HardenedBSD/src bfec98arelease/tools azure.conf ec2.conf

Merge branch 'freebsd/14-stable/main' into hardened/14-stable/master
DeltaFile
+1-1release/tools/azure.conf
+1-1release/tools/ec2.conf
+1-1release/tools/vagrant.conf
+3-33 files

HardenedBSD/src eebfb83release/tools azure.conf ec2.conf

release: Chase location of pkg repo databases

pkg used to store copies of upstream repository databases in
/var/db/pkg/repo-*.sqlite.  About a year ago this was moved to
/var/db/pkg/repos/*/, resulting in FreeBSD cloud images no longer
having those (unhelpful since they'll be long out of date before
the cloud images are launched) databases removed.

Remove the correct location, and hope that future pkg updates don't
break the base system again.

Sponsored by:   Amazon

(cherry picked from commit 078e8b34b13d6d0663661542eeac9007806fccdc)
DeltaFile
+1-1release/tools/azure.conf
+1-1release/tools/ec2.conf
+1-1release/tools/vagrant.conf
+3-33 files

HardenedBSD/src 21f20cdshare/man/man4 mtw.4, stand/common newvers.sh

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+4,675-0sys/dev/usb/wlan/if_mtw.c
+1,439-0sys/dev/usb/wlan/if_mtwreg.h
+387-0sys/dev/usb/wlan/if_mtwvar.h
+74-0share/man/man4/mtw.4
+9-1stand/common/newvers.sh
+9-0sys/modules/usb/mtw/Makefile
+6,593-111 files not shown
+6,611-1117 files

HardenedBSD/src 089f7b9share/man/man4 mtw.4, stand/common newvers.sh

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+4,675-0sys/dev/usb/wlan/if_mtw.c
+1,439-0sys/dev/usb/wlan/if_mtwreg.h
+387-0sys/dev/usb/wlan/if_mtwvar.h
+74-0share/man/man4/mtw.4
+9-1stand/common/newvers.sh
+9-0sys/modules/usb/mtw/Makefile
+6,593-111 files not shown
+6,611-1117 files

HardenedBSD/src 078e8b3release/tools azure.conf ec2.conf

release: Chase location of pkg repo databases

pkg used to store copies of upstream repository databases in
/var/db/pkg/repo-*.sqlite.  About a year ago this was moved to
/var/db/pkg/repos/*/, resulting in FreeBSD cloud images no longer
having those (unhelpful since they'll be long out of date before
the cloud images are launched) databases removed.

Remove the correct location, and hope that future pkg updates don't
break the base system again.

Sponsored by:   Amazon
DeltaFile
+1-1release/tools/azure.conf
+1-1release/tools/ec2.conf
+1-1release/tools/vagrant.conf
+3-33 files

HardenedBSD/src 1cfe3b9contrib/traceroute traceroute.8, lib/libc/net sctp_recvmsg.3 sctp_send.3

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi
DeltaFile
+155-157contrib/traceroute/traceroute.8
+186-8lib/libc/net/sctp_recvmsg.3
+190-2lib/libc/net/sctp_send.3
+69-5sbin/umount/umount.c
+0-73usr.sbin/bsdinstall/scripts/selectdists
+34-29usr.sbin/quot/quot.c
+634-27457 files not shown
+899-42063 files

HardenedBSD/src f89168bcontrib/traceroute traceroute.8, lib/libc/net sctp_recvmsg.3 sctp_send.3

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+155-157contrib/traceroute/traceroute.8
+186-8lib/libc/net/sctp_recvmsg.3
+190-2lib/libc/net/sctp_send.3
+69-5sbin/umount/umount.c
+0-73usr.sbin/bsdinstall/scripts/selectdists
+34-29usr.sbin/quot/quot.c
+634-27457 files not shown
+899-42063 files

HardenedBSD/src 0fa637frelease/tools vagrant.conf

release: Allow sudo -g anyone and sudo -u anyone -g anytwo

When only the user (ALL) is specified explicitly, and the group is
implied, only sudo -u works.  Specifying both the user and group, like
(ALL:ALL), is required to:

