summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* o Fix SCTP ICMPv6 error message vulnerability. [SA-16:01.sctp]glebius2016-01-141-4/+5
| | | | | | | | | | | | | o Fix Linux compatibility layer incorrect futex handling. [SA-16:03.linux] o Fix Linux compatibility layer setgroups(2) system call. [SA-16:04.linux] o Fix TCP MD5 signature denial of service. [SA-16:05.tcp] o Fix insecure default bsnmpd.conf permissions. [SA-16:06.bsnmpd] Security: FreeBSD-SA-16:01.sctp, CVE-2016-1879 Security: FreeBSD-SA-16:03.linux, CVE-2016-1880 Security: FreeBSD-SA-16:04.linux, CVE-2016-1881 Security: FreeBSD-SA-16:05.tcp, CVE-2016-1882 Security: FreeBSD-SA-16:06.bsnmpd, CVE-2015-5677
* MFC r292570:ngie2016-01-061-0/+6
| | | | | | Integrate tools/regression/mac/mac_bsdextended and tools/regression/mac/mac_portacl into the FreeBSD test suite as tests/sys/mac/bsdextended and tests/sys/mac/portacl, respectively
* Add `..` after sys/kern/pipe entry accidentally missed in r291183ngie2016-01-051-0/+1
| | | | | | | | This is a direct commit to stable/10 Pointyhat to: ngie Reported by: rodrigc Sponsored by: EMC / Isilon Storage Division
* MFC nv(3) and part of nv(9) to stable/10ngie2015-12-311-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This includes the following revisions from head: r258065,r258594,r259430,r260222,r261407,r261408,r263479,r264021,r266351, r269603,r271026,r271027,r271028,r271241,r271578,r271579,r271847,r272102, r272843,r273752,r277920,r277921,r277925,r277926,r277927,r279421,r279422, r279423,r279424,r279425,r279426,r279427,r279428,r279429,r279430,r279431, r279432,r279434,r279435,r279436,r279438,r279439,r279440,r279760,r282122, r282254,r282257,r282304,r282312,r285339,r288340 This change reverts stable/10@r282122 and stable/10@r288340, and re-MFCs the series again (r282122, r285339, and r288340). More changes are pending to nv(9)/pci(4) after further review/work. Please see the Phabricator review for more details (both https://reviews.freebsd.org/D4232 and https://reviews.freebsd.org/D4249 ). - Tested with: -- Booting VMware Fusion 8.1.0 running on a Haswell Apple Macbook Pro -- Booting a Haswell machine with zfs and running some stress workloads with VirtualBox guests -- make tinderbox -- kyua test -k /usr/tests/lib/libnv Differential Revision: https://reviews.freebsd.org/D4249 (part of a larger diff) Relnotes: yes Reviewed by: oshogbo (implicit), sbruno (implicit) Submitted by: Kevin Bowling <kevin.bowling@kev009.com> Sponsored by: EMC / Isilon Storage Division
* MFC r287220:jamie2015-12-311-1/+1
| | | | Fix a conversion error in rc.d/jail
* MFC r292759:jamie2015-12-311-60/+66
| | | | | | | | | | | | | Let old-style (shell-based) jail configuration handle jail names that contain characters not allowed in a shell variable (such as "-"). These will be replaced by an underscore in jail config variables, e.g. for jail "foo-bar" you would set "jail_foo_bar_hostname". This is separate from the current code that changes the jail names if they contain "." or "/". It also doesn't apply to jails defined in a jail.conf file. PR: 191181
