summaryrefslogtreecommitdiff
path: root/usr/src/lib/libbsm
AgeCommit message (Collapse)AuthorFilesLines
2009-09-246864075 adt.xml is missing support for tokens needed by the ILB projectgww6-15/+118
6879490 libbsm private au_to_in_addr_ex produces bad tokens
2009-09-146880097 adt.xml messages list order must be alignedWyllys Ingersoll2-2/+14
2009-08-076862724 TPM audit structures are incorrectWyllys Ingersoll2-19/+36
2009-07-296864230 hiho, hiho, it'ch chtime for CH to gojmcp1-13/+1
Portions contributed by Rich Lowe
2009-06-16PSARC/2009/284 faccessat(2) - determine accessibility of a file using file ↵Sumanth Naropanth1-0/+1
descriptors 6536147 accessat() should become a public interface after an agreement is reached on the function name
2009-05-216795209 Enable compilation of ON-consolidation with GCC 4.2Scott Rotondo2-2/+3
6392640 rpcgen -h -T output does not compile with gcc 4.x --HG-- rename : usr/src/stand/lib/fs/nfs/pathname.h => usr/src/stand/lib/fs/nfs/st_pathname.h
2009-05-09PSARC/2008/787 Obsolete of some Solaris Audit commandsgww1-6/+6
6627539 bsmrecord needs to be renamed (PSARC/2008/787 Obsolete of some Solaris Audit commands) --HG-- rename : usr/src/cmd/bsmrecord/Makefile => usr/src/cmd/auditrecord/Makefile rename : usr/src/cmd/bsmrecord/audit_record_attr.txt => usr/src/cmd/auditrecord/audit_record_attr.txt rename : usr/src/cmd/bsmrecord/audit_record_xml => usr/src/cmd/auditrecord/audit_record_xml rename : usr/src/cmd/bsmrecord/bsmrecord.pl => usr/src/cmd/auditrecord/auditrecord.pl rename : usr/src/cmd/bsmrecord/filter_txt.pl => usr/src/cmd/auditrecord/filter_txt.pl rename : usr/src/cmd/bsmrecord/mkmsg.pl => usr/src/cmd/auditrecord/mkmsg.pl
2009-05-056835006 pkcs11 TPM leaks memory in some cases.Wyllys Ingersoll1-136/+124
6834645 DEBUG tpm driver scares me on boot 6829606 TPM failure codes should not be part of the general fail_value message list.
2009-04-30backout 6795209/6392640: breaks sparc buildjmcp2-3/+2
2009-04-306795209 Enable compilation of ON-consolidation with GCC 4.2Nathan Keynes2-2/+3
6392640 rpcgen -h -T output does not compile with gcc 4.x
2009-03-24PSARC/2008/760 Boot configuration ServiceSherry Moore2-2/+12
PSARC/2009/091 Reboot to firmware PSARC/2009/092 libgrubmgmt - library for GRUB menu management 6768468 Introducing svc:/system/boot-config service 6775160 reboot -f ignores active BE and resets zfs pool bootfs property 6760845 Add checksum verification when loading the new kernel and boot archive for fast reboot 6815215 quiesce_active should be added to MUTEX_NOT_HELD()
2009-03-20PSARC 2008/725 TPM SupportWyllys Ingersoll2-2/+255
6771298 Solaris needs a PKCS11 provider for the TPM 6771289 Solaris needs TCG support
2009-03-196617821 adt_export_data_t needs to avoid using variable-sized typesTony Nguyen3-7/+7
2009-03-196705218 arbitrary string limits for audit events and bsmrecordJan Friedel1-6/+21
2009-03-194987752 setpgrp(2) audit record seems to show failure.Jan Friedel1-0/+3
2009-03-196385648 audit_event(4) file contains events that will never be generatedJan Friedel1-5/+5
2009-03-196750410 audit configuration files do not alignJan Friedel1-3/+3
2009-03-186412948 There's cruft in the libbsm files that needs to be removed.Jan Friedel2-44/+2
2009-03-184950919 adt* interfaces should accept empty string as equivalent to a NULL ↵Jan Friedel1-1/+1
string.
