en Copyright 2015 Java http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#e1cff854997884ed9b7251d409d9c9c7a025606d pass(4): Allowlist CCB func_codes to harden passthrough ioctlsThe pass(4) driver's CAMIOCOMMAND and CAMIOQUEUE ioctls accept arbitraryCCBs from userland. This device requires root to open, and thus sendthese commands. Previously, the only func_code filter was a blocklistcheck against the XPT_FC_XPT_ONLY flag. This missed several dangerousfunc_codes that lack that flag: - XPT_ABORT: the abort_ccb field is a raw kernel pointer from the user CCB payload. xpt_action_default() dereferences it without validation, leading to kernel crashes or worse. - XPT_SASYNC_CB: the callback and callback_arg fields come directly from the user CCB payload and get registered as a kernel async callback, allowing arbitrary kernel code execution. - Target mode CCBs (XPT_EN_LUN, XPT_TARGET_IO, etc.) fall through directly to the SIM with user-controlled payloads.Replace the XPT_FC_XPT_ONLY blocklist with an explicit allowlist of CCBfunction codes that are known to be safe for userland to submit: I/Ooperations (SCSI, ATA, NVMe, SMP, MMC), device queries, transportsettings, and a handful of safe control operations (NOOP, REL_SIMQ,RESET_DEV, DEBUG). Normally, the /dev/pass* permissions only allow rootto access them, so this is only a safety issue by default.Also reject CAM_DATA_PADDR and CAM_DATA_SG_PADDR, since these passuser-supplied physical addresses directly to DMA with no validation,which on systems without an IOMMU allows arbitrary host memory access.Add `options PASS_UNSAFE_PADDR` to allow the old behavior.Verified that camdd, camcontrol, smartmontools, and cdrtools use onlyfunc_codes on the allowlist (XPT_SCSI_IO, XPT_ATA_IO, XPT_NVME_IO,XPT_NVME_ADMIN, XPT_PATH_INQ, XPT_GDEV_TYPE, XPT_GET_TRAN_SETTINGS,XPT_SET_TRAN_SETTINGS, XPT_RESET_DEV, XPT_DEBUG) and none useCAM_DATA_PADDR.PR: 293888, 293890Assisted-By: Claude Opus 4.6 (1M context)Sponsored by: NetflixReviewed by: jhbDifferential Revision: https://reviews.freebsd.org/D56486 List of files: /freebsd/sys/modules/cam/Makefile Fri, 24 Apr 2026 20:29:53 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#e9ac41698b2f322d55ccf9da50a3596edb2c1800 Remove residual blank line at start of MakefileThis is a residual of the $FreeBSD$ removal.MFC After: 3 days (though I'll just run the command on the branches)Sponsored by: Netflix List of files: /freebsd/sys/modules/cam/Makefile Mon, 15 Jul 2024 06:46:32 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#03e2fc4c44465d29a8208eaa0bd65198efbd572b cam: Minor tidying up the cam module MakefileOne src per line + sorting.Sponsored by: Netflix List of files: /freebsd/sys/modules/cam/Makefile Thu, 02 Nov 2023 21:41:17 +0100 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#031beb4e239bfce798af17f5fe8dba8bcaf13d99 sys: Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd/sys/modules/cam/Makefile Wed, 16 Aug 2023 19:54:58 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#ddeb85e13151e2704347c43ca97e561c5c539b25 We don't need $M/$M in the path anymore.Now that machdep files are gone, we don't need $S/$M/$M in the path to findthem. List of files: /freebsd/sys/modules/cam/Makefile Sun, 15 Mar 2020 18:40:14 +0100 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#30b5d9be24ec13157d18ae9bf01ef964f8187998 Sparc64 and pc98 needed cam_machdep and/or ata_machdep for variousreasons. Those have now left the tree, and with them the need to have machdepfiles. Places that called the routines in quesiton have been removedpreviously. Remove these files from the Makefile to tidy up. List of files: /freebsd/sys/modules/cam/Makefile Sat, 14 Mar 2020 19:35:44 +0100 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#14ce4632d401be3b1429c3e91be00010bc5b6569 Add nvme_util.c to cam.ko.cam.ko can't load onto the kernel w/o nvme in the kernel. Addnvme_util.c to cam.ko.Noticed by: kib@ List of files: /freebsd/sys/modules/cam/Makefile Sat, 07 Apr 2018 21:29:19 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#6469bdcdb6a5968dc7edfcfb495d427b4bfdb3dd