summaryrefslogtreecommitdiffstats
path: root/secure
Commit message (Collapse)AuthorAgeFilesLines
* Fix multiple vulnerabilities of OpenSSL. [SA-17:02]delphij2017-02-23369-5188/+3725
| | | | | | | | | | | | | | Fix system hang when booting when PCI-express HotPlug is enabled. [EN-17:01] Fix NIS master updates are not pushed to NIS slave. [EN-17:02] Fix compatibility with Hyper-V/storage after KB3172614 or KB3179574. [EN-17:03] Make makewhatis output reproducible. [EN-17:04] Approved by: so
* Merge r306343 by jkim:glebius2016-09-26367-368/+368
| | | | | | | Merge OpenSSL 1.0.2j. Approved by: so Approved by: re (implicit)
* MFS: r306195jkim2016-09-22373-1113/+1477
| | | | | | Merge OpenSSL 1.0.2i. Approved by: re (gjb, implicit), so (delphij)
* Revert r301551, which added blacklistd(8) to sshd(8).gjb2016-06-242-8/+0
| | | | | | | | | | This change has functional impact, and other concerns raised by the OpenSSH maintainer. Requested by: des PR: 210479 (related) Approved by: re (marius) Sponsored by: The FreeBSD Foundation
* DIRDEPS_BUILD: Update dependenciesbdrewery2016-06-141-0/+1
| | | | | Approved by: re (gjb) Sponsored by: EMC / Isilon Storage Division
* Add blacklist support to sshdlidl2016-06-071-0/+7
| | | | | | | | Reviewed by: rpaulo Approved by: rpaulo (earlier version of changes) Relnotes: YES Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D5915
* Regen x86 assembly files for r299480.jkim2016-05-1148-125/+37788
|
* Set CC environment variable for Perl scripts. This is for detectingjkim2016-05-111-4/+4
| | | | assembler/compiler capabilities, e.g., AVX instructions.
* Refine comments to add its origin.jkim2016-05-111-21/+27
|
* libcrypto: add "Do not modify" comment to generated source filesemaste2016-05-111-1/+4
| | | | | Reviewed by: jkim Differential Revision: https://reviews.freebsd.org/D6237
* Enable linker error if libcrypto.so contains a relocation against text. Itjkim2016-05-111-1/+0
| | | | | | is position independent on all platforms since r299389. Submitted by: kib
* Make libcrypto.so position independent on i386.jkim2016-05-1046-33345/+66749
|
* Revert r299139: these are generated filesemaste2016-05-062-9/+1
| | | | | | We'll need to properly generate PIC/non-PIC from the source .pl files. Reported by: jkim
* Make libcrypto position independent on i386emaste2016-05-052-1/+9
| | | | | | | | | | Prior to this change libcrypto ended up with a .text relocation. Submitted by: Rafael Espíndola (earlier version) Reviewed by: kib Approved by: so (glebius) Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D6164
* Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installedngie2016-05-045-40/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | after r298107 Summary of changes: - Replace all instances of FILES/TESTS with ${PACKAGE}FILES. This ensures that namespacing is kept with FILES appropriately, and that this shouldn't need to be repeated if the namespace changes -- only the definition of PACKAGE needs to be changed - Allow PACKAGE to be overridden by callers instead of forcing it to always be `tests`. In the event we get to the point where things can be split up enough in the base system, it would make more sense to group the tests with the blocks they're a part of, e.g. byacc with byacc-tests, etc - Remove PACKAGE definitions where possible, i.e. where FILES wasn't used previously. - Remove unnecessary TESTSPACKAGE definitions; this has been elided into bsd.tests.mk - Remove unnecessary BINDIRs used previously with ${PACKAGE}FILES; ${PACKAGE}FILESDIR is now automatically defined in bsd.test.mk. - Fix installation of files under data/ subdirectories in lib/libc/tests/hash and lib/libc/tests/net/getaddrinfo - Remove unnecessary .include <bsd.own.mk>s (some opportunistic cleanup) Document the proposed changes in share/examples/tests/tests/... via examples so it's clear that ${PACKAGES}FILES is the suggested way forward in terms of replacing FILES. share/mk/bsd.README didn't seem like the appropriate method of communicating that info. MFC after: never probably X-MFC with: r298107 PR: 209114 Relnotes: yes Tested with: buildworld, installworld, checkworld; buildworld, packageworld Sponsored by: EMC / Isilon Storage Division
* Merge OpenSSL 1.0.2h.jkim2016-05-03377-463/+1077
| | | | Relnotes: yes
* Fix including Kyuafile in packaged base system.gjb2016-04-295-5/+10
| | | | | | | | | | | | Fix a related typo while here. Note, this change results in the Kyuafile inclusion in the runtime package, which needs to be fixed, however addresses the PR as far as I can tell in my tests. PR: 209114 Submitted by: ngie Sponsored by: The FreeBSD Foundation
* MFHgjb2016-04-041-2/+0