1. Use sudo -g by itself (with no -u user)
2. Use sudo -u and -g together, with a -g group that is different from
   the -u user's primary group

Obtained from:  https://github.com/sudo-project/sudo/commit/1d13533ea3cda05ec666c45c6c533b614fdd97aa
Reviewed by:    imp
Pull Request:   https://github.com/freebsd/freebsd-src/pull/835
DeltaFile
+1-1release/tools/vagrant.conf
+1-11 files

HardenedBSD/src ef35e5erelease/tools vagrant.conf

release: Add the Ed25519 vagrant insecure key

Both insecure keys, RSA and Ed25519, are required.

Obtained from:  https://github.com/hashicorp/vagrant/commit/b40f6e5fdae1113518e9c92f96dfcd364b646ff9
Reviewed by:    imp
Pull Request:   https://github.com/freebsd/freebsd-src/pull/835
DeltaFile
+2-1release/tools/vagrant.conf
+2-11 files

HardenedBSD/src cb0c532contrib/less screen.c, sys/kern vfs_subr.c

Merge remote-tracking branch 'internal/freebsd/13-stable/main' into hardened/13-stable/master

Conflicts:
        bin/cat/cat.c
        lib/libc/gen/auxv.3
        libexec/rc/rc.d/archdep
        share/man/man5/src.conf.5
        sys/amd64/amd64/elf_machdep.c
        sys/amd64/cloudabi64/cloudabi64_sysvec.c
        sys/amd64/linux/linux_sysvec.c
        sys/amd64/linux32/linux32_sysvec.c
        sys/arm/arm/elf_machdep.c
        sys/arm64/linux/linux_sysvec.c
        sys/compat/ia32/ia32_sysvec.c
        sys/i386/cloudabi32/cloudabi32_sysvec.c
        sys/i386/linux/imgact_linux.c
        sys/i386/linux/linux_sysvec.c
        sys/kern/imgact_aout.c
        sys/kern/kern_module.c

    [22 lines not shown]
DeltaFile
+175-44sys/vm/vm_map.c
+97-38sys/kern/vfs_subr.c
+64-0tests/sys/vm/stack/stack_dlopen_exec_test.c
+57-0tests/sys/vm/stack/stack_mprotect_exec_test.c
+42-11contrib/less/screen.c
+51-0tests/sys/vm/soxstack/soxstack.c
+486-9331,889 files not shown
+1,170-49,85331,895 files

HardenedBSD/src 023fc80tests/sys/cddl/zfs/tests/cli_root/zfs_destroy zfs_destroy_002_pos.ksh, tests/sys/cddl/zfs/tests/zvol/zvol_swap zvol_swap_test.sh zvol_swap_006_pos.ksh

Remove $FreeBSD$: one-line sh pattern

Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/

Similar commit in main:
(cherry picked from commit d0b2dbfa0ecf)
DeltaFile
+0-2tests/sys/cddl/zfs/tests/zvol_thrash/zvol_thrash_test.sh
+0-2tests/sys/cddl/zfs/tests/zvol/zvol_swap/zvol_swap_test.sh
+0-2tests/sys/cddl/zfs/tests/zvol/zvol_swap/zvol_swap_006_pos.ksh
+0-2tests/sys/cddl/zfs/tests/cli_root/zfs_destroy/zfs_destroy_002_pos.ksh
+0-2tests/sys/cddl/zfs/tests/zvol/zvol_swap/zvol_swap_005_pos.ksh
+0-2tests/sys/cddl/zfs/tests/zvol/zvol_swap/zvol_swap_004_pos.ksh
+0-129,627 files not shown
+0-11,2189,633 files

HardenedBSD/src acf3d6esys/arm64/arm64 pl031_rtc.c, sys/compat/linux linux_socket.c

