2010-07-13 23:11:44 +02:00
|
|
|
#
|
|
|
|
# Boot system services in the boot image
|
|
|
|
#
|
|
|
|
|
|
|
|
service rs
|
|
|
|
{
|
|
|
|
uid 0;
|
|
|
|
ipc ALL; # ALL ipc targets allowed
|
|
|
|
system ALL; # ALL kernel calls allowed
|
|
|
|
vm # Extra VM calls allowed:
|
|
|
|
RS_SET_PRIV # 37
|
|
|
|
RS_UPDATE # 41
|
|
|
|
RS_MEMCTL # 42
|
2015-07-14 07:42:48 +02:00
|
|
|
PROCCTL # 45
|
|
|
|
RS_PREPARE # 48
|
2010-07-13 23:11:44 +02:00
|
|
|
;
|
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr SELF; # Signal manager is SELF
|
|
|
|
scheduler KERNEL; # Scheduler is KERNEL
|
|
|
|
priority 4; # priority queue 4
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
|
|
|
service ds
|
|
|
|
{
|
|
|
|
uid 0;
|
2010-12-08 15:54:08 +01:00
|
|
|
ipc ALL_SYS; # All system ipc targets allowed
|
2010-07-13 23:11:44 +02:00
|
|
|
system ALL; # ALL kernel calls allowed
|
|
|
|
vm BASIC; # Only basic VM calls allowed
|
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler KERNEL; # Scheduler is KERNEL
|
|
|
|
priority 4; # priority queue 4
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
|
|
|
service vm
|
|
|
|
{
|
|
|
|
uid 0;
|
|
|
|
ipc ALL; # ALL ipc targets allowed
|
|
|
|
system ALL; # ALL kernel calls allowed
|
|
|
|
vm NONE; # No VM calls allowed
|
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler KERNEL; # Scheduler is KERNEL
|
|
|
|
priority 2; # priority queue 2
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
|
|
|
service pm
|
|
|
|
{
|
|
|
|
uid 0;
|
|
|
|
ipc ALL; # ALL ipc targets allowed
|
|
|
|
system ALL; # ALL kernel calls allowed
|
|
|
|
vm # Extra VM calls allowed:
|
|
|
|
EXIT # 00
|
|
|
|
FORK # 01
|
|
|
|
EXEC_NEWMEM # 03
|
|
|
|
WILLEXIT # 05
|
|
|
|
NOTIFY_SIG # 39
|
2015-09-27 19:32:10 +02:00
|
|
|
GETRUSAGE # 47
|
2010-07-13 23:11:44 +02:00
|
|
|
;
|
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler KERNEL; # Scheduler is KERNEL
|
|
|
|
priority 4; # priority queue 4
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
|
|
|
service sched
|
|
|
|
{
|
|
|
|
uid 0;
|
2010-12-08 15:54:08 +01:00
|
|
|
ipc ALL_SYS; # All system ipc targets allowed
|
2010-07-13 23:11:44 +02:00
|
|
|
system ALL; # ALL kernel calls allowed
|
|
|
|
vm BASIC; # Only basic VM calls allowed
|
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler KERNEL; # Scheduler is KERNEL
|
|
|
|
priority 4; # priority queue 4
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
|
|
|
service vfs
|
|
|
|
{
|
|
|
|
uid 0;
|
|
|
|
ipc ALL; # ALL ipc targets allowed
|
|
|
|
system # Extra kernel calls allowed:
|
|
|
|
KILL # 06
|
|
|
|
UMAP # 14
|
|
|
|
VIRCOPY # 15
|
2012-06-06 19:05:28 +02:00
|
|
|
MEMSET
|
2010-07-13 23:11:44 +02:00
|
|
|
;
|
2013-05-07 14:41:07 +02:00
|
|
|
vm PROCCTL
|
2013-08-07 14:14:40 +02:00
|
|
|
VFS_MMAP
|
|
|
|
VFS_REPLY
|
|
|
|
;
|
2010-07-13 23:11:44 +02:00
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler KERNEL; # Scheduler is KERNEL
|
|
|
|
priority 5; # priority queue 5
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
|
|
|
service mfs
|
|
|
|
{
|
2010-12-08 15:54:08 +01:00
|
|
|
ipc ALL_SYS; # All system ipc targets allowed
|
2010-07-13 23:11:44 +02:00
|
|
|
system BASIC; # Only basic kernel calls allowed
|
libminixfs/VM: fix memory-mapped file corruption
This patch employs one solution to resolve two independent but related
issues. Both issues are the result of one fundamental aspect of the
way VM's memory mapping works: VM uses its cache to map in blocks for
memory-mapped file regions, and for blocks already in the VM cache, VM
does not go to the file system before mapping them in. To preserve
consistency between the FS and VM caches, VM relies on being informed
about all updates to file contents through the block cache. The two
issues are both the result of VM not being properly informed about
such updates:
1. Once a file system provides libminixfs with an inode association
(inode number + inode offset) for a disk block, this association
is not broken until a new inode association is provided for it.
If a block is freed and reallocated as a metadata (non-inode)
block, its old association is maintained, and may be supplied to
VM's secondary cache. Due to reuse of inodes, it is possible
that the same inode association becomes valid for an actual file
block again. In that case, when that new file is memory-mapped,
under certain circumstances, VM may end up using the metadata
block to satisfy a page fault on the file, due to the stale inode
association. The result is a corrupted memory mapping, with the
application seeing data other than the current file contents
mapped in at the file block.
2. When a hole is created in a file, the underlying block is freed
from the device, but VM is not informed of this update, and thus,
if VM's cache contains the block with its previous inode
association, this block will remain there. As a result, if an
application subsequently memory-maps the file, VM will map in the
old block at the position of the hole, rather than an all-zeroes
block. Thus, again, the result is a corrupted memory mapping.
This patch resolves both issues by making the file system inform the
minixfs library about blocks being freed, so that libminixfs can
break the inode association for that block, both in its own cache and
in the VM cache. Since libminixfs does not know whether VM has the
block in its cache or not, it makes a call to VM for each block being
freed. Thus, this change introduces more calls to VM, but it solves
the correctness issues at hand; optimizations may be introduced
later. On the upside, all freed blocks are now marked as clean,
which should result in fewer blocks being written back to the device,
and the blocks are removed from the caches entirely, which should
result in slightly better cache usage.
This patch is necessary but not sufficient to resolve the situation
with respect to memory mapping of file holes in general. Therefore,
this patch extends test 74 with a (rather particular but effective)
test for the first issue, but not yet with a test for the second one.
This fixes #90.
Change-Id: Iad8b134d2f88a884f15d3fc303e463280749c467
2015-08-13 13:29:33 +02:00
|
|
|
vm MAPCACHEPAGE SETCACHEPAGE FORGETCACHEPAGE CLEARCACHE;
|
2010-07-13 23:11:44 +02:00
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler sched; # Scheduler is sched
|
|
|
|
priority 5; # priority queue 5
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
2011-08-22 12:10:03 +02:00
|
|
|
service ntfs-3g
|
|
|
|
{
|
2012-11-14 14:42:13 +01:00
|
|
|
uid SELF; # Use uid of user starting service
|
2011-08-22 12:10:03 +02:00
|
|
|
ipc ALL_SYS; # All system ipc targets allowed
|
|
|
|
system BASIC; # Only basic kernel calls allowed
|
|
|
|
vm BASIC; # Only basic VM calls allowed
|
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler sched; # Scheduler is sched
|
|
|
|
priority 5; # priority queue 5
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
2010-08-02 13:44:45 +02:00
|
|
|
service ext2
|
|
|
|
{
|
2010-12-08 15:54:08 +01:00
|
|
|
ipc ALL_SYS; # All system ipc targets allowed
|
2010-08-02 13:44:45 +02:00
|
|
|
system BASIC; # Only basic kernel calls allowed
|
libminixfs/VM: fix memory-mapped file corruption
This patch employs one solution to resolve two independent but related
issues. Both issues are the result of one fundamental aspect of the
way VM's memory mapping works: VM uses its cache to map in blocks for
memory-mapped file regions, and for blocks already in the VM cache, VM
does not go to the file system before mapping them in. To preserve
consistency between the FS and VM caches, VM relies on being informed
about all updates to file contents through the block cache. The two
issues are both the result of VM not being properly informed about
such updates:
1. Once a file system provides libminixfs with an inode association
(inode number + inode offset) for a disk block, this association
is not broken until a new inode association is provided for it.