|\ | | | | | | Sponsored by: The FreeBSD Foundation
| * Remove the old depend (mkdep) code and make FAST_DEPEND the one true way.bdrewery2016-03-301-2/+0
| | | | | | | | | | | | | | Reviewed by: emaste, hselasky (partial), brooks (brief) Discussed on: arch@ Sponsored by: EMC / Isilon Storage Division Differential Revision: https://reviews.freebsd.org/D5742
* | MFHgjb2016-03-1412-42/+7
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Upgrade to OpenSSH 7.2p2.des2016-03-1112-42/+7
| |
* | MFHgjb2016-03-105-0/+55
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * DIRDEPS_BUILD: Connect MK_TESTS.bdrewery2016-03-095-0/+55
| | | | | | | | Sponsored by: EMC / Isilon Storage Division
* | MFHgjb2016-03-02391-1212/+1948
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Merge OpenSSL 1.0.2g.jkim2016-03-01390-1209/+1948
| | | | | | | | Relnotes: yes
| * DIRDEPS_BUILD: Regenerate without local dependencies.bdrewery2016-02-241-3/+0
| | | | | | | | | | | | | | | | These are no longer needed after the recent 'beforebuild: depend' changes and hooking DIRDEPS_BUILD into a subset of FAST_DEPEND which supports skipping 'make depend'. Sponsored by: EMC / Isilon Storage Division
* | MFHgjb2016-02-181-0/+1
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * DIRDEPS_BUILD: Update dependencies.bdrewery2016-02-161-0/+1
| | | | | | | | Sponsored by: EMC / Isilon Storage Division
* | More 'tests' packaging fixes.gjb2016-02-031-0/+5
| | | | | | | | Sponsored by: The FreeBSD Foundation
* | First pass to fix the 'tests' packages.gjb2016-02-024-0/+20
| | | | | | | | Sponsored by: The FreeBSD Foundation
* | MFHgjb2016-01-29365-758/+951
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Merge OpenSSL 1.0.2f.jkim2016-01-28365-758/+951
| | | | | | | | Relnotes: yes
* | MFHgjb2016-01-271-0/+254
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Add the openssl header for RISC-V.br2016-01-261-0/+254
| | | | | | | | Copied from aarch64 as we can't generate it yet.
* | MFHgjb2016-01-251-2/+2
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Upgrade to OpenSSH 7.0p1.des2016-01-201-2/+2
| |
* | MFHgjb2016-01-202-12/+15
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * List source files (foo.c) instead of object files in SRCS.jhb2016-01-201-1/+1
| | | | | | | | Reviewed by: bdrewery
| * Upgrade to OpenSSH 6.8p1.des2016-01-192-14/+15
| |
| * Upgrade to OpenSSH 6.7p1, retaining libwrap support (which has been removeddes2016-01-191-1/+3
| | | | | | | | | | | | upstream) and a number of security fixes which we had already backported. MFC after: 1 week
* | MFH r289384-r293170gjb2016-01-04439-11829/+36156
|\ \ | |/ | | | | Sponsored by: The FreeBSD Foundation
| * Build engines in parallel.bdrewery2015-12-151-1/+1
| | | | | | | | Sponsored by: EMC / Isilon Storage Division
| * Replace unneeded manual dependency on header by adding it to SRCS.bdrewery2015-12-0712-34/+17
| | | | | | | | | | | | | | | | | | | | bsd.lib.mk and bsd.prog.mk already depend all objs on headers in SRCS if there is not yet a depend file. The headers in SRCS are never built or installed. After 'make depend' the header was already added as a proper dependency on the objects where needed. MFC after: 2 weeks Sponsored by: EMC / Isilon Storage Division
| * Merge OpenSSL 1.0.2e.jkim2015-12-03366-803/+1041
| |
| * META MODE: Update dependencies with 'the-lot' and add missing directories.bdrewery2015-12-011-0/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This is not properly respecting WITHOUT or ARCH dependencies in target/. Doing so requires a massive effort to rework targets/ to do so. A better approach will be to either include the SUBDIR Makefiles directly and map to DIRDEPS or just dynamically lookup the SUBDIR. These lose the benefit of having a userland/lib, userland/libexec, etc, though and results in a massive package. The current implementation of targets/ is very unmaintainable. Currently rescue/rescue and sys/modules are still not connected. Sponsored by: EMC / Isilon Storage Division
| * META MODE: Prefer INSTALL=tools/install.sh to lessen the need for xinstall.host.bdrewery2015-11-253-3/+0
| | | | | | | | | | | | | | | | This both avoids some dependencies on xinstall.host and allows bootstrapping on older releases to work due to lack of at least 'install -l' support. Sponsored by: EMC / Isilon Storage Division
| * Retire the NONE cipher option.des2015-11-233-12/+0
| |
| * Simplify man-makefile-update target.jkim2015-11-171-2/+2
| |
| * Remove duplicate manual pages.jkim2015-11-165-204/+7
| | | | | | | | Reported by: brd
| * Fix a typo. I did not mean it, really.jkim2015-11-061-1/+1
| |
OpenPOWER on IntegriCloud