diff options
| author | Sam Ravnborg <sam@mars.ravnborg.org> | 2006-07-03 17:24:23 -0400 |
|---|---|---|
| committer | Sam Ravnborg <sam@mars.ravnborg.org> | 2006-07-03 17:24:23 -0400 |
| commit | 05668381140309088443bf5dc53add4104610fbb (patch) | |
| tree | ed53039717390e1a71ff16209281b1f1c8d3e6be /kernel | |
| parent | 34c162f79e374556dd1384437f0dab558b5dc657 (diff) | |
| parent | 29454dde27d8e340bb1987bad9aa504af7081eba (diff) | |
Merge branch 'master' of /home/sam/kernel/linux-2.6/
Diffstat (limited to 'kernel')
| -rw-r--r-- | kernel/acct.c | 1 | ||||
| -rw-r--r-- | kernel/audit.h | 1 | ||||
| -rw-r--r-- | kernel/auditfilter.c | 209 | ||||
| -rw-r--r-- | kernel/auditsc.c | 65 | ||||
| -rw-r--r-- | kernel/configs.c | 1 | ||||
| -rw-r--r-- | kernel/cpuset.c | 3 | ||||
| -rw-r--r-- | kernel/exec_domain.c | 1 | ||||
| -rw-r--r-- | kernel/exit.c | 1 | ||||
| -rw-r--r-- | kernel/fork.c | 1 | ||||
| -rw-r--r-- | kernel/futex.c | 8 | ||||
| -rw-r--r-- | kernel/irq/chip.c | 15 | ||||
| -rw-r--r-- | kernel/irq/handle.c | 22 | ||||
| -rw-r--r-- | kernel/irq/manage.c | 49 | ||||
| -rw-r--r-- | kernel/irq/spurious.c | 4 | ||||
| -rw-r--r-- | kernel/kmod.c | 1 | ||||
| -rw-r--r-- | kernel/ksysfs.c | 1 | ||||
| -rw-r--r-- | kernel/module.c | 1 | ||||
| -rw-r--r-- | kernel/panic.c | 1 | ||||
| -rw-r--r-- | kernel/params.c | 1 | ||||
| -rw-r--r-- | kernel/power/Kconfig | 12 | ||||
| -rw-r--r-- | kernel/printk.c | 1 | ||||
| -rw-r--r-- | kernel/profile.c | 1 | ||||
| -rw-r--r-- | kernel/resource.c | 1 | ||||
| -rw-r--r-- | kernel/signal.c | 1 | ||||
| -rw-r--r-- | kernel/spinlock.c | 1 | ||||
| -rw-r--r-- | kernel/sys.c | 1 | ||||
| -rw-r--r-- | kernel/sysctl.c | 1 | ||||
| -rw-r--r-- | kernel/wait.c | 1 |
28 files changed, 274 insertions, 132 deletions
diff --git a/kernel/acct.c b/kernel/acct.c index 126ca43d5d2b..f18e0b8df3e1 100644 --- a/kernel/acct.c +++ b/kernel/acct.c | |||
| @@ -43,7 +43,6 @@ | |||
| 43 | * a struct file opened for write. Fixed. 2/6/2000, AV. | 43 | * a struct file opened for write. Fixed. 2/6/2000, AV. |
| 44 | */ | 44 | */ |
| 45 | 45 | ||
| 46 | #include <linux/config.h> | ||
| 47 | #include <linux/mm.h> | 46 | #include <linux/mm.h> |
| 48 | #include <linux/slab.h> | 47 | #include <linux/slab.h> |
| 49 | #include <linux/acct.h> | 48 | #include <linux/acct.h> |
diff --git a/kernel/audit.h b/kernel/audit.h index 8323e4132a33..6aa33b848cf2 100644 --- a/kernel/audit.h +++ b/kernel/audit.h | |||
| @@ -81,6 +81,7 @@ struct audit_krule { | |||
| 81 | u32 mask[AUDIT_BITMASK_SIZE]; | 81 | u32 mask[AUDIT_BITMASK_SIZE]; |
| 82 | u32 buflen; /* for data alloc on list rules */ | 82 | u32 buflen; /* for data alloc on list rules */ |
| 83 | u32 field_count; | 83 | u32 field_count; |
| 84 | char *filterkey; /* ties events to rules */ | ||
| 84 | struct audit_field *fields; | 85 | struct audit_field *fields; |
| 85 | struct audit_field *inode_f; /* quick access to an inode field */ | 86 | struct audit_field *inode_f; /* quick access to an inode field */ |
| 86 | struct audit_watch *watch; /* associated watch */ | 87 | struct audit_watch *watch; /* associated watch */ |
diff --git a/kernel/auditfilter.c b/kernel/auditfilter.c index 4c99d2c586ed..5b4e16276ca0 100644 --- a/kernel/auditfilter.c +++ b/kernel/auditfilter.c | |||
| @@ -141,6 +141,7 @@ static inline void audit_free_rule(struct audit_entry *e) | |||
| 141 | selinux_audit_rule_free(f->se_rule); | 141 | selinux_audit_rule_free(f->se_rule); |
| 142 | } | 142 | } |
| 143 | kfree(e->rule.fields); | 143 | kfree(e->rule.fields); |
| 144 | kfree(e->rule.filterkey); | ||
| 144 | kfree(e); | 145 | kfree(e); |
| 145 | } | 146 | } |
| 146 | 147 | ||
| @@ -278,6 +279,29 @@ static int audit_to_watch(struct audit_krule *krule, char *path, int len, | |||
| 278 | return 0; | 279 | return 0; |
| 279 | } | 280 | } |
| 280 | 281 | ||
| 282 | static __u32 *classes[AUDIT_SYSCALL_CLASSES]; | ||
| 283 | |||
| 284 | int __init audit_register_class(int class, unsigned *list) | ||
| 285 | { | ||
| 286 | __u32 *p = kzalloc(AUDIT_BITMASK_SIZE * sizeof(__u32), GFP_KERNEL); | ||
| 287 | if (!p) | ||
| 288 | return -ENOMEM; | ||
| 289 | while (*list != ~0U) { | ||
| 290 | unsigned n = *list++; | ||
| 291 | if (n >= AUDIT_BITMASK_SIZE * 32 - AUDIT_SYSCALL_CLASSES) { | ||
| 292 | kfree(p); | ||
| 293 | return -EINVAL; | ||
| 294 | } | ||
| 295 | p[AUDIT_WORD(n)] |= AUDIT_BIT(n); | ||
| 296 | } | ||
| 297 | if (class >= AUDIT_SYSCALL_CLASSES || classes[class]) { | ||
| 298 | kfree(p); | ||
| 299 | return -EINVAL; | ||
| 300 | } | ||
| 301 | classes[class] = p; | ||
| 302 | return 0; | ||
| 303 | } | ||
| 304 | |||
| 281 | /* Common user-space to kernel rule translation. */ | 305 | /* Common user-space to kernel rule translation. */ |
| 282 | static inline struct audit_entry *audit_to_entry_common(struct audit_rule *rule) | 306 | static inline struct audit_entry *audit_to_entry_common(struct audit_rule *rule) |
| 283 | { | 307 | { |
| @@ -321,6 +345,22 @@ static inline struct audit_entry *audit_to_entry_common(struct audit_rule *rule) | |||
| 321 | for (i = 0; i < AUDIT_BITMASK_SIZE; i++) | 345 | for (i = 0; i < AUDIT_BITMASK_SIZE; i++) |
| 322 | entry->rule.mask[i] = rule->mask[i]; | 346 | entry->rule.mask[i] = rule->mask[i]; |
| 323 | 347 | ||
| 348 | for (i = 0; i < AUDIT_SYSCALL_CLASSES; i++) { | ||
| 349 | int bit = AUDIT_BITMASK_SIZE * 32 - i - 1; | ||
| 350 | __u32 *p = &entry->rule.mask[AUDIT_WORD(bit)]; | ||
| 351 | __u32 *class; | ||
| 352 | |||
| 353 | if (!(*p & AUDIT_BIT(bit))) | ||
| 354 | continue; | ||
| 355 | *p &= ~AUDIT_BIT(bit); | ||
| 356 | class = classes[i]; | ||
| 357 | if (class) { | ||
| 358 | int j; | ||
| 359 | for (j = 0; j < AUDIT_BITMASK_SIZE; j++) | ||
| 360 | entry->rule.mask[j] |= class[j]; | ||
| 361 | } | ||
| 362 | } | ||
| 363 | |||
| 324 | return entry; | 364 | return entry; |
| 325 | 365 | ||
| 326 | exit_err: | 366 | exit_err: |
| @@ -469,11 +509,16 @@ static struct audit_entry *audit_data_to_entry(struct audit_rule_data *data, | |||
| 469 | case AUDIT_ARG2: | 509 | case AUDIT_ARG2: |
| 470 | case AUDIT_ARG3: | 510 | case AUDIT_ARG3: |
| 471 | break; | 511 | break; |
