summaryrefslogtreecommitdiffstats
path: root/usr.sbin
Commit message (Collapse)AuthorAgeFilesLines
* Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2017-04-269-29/+28
|\
| * Fix multiple vulnerabilities of ntp. [SA-17:03]delphij2017-04-129-29/+28
| | | | | | | | | | | | Xen migration enhancements. [EN-17:05] Approved by: so
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2017-01-0910-22/+43
|\ \ | |/
| * Fix multiple vulnerabilities of ntp.delphij2016-12-2210-22/+43
| | | | | | | | Approved by: so
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-10-121-4/+11
|\ \ | |/
| * Fix bspatch heap overflow vulnerability. [SA-16:29]delphij2016-10-101-4/+11
| | | | | | | | | | | | | | | | Fix multiple portsnap vulnerabilities. [SA-16:30] Fix multiple libarchive vulnerabilities. [SA-16:31] Approved by: so
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-07-261-1/+1
|\ \ | |/
| * Fix bspatch heap overflow vulnerability. [SA-16:25]delphij2016-07-251-1/+1
| | | | | | | | | | | | | | Fix freebsd-update(8) support of FreeBSD 11.0 release distribution. [EN-16:09] Approved by: so
* | pfSense: Import patch from bugzilla 210286Renato Botelho2016-07-071-0/+4
| |
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-06-069-20/+42
|\ \ | |/
| * Fix multiple ntp vulnerabilities.delphij2016-06-049-20/+42
| | | | | | | | | | Security: FreeBSD-SA-16:24.ntp Approved by: so
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-05-0310-48/+130
|\ \ | |/
| * Fix ntp multiple vulnerabilities.delphij2016-04-2910-48/+130
| | | | | | | | Approved by: so
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-03-181-5/+5
|\ \ | |/
| * MFC: r296996allanjude2016-03-171-5/+5
| | | | | | | | | | | | | | Remove 50% ZFS conditional from bsdinstall/zfsboot PR: 208094 Approved by: re (marius)
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-03-072-5/+5
|\ \ | |/
| * Merge 296424 from stable/10 - contains the following changes to -current:dwmalone2016-03-062-5/+5
| | | | | | | | | | | | | | | | | | r295924: Make sure that hash-based db files fsync befor closing/syncing. r295925: We no longer need O_SYNC pwd_mkd r295465: We no longer need O_SYNC on services_mkdb r295800: We no longer need O_SYNC on cap_mkdb Approved by: re (marius)
* | Revert "Import patch from https://reviews.freebsd.org/D5186"Renato Botelho2016-03-072-5/+5
| | | | | | | | This reverts commit 3882f7f0612f5660c6287cfa1ba025f2843a1957.
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-242-3/+22
|\ \ | |/
| * MFH: 285685araujo2016-02-241-1/+19
| | | | | | | | | | | | | | | | | | | | | | Add support to the jail framework to be able to mount linsysfs(5) and linprocfs(5). PR: 207179 Requested by: thomas@gibfest.dk Reviewed by: jamie, bapt Approved by: re (gjb) Sponsored by: gandi.net Differential Revision: https://reviews.freebsd.org/D5390
| * MFC r295737:markj2016-02-221-2/+3
| | | | | | | | | | | | | | Use the _SAFE loop variant. PR: 207146 Approved by: re (gjb, glebius)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-172-26/+1
|\ \ | |/
| * MFH (r295535): use insecure-lan-zones option instead of hardcoded listdes2016-02-171-25/+1
| | | | | | | | | | Approved by: re (glebius) Relnotes: yes
| * MFH (r295533): remove broken unbound-control-setup scriptdes2016-02-171-1/+0
| | | | | | | | | | Approved by: re (glebius) Relnotes: yes
* | Import patch from https://reviews.freebsd.org/D5186Renato Botelho2016-02-152-5/+5
| | | | | | | | | | This is a new approach to fix pfSense ticket #4523. The fix we had in place works but makes the process really slow for big user databases.
* | Merge remote-tracking branch 'origin/stable/10' into develLuiz Otavio O Souza2016-02-131-2/+2
|\ \ | |/
| * MFC 295174:jhb2016-02-111-2/+2
| | | | | | | | | | | | | | - Note that devctl(8) will appear in 10.3 first. - Add missing devctl_set_driver entry to namelist in devlist(3). Approved by: re (gjb)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-051-68/+47
|\ \ | |/
| * MFC: r295074allanjude2016-02-041-68/+47
| | | | | | | | | | | | | | | | The zfsboot (zfs auto mode) part of bsdinstall now supports UEFI Approved by: re (marius) Relnotes: yes Sponsored by: ScaleEngine Inc.