2009-03-186753388 AUE_PORTFS should really be PORTFS_ASSOCIATE and PORTFS_DISSOCIATEJan Friedel1-2/+6
2009-02-106798660 Cadmium .NOT file processing problem with CWD relative file pathsAli Bahrami1-1/+15
Contributed by Richard Lowe 6785284 Mapfile versioning rules need to be more visible to gatelings 6800164 Standard file exclusion mechanism needed for Cadmium tools
2009-02-106475711 clean up __STDC__ ifdefs in libbsm(3LIB) filesMarek Pospisil5-126/+35
2009-01-06PSARC/2007/272 Project Clearview: IPMP Rearchitecturemeem1-2/+2
PSARC/2008/773 IPQoS if_groupname Selector Removal PSARC/2009/001 Move in.mpathd into /lib/inet 6783149 Clearview IPMP Rearchitecture 4472956 libipmp should provide administrative interfaces 4494577 ipmp is opaque - there's no way to get current status 4509788 IPMP's usage of interface flags is not backward compatible 4509869 IPMP's address move mechanism needs to be transparent to applications 4531232 "in.rdiscd: sendto: Bad file number" seen during IPMP DR 4533876 new instances of interfaces under ipmp are generated with each dr/op 4699003 in.mpathd should squawk if interfaces in a group have the same hwaddr 4704937 SUNW_ip_rcm.so is sloppy with strings 4713308 IPMP shouldn't failover unconfigured logical interfaces 4785694 non-homogeneous IPMP group does not do failback 4850407 if_mpadm and IPMP DR failure 5015757 ip can panic with ASSERT(attach_ill == ipif->ipif_ill) failure 5086201 in.ndpd's phyint_reach_random() spews "SIOCSLIFLNKINFO Invalid argument" 6184000 routes cannot be created on failed interfaces 6246564 if_mpadm -r <ifname> doesn't bring up IPv6 link-local data address 6359058 SIOCLIFFAILBACK repeatedly fails with EAGAIN; in.mpathd fills logs 6359536 enabling STANDBY on an interface with no test address acts oddly 6378487 in.dhcpd doesn't work well in an IPMP setup 6462335 cannot offline to IPMP interfaces that have no probe targets 6516992 in.routed spews "Address already in use" during IPMP address move 6518460 ip_rcm`update_pif() must remain calm when logical interfaces disappear 6549957 failed IP interfaces at boot may go unreported 6591186 rpcbind can't deal with indirect calls if all addresses are deprecated 6667143 NCE_F_UNSOL_ADV broken 6698480 IGMP version not retained during IPMP failover 6726235 IPMP group failure can sometimes lead to an extra failover 6726645 in.routed skips DEPRECATED addresses even when no others exist 6738310 ip_ndp_recover() checks IPIF_CONDEMNED on the wrong ipif flags field 6739454 system panics at sdpib`sdp_rts_announce 6739531 IPv6 DAD doesn't work well with IPMP 6740719 in.mpathd may fail to switch to router target mode 6743260 ipif_resolver_up() can fail and leave ARP bringup pending 6746613 ip's DL_NOTE_SDU_SIZE logic mishandles ill_max_frag < ill_max_mtu 6748145 in.ndpd's IPv6 link-local hardware address mappings can go stale 6753560 ilg_delete_all() can race with ill_delete_tail() when ilg_ill changes 6755987 stillborn IFF_POINTOPOINT in.mpathd logic should be hauled out 6775126 SUBDIRS ipsecutils element does