* MFC r292317,r292318,r292323,r292324,r292665:ngie2015-12-281-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r292317: Integrate tools/regression/lib/libc/resolv into the FreeBSD test suite as lib/libc/tests/resolv Convert the testcases to ATF Sponsored by: EMC / Isilon Storage Division r292318: Add Makefile accidentally missed in r292317 Sponsored by: EMC / Isilon Storage Division r292323: Integrate tools/regression/lib/libc/nss into the FreeBSD test suite as lib/libc/tests/nss - Convert the testcases to ATF - Do some style(9) cleanups: -- Sort headers -- Apply indentation fixes -- Remove superfluous parentheses - Explicitly print out debug printfs for use with `kyua {debug,report}`; for items that were overly noisy, they've been put behind #ifdef DEBUG conditionals - Fix some format strings Sponsored by: EMC / Isilon Storage Division r292324: Iterate down lib/libc/tests/nss... Sponsored by: EMC / Isilon Storage Division r292665: Increase the timeout for resolv_test from the default (300 seconds) to 450 seconds This is required on slower network connections, and on older releases (stable/10 seems to be slower as far as name resolution goes.. not sure why yet). Remove an outdated comment in the Makefile from when I was working on this code over a year ago on github Sponsored by: EMC / Isilon Storage Division
* MFC r290515: periodic: Fix backwards compatibility forjilles2015-12-281-2/+2
| | | | | | | | | | | daily_status_security_* vars. Most daily_status_security_* variables in periodic.conf were changed to security_status_* in SVN r254974. The compatibility code for the old names did not work. PR: 204331 Submitted by: martin at lispworks.com
* MFC r292564:jlh2015-12-241-138/+139
| | | | | | | | | | | Add port for IRC over TLS/SSL, as noted in RFC 7194. PR: 192505 Submitted by: loic.blot@unix-experience.fr MFC r292694: Replace all whitespaces between port name and number with tabs.
* MFC r292313:lidl2015-12-231-0/+4
| | | | | | Skip unavailable pools when running zfs pool scrubs Approved by: rpaulo (mentor)
* MFC r290405:lidl2015-12-231-1/+1
| | | | | | | | | Restrict 520.pfdenied to only list rules that blocked traffic. Before this change, the 520.pfdenied script listed all rules that matched /^block/ in the rule. Restrict the printed output to only those rules that result in packets being dropped. Approved by: rpaulo (mentor)
* MFC r291770: rc.subr: Check for running daemons before a custom start_cmdjilles2015-12-181-8/+8
| | | | | | | | | | | | | | | | | is executed. Currently rc scripts implementing their own start_cmd do not enjoy the benefits of rc.subr's own check for rc_pid. This leads to around a third of ports with such a start_cmd not to check for the process at all and two thirds of ports to re-implement this check (sometimes wrongly). This patch moves the check for rc_pid to before ${rc_arg}_cmd is executed. Submitted by: Dirk Engling Reviewed by: feld Relnotes: yes
* MFC r276669,r276723:ngie2015-12-151-0/+2
| | | | | | | | | | | | | | r276669: Integrate bin/cat/tests from NetBSD into atf/kyua Sponsored by: EMC / Isilon Storage Division r276723: Install d_align.{in,out} for the :align test Pointyhat to: me
* MFC: r291536rmacklem2015-12-143-1/+15
| | | | | | | | Add support for the new "-manage-gids" option for the nfsuserd daemon to the rc scripts. With these changes, setting nfs_server_managegids="YES" in /etc/rc.conf will enable this capability. Relnotes: yes
* MFC r291703:hselasky2015-12-141-19/+268
| | | | Regenerate usb.conf .
* MFC r290083:bdrewery2015-12-041-10/+10
| | | | Use more appropriate ${SHAREDIR} rather than /usr/share.
* MFC r289393:bdrewery2015-12-041-0/+1
| | | | Add more SUBDIR_PARALLEL.