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-0321-80/+1482
|\ \ | |/
| * MFC 278320,278336,278830,285621:jhb2016-02-014-0/+392
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add devctl(8): a utility for manipulating new-bus devices. Note that this version does not include the 'suspend' and 'resume' commands present in HEAD as those depend on larger changes to the suspend and resume code in the kernel. 278320: Add a new device control utility for new-bus devices called devctl. This allows the user to request administrative changes to individual devices such as attach or detaching drivers or disabling and re-enabling devices. - Add a new /dev/devctl2 character device which uses ioctls for device requests. The ioctls use a common 'struct devreq' which is somewhat similar to 'struct ifreq'. - The ioctls identify the device to operate on via a string. This string can either by the device's name, or it can be a bus-specific address. (For unattached devices, a bus address is the only way to locate a device.) Bus drivers register an eventhandler to claim unrecognized device names that the driver recognizes as a valid address. Two buses currently support addresses: ACPI recognizes any device in the ACPI namespace via its full path starting with "\" and the PCI bus driver recognizes an address specification of 'pci[<domain>:]<bus>:<slot>:<func>' (identical to the PCI selector strings supported by pciconf). - To make it easier to cut and paste, change the PnP location string in the PCI bus driver to output a full PCI selector string rather than 'slot=<slot> function=<func>'. - Add a devctl(3) interface in libdevctl which provides a wrapper around the ioctls and is the preferred interface for other userland code. - Add a devctl(8) program which is a simple wrapper around the requests supported by devctl(3). - Add a resource_unset_value() function that can be used to remove a hint from the kernel environment. This is used to clear a hint.<driver>.<unit>.disabled hint when re-enabling a boot-time disabled device. 278336: Unbreak the build (memchr is explicitly required by devctl(9) after r278320) 278830: install the man page... 285621: Fix formatting. Approved by: re (marius)
| * MFC r284539, r284630, r284688, r284877, r285217, r285218,grehan2016-02-0117-80/+1090
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r286837, r286838, r288470, r288522, r288524, r288826, r289001 Pull in bhyve bug fixes and changes to allow UEFI booting. This provides Windows support. Tested on Intel and AMD with: - Arch Linux i386+amd64 (kernel 4.3.3) - Ubuntu 15.10 server 64-bit - FreeBSD-CURRENT/amd64 20160127 snap - FreeBSD 10.2 i386+amd64 - OpenBSD 5.8 i386+amd64 - SmartOS latest - Windows 10 build 1511' Huge thanks to Yamagi Burmeister who submitted the patch and did the majority of the testing. r284539 - bootrom mem allocation support r284630 - Add SO_REUSEADDR when starting debug port r284688 - Fix a regression in "movs" emulation r284877 - verify_gla() non-zero segment base fix r285217 - Always assert DCD and DSR in the uart r285218 - devmem nodes moved to /dev/vmm.io/ r286837 - Add define for SATA Check-Power-Mode r286838 - Add simple (no-op) SATA cmd emulations r288470 - Increase virtio-blk indirect descs r288522 - Firmware guest query interface r288524 - Fix post-test typo r288826 - Clean up SATA unimplemented cmd msg r289001 - Add -l option to specify userboot path Submitted by: Yamagi Burmeister Approved by: re (kib)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-278-3/+272
|\ \ | |/
| * MFC 293617,294669: Minor fixesdteske2016-01-272-2/+1
| | | | | | | | | | r293617: Fix improper duration for f_dialog_pause() API r294669: Fix a typo in a comment
| * MFH: r293745brueffer2016-01-262-1/+98
| | | | | | | | Add a basic bhyvectl manpage.
| * MFH (r275765): add a vigr(8) tool to mirror vipw(8)des2016-01-264-0/+173
| |
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-2530-111/+770
|\ \ | |/
| * MFC r293860vangyzen2016-01-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bsdinstall: Suggest the GPT+Active workaround on Dell T5810 The Dell Precision Tower 5810 fails to boot from GPT in Legacy/BIOS mode without the Active flag in the Protective MBR. Suggest the workaround during installation. Since an increasing number of Dell systems exhibit this behavior, I imagine all Dells past a certain date will do so. I would like to suggest the workaround for all Dells with a BIOS date of, say, 2014 or later, but I would need to test a variety of systems before committing such a change. Relnotes: We should probably suggest using GPT+Active on "recent" Dells. Sponsored by: Dell Inc.
