src/usr.bin, branch releng/14.0

calendar: don't setlogin(2) in the -a user handlers

2024-09-04T20:31:04Z

As of e67975d331 ("Fix 'calendar -a' in several ways."), `calendar -a` will now fork off a new process for each user and do all of its own processing in the user's own context. As a side-effect, calendar(1) started calling setlogin(2) in each of the forked processes and inadvertently hijacked the login name for the session it was running under, which was typically not a fresh session but rather that of whatever cron/periodic run spawned it. Thus, daily and security e-mails started coming from completely arbitrary user. We could create a new session, but it appears that nothing calendar(1) does really needs the login name to be clobbered; opt to just avoid the setlogin(2) call entirely rather than incur the overhead of a new session for each process. PR: 280418 Reviewed by: des, olce Fixes: e67975d331 ("Fix 'calendar -a' in several ways.") (cherry picked from commit 6cb8b61efe8899ee9194563108d0ae90c1eb89e3) (cherry picked from commit 33708452aaabca205d81eceb83e0813e5882815c) Approved by: so

Remove $FreeBSD$: one line sh-pattern

2023-10-19T18:37:52Z

Remove the $FreeBSD$ pattern added to the tests, as well as fixing the mkimg_test.sh script to stop adding it when we rebase the tests. Reviewed by: imp, emaste Pull Request: https://github.com/freebsd/freebsd-src/pull/870 (cherry picked from commit 3b5c9845727a1b95098379f66223525e85e8a73f) (cherry picked from commit 9ed4f43bc4c39dc5ed2ce1bf6003e4dcb4160bfc) Approved-by: re (cperciva)

mkimg: Regenerate all the tests for gpt

2023-10-19T18:37:49Z

Recent changes to mkimg has changed the generated GPT images to be more correct. Use make rebase to regenerate the baseline. Sponsored by: Netflix (cherry picked from commit d2abbfede5342b19f3e5994140cdb6622c95ef66) (cherry picked from commit 524225dde0b5a4f346644670f22fcd11fe13c1f2) Approved-by: re (cperciva)

mkimg_test: remove vtoc8 images, they aren't needed

2023-10-19T18:37:47Z

vtoc8 support expired with sparc64 removal, so remove them all. Sponsored by: Netflix (cherry picked from commit 83bd5a833c3a14b74736e7b3fa0be66252a5a3dc) (cherry picked from commit 4a3cdf4168953c01b8b0e6a9ca72804ef2860309) Approved-by: re (cperciva)

mkimg: Ensure GPT Entry Array is at least 16k

2023-10-19T18:37:44Z

UEFI v2.10 Section 5.3 documentes that the minimum reserved space after the GPT header be at least 16kB. Enforce this minimum. Before, we'd only set the number of entries to be the unpadded size. gpart's selective enforcement of aspects of the GPT standard meant that these images would work, but couldn't be changed (to add a partition or grow the size of a partition). This ensures that gpart's overly picky standards don't cause problems for people wishing to, for example, resize release images. MFC after: 1 day (we want this in 14.0) PR: 274312 Sponsored by: Netflix Reviewed by: emaste Differential Revision: https://reviews.freebsd.org/D42245 (cherry picked from commit 9b42d3e12ffc6896fcb4e60c1b239ddf60705831) (cherry picked from commit 5401ebd33cf5073e8c0f095527504d38f74a926b) Approved-by: re (cperciva)

Add mitigations(7) describing our vulnerability mitigations

2023-10-13T23:14:54Z

This is an initial take on documenting vulnerability mitigations. Connect mitigations(7) to the build Also add some cross references. Reviewed by: gbe (earlier) Sponsored by: The FreeBSD Foundation Co-authored-by: Olivier Certner Differential Revision: https://reviews.freebsd.org/D41794 (cherry picked from commit b6a61ac2d475fba9c45f7f407549a522f60dea18) (cherry picked from commit 6e5dcc6113da649a79e5bc2c3ea9329bcd1d85d5) (cherry picked from commit a2b289608d6b54b6e1ce85096560807e551bb5ac) (cherry picked from commit 272bc4597d0b41eebdfa7c108778070665acb431) Approved by: re (gjb)

switch groff parameter -man to -mandoc

2023-10-12T22:51:51Z

groff 1.23.0 changed the semantics of the -man parameter, and many manual pages are not rendered. The -mandoc parameter brings back the old behavior, as in groff 1.22.4 and earlier. PR: 273565, 273245 Approved by: re (delphij) (cherry picked from commit 035f7c9a3653d91564a5513f1311aa3b6e14a17e) (cherry picked from commit 7f9f152307652d1cb454acb8b9018f29672b452f)

Add deprecation notices to publickey(5) tools

2023-09-24T16:18:35Z

Reviewed by: imp, manu MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D40144 (cherry picked from commit d5ef73a71f0e2fbc4dc9b907a6e59a15599c50b3) (cherry picked from commit 84266fb897e6e75569a81418f146f134af04046b) Approved by: re (gjb)

grep: Suppress EISDIR when reading.

2023-09-14T08:59:38Z

MFC after: 1 week Sponsored by: NetApp, Inc. Sponsored by: Klara, Inc. Reviewed by: kevans Approved by: re (delphij) (cherry picked from commit caf5283fc92edb83173752b1dafbc6d586e78815) (cherry picked from commit 24b741db5fc907d35e51c97f8ef8ad595474e6b9)

localedef: add newlines to error messages

2023-09-10T04:28:02Z

These won't be added elsewhere, so add a little bit of room to make these messages a little easier to read. The existing set is a mixed bag, there are somewhere in the ballpark of 45, 46 printfs to stderr and 19 of those had newlines. Reviewed by: yuripv Approved by: re (kib) Sponsored by: Klara, Inc. (cherry picked from commit 3141e51d2e38fa7b9e6d81477dfa860d087c514d) (cherry picked from commit dc8ee27074d4060549c6ecdc88eeec386691b479)