svn commit: r345684 - stable/12/libexec/rc/rc.d

2019-09-03 Thread Kurt Lidl
Author: lidl Date: Fri Mar 29 13:03:05 2019 New Revision: 345684 URL: https://svnweb.freebsd.org/changeset/base/345684 Log: MFC r345005: Remove an unneeded 'tail -n 1' from a pipeline in growfs rc script Modified: stable/12/libexec/rc/rc.d/growfs Directory Properties: stable/12/ (props

svn commit: r345684 - stable/12/libexec/rc/rc.d

2019-03-29 Thread Kurt Lidl
Author: lidl Date: Fri Mar 29 13:03:05 2019 New Revision: 345684 URL: https://svnweb.freebsd.org/changeset/base/345684 Log: MFC r345005: Remove an unneeded 'tail -n 1' from a pipeline in growfs rc script Modified: stable/12/libexec/rc/rc.d/growfs Directory Properties: stable/12/ (props

svn commit: r345276 - head/contrib/blacklist/bin

2019-03-18 Thread Kurt Lidl
Author: lidl Date: Mon Mar 18 15:45:06 2019 New Revision: 345276 URL: https://svnweb.freebsd.org/changeset/base/345276 Log: Fixup syslog() call that should have used logging function pointer PR: 236614 Submitted by: Helge Oldach Modified:

svn commit: r345005 - head/libexec/rc/rc.d

2019-03-11 Thread Kurt Lidl
Author: lidl Date: Mon Mar 11 13:33:03 2019 New Revision: 345005 URL: https://svnweb.freebsd.org/changeset/base/345005 Log: Remove an unneeded 'tail -n 1' from a pipeline When piping to awk, it's almost always an anti-pattern to use 'grep' first. When not in a pipeline, sometimes it

svn commit: r339199 - head/contrib/blacklist/bin

2018-10-05 Thread Kurt Lidl
Author: lidl Date: Fri Oct 5 16:52:21 2018 New Revision: 339199 URL: https://svnweb.freebsd.org/changeset/base/339199 Log: Document signal handling in blacklistd(8). Reviewed by: bcr@, 0mp@ Approved by: re (gjb@) MFC after:1 week Differential Revision:

svn commit: r338332 - stable/11/stand/sparc64/loader

2018-08-26 Thread Kurt Lidl
Author: lidl Date: Mon Aug 27 03:32:40 2018 New Revision: 338332 URL: https://svnweb.freebsd.org/changeset/base/338332 Log: MFC r338201: increase heap size during "loader" on sparc64 Increase the size of the heap size available on sparc64 during operation of "loader". The dramatic

svn commit: r338203 - head/share/mk

2018-08-22 Thread Kurt Lidl
Author: lidl Date: Wed Aug 22 15:29:54 2018 New Revision: 338203 URL: https://svnweb.freebsd.org/changeset/base/338203 Log: Turn off LOADER_GELI and LOADER_LUA for sparc64, until those options are fully debugged. With these options off, the unified "loader" binary for sparc64 works to boot

svn commit: r338201 - head/stand/sparc64/loader

2018-08-22 Thread Kurt Lidl
Author: lidl Date: Wed Aug 22 14:33:57 2018 New Revision: 338201 URL: https://svnweb.freebsd.org/changeset/base/338201 Log: Increase the size of the heap size available on sparc64 during operation of "loader". The dramatic increase in size of SPA_MAXBLOCKSIZE in r304321 causes the heap

Re: svn commit: r336465 - in head/sys/netinet: . tcp_stacks

2018-07-29 Thread Kurt Lidl
On 7/19/18 9:18 AM, Maxim Konovalov wrote: On Thu, 19 Jul 2018, 08:09-0400, Michael Tuexen wrote: On 19. Jul 2018, at 03:12, Maxim Konovalov wrote: Hi Randall, On Wed, 18 Jul 2018, 22:49-, Randall Stewart wrote: Author: rrs Date: Wed Jul 18 22:49:53 2018 New Revision: 336465 URL:

Re: svn commit: r334947 - head/sys/modules

2018-06-17 Thread Kurt Lidl
On 6/16/18 5:50 PM, Dimitry Andric wrote: On 16 Jun 2018, at 16:57, Kurt Lidl wrote: On 6/11/18 4:42 AM, Dimitry Andric wrote: Author: dim Date: Mon Jun 11 08:42:03 2018 New Revision: 334947 URL: https://svnweb.freebsd.org/changeset/base/334947 Log: Disable building aesni with base gcc

Re: svn commit: r334947 - head/sys/modules

2018-06-16 Thread Kurt Lidl
On 6/11/18 4:42 AM, Dimitry Andric wrote: Author: dim Date: Mon Jun 11 08:42:03 2018 New Revision: 334947 URL: https://svnweb.freebsd.org/changeset/base/334947 Log: Disable building aesni with base gcc Because base gcc does not support the required intrinsics, do not attempt to