| 472 | case AUDIT_SE_USER: | 512 | case AUDIT_SUBJ_USER: |
| 473 | case AUDIT_SE_ROLE: | 513 | case AUDIT_SUBJ_ROLE: |
| 474 | case AUDIT_SE_TYPE: | 514 | case AUDIT_SUBJ_TYPE: |
| 475 | case AUDIT_SE_SEN: | 515 | case AUDIT_SUBJ_SEN: |
| 476 | case AUDIT_SE_CLR: | 516 | case AUDIT_SUBJ_CLR: |
| 517 | case AUDIT_OBJ_USER: | ||
| 518 | case AUDIT_OBJ_ROLE: | ||
| 519 | case AUDIT_OBJ_TYPE: | ||
| 520 | case AUDIT_OBJ_LEV_LOW: | ||
| 521 | case AUDIT_OBJ_LEV_HIGH: | ||
| 477 | str = audit_unpack_string(&bufp, &remain, f->val); | 522 | str = audit_unpack_string(&bufp, &remain, f->val); |
| 478 | if (IS_ERR(str)) | 523 | if (IS_ERR(str)) |
| 479 | goto exit_free; | 524 | goto exit_free; |
| @@ -511,6 +556,16 @@ static struct audit_entry *audit_data_to_entry(struct audit_rule_data *data, | |||
| 511 | if (err) | 556 | if (err) |
| 512 | goto exit_free; | 557 | goto exit_free; |
| 513 | break; | 558 | break; |
| 559 | case AUDIT_FILTERKEY: | ||
| 560 | err = -EINVAL; | ||
| 561 | if (entry->rule.filterkey || f->val > AUDIT_MAX_KEY_LEN) | ||
| 562 | goto exit_free; | ||
| 563 | str = audit_unpack_string(&bufp, &remain, f->val); | ||
| 564 | if (IS_ERR(str)) | ||
| 565 | goto exit_free; | ||
| 566 | entry->rule.buflen += f->val; | ||
| 567 | entry->rule.filterkey = str; | ||
| 568 | break; | ||
| 514 | default: | 569 | default: |
| 515 | goto exit_free; | 570 | goto exit_free; |
| 516 | } | 571 | } |
| @@ -600,11 +655,16 @@ static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule) | |||
| 600 | data->fields[i] = f->type; | 655 | data->fields[i] = f->type; |
| 601 | data->fieldflags[i] = f->op; | 656 | data->fieldflags[i] = f->op; |
| 602 | switch(f->type) { | 657 | switch(f->type) { |
| 603 | case AUDIT_SE_USER: | 658 | case AUDIT_SUBJ_USER: |
| 604 | case AUDIT_SE_ROLE: | 659 | case AUDIT_SUBJ_ROLE: |
| 605 | case AUDIT_SE_TYPE: | 660 | case AUDIT_SUBJ_TYPE: |
| 606 | case AUDIT_SE_SEN: | 661 | case AUDIT_SUBJ_SEN: |
| 607 | case AUDIT_SE_CLR: | 662 | case AUDIT_SUBJ_CLR: |
| 663 | case AUDIT_OBJ_USER: | ||
| 664 | case AUDIT_OBJ_ROLE: | ||
| 665 | case AUDIT_OBJ_TYPE: | ||
| 666 | case AUDIT_OBJ_LEV_LOW: | ||
| 667 | case AUDIT_OBJ_LEV_HIGH: | ||
| 608 | data->buflen += data->values[i] = | 668 | data->buflen += data->values[i] = |
| 609 | audit_pack_string(&bufp, f->se_str); | 669 | audit_pack_string(&bufp, f->se_str); |
| 610 | break; | 670 | break; |
| @@ -612,6 +672,10 @@ static struct audit_rule_data *audit_krule_to_data(struct audit_krule *krule) | |||
| 612 | data->buflen += data->values[i] = | 672 | data->buflen += data->values[i] = |
| 613 | audit_pack_string(&bufp, krule->watch->path); | 673 | audit_pack_string(&bufp, krule->watch->path); |
| 614 | break; | 674 | break; |
| 675 | case AUDIT_FILTERKEY: | ||
| 676 | data->buflen += data->values[i] = | ||
| 677 | audit_pack_string(&bufp, krule->filterkey); | ||
| 678 | break; | ||
| 615 | default: | 679 | default: |
| 616 | data->values[i] = f->val; | 680 | data->values[i] = f->val; |
| 617 | } | 681 | } |
| @@ -639,11 +703,16 @@ static int audit_compare_rule(struct audit_krule *a, struct audit_krule *b) | |||
| 639 | return 1; | 703 | return 1; |
| 640 | 704 | ||
| 641 | switch(a->fields[i].type) { | 705 | switch(a->fields[i].type) { |
| 642 | case AUDIT_SE_USER: | 706 | case AUDIT_SUBJ_USER: |
| 643 | case AUDIT_SE_ROLE: | 707 | case AUDIT_SUBJ_ROLE: |
| 644 | case AUDIT_SE_TYPE: | 708 | case AUDIT_SUBJ_TYPE: |
| 645 | case AUDIT_SE_SEN: | 709 | case AUDIT_SUBJ_SEN: |
| 646 | case AUDIT_SE_CLR: | 710 | case AUDIT_SUBJ_CLR: |
| 711 | case AUDIT_OBJ_USER: | ||
| 712 | case AUDIT_OBJ_ROLE: | ||
| 713 | case AUDIT_OBJ_TYPE: | ||
| 714 | case AUDIT_OBJ_LEV_LOW: | ||
| 715 | case AUDIT_OBJ_LEV_HIGH: | ||
| 647 | if (strcmp(a->fields[i].se_str, b->fields[i].se_str)) | 716 | if (strcmp(a->fields[i].se_str, b->fields[i].se_str)) |
| 648 | return 1; | 717 | return 1; |
| 649 | break; | 718 | break; |
| @@ -651,6 +720,11 @@ static int audit_compare_rule(struct audit_krule *a, struct audit_krule *b) | |||
| 651 | if (strcmp(a->watch->path, b->watch->path)) | 720 | if (strcmp(a->watch->path, b->watch->path)) |
| 652 | return 1; | 721 | return 1; |
| 653 | break; | 722 | break; |
| 723 | case AUDIT_FILTERKEY: | ||
| 724 | /* both filterkeys exist based on above type compare */ | ||
| 725 | if (strcmp(a->filterkey, b->filterkey)) | ||
| 726 | return 1; | ||
| 727 | break; | ||
| 654 | default: | 728 | default: |
| 655 | if (a->fields[i].val != b->fields[i].val) | 729 | if (a->fields[i].val != b->fields[i].val) |
| 656 | return 1; | 730 | return 1; |
| @@ -730,6 +804,7 @@ static struct audit_entry *audit_dupe_rule(struct audit_krule *old, | |||
| 730 | u32 fcount = old->field_count; | 804 | u32 fcount = old->field_count; |
| 731 | struct audit_entry *entry; | 805 | struct audit_entry *entry; |
| 732 | struct audit_krule *new; | 806 | struct audit_krule *new; |
| 807 | char *fk; | ||
| 733 | int i, err = 0; | 808 | int i, err = 0; |
| 734 | 809 | ||
| 735 | entry = audit_init_entry(fcount); | 810 | entry = audit_init_entry(fcount); |
| @@ -753,13 +828,25 @@ static struct audit_entry *audit_dupe_rule(struct audit_krule *old, | |||
| 753 | * the originals will all be freed when the old rule is freed. */ | 828 | * the originals will all be freed when the old rule is freed. */ |
| 754 | for (i = 0; i < fcount; i++) { | 829 | for (i = 0; i < fcount; i++) { |
| 755 | switch (new->fields[i].type) { | 830 | switch (new->fields[i].type) { |
| 756 | case AUDIT_SE_USER: | 831 | case AUDIT_SUBJ_USER: |
| 757 | case AUDIT_SE_ROLE: | 832 | case AUDIT_SUBJ_ROLE: |
| 758 | case AUDIT_SE_TYPE: | 833 | case AUDIT_SUBJ_TYPE: |
| 759 | case AUDIT_SE_SEN: | 834 | case AUDIT_SUBJ_SEN: |
| 760 | case AUDIT_SE_CLR: | 835 | case AUDIT_SUBJ_CLR: |
| 836 | case AUDIT_OBJ_USER: | ||
| 837 | case AUDIT_OBJ_ROLE: | ||
| 838 | case AUDIT_OBJ_TYPE: | ||
| 839 | case AUDIT_OBJ_LEV_LOW: | ||
| 840 | case AUDIT_OBJ_LEV_HIGH: | ||
| 761 | err = audit_dupe_selinux_field(&new->fields[i], | 841 | err = audit_dupe_selinux_field(&new->fields[i], |
| 762 | &old->fields[i]); | 842 | &old->fields[i]); |
| 843 | break; | ||
| 844 | case AUDIT_FILTERKEY: | ||