| * MFC: r285732allanjude2016-01-231-2/+54
| | | | | | | | | | | | | | | | | | Add the Dell E7240 laptop and Intel DP965LT motherboard to the list for the GPT active workaround MFC: r287843 Add the HP ProBook 4330s, Intel DP965LT, D510MO, and Acer Veriton M6630G to the GPT workaround list Sponsored by: ScaleEngine Inc.
| * MFC r294554: MFV r294491: ntp 4.2.8p6.delphij2016-01-2210-34/+106
| | | | | | | | | | | | | | | | Security: CVE-2015-7973, CVE-2015-7974, CVE-2015-7975 Security: CVE-2015-7976, CVE-2015-7977, CVE-2015-7978 Security: CVE-2015-7979, CVE-2015-8138, CVE-2015-8139 Security: CVE-2015-8140, CVE-2015-8158 With hat: so
| * MFC r294183:jamie2016-01-212-18/+4
| | | | | | | | | | | | | | | | | | | | | | | | Clear errno before calling getpw*. MFC r294196: Don't bother checking an ip[46].addr netmask/prefixlen. This is already handled by ifconfig, and it was doing it wrong when the paramater included extra ifconfig options. PR: 205926
| * MFC: r294191allanjude2016-01-211-1/+3
| | | | | | | | | | | | Never 4k align the MBR bootpool because zfsldr can not deal with a gap Sponsored by: ScaleEngine Inc.
| * MFC r292337, r292552, r292553:ian2016-01-197-6/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build mount_smbfs for arm. Also sort the subdirs. Avoid unaligned memory accesses when encoding netbios names in libsmb. The current code for encoding a netbios name converts each byte to a 16-bit value and stores the result by casting a char* to u_short*, resulting in alignment faults on strict-alignment platforms. This change reimplements the encoding routine using only byte accesses to memory. There is no particular reason to work with 16-bit values just because the encoding process creates two bytes of output for every byte of input. Working a byte at at time also avoids endian problems for big-endian platforms. Make the building of libsmb and mount_smbfs unconditional, now that r292552 has eliminated alignment and endian problems that were making it fail on some platforms. PR: 180438 PR: 189415 Relnotes: Yes
| * MFC 292410,292443,293977:jhb2016-01-191-1/+2
| | | | | | | | | | | | | | | | Exit cleanly if malloc() fails to allocate a buffer for a copy of the current MBR. PR: 205322 Submitted by: Alexander Kuleshov <kuleshovmail@gmail.com>
| * MFC: 293459,293643gnn2016-01-181-32/+274
| | | | | | | | Add netmap support for bhyve
| * MFC 291225:jhb2016-01-182-13/+241
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a new -B flag for use with list mode (-l) that lists details about bridges. Currently this includes information about what resources a bridge decodes on the upstream side for use by downstream devices including bus numbers, I/O port resources, and memory resources. Windows and bus ranges are enumerated for both PCI-PCI bridges and PCI-CardBus bridges. To simplify the implementation, all enumeration is done by reading the appropriate config space registers directly rather than querying the bridge driver in the kernel via new ioctls. This does result in a few limitations. First, an unimplemented window in a PCI-PCI bridge cannot be accurately detected as accurate detection requires writing to the window base register. That is not safe for pciconf(8). Instead, this assumes that any window where both the base and limit read as all zeroes is unimplemented. Second, the PCI-PCI bridge driver in a tree has a few quirks for PCI-PCI bridges that use subtractive decoding but do not indicate that via the progif config register. The list of quirks is duplicated in pciconf's source.
| * MFC r288297 (userland part).melifaro2016-01-172-1/+6
| | | | | | | | | | | | | | | | | | | | | | If ever MFC is done for the new lltable code, this change will miminise ABI breakage. rtsock requests for deleting interface address lles started to return EPERM instead of old "ignore-and-return 0" in r287789. This broke arp -da / ndp -cn behavior (they exit on rtsock command failure). Fix this by translating LLE_IFADDR to RTM_PINNED flag, passing it to userland and making arp/ndp ignore these entries in batched delete.
| * MFC 293305jpaetzel2016-01-162-1/+72
| | | | | | | | | | | | | | | | | | | | | | | | Allow /etc/exports to contain usernames/groups with spaces in them. If you are getting your users/groups from a directory service such as LDAP or AD it's possible for those usernames or groupnames to contain spaces. Submitted by: Sean E. Fagan Reviewed by: rmacklem Sponsored by: iXsystems
| * MFC: r287581allanjude2016-01-151-2/+6
| | | | | | | | | | | | Add an additional check to service(8) -e incase rcvar is blank Sponsored by: ScaleEngine Inc.
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-155-20/+96
|\ \ | |/
OpenPOWER on IntegriCloud