Re: Deorbiting i386

2018-05-26 Thread Kurt Lidl
On 5/24/18 3:22 PM, Matthew Macy wrote: i386 is definitely on the wane, but so long as it's used by more than a handful of people it will be supported. All you need to know about sparc64 vitality is that HEAD didn't boot for 3 months until last week. I stopped testing HEAD on sparc64 when the

svn commit: r332948 - stable/11/contrib/top

2018-04-24 Thread Kurt Lidl
Author: lidl Date: Tue Apr 24 17:37:29 2018 New Revision: 332948 URL: https://svnweb.freebsd.org/changeset/base/332948 Log: MFC r332671: top: fix warnings from clang/gcc Add includes for and where necessary, and rename a few internal functions to have a "top_" prefix to avoid clashes

svn commit: r332671 - head/contrib/top

2018-04-18 Thread Kurt Lidl
Author: lidl Date: Wed Apr 18 13:17:14 2018 New Revision: 332671 URL: https://svnweb.freebsd.org/changeset/base/332671 Log: top: fix warnings from clang/gcc Add includes for and where necessary, and rename a few internal functions to have a "top_" prefix to avoid clashes with

svn commit: r332571 - stable/11/contrib/blacklist/libexec

2018-04-16 Thread Kurt Lidl
Author: lidl Date: Mon Apr 16 14:46:02 2018 New Revision: 332571 URL: https://svnweb.freebsd.org/changeset/base/332571 Log: MFC r328861: Update blacklist-helper to not emit messages from pf during operation. Use 'pfctl -k' when blocking a site to kill active tcp connections from the

svn commit: r332569 - stable/11/sys/sparc64/sparc64

2018-04-16 Thread Kurt Lidl
Author: lidl Date: Mon Apr 16 14:42:25 2018 New Revision: 332569 URL: https://svnweb.freebsd.org/changeset/base/332569 Log: MFC r324512: Don't use a non-zero argument for __builtin_frame_address Mirror the change made for powerpc64 in r323687. With this change, gcc 6.4.0 can

svn commit: r332566 - in stable/11/sys: cddl/dev/dtrace/mips cddl/dev/fbt/mips mips/conf modules/dtrace modules/dtrace/dtraceall

2018-04-16 Thread Kurt Lidl
Author: lidl Date: Mon Apr 16 14:39:04 2018 New Revision: 332566 URL: https://svnweb.freebsd.org/changeset/base/332566 Log: MFC r323206: Enable dtrace support for mips64 and the ERL kernel config Turn on the required options in the ERL config file, and ensure that the fbt module is

svn commit: r331080 - in stable/11/contrib/blacklist: bin libexec

2018-03-16 Thread Kurt Lidl
Author: lidl Date: Fri Mar 16 23:39:49 2018 New Revision: 331080 URL: https://svnweb.freebsd.org/changeset/base/331080 Log: Revert attempted MFC. It included unwanted changes. Modified: stable/11/contrib/blacklist/bin/blacklistd.8 stable/11/contrib/blacklist/bin/blacklistd.c

svn commit: r331079 - in stable/11/contrib/blacklist: bin libexec

2018-03-16 Thread Kurt Lidl
Author: lidl Date: Fri Mar 16 23:34:44 2018 New Revision: 331079 URL: https://svnweb.freebsd.org/changeset/base/331079 Log: MFC r328861: improve blacklist-helper shell script Modified: stable/11/contrib/blacklist/bin/blacklistd.8 stable/11/contrib/blacklist/bin/blacklistd.c

svn commit: r328861 - head/contrib/blacklist/libexec

2018-02-04 Thread Kurt Lidl
Author: lidl Date: Sun Feb 4 19:43:51 2018 New Revision: 328861 URL: https://svnweb.freebsd.org/changeset/base/328861 Log: Update blacklist-helper to not emit messages from pf during operation. Use 'pfctl -k' when blocking a site to kill active tcp connections from the blocked address.

Re: svn commit: r327086 - head/sys/dev/lmc

2018-01-04 Thread Kurt Lidl
On 1/4/18 5:00 AM, Poul-Henning Kamp wrote: In message <3f4a7247-e711-c65a-d973-c929ac872...@freebsd.org>, Stefan Esser writes: Am 04.01.18 um 00:41 schrieb Pedro Giffuni: It appears to be a strange beast that uses the Ethernet chip to generate a bit stream which is then converted

svn commit: r324512 - head/sys/sparc64/sparc64

2017-10-10 Thread Kurt Lidl
Author: lidl Date: Wed Oct 11 03:50:44 2017 New Revision: 324512 URL: https://svnweb.freebsd.org/changeset/base/324512 Log: Don't use a non-zero argument for __builtin_frame_address Mirror the change made for powerpc64 in r323687. With this change, gcc 6.4.0 can successfully compile and

svn commit: r323206 - in head/sys: cddl/dev/dtrace/mips cddl/dev/fbt/mips mips/conf modules/dtrace modules/dtrace/dtraceall

2017-09-05 Thread Kurt Lidl
Author: lidl Date: Wed Sep 6 03:19:52 2017 New Revision: 323206 URL: https://svnweb.freebsd.org/changeset/base/323206 Log: Enable dtrace support for mips64 and the ERL kernel config Turn on the required options in the ERL config file, and ensure that the fbt module is listed as a

svn commit: r323156 - head/sys/mips/conf

2017-09-04 Thread Kurt Lidl
Author: lidl Date: Mon Sep 4 20:10:34 2017 New Revision: 323156 URL: https://svnweb.freebsd.org/changeset/base/323156 Log: Fix whitespace on "options" to be , no functional change Modified: head/sys/mips/conf/ERL Modified: head/sys/mips/conf/ERL

svn commit: r320369 - head/sys/mips/conf

2017-06-26 Thread Kurt Lidl
Author: lidl Date: Mon Jun 26 18:28:00 2017 New Revision: 320369 URL: https://svnweb.freebsd.org/changeset/base/320369 Log: Add IPSEC support to mips ERL kernel config file Modified: head/sys/mips/conf/ERL Modified: head/sys/mips/conf/ERL