Merge remote-tracking branch 'internal/hardened/current/master' into hardened/current/cross-dso-cfi

Conflicts:
        tools/build/options/WITH_OFED_EXTRA (deleted)
        usr.sbin/rpc.yppasswdd/Makefile (unresolved)
DeltaFile
+697-0sys/dev/virtio/gpu/virtio_gpu.c
+454-0sys/dev/virtio/gpu/virtio_gpu.h
+153-0sys/arm64/arm64/pl031_rtc.c
+80-52sys/compat/linux/linux_socket.c
+107-0tools/build/freebsd-yeet.pl
+87-11sys/dev/ixl/ixl_pf_main.c
+1,578-6331,042 files not shown
+2,188-48,40531,048 files

HardenedBSD/src 2226d61sys/arm64/arm64 pl031_rtc.c, sys/compat/linux linux_socket.c

Merge remote-tracking branch 'internal/freebsd/current/main' into hardened/current/master

Conflicts:
        bin/cat/cat.c (unresolved)
        lib/csu/aarch64/crt1_c.c (unresolved)
        lib/csu/amd64/crt1_c.c (unresolved)
        lib/csu/i386/crt1_c.c (unresolved)
        lib/csu/powerpc64/crt1_c.c (unresolved)
        lib/csu/powerpc64/reloc.c (unresolved)
        lib/csu/riscv/crt1_c.c (unresolved)
        lib/libc/gen/auxv.3 (unresolved)
        lib/libcasper/services/cap_net/cap_net.3 (unresolved)
        sys/amd64/amd64/elf_machdep.c (unresolved)
        sys/amd64/include/sgxreg.h (deleted)
        sys/amd64/linux/linux_sysvec.c (unresolved)
        sys/amd64/linux32/linux32_sysvec.c (unresolved)
        sys/amd64/sgx/sgx.c (deleted)
        sys/amd64/sgx/sgx_linux.c (deleted)
        sys/amd64/sgx/sgxvar.h (deleted)

    [29 lines not shown]
DeltaFile
+697-0sys/dev/virtio/gpu/virtio_gpu.c
+454-0sys/dev/virtio/gpu/virtio_gpu.h
+153-0sys/arm64/arm64/pl031_rtc.c
+80-52sys/compat/linux/linux_socket.c
+107-0tools/build/freebsd-yeet.pl
+87-11sys/dev/ixl/ixl_pf_main.c
+1,578-6331,044 files not shown
+2,304-48,37531,050 files

HardenedBSD/src d0b2dbftools/tools/ath/athalq txdiff.pl, tools/tools/commitsdb query_commit_db make_commit_db

Remove $FreeBSD$: one-line sh pattern

Remove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/
DeltaFile
+0-2usr.bin/less/lesspipe.sh
+0-2usr.bin/getaddrinfo/tables.awk
+0-2tools/tools/mfi/runmegacli.sh
+0-2tools/tools/commitsdb/query_commit_db
+0-2tools/tools/commitsdb/make_commit_db
+0-2tools/tools/ath/athalq/txdiff.pl
+0-129,444 files not shown
+0-11,0209,450 files

HardenedBSD/src 0cf9eberelease/tools gce.conf ec2.conf, sys/fs/nfs nfs_commonsubs.c

Merge remote-tracking branch 'freebsd/stable/13' into hardened/13-stable/master
DeltaFile
+7-2usr.sbin/periodic/periodic.8
+8-0usr.sbin/periodic/periodic.sh
+4-3release/tools/gce.conf
+3-3usr.sbin/periodic/periodic.conf
+5-0sys/fs/nfs/nfs_commonsubs.c
+3-1release/tools/ec2.conf
+30-94 files not shown
+35-1310 files

HardenedBSD/src d63909drelease/tools gce.conf ec2.conf

release: allow VM_EXTRA_PACKAGES to be specified in the environment

This is useful for adding extra packages to the build of an AMI.
For example:
        env VM_EXTRA_PACKAGES="zsh" make -C release ec2ami

