summaryrefslogtreecommitdiffstats
path: root/usr.sbin
Commit message (Collapse)AuthorAgeFilesLines
* Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3_2RELENG_2_3_2Renato Botelho2016-11-021-4/+11
|\
| * Fix bspatch heap overflow vulnerability. [SA-16:29]delphij2016-10-101-4/+11
| | | | | | | | | | | | | | | | Fix multiple portsnap vulnerabilities. [SA-16:30] Fix multiple libarchive vulnerabilities. [SA-16:31] Approved by: so
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3_2Renato Botelho2016-09-231-1/+1
|\ \ | |/
| * Fix bspatch heap overflow vulnerability. [SA-16:25]delphij2016-07-251-1/+1
| | | | | | | | | | | | | | Fix freebsd-update(8) support of FreeBSD 11.0 release distribution. [EN-16:09] Approved by: so
* | pfSense: Import patch from bugzilla 210286Renato Botelho2016-07-071-0/+4
| |
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-06-069-20/+42
|\ \ | |/
| * Fix multiple ntp vulnerabilities.delphij2016-06-049-20/+42
| | | | | | | | | | Security: FreeBSD-SA-16:24.ntp Approved by: so
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-05-0310-48/+130
|\ \ | |/
| * Fix ntp multiple vulnerabilities.delphij2016-04-2910-48/+130
| | | | | | | | Approved by: so
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-03-181-5/+5
|\ \ | |/
| * MFC: r296996allanjude2016-03-171-5/+5
| | | | | | | | | | | | | | Remove 50% ZFS conditional from bsdinstall/zfsboot PR: 208094 Approved by: re (marius)
* | Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-03-072-5/+5
|\ \ | |/
| * Merge 296424 from stable/10 - contains the following changes to -current:dwmalone2016-03-062-5/+5
| | | | | | | | | | | | | | | | | | r295924: Make sure that hash-based db files fsync befor closing/syncing. r295925: We no longer need O_SYNC pwd_mkd r295465: We no longer need O_SYNC on services_mkdb r295800: We no longer need O_SYNC on cap_mkdb Approved by: re (marius)
* | Revert "Import patch from https://reviews.freebsd.org/D5186"Renato Botelho2016-03-072-5/+5
| | | | | | | | This reverts commit 3882f7f0612f5660c6287cfa1ba025f2843a1957.
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-242-3/+22
|\ \ | |/
| * MFH: 285685araujo2016-02-241-1/+19
| | | | | | | | | | | | | | | | | | | | | | Add support to the jail framework to be able to mount linsysfs(5) and linprocfs(5). PR: 207179 Requested by: thomas@gibfest.dk Reviewed by: jamie, bapt Approved by: re (gjb) Sponsored by: gandi.net Differential Revision: https://reviews.freebsd.org/D5390
| * MFC r295737:markj2016-02-221-2/+3
| | | | | | | | | | | | | | Use the _SAFE loop variant. PR: 207146 Approved by: re (gjb, glebius)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-172-26/+1
|\ \ | |/
| * MFH (r295535): use insecure-lan-zones option instead of hardcoded listdes2016-02-171-25/+1
| | | | | | | | | | Approved by: re (glebius) Relnotes: yes
| * MFH (r295533): remove broken unbound-control-setup scriptdes2016-02-171-1/+0
| | | | | | | | | | Approved by: re (glebius) Relnotes: yes
* | Import patch from https://reviews.freebsd.org/D5186Renato Botelho2016-02-152-5/+5
| | | | | | | | | | This is a new approach to fix pfSense ticket #4523. The fix we had in place works but makes the process really slow for big user databases.
* | Merge remote-tracking branch 'origin/stable/10' into develLuiz Otavio O Souza2016-02-131-2/+2
|\ \ | |/
| * MFC 295174:jhb2016-02-111-2/+2
| | | | | | | | | | | | | | - Note that devctl(8) will appear in 10.3 first. - Add missing devctl_set_driver entry to namelist in devlist(3). Approved by: re (gjb)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-051-68/+47
|\ \ | |/
| * MFC: r295074allanjude2016-02-041-68/+47
| | | | | | | | | | | | | | | | The zfsboot (zfs auto mode) part of bsdinstall now supports UEFI Approved by: re (marius) Relnotes: yes Sponsored by: ScaleEngine Inc.