| 845 | fk = kstrdup(old->filterkey, GFP_KERNEL); | ||
| 846 | if (unlikely(!fk)) | ||
| 847 | err = -ENOMEM; | ||
| 848 | else | ||
| 849 | new->filterkey = fk; | ||
| 763 | } | 850 | } |
| 764 | if (err) { | 851 | if (err) { |
| 765 | audit_free_rule(entry); | 852 | audit_free_rule(entry); |
| @@ -1245,6 +1332,34 @@ static void audit_list_rules(int pid, int seq, struct sk_buff_head *q) | |||
| 1245 | skb_queue_tail(q, skb); | 1332 | skb_queue_tail(q, skb); |
| 1246 | } | 1333 | } |
| 1247 | 1334 | ||
| 1335 | /* Log rule additions and removals */ | ||
| 1336 | static void audit_log_rule_change(uid_t loginuid, u32 sid, char *action, | ||
| 1337 | struct audit_krule *rule, int res) | ||
| 1338 | { | ||
| 1339 | struct audit_buffer *ab; | ||
| 1340 | |||
| 1341 | ab = audit_log_start(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE); | ||
| 1342 | if (!ab) | ||
| 1343 | return; | ||
| 1344 | audit_log_format(ab, "auid=%u", loginuid); | ||
| 1345 | if (sid) { | ||
| 1346 | char *ctx = NULL; | ||
| 1347 | u32 len; | ||
| 1348 | if (selinux_ctxid_to_string(sid, &ctx, &len)) | ||
| 1349 | audit_log_format(ab, " ssid=%u", sid); | ||
| 1350 | else | ||
| 1351 | audit_log_format(ab, " subj=%s", ctx); | ||
| 1352 | kfree(ctx); | ||
| 1353 | } | ||
| 1354 | audit_log_format(ab, " %s rule key=", action); | ||
| 1355 | if (rule->filterkey) | ||
| 1356 | audit_log_untrustedstring(ab, rule->filterkey); | ||
| 1357 | else | ||
| 1358 | audit_log_format(ab, "(null)"); | ||
| 1359 | audit_log_format(ab, " list=%d res=%d", rule->listnr, res); | ||
| 1360 | audit_log_end(ab); | ||
| 1361 | } | ||
| 1362 | |||
| 1248 | /** | 1363 | /** |
| 1249 | * audit_receive_filter - apply all rules to the specified message type | 1364 | * audit_receive_filter - apply all rules to the specified message type |
| 1250 | * @type: audit message type | 1365 | * @type: audit message type |
| @@ -1304,24 +1419,7 @@ int audit_receive_filter(int type, int pid, int uid, int seq, void *data, | |||
| 1304 | 1419 | ||
| 1305 | err = audit_add_rule(entry, | 1420 | err = audit_add_rule(entry, |
| 1306 | &audit_filter_list[entry->rule.listnr]); | 1421 | &audit_filter_list[entry->rule.listnr]); |
| 1307 | 1422 | audit_log_rule_change(loginuid, sid, "add", &entry->rule, !err); | |
| 1308 | if (sid) { | ||
| 1309 | char *ctx = NULL; | ||
| 1310 | u32 len; | ||
| 1311 | if (selinux_ctxid_to_string(sid, &ctx, &len)) { | ||
| 1312 | /* Maybe call audit_panic? */ | ||
| 1313 | audit_log(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE, | ||
| 1314 | "auid=%u ssid=%u add rule to list=%d res=%d", | ||
| 1315 | loginuid, sid, entry->rule.listnr, !err); | ||
| 1316 | } else | ||
| 1317 | audit_log(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE, | ||
| 1318 | "auid=%u subj=%s add rule to list=%d res=%d", | ||
| 1319 | loginuid, ctx, entry->rule.listnr, !err); | ||
| 1320 | kfree(ctx); | ||
| 1321 | } else | ||
| 1322 | audit_log(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE, | ||
| 1323 | "auid=%u add rule to list=%d res=%d", | ||
| 1324 | loginuid, entry->rule.listnr, !err); | ||
| 1325 | 1423 | ||
| 1326 | if (err) | 1424 | if (err) |
| 1327 | audit_free_rule(entry); | 1425 | audit_free_rule(entry); |
| @@ -1337,24 +1435,8 @@ int audit_receive_filter(int type, int pid, int uid, int seq, void *data, | |||
| 1337 | 1435 | ||
| 1338 | err = audit_del_rule(entry, | 1436 | err = audit_del_rule(entry, |
| 1339 | &audit_filter_list[entry->rule.listnr]); | 1437 | &audit_filter_list[entry->rule.listnr]); |
| 1340 | 1438 | audit_log_rule_change(loginuid, sid, "remove", &entry->rule, | |
| 1341 | if (sid) { | 1439 | !err); |
| 1342 | char *ctx = NULL; | ||
| 1343 | u32 len; | ||
| 1344 | if (selinux_ctxid_to_string(sid, &ctx, &len)) { | ||
| 1345 | /* Maybe call audit_panic? */ | ||
| 1346 | audit_log(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE, | ||
| 1347 | "auid=%u ssid=%u remove rule from list=%d res=%d", | ||
| 1348 | loginuid, sid, entry->rule.listnr, !err); | ||
| 1349 | } else | ||
| 1350 | audit_log(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE, | ||
| 1351 | "auid=%u subj=%s remove rule from list=%d res=%d", | ||
| 1352 | loginuid, ctx, entry->rule.listnr, !err); | ||
| 1353 | kfree(ctx); | ||
| 1354 | } else | ||
| 1355 | audit_log(NULL, GFP_KERNEL, AUDIT_CONFIG_CHANGE, | ||
| 1356 | "auid=%u remove rule from list=%d res=%d", | ||
| 1357 | loginuid, entry->rule.listnr, !err); | ||
| 1358 | 1440 | ||
| 1359 | audit_free_rule(entry); | 1441 | audit_free_rule(entry); |
| 1360 | break; | 1442 | break; |
| @@ -1514,11 +1596,16 @@ static inline int audit_rule_has_selinux(struct audit_krule *rule) | |||
| 1514 | for (i = 0; i < rule->field_count; i++) { | 1596 | for (i = 0; i < rule->field_count; i++) { |
| 1515 | struct audit_field *f = &rule->fields[i]; | 1597 | struct audit_field *f = &rule->fields[i]; |
| 1516 | switch (f->type) { | 1598 | switch (f->type) { |
| 1517 | case AUDIT_SE_USER: | 1599 | case AUDIT_SUBJ_USER: |
| 1518 | case AUDIT_SE_ROLE: | 1600 | case AUDIT_SUBJ_ROLE: |
| 1519 | case AUDIT_SE_TYPE: | 1601 | case AUDIT_SUBJ_TYPE: |
| 1520 | case AUDIT_SE_SEN: | 1602 | case AUDIT_SUBJ_SEN: |
| 1521 | case AUDIT_SE_CLR: | 1603 | case AUDIT_SUBJ_CLR: |
| 1604 | case AUDIT_OBJ_USER: | ||
| 1605 | case AUDIT_OBJ_ROLE: | ||
| 1606 | case AUDIT_OBJ_TYPE: | ||
| 1607 | case AUDIT_OBJ_LEV_LOW: | ||
| 1608 | case AUDIT_OBJ_LEV_HIGH: | ||
| 1522 | return 1; | 1609 | return 1; |
| 1523 | } | 1610 | } |
| 1524 | } | 1611 | } |
diff --git a/kernel/auditsc.c b/kernel/auditsc.c index dc5e3f01efe7..ae40ac8c39e7 100644 --- a/kernel/auditsc.c +++ b/kernel/auditsc.c | |||
| @@ -186,6 +186,7 @@ struct audit_context { | |||
| 186 | int auditable; /* 1 if record should be written */ | 186 | int auditable; /* 1 if record should be written */ |
| 187 | int name_count; | 187 | int name_count; |
| 188 | struct audit_names names[AUDIT_NAMES]; | 188 | struct audit_names names[AUDIT_NAMES]; |
| 189 | char * filterkey; /* key for rule that triggered record */ | ||
| 189 | struct dentry * pwd; | 190 | struct dentry * pwd; |
| 190 | struct vfsmount * pwdmnt; | 191 | struct vfsmount * pwdmnt; |
