internal/resources: Expand the commit bit and resources policy
Elaborate on how the core team delegates management of
repository-specific resources, such as commit bits, to the responsible
teams.
Add guidelines for suspending or revoking a commit bit: except where
circumstances justify immediate action, teams are expected to contact
the committer and provide an opportunity to address the problem before
acting, and to inform both the committer and the core team when a commit
bit is suspended or revoked.
Reviewed by: core (adrian, imp)
Sponsored by: The FreeBSD Foundation
Differential Revision: https://reviews.freebsd.org/D58830
linux: add dma-buf and sync_file ioctl handlers
drm-kmod already implements the dma-buf and sync_file ioctls, but
linux_ioctl.c had no handler group for the 'b' and '>' magic bytes, so
the requests never reached it and returned EINVAL from
linux_ioctl_fallback(). Route the commands drm-kmod services to
sys_ioctl(), translating the direction bits with SETDIR(); everything
else still falls through to the fallback and keeps getting named in
dmesg.
Approved-by: adrian
Accepted-by: dumbbell
Signed-off-by: Nick Price <nprice at FreeBSD.org>
(cherry picked from commit d6a7e89504af337413af39fd121026f512c0a35d)
net/freeipa-server: Add New Port
FreeIPA is an integrated identity and authentication solution: an LDAP
directory (389 Directory Server), a Kerberos KDC (MIT krb5), a Dogtag
PKI certificate authority and a web UI/CLI, combined into a single managed
domain, the Free Software counterpart to Active Directory.
This port provides the FreeIPA server on FreeBSD together with the
FreeBSD-specific integration that upstream (Linux/systemd oriented) does
not ship: an ipaplatform "freebsd" backend, rc.d service scripts, and
the glue required to run the whole stack against the ports MIT Kerberos
(security/krb5).
WWW: https://www.freeipa.org/
Sponsored by: Netzkommune GmbH
bcm2835_audio: Comment out vchi_service_release()
bcm2835_audio_release() calls vchi_service_close() and then
unconditionally calls vchi_service_release() with the same service
handle.
In the VCHI shim implementation, a successful vchi_service_close() calls
service_free(service). The subsequent vchi_service_release() therefore
dereferences a freed SHIM_SERVICE_T object when it reads
service->handle, resulting in a use-after-free panic.
vchi_service_release(), however, releases a reference which might block
vchi_service_close() from completing successfuly, so comment it out
instead of removing it altogether, until further testing is done.
PR: 297187
MFC after: 2 weeks
Reviewed by: markj
Differential Revision: https://reviews.freebsd.org/D58921
bhyve: Add SPDX-License-Identifier tag
Reviewed by: emaste
Sponsored by: The FreeBSD Foundation
(cherry picked from commit 499d0f04f55e52327d624d27ead3a0d16e3b465a)
