ktc_curpag isn't specific to a Kerberos v4 environment, so move it outside
the AFS_KERBEROS_ENV #ifdef. Add it to the auth.h header and to the
exports from the shared libafsauthent.
Russ Allbery [Sat, 22 Aug 2009 01:37:41 +0000 (18:37 -0700)]
Add automatic sysname detection for ARM Linux
Add arm*-linux* to the case statement that attempts to automatically
determine the AFS sysname, similar to the other Linux sysname
determination cases.
Marc Dionne [Wed, 28 Oct 2009 21:54:32 +0000 (17:54 -0400)]
Linux - Fix disk cache access for selinux/AppArmor constrained processes
Preserve the credentials used for cache initialisation and use then
whenever disk cache files are opened. This takes advantage of the
credentials separation work from David Howells available in kernels
2.6.29 and above.
Access to cache files was done under the security context of the
user process, causing processes constrained by selinux or AppArmor to
fail to access AFS cache files and causing the cache manager to panic.
Besides the RT tickets, should also fix the following Ubuntu bugs:
415766 429260 457779 459299
Andrew Deason [Wed, 28 Oct 2009 16:06:47 +0000 (11:06 -0500)]
Avoid using released hosts
Since h_Release_r has the possibility of freeing a host, we should not
be using a host after it has been released. A few places can still use a
released host, potentially causing heap corruption, double frees, and
generally weird behavior.
So either move calls of h_Release_r until after we finish using a host,
or make sure to set the pointer to NULL after it has been released.
Reviewed-on: http://gerrit.openafs.org/747 Tested-by: Andrew Deason <adeason@sinenomine.net> Reviewed-by: Dan Hyde <drh@umich.edu> Reviewed-by: Derrick Brashear <shadow@dementia.org>
(cherry picked from commit 416e2f11c35f5d55f91090b30b4db1a9bf6d6e07)
Marc Dionne [Sun, 1 Nov 2009 21:03:17 +0000 (16:03 -0500)]
Linux: Avoid deadlock in readdir - release GLOCK for filldir
The GLOCK is held while calling the filldir function in afs_linux_readdir().
If this function causes a page fault, and in particular if this fault
involves AFS, we're in trouble as we'll eventually deadlock in the
readpage code.
A simple test case for this is to call the getdents syscall on an
AFS directory with a buffer that is part of an mmaped AFS file.
This is already the case in the master branch; the change was part of
the merge of the NFS translator code.
FIXES 125555
Change-Id: I829838e45f94921d22335154587216f7842e3955
Reviewed-on: http://gerrit.openafs.org/760 Tested-by: Marc Dionne <marc.c.dionne@gmail.com> Reviewed-by: Simon Wilkinson <sxw@inf.ed.ac.uk> Reviewed-by: Derrick Brashear <shadow@dementia.org>
Marc Dionne [Thu, 17 Sep 2009 20:57:52 +0000 (16:57 -0400)]
Linux: 2.6.32 - Adapt to writeback changes
Adapt to the writeback changes in kernel 2.6.32
- Since we define our own backing_dev, it needs to be registered with
the writeback code and attached to the super_block. Otherwise it
might get ignored when writeback is needed.
- Each backing_dev now gets its own kernel thread. The name of the
thread is based on the registered name - the openafs one will appear
as "flush-afs".
Andrew Deason [Thu, 22 Oct 2009 16:12:30 +0000 (11:12 -0500)]
Avoid prematurely destroying callback_rxcon
Currently, h_GetHost_r and removeAddress_r can destroy the
callback_rxcon of a host. Having a NULL callback_rxcon can cause
segfaults in code that does not properly check if a host has been
HOSTDELETED before trying to use it.
Although such code is incorrect and should be fixed, we can still avoid
a segfault in those situations by not destroying callback_rxcon until we
destroy the host itself. This just prevents destroying callback_rxcon in
h_GetHost_r and removeAddress_r, leaving it to h_TossStuff_r to destroy
when it destroys the host.
Simon Wilkinson [Wed, 28 Oct 2009 11:12:18 +0000 (11:12 +0000)]
Make afsd.pod reflect reality
9d396c4916fdac64fcface30e6637ca6e2911203 (from 2005) introduced
autotuning for afsd, and changed some of the defaults which aren't
autotuned. Update the afsd man page to reflect the autotuning, and
the new defaults.