If a block is freed and reallocated as a metadata (non-inode)
block, its old association is maintained, and may be supplied to
VM's secondary cache. Due to reuse of inodes, it is possible
that the same inode association becomes valid for an actual file
block again. In that case, when that new file is memory-mapped,
under certain circumstances, VM may end up using the metadata
block to satisfy a page fault on the file, due to the stale inode
association. The result is a corrupted memory mapping, with the
application seeing data other than the current file contents
mapped in at the file block.
2. When a hole is created in a file, the underlying block is freed
from the device, but VM is not informed of this update, and thus,
if VM's cache contains the block with its previous inode
association, this block will remain there. As a result, if an
application subsequently memory-maps the file, VM will map in the
old block at the position of the hole, rather than an all-zeroes
block. Thus, again, the result is a corrupted memory mapping.
This patch resolves both issues by making the file system inform the
minixfs library about blocks being freed, so that libminixfs can
break the inode association for that block, both in its own cache and
in the VM cache. Since libminixfs does not know whether VM has the
block in its cache or not, it makes a call to VM for each block being
freed. Thus, this change introduces more calls to VM, but it solves
the correctness issues at hand; optimizations may be introduced
later. On the upside, all freed blocks are now marked as clean,
which should result in fewer blocks being written back to the device,
and the blocks are removed from the caches entirely, which should
result in slightly better cache usage.
This patch is necessary but not sufficient to resolve the situation
with respect to memory mapping of file holes in general. Therefore,
this patch extends test 74 with a (rather particular but effective)
test for the first issue, but not yet with a test for the second one.
This fixes #90.
Change-Id: Iad8b134d2f88a884f15d3fc303e463280749c467
2015-08-13 13:29:33 +02:00
|
|
|
vm MAPCACHEPAGE SETCACHEPAGE FORGETCACHEPAGE CLEARCACHE;
|
2010-08-02 13:44:45 +02:00
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler sched; # Scheduler is sched
|
|
|
|
priority 5; # priority queue 5
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
2010-07-13 23:11:44 +02:00
|
|
|
service pfs
|
|
|
|
{
|
2010-12-08 15:54:08 +01:00
|
|
|
ipc ALL_SYS; # All system ipc targets allowed
|
2010-07-13 23:11:44 +02:00
|
|
|
system BASIC; # Only basic kernel calls allowed
|
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler sched; # Scheduler is sched
|
|
|
|
priority 5; # priority queue 5
|
|
|
|
quantum 500; # default server quantum
|
|
|
|
};
|
|
|
|
|
|
|
|
service tty
|
|
|
|
{
|
|
|
|
uid 0;
|
2010-12-08 15:54:08 +01:00
|
|
|
ipc ALL_SYS; # All system ipc targets allowed
|
2010-07-13 23:11:44 +02:00
|
|
|
system # Extra kernel calls allowed:
|
|
|
|
KILL # 06
|
|
|
|
UMAP # 14
|
|
|
|
VIRCOPY # 15
|
|
|
|
PHYSCOPY # 16
|
|
|
|
IRQCTL # 19
|
|
|
|
INT86 # 20
|
|
|
|
DEVIO # 21
|
|
|
|
SDEVIO # 22
|
|
|
|
VDEVIO # 23
|
|
|
|
ABORT # 27
|
|
|
|
IOPENABLE # 28
|
|
|
|
READBIOS # 35
|
|
|
|
;
|
|
|
|
vm BASIC; # Only basic VM calls allowed
|
|
|
|
io ALL; # ALL I/O ranges allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
Input infrastructure, INPUT server, PCKBD driver
This commit separates the low-level keyboard driver from TTY, putting
it in a separate driver (PCKBD). The commit also separates management
of raw input devices from TTY, and puts it in a separate server
(INPUT). All keyboard and mouse input from hardware is sent by drivers
to the INPUT server, which either sends it to a process that has
opened a raw input device, or otherwise forwards it to TTY for
standard processing.
Design by Dirk Vogt. Prototype by Uli Kastlunger.
Additional changes made to the prototype:
- the event communication is now based on USB HID codes; all input
drivers have to use USB codes to describe events;
- all TTY keymaps have been converted to USB format, with the effect
that a single keymap covers all keys; there is no (static) escaped
keymap anymore;
- further keymap tweaks now allow remapping of literally all keys;
- input device renumbering and protocol rewrite;
- INPUT server rewrite, with added support for cancel and select;
- PCKBD reimplementation, including PC/AT-to-USB translation;
- support for manipulating keyboard LEDs has been added;
- keyboard and mouse multiplexer devices have been added to INPUT,
primarily so that an X server need only open two devices;
- a new "libinputdriver" library abstracts away protocol details from
input drivers, and should be used by all future input drivers;
- both INPUT and PCKBD can be restarted;
- TTY is now scheduled by KERNEL, so that it won't be punished for
running a lot; without this, simply running "yes" on the console
kills the system;
- the KIOCBELL IOCTL has been moved to /dev/console;
- support for the SCANCODES termios setting has been removed;
- obsolete keymap compression has been removed;
- the obsolete Olivetti M24 keymap has been removed.
Change-Id: I3a672fb8c4fd566734e4b46d3994b4b7fc96d578
2013-09-28 14:46:21 +02:00
|
|
|
scheduler KERNEL; # Scheduler is KERNEL (prevents console stalls)
|
2010-07-13 23:11:44 +02:00
|
|
|
priority 1; # priority queue 1
|
|
|
|
quantum 50; # default driver quantum
|
|
|
|
};
|
|
|
|
|
|
|
|
service memory
|
|
|
|
{
|
|
|
|
uid 0;
|
2010-12-08 15:54:08 +01:00
|
|
|
ipc ALL_SYS; # All system ipc targets allowed
|
2010-07-13 23:11:44 +02:00
|
|
|
system # Extra kernel calls allowed:
|
|
|
|
UMAP # 14
|
|
|
|
VIRCOPY # 15
|
|
|
|
PHYSCOPY # 16
|
|
|
|
IRQCTL # 19
|
|
|
|
INT86 # 20
|
|
|
|
DEVIO # 21
|
|
|
|
SDEVIO # 22
|
|
|
|
VDEVIO # 23
|
|
|
|
IOPENABLE # 28
|
|
|
|
;
|
|
|
|
vm BASIC; # Only basic VM calls allowed
|
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQ allowed
|
|
|
|
sigmgr rs; # Signal manager is RS
|
|
|
|
scheduler KERNEL; # Scheduler is KERNEL
|
|
|
|
priority 3; # priority queue 3
|
|
|
|
quantum 50; # default driver quantum
|
|
|
|
};
|
|
|
|
|
|
|
|
service log
|
|
|
|
{
|
2013-09-21 17:35:15 +02:00
|
|
|
ipc SYSTEM vfs rs vm;
|
|
|
|
priority 2;
|
2010-07-13 23:11:44 +02:00
|
|
|
};
|
|
|
|
|
|
|
|
service init
|
|
|
|
{
|
|
|
|
uid 0;
|
|
|
|
ipc # ipc targets allowed:
|
|
|
|
pm vfs rs vm
|
|
|
|
;
|
|
|
|
system NONE; # No kernel calls allowed
|
|
|
|
vm BASIC; # Only basic VM calls allowed
|
|
|
|
io NONE; # No I/O range allowed
|
|
|
|
irq NONE; # No IRQs allowed
|
|
|
|
sigmgr pm; # Signal manager is PM
|
|
|
|
};
|
|
|
|
|
|
|
|
#
|
|
|
|
# Dynamically started system services
|
|
|
|
#
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service floppy
|
2006-10-31 14:35:04 +01:00
|
|
|
{
|
|
|
|
irq 6;
|
|
|
|
io 3f0:8
|
2010-07-13 23:11:44 +02:00
|
|
|
0:10 # DMA controller
|
2006-10-31 14:35:04 +01:00
|
|
|
81 # Also DMA
|
|
|
|
;
|
|
|
|
system
|
|
|
|
UMAP # 14
|
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
VDEVIO # 23
|
|
|
|
;
|
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service dp8390
|
2006-10-31 14:35:04 +01:00
|
|
|
{
|
|
|
|
system
|
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
SDEVIO # 22
|
|
|
|
;
|
2013-10-01 00:42:41 +02:00
|
|
|
pci device 10ec:8029;
|
2014-12-01 18:50:59 +01:00
|
|
|
io
|
|
|
|
300:20
|
|
|
|
;
|
|
|
|
irq 9;
|
2006-10-31 14:35:04 +01:00
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service dpeth
|
2007-10-17 13:02:33 +02:00
|
|
|
{
|
|
|
|
system
|
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
SDEVIO # 22
|
|
|
|
;
|
|
|
|
uid 0;
|
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service inet
|
2006-10-31 14:35:04 +01:00
|
|
|
{
|
|
|
|
uid 0;
|
|
|
|
};
|
|
|
|
|
2011-04-07 09:44:23 +02:00
|
|
|
service lwip
|
|
|
|
{
|
|
|
|
uid 0;
|
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service random
|
2006-10-31 14:35:04 +01:00
|
|
|
{
|
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service readclock.drv
|
2006-10-31 14:35:04 +01:00
|
|
|
{
|
2013-08-02 16:10:30 +02:00
|
|
|
ipc ALL;
|
2006-10-31 14:35:04 +01:00
|
|
|
io 70:2;
|
|
|
|
system
|
2013-08-02 16:10:30 +02:00
|
|
|
PRIVCTL # 4
|
New RS and new signal handling for system processes.