(cherry picked from commit 83952a5baa337cc257858feb4886d947ba1a60e3)
DeltaFile
+4-3release/tools/gce.conf
+3-1release/tools/ec2.conf
+2-1release/tools/vagrant.conf
+1-1release/tools/azure.conf
+10-64 files

HardenedBSD/src 97f483fcontrib/one-true-awk/testdir bib funstack.in, share/colldef zh_CN.UTF-8.src ja_JP.SJIS.src

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi

Conflicts:
        Makefile.inc1 (unresolved)
        libexec/rtld-elf/Makefile (unresolved)
        share/man/man5/src.conf.5 (unresolved)
        targets/pseudo/bootstrap-tools/Makefile (unresolved)
DeltaFile
+0-69,894share/colldef/zh_CN.UTF-8.src
+67,474-0share/colldef_unicode/zh_CN.UTF-8.src
+31,102-0contrib/one-true-awk/testdir/bib
+27,220-0contrib/one-true-awk/testdir/funstack.in
+22,150-0share/colldef_unicode/ja_JP.UTF-8.src
+22,135-0share/colldef/ja_JP.SJIS.src
+170,081-69,8943,519 files not shown
+532,005-310,5073,525 files

HardenedBSD/src 9f6e4fbrelease/tools gce.conf, sys/amd64/vmm/amd amdvi_hw.c

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+20-45sys/dev/e1000/em_txrx.c
+14-14sys/amd64/vmm/amd/amdvi_hw.c
+12-12sys/amd64/vmm/intel/vtd.c
+8-4sys/kern/vfs_syscalls.c
+4-3release/tools/gce.conf
+4-2sys/netinet6/in6_ifattach.c
+62-8012 files not shown
+82-9518 files

HardenedBSD/src 83952a5release/tools gce.conf ec2.conf

release: allow VM_EXTRA_PACKAGES to be specified in the environment

This is useful for adding extra packages to the build of an AMI.
For example:
        env VM_EXTRA_PACKAGES="zsh" make -C release ec2ami

Approved by:    gjb
MFC after:      1 week
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+4-3release/tools/gce.conf
+3-1release/tools/ec2.conf
+2-1release/tools/vagrant.conf
+1-1release/tools/azure.conf
+10-64 files

HardenedBSD/src 34ab832contrib/binutils Makefile.in, contrib/terminus ter-u32n.bdf ter-u32b.bdf

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi

Conflicts:
        Makefile.inc1 (unresolved)
        share/man/man5/src.conf.5 (unresolved)
        targets/pseudo/bootstrap-tools/Makefile (unresolved)
        tools/build/options/WITH_OFED_EXTRA (deleted)
DeltaFile
+71,590-432tools/tools/locale/etc/final-maps/widths.txt
+52,834-0contrib/terminus/ter-u32n.bdf
+52,834-0contrib/terminus/ter-u32b.bdf
+0-49,485contrib/binutils/Makefile.in
+47,418-0contrib/terminus/ter-u28n.bdf
+47,418-0contrib/terminus/ter-u28b.bdf
+272,094-49,91725,491 files not shown
+3,013,181-3,285,38525,497 files

HardenedBSD/src 3ddde7dlib/libpmc pmc_allocate.3, release release.sh Makefile.vm

Merge branch 'freebsd/13-stable/main' into hardened/13-stable/master

* freebsd/13-stable/main:
  pass UNAME_r to fix building 14.x ports on 13.x
  release: fix VMSIZE following 1ca8842f3ad9
  release: do not set __MAKE_CONF and SRCCONF for the chroot build
  release: sync 'git count' logic with newvers.sh
  release.sh: Skip installing textproc/docproj when NODOC is set
  Add some regression tests for O_PATH and AT_EMPTY_PATH
  pmcstat: fix the usage message for -t
  pmcstat: set initial counter value to zero
  pmc_allocate(3): document the count argument
DeltaFile
+778-0tests/sys/file/path_test.c
+16-1lib/libpmc/pmc_allocate.3
+5-4release/release.sh
+3-3share/man/man7/release.7
+3-3release/Makefile.vm
+3-2usr.sbin/pmcstat/pmcstat.c
+808-137 files not shown
+816-2013 files