Russ Allbery [Thu, 1 Oct 2009 01:05:09 +0000 (18:05 -0700)]
Also change the source package name in the module changelog file
* When changing the name of the source package built by
openafs-modules-source, we need to change the package name in the
changelog as well or dpkg-gencontrol explodes. Thanks, Aaron M.
Ucko. (Closes: #549140)
afs_InitReq fails to initialize the "flags" field of the vrequest structure.
Consequently the logic involving (flags & O_NONBLOCK) in afs_Analyze leads to
unpredictable results. afs_InitReq should initialize the complete vrequest
structure.
Russ Allbery [Sat, 22 Aug 2009 19:07:03 +0000 (12:07 -0700)]
Change /var/lib/openafs/local permissions to 700
* Change the permissions of /var/lib/openafs/local to 0700 to match
upstream defaults. This directory contains the fssync.sock file used
for coordination between the fileserver and the volserver, and
commands sent to that socket are not authenticated. Linux protects
the socket from unprivileged writes by default, but other operating
systems do not. Upstream therefore wants this directory to be 0700
and bosserver will complain by default if it's not. Changing the
permissions let us drop a patch to bosserver.
Russ Allbery [Sat, 22 Aug 2009 18:10:20 +0000 (11:10 -0700)]
Change the source package name of the module source
* Change the source package name of the stripped package generated by
openafs-modules-source so that, should someone build a Debian source
package from it, it won't have the same name as the main openafs
source package.
Russ Allbery [Thu, 20 Aug 2009 21:48:18 +0000 (14:48 -0700)]
Update to standards version 3.8.3
* Update standards version to 3.8.3.
- Change section of packages generated by openafs-modules-source to
kernel.
- Add Homepage to packages generated by openafs-modules-source.
* Bring src/config/linux-version closer to upstream since upstream now
handles unversioned source directories. There is one remaining change
required to search for UTS_RELEASE in the correct header path.
Ignore dkms failure in the prerm of openafs-modules-dkms
* Ignore failures to remove an existing DKMS tree in the prerm of the
openafs-modules-dkms package. In the possible cases where the tree
may not be present to be removed, failing package removal doesn't
make sense. (Further addresses LP #368471.)
Russ Allbery [Wed, 17 Jun 2009 20:50:09 +0000 (13:50 -0700)]
Build and install the new DocBook manuals
Install generated PDF and HTML from the new DocBook manuals. Install
only ka2heim.txt from the txt directory; the other things in there aren't
horribly useful. Stop installing the old HTML documentation. Add the
required additional configure options for the DocBook documentation build.
* Apply upstream CVS deltas:
- STABLE14-memcache-write-on-laststore-20090512: write back dirty
pages on last store with memcache to avoid losing changes.
* Apply upstream CVS deltas:
- STABLE14-linux-mmap-antirecursion-fix-20090512: improvements in
flag setting and locking around recursive mmap protection.
* Apply upstream CVS deltas:
- STABLE14-linux26-defer-cred-changing-20090511: defer changing groups
when the real and effective credentials of a process differ to avoid
running afoul of checks in newer Linux kernels that cause oops.
(Closes: #528785)
Russ Allbery [Tue, 26 May 2009 23:28:10 +0000 (16:28 -0700)]
Dynamically determine versions for dkms.conf and get-orig-source
* Dynamically determine the Debian and upstream versions for dkms.conf
and get-orig-source from debian/changelog. Thanks, Anders Kaseorg.
(LP: #364426)
Russ Allbery [Tue, 26 May 2009 19:00:29 +0000 (12:00 -0700)]
Enable DKMS support
* Provide an openafs-modules-dkms package that uses DKMS to dynamically
build kernel modules for the local kernel and document this option in
README.modules. This is an alternative to installing
openafs-modules-source and building kernel modules for each new kernel
with module-assistant or make-kpkg. (Closes: #168852, #525131)
(LP: #52786, #364426, #369875)
* Have openafs-client recommend at least the current source version of
openafs-modules-source or openafs-modules-dkms instead of any old
version. While the API probably hasn't changed, it's best practice to
keep a relatively close match between the userspace andn the kernel
module version. (LP: #369875)
projects / packages / o / openafs.git / log