svn commit: r318950 - in stable/11/contrib/blacklist: bin include lib

2017-05-26 Thread Kurt Lidl
Author: lidl Date: Fri May 26 15:13:46 2017 New Revision: 318950 URL: https://svnweb.freebsd.org/changeset/base/318950 Log: MFC r318755: Extend libblacklist support with new action types The original blacklist library supported two notification types: - failed auth attempt, which

svn commit: r318755 - in head/contrib/blacklist: bin include lib

2017-05-23 Thread Kurt Lidl
Author: lidl Date: Tue May 23 19:03:07 2017 New Revision: 318755 URL: https://svnweb.freebsd.org/changeset/base/318755 Log: Extend libblacklist support with new action types The original blacklist library supported two notification types: - failed auth attempt, which incremented the

svn commit: r318402 - stable/11/crypto/openssh

2017-05-17 Thread Kurt Lidl
Author: lidl Date: Wed May 17 14:28:01 2017 New Revision: 318402 URL: https://svnweb.freebsd.org/changeset/base/318402 Log: MFC r318242: Refine and update blacklist support in sshd Adjust notification points slightly to catch all auth failures, rather than just the ones caused by bad

Re: svn commit: r318242 - head/crypto/openssh

2017-05-12 Thread Kurt Lidl
On 5/12/17 11:20 AM, Kurt Lidl wrote: Author: lidl Date: Fri May 12 15:20:12 2017 New Revision: 318242 URL: https://svnweb.freebsd.org/changeset/base/318242 Log: Refine and update blacklist support in sshd Adjust notification points slightly to catch all auth failures, rather than

svn commit: r318242 - head/crypto/openssh

2017-05-12 Thread Kurt Lidl
Author: lidl Date: Fri May 12 15:20:12 2017 New Revision: 318242 URL: https://svnweb.freebsd.org/changeset/base/318242 Log: Refine and update blacklist support in sshd Adjust notification points slightly to catch all auth failures, rather than just the ones caused by bad usernames.

svn commit: r318240 - stable/11/libexec/ftpd

2017-05-12 Thread Kurt Lidl
Author: lidl Date: Fri May 12 15:03:09 2017 New Revision: 318240 URL: https://svnweb.freebsd.org/changeset/base/318240 Log: MFC r317862: Improve blacklist support before upgrading libblacklist The locally declared enum of blacklistd actions needs to be hidden when the soon to be

svn commit: r318239 - in stable/11/contrib/blacklist: . bin etc/rc.d lib libexec port

2017-05-12 Thread Kurt Lidl
Author: lidl Date: Fri May 12 15:00:06 2017 New Revision: 318239 URL: https://svnweb.freebsd.org/changeset/base/318239 Log: MFC r317802: Merge latest version of blacklist sources from NetBSD (@ 20170503) Sponsored by: The FreeBSD Foundation Replaced:

svn commit: r317862 - head/libexec/ftpd

2017-05-05 Thread Kurt Lidl
Author: lidl Date: Sat May 6 04:17:48 2017 New Revision: 317862 URL: https://svnweb.freebsd.org/changeset/base/317862 Log: Improve blacklist support before upgrading libblacklist The locally declared enum of blacklistd actions needs to be hidden when the soon to be committed changes to

svn commit: r317802 - in head/contrib/blacklist: . bin etc/rc.d lib libexec port

2017-05-04 Thread Kurt Lidl
Author: lidl Date: Thu May 4 19:07:37 2017 New Revision: 317802 URL: https://svnweb.freebsd.org/changeset/base/317802 Log: Merge latest version of blacklist sources from NetBSD (@ 20170503) MFC after:3 days Sponsored by: The FreeBSD Foundation Replaced:

svn commit: r317725 - vendor/NetBSD/blacklist/20170503

2017-05-02 Thread Kurt Lidl
Author: lidl Date: Wed May 3 04:42:35 2017 New Revision: 317725 URL: https://svnweb.freebsd.org/changeset/base/317725 Log: Tag import of NetBSD's external/bsd/blacklist @ 20170503 Added: vendor/NetBSD/blacklist/20170503/ - copied from r317724, vendor/NetBSD/blacklist/dist/

svn commit: r317724 - in vendor/NetBSD/blacklist/dist: . bin etc/rc.d lib libexec port

2017-05-02 Thread Kurt Lidl
Author: lidl Date: Wed May 3 04:39:43 2017 New Revision: 317724 URL: https://svnweb.freebsd.org/changeset/base/317724 Log: Vendor import of NetBSD's external/bsd/blacklist @ 20170503 Sponsored by: The FreeBSD Foundation Deleted: vendor/NetBSD/blacklist/dist/port/config.h Modified:

Re: svn commit: r315653 - in head: lib/libstand sys/boot/common sys/boot/i386/libi386

2017-03-23 Thread Kurt Lidl
On 3/21/17 11:53 AM, Toomas Soome wrote: On 21. märts 2017, at 17:15, Ian Lepore wrote: On Tue, 2017-03-21 at 15:35 +0300, Slawa Olhovchenkov wrote: On Mon, Mar 20, 2017 at 10:20:17PM +, Toomas Soome wrote: Author: tsoome Date: Mon Mar 20 22:20:17 2017 New Revision:

Re: svn commit: r314654 - in head/cddl: lib/drti lib/libavl lib/libctf lib/libdtrace lib/libnvpair lib/libumem lib/libuutil lib/libzfs lib/libzfs_core lib/libzpool sbin/zfs sbin/zpool usr.bin/ctfconve