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-0321-80/+1482
|\ \ | |/
| * MFC 278320,278336,278830,285621:jhb2016-02-014-0/+392
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add devctl(8): a utility for manipulating new-bus devices. Note that this version does not include the 'suspend' and 'resume' commands present in HEAD as those depend on larger changes to the suspend and resume code in the kernel. 278320: Add a new device control utility for new-bus devices called devctl. This allows the user to request administrative changes to individual devices such as attach or detaching drivers or disabling and re-enabling devices. - Add a new /dev/devctl2 character device which uses ioctls for device requests. The ioctls use a common 'struct devreq' which is somewhat similar to 'struct ifreq'. - The ioctls identify the device to operate on via a string. This string can either by the device's name, or it can be a bus-specific address. (For unattached devices, a bus address is the only way to locate a device.) Bus drivers register an eventhandler to claim unrecognized device names that the driver recognizes as a valid address. Two buses currently support addresses: ACPI recognizes any device in the ACPI namespace via its full path starting with "\" and the PCI bus driver recognizes an address specification of 'pci[<domain>:]<bus>:<slot>:<func>' (identical to the PCI selector strings supported by pciconf). - To make it easier to cut and paste, change the PnP location string in the PCI bus driver to output a full PCI selector string rather than 'slot=<slot> function=<func>'. - Add a devctl(3) interface in libdevctl which provides a wrapper around the ioctls and is the preferred interface for other userland code. - Add a devctl(8) program which is a simple wrapper around the requests supported by devctl(3). - Add a resource_unset_value() function that can be used to remove a hint from the kernel environment. This is used to clear a hint.<driver>.<unit>.disabled hint when re-enabling a boot-time disabled device. 278336: Unbreak the build (memchr is explicitly required by devctl(9) after r278320) 278830: install the man page... 285621: Fix formatting. Approved by: re (marius)
| * MFC r284539, r284630, r284688, r284877, r285217, r285218,grehan2016-02-0117-80/+1090
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r286837, r286838, r288470, r288522, r288524, r288826, r289001 Pull in bhyve bug fixes and changes to allow UEFI booting. This provides Windows support. Tested on Intel and AMD with: - Arch Linux i386+amd64 (kernel 4.3.3) - Ubuntu 15.10 server 64-bit - FreeBSD-CURRENT/amd64 20160127 snap - FreeBSD 10.2 i386+amd64 - OpenBSD 5.8 i386+amd64 - SmartOS latest - Windows 10 build 1511' Huge thanks to Yamagi Burmeister who submitted the patch and did the majority of the testing. r284539 - bootrom mem allocation support r284630 - Add SO_REUSEADDR when starting debug port r284688 - Fix a regression in "movs" emulation r284877 - verify_gla() non-zero segment base fix r285217 - Always assert DCD and DSR in the uart r285218 - devmem nodes moved to /dev/vmm.io/ r286837 - Add define for SATA Check-Power-Mode r286838 - Add simple (no-op) SATA cmd emulations r288470 - Increase virtio-blk indirect descs r288522 - Firmware guest query interface r288524 - Fix post-test typo r288826 - Clean up SATA unimplemented cmd msg r289001 - Add -l option to specify userboot path Submitted by: Yamagi Burmeister Approved by: re (kib)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-278-3/+272
|\ \ | |/
| * MFC 293617,294669: Minor fixesdteske2016-01-272-2/+1
| | | | | | | | | | r293617: Fix improper duration for f_dialog_pause() API r294669: Fix a typo in a comment
| * MFH: r293745brueffer2016-01-262-1/+98
| | | | | | | | Add a basic bhyvectl manpage.
| * MFH (r275765): add a vigr(8) tool to mirror vipw(8)des2016-01-264-0/+173
| |
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-2530-111/+770
|\ \ | |/
| * MFC r293860vangyzen2016-01-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bsdinstall: Suggest the GPT+Active workaround on Dell T5810 The Dell Precision Tower 5810 fails to boot from GPT in Legacy/BIOS mode without the Active flag in the Protective MBR. Suggest the workaround during installation. Since an increasing number of Dell systems exhibit this behavior, I imagine all Dells past a certain date will do so. I would like to suggest the workaround for all Dells with a BIOS date of, say, 2014 or later, but I would need to test a variety of systems before committing such a change. Relnotes: We should probably suggest using GPT+Active on "recent" Dells. Sponsored by: Dell Inc.
