sysutils/cfengine-masterfiles328: Version 3.28.0 for real
When this port was copied from 327 I had neglected to commit the
3.28.0 update. We do it for real now.
Fixes: 433f99225c25
sysutils/py-ansible-core*: Deprecate and expire older than N-1
The latest ansible-core does not contain incompatibilities that require
users to remain on older versions of ansible-core. Deprecate and
expire.
sysutils/cfengine*: Deprecate and expire older than N-1
And adjust the deprecation message and expiry date for those cfengine
ports already deprecation and sheduled for removal.
Do not import symlinks from non-pkg package builds
The package phase lets the jail build user write to a host-backed
/.npkg directory. build_port() imported every file and symlink from
that directory into the host package repository. An absolute symlink
changes meaning at this boundary: it points inside the jail while
mounted but at the host after import.
Only the pkg bootstrap variants need package-manager compatibility
links. Process those links before their targets and reject any that
resolve outside staging. Import only regular files for other ports,
preventing their build output from introducing host-resolved symlinks
into the repository.
chflags.1: Change dontcache to nocache
Commit 290e563166b4 changed the flag's name from dontcache
to nocache. This patch fixes the man page.
This is a content change.
Reviewed by: kib (earlier version)
MFC after: 2 weeks
Differential Revision: https://reviews.freebsd.org/D58181
Fixes: 4830670a3f94 ("chflags.1: Document the new UF_DONTCACHE flag")
chflags: Add a new UF_NOCACHE flag
This internet draft (which is close to being an RFC)
specifies a new NFSv4.2 attribute which tells the NFSv4.2
client to not cache file data. (Similar to O_DIRECT, but
triggered by this attribute set on the file on the NFSv4.2
server and not by the application's open(2).)
https://datatracker.ietf.org/doc/draft-ietf-nfsv4-uncacheable-files/
This patch adds a new chflags(1) flag called UF_NOCACHE to
implement this.
Patches for NFS and ZFS will be done separately.
This is a redo of the patch, with a requested name change
and a #ifdef in strtofflags.c so that it doesn't break some
Linux cross build. The name change was requested by fuz@.
[3 lines not shown]
games/doomlegacy: update Doom Legacy to version 1.48.18 (rev1749)
- HAVE_LIBZIP and HAVE_ZLIB are now set by default for *nix
builds, adjust the port's Makefile accordingly
- Version 1.48.16 had been skipped due to a broken save game
(corrupted) and the MBF21 support did not work right
Reported by: portscout
Reject untrusted poudriered log paths
Poudriered allowed any client-authorized command to specify a log
path. The root daemon created its parent directories and opened the
path with O_TRUNC.
Reject log fields on client requests. Preserve configured schedule
logs, use a root-owned /var/log fallback, and refuse to follow final
symlinks when opening logs.
(cherry picked from commit 01d5de2876a23701e41957826cd8115702c41684)
xhci: Only reset the data toggle value when the USB stack asks for it
The previous patch assumes that we don't want to reset toggle bit in
STOPPED_STEP. However, a device can explicitly call
usbd_clear_data_toggle if necessary. As a result, instead of not
dropping the bit unconditionally, we added a field in xhci to specify
that we want to drop it, so that usbd_clear_data_toggle can handle it
correctly.
Reported by: oh
Reviewed by: kevans
Tested by: oh
Fixes: 28d85db46b48 ("xhci: Do not drop and add bits in xhci")
MFC after: 3 days
Differential Revision: https://reviews.freebsd.org/D59186
net/cloudquery: fix build on 32 bit architectures
Compilation failed on 32 bit archtectures with the following error
message:
vendor/github.com/cloudquery/plugin-sdk/v4/schema/testdata.go:463:27:
3600000000 (untyped int constant) overflows int
vendor/github.com/cloudquery/plugin-sdk/v4/schema/testdata.go:467:27:
3600000000000 (untyped int constant) overflows int
vendor/github.com/cloudquery/plugin-sdk/v4/schema/testdata.go:467:45:
60000000000 (untyped int constant) overflows int
The reason is that strconv.Itoa() accepts only 32 bit arguments.
Attempt to fix by conversion of strconv.Itoa() to strconv.FormatInt()
with native int variables casted to 64 integers.
[NEW PORT] security/open-vulnerability-cli: CLI to query various online vulnerability sources
The open-vulnerability-cli is a command line utility that can be
used to query various online vulnerability sources such as the NVD
or GHSA. The CLI and docker images can be used to mirror the NVD.
Note that the CLI is called vulnz because open-vulnerability-cli
is cumbersome. vulnz is a spring-boot command line utility built
with picocli.
Co-authored-by: Michael Osipov <michaelo at FreeBSD.org>
PR: 296276