1. 13 6月, 2009 1 次提交
  2. 12 6月, 2009 1 次提交
  3. 07 6月, 2009 1 次提交
    • B
      ide: preserve Host Protected Area by default (v2) · 075affcb
      Bartlomiej Zolnierkiewicz 提交于
      From the perspective of most users of recent systems, disabling Host
      Protected Area (HPA) can break vendor RAID formats, GPT partitions and
      risks corrupting firmware or overwriting vendor system recovery tools.
      
      Unfortunately the original (kernels < 2.6.30) behavior (unconditionally
      disabling HPA and using full disk capacity) was introduced at the time
      when the main use of HPA was to make the drive look small enough for the
      BIOS to allow the system to boot with large capacity drives.
      
      Thus to allow the maximum compatibility with the existing setups (using
      HPA and partitioned with HPA disabled) we automically disable HPA if
      any partitions overlapping HPA are detected.  Additionally HPA can also
      be disabled using the "nohpa" module parameter (i.e. "ide_core.nohpa=0.0"
      to disable HPA on /dev/hda).
      
      v2:
      Fix ->resume HPA support.
      
      While at it:
      - remove stale "idebus=" entry from Documentation/kernel-parameters.txt
      
      Cc: Robert Hancock <hancockrwd@gmail.com>
      Cc: Frans Pop <elendil@planet.nl>
      Cc: "Andries E. Brouwer" <Andries.Brouwer@cwi.nl>
      Cc: Al Viro <viro@zeniv.linux.org.uk>
      Acked-by: NSergei Shtylyov <sshtylyov@ru.mvista.com>
      [patch description was based on input from Alan Cox and Frans Pop]
      Emphatically-Acked-by: NAlan Cox <alan@linux.intel.com>
      Signed-off-by: NBartlomiej Zolnierkiewicz <bzolnier@gmail.com>
      075affcb
  4. 02 6月, 2009 2 次提交
    • J
      dma-debug: add dma_debug_driver kernel command line · 1745de5e
      Joerg Roedel 提交于
      This patch add the dma_debug_driver= boot parameter to enable the driver
      filter for early boot.
      Signed-off-by: NJoerg Roedel <joerg.roedel@amd.com>
      1745de5e
    • S
      ftrace: add kernel command line function filtering · 2af15d6a
      Steven Rostedt 提交于
      When using ftrace=function on the command line to trace functions
      on boot up, one can not filter out functions that are commonly called.
      
      This patch adds two new ftrace command line commands.
      
        ftrace_notrace=function-list
        ftrace_filter=function-list
      
      Where function-list is a comma separated list of functions to filter.
      The ftrace_notrace will make the functions listed not be included
      in the function tracing, and ftrace_filter will only trace the functions
      listed.
      
      These two act the same as the debugfs/tracing/set_ftrace_notrace and
      debugfs/tracing/set_ftrace_filter respectively.
      
      The simple glob expressions that are allowed by the filter files can also
      be used by the command line interface.
      
      	ftrace_notrace=rcu*,*lock,*spin*
      
      Will not trace any function that starts with rcu, ends with lock, or has
      the word spin in it.
      
      Note, if the self tests are enabled, they may interfere with the filtering
      set by the command lines.
      Signed-off-by: NSteven Rostedt <rostedt@goodmis.org>
      2af15d6a
  5. 29 5月, 2009 1 次提交
  6. 26 5月, 2009 1 次提交
  7. 23 5月, 2009 1 次提交
  8. 22 5月, 2009 1 次提交
    • E
      IMA: Minimal IMA policy and boot param for TCB IMA policy · 5789ba3b
      Eric Paris 提交于
      The IMA TCB policy is dangerous.  A normal use can use all of a system's
      memory (which cannot be freed) simply by building and running lots of
      executables.  The TCB policy is also nearly useless because logging in as root
      often causes a policy violation when dealing with utmp, thus rendering the
      measurements meaningless.
      
      There is no good fix for this in the kernel.  A full TCB policy would need to
      be loaded in userspace using LSM rule matching to get both a protected and
      useful system.  But, if too little is measured before userspace can load a real
      policy one again ends up with a meaningless set of measurements.  One option
      would be to put the policy load inside the initrd in order to get it early
      enough in the boot sequence to be useful, but this runs into trouble with the
      LSM.  For IMA to measure the LSM policy and the LSM policy loading mechanism
      it needs rules to do so, but we already talked about problems with defaulting
      to such broad rules....
      
