HardenedBSD/src 2c71e23 — . ObsoleteFiles.inc, cddl/usr.bin/zstream Makefile

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+19-18sys/net/iflib.c
+20-17sys/dev/e1000/if_em.c
+26-2sys/fs/devfs/devfs_vnops.c
+13-0ObsoleteFiles.inc
+7-1sys/kern/uipc_shm.c
+6-0cddl/usr.bin/zstream/Makefile
+91-387 files not shown
+106-3913 files

HardenedBSD/src 9320074 — lib/libpam/modules/pam_ssh pam_ssh.c

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+1-1lib/libpam/modules/pam_ssh/pam_ssh.c
+1-11 files

HardenedBSD/src 3da4c70 — . ObsoleteFiles.inc, cddl/usr.bin/zstream Makefile

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+19-18sys/net/iflib.c
+20-17sys/dev/e1000/if_em.c
+26-2sys/fs/devfs/devfs_vnops.c
+13-0ObsoleteFiles.inc
+7-1sys/kern/uipc_shm.c
+6-0cddl/usr.bin/zstream/Makefile
+91-387 files not shown
+106-3913 files

HardenedBSD/src b849d20 — lib/libpam/modules/pam_ssh pam_ssh.c

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+1-1lib/libpam/modules/pam_ssh/pam_ssh.c
+1-11 files

HardenedBSD/src 4abfb45 — sys/amd64/linux syscalls.master linux_systrace_args.c, sys/arm64/linux syscalls.master linux_systrace_args.c

Revert "linux: implement fchmodat2 syscall"

This got accidentally committed when I was reverting another commit.

This reverts commit c070ec923e2f49b6ecb5a60b584ba8f4376a6e80.
DeltaFile
+1-25sys/i386/linux/linux_systrace_args.c
+1-25sys/arm64/linux/linux_systrace_args.c
+1-25sys/amd64/linux/linux_systrace_args.c
+0-22sys/compat/linux/linux_file.c
+2-7sys/arm64/linux/syscalls.master
+2-7sys/amd64/linux/syscalls.master
+7-1118 files not shown
+20-13614 files

HardenedBSD/src 32f5a9f — sys/compat/linux linux_dummy.c linux_misc.h

Revert "linux: implement sched_getattr()"

The changes need to be reviewed further; revert until the issues have
been worked out.

Requested by:   markj
This reverts commit bb5f10e51bd53771f1a438f36f554256fcbd7d08.
DeltaFile
+0-89sys/compat/linux/linux_misc.c
+2-17sys/compat/linux/linux_misc.h
+1-0sys/compat/linux/linux_dummy.c
+3-1063 files

HardenedBSD/src c070ec9 — sys/amd64/linux syscalls.master linux_systrace_args.c, sys/arm64/linux syscalls.master linux_systrace_args.c

linux: implement fchmodat2 syscall

The fchmodat2 syscall on Linux is effectively the same as the fchmodat
on FreeBSD, whereas fchmodat on Linux is fchmodat on FreeBSD, minus
the `flags` argument.

This change provides the necessary glue in order to call kern_fchmodat
properly via the Linuxulator.

NB: glibc transparently passes through the `flags` argument, so this is
[largely] a no-op for end-users, but it affects those who compiled
binaries specifically using the fchmodat2 syscall.

MFC after:      2 weeks
Differential Revision:  https://reviews.freebsd.org/D60394
DeltaFile
+25-1sys/i386/linux/linux_systrace_args.c
+25-1sys/arm64/linux/linux_systrace_args.c
+25-1sys/amd64/linux/linux_systrace_args.c
+22-0sys/compat/linux/linux_file.c
+7-2sys/arm64/linux/syscalls.master
+7-2sys/amd64/linux/syscalls.master
+111-78 files not shown
+136-2014 files

HardenedBSD/src d8dfbeb — sys/kern uipc_shm.c

uiomove_object_page: a failed copy can still dirty the page

For writes, if we fail in the middle of reading from the source, the
destination may have already been dirtied.  For example, the source may
cross a page boundary, and the second page is inaccessible.
Conservatively mark the destination as dirty, even on errors.

