/arch/evbppc/conf/TWRP1025 | 12 ++++++++++--
sys/arch/evbsh3/conf/AP_MS104_SH4 | 10 +++++++++-
sys/arch/evbsh3/conf/T_SH7706LAN | 10 +++++++++-
sys/arch/evbsh3/conf/T_SH7706LSR | 10 +++++++++-
sys/arch/ews4800mips/conf/GENERIC | 20 +++++---------------
sys/arch/hp300/conf/GENERIC | 21 +++++----------------
sys/arch/hpcarm/conf/IPAQ | 10 +++++++++-
sys/arch/hpcarm/conf/JORNADA720 | 12 ++++++++++--
sys/arch/hpcarm/conf/WZERO3 | 12 ++++++++++--
sys/arch/hpcmips/conf/GENERIC | 24 +++++++++---------------
sys/arch/hpcsh/conf/GENERIC | 22 ++++++++--------------
sys/arch/hppa/conf/GENERIC | 21 +++++----------------
sys/arch/i386/conf/GENERIC | 20 ++++----------------
sys/arch/ibmnws/conf/GENERIC | 22 ++++++++--------------
sys/arch/iyonix/conf/GENERIC | 22 +++++-----------------
sys/arch/landisk/conf/GENERIC | 21 +++++----------------
sys/arch/mac68k/conf/GENERIC | 21 +++++----------------
sys/arch/macppc/conf/GENERIC | 19 +++----------------
sys/arch/mipsco/conf/GENERIC | 19 ++++---------------
sys/arch/mmeye/conf/GENERIC | 24 +++++++++---------------
sys/arch/netwinder/conf/GENERIC | 19 ++++---------------
sys/arch/news68k/conf/GENERIC | 21 +++++----------------
sys/arch/newsmips/conf/GENERIC | 21 +++++----------------
sys/arch/next68k/conf/GENERIC | 21 +++++----------------
sys/arch/ofppc/conf/GENERIC | 24 +++++++++---------------
sys/arch/pmax/conf/GENERIC | 22 +++++-----------------
sys/arch/prep/conf/GENERIC | 24 +++++-------------------
sys/arch/rs6000/conf/GENERIC | 22 +++++-----------------
sys/arch/sandpoint/conf/GENERIC | 21 +++++----------------
sys/arch/sbmips/conf/GENERIC | 24 +++++++++---------------
sys/arch/sgimips/conf/GENERIC32_IP12 | 21 +++++----------------
sys/arch/sgimips/conf/GENERIC32_IP2x | 21 +++++----------------
sys/arch/sgimips/conf/GENERIC32_IP3x | 19 ++++---------------
sys/arch/shark/conf/GENERIC | 24 +++++++++---------------
sys/arch/sparc/conf/GENERIC | 24 +++++-------------------
sys/arch/sparc64/conf/GENERIC | 27 ++++++---------------------
sys/arch/vax/conf/GENERIC | 21 +++++----------------
78 files changed, 480 insertions(+), 768 deletions(-)
diffs (truncated from 3488 to 300 lines):
diff -r 6eae9c5262f9 -r 10bda2b5bc57 sys/arch/acorn32/conf/GENERIC
--- a/sys/arch/acorn32/conf/GENERIC Fri Apr 26 21:02:42 2019 +0000
+++ b/sys/arch/acorn32/conf/GENERIC Fri Apr 26 21:40:28 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: GENERIC,v 1.128 2019/04/13 08:22:58 isaki Exp $
+# $NetBSD: GENERIC,v 1.129 2019/04/26 21:40:28 sevan Exp $
#
# GENERIC --- NetBSD/acorn32 complete configuration
#
@@ -22,7 +22,7 @@
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
-#ident "GENERIC-$Revision: 1.128 $"
+#ident "GENERIC-$Revision: 1.129 $"
# estimated number of users
maxusers 32
@@ -131,7 +131,7 @@
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
-#options BUFQ_PRIOCSCAN
+options BUFQ_PRIOCSCAN
# Development and Debugging options
@@ -285,7 +285,7 @@
pseudo-device loop # network loopback
pseudo-device bpfilter # packet filter
-#pseudo-device carp # Common Address Redundancy Protocol
+pseudo-device carp # Common Address Redundancy Protocol
pseudo-device sl # CSLIP
pseudo-device ppp # PPP
pseudo-device pppoe # PPP over Ethernet (RFC 2516)
@@ -328,18 +328,7 @@
pseudo-device accf_data # "dataready" accept filter
pseudo-device accf_http # "httpready" accept filter
-# Veriexec
-#
-# a pseudo device needed for veriexec
-#pseudo-device veriexec
-#
-# Uncomment the fingerprint methods below that are desired. Note that
-# removing fingerprint methods will have almost no impact on the kernel
-# code size.