* MFH (r287917, r287918, r289063): upgrade to latest Unbounddes2015-12-041-3/+24
| | | | | | | | MFH (r283301, r289592, r291582): rc script improvements MFH (r287880): respect manually configured forwarders when using DHCP MFH (r289321): deconfuse man page PR: 184047 203580 204931
* MFC r290914:ngie2015-11-231-0/+2
| | | | | | | | | | | | | | Integrate tools/regression/pipe in to the FreeBSD test suite as tests/sys/kern/pipe - Fix style(9) bugs - Fix compiler warnings - Use `nitems(x)` instead of `sizeof(x) / sizeof(*x)` pattern The testcases will be converted over to ATF eventually, but for now will be integrated in as plain C tests Sponsored by: EMC / Isilon Storage Division
* MFC r290905,r290922:ngie2015-11-231-0/+2
| | | | | | | | | | | | | | | | | | | r290905: Integrate acct(2) testcase in as tests/sys/kern/acct/acct_test The :encode_tv_random_million testcase fails the epsilon tests a few thousand times out of one million, so expect the testcase to fail Submitted by: keramida Sponsored by: EMC / Isilon Storage Division r290922: Remove directory made obsolete by r290905 X-MFC note: stable/10 only Sponsored by: EMC / Isilon Storage Division
* MFC r290567:ngie2015-11-161-0/+2
| | | | | | Add some basic tests that exercise cputime limits with limits(1) Sponsored by: EMC / Isilon Storage Division
* MFC r289446:ngie2015-11-161-0/+2
| | | | | | | | | | | | | | Integrate tools/regression/acltools into the FreeBSD test suite as tests/sys/acl - Make the requirements more complete for the testcases - Detect prerequisites so the tests won't fail (zfs.ko is loaded, zpool(1) is available, ACL support is enabled with UFS, etc). - Work with temporary files/directories/mountpoints that work with atf/kyua - Limit the testcases to work on temporary filesystems to reduce tainting the test host Reviewed by: trasz (earlier version) Differential Revision: https://reviews.freebsd.org/D3810
* MFC r289195:ngie2015-11-151-0/+6
| | | | | | | | | | | | | | | | | | | | | | Integrate the tests from lib/libarchive, usr.bin/cpio, and usr.bin/tar in to the FreeBSD test suite functional_test.sh was ported from bin/sh/tests/functional_test.sh, as a small wrapper around libarchive_test, bsdcpio_test, and bsdtar_test provided by upstream. A handful of testcases in lib/libarchive/tests have been disabled as they were failing when run with kyua test (see BROKEN_TESTS in lib/libarchive/tests/Makefile) As a sidenote: this removes the check/test targets from the Makefiles as they don't match the pattern used in the rest of the FreeBSD test suite. Sponsored by: EMC / Isilon Storage Division Conflicts: lib/libarchive/test usr.bin/cpio/test
* MFC r289739,r289743,r289897,r289901:ngie2015-11-091-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r289739: Correctly reintroduce the rudimentary smoke tests I botched up in r289684 Sponsored by: EMC / Isilon Storage Division r289743: Revise "create_test_inputs" to simplify the file structure as these testcases don't need to be nested as much as bin/ls/ls_tests.sh do when verifying ls -a, ls -A, etc. This allows the tests to make all paths relative to the top of the temporary directory instead of always tacking on $ATF_TMPDIR, thus complicating things unnecessarily Create non-empty files in create_test_inputs as well now, similar to create_test_inputs2 in bin/ls/ls_tests.sh Compare the input files to the output file contents using diff where possible: - Skip over the fifo comparison for now because it always fails - Skip over the symlink comparison on cd9660 because it always fails today Sponsored by: EMC / Isilon Storage Division r289897: Add more cd9660/FFS makefs testcases General changes: - Parameterize out the mount command. - Use mtree to verify the contents of an image (check_image_contents) instead of using diff (diff verifies content, but not file metadata). - Move common logic out