not in order be 6775811 NCEs can get stuck in ND_INCOMPLETE if ARP fails when IPMP is in-use 6777496 receive-side ILL_HCKSUM_CAPABLE checks look at the wrong ill 6781488 IPSQ timer restart logic can deadlock under stress 6781883 ip_ndp_find_solicitation() can be passed adverts, and has API issues 6784852 RPCIB, SDP, and RDS all break when vanity naming is used 6786048 IPv6 ND probes create IREs with incorrect source addresses 6786091 I_PLINK handling in IP must not request reentry via ipsq_try_enter() 6786711 IPQoS if_groupname selector needs to go 6787091 assertion failure in ipcl_conn_cleanup() due to non-NULL conn_ilg 6789235 INADDR_ANY ILMs can trigger an assertion failure in IPMP environments 6789502 ipif_resolver_up() calls after ipif_ndp_up() clobber ipif_addr_ready 6789718 ip6.tun0 cannot be plumbed in a non-global-zone post-6745288 6789732 libdlpi may get stuck in i_dlpi_strgetmsg() 6789870 ipif6_dup_recovery() may operate on a freed ipif, corrupting memory 6789874 ipnet_nicevent_cb() may call taskq_dispatch() on a bogus taskq 6790310 in.mpathd may core with "phyint_inst_timer: invalid state 4" --HG-- rename : usr/src/lib/libinetutil/common/inetutil4.c => usr/src/lib/libinetutil/common/inetutil.c rename : usr/src/uts/common/inet/vni/vni.c => usr/src/uts/common/inet/dlpistub/dlpistub.c rename : usr/src/uts/common/inet/vni/vni.conf => usr/src/uts/common/inet/dlpistub/dlpistub.conf rename : usr/src/uts/common/inet/vni/vni_impl.h => usr/src/uts/common/inet/dlpistub/dlpistub_impl.h rename : usr/src/uts/intel/vni/Makefile => usr/src/uts/intel/dlpistub/Makefile rename : usr/src/uts/sparc/vni/Makefile => usr/src/uts/sparc/dlpistub/Makefile
2009-01-066788789 adt_token.c:adt_to_text:ADT_MSG uses the wrong enum cast for getting ↵gww1-2/+2
the message list.
2008-09-291207395 au_event_t is a currently a short. It should be redefined to be a ↵Tony Nguyen8-91/+49
u_short
2008-09-22PSARC 2008/382 Fast RebootSherry Moore1-0/+2
6714038 Fast Reboot support for x86 platforms
2008-09-196750163 Internal function adt_get_unique_id is inaccurately typed.gww2-3/+3
2008-09-19PSARC 2008/482 NWAM Phase 0.5 (picea)James Carlson2-3/+34
6648862 nwam is annoying when no network is available 6642066 NWAM Phase 0 needs better observability 6604418 weak interfaces turn nwam into a bouncing dog that misses its master 6745880 starting or restarting nwam always costs a link reinit
2008-09-066745574 6735455 needs workgww1-1/+3
2008-09-056735455 libbsm adt interfaces do not support alternate event tables.gww7-118/+151
PSARC/2008/559 Support for Alternate Audit Record Tables 6636389 The adt.xml compiler can generate a bad adt_preload() for userland events of mixed case 6737982 adt_put_event should return EPERM
2008-08-286616565 The description of the <comment> tag in adt.xml should include a ↵Jan Friedel3-9/+8
statement about disallowed chars 6728431 audit_record_xml weak on tokens finished by number. 6729380 audit_record_attr.txt contains typos. 6737280 libbsm/audit_plugin.c:__audit_syslog() aim of possible deadlock.