UPDATING INFO:
20100317:
/usr/src/etc/system.conf updated to ignore default kernel calls: copy
it (or merge it) to /etc/system.conf.
The hello driver (/dev/hello) added to the distribution:
# cd /usr/src/commands/scripts && make clean install
# cd /dev && MAKEDEV hello
KERNEL CHANGES:
- Generic signal handling support. The kernel no longer assumes PM as a signal
manager for every process. The signal manager of a given process can now be
specified in its privilege slot. When a signal has to be delivered, the kernel
performs the lookup and forwards the signal to the appropriate signal manager.
PM is the default signal manager for user processes, RS is the default signal
manager for system processes. To enable ptrace()ing for system processes, it
is sufficient to change the default signal manager to PM. This will temporarily
disable crash recovery, though.
- sys_exit() is now split into sys_exit() (i.e. exit() for system processes,
which generates a self-termination signal), and sys_clear() (i.e. used by PM
to ask the kernel to clear a process slot when a process exits).
- Added a new kernel call (i.e. sys_update()) to swap two process slots and
implement live update.
PM CHANGES:
- Posix signal handling is no longer allowed for system processes. System
signals are split into two fixed categories: termination and non-termination
signals. When a non-termination signaled is processed, PM transforms the signal
into an IPC message and delivers the message to the system process. When a
termination signal is processed, PM terminates the process.
- PM no longer assumes itself as the signal manager for system processes. It now
makes sure that every system signal goes through the kernel before being
actually processes. The kernel will then dispatch the signal to the appropriate
signal manager which may or may not be PM.
SYSLIB CHANGES:
- Simplified SEF init and LU callbacks.
- Added additional predefined SEF callbacks to debug crash recovery and
live update.
- Fixed a temporary ack in the SEF init protocol. SEF init reply is now
completely synchronous.
- Added SEF signal event type to provide a uniform interface for system
processes to deal with signals. A sef_cb_signal_handler() callback is
available for system processes to handle every received signal. A
sef_cb_signal_manager() callback is used by signal managers to process
system signals on behalf of the kernel.
- Fixed a few bugs with memory mapping and DS.
VM CHANGES:
- Page faults and memory requests coming from the kernel are now implemented
using signals.
- Added a new VM call to swap two process slots and implement live update.
- The call is used by RS at update time and in turn invokes the kernel call
sys_update().
RS CHANGES:
- RS has been reworked with a better functional decomposition.
- Better kernel call masks. com.h now defines the set of very basic kernel calls
every system service is allowed to use. This makes system.conf simpler and
easier to maintain. In addition, this guarantees a higher level of isolation
for system libraries that use one or more kernel calls internally (e.g. printf).
- RS is the default signal manager for system processes. By default, RS
intercepts every signal delivered to every system process. This makes crash
recovery possible before bringing PM and friends in the loop.
- RS now supports fast rollback when something goes wrong while initializing
the new version during a live update.
- Live update is now implemented by keeping the two versions side-by-side and
swapping the process slots when the old version is ready to update.
- Crash recovery is now implemented by keeping the two versions side-by-side
and cleaning up the old version only when the recovery process is complete.
DS CHANGES:
- Fixed a bug when the process doing ds_publish() or ds_delete() is not known
by DS.
- Fixed the completely broken support for strings. String publishing is now
implemented in the system library and simply wraps publishing of memory ranges.
Ideally, we should adopt a similar approach for other data types as well.
- Test suite fixed.
DRIVER CHANGES:
- The hello driver has been added to the Minix distribution to demonstrate basic
live update and crash recovery functionalities.
- Other drivers have been adapted to conform the new SEF interface.
2010-03-17 02:15:29 +01:00
|
|
|
UMAP # 14
|
2013-08-02 16:10:30 +02:00
|
|
|
VIRCOPY # 15
|
2006-10-31 14:35:04 +01:00
|
|
|
DEVIO # 21
|
|
|
|
READBIOS # 35
|
|
|
|
;
|
2007-01-12 17:35:04 +01:00
|
|
|
uid 0;
|
2006-10-31 14:35:04 +01:00
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service is
|
2006-10-31 14:35:04 +01:00
|
|
|
{
|
2009-09-21 16:26:20 +02:00
|
|
|
vm
|
2010-01-19 22:00:20 +01:00
|
|
|
INFO
|
2009-09-21 16:26:20 +02:00
|
|
|
;
|
2008-11-19 13:26:10 +01:00
|
|
|
uid 0;
|
2006-10-31 14:35:04 +01:00
|
|
|
};
|
|
|
|
|
2010-09-02 17:44:36 +02:00
|
|
|
service acpi
|
|
|
|
{
|
|
|
|
io ALL;
|
|
|
|
system
|
|
|
|
PRIVCTL # 4
|
|
|
|
DEVIO # 21
|
|
|
|
;
|
|
|
|
uid 0;
|
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service pci
|
2006-10-31 14:35:04 +01:00
|
|
|
{
|
|
|
|
io cf8:8 # PCI bus controller
|
|
|
|
4d0:2 # PIIX
|
|
|
|
;
|
|
|
|
system
|
|
|
|
PRIVCTL # 4
|
|
|
|
DEVIO # 21
|
|
|
|
;
|
2006-12-15 16:56:36 +01:00
|
|
|
uid 0;
|
2006-10-31 14:35:04 +01:00
|
|
|
};
|
|
|
|
|
2010-08-05 18:37:58 +02:00
|
|
|
service ahci
|
|
|
|
{
|
|
|
|
system
|
|
|
|
UMAP # 14
|
2012-01-11 23:54:53 +01:00
|
|
|
VUMAP # 18
|
2010-08-05 18:37:58 +02:00
|
|
|
IRQCTL # 19
|
|
|
|
;
|
|
|
|
pci class
|
|
|
|
1/6/1 # Mass storage / SATA / AHCI
|
|
|
|
;
|
|
|
|
};
|
|
|
|
|
2012-12-15 13:54:11 +01:00
|
|
|
service virtio_blk
|
|
|
|
{
|
|
|
|
system
|
|
|
|
UMAP
|
|
|
|
VUMAP
|
|
|
|
IRQCTL
|
|
|
|
DEVIO
|
|
|
|
;
|
|
|
|
|
2013-10-01 00:42:41 +02:00
|
|
|
pci device 1af4:1001;
|
2012-12-15 13:54:11 +01:00
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service at_wini
|
2006-10-31 14:35:04 +01:00
|
|
|
{
|
|
|
|
io 1f0:8 # Controller 0
|
|
|
|
3f6 # Also controller 0
|
2006-11-01 15:55:00 +01:00
|
|
|
170:8 # Controller 1
|
|
|
|
376 # Also controller 1
|
2006-10-31 14:35:04 +01:00
|
|
|
;
|
|
|
|
irq
|
|
|
|
14 # Controller 0
|
2006-11-01 15:55:00 +01:00
|
|
|
15 # Controller 1
|
2006-10-31 14:35:04 +01:00
|
|
|
;
|
|
|
|
system
|
|
|
|
UMAP # 14
|
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
SDEVIO # 22
|
|
|
|
VDEVIO # 23
|
|
|
|
;
|
2013-10-02 19:37:00 +02:00
|
|
|
pci class # Match these PCI classes:
|
|
|
|
1/1 # Mass storage / IDE
|
|
|
|
;
|
|
|
|
pci device # In addition, match these devices:
|
|
|
|
1106:3149 # VIA VT6420 RAID (1/4)
|
|
|
|
1095:3512/1095:6512 # Silicon Image SATA RAID (1/4)
|
|
|
|
1095:3114/1095:3114 # Silicon Image SATA RAID (1/80)
|
2006-11-01 15:55:00 +01:00
|
|
|
;
|
2006-10-31 14:35:04 +01:00
|
|
|
};
|
2007-01-22 16:25:41 +01:00
|
|
|
|
2010-09-14 23:25:25 +02:00
|
|
|
service procfs
|
|
|
|
{
|
|
|
|
system
|
|
|
|
VIRCOPY # 15
|
|
|
|
;
|
|
|
|
vm
|
|
|
|
INFO
|
libfsdriver: support mmap on FSes with no device
This patch adds (very limited) support for memory-mapping pages on
file systems that are mounted on the special "none" device and that
do not implement PEEK support by themselves. This includes hgfs,
vbfs, and procfs.