| 191 | struct audit_context *previous; /* For nested syscalls */ | 192 | struct audit_context *previous; /* For nested syscalls */ |
| @@ -320,11 +321,11 @@ static int audit_filter_rules(struct task_struct *tsk, | |||
| 320 | if (ctx) | 321 | if (ctx) |
| 321 | result = audit_comparator(ctx->loginuid, f->op, f->val); | 322 | result = audit_comparator(ctx->loginuid, f->op, f->val); |
| 322 | break; | 323 | break; |
| 323 | case AUDIT_SE_USER: | 324 | case AUDIT_SUBJ_USER: |
| 324 | case AUDIT_SE_ROLE: | 325 | case AUDIT_SUBJ_ROLE: |
| 325 | case AUDIT_SE_TYPE: | 326 | case AUDIT_SUBJ_TYPE: |
| 326 | case AUDIT_SE_SEN: | 327 | case AUDIT_SUBJ_SEN: |
| 327 | case AUDIT_SE_CLR: | 328 | case AUDIT_SUBJ_CLR: |
| 328 | /* NOTE: this may return negative values indicating | 329 | /* NOTE: this may return negative values indicating |
| 329 | a temporary error. We simply treat this as a | 330 | a temporary error. We simply treat this as a |
| 330 | match for now to avoid losing information that | 331 | match for now to avoid losing information that |
| @@ -341,6 +342,46 @@ static int audit_filter_rules(struct task_struct *tsk, | |||
| 341 | ctx); | 342 | ctx); |
| 342 | } | 343 | } |
| 343 | break; | 344 | break; |
| 345 | case AUDIT_OBJ_USER: | ||
| 346 | case AUDIT_OBJ_ROLE: | ||
| 347 | case AUDIT_OBJ_TYPE: | ||
| 348 | case AUDIT_OBJ_LEV_LOW: | ||
| 349 | case AUDIT_OBJ_LEV_HIGH: | ||
| 350 | /* The above note for AUDIT_SUBJ_USER...AUDIT_SUBJ_CLR | ||
| 351 | also applies here */ | ||
| 352 | if (f->se_rule) { | ||
| 353 | /* Find files that match */ | ||
| 354 | if (name) { | ||
| 355 | result = selinux_audit_rule_match( | ||
| 356 | name->osid, f->type, f->op, | ||
| 357 | f->se_rule, ctx); | ||
| 358 | } else if (ctx) { | ||
| 359 | for (j = 0; j < ctx->name_count; j++) { | ||
| 360 | if (selinux_audit_rule_match( | ||
| 361 | ctx->names[j].osid, | ||
| 362 | f->type, f->op, | ||
| 363 | f->se_rule, ctx)) { | ||
| 364 | ++result; | ||
| 365 | break; | ||
| 366 | } | ||
| 367 | } | ||
| 368 | } | ||
| 369 | /* Find ipc objects that match */ | ||
| 370 | if (ctx) { | ||
| 371 | struct audit_aux_data *aux; | ||
| 372 | for (aux = ctx->aux; aux; | ||
| 373 | aux = aux->next) { | ||
| 374 | if (aux->type == AUDIT_IPC) { | ||
| 375 | struct audit_aux_data_ipcctl *axi = (void *)aux; | ||
| 376 | if (selinux_audit_rule_match(axi->osid, f->type, f->op, f->se_rule, ctx)) { | ||
| 377 | ++result; | ||
| 378 | break; | ||
| 379 | } | ||
| 380 | } | ||
| 381 | } | ||
| 382 | } | ||
| 383 | } | ||
| 384 | break; | ||
| 344 | case AUDIT_ARG0: | 385 | case AUDIT_ARG0: |
| 345 | case AUDIT_ARG1: | 386 | case AUDIT_ARG1: |
| 346 | case AUDIT_ARG2: | 387 | case AUDIT_ARG2: |
| @@ -348,11 +389,17 @@ static int audit_filter_rules(struct task_struct *tsk, | |||
| 348 | if (ctx) | 389 | if (ctx) |
| 349 | result = audit_comparator(ctx->argv[f->type-AUDIT_ARG0], f->op, f->val); | 390 | result = audit_comparator(ctx->argv[f->type-AUDIT_ARG0], f->op, f->val); |
| 350 | break; | 391 | break; |
| 392 | case AUDIT_FILTERKEY: | ||
| 393 | /* ignore this field for filtering */ | ||
| 394 | result = 1; | ||
| 395 | break; | ||
| 351 | } | 396 | } |
| 352 | 397 | ||
| 353 | if (!result) | 398 | if (!result) |
| 354 | return 0; | 399 | return 0; |
| 355 | } | 400 | } |
| 401 | if (rule->filterkey) | ||
| 402 | ctx->filterkey = kstrdup(rule->filterkey, GFP_ATOMIC); | ||
| 356 | switch (rule->action) { | 403 | switch (rule->action) { |
| 357 | case AUDIT_NEVER: *state = AUDIT_DISABLED; break; | 404 | case AUDIT_NEVER: *state = AUDIT_DISABLED; break; |
| 358 | case AUDIT_ALWAYS: *state = AUDIT_RECORD_CONTEXT; break; | 405 | case AUDIT_ALWAYS: *state = AUDIT_RECORD_CONTEXT; break; |
| @@ -627,6 +674,7 @@ static inline void audit_free_context(struct audit_context *context) | |||
| 627 | } | 674 | } |
| 628 | audit_free_names(context); | 675 | audit_free_names(context); |
| 629 | audit_free_aux(context); | 676 | audit_free_aux(context); |
| 677 | kfree(context->filterkey); | ||
| 630 | kfree(context); | 678 | kfree(context); |
| 631 | context = previous; | 679 | context = previous; |
| 632 | } while (context); | 680 | } while (context); |
| @@ -735,6 +783,11 @@ static void audit_log_exit(struct audit_context *context, struct task_struct *ts | |||
| 735 | context->euid, context->suid, context->fsuid, | 783 | context->euid, context->suid, context->fsuid, |
| 736 | context->egid, context->sgid, context->fsgid, tty); | 784 | context->egid, context->sgid, context->fsgid, tty); |
| 737 | audit_log_task_info(ab, tsk); | 785 | audit_log_task_info(ab, tsk); |
| 786 | if (context->filterkey) { | ||
| 787 | audit_log_format(ab, " key="); | ||
| 788 | audit_log_untrustedstring(ab, context->filterkey); | ||
| 789 | } else | ||
| 790 | audit_log_format(ab, " key=(null)"); | ||
| 738 | audit_log_end(ab); | 791 | audit_log_end(ab); |
| 739 | 792 | ||
| 740 | for (aux = context->aux; aux; aux = aux->next) { | 793 | for (aux = context->aux; aux; aux = aux->next) { |
| @@ -1060,6 +1113,8 @@ void audit_syscall_exit(int valid, long return_code) | |||
| 1060 | } else { | 1113 | } else { |
| 1061 | audit_free_names(context); | 1114 | audit_free_names(context); |
| 1062 | audit_free_aux(context); | 1115 | audit_free_aux(context); |
| 1116 | kfree(context->filterkey); | ||
| 1117 | context->filterkey = NULL; | ||
| 1063 | tsk->audit_context = context; | 1118 | tsk->audit_context = context; |
| 1064 | } | 1119 | } |
| 1065 | } | 1120 | } |
diff --git a/kernel/configs.c b/kernel/configs.c index 009e1ebdcb88..f9e31974f4ad 100644 --- a/kernel/configs.c +++ b/kernel/configs.c | |||
| @@ -23,7 +23,6 @@ | |||
| 23 | * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. | 23 | * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. |
| 24 | */ | 24 | */ |
| 25 | 25 | ||
| 26 | #include <linux/config.h> | ||
| 27 | #include <linux/kernel.h> | 26 | #include <linux/kernel.h> |
| 28 | #include <linux/module.h> | 27 | #include <linux/module.h> |
| 29 | #include <linux/proc_fs.h> | 28 | #include <linux/proc_fs.h> |
diff --git a/kernel/cpuset.c b/kernel/cpuset.c index 1535af3a912d..c232dc077438 100644 --- a/kernel/cpuset.c +++ b/kernel/cpuset.c | |||