Move most of the contents of opt_compat.h to opt_global.h.opt_compat.h is mentioned in nearly 180 files. In-progress networkdriver compabibility improvements may add over 100 more so this iscloser to "just about everywhere" than "only some files" per theguidance in sys/conf/options.Keep COMPAT_LINUX32 in opt_compat.h as it is confined to a subset ofsys/compat/linux/*.c. A fake _COMPAT_LINUX option ensure opt_compat.his created on all architectures.Move COMPAT_LINUXKPI to opt_dontuse.h as it is only used to control theset of compiled files.Reviewed by: kib, cem, jhb, jtlSponsored by: DARPA, AFRLDifferential Revision: https://reviews.freebsd.org/D14941 List of files: /freebsd/sys/modules/cam/Makefile Fri, 06 Apr 2018 19:35:35 +0200 Brooks Davis <brooks@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#4887cfe7894618b3879e1eea20f7ff07164521ea Add nvme_da back.Now that it can co-exist in the kernel with nvd, add it back to thecam module.Sponsored by: Netflix List of files: /freebsd/sys/modules/cam/Makefile Wed, 04 Apr 2018 04:37:05 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#2a559cb8c8177e89e7bf74a54c8a34fbcf7b7139 This should have been += so clean builds work.Noticed by: hps@ List of files: /freebsd/sys/modules/cam/Makefile Wed, 14 Mar 2018 17:45:04 +0100 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#f8f471cf5f03e9ee9024b741388e37891904a2fd We need opt_compat.h after r330819 and 330820.Add opt_compat.h to fix the stand-alone build case.Sponsored by: Netflix. List of files: /freebsd/sys/modules/cam/Makefile Wed, 14 Mar 2018 00:36:15 +0100 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#d85487b732d0953df242d46d7ed6b042db04bb1a Add new opt_da.h for stand-alone build.Sponsored by: Netflix List of files: /freebsd/sys/modules/cam/Makefile Thu, 25 Jan 2018 22:48:07 +0100 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#193d9e768ba63fcfb187cfd17f461f7d41345048 sys/modules: normalize .CURDIR-relative paths to SRCTOPThis simplifies make output/logicTested with: `cd sys/modules; make ALL_MODULES=` on amd64MFC after: 1 monthSponsored by: Dell EMC Isilon List of files: /freebsd/sys/modules/cam/Makefile Sat, 04 Mar 2017 11:10:17 +0100 Enji Cooper <ngie@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#be64968040dcbab18ffe3dc9c14966e681f8ff83 Merge ^/head r314270 through r314419. List of files: /freebsd/sys/modules/cam/Makefile Tue, 28 Feb 2017 22:30:26 +0100 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#2379d1d6edeab3dc1095504c0fd9c34aefac5368 Move inclusion of opt_printf.h around so that we can compile all theSCSI modules outside of a sub-build from the kernel.Differential Revision: https://reviews.freebsd.org/D9653Sponsored by: Netflix List of files: /freebsd/sys/modules/cam/Makefile Sat, 25 Feb 2017 23:11:10 +0100 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#7c627f3468b9b4a584e8fa94c7c48f51b939f787 Make cam.ko loadable.Sponsored by: The FreeBSD FoundationMFC after: 1 week List of files: /freebsd/sys/modules/cam/Makefile Fri, 22 Jul 2016 08:21:03 +0200 Konstantin Belousov <kib@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#03a9f9e06219ef4231e3e1abd8f8863441a623a5 Add opt_ddb.h.MFC after: 1 week List of files: /freebsd/sys/modules/cam/Makefile Fri, 22 Jul 2016 01:29:16 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#565e7fd3bc4cc8136a8ecfb3138453be215e12e5 opt_kdtrace.h is not needed for SDT probes as of r258541. List of files: /freebsd/sys/modules/cam/Makefile Sun, 15 May 2016 22:04:43 +0200 Mark Johnston <markj@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#0edd2576c0e07f525c80e4aa5ff24350b55f18b7 MFHSponsored by: The FreeBSD Foundation List of files: /freebsd/sys/modules/cam/Makefile Sat, 16 Apr 2016 04:32:12 +0200 Glen Barber <gjb@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/sys/modules/cam/Makefile#dfaa65fc8dd71e7e4626ba1d581108fe328d09b4 Sync cam.ko module source list with the static kernel file list.Sponsored by: The FreeBSD Foundation List of files: /freebsd/sys/modules/cam/Makefile Fri, 15 Apr 2016 14:55:40 +0200 Konstantin Belousov <kib@FreeBSD.org>