The solution is implemented in libvtreefs, and consists of allocating
pages, filling them with content by calling the file system's READ
functionality, passing the pages to VM, and freeing them again. A new
VM flag is used to indicate that these pages should be mapped in only
once, and thus not cached beyond their single use. This prevents
stale data from getting mapped in without the involvement of the file
system, which would be problematic on file systems where file contents
may become outdated at any time. No VM caching means no sharing and
poor performance, but mmap no longer fails on these file systems.
Compared to a libc-based approach, this patch retains the on-demand
nature of mmap. Especially tail(1) is known to map in a large file
area only to use a small portion of it.
All file systems now need to be given permission for the SETCACHEPAGE
and CLEARCACHE calls to VM.
A very basic regression test is added to test74.
Change-Id: I17afc4cb97315b515cad1542521b98f293b6b559
2014-11-15 11:14:00 +01:00
|
|
|
SETCACHEPAGE
|
|
|
|
CLEARCACHE
|
2010-09-14 23:25:25 +02:00
|
|
|
;
|
|
|
|
uid 0;
|
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service isofs
|
2009-10-01 16:34:17 +02:00
|
|
|
{
|
|
|
|
system
|
New RS and new signal handling for system processes.
UPDATING INFO:
20100317:
/usr/src/etc/system.conf updated to ignore default kernel calls: copy
it (or merge it) to /etc/system.conf.
The hello driver (/dev/hello) added to the distribution:
# cd /usr/src/commands/scripts && make clean install
# cd /dev && MAKEDEV hello
KERNEL CHANGES:
- Generic signal handling support. The kernel no longer assumes PM as a signal
manager for every process. The signal manager of a given process can now be
specified in its privilege slot. When a signal has to be delivered, the kernel
performs the lookup and forwards the signal to the appropriate signal manager.
PM is the default signal manager for user processes, RS is the default signal
manager for system processes. To enable ptrace()ing for system processes, it
is sufficient to change the default signal manager to PM. This will temporarily
disable crash recovery, though.
- sys_exit() is now split into sys_exit() (i.e. exit() for system processes,
which generates a self-termination signal), and sys_clear() (i.e. used by PM
to ask the kernel to clear a process slot when a process exits).
- Added a new kernel call (i.e. sys_update()) to swap two process slots and
implement live update.
PM CHANGES:
- Posix signal handling is no longer allowed for system processes. System
signals are split into two fixed categories: termination and non-termination
signals. When a non-termination signaled is processed, PM transforms the signal
into an IPC message and delivers the message to the system process. When a
termination signal is processed, PM terminates the process.
- PM no longer assumes itself as the signal manager for system processes. It now
makes sure that every system signal goes through the kernel before being
actually processes. The kernel will then dispatch the signal to the appropriate
signal manager which may or may not be PM.
SYSLIB CHANGES:
- Simplified SEF init and LU callbacks.
- Added additional predefined SEF callbacks to debug crash recovery and
live update.
- Fixed a temporary ack in the SEF init protocol. SEF init reply is now
completely synchronous.
- Added SEF signal event type to provide a uniform interface for system
processes to deal with signals. A sef_cb_signal_handler() callback is
available for system processes to handle every received signal. A
sef_cb_signal_manager() callback is used by signal managers to process
system signals on behalf of the kernel.
- Fixed a few bugs with memory mapping and DS.
VM CHANGES:
- Page faults and memory requests coming from the kernel are now implemented
using signals.
- Added a new VM call to swap two process slots and implement live update.
- The call is used by RS at update time and in turn invokes the kernel call
sys_update().
RS CHANGES:
- RS has been reworked with a better functional decomposition.
- Better kernel call masks. com.h now defines the set of very basic kernel calls
every system service is allowed to use. This makes system.conf simpler and
easier to maintain. In addition, this guarantees a higher level of isolation
for system libraries that use one or more kernel calls internally (e.g. printf).
- RS is the default signal manager for system processes. By default, RS
intercepts every signal delivered to every system process. This makes crash
recovery possible before bringing PM and friends in the loop.
- RS now supports fast rollback when something goes wrong while initializing
the new version during a live update.
- Live update is now implemented by keeping the two versions side-by-side and
swapping the process slots when the old version is ready to update.
- Crash recovery is now implemented by keeping the two versions side-by-side
and cleaning up the old version only when the recovery process is complete.
DS CHANGES:
- Fixed a bug when the process doing ds_publish() or ds_delete() is not known
by DS.
- Fixed the completely broken support for strings. String publishing is now
implemented in the system library and simply wraps publishing of memory ranges.
Ideally, we should adopt a similar approach for other data types as well.
- Test suite fixed.
DRIVER CHANGES:
- The hello driver has been added to the Minix distribution to demonstrate basic
live update and crash recovery functionalities.
- Other drivers have been adapted to conform the new SEF interface.
2010-03-17 02:15:29 +01:00
|
|
|
UMAP # 14
|
2009-10-01 16:34:17 +02:00
|
|
|
;
|
|
|
|
uid 0;
|
|
|
|
};
|
|
|
|
|
2010-01-26 00:18:02 +01:00
|
|
|
service hgfs
|
|
|
|
{
|
|
|
|
ipc
|
2010-07-13 23:11:44 +02:00
|
|
|
SYSTEM pm vfs rs vm
|
2010-01-26 00:18:02 +01:00
|
|
|
;
|
libfsdriver: support mmap on FSes with no device
This patch adds (very limited) support for memory-mapping pages on
file systems that are mounted on the special "none" device and that
do not implement PEEK support by themselves. This includes hgfs,
vbfs, and procfs.
The solution is implemented in libvtreefs, and consists of allocating
pages, filling them with content by calling the file system's READ
functionality, passing the pages to VM, and freeing them again. A new
VM flag is used to indicate that these pages should be mapped in only
once, and thus not cached beyond their single use. This prevents
stale data from getting mapped in without the involvement of the file
system, which would be problematic on file systems where file contents
may become outdated at any time. No VM caching means no sharing and
poor performance, but mmap no longer fails on these file systems.
Compared to a libc-based approach, this patch retains the on-demand
nature of mmap. Especially tail(1) is known to map in a large file
area only to use a small portion of it.
All file systems now need to be given permission for the SETCACHEPAGE
and CLEARCACHE calls to VM.
A very basic regression test is added to test74.