| * MFC: r285732allanjude2016-01-231-2/+54
| | | | | | | | | | | | | | | | | | Add the Dell E7240 laptop and Intel DP965LT motherboard to the list for the GPT active workaround MFC: r287843 Add the HP ProBook 4330s, Intel DP965LT, D510MO, and Acer Veriton M6630G to the GPT workaround list Sponsored by: ScaleEngine Inc.
| * MFC r294554: MFV r294491: ntp 4.2.8p6.delphij2016-01-2210-34/+106
| | | | | | | | | | | | | | | | Security: CVE-2015-7973, CVE-2015-7974, CVE-2015-7975 Security: CVE-2015-7976, CVE-2015-7977, CVE-2015-7978 Security: CVE-2015-7979, CVE-2015-8138, CVE-2015-8139 Security: CVE-2015-8140, CVE-2015-8158 With hat: so
| * MFC r294183:jamie2016-01-212-18/+4
| | | | | | | | | | | | | | | | | | | | | | | | Clear errno before calling getpw*. MFC r294196: Don't bother checking an ip[46].addr netmask/prefixlen. This is already handled by ifconfig, and it was doing it wrong when the paramater included extra ifconfig options. PR: 205926
| * MFC: r294191allanjude2016-01-211-1/+3
| | | | | | | | | | | | Never 4k align the MBR bootpool because zfsldr can not deal with a gap Sponsored by: ScaleEngine Inc.
| * MFC r292337, r292552, r292553:ian2016-01-197-6/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Build mount_smbfs for arm. Also sort the subdirs. Avoid unaligned memory accesses when encoding netbios names in libsmb. The current code for encoding a netbios name converts each byte to a 16-bit value and stores the result by casting a char* to u_short*, resulting in alignment faults on strict-alignment platforms. This change reimplements the encoding routine using only byte accesses to memory. There is no particular reason to work with 16-bit values just because the encoding process creates two bytes of output for every byte of input. Working a byte at at time also avoids endian problems for big-endian platforms. Make the building of libsmb and mount_smbfs unconditional, now that r292552 has eliminated alignment and endian problems that were making it fail on some platforms. PR: 180438 PR: 189415 Relnotes: Yes
| * MFC 292410,292443,293977:jhb2016-01-191-1/+2
| | | | | | | | | | | | | | | | Exit cleanly if malloc() fails to allocate a buffer for a copy of the current MBR. PR: 205322 Submitted by: Alexander Kuleshov <kuleshovmail@gmail.com>
| * MFC: 293459,293643gnn2016-01-181-32/+274
| | | | | | | | Add netmap support for bhyve
| * MFC 291225:jhb2016-01-182-13/+241
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a new -B flag for use with list mode (-l) that lists details about bridges. Currently this includes information about what resources a bridge decodes on the upstream side for use by downstream devices including bus numbers, I/O port resources, and memory resources. Windows and bus ranges are enumerated for both PCI-PCI bridges and PCI-CardBus bridges. To simplify the implementation, all enumeration is done by reading the appropriate config space registers directly rather than querying the bridge driver in the kernel via new ioctls. This does result in a few limitations. First, an unimplemented window in a PCI-PCI bridge cannot be accurately detected as accurate detection requires writing to the window base register. That is not safe for pciconf(8). Instead, this assumes that any window where both the base and limit read as all zeroes is unimplemented. Second, the PCI-PCI bridge driver in a tree has a few quirks for PCI-PCI bridges that use subtractive decoding but do not indicate that via the progif config register. The list of quirks is duplicated in pciconf's source.
| * MFC r288297 (userland part).melifaro2016-01-172-1/+6
| | | | | | | | | | | | | | | | | | | | | | If ever MFC is done for the new lltable code, this change will miminise ABI breakage. rtsock requests for deleting interface address lles started to return EPERM instead of old "ignore-and-return 0" in r287789. This broke arp -da / ndp -cn behavior (they exit on rtsock command failure). Fix this by translating LLE_IFADDR to RTM_PINNED flag, passing it to userland and making arp/ndp ignore these entries in batched delete.
| * MFC 293305jpaetzel2016-01-162-1/+72
| | | | | | | | | | | | | | | | | | | | | | | | Allow /etc/exports to contain usernames/groups with spaces in them. If you are getting your users/groups from a directory service such as LDAP or AD it's possible for those usernames or groupnames to contain spaces. Submitted by: Sean E. Fagan Reviewed by: rmacklem Sponsored by: iXsystems
| * MFC: r287581allanjude2016-01-151-2/+6
| | | | | | | | | | | | Add an additional check to service(8) -e incase rcvar is blank Sponsored by: ScaleEngine Inc.