      IMA also depends on the files being measured to be on an FS which implements
      and supports i_version.  Since the only FS with this support (ext4) doesn't
      even use it by default it seems silly to have any IMA rules by default.
      
      This should reduce the performance overhead of IMA to near 0 while still
      letting users who choose to configure their machine as such to inclue the
      ima_tcb kernel paramenter and get measurements during boot before they can
      load a customized, reasonable policy in userspace.
      Signed-off-by: NEric Paris <eparis@redhat.com>
      Acked-by: NMimi Zohar <zohar@us.ibm.com>
      Signed-off-by: NJames Morris <jmorris@namei.org>
      5789ba3b
  9. 08 5月, 2009 2 次提交
    • R
      oprofile: introduce module_param oprofile.cpu_type · 7e4e0bd5
      Robert Richter 提交于
      This patch removes module_param oprofile.force_arch_perfmon and
      introduces oprofile.cpu_type=archperfmon instead. This new parameter
      can be reused for other models and architectures.
      
      Currently only archperfmon is supported.
      
      Cc: Andi Kleen <ak@linux.intel.com>
      Signed-off-by: NRobert Richter <robert.richter@amd.com>
      7e4e0bd5
    • A
      oprofile: re-add force_arch_perfmon option · 1dcdb5a9
      Andi Kleen 提交于
      This re-adds the force_arch_perfmon option that was in the original
      arch perfmon patchkit. Originally this was rejected in favour
      of a generalized perfmon=name option, but it turned out implementing
      the later in a reliable way is hard (and it would have been easy
      to crash the kernel if a user gets it wrong)
      
      But now Atom and Core i7 support being readded a user would
      need to update their oprofile userland to beyond 0.9.4 to use oprofile again
      on Atom or Core i7.
      
      To avoid this problem readd the force_arch_perfmon option.
      Signed-off-by: NAndi Kleen <ak@linux.intel.com>
      Signed-off-by: NRobert Richter <robert.richter@amd.com>
      1dcdb5a9
  10. 07 5月, 2009 2 次提交
  11. 19 4月, 2009 3 次提交
  12. 18 4月, 2009 1 次提交
  13. 14 4月, 2009 1 次提交
  14. 07 4月, 2009 1 次提交
  15. 03 4月, 2009 1 次提交
  16. 02 4月, 2009 2 次提交
  17. 30 3月, 2009 1 次提交
  18. 28 3月, 2009 1 次提交
  19. 26 3月, 2009 1 次提交
  20. 25 3月, 2009 1 次提交
    • J
      dynamic debug: combine dprintk and dynamic printk · e9d376f0
      Jason Baron 提交于
      This patch combines Greg Bank's dprintk() work with the existing dynamic
      printk patchset, we are now calling it 'dynamic debug'.
      
      The new feature of this patchset is a richer /debugfs control file interface,
      (an example output from my system is at the bottom), which allows fined grained
      control over the the debug output. The output can be controlled by function,
      file, module, format string, and line number.
      
      for example, enabled all debug messages in module 'nf_conntrack':
      
      echo -n 'module nf_conntrack +p' > /mnt/debugfs/dynamic_debug/control
      
      to disable them:
      
      echo -n 'module nf_conntrack -p' > /mnt/debugfs/dynamic_debug/control
      
      A further explanation can be found in the documentation patch.
      Signed-off-by: NGreg Banks <gnb@sgi.com>
      Signed-off-by: NJason Baron <jbaron@redhat.com>
      Signed-off-by: NGreg Kroah-Hartman <gregkh@suse.de>
      e9d376f0
  21. 24 3月, 2009 2 次提交
  22. 21 3月, 2009 1 次提交
    • Y
      PCI: allow assignment of memory resources with a specified alignment · 32a9a682
      Yuji Shimada 提交于
      This patch allows memory resources to be assigned with a specified
      alignment at boot-time or run-time. The patch is useful when we use PCI
      pass-through, because page-aligned memory resources are required to
      securely share PCI resources with guest drivers.
      
      If you want to assign the resource at boot time, please set
      "pci=resource_alignment=" boot parameter.
      