to functions (common_cleanup, mount_image, check_image_contents) - Add stub testcases for makefs -D (crashes with SIGBUS, similar to bug # 192839) - Add a note about the ISO-9660 and rockridge specs - Add testcases that exercise: -- Creating disk images from an mtree and multiple directories. -- -F flag use (not really an extensive testcase right now) cd9660-specific test changes: - Remove an XXX comment about symlinks; I forgot that non-rockridge images turn symlinks into hardlinks. - Add testcases that exercise: -- -o allow-deep-trees -- -o allow-max-name stub testcase (doesn't seem to be implemented in makefs) -- -o preparer (existence in image; not conformance to spec) -- -o publisher (existence in image; not conformance to spec) -- -o rockridge (basic) Sponsored by: EMC / Isilon Storage Division r289901: Remove an ls -l I was using for debugging Sponsored by: EMC / Isilon Storage Division
* MFC r289441:ngie2015-11-091-0/+2
| | | | | | | | | | | | Integrate tools/test/posixshm and tools/regression/posixshm into the FreeBSD test suite as tests/sys/posixshm Some other highlights: - Convert the testcases over to ATF - Don't use hardcoded paths to /tmp (which violate the ATF/kyua samdbox); use mkstemp to generate temporary paths for non-SHM_ANON shm objects. Sponsored by: EMC / Isilon Storage Division
* MFC r290177:ngie2015-11-091-0/+2
| | | | | | | | | | Integrate contrib/netbsd-tests/lib/libc/rpc into the FreeBSD test suite as lib/libc/rpc This testcase requires rpcbind be up in running; otherwise the testcases will time out and be skipped Sponsored by: EMC / Isilon Storage Division
* MFC r289487:ngie2015-11-091-0/+2
| | | | | | | | | | Integrate contrib/netbsd-tests/bin/dd into the FreeBSD test suite as bin/dd/tests Ensure fdescfs is mounted on /dev/fd/ for the length testcase as it's used in validating the characters read from /dev/zero Sponsored by: EMC / Isilon Storage Division
* MFC r290163: Ignore per-mdN settings in mdconfig[2] startupdteske2015-11-022-0/+4
| | | | | PR: base/189696 Submitted by: ganael.laplanche@martymac.org
* MFC r262957, r267591, r289634:gjb2015-10-287-28/+28
| | | | | | | | | | | | | | | | | | | | | r262957 (marcel): Change the terminal type/class for enabled serial lines to 3wire. This allows us to change the uart(4) driver to not hardcode specific line settings for the serial console. A terminal type of 3wire makes sure the console still works when no DCD signal is present, which preserves behviour. When it is known that the terminal server (or DCE in general) provides DCD, a terminal type/class of std can be used. This has the effect of being logged out when one disconnects from the console -- improving security overall. r267591 (grehan): Convert the potential console port over to using 3wire, for i386/amd64. r289634: Enable all callin ttys if the tty is an available console. Sponsored by: The FreeBSD Foundation
* MFC r286163: rc.subr: Allow rc.conf.d with multi-directory local_startup.jilles2015-10-271-1/+2
| | | | | | | | I also changed ${...%*/rc.d} to ${...%/rc.d} since the shortest match always has an empty string for the asterisk. PR: 201641 Submitted by: Jamie Landeg-Jones (original version)
* Fix indentation in etc/rc.d/fsck.vangyzen2015-10-271-1/+1
|
* MFH (r275359, r290007): make load_rc_config's name argument optionaldes2015-10-261-19/+22
|
* MFC r289300:ngie2015-10-261-0/+2
| | | | | | Integrate tools/regression/vfs into the FreeBSD test suite as tests/sys/vfs Sponsored by: EMC / Isilon Storage Division
* MFC r282339,r282341:ngie2015-10-261-0/+2
| | | | | | | | | | r282339 (by bapt): Add regression test about reverse line feed to col(1) r282341 (by bapt): Actually push the right tests