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-155-20/+96
|\ \ | |/
| * MFC r290811:jtl2016-01-144-18/+78
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix hwpmc "stalled" behavior Currently, there is a single pm_stalled flag that tracks whether a performance monitor was "stalled" due to insufficent ring buffer space for samples. However, because the same performance monitor can run on multiple processes or threads at the same time, a single pm_stalled flag that impacts them all seems insufficient. In particular, you can hit corner cases where the code fails to stop performance monitors during a context switch out, because it thinks the performance monitor is already stopped. However, in reality, it may be that only the monitor running on a different CPU was stalled. This patch attempts to fix that behavior by tracking on a per-CPU basis whether a PM desires to run and whether it is "stalled". This lets the code make better decisions about when to stop PMs and when to try to restart them. Ideally, we should avoid the case where the code fails to stop a PM during a context switch out. MFC r290813: Optimizations to the way hwpmc gathers user callchains Changes to the code to gather user stacks: * Delay setting pmc_cpumask until we actually have the stack. * When recording user stack traces, only walk the portion of the ring that should have samples for us. MFC r290929: Change the driver stats to what they really are: unsigned values. When pmcstat exits after some samples were dropped, give the user an idea of how many were lost. (Granted, these are global numbers, but they may still help quantify the scope of the loss.) MFC r290930: Improve accuracy of PMC sampling frequency The code tracks a counter which is the number of events until the next sample. On context switch in, it loads the saved counter. On context switch out, it tries to calculate a new saved counter. Problems: 1. The saved counter was shared by all threads in a process. However, this means that all threads would be initially loaded with the same saved counter. However, that could result in sampling more often than once every X number of events. 2. The calculation to determine a new saved counter was backwards. It added when it should have subtracted, and subtracted when it should have added. Assume a single-threaded process with a reload count of 1000 events. Assuming the counter on context switch in was 100 and the counter on context switch out was 50 (meaning the thread has "consumed" 50 more events), the code would calculate a new saved counter of 150 (instead of the proper 50). Fix: 1. As soon as the saved counter is used to initialize a monitor for a thread on context switch in, set the saved counter to the reload count. That way, subsequent threads to use the saved counter will get the full reload count, assuring we sample at least once every X number of events (across all threads). 2. Change the calculation of the saved counter. Due to the change to the saved counter in #1, we simply need to add (modulo the reload count) the remaining counter time we retrieve from the CPU when a thread is context switched out. MFC r291016: Support a wider history counter in pmcstat(8) gmon output pmcstat(8) contains an option to output sampling data in a gmon format compatible with gprof(1). Currently, it uses the default histcounter, which is an (unsigned short). With large sets of sampling data, it is possible to overflow the maximum value provided by an (unsigned short). This change adds the -e argument to pmcstat. If -e and -g are both specified, pmcstat will use a histcounter type of uint64_t. MFC r291017: Fix the date on the pmcstat(8) man page from r291016.
| * MFC r293312:garga2016-01-141-2/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | Make cap_mkdb and services_mkdb file operations sync Similar fix was done for passwd and group operations in r285050. When a temporary file is created and then renamed to replace official file there are no checks to make sure data was written to disk and if a power cycle happens at this time, system can end up with a 0 length file Approved by: bapt Sponsored by: Netgate Differential Revision: https://reviews.freebsd.org/D2982
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-145-65/+734
|\ \ | |/
| * Convert usr.sbin/sesutil to LPADD/DPADD for stable/10allanjude2016-01-141-1/+2
| | | | | | | | | | | | Direct commit to stable/10 Pointy Hat To: allanjude
OpenPOWER on IntegriCloud