| @@ -18,7 +18,6 @@ | |||
| 18 | * distribution for more details. | 18 | * distribution for more details. |
| 19 | */ | 19 | */ |
| 20 | 20 | ||
| 21 | #include <linux/config.h> | ||
| 22 | #include <linux/cpu.h> | 21 | #include <linux/cpu.h> |
| 23 | #include <linux/cpumask.h> | 22 | #include <linux/cpumask.h> |
| 24 | #include <linux/cpuset.h> | 23 | #include <linux/cpuset.h> |
| @@ -1064,7 +1063,7 @@ static int update_flag(cpuset_flagbits_t bit, struct cpuset *cs, char *buf) | |||
| 1064 | } | 1063 | } |
| 1065 | 1064 | ||
| 1066 | /* | 1065 | /* |
| 1067 | * Frequency meter - How fast is some event occuring? | 1066 | * Frequency meter - How fast is some event occurring? |
| 1068 | * | 1067 | * |
| 1069 | * These routines manage a digitally filtered, constant time based, | 1068 | * These routines manage a digitally filtered, constant time based, |
| 1070 | * event frequency meter. There are four routines: | 1069 | * event frequency meter. There are four routines: |
diff --git a/kernel/exec_domain.c b/kernel/exec_domain.c index c01cead2cfd6..3c2eaea66b1e 100644 --- a/kernel/exec_domain.c +++ b/kernel/exec_domain.c | |||
| @@ -7,7 +7,6 @@ | |||
| 7 | * 2001-05-06 Complete rewrite, Christoph Hellwig (hch@infradead.org) | 7 | * 2001-05-06 Complete rewrite, Christoph Hellwig (hch@infradead.org) |
| 8 | */ | 8 | */ |
| 9 | 9 | ||
| 10 | #include <linux/config.h> | ||
| 11 | #include <linux/init.h> | 10 | #include <linux/init.h> |
| 12 | #include <linux/kernel.h> | 11 | #include <linux/kernel.h> |
| 13 | #include <linux/kmod.h> | 12 | #include <linux/kmod.h> |
diff --git a/kernel/exit.c b/kernel/exit.c index ab06b9f88f64..7f7ef2258553 100644 --- a/kernel/exit.c +++ b/kernel/exit.c | |||
| @@ -4,7 +4,6 @@ | |||
| 4 | * Copyright (C) 1991, 1992 Linus Torvalds | 4 | * Copyright (C) 1991, 1992 Linus Torvalds |
| 5 | */ | 5 | */ |
| 6 | 6 | ||
| 7 | #include <linux/config.h> | ||
| 8 | #include <linux/mm.h> | 7 | #include <linux/mm.h> |
| 9 | #include <linux/slab.h> | 8 | #include <linux/slab.h> |
| 10 | #include <linux/interrupt.h> | 9 | #include <linux/interrupt.h> |
diff --git a/kernel/fork.c b/kernel/fork.c index 628198a4f28a..9064bf9e131b 100644 --- a/kernel/fork.c +++ b/kernel/fork.c | |||
| @@ -11,7 +11,6 @@ | |||
| 11 | * management can be a bitch. See 'mm/memory.c': 'copy_page_range()' | 11 | * management can be a bitch. See 'mm/memory.c': 'copy_page_range()' |
| 12 | */ | 12 | */ |
| 13 | 13 | ||
| 14 | #include <linux/config.h> | ||
| 15 | #include <linux/slab.h> | 14 | #include <linux/slab.h> |
| 16 | #include <linux/init.h> | 15 | #include <linux/init.h> |
| 17 | #include <linux/unistd.h> | 16 | #include <linux/unistd.h> |
diff --git a/kernel/futex.c b/kernel/futex.c index 6c91f938005d..15caf93e4a43 100644 --- a/kernel/futex.c +++ b/kernel/futex.c | |||
| @@ -630,8 +630,10 @@ static int futex_wake(u32 __user *uaddr, int nr_wake) | |||
| 630 | 630 | ||
| 631 | list_for_each_entry_safe(this, next, head, list) { | 631 | list_for_each_entry_safe(this, next, head, list) { |
| 632 | if (match_futex (&this->key, &key)) { | 632 | if (match_futex (&this->key, &key)) { |
| 633 | if (this->pi_state) | 633 | if (this->pi_state) { |
| 634 | return -EINVAL; | 634 | ret = -EINVAL; |
| 635 | break; | ||
| 636 | } | ||
| 635 | wake_futex(this); | 637 | wake_futex(this); |
| 636 | if (++ret >= nr_wake) | 638 | if (++ret >= nr_wake) |
| 637 | break; | 639 | break; |
| @@ -1208,7 +1210,7 @@ static int do_futex_lock_pi(u32 __user *uaddr, int detect, int trylock, | |||
| 1208 | } | 1210 | } |
| 1209 | 1211 | ||
| 1210 | down_read(&curr->mm->mmap_sem); | 1212 | down_read(&curr->mm->mmap_sem); |
| 1211 | hb = queue_lock(&q, -1, NULL); | 1213 | spin_lock(q.lock_ptr); |
| 1212 | 1214 | ||
| 1213 | /* | 1215 | /* |
| 1214 | * Got the lock. We might not be the anticipated owner if we | 1216 | * Got the lock. We might not be the anticipated owner if we |
diff --git a/kernel/irq/chip.c b/kernel/irq/chip.c index 4a0952d9458b..54105bdfe20d 100644 --- a/kernel/irq/chip.c +++ b/kernel/irq/chip.c | |||
| @@ -462,9 +462,18 @@ __set_irq_handler(unsigned int irq, | |||
| 462 | if (!handle) | 462 | if (!handle) |
| 463 | handle = handle_bad_irq; | 463 | handle = handle_bad_irq; |
| 464 | 464 | ||
| 465 | if (is_chained && desc->chip == &no_irq_chip) | 465 | if (desc->chip == &no_irq_chip) { |
| 466 | printk(KERN_WARNING "Trying to install " | 466 | printk(KERN_WARNING "Trying to install %sinterrupt handler " |
| 467 | "chained interrupt type for IRQ%d\n", irq); | 467 | "for IRQ%d\n", is_chained ? "chained " : " ", irq); |
| 468 | /* | ||
| 469 | * Some ARM implementations install a handler for really dumb | ||
| 470 | * interrupt hardware without setting an irq_chip. This worked | ||
| 471 | * with the ARM no_irq_chip but the check in setup_irq would | ||
| 472 | * prevent us to setup the interrupt at all. Switch it to | ||
| 473 | * dummy_irq_chip for easy transition. | ||
| 474 | */ | ||
| 475 | desc->chip = &dummy_irq_chip; | ||
| 476 | } | ||
| 468 | 477 | ||
| 469 | spin_lock_irqsave(&desc->lock, flags); | 478 | spin_lock_irqsave(&desc->lock, flags); |
| 470 | 479 | ||
diff --git a/kernel/irq/handle.c b/kernel/irq/handle.c index 5a360dd4331b..aeb6e391276c 100644 --- a/kernel/irq/handle.c +++ b/kernel/irq/handle.c | |||
| @@ -92,6 +92,22 @@ struct irq_chip no_irq_chip = { | |||
| 92 | }; | 92 | }; |
| 93 | 93 | ||
| 94 | /* | 94 | /* |
| 95 | * Generic dummy implementation which can be used for | ||
| 96 | * real dumb interrupt sources | ||
| 97 | */ | ||
| 98 | struct irq_chip dummy_irq_chip = { | ||
| 99 | .name = "dummy", | ||
| 100 | .startup = noop_ret, | ||
| 101 | .shutdown = noop, | ||
| 102 | .enable = noop, | ||
| 103 | .disable = noop, | ||
| 104 | .ack = noop, | ||
| 105 | .mask = noop, | ||
| 106 | .unmask = noop, | ||
| 107 | .end = noop, | ||
| 108 | }; | ||
| 109 | |||
| 110 | /* | ||
| 95 | * Special, empty irq handler: | 111 | * Special, empty irq handler: |
| 96 | */ | 112 | */ |
| 97 | irqreturn_t no_action(int cpl, void *dev_id, struct pt_regs *regs) | 113 | irqreturn_t no_action(int cpl, void *dev_id, struct pt_regs *regs) |
