svn commit: r327317 - in head/lib/libutil: . tests

Author: robak (ports committer) Date: Thu Dec 28 22:57:34 2017 New Revision: 327317 URL: https://svnweb.freebsd.org/changeset/base/327317 Log: humanize_number(3): fix math edge case in rounding large numbers Fix for remainder overflow, when in rare cases adding remainder to divider exceed

svn commit: r320674 - head/usr.sbin/bsdinstall/scripts

allows users to change this behaviour to secure one and updates stack guard option so it would set the value of relevant sysctl to 512 (2MB) Submitted by: Bartek Rutkowski Reviewed by: adrian, bapt, emaste Approved by: bapt, emaste MFC after:1 day Sponsored by: Pixeware LTD

Re: svn commit: r320674 - head/usr.sbin/bsdinstall/scripts

> On 5 Jul 2017, at 18:15, Konstantin Belousov wrote: > > On Wed, Jul 05, 2017 at 01:37:27PM +0000, Bartek Rutkowski wrote: >> This patch adds new bsdinstall option to hardening section that allows users >> to change this behaviour to secure one and updates stack guard o

Re: svn commit: r320674 - head/usr.sbin/bsdinstall/scripts

> On 5 Jul 2017, at 21:05, Konstantin Belousov wrote: > > On Wed, Jul 05, 2017 at 08:52:37PM +0100, Bartek Rutkowski wrote: >> >>> On 5 Jul 2017, at 18:15, Konstantin Belousov wrote: >>> >>> On Wed, Jul 05, 2017 at 01:37:27PM +, Bartek Rutkowski

Re: svn commit: r320674 - head/usr.sbin/bsdinstall/scripts

feels like correcting it in meantime - you're more than welcome. Kind regards, Bartek Rutkowski ___ svn-src-head@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/svn-src-head To unsubscribe, send any mail to "svn-src-head-unsubscr...@freebsd.org"

svn commit: r320732 - head/usr.sbin/bsdinstall/scripts

Author: robak (ports committer) Date: Thu Jul 6 12:19:15 2017 New Revision: 320732 URL: https://svnweb.freebsd.org/changeset/base/320732 Log: usr.sbin/bsdinstall/scripts/hardening: fix options numbers Submitted by: Bartek Rutkowski Reviewed by: bapt Approved by: bapt MFC after

svn commit: r308810 - head/bin/dd

Author: robak (ports committer) Date: Fri Nov 18 21:09:57 2016 New Revision: 308810 URL: https://svnweb.freebsd.org/changeset/base/308810 Log: Capsicum support for dd(1) Adds Capsicum sandboxing to dd utility. Submitted by: Pawel Biernacki Reviewed by: allanjude, emaste, oshogbo

svn commit: r309735 - head/bin/dd

Author: robak (ports committer) Date: Fri Dec 9 14:51:05 2016 New Revision: 309735 URL: https://svnweb.freebsd.org/changeset/base/309735 Log: Capsicum support for dd(1) Adds Capsicum sandboxing to dd utility. Submitted by: Pawel Biernacki Reviewed by: allanjude, emaste, oshogbo

svn commit: r309921 - head/bin/dd

Author: robak (ports committer) Date: Mon Dec 12 18:56:40 2016 New Revision: 309921 URL: https://svnweb.freebsd.org/changeset/base/309921 Log: Fix regression when stdin/out/err fds are are overridden by shell. Submitted by: Pawel Biernacki Reported by: ngie Approved by: ngie Sponso

svn commit: r325516 - in head: lib/libc/gen sys/kern

Author: robak (ports committer) Date: Tue Nov 7 15:13:32 2017 New Revision: 325516 URL: https://svnweb.freebsd.org/changeset/base/325516 Log: Make sysctl_kern_proc_umask execute fast path when requested pid in curproc->p_pid or 0, avoiding unnecessary locking. Update libc consumer to skip c

svn commit: r325727 - head/usr.sbin/bhyve

Author: robak (ports committer) Date: Sat Nov 11 22:50:14 2017 New Revision: 325727 URL: https://svnweb.freebsd.org/changeset/base/325727 Log: bhyve: avoid applying capsicum capabilities to file that was not opened When using -l option targeting file that can't be opened (ie. nmdm module

svn commit: r315447 - head/usr.sbin/bsdinstall/scripts

Author: robak (ports committer) Date: Fri Mar 17 11:45:46 2017 New Revision: 315447 URL: https://svnweb.freebsd.org/changeset/base/315447 Log: Revert changes introduced in r314036 on demand by jhb and bapt. Approved by: bapt, jhb Modified: head/usr.sbin/bsdinstall/scripts/hardening Mod

svn commit: r313727 - in head: lib/libvmmapi usr.sbin/bhyve

Author: robak (ports committer) Date: Tue Feb 14 13:35:59 2017 New Revision: 313727 URL: https://svnweb.freebsd.org/changeset/base/313727 Log: Capsicum support for bhyve(8). Adds Capsicum sandboxing to bhyve. Submitted by: Pawel Biernacki Reviewed by: grehan, oshogbo Approved by:

svn commit: r313815 - head/usr.sbin/bsdinstall/scripts

Author: robak (ports committer) Date: Thu Feb 16 19:58:02 2017 New Revision: 313815 URL: https://svnweb.freebsd.org/changeset/base/313815 Log: Add 0-8 as shortcuts for jumping to menu items in the hardening menu. Submitted by: skreuzer Reviewed by: allanjude, robak Approved by: allanj

svn commit: r314036 - head/usr.sbin/bsdinstall/scripts

Author: robak (ports committer) Date: Tue Feb 21 09:37:33 2017 New Revision: 314036 URL: https://svnweb.freebsd.org/changeset/base/314036 Log: Enable bsdinstall hardening options by default. As discussed previously, in order to introduce new OS hardening defaults, we've added them to bsdi

svn commit: r321326 - head/usr.sbin/bsdinstall/scripts

Author: robak (ports committer) Date: Fri Jul 21 08:50:22 2017 New Revision: 321326 URL: https://svnweb.freebsd.org/changeset/base/321326 Log: Remove stack guard option from hardening menu. Since kib's change the stack guard is now ON by default, this option in hardening menu of bsdinstal

svn commit: r267635 - head/share/misc

Author: robak (ports committer) Date: Thu Jun 19 06:31:27 2014 New Revision: 267635 URL: http://svnweb.freebsd.org/changeset/base/267635 Log: Add Bartek Rutkowski (myself) to committers-ports.dot file with swills and marino as mentors. Approved by: swills (mentor) Modified: head/share

svn commit: r302897 - head/usr.sbin/bsdinstall/scripts

dded: head/usr.sbin/bsdinstall/scripts/hardening ====== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/usr.sbin/bsdinstall/scripts/hardening Fri Jul 15 15:07:24 2016 (r302897) @@