Change-Id: I17afc4cb97315b515cad1542521b98f293b6b559
2014-11-15 11:14:00 +01:00
|
|
|
vm
|
|
|
|
SETCACHEPAGE
|
|
|
|
CLEARCACHE
|
|
|
|
;
|
2010-01-26 00:18:02 +01:00
|
|
|
};
|
|
|
|
|
2012-04-09 19:56:45 +02:00
|
|
|
service vbfs
|
|
|
|
{
|
|
|
|
ipc
|
2012-12-06 14:27:26 +01:00
|
|
|
SYSTEM pm vfs rs ds vm vbox
|
2012-04-09 19:56:45 +02:00
|
|
|
;
|
libfsdriver: support mmap on FSes with no device
This patch adds (very limited) support for memory-mapping pages on
file systems that are mounted on the special "none" device and that
do not implement PEEK support by themselves. This includes hgfs,
vbfs, and procfs.
The solution is implemented in libvtreefs, and consists of allocating
pages, filling them with content by calling the file system's READ
functionality, passing the pages to VM, and freeing them again. A new
VM flag is used to indicate that these pages should be mapped in only
once, and thus not cached beyond their single use. This prevents
stale data from getting mapped in without the involvement of the file
system, which would be problematic on file systems where file contents
may become outdated at any time. No VM caching means no sharing and
poor performance, but mmap no longer fails on these file systems.
Compared to a libc-based approach, this patch retains the on-demand
nature of mmap. Especially tail(1) is known to map in a large file
area only to use a small portion of it.
All file systems now need to be given permission for the SETCACHEPAGE
and CLEARCACHE calls to VM.
A very basic regression test is added to test74.
Change-Id: I17afc4cb97315b515cad1542521b98f293b6b559
2014-11-15 11:14:00 +01:00
|
|
|
vm
|
|
|
|
SETCACHEPAGE
|
|
|
|
CLEARCACHE
|
|
|
|
;
|
2012-04-09 19:56:45 +02:00
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service printer
|
2007-05-30 17:40:12 +02:00
|
|
|
{
|
2007-08-06 13:17:08 +02:00
|
|
|
io 378:4 # LPT1
|
|
|
|
278:4 # LPT2
|
2007-05-30 17:40:12 +02:00
|
|
|
;
|
|
|
|
irq
|
|
|
|
7 # PRINTER_IRQ
|
|
|
|
;
|
|
|
|
system
|
2009-12-17 02:53:26 +01:00
|
|
|
KILL # 6
|
|
|
|
UMAP # 14
|
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
VDEVIO # 23
|
2012-05-09 18:34:40 +02:00
|
|
|
READBIOS # 35
|
2007-05-30 17:40:12 +02:00
|
|
|
;
|
|
|
|
};
|
2007-07-24 16:49:09 +02:00
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service es1370
|
2007-11-23 12:40:33 +01:00
|
|
|
{
|
|
|
|
system
|
2009-12-17 02:53:26 +01:00
|
|
|
UMAP # 14
|
2007-11-23 12:40:33 +01:00
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
;
|
2013-10-01 00:42:41 +02:00
|
|
|
pci device 1274:5000;
|
2007-11-23 12:40:33 +01:00
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service es1371
|
2007-11-23 12:40:33 +01:00
|
|
|
{
|
|
|
|
system
|
New RS and new signal handling for system processes.
UPDATING INFO:
20100317:
/usr/src/etc/system.conf updated to ignore default kernel calls: copy
it (or merge it) to /etc/system.conf.
The hello driver (/dev/hello) added to the distribution:
# cd /usr/src/commands/scripts && make clean install
# cd /dev && MAKEDEV hello
KERNEL CHANGES:
- Generic signal handling support. The kernel no longer assumes PM as a signal
manager for every process. The signal manager of a given process can now be
specified in its privilege slot. When a signal has to be delivered, the kernel
performs the lookup and forwards the signal to the appropriate signal manager.
PM is the default signal manager for user processes, RS is the default signal
manager for system processes. To enable ptrace()ing for system processes, it
is sufficient to change the default signal manager to PM. This will temporarily
disable crash recovery, though.
- sys_exit() is now split into sys_exit() (i.e. exit() for system processes,
which generates a self-termination signal), and sys_clear() (i.e. used by PM
to ask the kernel to clear a process slot when a process exits).
- Added a new kernel call (i.e. sys_update()) to swap two process slots and
implement live update.
PM CHANGES:
- Posix signal handling is no longer allowed for system processes. System
signals are split into two fixed categories: termination and non-termination
signals. When a non-termination signaled is processed, PM transforms the signal
into an IPC message and delivers the message to the system process. When a
termination signal is processed, PM terminates the process.
- PM no longer assumes itself as the signal manager for system processes. It now
makes sure that every system signal goes through the kernel before being
actually processes. The kernel will then dispatch the signal to the appropriate
signal manager which may or may not be PM.
SYSLIB CHANGES:
- Simplified SEF init and LU callbacks.
- Added additional predefined SEF callbacks to debug crash recovery and
live update.
- Fixed a temporary ack in the SEF init protocol. SEF init reply is now
completely synchronous.
- Added SEF signal event type to provide a uniform interface for system
processes to deal with signals. A sef_cb_signal_handler() callback is
available for system processes to handle every received signal. A
sef_cb_signal_manager() callback is used by signal managers to process
system signals on behalf of the kernel.
- Fixed a few bugs with memory mapping and DS.
VM CHANGES:
- Page faults and memory requests coming from the kernel are now implemented
using signals.
- Added a new VM call to swap two process slots and implement live update.
- The call is used by RS at update time and in turn invokes the kernel call
sys_update().
RS CHANGES:
- RS has been reworked with a better functional decomposition.
- Better kernel call masks. com.h now defines the set of very basic kernel calls
every system service is allowed to use. This makes system.conf simpler and
easier to maintain. In addition, this guarantees a higher level of isolation
for system libraries that use one or more kernel calls internally (e.g. printf).
- RS is the default signal manager for system processes. By default, RS
intercepts every signal delivered to every system process. This makes crash
recovery possible before bringing PM and friends in the loop.
- RS now supports fast rollback when something goes wrong while initializing
the new version during a live update.
- Live update is now implemented by keeping the two versions side-by-side and
swapping the process slots when the old version is ready to update.
- Crash recovery is now implemented by keeping the two versions side-by-side
and cleaning up the old version only when the recovery process is complete.
DS CHANGES:
- Fixed a bug when the process doing ds_publish() or ds_delete() is not known
by DS.
- Fixed the completely broken support for strings. String publishing is now
implemented in the system library and simply wraps publishing of memory ranges.
Ideally, we should adopt a similar approach for other data types as well.
- Test suite fixed.
DRIVER CHANGES:
- The hello driver has been added to the Minix distribution to demonstrate basic
live update and crash recovery functionalities.
- Other drivers have been adapted to conform the new SEF interface.
2010-03-17 02:15:29 +01:00
|
|
|
UMAP # 14
|
2007-11-23 12:40:33 +01:00
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
;
|
2013-10-01 00:42:41 +02:00
|
|
|
pci device 1274:1371;
|
2007-11-23 12:40:33 +01:00
|
|
|
};
|
2007-07-24 16:49:09 +02:00
|
|
|
|
2012-03-07 00:49:16 +01:00
|
|
|
service ti1225
|
|
|
|
{
|
|
|
|
system
|
|
|
|
IRQCTL # 19
|
|
|
|
;
|
2013-10-01 00:42:41 +02:00
|
|
|
pci device 104c:ac1c;
|
2012-03-07 00:49:16 +01:00
|
|
|
};
|
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service amddev
|
2008-02-21 17:24:35 +01:00
|
|
|
{
|
2013-10-01 00:42:41 +02:00
|
|
|
pci device 1022:1103;
|
2008-02-21 17:24:35 +01:00
|
|
|
system
|
2011-06-10 16:28:20 +02:00
|
|
|
UMAP_REMOTE # 17
|
2008-02-21 17:24:35 +01:00
|
|
|
;
|
2012-01-13 00:23:04 +01:00
|
|
|
vm
|
|
|
|
ADDDMA # 12
|
|
|
|
DELDMA # 13
|
|
|
|
GETDMA # 14
|
|
|
|
;
|
2008-02-21 17:24:35 +01:00
|
|
|
uid 0;
|
|
|
|
};
|
2009-09-21 16:26:20 +02:00
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service osscore
|
2009-10-01 18:36:14 +02:00
|
|
|
{
|
|
|
|
system
|
|
|
|
PRIVCTL # 4
|
|
|
|
UMAP # 14
|
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
SDEVIO # 22
|
|
|
|
;
|
|
|
|
pci class
|
|
|
|
4/1 # Multimedia / Audio device
|
|
|
|
;
|
|
|
|
ipc
|
2013-09-21 17:35:15 +02:00
|
|
|
SYSTEM pm rs tty ds vfs vm
|
2011-04-07 09:44:23 +02:00
|
|
|
pci inet lwip amddev
|
2009-10-01 18:36:14 +02:00
|
|
|
;
|
|
|
|
uid 0;
|
|
|
|
};
|
2009-12-02 11:08:58 +01:00
|
|
|
|
2009-12-17 02:53:26 +01:00
|
|
|
service filter
|
2009-12-02 11:08:58 +01:00
|
|
|
{
|
|
|
|
ipc
|
2010-07-13 23:11:44 +02:00
|
|
|
SYSTEM pm vfs rs ds vm
|
2009-12-02 11:08:58 +01:00
|
|
|
at_wini
|
|
|
|
;
|
|
|
|
control
|
|
|
|
at_wini
|
|
|
|
;
|
|
|
|
};
|
2009-12-07 19:33:41 +01:00
|
|
|
|
Input infrastructure, INPUT server, PCKBD driver
This commit separates the low-level keyboard driver from TTY, putting
it in a separate driver (PCKBD). The commit also separates management
of raw input devices from TTY, and puts it in a separate server
(INPUT). All keyboard and mouse input from hardware is sent by drivers
to the INPUT server, which either sends it to a process that has
opened a raw input device, or otherwise forwards it to TTY for
standard processing.