| @@ -113,7 +129,9 @@ irqreturn_t handle_IRQ_event(unsigned int irq, struct pt_regs *regs, | |||
| 113 | irqreturn_t ret, retval = IRQ_NONE; | 129 | irqreturn_t ret, retval = IRQ_NONE; |
| 114 | unsigned int status = 0; | 130 | unsigned int status = 0; |
| 115 | 131 | ||
| 116 | if (!(action->flags & SA_INTERRUPT)) | 132 | handle_dynamic_tick(action); |
| 133 | |||
| 134 | if (!(action->flags & IRQF_DISABLED)) | ||
| 117 | local_irq_enable(); | 135 | local_irq_enable(); |
| 118 | 136 | ||
| 119 | do { | 137 | do { |
| @@ -124,7 +142,7 @@ irqreturn_t handle_IRQ_event(unsigned int irq, struct pt_regs *regs, | |||
| 124 | action = action->next; | 142 | action = action->next; |
| 125 | } while (action); | 143 | } while (action); |
| 126 | 144 | ||
| 127 | if (status & SA_SAMPLE_RANDOM) | 145 | if (status & IRQF_SAMPLE_RANDOM) |
| 128 | add_interrupt_randomness(irq); | 146 | add_interrupt_randomness(irq); |
| 129 | local_irq_disable(); | 147 | local_irq_disable(); |
| 130 | 148 | ||
diff --git a/kernel/irq/manage.c b/kernel/irq/manage.c index 9eb1d518ee1c..c911c6ec4dd6 100644 --- a/kernel/irq/manage.c +++ b/kernel/irq/manage.c | |||
| @@ -7,7 +7,6 @@ | |||
| 7 | * This file contains driver APIs to the irq subsystem. | 7 | * This file contains driver APIs to the irq subsystem. |
| 8 | */ | 8 | */ |
| 9 | 9 | ||
| 10 | #include <linux/config.h> | ||
| 11 | #include <linux/irq.h> | 10 | #include <linux/irq.h> |
| 12 | #include <linux/module.h> | 11 | #include <linux/module.h> |
| 13 | #include <linux/random.h> | 12 | #include <linux/random.h> |
| @@ -115,7 +114,7 @@ void enable_irq(unsigned int irq) | |||
| 115 | spin_lock_irqsave(&desc->lock, flags); | 114 | spin_lock_irqsave(&desc->lock, flags); |
| 116 | switch (desc->depth) { | 115 | switch (desc->depth) { |
| 117 | case 0: | 116 | case 0: |
| 118 | printk(KERN_WARNING "Unablanced enable_irq(%d)\n", irq); | 117 | printk(KERN_WARNING "Unbalanced enable for IRQ %d\n", irq); |
| 119 | WARN_ON(1); | 118 | WARN_ON(1); |
| 120 | break; | 119 | break; |
| 121 | case 1: { | 120 | case 1: { |
| @@ -168,7 +167,7 @@ int can_request_irq(unsigned int irq, unsigned long irqflags) | |||
| 168 | 167 | ||
| 169 | action = irq_desc[irq].action; | 168 | action = irq_desc[irq].action; |
| 170 | if (action) | 169 | if (action) |
| 171 | if (irqflags & action->flags & SA_SHIRQ) | 170 | if (irqflags & action->flags & IRQF_SHARED) |
| 172 | action = NULL; | 171 | action = NULL; |
| 173 | 172 | ||
| 174 | return !action; | 173 | return !action; |
| @@ -206,7 +205,7 @@ int setup_irq(unsigned int irq, struct irqaction *new) | |||
| 206 | * so we have to be careful not to interfere with a | 205 | * so we have to be careful not to interfere with a |
| 207 | * running system. | 206 | * running system. |
| 208 | */ | 207 | */ |
| 209 | if (new->flags & SA_SAMPLE_RANDOM) { | 208 | if (new->flags & IRQF_SAMPLE_RANDOM) { |
| 210 | /* | 209 | /* |
| 211 | * This function might sleep, we want to call it first, | 210 | * This function might sleep, we want to call it first, |
| 212 | * outside of the atomic block. | 211 | * outside of the atomic block. |
| @@ -228,16 +227,17 @@ int setup_irq(unsigned int irq, struct irqaction *new) | |||
| 228 | /* | 227 | /* |
| 229 | * Can't share interrupts unless both agree to and are | 228 | * Can't share interrupts unless both agree to and are |
| 230 | * the same type (level, edge, polarity). So both flag | 229 | * the same type (level, edge, polarity). So both flag |
| 231 | * fields must have SA_SHIRQ set and the bits which | 230 | * fields must have IRQF_SHARED set and the bits which |
| 232 | * set the trigger type must match. | 231 | * set the trigger type must match. |
| 233 | */ | 232 | */ |
| 234 | if (!((old->flags & new->flags) & SA_SHIRQ) || | 233 | if (!((old->flags & new->flags) & IRQF_SHARED) || |
| 235 | ((old->flags ^ new->flags) & SA_TRIGGER_MASK)) | 234 | ((old->flags ^ new->flags) & IRQF_TRIGGER_MASK)) |
| 236 | goto mismatch; | 235 | goto mismatch; |
| 237 | 236 | ||
| 238 | #if defined(CONFIG_IRQ_PER_CPU) && defined(SA_PERCPU_IRQ) | 237 | #if defined(CONFIG_IRQ_PER_CPU) |
| 239 | /* All handlers must agree on per-cpuness */ | 238 | /* All handlers must agree on per-cpuness */ |
| 240 | if ((old->flags & IRQ_PER_CPU) != (new->flags & IRQ_PER_CPU)) | 239 | if ((old->flags & IRQF_PERCPU) != |
| 240 | (new->flags & IRQF_PERCPU)) | ||
| 241 | goto mismatch; | 241 | goto mismatch; |
| 242 | #endif | 242 | #endif |
| 243 | 243 | ||
| @@ -250,26 +250,27 @@ int setup_irq(unsigned int irq, struct irqaction *new) | |||
| 250 | } | 250 | } |
| 251 | 251 | ||
| 252 | *p = new; | 252 | *p = new; |
| 253 | #if defined(CONFIG_IRQ_PER_CPU) && defined(SA_PERCPU_IRQ) | 253 | #if defined(CONFIG_IRQ_PER_CPU) |
| 254 | if (new->flags & SA_PERCPU_IRQ) | 254 | if (new->flags & IRQF_PERCPU) |
| 255 | desc->status |= IRQ_PER_CPU; | 255 | desc->status |= IRQ_PER_CPU; |
| 256 | #endif | 256 | #endif |
| 257 | if (!shared) { | 257 | if (!shared) { |
| 258 | irq_chip_set_defaults(desc->chip); | 258 | irq_chip_set_defaults(desc->chip); |
| 259 | 259 | ||
| 260 | /* Setup the type (level, edge polarity) if configured: */ | 260 | /* Setup the type (level, edge polarity) if configured: */ |
| 261 | if (new->flags & SA_TRIGGER_MASK) { | 261 | if (new->flags & IRQF_TRIGGER_MASK) { |
| 262 | if (desc->chip && desc->chip->set_type) | 262 | if (desc->chip && desc->chip->set_type) |
| 263 | desc->chip->set_type(irq, | 263 | desc->chip->set_type(irq, |
| 264 | new->flags & SA_TRIGGER_MASK); | 264 | new->flags & IRQF_TRIGGER_MASK); |
| 265 | else | 265 | else |
| 266 | /* | 266 | /* |
| 267 | * SA_TRIGGER_* but the PIC does not support | 267 | * IRQF_TRIGGER_* but the PIC does not support |
| 268 | * multiple flow-types? | 268 | * multiple flow-types? |
| 269 | */ | 269 | */ |
| 270 | printk(KERN_WARNING "setup_irq(%d) SA_TRIGGER" | 270 | printk(KERN_WARNING "No IRQF_TRIGGER set_type " |
| 271 | "set. No set_type function available\n", | 271 | "function for IRQ %d (%s)\n", irq, |
| 272 | irq); | 272 | desc->chip ? desc->chip->name : |
| 273 | "unknown"); | ||
| 273 | } else | 274 | } else |