HardenedBSD/src fb3ce53release release.conf.sample Makefile.vm, release/tools ec2.conf basic-ci.conf

release: fix VMSIZE following 1ca8842f3ad9

truncate(1) is not case-sensitive with regard to setting the size
of a file.  makefs(8), however, does not honor upper-case values.
Update release-specific files and the release(7) manual page to
reflect this.

Submitted by:   ehem_freebsd_m5p.com (original)
Differential Review:    https://reviews.freebsd.org/D28979
Sponsored by:   Rubicon Communications, LLC ("Netgate")

(cherry picked from commit fa04db476201c4cad5f6a5f67da8f2ef1e1cdad3)
DeltaFile
+3-3share/man/man7/release.7
+2-2release/release.conf.sample
+2-2release/Makefile.vm
+1-1release/tools/ec2.conf
+1-1release/tools/basic-ci.conf
+1-1release/tools/gce.conf
+10-101 files not shown
+11-117 files

HardenedBSD/src bc99e88contrib/elftoolchain/elfcopy main.c archive.c, sys/arm/mv mvebu_gpio.c

Merge branch 'freebsd/current/main' into hardened/current/master

* freebsd/current/main:
  mvebu_gpio: Multiple fixes.
  simple_mfd: switch to controllable locking for syscon provider.
  link_elf_obj: Handle init_array sections in KLDs
  Fix creating the early arm64 level 2 blocks
  Modernize geom_stats_snapshot_get
  release: sprinkle UNAME_r hacks following c883b6fd8ccd
  compress(1): warn about link handling
  release: fix VMSIZE following 1ca8842f3ad9
  Remove obsolete bc library and dc test files
  mq_open(2): Fix xref to mq_unlink(2)
  elftoolchain: stop leaving tempfiles on error
DeltaFile
+62-15contrib/elftoolchain/elfcopy/main.c
+37-23sys/arm/mv/mvebu_gpio.c
+36-7sys/kern/link_elf_obj.c
+28-12sys/dev/fdt/simple_mfd.c
+23-8contrib/elftoolchain/elfcopy/archive.c
+10-1usr.bin/compress/compress.1
+196-6616 files not shown
+227-9122 files

HardenedBSD/src fa04db4release Makefile.vm release.conf.sample, release/tools gce.conf basic-ci.conf

release: fix VMSIZE following 1ca8842f3ad9

truncate(1) is not case-sensitive with regard to setting the size
of a file.  makefs(8), however, does not honor upper-case values.
Update release-specific files and the release(7) manual page to
reflect this.

MFC with:       1ca8842f3ad9
Submitted by:   ehem_freebsd_m5p.com (original)
Differential Review:    https://reviews.freebsd.org/D28979
Sponsored by:   Rubicon Communications, LLC ("Netgate")
DeltaFile
+3-3share/man/man7/release.7
+2-2release/Makefile.vm
+2-2release/release.conf.sample
+1-1release/tools/gce.conf
+1-1release/tools/basic-ci.conf
+1-1release/tools/ec2.conf
+10-101 files not shown
+11-117 files

HardenedBSD/src c7ce6b0contrib/libstdc++ configure, lib/clang/liblldb LLDBWrapLua.cpp

Merge branch 'hardened/current/master' into hardened/current/uninit-autoinit
DeltaFile
+0-111,817contrib/libstdc++/configure
+72,183-0lib/clang/liblldb/LLDBWrapLua.cpp
+71,590-432tools/tools/locale/etc/final-maps/widths.txt
+31,726-39,305share/ctypedef/ja_JP.eucJP.src
+59,521-0sys/contrib/dev/iwm/iwm-9000-34.fw.uu
+59,517-0sys/contrib/dev/iwm/iwm-9260-34.fw.uu
+294,537-151,55460,534 files not shown
+10,288,584-10,879,88160,540 files

