FreeBSD source tree https://cgit-dev.freebsd.org/src-test2/atom?h=master 2018-08-22T15:55:23Z 2018-08-22T15:55:23Z Brad Davis brd@FreeBSD.org 2018-08-22T15:55:23Z urn:sha1:39cec25ba73b28a104d7f050610e141e47239262 This is related to pkgbase as it uses CONFS to properly tag these as config files. Approved by: will (mentor) Differential Revision: https://reviews.freebsd.org/D16785 2018-08-21T19:28:53Z Brad Davis brd@FreeBSD.org 2018-08-21T19:28:53Z urn:sha1:c8e7055577942f62c35b38e995708418197c7497 This helps with pkgbase by switching to CONFS so they are properly tagged as config files. Approved by: will (mentor) Differential Revision: https://reviews.freebsd.org/D16833 2018-08-11T17:11:08Z Brad Davis brd@FreeBSD.org 2018-08-11T17:11:08Z urn:sha1:81ea85a8845662ca329a954eeeb3e6d4124282a2 This makes pkgbase easier by tagging these as CONFS so they are properly tagged as config files. Approved by: will (mentor) Sponsored by: Essen Hackathon Differential Revision: https://reviews.freebsd.org/D16553 2018-07-28T20:41:33Z Brad Davis brd@FreeBSD.org 2018-07-28T20:41:33Z urn:sha1:df89e317127b204127da018b5cf5a4fbee4ec4ce Approved by: will (mentor) Differential Revision: https://reviews.freebsd.org/D16466 2018-07-28T20:36:23Z Brad Davis brd@FreeBSD.org 2018-07-28T20:36:23Z urn:sha1:1135e97b7c2c3b60fda9a6f2f4a24a8336b1024c This keeps most startup scripts as CONFS per discussion on src-committers from back during BSDCan. Approved by: will (mentor) Differential Revision: https://reviews.freebsd.org/D16466 2018-07-20T21:35:31Z Alan Somers asomers@FreeBSD.org 2018-07-20T21:35:31Z urn:sha1:5717aa2d2a0d88977b04509e4885e4748cf66569 Reviewed by: jamie MFC after: 2 weeks Relnotes: yes Differential Revision: https://reviews.freebsd.org/D16371 2018-07-20T13:59:29Z Ian Lepore ian@FreeBSD.org 2018-07-20T13:59:29Z urn:sha1:d11f4dfd2154be72c7697879aa802afdfadece9f Ntpd needs only a subset of full root privileges to do its job. Specifically it needs the ability to manipulate system time, and to re-bind to a privileged UDP port after interface changes. The mac_ntpd(4) policy module (see r336525) can grant these privs. These changes detect the availability of mac_ntpd(4). If enabled, and if the ntpd configuration is fairly vanilla, it automatically runs ntpd as the non-root user 'ntpd' (uid 123). "Vanilla" means the config doesn't include command line or ntp.conf options changing the location of files or using any files/dirs likely to be inaccessible to user ntpd. Ntpd can still run as non-root when using such options, but the admin must ensure all required files and dirs are accessible, and then set ntpd_user=ntpd in rc.conf. Note that these changes also address PR 199127 by using the command_args technique suggested in the patch. They also tangentially address PR 113552, which is primarily about inconsistent filenames in documentation, but some of the inconsistancy was caused by old code in rc.d/ntpd which is leftover from the intial import from netbsd. There was code to do chroot setup which required the use of the netbsd clockctl(4) device; that code never had any effect on freebsd, because we lack that device and don't build ntpd with the options that would allow using it. PR: 113552 199127 Relnotes: yes Differential Revision: https://reviews.freebsd.org/D16050 2018-06-26T18:07:16Z Ben Woods woodsb02@FreeBSD.org 2018-06-26T18:07:16Z urn:sha1:217df2da0805f63e8d35787929aeaf92815a4c17 Allow attaching of multiple geli providers at once if they use same passphrase and keyfiles. This is helpful when the providers being attached are not used for boot, and therefore the existing code to first try the cached password when tasting the providers during boot does not apply. Multiple providers with the same passphrase and keyfiles can be attached at the same time during system start-up by adding the following to rc.conf: geli_groups="storage backup" geli_storage_flags="-k /etc/geli/storage.keys" geli_storage_devices="ada0 ada1" geli_backup_flags="-j /etc/geli/backup.passfile -k /etc/geli/backup.keys" geli_backup_devices="ada2 ada3" Reviewed by: wblock, delphij, jilles Approved by: sobomax (src), bcr (doc) Differential Revision: https://reviews.freebsd.org/D12644 2018-05-26T11:13:17Z Edward Tomasz Napierala trasz@FreeBSD.org 2018-05-26T11:13:17Z urn:sha1:a4ccdf9091852d0bbe5b2057de7d66c21a855ae1 switch the default kldxref_enable to YES. The reason is that it's required for every image that's being cross-built, as kldxref(8) cannot handle files for non-native architectures. For the one that is not - amd64 - having it on by default doesn't change anything; the script is noop if the linker.hints already exists. MFC after: 2 weeks Sponsored by: DARPA, AFRL 2018-04-30T12:16:54Z Vladimir Kondratyev wulf@FreeBSD.org 2018-04-30T12:16:54Z urn:sha1:44af5666d96e9249c98eaee767dc8f5203c7e5dc User-visible changes: "-u" is added to to list of command line options supported by bthidd. Use it to enable evdev support. uinput and evdev modules should be kld-loaded or compiled into the kernel in that case. bthidd_evdev_support rc.conf variable is added to control enabling of evdev support in bthidd startup script. Possible values are: "YES", "NO", "AUTO"(default). Setting bthidd_evdev_support to "AUTO" inserts "-u" option if kernel is compiled with EVDEV_SUPPORT option enabled. Support for consumer HID usage page keyboard events is implemented. Most of them are available only through evdev protocol. kern.evdev.rcpt_mask sysctl is checked, so "sysctl kern.evdev.rcpt_mask=12" should be executed if EVDEV_SUPPORT is compiled into kernel. It is recommended to regenerate bthidd.conf entries with bthidcontrol(8) "Query" command to set user-friendly names of bluetooth devices. Reviewed by: emax, gonzo, wblock (docs), bcr (docs, early version) Differential Revision: https://reviews.freebsd.org/D13456