* MFC r288330,r288423,r288678,r288905,r288906,r288907,r289102:ngie2015-10-251-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r288330: Add initial testcases for bin/ls Sponsored by: EMC / Isilon Storage Division r288423: Skip the B_flag testcase to stop blowing up freebsd-current@ with "test failure emails" because kyua report-jenkins doesn't properly escape non-printable chars r288678: Merge additional testcases and improvements to bin/ls/ls_tests from ^/user/ngie/more-tests. - Additional testcases added: -- ls -D -- ls -F -- ls -H -- ls -L -- ls -R -- ls -S -- ls -T -- ls -b -- ls -d -- ls -f -- ls -g -- ls -h -- ls -i -- ls -k -- ls -l -- ls -m -- ls -n -- ls -o -- ls -p -- ls -q/ls -w -- ls -r -- ls -s -- ls -t -- ls -u -- ls -y - Socket file creation is limited to the ls -F testcase, greatly speeding up the test process - The ls -C testcase was made more robust by limiting the number of columns via COLUMNS and by dynamically formulating the columns/lines. - Add `atf_test_case` before all testcase `head` functions. Sponsored by: EMC / Isilon Storage Division r288905: Add some more syncs to quiesce the filesystem after creating the files to see if this fixes deterministic Jenkin failures r288906: Explicitly set BLOCKSIZE to 512 in the environment r288907: Call sync consistently using atf_check Remove superfluous sync's r289102: Remove all of the syncs They're unnecessary as shown by further testing on my VM Requested by: jhb
* MFC r287951:trasz2015-10-183-3/+3
| | | | | | | The "automount" rc script should depend on "automountd", not the other way around. Sponsored by: The FreeBSD Foundation
* MFC r288390:bdrewery2015-10-131-1/+10
| | | | | | | | When stopping ugidfw, it is not enough to just try unloading the module. If the module is built-in to the kernel then the kldunload will fail. Rather than do this just check if there are rules and then remove them all. Relnotes: yes
* MFC r279248: Unconditionally install debug directory hierarchyemaste2015-09-241-8/+3
| | | | | | | | | This avoids various failure modes (e.g., when building and installing a single binary with debug data on a system that otherwise does not have it enabled). It is also consistent with the way other directory hierarchies are handled (e.g. share/man).
* Long overdue MFC r285444:jlh2015-09-221-1/+5
| | | | | | | Allow again periodic scripts to be run from command-line. PR: 188109 Submitted by: Jason Unovitch
* MFC 287615:hrs2015-09-131-5/+4
| | | | Use read to parse a line instead of set.
* MFC 287614:hrs2015-09-131-4/+11
| | | | | - Add uid check. - Report delay<0 as a warning.
* MFC 287613:hrs2015-09-131-1/+1
| | | | | | | Update only static routes when an interface is specified. This fixed a bad side-effect reported in PR 202144. PR: 202144
* Put timeout directory in correct placerodrigc2015-09-031-2/+2
|
* MFC r286964asomers2015-09-031-0/+2
| | | | Add ATF functional tests for fstyp(8). No ZFS or GELI tests yet.
* MFC: r268745,r268746,r268747,r268748,r268749,r268861,r268750,r268751,r268763bapt2015-09-021-0/+2
| | | | | | | | r273769,r273771,r276771,r278810 New BSDL timeout(1) utility compatible with GNU timeout Relnotes: yes
* MFH: r284691julian2015-08-241-23/+15
| | | | | | | | | MFH: r284920 Remove 16 rules and replace by 2 by using a table. I've been doing this ever since there were tables. I could make more efficient by using "in recv" and "out xmit" instead of via but I'll leave that.
* MFC r257077:garga2015-08-111-4/+0
| | | | | | | | Cleanup empty directories PR: 167133 Approved by: loos Sponsored by: Netgate
* MFC r286375:delphij2015-08-061-1/+0
| | | | Now that stable/8 is EOL, stop building INDEX-8.
* MFC r285675:trasz2015-08-021-1/+0
| | | | | | Remove a comment in the wrong place. Sponsored by: The FreeBSD Foundation
* MFC r274841hrs2015-07-231-5/+0
| | | | | | | | Remove examples of gif_interfaces and gifconfig. These have already been marked as deprecated in rc.conf(5) manual page but these examples were still here. Approved by: re (gjb)
OpenPOWER on IntegriCloud