Reported by:    Claude (Opus 5.5)
Reviewed by:    kib, markj
MFC after:      1 week
Differential Revision:  https://reviews.freebsd.org/D60280
DeltaFile
+7-1sys/kern/uipc_shm.c
+7-11 files

HardenedBSD/src 1d8c5f8 — sys/kern kern_sendfile.c

sendfile: Fix build for kernels without INET or INET6

Don't cap the new low watermark to a TCP-specific setting in kernels
without TCP.

Fixes:          6948f4d5e2b2 ("sendfile: keep the lowat hack more conservative")
DeltaFile
+4-0sys/kern/kern_sendfile.c
+4-01 files

HardenedBSD/src c907302 — cddl/usr.bin/zstream Makefile

zstream: Downgrade -Watomic-alignment to a warning

Don't complain about unaligned atomic operations on i386.  This
same approach is already used for libspl.
DeltaFile
+6-0cddl/usr.bin/zstream/Makefile
+6-01 files

HardenedBSD/src 41c078c — lib/libpam/modules/pam_ssh pam_ssh.c

pam_ssh: Fix build - chase OpenSSH function signature change

Reported by: dch
Fixes: 644b4646c7ac ("OpenSSH: Update to 10.1p1")
Sponsored by: The FreeBSD Foundation

(cherry picked from commit b76b05c04cc9ed2cd053c7b367c92628447ede6f)
DeltaFile
+1-1lib/libpam/modules/pam_ssh/pam_ssh.c
+1-11 files

HardenedBSD/src 1e595e9 — sys/fs/devfs devfs_vnops.c

devfs_open: do not access dsw after dev_relthread()

Noted and reviewed by:  markj
Fixes:  850d4562928e ("cdevsw: add D_NONPASSABLE flag")
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D60393
DeltaFile
+3-2sys/fs/devfs/devfs_vnops.c
+3-21 files

HardenedBSD/src 66db73a — stand/images freebsd-logo-rev.png

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+0-0stand/images/freebsd-logo-rev.png
+0-01 files

HardenedBSD/src 63b6fbc — stand/images freebsd-logo-rev.png

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+0-0stand/images/freebsd-logo-rev.png
+0-01 files

HardenedBSD/src a5ae2a9 — sys/kern kern_jaildesc.c

jaildesc: Lock prison pointer when filling kinfo

Submitted by:   Yuri Tkachenko <yura.tkachenko at gmail.com>
MFC after:      3 days
Differential Revision:  https://reviews.freebsd.org/D60392
DeltaFile
+2-0sys/kern/kern_jaildesc.c
+2-01 files

HardenedBSD/src bb5f10e — sys/compat/linux linux_dummy.c linux_misc.h

linux: implement sched_getattr()

This change adds the necessary glue to translate Linux scheduler policy
and priority from FreeBSD so this information is available to Linux
applications.

This unbreaks using the Linux version of Chromium on FreeBSD.

This change was originally submitted via [freebsd/freebsd-src#2370][github-pr].

MFC after:      2 weeks
PR:     297468
Co-Authored-By: Enji Cooper <ngie at FreeBSD.org>
Signed-off-by:  Joao Bonifacio <joaoboni017 at gmail.com>

[github-pr]: https://github.com/freebsd/freebsd-src/pull/2370

Differential Revision:  https://reviews.freebsd.org/D60214
DeltaFile
+89-0sys/compat/linux/linux_misc.c
+17-2sys/compat/linux/linux_misc.h
+0-1sys/compat/linux/linux_dummy.c
+106-33 files