HardenedBSD/src dd034b6contrib/sqlite3 sqlite3.c, contrib/subversion/subversion/libsvn_subr/utf8proc utf8proc_data.c

Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/cross-dso-cfi

Conflicts:
        Makefile.inc1 (unresolved)
        lib/csu/amd64/Makefile (unresolved)
        lib/csu/i386/Makefile (unresolved)
        share/man/man5/src.conf.5 (unresolved)
DeltaFile
+31,726-39,305share/ctypedef/ja_JP.eucJP.src
+11,659-6,934contrib/sqlite3/sqlite3.c
+7,544-7,544contrib/subversion/subversion/libsvn_subr/utf8proc/utf8proc_data.c
+9,480-0sys/dev/ice/ice_hw_autogen.h
+8,000-0sys/dev/ice/ice_lib.c
+5,910-1,341sys/netinet/tcp_stacks/rack.c
+74,319-55,1245,522 files not shown
+530,662-214,3455,528 files

HardenedBSD/src 0c44c84sys/cam/ctl ctl_backend_block.c ctl_backend_ramdisk.c, sys/contrib/dev/acpica changes.txt

Merge branch 'freebsd/current/master' into hardened/current/master

* freebsd/current/master:
  Make struct ctl_be_lun first element of struct ctl_be_*_lun.
  Add an entry to Symbol.map for the rpctls_syscall added by r361599.
  Update the files created from the new syscalls.master from r361599.
  vt(4): Add support for `vidcontrol -C'
  MFV:  r361597
  Add a syscall for the nfs-over-tls daemons to use.
  fortune: remove warning about potentially offensive fortunes
  Fix boot on systems where NUMA domain 0 is unpopulated.
  Include the shells/bash port on Vagrant images, which prevents a shell issue during startup.
  Remove ctl_free_beio() LUN and ctl_io dependencies.
DeltaFile
+34-56sys/cam/ctl/ctl_backend_block.c
+54-1sys/contrib/dev/acpica/changes.txt
+32-8sys/vm/vm_phys.c
+25-11sys/dev/vt/vt_buf.c
+14-15sys/cam/ctl/ctl_backend_ramdisk.c
+22-6sys/vm/uma_core.c
+181-9731 files not shown
+315-14037 files

HardenedBSD/src c5cfa33lib/libugidfw ugidfw.c, sys/fs/nfsserver nfs_nfsdport.c nfs_nfsdstate.c

Merge branch 'freebsd/12-stable/master' into hardened/12-stable/master

* freebsd/12-stable/master:
  Include the shells/bash port on Vagrant images, which prevents a shell issue during startup.
  MFC r361313:
DeltaFile
+7-15sys/fs/nfsserver/nfs_nfsdport.c
+5-10usr.sbin/mountd/mountd.c
+5-10sys/fs/nfsserver/nfs_nfsdstate.c
+4-9sys/kern/vfs_subr.c
+2-6sys/fs/nfsserver/nfs_nfsdsocket.c
+2-3lib/libugidfw/ugidfw.c
+25-538 files not shown
+35-6614 files

HardenedBSD/src b10b13drelease/tools vagrant.conf

Include the shells/bash port on Vagrant images, which prevents
a shell issue during startup.

Approved by:    re (kib, insta-MFC)
PR:             245051
Sponsored by:   Rubicon Communications, LLC (netgate.com)
DeltaFile
+1-1release/tools/vagrant.conf
+1-11 files

HardenedBSD/src 3183744 (r361593)release/tools vagrant.conf

Include the shells/bash port on Vagrant images, which prevents
a shell issue during startup.

Approved by:    re (kib, insta-MFC)
PR:             245051
Sponsored by:   Rubicon Communications, LLC (netgate.com)
DeltaFile
+1-1release/tools/vagrant.conf
+1-11 files