-#
-#options VERIFIED_EXEC_FP_SHA256
-#options VERIFIED_EXEC_FP_SHA384
-#options VERIFIED_EXEC_FP_SHA512
+include "dev/veriexec.config"
# If the standard modes don't work for your monitor, you can specify
# a RISC-OS-format monitor definition file and a list of modes here.
diff -r 6eae9c5262f9 -r 10bda2b5bc57 sys/arch/alpha/conf/GENERIC
--- a/sys/arch/alpha/conf/GENERIC Fri Apr 26 21:02:42 2019 +0000
+++ b/sys/arch/alpha/conf/GENERIC Fri Apr 26 21:40:28 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: GENERIC,v 1.393 2019/04/13 08:22:58 isaki Exp $
+# $NetBSD: GENERIC,v 1.394 2019/04/26 21:40:28 sevan Exp $
#
# This machine description file is used to generate the default NetBSD
# kernel.
@@ -19,7 +19,7 @@
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
-ident "GENERIC-$Revision: 1.393 $"
+ident "GENERIC-$Revision: 1.394 $"
maxusers 32
@@ -51,7 +51,7 @@
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
-#options BUFQ_PRIOCSCAN
+options BUFQ_PRIOCSCAN
# Diagnostic/debugging support options
#options DIAGNOSTIC # Cheap kernel consistency checks
@@ -707,7 +707,7 @@
pseudo-device swcrypto # software crypto implementation
pseudo-device bpfilter
-#pseudo-device carp # Common Address Redundancy Protocol
+pseudo-device carp # Common Address Redundancy Protocol
pseudo-device ccd
pseudo-device cgd # cryptographic disk devices
pseudo-device raid # RAIDframe disk driver
@@ -757,21 +757,7 @@
pseudo-device btuart # Bluetooth HCI UART (H4)
pseudo-device putter # for puffs and pud
-#options FILEASSOC # fileassoc(9) - required for Veriexec
- # and PAX_SEGVGUARD
-
-# Veriexec
-#
-# a pseudo device needed for veriexec
-#pseudo-device veriexec
-#
-# Uncomment the fingerprint methods below that are desired. Note that
-# removing fingerprint methods will have almost no impact on the kernel
-# code size.
-#
-#options VERIFIED_EXEC_FP_SHA256
-#options VERIFIED_EXEC_FP_SHA384
-#options VERIFIED_EXEC_FP_SHA512
+include "dev/veriexec.config"
options PAX_MPROTECT=0 # PaX mprotect(2) restrictions
options PAX_ASLR=0 # PaX Address Space Layout Randomization
diff -r 6eae9c5262f9 -r 10bda2b5bc57 sys/arch/amd64/conf/GENERIC
--- a/sys/arch/amd64/conf/GENERIC Fri Apr 26 21:02:42 2019 +0000
+++ b/sys/arch/amd64/conf/GENERIC Fri Apr 26 21:40:28 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: GENERIC,v 1.525 2019/04/25 03:53:11 msaitoh Exp $
+# $NetBSD: GENERIC,v 1.526 2019/04/26 21:40:28 sevan Exp $
#
# GENERIC machine description file
#
@@ -22,7 +22,7 @@
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
-#ident "GENERIC-$Revision: 1.525 $"
+#ident "GENERIC-$Revision: 1.526 $"
maxusers 64 # estimated number of users
@@ -1133,7 +1133,7 @@
# network pseudo-devices
pseudo-device bpfilter # Berkeley packet filter
-#pseudo-device carp # Common Address Redundancy Protocol
+pseudo-device carp # Common Address Redundancy Protocol
pseudo-device loop # network loopback
#pseudo-device mpls # MPLS pseudo-interface
pseudo-device ppp # Point-to-Point Protocol
@@ -1196,21 +1196,7 @@
# userland interface to drivers, including autoconf and properties retrieval
pseudo-device drvctl
-options FILEASSOC # fileassoc(9) - needed by Veriexec
- # and PAX_SEGVGUARD
-
-# Veriexec
-#
-# a pseudo device needed for veriexec
-pseudo-device veriexec
-#
-# Uncomment the fingerprint methods below that are desired. Note that
-# removing fingerprint methods will have almost no impact on the kernel
-# code size.
-#
-options VERIFIED_EXEC_FP_SHA256
-options VERIFIED_EXEC_FP_SHA384
-options VERIFIED_EXEC_FP_SHA512
+include "dev/veriexec.config"
options PAX_SEGVGUARD=0 # PaX Segmentation fault guard
options PAX_MPROTECT=1 # PaX mprotect(2) restrictions
diff -r 6eae9c5262f9 -r 10bda2b5bc57 sys/arch/amiga/conf/GENERIC
--- a/sys/arch/amiga/conf/GENERIC Fri Apr 26 21:02:42 2019 +0000
+++ b/sys/arch/amiga/conf/GENERIC Fri Apr 26 21:40:28 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: GENERIC,v 1.323 2019/04/13 08:26:14 isaki Exp $