2017-03-06 Thread Kurt Lidl
On 3/4/17 3:39 PM, Rodney W. Grimes wrote: Idk, maybe I am to personally attached to the relative paths.. cause I had a major part in helping them all to work, or perhaps its my been burned by absolute paths that had to be reworked too many times in my past. But my gutt is telling me this

svn commit: r314325 - stable/11/contrib/blacklist/bin

2017-02-26 Thread Kurt Lidl
Author: lidl Date: Mon Feb 27 04:08:08 2017 New Revision: 314325 URL: https://svnweb.freebsd.org/changeset/base/314325 Log: MFC r314120: Reset failed login count to zero when removing a blocked address The blacklistd daemon keeps records of failed login attempts for each address:port

svn commit: r314324 - stable/11/contrib/blacklist/libexec

2017-02-26 Thread Kurt Lidl
Author: lidl Date: Mon Feb 27 04:05:34 2017 New Revision: 314324 URL: https://svnweb.freebsd.org/changeset/base/314324 Log: MFC r314111: Improve ipfw rule creation for blacklist-helper script When blocking an address, the blacklist-helper script needs to do the following things for the

svn commit: r314120 - head/contrib/blacklist/bin

2017-02-22 Thread Kurt Lidl
Author: lidl Date: Thu Feb 23 05:40:59 2017 New Revision: 314120 URL: https://svnweb.freebsd.org/changeset/base/314120 Log: Reset failed login count to zero when removing a blocked address The blacklistd daemon keeps records of failed login attempts for each address:port that is flagged

svn commit: r314111 - head/contrib/blacklist/libexec

2017-02-22 Thread Kurt Lidl
Author: lidl Date: Wed Feb 22 21:50:37 2017 New Revision: 314111 URL: https://svnweb.freebsd.org/changeset/base/314111 Log: Improve ipfw rule creation for blacklist-helper script When blocking an address, the blacklist-helper script needs to do the following things for the ipfw packet

svn commit: r314072 - stable/11/crypto/openssh

2017-02-21 Thread Kurt Lidl
Author: lidl Date: Wed Feb 22 04:15:39 2017 New Revision: 314072 URL: https://svnweb.freebsd.org/changeset/base/314072 Log: MFC r313965: Only notify blacklistd for successful logins in auth.c Before this change, every pass through auth.c resulted in a call to blacklist_notify().

Re: svn commit: r313965 - head/crypto/openssh

2017-02-19 Thread Kurt Lidl
On 2/19/17 6:22 PM, Oliver Pinter wrote: On 2/20/17, Kurt Lidl <l...@freebsd.org> wrote: On 2/19/17 4:42 PM, Oliver Pinter wrote: Hello! On 2/19/17, Kurt Lidl <l...@freebsd.org> wrote: Author: lidl Date: Sun Feb 19 20:35:39 2017 New Revision: 313965 URL: https://svnweb.freebsd.o

svn commit: r313965 - head/crypto/openssh

2017-02-19 Thread Kurt Lidl
Author: lidl Date: Sun Feb 19 20:35:39 2017 New Revision: 313965 URL: https://svnweb.freebsd.org/changeset/base/313965 Log: Only notify blacklistd for successful logins in auth.c Reported by: Rick Adams Reviewed by: des MFC after:3 days Sponsored by: The FreeBSD Foundation

Re: svn commit: r313037 - in head/sys: amd64/include kern mips/include net powerpc/include sparc64/include

2017-02-06 Thread Kurt Lidl
On 2/5/17 1:59 PM, Jason Harmening wrote: Actually attaching the patch this time ( gmail client) On Sun, Feb 5, 2017 at 10:58 AM, Jason Harmening > wrote: Hmm, it's a good idea to consider the possibility of a barrier

Re: svn commit: r313037 - in head/sys: amd64/include kern mips/include net powerpc/include sparc64/include

2017-02-03 Thread Kurt Lidl
Having just spent a couple of hours bisecting what broke the kernel on my mips64 machine, I can definitively state it was this commit. With this commit in place, the kernel hangs early in the autoconfiguration: gcc version 4.2.1 20070831 patched [FreeBSD] Preloaded elf kernel "kernel" at

svn commit: r313098 - head/sys/modules

2017-02-02 Thread Kurt Lidl
Author: lidl Date: Thu Feb 2 17:43:00 2017 New Revision: 313098 URL: https://svnweb.freebsd.org/changeset/base/313098 Log: Fix compilation for mips64 platforms The hwpmc_mips24k / hwpmc_mips74k modules are only for mips 32-bit hosts. Reviewed by: adrian Modified:

svn commit: r312833 - head/sys/mips/conf

2017-01-26 Thread Kurt Lidl
Author: lidl Date: Thu Jan 26 20:45:04 2017 New Revision: 312833 URL: https://svnweb.freebsd.org/changeset/base/312833 Log: Remove 'options NO_SWAPPING' from ERL configuration file Modified: head/sys/mips/conf/ERL Modified: head/sys/mips/conf/ERL

svn commit: r308703 - stable/11/libexec/ftpd

2016-11-15 Thread Kurt Lidl
Author: lidl Date: Tue Nov 15 23:03:57 2016 New Revision: 308703 URL: https://svnweb.freebsd.org/changeset/base/308703 Log: MFC r308567: Fix build when WITHOUT_BLACKLIST=yes is specified Sponsored by: The FreeBSD Foundation Modified: stable/11/libexec/ftpd/ftpd.c Directory Properties:

Re: svn commit: r308175 - head/libexec/ftpd

2016-11-11 Thread Kurt Lidl
On 11/10/16 4:25 PM, Matteo Riondato wrote: On Nov 1, 2016, at 2:18 PM, Kurt Lidl <l...@freebsd.org> wrote: Author: lidl Date: Tue Nov 1 18:18:09 2016 New Revision: 308175 URL: https://svnweb.freebsd.org/changeset/base/308175 Log: Revisit blacklistd support in ftpd This

svn commit: r308567 - head/libexec/ftpd

2016-11-11 Thread Kurt Lidl
Author: lidl Date: Sat Nov 12 03:07:41 2016 New Revision: 308567 URL: https://svnweb.freebsd.org/changeset/base/308567 Log: Fix build when WITHOUT_BLACKLIST=yes is specified PR: 214409 Submitted by: matthew Reported by: matteo MFC after:3 days Sponsored by:

svn commit: r308446 - stable/11/libexec/ftpd

2016-11-08 Thread Kurt Lidl
Author: lidl Date: Tue Nov 8 20:12:13 2016 New Revision: 308446 URL: https://svnweb.freebsd.org/changeset/base/308446 Log: MFC r308175: Revisit blacklistd support in ftpd Enhance blacklistd support to not log anything by default, unless blacklistd support is enabled on the command line.

svn commit: r308175 - head/libexec/ftpd

2016-11-01 Thread Kurt Lidl
Author: lidl Date: Tue Nov 1 18:18:09 2016 New Revision: 308175 URL: https://svnweb.freebsd.org/changeset/base/308175 Log: Revisit blacklistd support in ftpd Enhance blacklistd support to not log anything by default, unless blacklistd support is enabled on the command line. Document

svn commit: r307173 - stable/11/sys/netinet

2016-10-12 Thread Kurt Lidl
Author: lidl Date: Thu Oct 13 03:10:04 2016 New Revision: 307173 URL: https://svnweb.freebsd.org/changeset/base/307173 Log: MFC r306458: Properly preserve ip_tos bits for IPv4 packets Restructure code slightly to save ip_tos bits earlier. Fix the bug where the ip_tos field is zeroed out

svn commit: r307172 - stable/11/etc/periodic/security

2016-10-12 Thread Kurt Lidl
Author: lidl Date: Thu Oct 13 03:08:32 2016 New Revision: 307172 URL: https://svnweb.freebsd.org/changeset/base/307172 Log: MFC r306696: Make 502.pfdenied find blacklistd/* filter names dynamically This change is needed to make the 520.pfdenied script find the new blacklistd/* anchor

svn commit: r307171 - stable/11/contrib/blacklist/libexec

2016-10-12 Thread Kurt Lidl
Author: lidl Date: Thu Oct 13 03:06:23 2016 New Revision: 307171 URL: https://svnweb.freebsd.org/changeset/base/307171 Log: MFC r306695: Make blacklist-helper commands emit a message when successful The blacklistd daemon expects to see a message on stdout, instead of just relying on the

svn commit: r306799 - stable/11/contrib/blacklist/bin

2016-10-06 Thread Kurt Lidl
Author: lidl Date: Fri Oct 7 02:33:45 2016 New Revision: 306799 URL: https://svnweb.freebsd.org/changeset/base/306799 Log: MFC r306508: Fix blacklistd's state restoral at startup The blacklistd daemon attempted to restore the filtering rules before the database of blocked addresses was

svn commit: r306798 - stable/11/contrib/blacklist/bin

2016-10-06 Thread Kurt Lidl
Author: lidl Date: Fri Oct 7 02:32:01 2016 New Revision: 306798 URL: https://svnweb.freebsd.org/changeset/base/306798 Log: MFC r306507: Update blacklistd.8 with changes from NetBSD Sponsored by: The FreeBSD Foundation Modified: stable/11/contrib/blacklist/bin/blacklistd.8 Directory

svn commit: r306696 - head/etc/periodic/security

2016-10-04 Thread Kurt Lidl
Author: lidl Date: Tue Oct 4 23:12:35 2016 New Revision: 306696 URL: https://svnweb.freebsd.org/changeset/base/306696 Log: Make 502.pfdenied find blacklistd/* filter names dynamically This change is needed to make the 520.pfdenied script find the new blacklistd/* anchor points for

svn commit: r306695 - head/contrib/blacklist/libexec

2016-10-04 Thread Kurt Lidl
Author: lidl Date: Tue Oct 4 23:10:43 2016 New Revision: 306695 URL: https://svnweb.freebsd.org/changeset/base/306695 Log: Make blacklist-helper commands emit a message when successful The blacklistd daemon expects to see a message on stdout, instead of just relying on the exit value

svn commit: r306508 - head/contrib/blacklist/bin

2016-09-30 Thread Kurt Lidl
Author: lidl Date: Fri Sep 30 16:35:30 2016 New Revision: 306508 URL: https://svnweb.freebsd.org/changeset/base/306508 Log: Fix blacklistd's state restoral at startup The blacklistd daemon attempted to restore the filtering rules before the database of blocked addresses was opened, so no

svn commit: r306507 - head/contrib/blacklist/bin

2016-09-30 Thread Kurt Lidl
Author: lidl Date: Fri Sep 30 16:31:12 2016 New Revision: 306507 URL: https://svnweb.freebsd.org/changeset/base/306507 Log: Update blacklistd.8 with changes from NetBSD Obtained from:NetBSD MFC after:1 week Sponsored by: The FreeBSD Foundation Differential Revision:

svn commit: r306458 - head/sys/netinet

2016-09-29 Thread Kurt Lidl
Author: lidl Date: Thu Sep 29 19:45:24 2016 New Revision: 306458 URL: https://svnweb.freebsd.org/changeset/base/306458 Log: Properly preserve ip_tos bits for IPv4 packets Restructure code slightly to save ip_tos bits earlier. Fix the bug where the ip_tos field is zeroed out before

svn commit: r305476 - in stable/11: crypto/openssh secure/usr.sbin/sshd

2016-09-06 Thread Kurt Lidl
crypto/openssh/blacklist.c) == --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ stable/11/crypto/openssh/blacklist.cTue Sep 6 14:52:14 2016 (r305476, copy of r305065, head/crypto/op

svn commit: r305065 - in head: crypto/openssh secure/usr.sbin/sshd

2016-08-30 Thread Kurt Lidl
IVSEP(audit_event(SSH_INVALID_USER)); #endif Added: head/crypto/openssh/blacklist.c == --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/crypto/openssh/blacklist.c Tue Aug 30 14:09:24 2016

svn commit: r304028 - stable/11/contrib/blacklist/lib

2016-08-12 Thread Kurt Lidl
Author: lidl Date: Fri Aug 12 23:27:56 2016 New Revision: 304028 URL: https://svnweb.freebsd.org/changeset/base/304028 Log: MFC r303518: libblacklist: Do not use %m for logging, use strerror(errno) The blacklist library can accept a function to use for logging, defaulting to

svn commit: r304027 - stable/11/usr.bin/resizewin

2016-08-12 Thread Kurt Lidl
Author: lidl Date: Fri Aug 12 23:25:22 2016 New Revision: 304027 URL: https://svnweb.freebsd.org/changeset/base/304027 Log: MFC r303515: Make resizewin.1 manpage use .Fx macro Fix capitalization of "PuTTY" also. Modified: stable/11/usr.bin/resizewin/resizewin.1 Directory

svn commit: r303518 - head/contrib/blacklist/lib

2016-07-29 Thread Kurt Lidl
Author: lidl Date: Fri Jul 29 21:11:32 2016 New Revision: 303518 URL: https://svnweb.freebsd.org/changeset/base/303518 Log: libblacklist: Do not use %m for logging, use strerror(errno) The blacklist library can accept a function to use for logging, defaulting to vsyslog(), if no function

svn commit: r303515 - head/usr.bin/resizewin

2016-07-29 Thread Kurt Lidl
Author: lidl Date: Fri Jul 29 21:05:17 2016 New Revision: 303515 URL: https://svnweb.freebsd.org/changeset/base/303515 Log: Make resizewin.1 manpage use .Fx macro Fix capitalization of "PuTTY" also. MFC after:1 week Modified: head/usr.bin/resizewin/resizewin.1 Modified:

svn commit: r302149 - head/etc/defaults

2016-06-23 Thread Kurt Lidl
Author: lidl Date: Thu Jun 23 19:37:00 2016 New Revision: 302149 URL: https://svnweb.freebsd.org/changeset/base/302149 Log: Add support for a /etc/defaults/vendor.conf override file Reviewed by: stas, imp Approved by: re (gjb) Differential Revision:

svn commit: r301991 - head/release/doc/en_US.ISO8859-1/relnotes

2016-06-17 Thread Kurt Lidl
Author: lidl Date: Fri Jun 17 16:34:25 2016 New Revision: 301991 URL: https://svnweb.freebsd.org/changeset/base/301991 Log: Note ipfilter support in blacklist-helper script in relnotes Approved by: re (gjb) Sponsored by: The FreeBSD Foundation Modified:

svn commit: r301843 - head/contrib/blacklist/libexec

2016-06-12 Thread Kurt Lidl
Author: lidl Date: Sun Jun 12 23:34:48 2016 New Revision: 301843 URL: https://svnweb.freebsd.org/changeset/base/301843 Log: Add ipfilter support to blacklistd-helper In addition to adding initial support for the ipfilter packet filtering system, wrap a few long lines, perform

svn commit: r301797 - head/release/doc/en_US.ISO8859-1/relnotes

2016-06-10 Thread Kurt Lidl
Author: lidl Date: Fri Jun 10 15:05:35 2016 New Revision: 301797 URL: https://svnweb.freebsd.org/changeset/base/301797 Log: Relnotes entries for blacklist project Approved by: re (gjb) Sponsored by: The FreeBSD Foundation Modified:

svn commit: r301736 - head/contrib/blacklist/libexec

2016-06-09 Thread Kurt Lidl
Author: lidl Date: Thu Jun 9 15:19:48 2016 New Revision: 301736 URL: https://svnweb.freebsd.org/changeset/base/301736 Log: Add IPFW support to blacklistd-helper Relnotes: YES Sponsored by: The FreeBSD Foundation Differential Revision:https://reviews.freebsd.org/D6753

svn commit: r301555 - head/contrib/blacklist/bin

2016-06-07 Thread Kurt Lidl
Author: lidl Date: Tue Jun 7 16:51:56 2016 New Revision: 301555 URL: https://svnweb.freebsd.org/changeset/base/301555 Log: Bump dates in blacklist related manpages Reported by: araujo Sponsored by: The FreeBSD Foundation Modified: head/contrib/blacklist/bin/blacklistctl.8

svn commit: r301554 - head/tools/build/options

2016-06-07 Thread Kurt Lidl
Author: lidl Date: Tue Jun 7 16:35:55 2016 New Revision: 301554 URL: https://svnweb.freebsd.org/changeset/base/301554 Log: Document BLACKLIST related build options Reported by: bdrewery Sponsored by: The FreeBSD Foundation Added: head/tools/build/options/WITHOUT_BLACKLIST