Design by Dirk Vogt. Prototype by Uli Kastlunger.
Additional changes made to the prototype:
- the event communication is now based on USB HID codes; all input
drivers have to use USB codes to describe events;
- all TTY keymaps have been converted to USB format, with the effect
that a single keymap covers all keys; there is no (static) escaped
keymap anymore;
- further keymap tweaks now allow remapping of literally all keys;
- input device renumbering and protocol rewrite;
- INPUT server rewrite, with added support for cancel and select;
- PCKBD reimplementation, including PC/AT-to-USB translation;
- support for manipulating keyboard LEDs has been added;
- keyboard and mouse multiplexer devices have been added to INPUT,
primarily so that an X server need only open two devices;
- a new "libinputdriver" library abstracts away protocol details from
input drivers, and should be used by all future input drivers;
- both INPUT and PCKBD can be restarted;
- TTY is now scheduled by KERNEL, so that it won't be punished for
running a lot; without this, simply running "yes" on the console
kills the system;
- the KIOCBELL IOCTL has been moved to /dev/console;
- support for the SCANCODES termios setting has been removed;
- obsolete keymap compression has been removed;
- the obsolete Olivetti M24 keymap has been removed.
Change-Id: I3a672fb8c4fd566734e4b46d3994b4b7fc96d578
2013-09-28 14:46:21 +02:00
|
|
|
service input
|
|
|
|
{
|
|
|
|
ipc SYSTEM pm vfs rs ds tty vm;
|
|
|
|
priority 1;
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
service pckbd
|
|
|
|
{
|
|
|
|
system
|
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
;
|
|
|
|
io 60:8; # Keyboard, keyboard command/status
|
|
|
|
irq
|
|
|
|
1 # Keyboard
|
|
|
|
12 # Auxiliary input (mouse)
|
|
|
|
;
|
|
|
|
ipc SYSTEM pm rs ds vm input;
|
|
|
|
priority 1;
|
|
|
|
};
|
|
|
|
|
New RS and new signal handling for system processes.
UPDATING INFO:
20100317:
/usr/src/etc/system.conf updated to ignore default kernel calls: copy
it (or merge it) to /etc/system.conf.
The hello driver (/dev/hello) added to the distribution:
# cd /usr/src/commands/scripts && make clean install
# cd /dev && MAKEDEV hello
KERNEL CHANGES:
- Generic signal handling support. The kernel no longer assumes PM as a signal
manager for every process. The signal manager of a given process can now be
specified in its privilege slot. When a signal has to be delivered, the kernel
performs the lookup and forwards the signal to the appropriate signal manager.
PM is the default signal manager for user processes, RS is the default signal
manager for system processes. To enable ptrace()ing for system processes, it
is sufficient to change the default signal manager to PM. This will temporarily
disable crash recovery, though.
- sys_exit() is now split into sys_exit() (i.e. exit() for system processes,
which generates a self-termination signal), and sys_clear() (i.e. used by PM
to ask the kernel to clear a process slot when a process exits).
- Added a new kernel call (i.e. sys_update()) to swap two process slots and
implement live update.
PM CHANGES:
- Posix signal handling is no longer allowed for system processes. System
signals are split into two fixed categories: termination and non-termination
signals. When a non-termination signaled is processed, PM transforms the signal
into an IPC message and delivers the message to the system process. When a
termination signal is processed, PM terminates the process.
- PM no longer assumes itself as the signal manager for system processes. It now
makes sure that every system signal goes through the kernel before being
actually processes. The kernel will then dispatch the signal to the appropriate
signal manager which may or may not be PM.
SYSLIB CHANGES:
- Simplified SEF init and LU callbacks.
- Added additional predefined SEF callbacks to debug crash recovery and
live update.
- Fixed a temporary ack in the SEF init protocol. SEF init reply is now
completely synchronous.
- Added SEF signal event type to provide a uniform interface for system
processes to deal with signals. A sef_cb_signal_handler() callback is
available for system processes to handle every received signal. A
sef_cb_signal_manager() callback is used by signal managers to process
system signals on behalf of the kernel.
- Fixed a few bugs with memory mapping and DS.
VM CHANGES:
- Page faults and memory requests coming from the kernel are now implemented
using signals.
- Added a new VM call to swap two process slots and implement live update.
- The call is used by RS at update time and in turn invokes the kernel call
sys_update().
RS CHANGES:
- RS has been reworked with a better functional decomposition.
- Better kernel call masks. com.h now defines the set of very basic kernel calls
every system service is allowed to use. This makes system.conf simpler and
easier to maintain. In addition, this guarantees a higher level of isolation
for system libraries that use one or more kernel calls internally (e.g. printf).
- RS is the default signal manager for system processes. By default, RS
intercepts every signal delivered to every system process. This makes crash
recovery possible before bringing PM and friends in the loop.
- RS now supports fast rollback when something goes wrong while initializing
the new version during a live update.
- Live update is now implemented by keeping the two versions side-by-side and
swapping the process slots when the old version is ready to update.
- Crash recovery is now implemented by keeping the two versions side-by-side
and cleaning up the old version only when the recovery process is complete.
DS CHANGES:
- Fixed a bug when the process doing ds_publish() or ds_delete() is not known
by DS.
- Fixed the completely broken support for strings. String publishing is now
implemented in the system library and simply wraps publishing of memory ranges.
Ideally, we should adopt a similar approach for other data types as well.
- Test suite fixed.
DRIVER CHANGES:
- The hello driver has been added to the Minix distribution to demonstrate basic
live update and crash recovery functionalities.
- Other drivers have been adapted to conform the new SEF interface.
2010-03-17 02:15:29 +01:00
|
|
|
service hello
|
|
|
|
{
|
|
|
|
system
|
|
|
|
IRQCTL # 19
|
|
|
|
DEVIO # 21
|
|
|
|
;
|
|
|
|
ipc
|
2013-09-21 17:35:15 +02:00
|
|
|
SYSTEM pm rs tty ds vm vfs
|
2011-04-07 09:44:23 +02:00
|
|
|
pci inet lwip amddev
|
New RS and new signal handling for system processes.
UPDATING INFO:
20100317:
/usr/src/etc/system.conf updated to ignore default kernel calls: copy
it (or merge it) to /etc/system.conf.
The hello driver (/dev/hello) added to the distribution:
# cd /usr/src/commands/scripts && make clean install
# cd /dev && MAKEDEV hello
KERNEL CHANGES:
- Generic signal handling support. The kernel no longer assumes PM as a signal
manager for every process. The signal manager of a given process can now be
specified in its privilege slot. When a signal has to be delivered, the kernel
performs the lookup and forwards the signal to the appropriate signal manager.
PM is the default signal manager for user processes, RS is the default signal
manager for system processes. To enable ptrace()ing for system processes, it
is sufficient to change the default signal manager to PM. This will temporarily
disable crash recovery, though.