HardenedBSD/src 4bb6015 — sys/netinet in.c, sys/netinet6 in6.c

netinet: Deprecate OSIOCAIFADDR and OSIOCAIFADDR_IN6

Requested by:   glebius
Reviewed by:    pouria, glebius
MFC after:      1 week
Sponsored by:   The FreeBSD Foundation
Differential Revision:  https://reviews.freebsd.org/D60247
DeltaFile
+3-0sys/netinet/in.c
+2-0sys/netinet6/in6.c
+5-02 files

HardenedBSD/src 499901d — sys/ufs/ffs ffs_suspend.c

ufssuspend(4): mark non-passable

This fixes long-standing issue where ufssuspend file descriptor could
leak over fork or be passed over unix domain socket, and then closing it
in the opener would not unsuspend the file system.

It should not affect the well-behaving growfs(8) utility, but makes the
userspace API safer on principle.

Reviewed by:    markj
Tested by:      pho (previous version)
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D60285
DeltaFile
+1-0sys/ufs/ffs/ffs_suspend.c
+1-01 files

HardenedBSD/src 850d456 — sys/fs/devfs devfs_vnops.c, sys/sys conf.h

cdevsw: add D_NONPASSABLE flag

to make the opened device files non-passable.

Reviewed by:    markj
Tested by:      pho (previous version)
Sponsored by:   The FreeBSD Foundation
MFC after:      1 week
Differential revision:  https://reviews.freebsd.org/D60285
DeltaFile
+25-2sys/fs/devfs/devfs_vnops.c
+2-0sys/sys/conf.h
+27-22 files

HardenedBSD/src 481447a — sys/dev/e1000 if_em.c

e1000: Fix the flow control sysctl

dev.em.N.fc and dev.igb.N.fc read and wrote a function-static variable
shared by every em(4) and igb(4) device, so a read returned the last
value written to any of them (3 until the first write), not the state of
the device.  The softc value started as 0, which is also the value of
"no flow control", while the hardware was set up for full flow control.
As a result:

- Writing 0 was taken for no change and did nothing, unless another
  value had been written to that device before.
- em_reset() took a softc value of 0 for "not set", so a device set to 0
  went back to full flow control on the next init.
- On igb(4) with more than one receive queue the driver enabled
  per-queue drop (SRRCTL.DROP_EN), which is meant for a MAC that does
  not send pause frames, although the MAC was told to send them.
- Values out of range were accepted and ignored.

A write only forced the MAC's flow control bits.  The pause bits

    [18 lines not shown]
DeltaFile
+20-17sys/dev/e1000/if_em.c
+20-171 files

HardenedBSD/src b45d14d — share/mk sys.mk

sys.mk: CTFMERGE: don't assume objfiles always have CTF sections

There are many instances, e.g. in the kernel, where
object files don't have CTF sections, but still need
to be merged into one that does have a CTF section.

This fixes cases like the following:

--------------------------------------------------------------
>>> stage 3.1: building everything
--------------------------------------------------------------

linking kernel.full
ctfmerge -t -L VERSION -g -o kernel.full ...
ERROR: ctfmerge: Input file force-dynamic-hack.pico was partially built from C sources, but no CTF data was present
Removing kernel.full

    kernel.full ---
    [kernel.full] Error code 1

    [8 lines not shown]
DeltaFile
+1-1share/mk/sys.mk
+1-11 files

HardenedBSD/src 152dd1a — . ObsoleteFiles.inc

ObsoleteFiles.inc: add more obsolete files
DeltaFile
+13-0ObsoleteFiles.inc
+13-01 files

HardenedBSD/src 98cd53b — stand/images freebsd-logo-rev.png

stand/images: remove translucent pixels around orb

Remove semi-transparent pixels around the orb. These become more
pronounced when the orb is used as the spash screen image.

While here also strip metadata.

