5045 use atomic_{inc,dec}_* instead of atomic_add_* Reviewed by: Matthew Ahrens <mahrens@delphix.com> Reviewed by: Garrett D'Amore <garrett@damore.org> Approved by: Robert Mustacchi <rm@joyent.com>

6944382 txzonemgr should not run anywhere but in a labeled system's global zone 6362889 revisit lofs/nfs code for dev changes

6935869 getlabel doesn't use mlslabel info for zfs files 6466890 Getlabel returns admin_low for unshared ZFS mount point under /usr/local in global zone

6746299 assertion !vn_ismntpt(vp) fail in snv_98 6833224 TX NFS client file access returns EACCES randomly for non-ADMIN_LOW labeled resources

6304623 Initiator checks against wrong label for Mac-exempt read-down exchanges 6400008 Binding to UDP MLP without privilege ruturning incorrect errno 6409753 tx sctp connect() returns different errno value from tcp 6410308 tx mlp server fails to accept sctp connections from unlabeled nodes 6468843 TX ipv4 ICMP messages not generated with appropriate labels 6685898 TX: server side sends incorrect cred when MLP is in use 6810083 TX: MAC-Exempt socket received packets sent to another zone's address 6810303 spurious ASSERT(msg_getcred(phdr_mp, NULL) == NULL) in ipsecah 6818663 TX: netstat -aR displays INVALID label

PSARC/2007/218 caller_context_t in all VOPs PSARC/2007/227 VFS Feature Registration and ACL on Create PSARC/2007/244 ZFS Case-insensitive support PSARC/2007/315 Extensible Attribute Interfaces PSARC/2007/394 ls(1) new command line options '-/' and '-%': CIFS system attributes support PSARC/2007/403 Modified Access Checks for CIFS PSARC/2007/410 Add system attribute support to chmod(1) PSARC/2007/432 CIFS system attributes support for cp(1), pack(1), unpack(1), compress(1) and uncompress(1) PSARC/2007/444 Rescind SETTABLE Attribute PSARC/2007/459 CIFS system attributes support for cpio(1), pax(1), tar(1) PSARC/2007/546 Update utilities to match CIFS system attributes changes. PSARC/2007/560 ZFS sharesmb property 4890717 want append-only files 6417428 Case-insensitive file system name lookup to support CIFS 6417435 DOS attributes and additional timestamps to support for CIFS 6417442 File system quarantined and modified attributes to support an integrated Anti-Virus service 6417453 FS boolean property for rejecting/allowing invalid UTF-8 sequences in file names 6473733 RFE: Need support for open-deny modes 6473755 RFE: Need ability to reconcile oplock and delegation conflicts 6494624 sharemgr needs to support CIFS shares better 6546705 All vnode operations need to pass caller_context_t 6546706 Need VOP_SETATTR/VOP_GETATTR to support new, optional attributes 6546893 Solaris system attribute support 6550962 ZFS ACL inheritance needs to be enhanced to support Automatic Inheritance 6553589 RFE: VFS Feature Registration facility 6553770 RFE: ZFS support for ACL-on-CREATE (PSARC 2007/227) 6565581 ls(1) should support file system attributes proposed in PSARC/2007/315 6566784 NTFS streams are not copied along with the files. 6576205 cp(1), pack(1) and compress(1) should support file system attributes proposed in PSARC/2007/315 6578875 RFE: kernel interfaces for nbmand need improvement 6578883 RFE: VOP_SHRLOCK needs additional access types 6578885 chmod(1) should support file system attributes proposed in PSARC/2007/315 6578886 RFE: disallow nbmand state to change on remount 6583349 ACL parser needs to support audit/alarm ACE types 6590347 tar(1) should support filesystem attributes proposed in PSARC/2007/315 6597357 *tar* xv@ doesn't show the hidden directory even though it is restored 6597360 *tar* should re-init xattr info if openat() fails during extraction of and extended attribute 6597368 *tar* cannot restore hard linked extended attributes 6597374 *tar* doesn't display "x " when hard linked attributes are restored 6597375 *tar* extended attribute header off by one 6614861 *cpio* incorrectly archives extended system attributes with -@ 6614896 *pax* incorrectly archives extended system attributes with -@ 6615225 *tar* incorrectly archives extended system attributes with -@ 6617183 CIFS Service - PSARC 2006/715

6560317 TX NFS server needs to support NFSv3 clients 6596123 TX NFSv4 should not allow a read-up mount via WebNFS

PSARC 2007/254 - Enabling method for Trusted Extensions 6432114 [tjds] cannot login via gdm unless clearance is set to admin_high 6533113 split install and enabling of Trusted Extensions 6533118 move TX source from TLC to ON gate 6542578 TLC putback requires i.pamconf change similar to the kerberos solution. 6552207 txzonemgr does not configure loopback mounts for /etc/passwd and /etc/shadow when creating zones 6552253 solaris.smf.manage.labels should allow for permanent as well as temporary enable/disable of labeld 6555057 txzonemgr assumes LANG is valid 6557684 pam_tsol_account could use a thorough house cleaning 6561392 txzonemgr should work from Zone Management profile 6565347 txzonemgr failed to add an interface to a zone

6510153 TX connection attempt to unbooted zone resulted in global zone login

6433603 A panic occur when setting the audit flags to "all"

6407402 Named pipes should work between labeled zones to support write up. 6411980 getlabel(2) returns wrong label for lofs mounted FIFOs

PSARC/2002/762 Layered Trusted Solaris PSARC/2005/060 TSNET: Trusted Networking with Security Labels PSARC/2005/259 Layered Trusted Solaris Label Interfaces PSARC/2005/573 Solaris Trusted Extensions for Printing PSARC/2005/691 Trusted Extensions for Device Allocation PSARC/2005/723 Solaris Trusted Extensions Filesystem Labeling PSARC/2006/009 Labeled Auditing PSARC/2006/155 Trusted Extensions RBAC Changes PSARC/2006/191 is_system_labeled 6293271 Zone processes should use zone_kcred instead of kcred 6394554 integrate Solaris Trusted Extensions --HG-- rename : usr/src/cmd/dminfo/Makefile => deleted_files/usr/src/cmd/dminfo/Makefile rename : usr/src/cmd/dminfo/dminfo.c => usr/src/cmd/allocate/dminfo.c