- sys_exit() is now split into sys_exit() (i.e. exit() for system processes,
which generates a self-termination signal), and sys_clear() (i.e. used by PM
to ask the kernel to clear a process slot when a process exits).
- Added a new kernel call (i.e. sys_update()) to swap two process slots and
implement live update.
PM CHANGES:
- Posix signal handling is no longer allowed for system processes. System
signals are split into two fixed categories: termination and non-termination
signals. When a non-termination signaled is processed, PM transforms the signal
into an IPC message and delivers the message to the system process. When a
termination signal is processed, PM terminates the process.
- PM no longer assumes itself as the signal manager for system processes. It now
makes sure that every system signal goes through the kernel before being
actually processes. The kernel will then dispatch the signal to the appropriate
signal manager which may or may not be PM.
SYSLIB CHANGES:
- Simplified SEF init and LU callbacks.
- Added additional predefined SEF callbacks to debug crash recovery and
live update.
- Fixed a temporary ack in the SEF init protocol. SEF init reply is now
completely synchronous.
- Added SEF signal event type to provide a uniform interface for system
processes to deal with signals. A sef_cb_signal_handler() callback is
available for system processes to handle every received signal. A
sef_cb_signal_manager() callback is used by signal managers to process
system signals on behalf of the kernel.
- Fixed a few bugs with memory mapping and DS.
VM CHANGES:
- Page faults and memory requests coming from the kernel are now implemented
using signals.
- Added a new VM call to swap two process slots and implement live update.
- The call is used by RS at update time and in turn invokes the kernel call
sys_update().
RS CHANGES:
- RS has been reworked with a better functional decomposition.
- Better kernel call masks. com.h now defines the set of very basic kernel calls
every system service is allowed to use. This makes system.conf simpler and
easier to maintain. In addition, this guarantees a higher level of isolation
for system libraries that use one or more kernel calls internally (e.g. printf).
- RS is the default signal manager for system processes. By default, RS
intercepts every signal delivered to every system process. This makes crash
recovery possible before bringing PM and friends in the loop.
- RS now supports fast rollback when something goes wrong while initializing
the new version during a live update.
- Live update is now implemented by keeping the two versions side-by-side and
swapping the process slots when the old version is ready to update.
- Crash recovery is now implemented by keeping the two versions side-by-side
and cleaning up the old version only when the recovery process is complete.
DS CHANGES:
- Fixed a bug when the process doing ds_publish() or ds_delete() is not known
by DS.
- Fixed the completely broken support for strings. String publishing is now
implemented in the system library and simply wraps publishing of memory ranges.
Ideally, we should adopt a similar approach for other data types as well.
- Test suite fixed.
DRIVER CHANGES:
- The hello driver has been added to the Minix distribution to demonstrate basic
live update and crash recovery functionalities.
- Other drivers have been adapted to conform the new SEF interface.
2010-03-17 02:15:29 +01:00
|
|
|
;
|
|
|
|
uid 0;
|
|
|
|
};
|
|
|
|
|
2011-02-23 15:50:31 +01:00
|
|
|
|
|
|
|
service devman
|
|
|
|
{
|
|
|
|
uid 0;
|
libfsdriver: support mmap on FSes with no device
This patch adds (very limited) support for memory-mapping pages on
file systems that are mounted on the special "none" device and that
do not implement PEEK support by themselves. This includes hgfs,
vbfs, and procfs.
The solution is implemented in libvtreefs, and consists of allocating
pages, filling them with content by calling the file system's READ
functionality, passing the pages to VM, and freeing them again. A new
VM flag is used to indicate that these pages should be mapped in only
once, and thus not cached beyond their single use. This prevents
stale data from getting mapped in without the involvement of the file
system, which would be problematic on file systems where file contents
may become outdated at any time. No VM caching means no sharing and
poor performance, but mmap no longer fails on these file systems.
Compared to a libc-based approach, this patch retains the on-demand
nature of mmap. Especially tail(1) is known to map in a large file
area only to use a small portion of it.
All file systems now need to be given permission for the SETCACHEPAGE
and CLEARCACHE calls to VM.
A very basic regression test is added to test74.
Change-Id: I17afc4cb97315b515cad1542521b98f293b6b559
2014-11-15 11:14:00 +01:00
|
|
|
vm
|
|
|
|
SETCACHEPAGE
|
|
|
|
CLEARCACHE
|
|
|
|
;
|
2011-02-23 15:50:31 +01:00
|
|
|
};
|
|
|
|
|
2012-10-03 10:55:40 +02:00
|
|
|
service mmc
|
|
|
|
{
|
|
|
|
system
|
|
|
|
PRIVCTL # 4
|
2012-10-19 15:44:10 +02:00
|
|
|
IRQCTL # 19
|
|
|
|
;
|
2013-05-24 10:26:51 +02:00
|
|
|
# Interrupts allowed
|
|
|
|
irq
|
|
|
|
64
|
|
|
|
83
|
|
|
|
; # IRQs allowed
|
2013-06-21 15:49:09 +02:00
|
|
|
priority 4; # priority queue 4
|
2012-10-03 10:55:40 +02:00
|
|
|
};
|
|
|
|
|
2013-02-01 13:13:19 +01:00
|
|
|
service fb
|
|
|
|
{
|
|
|
|
system
|
|
|
|
UMAP # 14
|
|
|
|
DEVIO # 21
|
|
|
|
PRIVCTL # 4
|
|
|
|
;
|
|
|
|
ipc
|
2013-07-29 19:01:38 +02:00
|
|
|
SYSTEM pm rs ds vm vfs cat24c256 tda19988
|
2013-02-01 13:13:19 +01:00
|
|
|
;
|
|
|
|
};
|
|
|
|
|
2013-01-28 12:54:44 +01:00
|
|
|
service gpio
|
|
|
|
{
|
|
|
|
system
|
|
|
|
PRIVCTL # 4
|
2013-02-06 15:46:21 +01:00
|
|
|
IRQCTL # 19
|
2013-08-28 06:43:45 +02:00
|
|
|
PADCONF # 57
|
2013-01-28 12:54:44 +01:00
|
|
|
;
|
libfsdriver: support mmap on FSes with no device
This patch adds (very limited) support for memory-mapping pages on
file systems that are mounted on the special "none" device and that
do not implement PEEK support by themselves. This includes hgfs,
vbfs, and procfs.
The solution is implemented in libvtreefs, and consists of allocating
pages, filling them with content by calling the file system's READ
functionality, passing the pages to VM, and freeing them again. A new
VM flag is used to indicate that these pages should be mapped in only
once, and thus not cached beyond their single use. This prevents
stale data from getting mapped in without the involvement of the file
system, which would be problematic on file systems where file contents
may become outdated at any time. No VM caching means no sharing and
poor performance, but mmap no longer fails on these file systems.
Compared to a libc-based approach, this patch retains the on-demand
nature of mmap. Especially tail(1) is known to map in a large file
area only to use a small portion of it.
All file systems now need to be given permission for the SETCACHEPAGE
and CLEARCACHE calls to VM.
A very basic regression test is added to test74.