2008-07-146287314 adt_load_ttyname() fails with errno 0gww2-36/+137
6344144 adt_load_hostname() seems to fail with ENOENT under TX SMC 6704657 auditd can fail with nostart, but without any helpful clue as to why 6705223 adt_load_hostname should use MAXHOSTNAMELEN rather than ADT_STRING_MAX 6706980 after enable TS and reboot, root can't login from console. server NIS enabled 6723291 internal routine adt_write_syslog() could do a better job
2008-06-06PSARC 2008/309 expunge synonyms.hraf8-114/+97
6700179 expunge synonyms.h --HG-- rename : usr/src/cmd/sgs/libelf/common/syn.h => deleted_files/usr/src/cmd/sgs/libelf/common/syn.h rename : usr/src/cmd/sgs/librtld/common/lintsup.c => deleted_files/usr/src/cmd/sgs/librtld/common/lintsup.c rename : usr/src/cmd/sgs/rtld/common/_synonyms.h => deleted_files/usr/src/cmd/sgs/rtld/common/_synonyms.h rename : usr/src/common/atomic/atomic_asm_weak.h => deleted_files/usr/src/common/atomic/atomic_asm_weak.h rename : usr/src/lib/common/inc/c_synonyms.h => deleted_files/usr/src/lib/common/inc/c_synonyms.h rename : usr/src/lib/libc/amd64/gen/lexp10.c => deleted_files/usr/src/lib/libc/amd64/gen/lexp10.c rename : usr/src/lib/libc/amd64/gen/llog10.c => deleted_files/usr/src/lib/libc/amd64/gen/llog10.c rename : usr/src/lib/libc/amd64/gen/ltostr.c => deleted_files/usr/src/lib/libc/amd64/gen/ltostr.c rename : usr/src/lib/libc/i386/gen/lexp10.c => deleted_files/usr/src/lib/libc/i386/gen/lexp10.c rename : usr/src/lib/libc/i386/gen/llog10.c => deleted_files/usr/src/lib/libc/i386/gen/llog10.c rename : usr/src/lib/libc/i386/gen/ltostr.c => deleted_files/usr/src/lib/libc/i386/gen/ltostr.c rename : usr/src/lib/libc/inc/synonyms.h => deleted_files/usr/src/lib/libc/inc/synonyms.h rename : usr/src/lib/libc/sparcv9/gen/lexp10.c => deleted_files/usr/src/lib/libc/sparcv9/gen/lexp10.c rename : usr/src/lib/libc/sparcv9/gen/llog10.c => deleted_files/usr/src/lib/libc/sparcv9/gen/llog10.c rename : usr/src/lib/libc_psr/inc.flg => deleted_files/usr/src/lib/libc_psr/inc.flg rename : usr/src/lib/libcrypt/inc/des_synonyms.h => deleted_files/usr/src/lib/libcrypt/inc/des_synonyms.h rename : usr/src/lib/libgen/inc/gen_synonyms.h => deleted_files/usr/src/lib/libgen/inc/gen_synonyms.h rename : usr/src/lib/libtsnet/common/synonyms.h => deleted_files/usr/src/lib/libtsnet/common/synonyms.h rename : usr/src/tools/scripts/check_fnames.sh => deleted_files/usr/src/tools/scripts/check_fnames.sh rename : usr/src/lib/libc/sparc/gen/lexp10.c => usr/src/lib/libc/port/gen/lexp10.c rename : usr/src/lib/libc/sparc/gen/llog10.c => usr/src/lib/libc/port/gen/llog10.c
2008-05-226680957 labelsys appears to be making policy decisions, but doesn't appear ↵rica1-0/+4
to be auditable 6701744 kernel au_to_in_addr_ex() bug in handling v4-mapped addresses
2008-05-216664265 uadmin(1M) auditing seems a messgww5-3/+51
6702562 add an adt_audit_state() procedure for use by routines wanting to signal auditd
2008-05-15PSARC 2007/679 CPUFreq HALnp1462832-1/+67
6647034 CPUFreq support into HAL
2008-05-066681220 There are still places that say BSM auditing that should say Solaris ↵jf2067062-55/+52
auditing.
2008-05-026683064 check_rtime could do with some spring cleaningrie1-5/+2
2008-02-116638707 implement the removal of auditsvc(2) as noted in PSARC/2002/665gww4-11/+4
2008-01-075079356 Framework should provide administrative audit trail/historytw217705-14/+422
6405683 svc.configd audit events need to be defined.
2007-12-216569653 [tcde] cdrom auto allocated to somewhere ??aj1-3/+7
6635401 deallocate core dump in libbsm:audit_allocate_list() when /etc/security/device_maps file is too big
2007-12-06PSARC 2007/397 NDMP Servicesabdar6-4/+99
6609930 NDMP Service - PSARC/2007/397 6636373 in_peer token doesn't do well if optional
2007-11-286607434 praudit(1M) output in error --- no newline after exec_args,0gww6-80/+188
6624513 return token values from userland should be able to include errno. 6624525 praudit:token.c has nits 6627669 the PSARC/2000/517 audit interfaces do not support the in_peer token 6629752 praudit displays the ip port token in HEX rather than in_port_t
2007-11-19backout 5079356/6405683: causes 6630372dm1207695-419/+10
2007-11-08PSARC 2007/118 VSCAN Servicejm1993542-1/+28
6623189 Vscan Service - PSARC/2007/118
2007-11-045079356 Framework should provide administrative audit trail/historytw217705-9/+418
6405683 svc.configd audit events need to be defined.