+# $NetBSD: GENERIC,v 1.324 2019/04/26 21:40:28 sevan Exp $
#
# This file was automatically created.
# Changes will be lost when make is run in this directory.
@@ -29,7 +29,7 @@
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
-#ident "GENERIC-$Revision: 1.323 $"
+#ident "GENERIC-$Revision: 1.324 $"
makeoptions COPTS="-O2 -fno-reorder-blocks" # see share/mk/sys.mk
@@ -164,7 +164,7 @@
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
-#options BUFQ_PRIOCSCAN
+options BUFQ_PRIOCSCAN
#
# Misc. debugging options
@@ -552,7 +552,7 @@
pseudo-device tap # virtual Ethernet
#pseudo-device gre # generic L3 over IP tunnel
pseudo-device bpfilter # Berkeley packet filter
-#pseudo-device carp # Common Address Redundancy Protocol
+pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933)
#pseudo-device faith # IPv[46] tcp relay translation i/f
@@ -594,17 +594,6 @@
pseudo-device bcsp # BlueCore Serial Protocol
pseudo-device btuart # Bluetooth HCI UART (H4)
-# Veriexec
-#
-# a pseudo device needed for veriexec
-#pseudo-device veriexec
-#
-# Uncomment the fingerprint methods below that are desired. Note that
-# removing fingerprint methods will have almost no impact on the kernel
-# code size.
-#
-#options VERIFIED_EXEC_FP_SHA256
-#options VERIFIED_EXEC_FP_SHA384
-#options VERIFIED_EXEC_FP_SHA512
+include "dev/veriexec.config"
config netbsd root on ? type ?
diff -r 6eae9c5262f9 -r 10bda2b5bc57 sys/arch/amigappc/conf/GENERIC
--- a/sys/arch/amigappc/conf/GENERIC Fri Apr 26 21:02:42 2019 +0000
+++ b/sys/arch/amigappc/conf/GENERIC Fri Apr 26 21:40:28 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: GENERIC,v 1.36 2019/04/13 08:22:58 isaki Exp $
+# $NetBSD: GENERIC,v 1.37 2019/04/26 21:40:28 sevan Exp $
#
# GENERIC machine description file
#
@@ -22,7 +22,7 @@
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
-#ident "GENERIC-$Revision: 1.36 $"
+#ident "GENERIC-$Revision: 1.37 $"
maxusers 8
@@ -58,7 +58,7 @@
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
-#options BUFQ_PRIOCSCAN
+options BUFQ_PRIOCSCAN
#
# Diagnostic/debugging support options
@@ -392,7 +392,7 @@
pseudo-device tap # virtual Ethernet
#pseudo-device gre # generic L3 over IP tunnel
pseudo-device bpfilter # Berkeley packet filter
-#pseudo-device carp # Common Address Redundancy Protocol
+pseudo-device carp # Common Address Redundancy Protocol
pseudo-device npf # NPF packet filter
pseudo-device gif # IPv[46] over IPv[46] tunnel (RFC1933)
#pseudo-device faith # IPv[46] tcp relay translation i/f
@@ -431,18 +431,7 @@
pseudo-device ksyms # /dev/ksyms (kernel symbols)
pseudo-device nsmb # experimental - SMB requester
-# Veriexec
-#
-# a pseudo device needed for veriexec
-#pseudo-device veriexec
-#
-# Uncomment the fingerprint methods below that are desired. Note that
-# removing fingerprint methods will have almost no impact on the kernel
-# code size.
-#
-#options VERIFIED_EXEC_FP_SHA256
-#options VERIFIED_EXEC_FP_SHA384
-#options VERIFIED_EXEC_FP_SHA512
+include "dev/veriexec.config"
# Kernel root file system and dump configuration
config netbsd root on ? type ?
diff -r 6eae9c5262f9 -r 10bda2b5bc57 sys/arch/arc/conf/GENERIC
--- a/sys/arch/arc/conf/GENERIC Fri Apr 26 21:02:42 2019 +0000
+++ b/sys/arch/arc/conf/GENERIC Fri Apr 26 21:40:28 2019 +0000
@@ -1,4 +1,4 @@
-# $NetBSD: GENERIC,v 1.192 2018/12/12 06:29:36 maxv Exp $
+# $NetBSD: GENERIC,v 1.193 2019/04/26 21:40:29 sevan Exp $
#
# GENERIC machine description file
#
@@ -22,7 +22,7 @@
options INCLUDE_CONFIG_FILE # embed config file in kernel binary
-#ident "GENERIC-$Revision: 1.192 $"
+#ident "GENERIC-$Revision: 1.193 $"
maxusers 32 # estimated number of users
@@ -60,7 +60,7 @@
# Alternate buffer queue strategies for better responsiveness under high
# disk I/O load.
#options BUFQ_READPRIO
-#options BUFQ_PRIOCSCAN
+options BUFQ_PRIOCSCAN
Home |
Main Index |
Thread Index |
Old Index