| 274 | compat_irq_chip_set_default_handler(desc); | 275 | compat_irq_chip_set_default_handler(desc); |
| 275 | 276 | ||
| @@ -298,8 +299,8 @@ int setup_irq(unsigned int irq, struct irqaction *new) | |||
| 298 | 299 | ||
| 299 | mismatch: | 300 | mismatch: |
| 300 | spin_unlock_irqrestore(&desc->lock, flags); | 301 | spin_unlock_irqrestore(&desc->lock, flags); |
| 301 | if (!(new->flags & SA_PROBEIRQ)) { | 302 | if (!(new->flags & IRQF_PROBE_SHARED)) { |
| 302 | printk(KERN_ERR "%s: irq handler mismatch\n", __FUNCTION__); | 303 | printk(KERN_ERR "IRQ handler type mismatch for IRQ %d\n", irq); |
| 303 | dump_stack(); | 304 | dump_stack(); |
| 304 | } | 305 | } |
| 305 | return -EBUSY; | 306 | return -EBUSY; |
| @@ -366,7 +367,7 @@ void free_irq(unsigned int irq, void *dev_id) | |||
| 366 | kfree(action); | 367 | kfree(action); |
| 367 | return; | 368 | return; |
| 368 | } | 369 | } |
| 369 | printk(KERN_ERR "Trying to free free IRQ%d\n", irq); | 370 | printk(KERN_ERR "Trying to free already-free IRQ %d\n", irq); |
| 370 | spin_unlock_irqrestore(&desc->lock, flags); | 371 | spin_unlock_irqrestore(&desc->lock, flags); |
| 371 | return; | 372 | return; |
| 372 | } | 373 | } |
| @@ -397,9 +398,9 @@ EXPORT_SYMBOL(free_irq); | |||
| 397 | * | 398 | * |
| 398 | * Flags: | 399 | * Flags: |
| 399 | * | 400 | * |
| 400 | * SA_SHIRQ Interrupt is shared | 401 | * IRQF_SHARED Interrupt is shared |
| 401 | * SA_INTERRUPT Disable local interrupts while processing | 402 | * IRQF_DISABLED Disable local interrupts while processing |
| 402 | * SA_SAMPLE_RANDOM The interrupt can be used for entropy | 403 | * IRQF_SAMPLE_RANDOM The interrupt can be used for entropy |
| 403 | * | 404 | * |
| 404 | */ | 405 | */ |
| 405 | int request_irq(unsigned int irq, | 406 | int request_irq(unsigned int irq, |
| @@ -415,7 +416,7 @@ int request_irq(unsigned int irq, | |||
| 415 | * which interrupt is which (messes up the interrupt freeing | 416 | * which interrupt is which (messes up the interrupt freeing |
| 416 | * logic etc). | 417 | * logic etc). |
| 417 | */ | 418 | */ |
| 418 | if ((irqflags & SA_SHIRQ) && !dev_id) | 419 | if ((irqflags & IRQF_SHARED) && !dev_id) |
| 419 | return -EINVAL; | 420 | return -EINVAL; |
| 420 | if (irq >= NR_IRQS) | 421 | if (irq >= NR_IRQS) |
| 421 | return -EINVAL; | 422 | return -EINVAL; |
diff --git a/kernel/irq/spurious.c b/kernel/irq/spurious.c index b483deed311c..417e98092cf2 100644 --- a/kernel/irq/spurious.c +++ b/kernel/irq/spurious.c | |||
| @@ -36,7 +36,7 @@ static int misrouted_irq(int irq, struct pt_regs *regs) | |||
| 36 | * Already running: If it is shared get the other | 36 | * Already running: If it is shared get the other |
| 37 | * CPU to go looking for our mystery interrupt too | 37 | * CPU to go looking for our mystery interrupt too |
| 38 | */ | 38 | */ |
| 39 | if (desc->action && (desc->action->flags & SA_SHIRQ)) | 39 | if (desc->action && (desc->action->flags & IRQF_SHARED)) |
| 40 | desc->status |= IRQ_PENDING; | 40 | desc->status |= IRQ_PENDING; |
| 41 | spin_unlock(&desc->lock); | 41 | spin_unlock(&desc->lock); |
| 42 | continue; | 42 | continue; |
| @@ -48,7 +48,7 @@ static int misrouted_irq(int irq, struct pt_regs *regs) | |||
| 48 | 48 | ||
| 49 | while (action) { | 49 | while (action) { |
| 50 | /* Only shared IRQ handlers are safe to call */ | 50 | /* Only shared IRQ handlers are safe to call */ |
| 51 | if (action->flags & SA_SHIRQ) { | 51 | if (action->flags & IRQF_SHARED) { |
| 52 | if (action->handler(i, action->dev_id, regs) == | 52 | if (action->handler(i, action->dev_id, regs) == |
| 53 | IRQ_HANDLED) | 53 | IRQ_HANDLED) |
| 54 | ok = 1; | 54 | ok = 1; |
diff --git a/kernel/kmod.c b/kernel/kmod.c index 20a997c73c3d..1b7157af051c 100644 --- a/kernel/kmod.c +++ b/kernel/kmod.c | |||
| @@ -20,7 +20,6 @@ | |||
| 20 | */ | 20 | */ |
| 21 | #define __KERNEL_SYSCALLS__ | 21 | #define __KERNEL_SYSCALLS__ |
| 22 | 22 | ||
| 23 | #include <linux/config.h> | ||
| 24 | #include <linux/module.h> | 23 | #include <linux/module.h> |
| 25 | #include <linux/sched.h> | 24 | #include <linux/sched.h> |
| 26 | #include <linux/syscalls.h> | 25 | #include <linux/syscalls.h> |
diff --git a/kernel/ksysfs.c b/kernel/ksysfs.c index 9e28478a17a5..e0ffe4ab0917 100644 --- a/kernel/ksysfs.c +++ b/kernel/ksysfs.c | |||
| @@ -8,7 +8,6 @@ | |||
| 8 | * | 8 | * |
| 9 | */ | 9 | */ |
| 10 | 10 | ||
| 11 | #include <linux/config.h> | ||
| 12 | #include <linux/kobject.h> | 11 | #include <linux/kobject.h> |
| 13 | #include <linux/string.h> | 12 | #include <linux/string.h> |
| 14 | #include <linux/sysfs.h> | 13 | #include <linux/sysfs.h> |
diff --git a/kernel/module.c b/kernel/module.c index 99c022ac3d21..281172f01e9a 100644 --- a/kernel/module.c +++ b/kernel/module.c | |||
| @@ -16,7 +16,6 @@ | |||
| 16 | along with this program; if not, write to the Free Software | 16 | along with this program; if not, write to the Free Software |
| 17 | Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA | 17 | Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
| 18 | */ | 18 | */ |
| 19 | #include <linux/config.h> | ||
| 20 | #include <linux/module.h> | 19 | #include <linux/module.h> |
| 21 | #include <linux/moduleloader.h> | 20 | #include <linux/moduleloader.h> |
| 22 | #include <linux/init.h> | 21 | #include <linux/init.h> |
diff --git a/kernel/panic.c b/kernel/panic.c index cc2a4c9c36ac..ab13f0f668b5 100644 --- a/kernel/panic.c +++ b/kernel/panic.c | |||
| @@ -8,7 +8,6 @@ | |||
| 8 | * This function is used through-out the kernel (including mm and fs) | 8 | * This function is used through-out the kernel (including mm and fs) |
| 9 | * to indicate a major problem. | 9 | * to indicate a major problem. |
| 10 | */ | 10 | */ |
| 11 | #include <linux/config.h> | ||
| 12 | #include <linux/module.h> | 11 | #include <linux/module.h> |
| 13 | #include <linux/sched.h> | 12 | #include <linux/sched.h> |
| 14 | #include <linux/delay.h> | 13 | #include <linux/delay.h> |
diff --git a/kernel/params.c b/kernel/params.c index af43ecdc8d9b..91aea7aa532e 100644 --- a/kernel/params.c +++ b/kernel/params.c | |||
| @@ -15,7 +15,6 @@ | |||