MFC after:      3 days
Reviewed by:    tsoome
Differential Revision:  https://reviews.freebsd.org/D60163

(cherry picked from commit f7663278c2ba527dc681b1a806d4cc78ea49452b)
DeltaFile
+0-0stand/images/freebsd-logo-rev.png
+0-01 files

HardenedBSD/src ac24108 — sys/net iflib.c

iflib: Make the deferral test in iflib_txd_db_check() an early return

Invert the test so the doorbell write is no longer nested inside the
conditional, and wrap its comments to 80 columns.  Fix a typo in one of
them.

No functional change intended.

Reviewed by:            kbowling
Sponsored by:           Rubicon Communications, LLC ("Netgate")
Differential Revision:  https://reviews.freebsd.org/D60371
DeltaFile
+19-18sys/net/iflib.c
+19-181 files

HardenedBSD/src fcdf4d4 — sys/arm64/arm64 gicv5_acpi.c busdma_bounce.c, sys/arm64/include bus_dma.h

Merge remote-tracking branch 'rad/hardened/current/master' into hardened/current/pledge
DeltaFile
+65-15sys/arm64/arm64/busdma_bounce.c
+16-16sys/dev/igc/if_igc.c
+9-13sys/netinet/tcp_subr.c
+14-3sys/arm64/arm64/gicv5_acpi.c
+13-0sys/compat/linuxkpi/common/include/linux/crc16.h
+8-4sys/arm64/include/bus_dma.h
+125-519 files not shown
+156-6015 files

HardenedBSD/src c7b2026 — crypto/openssh sshkey-xmss.c pkcs11.h

Merge remote-tracking branch 'rad/hardened/15-stable/main' into hardened/15-stable/pledge
DeltaFile
+27,332-0crypto/openssh/libcrux_internal.h
+8,114-4,431crypto/openssh/ChangeLog
+0-12,338crypto/openssh/libcrux_mlkem768_sha3.h
+1,586-624crypto/openssh/servconf.c
+1,018-474crypto/openssh/pkcs11.h
+0-1,113crypto/openssh/sshkey-xmss.c
+38,050-18,980440 files not shown
+55,728-30,077446 files

HardenedBSD/src e936b07 — sys/arm64/arm64 gicv5_acpi.c busdma_bounce.c, sys/arm64/include bus_dma.h

Merge branch 'freebsd/current/main' into hardened/current/master
DeltaFile
+65-15sys/arm64/arm64/busdma_bounce.c
+16-16sys/dev/igc/if_igc.c
+9-13sys/netinet/tcp_subr.c
+14-3sys/arm64/arm64/gicv5_acpi.c
+13-0sys/compat/linuxkpi/common/include/linux/crc16.h
+8-4sys/arm64/include/bus_dma.h
+125-519 files not shown
+156-6015 files

HardenedBSD/src ca1a098 — crypto/openssh sshkey-xmss.c pkcs11.h

Merge branch 'freebsd/15-stable/main' into hardened/15-stable/main
DeltaFile
+27,332-0crypto/openssh/libcrux_internal.h
+8,114-4,431crypto/openssh/ChangeLog
+0-12,338crypto/openssh/libcrux_mlkem768_sha3.h
+1,586-624crypto/openssh/servconf.c
+1,018-474crypto/openssh/pkcs11.h
+0-1,113crypto/openssh/sshkey-xmss.c
+38,050-18,980440 files not shown
+55,728-30,077446 files

HardenedBSD/src e89c3ac — sys/dev/acpica/Osd OsdSchedule.c

acpi: Tasks: Document why 'acpi_task_count' is accessed unsynchronized

MFC after:      3 days
Sponsored by:   The FreeBSD Foundation
DeltaFile
+1-0sys/dev/acpica/Osd/OsdSchedule.c
+1-01 files

HardenedBSD/src f0825f7 — sys/dev/acpica/Osd OsdSchedule.c

acpi: Tasks: Make OsdSchedule.c whitespace clean

MFC after:      3 days
Sponsored by:   The FreeBSD Foundation
DeltaFile
+1-1sys/dev/acpica/Osd/OsdSchedule.c
+1-11 files