opnsense-src/lib
Konstantin Belousov 85a0ddfd0b Add a resource limit for the total number of kqueues available to the
user.  Kqueue now saves the ucred of the allocating thread, to
correctly decrement the counter on close.

Under some specific and not real-world use scenario for kqueue, it is
possible for the kqueues to consume memory proportional to the square
of the number of the filedescriptors available to the process.  Limit
allows administrator to prevent the abuse.

This is kernel-mode side of the change, with the user-mode enabling
commit following.

Reported and tested by:	pho
Discussed with:	jmg
Sponsored by:	The FreeBSD Foundation
MFC after:	2 weeks
2013-10-21 16:46:12 +00:00
..
atf Remove -L<path> from LDADD, it doesn't belong there. 2012-11-07 00:23:51 +00:00
clang Bump OS versions in the toolchain triples to 11.0, and bump the 2013-10-10 20:47:11 +00:00
csu Add an elf note on ARM to store the MACHINE_ARCH an executable was built 2013-09-26 07:53:18 +00:00
libalias A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libarchive Temporarily disable iconv for non-shared library builds. The dynamic 2013-09-26 17:55:36 +00:00
libauditd A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libbegemot A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libblocksruntime Import libcompiler_rt into HEAD and add Makefiles. 2010-11-11 15:13:11 +00:00
libbluetooth General mdoc(7) and typo fixes. 2012-05-11 20:06:46 +00:00
libbsm A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libbsnmp Add missing DPADD 2013-01-01 18:29:25 +00:00
libbz2 A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libc Add a resource limit for the total number of kqueues available to the 2013-10-21 16:46:12 +00:00
libc++ Add a c++/v1/tr1 include directory containing symlinks to all of the standard 2013-09-04 15:02:14 +00:00
libcalendar A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libcam Fix a typo: XPORT_SPI should be tested against transport, nor protocol. 2013-06-03 21:52:19 +00:00
libcom_err - Update FreeBSD Heimdal distribution to version 1.5.1. This also brings 2012-03-22 08:48:42 +00:00
libcompat A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libcompiler_rt Unconditionally compile the __sync_* atomics support functions into compiler-rt 2013-08-31 08:50:45 +00:00
libcrypt Clearly split the logic to build ATF and plain tests apart. 2013-10-19 06:48:49 +00:00
libcxxrt Add several missing symbols to libcxxrt's symbol version map, and remove 2013-02-03 20:40:41 +00:00
libdevinfo sys/rman.h now requires sys/types.h. Include it to make the API match 2011-02-10 04:53:09 +00:00
libdevstat New devstat metrics for devstat_compute_statistics(): 2012-12-15 18:19:48 +00:00
libdwarf When decoding SLEB128, make sure sign extension is performed for 2013-06-30 21:06:47 +00:00
libedit Import NetBSD readline.c,v 1.104: do not crash with add_history(NULL). 2013-09-26 17:54:58 +00:00
libefi A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libelf Add support to the ARM platform specific section types. 2013-08-31 18:13:20 +00:00
libexecinfo Don't install private libexecinfo headers 2013-09-03 13:31:43 +00:00
libexpat Update base system libexpat to 2.1.0. 2013-02-26 00:58:44 +00:00
libfetch Even though it doesn't really make sense in the context of a CONNECT 2013-08-22 07:43:36 +00:00
libgeom Since there's no defined schema for the XML that's generated by the 2013-07-19 06:42:15 +00:00
libgpib mdoc: minor Bl improvements. 2012-06-02 08:47:26 +00:00
libgssapi mdoc: add missing -width argument to Bl -tag. 2012-06-08 12:09:00 +00:00
libiconv Remove redundant assignments to WARNS. 2011-06-06 20:24:17 +00:00
libiconv_compat Turn off warns for this do-nothing file. clang noticed. 2013-08-13 08:12:57 +00:00
libiconv_modules Use Makefile.inc instead of .export. 2013-09-06 10:40:38 +00:00
libipsec Improve compatibility with recent flex from flex.sourceforge.net. 2013-05-03 23:51:32 +00:00
libipx A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libjail Fix some memory allocation errors: 2012-10-04 19:07:05 +00:00
libkiconv The iconv in libc did two things - implement the standard APIs, the GNU 2013-08-13 07:15:01 +00:00
libkse Fix typo in ".PATH" 2012-04-18 07:02:53 +00:00
libkvm Revert r256514 for libkvm. It wasn't correct actually and breaks build. 2013-10-15 13:53:35 +00:00
libldns LDNS needs OpenSSL. This wasn't a problem as long as it was only build 2013-09-08 19:39:18 +00:00
liblzma Update xz to git snapshot of v5.0 branch as of 20110711 (post-5.0.3) 2011-07-11 14:15:27 +00:00