      This is format of "pci=resource_alignment=" boot parameter:
      
              [<order of align>@][<domain>:]<bus>:<slot>.<func>[; ...]
                      Specifies alignment and device to reassign
                      aligned memory resources.
                      If <order of align> is not specified, PAGE_SIZE is
                      used as alignment.
                      PCI-PCI bridge can be specified, if resource
                      windows need to be expanded.
      
      This is example:
      
              pci=resource_alignment=20@07:00.0;18@0f:00.0;00:1d.7
      
      If you want to assign the resource at run-time, please set
      "/sys/bus/pci/resource_alignment" file, and hot-remove the device and
      hot-add the device.  For this purpose, fakephp or PCI hotplug interfaces
      can be used.
      
      The format of "/sys/bus/pci/resource_alignment" file is the same with
      boot parameter. You can use "," instead of ";".
      
      For example:
      
              # cd /sys/bus/pci
              # echo -n 20@12:00.0 > resource_alignment
              # echo 1 > devices/0000:12:00.0/remove
              # echo 1 > rescan
      Reviewed-by: NAlex Chiang <achiang@hp.com>
      Reviewed-by: NYu Zhao <yu.zhao@intel.com>
      Signed-off-by: NYuji Shimada <shimada-yxb@necst.nec.co.jp>
      Signed-off-by: NJesse Barnes <jbarnes@virtuousgeek.org>
      32a9a682
  23. 20 3月, 2009 1 次提交
  24. 10 3月, 2009 1 次提交
  25. 06 3月, 2009 1 次提交
  26. 02 3月, 2009 1 次提交
  27. 26 2月, 2009 1 次提交
    • D
      ide: ide.c 'clear' fix, update "ide=nodma" documentation · 0af80c04
      David Fries 提交于
      Documentation/kernel-parameters.txt
      - ide=nodma is no longer valid.
      
      drivers/ide/Kconfig
      - The module is ide-core.ko not ide.
      
      drivers/ide/ide.c
      - It took me a while to figure out what the arguments %d.%d:%d to nodma
        module parameter ment, so I added a comment to each.
      - Added a comment to each of the sscanf lines.
      - There is a bug, if j is 0 it would previously clear all the other bits
        except the current device, changed in three different places.
        mask &= (1 << i) should be mask &= ~(1 << i).
      Signed-off-by: NDavid Fries <david@fries.net>
      [bart: s/disk/device/ in ide.c, beautify patch description]
      Signed-off-by: NBartlomiej Zolnierkiewicz <bzolnier@gmail.com>
      0af80c04
  28. 25 2月, 2009 1 次提交
  29. 24 2月, 2009 1 次提交
  30. 23 2月, 2009 2 次提交
  31. 06 2月, 2009 2 次提交
    • M
      integrity: IMA as an integrity service provider · 3323eec9
      Mimi Zohar 提交于
      IMA provides hardware (TPM) based measurement and attestation for
      file measurements. As the Trusted Computing (TPM) model requires,
      IMA measures all files before they are accessed in any way (on the
      integrity_bprm_check, integrity_path_check and integrity_file_mmap
      hooks), and commits the measurements to the TPM. Once added to the
      TPM, measurements can not be removed.
      
      In addition, IMA maintains a list of these file measurements, which
      can be used to validate the aggregate value stored in the TPM.  The
      TPM can sign these measurements, and thus the system can prove, to
      itself and to a third party, the system's integrity in a way that
      cannot be circumvented by malicious or compromised software.
      
      - alloc ima_template_entry before calling ima_store_template()
      - log ima_add_boot_aggregate() failure
      - removed unused IMA_TEMPLATE_NAME_LEN
      - replaced hard coded string length with #define name
      Signed-off-by: NMimi Zohar <zohar@us.ibm.com>
      Signed-off-by: NJames Morris <jmorris@namei.org>
      3323eec9
    • M
      integrity: IMA hooks · 6146f0d5
      Mimi Zohar 提交于
      This patch replaces the generic integrity hooks, for which IMA registered
      itself, with IMA integrity hooks in the appropriate places directly
      in the fs directory.
      Signed-off-by: NMimi Zohar <zohar@us.ibm.com>
      Acked-by: NSerge Hallyn <serue@us.ibm.com>
      Signed-off-by: NJames Morris <jmorris@namei.org>
      6146f0d5