Tweak ordering of certificates tried during pubkey authentication
to prefer FIDO keys that do not require user presence (touch) first,
followed by ones that do and with FIDO keys that require user
verification via PIN or biometrics last.
This effectively tries low-friction authenticators before higher
friction authenticators.
ok dtucker@
Add a "ssh -Z user at host" mode that dumps the pubkeys that will
be tried for authentication in the order that they will be used.
feedback tb@ ok dtucker@
Eliminate holding raw shmseg over sleep-window in uvm_unmap
This simplifies the code back to almost the way it was in
rev 1.80 except the shmsegs are changed before any sleep is
possible. This still avoids the double free except via code
structure instead of extra variable carrying the decision.
OK millert@
Reported-by: syzbot+f2c08abe216302bc63d6 at syzkaller.appspotmail.com
libm: make use of __builtin_cpu_supports() on i386
libm checks at runtime whether the CPU supports SSE. The compiler
runtime on x86 now provides a CPU feature array that we can test with
__builtin_cpu_supports().