libmagic r235638 is not the clean way to add support for building on ancient FreeBSD 2012-09-11 22:38:33 +00:00
libmandoc Merge mandoc from vendor into contrib and provide the necessary Makefile glue. 2012-10-19 22:21:01 +00:00
libmd Remove the RFC 1319 MD2 Message-Digest Algorithm routines from libmd. 2012-04-28 02:48:51 +00:00
libmemstat Refine UMA bucket allocation to reduce space consumption and improve 2013-06-18 04:50:20 +00:00
libmilter A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libmp Fix whitespace inconsistencies found in homegrown Symbol.maps. 2011-10-07 15:05:24 +00:00
libnandfs Import work done under project/nand (@235533) into head. 2012-05-17 10:11:18 +00:00
libnetbsd Add libnetbsd, a thin compatibility layer intended to allow a limited 2012-12-21 20:37:38 +00:00
libnetgraph Fix for quite a special case when userland emulates a netgraph node, and 2013-03-11 13:05:11 +00:00
libngatm A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libopie X11BASE has been deprecated for a long time and will die soon 2012-01-09 00:48:19 +00:00
libpam Make libldns and libssh private. 2013-09-08 10:04:26 +00:00
libpcap MFV: libpcap 1.4.0. 2013-05-30 08:02:00 +00:00
libpmc Always install pmc.foo(3) manpages. 2013-05-03 08:20:10 +00:00
libproc Fix the libproc build when DEBUG is defined. 2013-10-17 03:39:21 +00:00
libprocstat Handle the cases where NULL is passed as cap_rightsp to the 2013-10-09 20:58:50 +00:00
libradius mdoc sweep. 2013-05-12 22:22:12 +00:00
librpcsec_gss Fix warnings found by -Wmising-variable-declarations. 2012-10-19 05:43:38 +00:00
librpcsvc Consistently set RPCGEN_CPP when running rpcgen, so the C preprocessor 2012-02-07 09:27:07 +00:00
librt Convert this piece of code to use C11 atomics. 2013-06-30 08:59:33 +00:00
librtld_db Bump shared libraries version numbers in preparation for 9.0. 2011-08-28 09:26:48 +00:00
libsbuf Add sbuf_start_section and sbuf_end_section to the libsbuf symbol map. 2013-04-11 19:50:10 +00:00
libsdp Change the SDP_GET* macros to cast to a const buffer. 2011-10-16 08:45:16 +00:00
libsm Since clang 3.2 now has an option to suppress warnings about implicitly 2013-02-16 20:17:31 +00:00
libsmb A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libsmdb A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libsmutil A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libstand Unbreak zfsloader with LOADER_TFTP_SUPPORT on 2013-10-09 21:33:19 +00:00
libstdbuf Remove WARNS=6 lines. 2012-10-18 15:39:29 +00:00
libstdthreads Pull up vendor changes to mdoc(7) 2012-01-05 21:36:12 +00:00
libtacplus mdoc sweep. 2013-05-12 22:22:12 +00:00
libtelnet - Do not use deprecated krb5 error message reporting functions in libtelnet. 2012-04-06 00:03:45 +00:00
libthr The SUSv4tc1 requires that pthread_setcancelstate() shall be not a 2013-06-19 04:47:41 +00:00
libthread_db Ensure we set all fpu registers to zero by using the address and size of 2013-08-17 14:42:40 +00:00
libufs Make berase() work on platforms whose kernel lacks DIOCGDELETE ioctl. 2011-12-08 12:31:47 +00:00
libugidfw Quiet clang warnings by using string literal format strings. 2011-01-04 13:02:52 +00:00
libulog Properly use SHA1_Final() instead of SHA_Final(). 2012-04-19 15:28:15 +00:00
libunbound Build and install the Unbound caching DNS resolver daemon. 2013-09-15 14:51:23 +00:00
libusb Correct two comments. 2013-09-05 12:21:11 +00:00
libusbhid Restore handling of the third argument (id) of hid_start_parse(), same as 2012-09-20 18:56:27 +00:00
libutil Add a resource limit for the total number of kqueues available to the 2013-10-21 16:46:12 +00:00
libvgl Fix various typos in manual pages. 2012-02-25 14:31:25 +00:00
libvmmapi Add a new capability, VM_CAP_ENABLE_INVPCID, that can be enabled to expose 2013-10-16 18:20:27 +00:00
libwrap A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
liby A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00
libyaml Rename libbsdyml to libyaml, make private, and bump 2013-10-14 18:31:15 +00:00
libypclnt Consistently set RPCGEN_CPP when running rpcgen, so the C preprocessor 2012-02-07 09:27:07 +00:00
libz Make it possible to seek within a gzip stream. 2013-10-16 17:16:40 +00:00
msun After r255294, building lib/msun's symbol map (using clang as the 2013-09-12 20:51:48 +00:00
ncurses Convert old make variable modifiers :U and :L to bmake :tu and :tl. 2013-06-02 11:44:23 +00:00
Makefile Remove BIND. 2013-09-30 17:23:45 +00:00
Makefile.inc A new jail(8) with a configuration file, to replace the work currently done 2010-10-19 21:32:13 +00:00