Move banner exchange to sshd-auth process
Previously, exchange of the initial SSH- banners was performed
by the privileged sshd-session monitor. This moves it to the
unprivileged sshd-auth subprocess, removing ~200 LoC from the
monitor's privileged attack surface.
The monitor gains a new "setcompat" RPC to allow sshd-auth to
inform it of bug compat flags picked up from the client's banner.
feedback dtucker@, ok markus@ deraadt@
These programs are using pledge "tmppath" with "rpath wpath cpath".
The "tmppath" is not needed.
from deraadt@; ok semarie and others
this is errata/7.7/023_tmppath.patch.sig
These programs are using pledge "tmppath" with "rpath wpath cpath".
The "tmppath" is not needed.
from deraadt@; ok semarie and others
this is errata/7.8/017_tmppath.patch.sig
long overdue update to povray-3.7.0.10, with some libc++ fixes borrowed
from FreeBSD ports. (apart from anything else, this fixes a crash in
at least some situations in the unix path normalisation code, which is
what prompted me to look at it..)
update to py3-bleach-6.3.0
relax version spec on tinycss2 (there is a tight spec in bleach, however
this is only used when installing e.g. via pip as "bleach[css]" to pull
in the dep; otherwise there isn't a version check).
"fine with me if you've tested it all" daniel@ (I've tested as far as
I can with dependent ports and it all seems ok)
Like most fancy new languages, it is greedy and eats up all CPUs slots it can.
Since we cant turn off parallel in the build system, at least register the
build slots
OK jasper@ (MAINTAINER)
update to hiawatha-12.0
revisit PERMIT_PACKAGE decision; only development branches of mbedtls
are Apache 2.0-only; this uses an LTS branch which is dual Apache/GPLv2+
