From dacc39e308b2be2ade936e9b4f0099384629cbf6 Mon Sep 17 00:00:00 2001 From: Robert Watson Date: Fri, 25 Apr 2003 19:47:52 +0000 Subject: [PATCH] From the RE telecon this morning. Add required features to 5.2-RELEASE list: - Production-quality M:N threading (julian, davidxu, deischen) - 16-bit CDB support in CAM (ken) - FAST_IPSEC and KAME compatibility (unowned) - KAME Synchronization (unowned) - truss support for ptrace (unowned) - Merge of Darwin msdosfs, other fixes (unowned) Add desired features to 5.2-RELEASE list: - MAC support for NFS Server (rwatson) Note: in many cases, deciding to get these things working for 5.1 would not be amiss either. --- en/releases/5.2R/todo.sgml | 77 +++++++++++++++++++++++++++++++++++++- 1 file changed, 76 insertions(+), 1 deletion(-) diff --git a/en/releases/5.2R/todo.sgml b/en/releases/5.2R/todo.sgml index 4ca9f3a325..f1df672456 100644 --- a/en/releases/5.2R/todo.sgml +++ b/en/releases/5.2R/todo.sgml @@ -1,7 +1,7 @@ - + %includes; %developers; @@ -22,6 +22,69 @@ IssueStatusResponsibleDescription + + Production-quality M:N threading + In progress + &a.julian;, &a.davidxu;, &a.deischen; + KSE M:N threading support is reaching experimental yet usable + status on i386 for 5.1-RELEASE. M:N threading should be + productionable and usable on all platforms by 5.2-RELEASE. + + + + 16-bit CDB addressing for CAM + In progress + &a.ken; + CAM currently supports only 12-bit CDBs, placing a 2TB bound + on addressable disk storage using CAM. With support for large + file systems with UFS2, and large partitions using GPT, CAM + now needs to be updated to support these devices. + + + + FAST_IPSEC and KAME compatibility + -- + -- + FAST_IPSEC currently cannot be used directly with the KAME IPv6 + implementation, requiring an additional level of IP tunnel + indirection to protect IPv6 packets when using hardware crypto + acceleration. This issue must be resolved so that the two + services may more easily be used together. Among other things, + this will require a careful review of the handling of mbuf + header copying and m_tag support in the KAME IPv6 code. + + + + KAME Synchronization + -- + -- + The FreeBSD KAME IPv6 code is now substantially dated with + respect to the KAME vendor source. The FreeBSD Project needs + to take initiative in driving the merge of new bug fixes, + features, et al. + + + + truss support for ptrace + -- + -- + Almost all process debugging tools have been updated to use + non-procfs kernel primitives, with the exception of truss(1). + As procfs is considered deprecated due to its inherrent security + risks, it is highly desirable to update truss to operate in + a post-procfs world. &a.des; had "work in progress" patches + that will need to be completed and committed. + + + + Merge of Darwin msdosfs, other fixes + -- + -- + Apple's Darwin operating system has fairly extensive improvements + to msdosfs and other kernel services; these fixes must be reviewed + and merged to the FreeBSD tree. + +

Desired Features for 5.2-RELEASE

@@ -30,6 +93,18 @@ IssueStatusResponsibleDescription + + MAC support for NFS Server + -- + &a.rwatson; + Currently, MAC protections are enforced only on locally originated + file system operations (VOPs), and not on RPCs generated via the + NFS server. Improvements in NFS server credential handling are + required to correct this problem, as well as the introduction of + new entry points to properly label NFS credentials and perform + enforcement properly. + +

Documentation items that must be resolved for 5.2