| 15 | along with this program; if not, write to the Free Software | 15 | along with this program; if not, write to the Free Software |
| 16 | Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA | 16 | Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA |
| 17 | */ | 17 | */ |
| 18 | #include <linux/config.h> | ||
| 19 | #include <linux/moduleparam.h> | 18 | #include <linux/moduleparam.h> |
| 20 | #include <linux/kernel.h> | 19 | #include <linux/kernel.h> |
| 21 | #include <linux/string.h> | 20 | #include <linux/string.h> |
diff --git a/kernel/power/Kconfig b/kernel/power/Kconfig index 857b4fa09124..ae44a70aae8a 100644 --- a/kernel/power/Kconfig +++ b/kernel/power/Kconfig | |||
| @@ -100,18 +100,6 @@ config PM_STD_PARTITION | |||
| 100 | suspended image to. It will simply pick the first available swap | 100 | suspended image to. It will simply pick the first available swap |
| 101 | device. | 101 | device. |
| 102 | 102 | ||
| 103 | config SWSUSP_ENCRYPT | ||
| 104 | bool "Encrypt suspend image" | ||
| 105 | depends on SOFTWARE_SUSPEND && CRYPTO=y && (CRYPTO_AES=y || CRYPTO_AES_586=y || CRYPTO_AES_X86_64=y) | ||
| 106 | default "" | ||
| 107 | ---help--- | ||
| 108 | To prevent data gathering from swap after resume you can encrypt | ||
| 109 | the suspend image with a temporary key that is deleted on | ||
| 110 | resume. | ||
| 111 | |||
| 112 | Note that the temporary key is stored unencrypted on disk while the | ||
| 113 | system is suspended. | ||
| 114 | |||
| 115 | config SUSPEND_SMP | 103 | config SUSPEND_SMP |
| 116 | bool | 104 | bool |
| 117 | depends on HOTPLUG_CPU && X86 && PM | 105 | depends on HOTPLUG_CPU && X86 && PM |
diff --git a/kernel/printk.c b/kernel/printk.c index 95b7fe17f124..39ae24d2a415 100644 --- a/kernel/printk.c +++ b/kernel/printk.c | |||
| @@ -26,7 +26,6 @@ | |||
| 26 | #include <linux/module.h> | 26 | #include <linux/module.h> |
| 27 | #include <linux/moduleparam.h> | 27 | #include <linux/moduleparam.h> |
| 28 | #include <linux/interrupt.h> /* For in_interrupt() */ | 28 | #include <linux/interrupt.h> /* For in_interrupt() */ |
| 29 | #include <linux/config.h> | ||
| 30 | #include <linux/delay.h> | 29 | #include <linux/delay.h> |
| 31 | #include <linux/smp.h> | 30 | #include <linux/smp.h> |
| 32 | #include <linux/security.h> | 31 | #include <linux/security.h> |
diff --git a/kernel/profile.c b/kernel/profile.c index 5a730fdb1a2c..d5bd75e7501c 100644 --- a/kernel/profile.c +++ b/kernel/profile.c | |||
| @@ -13,7 +13,6 @@ | |||
| 13 | * to resolve timer interrupt livelocks, William Irwin, Oracle, 2004 | 13 | * to resolve timer interrupt livelocks, William Irwin, Oracle, 2004 |
| 14 | */ | 14 | */ |
| 15 | 15 | ||
| 16 | #include <linux/config.h> | ||
| 17 | #include <linux/module.h> | 16 | #include <linux/module.h> |
| 18 | #include <linux/profile.h> | 17 | #include <linux/profile.h> |
| 19 | #include <linux/bootmem.h> | 18 | #include <linux/bootmem.h> |
diff --git a/kernel/resource.c b/kernel/resource.c index bf1130d81b7f..129cf046e561 100644 --- a/kernel/resource.c +++ b/kernel/resource.c | |||
| @@ -7,7 +7,6 @@ | |||
| 7 | * Arbitrary resource management. | 7 | * Arbitrary resource management. |
| 8 | */ | 8 | */ |
| 9 | 9 | ||
| 10 | #include <linux/config.h> | ||
| 11 | #include <linux/module.h> | 10 | #include <linux/module.h> |
| 12 | #include <linux/sched.h> | 11 | #include <linux/sched.h> |
| 13 | #include <linux/errno.h> | 12 | #include <linux/errno.h> |
diff --git a/kernel/signal.c b/kernel/signal.c index 477d11adf3d1..7fe874d12fae 100644 --- a/kernel/signal.c +++ b/kernel/signal.c | |||
| @@ -10,7 +10,6 @@ | |||
| 10 | * to allow signals to be sent reliably. | 10 | * to allow signals to be sent reliably. |
| 11 | */ | 11 | */ |
| 12 | 12 | ||
| 13 | #include <linux/config.h> | ||
| 14 | #include <linux/slab.h> | 13 | #include <linux/slab.h> |
| 15 | #include <linux/module.h> | 14 | #include <linux/module.h> |
| 16 | #include <linux/smp_lock.h> | 15 | #include <linux/smp_lock.h> |
diff --git a/kernel/spinlock.c b/kernel/spinlock.c index d1b810782bc4..b31e54eadf56 100644 --- a/kernel/spinlock.c +++ b/kernel/spinlock.c | |||
| @@ -9,7 +9,6 @@ | |||
| 9 | * SMP and the DEBUG_SPINLOCK cases. (UP-nondebug inlines them) | 9 | * SMP and the DEBUG_SPINLOCK cases. (UP-nondebug inlines them) |
| 10 | */ | 10 | */ |
| 11 | 11 | ||
| 12 | #include <linux/config.h> | ||
| 13 | #include <linux/linkage.h> | 12 | #include <linux/linkage.h> |
| 14 | #include <linux/preempt.h> | 13 | #include <linux/preempt.h> |
| 15 | #include <linux/spinlock.h> | 14 | #include <linux/spinlock.h> |
diff --git a/kernel/sys.c b/kernel/sys.c index 2d5179c67cec..dbb3b9c7ea64 100644 --- a/kernel/sys.c +++ b/kernel/sys.c | |||
| @@ -4,7 +4,6 @@ | |||
| 4 | * Copyright (C) 1991, 1992 Linus Torvalds | 4 | * Copyright (C) 1991, 1992 Linus Torvalds |
| 5 | */ | 5 | */ |
| 6 | 6 | ||
| 7 | #include <linux/config.h> | ||
| 8 | #include <linux/module.h> | 7 | #include <linux/module.h> |
| 9 | #include <linux/mm.h> | 8 | #include <linux/mm.h> |
| 10 | #include <linux/utsname.h> | 9 | #include <linux/utsname.h> |
diff --git a/kernel/sysctl.c b/kernel/sysctl.c index ee0db45e2438..99a58f279077 100644 --- a/kernel/sysctl.c +++ b/kernel/sysctl.c | |||
| @@ -18,7 +18,6 @@ | |||
| 18 | * Removed it and replaced it with older style, 03/23/00, Bill Wendling | 18 | * Removed it and replaced it with older style, 03/23/00, Bill Wendling |
| 19 | */ | 19 | */ |
| 20 | 20 | ||
| 21 | #include <linux/config.h> | ||
| 22 | #include <linux/module.h> | 21 | #include <linux/module.h> |
| 23 | #include <linux/mm.h> | 22 | #include <linux/mm.h> |
| 24 | #include <linux/swap.h> | 23 | #include <linux/swap.h> |
diff --git a/kernel/wait.c b/kernel/wait.c index 791681cfea98..5985d866531f 100644 --- a/kernel/wait.c +++ b/kernel/wait.c | |||
| @@ -3,7 +3,6 @@ | |||
| 3 | * | 3 | * |
| 4 | * (C) 2004 William Irwin, Oracle | 4 | * (C) 2004 William Irwin, Oracle |
| 5 | */ | 5 | */ |
| 6 | #include <linux/config.h> | ||
| 7 | #include <linux/init.h> | 6 | #include <linux/init.h> |
| 8 | #include <linux/module.h> | 7 | #include <linux/module.h> |
| 9 | #include <linux/sched.h> | 8 | #include <linux/sched.h> |