svn commit: r301553 - in head: etc etc/rc.d lib libexec tools/build/mk usr.sbin

2016-06-07 Thread Kurt Lidl
Author: lidl Date: Tue Jun 7 16:31:03 2016 New Revision: 301553 URL: https://svnweb.freebsd.org/changeset/base/301553 Log: Separate BLACKLIST vs BLACKLIST_SUPPORT properly Sponsored by: The FreeBSD Foundation Modified: head/etc/Makefile head/etc/rc.d/Makefile head/lib/Makefile

svn commit: r301552 - head/contrib/blacklist/bin

2016-06-07 Thread Kurt Lidl
Author: lidl Date: Tue Jun 7 16:26:34 2016 New Revision: 301552 URL: https://svnweb.freebsd.org/changeset/base/301552 Log: Note blacklist support first appeared in FreeBSD 11 Reported by: jbeich Sponsored by: The FreeBSD Foundation Modified: head/contrib/blacklist/bin/blacklistctl.8

svn commit: r301551 - in head: crypto/openssh secure/usr.sbin/sshd

2016-06-07 Thread Kurt Lidl
Author: lidl Date: Tue Jun 7 16:18:09 2016 New Revision: 301551 URL: https://svnweb.freebsd.org/changeset/base/301551 Log: Add blacklist support to sshd Reviewed by: rpaulo Approved by: rpaulo (earlier version of changes) Relnotes: YES Sponsored by: The FreeBSD Foundation

svn commit: r301517 - head/libexec/ftpd

2016-06-06 Thread Kurt Lidl
Author: lidl Date: Mon Jun 6 20:00:13 2016 New Revision: 301517 URL: https://svnweb.freebsd.org/changeset/base/301517 Log: Update blacklist support in ftpd to clarify fd usage The ftp daemon dups the control socket to stdin and uses that fd throughout the code. Clarify this usage

Re: svn commit: r301226 - in head: etc etc/defaults etc/periodic/security etc/rc.d lib lib/libblacklist libexec libexec/blacklistd-helper share/mk tools/build/mk usr.sbin usr.sbin/blacklistctl usr.sbi

2016-06-06 Thread Kurt Lidl
On 6/6/16 1:22 PM, Ian Lepore wrote: No, it should still not be enabled by default. Maybe it should be enabled in response to some question in the installer, or maybe even better, enabled only if some firewall software that understands it is also enabled. But afaik, all the available firewalls

svn commit: r301515 - head/etc/defaults

2016-06-06 Thread Kurt Lidl
Author: lidl Date: Mon Jun 6 17:01:35 2016 New Revision: 301515 URL: https://svnweb.freebsd.org/changeset/base/301515 Log: Turn off blacklistd daemon in defaults Reported by: Matteo Riondato ( matteo @ FreeBSD.org ) Reviewed by: rpaulo Approved by: rpaulo Relnotes: YES

Re: svn commit: r301226 - in head: etc etc/defaults etc/periodic/security etc/rc.d lib lib/libblacklist libexec libexec/blacklistd-helper share/mk tools/build/mk usr.sbin usr.sbin/blacklistctl usr.sbi

2016-06-06 Thread Kurt Lidl
On 6/5/16 2:39 PM, Matteo Riondato wrote: On Jun 2, 2016, at 3:06 PM, Kurt Lidl <l...@freebsd.org> wrote: Author: lidl Date: Thu Jun 2 19:06:04 2016 New Revision: 301226 URL: https://svnweb.freebsd.org/changeset/base/301226 Log: Add basic blacklist build support [snip] Modified

svn commit: r301417 - head/libexec/rlogind

2016-06-04 Thread Kurt Lidl
Author: lidl Date: Sun Jun 5 01:42:58 2016 New Revision: 301417 URL: https://svnweb.freebsd.org/changeset/base/301417 Log: Add blacklist support to rlogind Reviewed by: rpaulo Approved by: rpaulo Sponsored by: The FreeBSD Foundation Differential Revision:

svn commit: r301415 - head/tools/build/mk

2016-06-04 Thread Kurt Lidl
Author: lidl Date: Sun Jun 5 01:40:08 2016 New Revision: 301415 URL: https://svnweb.freebsd.org/changeset/base/301415 Log: Correct path for blacklistd.conf in OptionalObsoleteFiles.inc Fix typo made when adding the blacklistd.conf file to OptionalObsoleteFiles.inc Submitted by:

svn commit: r301243 - head/libexec/fingerd

2016-06-03 Thread Kurt Lidl
Author: lidl Date: Fri Jun 3 07:00:28 2016 New Revision: 301243 URL: https://svnweb.freebsd.org/changeset/base/301243 Log: Add blacklist support to fingerd Reviewed by: rpaulo Approved by: rpaulo Relnotes: YES Sponsored by: The FreeBSD Foundation Differential Revision:

svn commit: r301242 - head/libexec/rshd

2016-06-03 Thread Kurt Lidl
Author: lidl Date: Fri Jun 3 06:58:20 2016 New Revision: 301242 URL: https://svnweb.freebsd.org/changeset/base/301242 Log: Add blacklist support to rshd Reviewed by: rpaulo Approved by: rpaulo Relnotes: YES Sponsored by: The FreeBSD Foundation Differential Revision:

svn commit: r301241 - head/libexec/ftpd

2016-06-03 Thread Kurt Lidl
e FreeBSD Foundation + * All rights reserved. + * + * This software was developed by Kurt Lidl under sponsorship from the + * FreeBSD Foundation. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that the following condition

svn commit: r301240 - in head: tools/build/mk usr.sbin/blacklistd

2016-06-03 Thread Kurt Lidl
Author: lidl Date: Fri Jun 3 06:15:52 2016 New Revision: 301240 URL: https://svnweb.freebsd.org/changeset/base/301240 Log: Add blacklistd.conf manpage Install the blacklistd.conf man page, missed in the original commit. Submitted by: Herbert J. Skuhra ( herbert at mailbox.org )

svn commit: r301226 - in head: etc etc/defaults etc/periodic/security etc/rc.d lib lib/libblacklist libexec libexec/blacklistd-helper share/mk tools/build/mk usr.sbin usr.sbin/blacklistctl usr.sbin...

2016-06-02 Thread Kurt Lidl
== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/etc/rc.d/blacklistd Thu Jun 2 19:06:04 2016(r301226) @@ -0,0 +1,45 @@ +#!/bin/sh +# +# Copyright (c) 2016 The FreeBSD Foundation +#

svn commit: r301219 - head/contrib/blacklist/bin

2016-06-02 Thread Kurt Lidl
Author: lidl Date: Thu Jun 2 18:25:32 2016 New Revision: 301219 URL: https://svnweb.freebsd.org/changeset/base/301219 Log: Fixup path in NetBSD supplied documentation for FreeBSD NetBSD installs the blacklist-helper script in /libexec, and it goes into /usr/libexec on FreeBSD. Update

svn commit: r301169 - in vendor/NetBSD/blacklist: . dist dist/bin dist/diff dist/etc dist/etc/rc.d dist/include dist/lib dist/libexec dist/port dist/port/m4 dist/test

2016-06-02 Thread Kurt Lidl
Author: lidl Date: Wed Jun 1 21:48:22 2016 New Revision: 301169 URL: https://svnweb.freebsd.org/changeset/base/301169 Log: Reviewed by: rpaulo Approved by: rpaulo Obtained from:NetBSD external/bsd/blacklist @ 20160409 Relnotes: YES Sponsored by: The FreeBSD

svn commit: r301172 - head/contrib/blacklist

2016-06-02 Thread Kurt Lidl
Author: lidl Date: Wed Jun 1 22:04:10 2016 New Revision: 301172 URL: https://svnweb.freebsd.org/changeset/base/301172 Log: Import NetBSD's blacklist source from vendor tree This import includes The basic blacklist library and utility programs, to add a system-wide packet filtering

svn commit: r301170 - vendor/NetBSD/blacklist/20160409

2016-06-02 Thread Kurt Lidl
Author: lidl Date: Wed Jun 1 21:52:12 2016 New Revision: 301170 URL: https://svnweb.freebsd.org/changeset/base/301170 Log: Tag import of NetBSD's external/bsd/blacklist Reviewed by: rpaulo Approved by: rpaulo Sponsored by: The FreeBSD Foundation Added:

svn commit: r300980 - head

2016-05-29 Thread Kurt Lidl
Author: lidl Date: Mon May 30 02:09:19 2016 New Revision: 300980 URL: https://svnweb.freebsd.org/changeset/base/300980 Log: Remove extraneous altq header files At some point during stable/10, the headers altq_codel.h and altq_fairq.h where added to /usr/include/altq, before all of altq

Re: svn commit: r299090 - in head: etc/mtree include lib/libbluetooth sbin/hastd share/man/man3 sys/dev/xen/blkback sys/kern sys/net sys/sys tests/sys tests/sys/sys usr.sbin/bluetooth/hccontrol

2016-05-23 Thread Kurt Lidl
On 5/23/16 4:30 PM, Alan Somers wrote: On Fri, May 6, 2016 at 8:45 AM, Kurt Lidl <l...@pix.net <mailto:l...@pix.net>> wrote: On 5/5/16 12:31 PM, John Baldwin wrote: On Wednesday, May 04, 2016 10:34:11 PM Alan Somers wrote: Author: asomers Date

Re: svn commit: r299090 - in head: etc/mtree include lib/libbluetooth sbin/hastd share/man/man3 sys/dev/xen/blkback sys/kern sys/net sys/sys tests/sys tests/sys/sys usr.sbin/bluetooth/hccontrol

2016-05-06 Thread Kurt Lidl
On 5/5/16 12:31 PM, John Baldwin wrote: On Wednesday, May 04, 2016 10:34:11 PM Alan Somers wrote: Author: asomers Date: Wed May 4 22:34:11 2016 New Revision: 299090 URL: https://svnweb.freebsd.org/changeset/base/299090 Log: Improve performance and functionality of the bitstring(3) api

svn commit: r296873 - head/usr.bin/finger

2016-03-14 Thread Kurt Lidl
Author: lidl Date: Mon Mar 14 22:20:22 2016 New Revision: 296873 URL: https://svnweb.freebsd.org/changeset/base/296873 Log: Do not truncate office phones in finger's summary listing When finger is invoked as as "finger username", it produces the long listing by default, and phones

svn commit: r296423 - head/lib/libc/db/db

2016-03-05 Thread Kurt Lidl
Author: lidl Date: Sun Mar 6 04:38:08 2016 New Revision: 296423 URL: https://svnweb.freebsd.org/changeset/base/296423 Log: Allow O_CLOEXEC to be used in dbopen() flags There is also a small portability crutch, also present in NetBSD, to allow compiling on a system that doesn't define

  1   2   >