Change-Id: I17afc4cb97315b515cad1542521b98f293b6b559
2014-11-15 11:14:00 +01:00
|
|
|
vm
|
|
|
|
SETCACHEPAGE
|
|
|
|
CLEARCACHE
|
|
|
|
;
|
2013-02-06 15:46:21 +01:00
|
|
|
irq
|
2013-09-03 13:47:59 +02:00
|
|
|
29 # GPIO module 1 (dm37xx)
|
|
|
|
30 # GPIO module 2 (dm37xx)
|
|
|
|
31 # GPIO module 3 (dm37xx)
|
|
|
|
32 # GPIO module 4 (dm37xx) / module 2a (am335x)
|
|
|
|
33 # GPIO module 5 (dm37xx) / module 2b (am335x)
|
|
|
|
34 # GPIO module 6 (dm37xx)
|
|
|
|
62 # GPIO module 3a (am335x)
|
|
|
|
63 # GPIO module 3b (am335x)
|
|
|
|
96 # GPIO module 0a (am335x)
|
|
|
|
97 # GPIO module 0b (am335x)
|
|
|
|
98 # GPIO module 1a (am335x)
|
|
|
|
99 # GPIO module 1b (am335x)
|
2013-02-06 15:46:21 +01:00
|
|
|
;
|
|
|
|
|
2013-01-28 12:54:44 +01:00
|
|
|
};
|
|
|
|
|
2013-07-15 16:29:09 +02:00
|
|
|
service i2c
|
|
|
|
{
|
|
|
|
system
|
|
|
|
PRIVCTL # 4
|
|
|
|
IRQCTL # 19
|
2013-08-28 06:43:45 +02:00
|
|
|
PADCONF # 57
|
2013-07-15 16:29:09 +02:00
|
|
|
;
|
|
|
|
irq
|
|
|
|
# DM37XX (BeagleBoard-xM)
|
|
|
|
56 # I2C module 1
|
|
|
|
57 # I2C module 2
|
|
|
|
61 # I2C module 3
|
|
|
|
# AM335X (BeagleBone)
|
|
|
|
70 # I2C module 1
|
|
|
|
71 # I2C module 2
|
|
|
|
30 # I2C module 3
|
|
|
|
;
|
|
|
|
ipc SYSTEM RS DS;
|
|
|
|
};
|
|
|
|
|
2013-07-15 16:29:31 +02:00
|
|
|
service cat24c256
|
|
|
|
{
|
|
|
|
ipc SYSTEM RS DS i2c;
|
|
|
|
};
|
|
|
|
|
2013-07-29 18:21:33 +02:00
|
|
|
service tda19988
|
|
|
|
{
|
|
|
|
ipc SYSTEM RS DS i2c;
|
|
|
|
};
|
|
|
|
|
2013-08-02 16:10:48 +02:00
|
|
|
service tps65217
|
|
|
|
{
|
2013-09-09 15:20:18 +02:00
|
|
|
uid 0; # needed for doing reboot()
|
2013-08-02 16:10:48 +02:00
|
|
|
system IRQCTL PRIVCTL;
|
|
|
|
irq 7; # NNMI pin on BeagleBone / BeagleBone Black
|
|
|
|
ipc SYSTEM RS DS PM i2c;
|
|
|
|
};
|
|
|
|
|
2013-08-06 15:52:46 +02:00
|
|
|
service tps65950
|
|
|
|
{
|
|
|
|
ipc SYSTEM RS DS i2c readclock.drv;
|
|
|
|
};
|
|
|
|
|
2013-08-19 12:57:27 +02:00
|
|
|
service tsl2550
|
|
|
|
{
|
|
|
|
ipc SYSTEM RS DS i2c;
|
|
|
|
};
|
|
|
|
|
2013-08-19 15:54:20 +02:00
|
|
|
service sht21
|
|
|
|
{
|
|
|
|
ipc SYSTEM RS DS i2c;
|
|
|
|
};
|
|
|
|
|
2013-08-20 16:43:51 +02:00
|
|
|
service bmp085
|
|
|
|
{
|
|
|
|
ipc SYSTEM RS DS i2c;
|
|
|
|
};
|
|
|
|
|
2011-11-23 18:15:43 +01:00
|
|
|
service vbox
|
|
|
|
{
|
|
|
|
system
|
|
|
|
UMAP # 14
|
2012-04-09 15:56:20 +02:00
|
|
|
VUMAP # 18
|
|
|
|
IRQCTL # 19
|
2011-11-23 18:15:43 +01:00
|
|
|
DEVIO # 21
|
|
|
|
;
|
2013-10-01 00:42:41 +02:00
|
|
|
pci device 80ee:cafe;
|
2011-11-23 18:15:43 +01:00
|
|
|
ipc
|
|
|
|
SYSTEM
|
|
|
|
PM
|
|
|
|
RS
|
|
|
|
VM
|
|
|
|
pci
|
|
|
|
;
|
|
|
|
uid 0;
|
|
|
|
};
|
2011-12-11 19:32:13 +01:00
|
|
|
|
|
|
|
service fbd
|
|
|
|
{
|
|
|
|
ipc
|
2013-10-04 16:29:40 +02:00
|
|
|
SYSTEM vfs rs ds vm
|
2011-12-11 19:32:13 +01:00
|
|
|
ahci
|
|
|
|
at_wini
|
|
|
|
;
|
|
|
|
};
|
2013-09-18 14:02:17 +02:00
|
|
|
|
|
|
|
service vnd
|
|
|
|
{
|
|
|
|
ipc
|
2013-10-04 16:29:40 +02:00
|
|
|
SYSTEM vfs rs vm
|
2013-09-18 14:02:17 +02:00
|
|
|
;
|
2013-10-05 16:31:35 +02:00
|
|
|
uid 0; # only for copyfd(2)
|
2013-09-18 14:02:17 +02:00
|
|
|
};
|
2013-10-04 16:29:40 +02:00
|
|
|
|
|
|
|
service uds
|
|
|
|
{
|
|
|
|
ipc
|
|
|
|
SYSTEM vfs rs vm
|
|
|
|
;
|
2013-10-05 16:31:35 +02:00
|
|
|
uid 0; # only for checkperms(2) and copyfd(2)
|
2013-10-04 16:29:40 +02:00
|
|
|
};
|
2014-02-24 23:28:12 +01:00
|
|
|
|
|
|
|
service pty
|
|
|
|
{
|
|
|
|
system
|
|
|
|
KILL # 06
|
|
|
|
;
|
|
|
|
ipc
|
|
|
|
SYSTEM vfs rs vm
|
|
|
|
;
|
|
|
|
};
|
2014-06-12 17:08:31 +02:00
|
|
|
|
Add PTYFS, Unix98 pseudo terminal support
This patch adds support for Unix98 pseudo terminals, that is,
posix_openpt(3), grantpt(3), unlockpt(3), /dev/ptmx, and /dev/pts/.
The latter is implemented with a new pseudo file system, PTYFS.
In effect, this patch adds secure support for unprivileged pseudo
terminal allocation, allowing programs such as tmux(1) to be used by
non-root users as well. Test77 has been extended with new tests, and
no longer needs to run as root.
The new functionality is optional. To revert to the old behavior,
remove the "ptyfs" entry from /etc/fstab.
Technical nodes:
o The reason for not implementing the NetBSD /dev/ptm approach is that
implementing the corresponding ioctl (TIOCPTMGET) would require
adding a number of extremely hairy exceptions to VFS, including the
PTY driver having to create new file descriptors for its own device
nodes.
o PTYFS is required for Unix98 PTYs in order to avoid that the PTY
driver has to be aware of old-style PTY naming schemes and even has
to call chmod(2) on a disk-backed file system. PTY cannot be its
own PTYFS since a character driver may currently not also be a file
system. However, PTYFS may be subsumed into a DEVFS in the future.
o The Unix98 PTY behavior differs somewhat from NetBSD's, in that
slave nodes are created on ptyfs only upon the first call to
grantpt(3). This approach obviates the need to revoke access as
part of the grantpt(3) call.
o Shutting down PTY may leave slave nodes on PTYFS, but once PTY is
restarted, these leftover slave nodes will be removed before they
create a security risk. Unmounting PTYFS will make existing PTY
slaves permanently unavailable, and absence of PTYFS will block
allocation of new Unix98 PTYs until PTYFS is (re)mounted.
Change-Id: I822b43ba32707c8815fd0f7d5bb7a438f51421c1
2015-06-22 19:14:34 +02:00
|
|
|
service ptyfs
|
|
|
|
{
|
|
|
|
ipc
|
|
|
|
SYSTEM pm vfs rs pty ds vm
|
|
|
|
;
|
|
|
|
};
|
|
|
|
|
2014-06-12 17:08:31 +02:00
|
|
|
service edfictl
|
|
|
|
{
|
|
|
|
ipc ALL;
|
|
|
|
};
|
2015-06-20 23:13:50 +02:00
|
|
|
|
|
|
|
service emmc
|
|
|
|
{
|
|
|
|
system
|
|
|
|
PRIVCTL
|
|
|
|
IRQCTL
|
2015-07-02 23:45:04 +02:00
|
|
|
PADCONF
|
2015-06-20 23:13:50 +02:00
|
|
|
;
|
|
|
|
irq
|
|
|
|
28 # MMCSD1INT
|
|
|
|
;
|
|
|
|
};
|