2007-10-296617183 CIFS Service - PSARC 2006/715 (fix merge, unref, versioning)amw1-2/+2
6622467 ndrgen does not understand -_gcc which breaks the real gcc build --HG-- rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_spoolss.c => deleted_files/usr/src/lib/smbsrv/libmlsvc/common/mlsvc_spoolss.c
2007-10-266431736 c2audit needs to add support for auditing ZFS/NFS ACLstz2045795-9/+38
2007-10-25PSARC/2007/218 caller_context_t in all VOPsamw2-1/+56
PSARC/2007/227 VFS Feature Registration and ACL on Create PSARC/2007/244 ZFS Case-insensitive support PSARC/2007/315 Extensible Attribute Interfaces PSARC/2007/394 ls(1) new command line options '-/' and '-%': CIFS system attributes support PSARC/2007/403 Modified Access Checks for CIFS PSARC/2007/410 Add system attribute support to chmod(1) PSARC/2007/432 CIFS system attributes support for cp(1), pack(1), unpack(1), compress(1) and uncompress(1) PSARC/2007/444 Rescind SETTABLE Attribute PSARC/2007/459 CIFS system attributes support for cpio(1), pax(1), tar(1) PSARC/2007/546 Update utilities to match CIFS system attributes changes. PSARC/2007/560 ZFS sharesmb property 4890717 want append-only files 6417428 Case-insensitive file system name lookup to support CIFS 6417435 DOS attributes and additional timestamps to support for CIFS 6417442 File system quarantined and modified attributes to support an integrated Anti-Virus service 6417453 FS boolean property for rejecting/allowing invalid UTF-8 sequences in file names 6473733 RFE: Need support for open-deny modes 6473755 RFE: Need ability to reconcile oplock and delegation conflicts 6494624 sharemgr needs to support CIFS shares better 6546705 All vnode operations need to pass caller_context_t 6546706 Need VOP_SETATTR/VOP_GETATTR to support new, optional attributes 6546893 Solaris system attribute support 6550962 ZFS ACL inheritance needs to be enhanced to support Automatic Inheritance 6553589 RFE: VFS Feature Registration facility 6553770 RFE: ZFS support for ACL-on-CREATE (PSARC 2007/227) 6565581 ls(1) should support file system attributes proposed in PSARC/2007/315 6566784 NTFS streams are not copied along with the files. 6576205 cp(1), pack(1) and compress(1) should support file system attributes proposed in PSARC/2007/315 6578875 RFE: kernel interfaces for nbmand need improvement 6578883 RFE: VOP_SHRLOCK needs additional access types 6578885 chmod(1) should support file system attributes proposed in PSARC/2007/315 6578886 RFE: disallow nbmand state to change on remount 6583349 ACL parser needs to support audit/alarm ACE types 6590347 tar(1) should support filesystem attributes proposed in PSARC/2007/315 6597357 *tar* xv@ doesn't show the hidden directory even though it is restored 6597360 *tar* should re-init xattr info if openat() fails during extraction of and extended attribute 6597368 *tar* cannot restore hard linked extended attributes 6597374 *tar* doesn't display "x " when hard linked attributes are restored 6597375 *tar* extended attribute header off by one 6614861 *cpio* incorrectly archives extended system attributes with -@ 6614896 *pax* incorrectly archives extended system attributes with -@ 6615225 *tar* incorrectly archives extended system attributes with -@ 6617183 CIFS Service - PSARC 2006/715
2007-10-246549682 uadmin audit records are no longer generated for the global zonetz2045799-170/+159
6608684 $SRC/lib/libbsm/common/audit_private.h has definitions for removed interfaces. 6611462 libbsm's adt_to_text() incorrectly handles message lists 6617501 auditxml may produce too long lines in adt_event.h for message lists 6617877 adt.xml should explain how to add a msg list --HG-- rename : usr/src/lib/libbsm/common/audit_uadmin.c => deleted_files/usr/src/lib/libbsm/common/audit_uadmin.c