Module Name: src Committed By: sevan Date: Wed Sep 13 22:24:46 UTC 2017
Modified Files: src/share/man/man4: options.4 src/share/man/man8: veriexec.8 src/sys/arch/acorn26/conf: GENERIC src/sys/arch/acorn32/conf: GENERIC src/sys/arch/alpha/conf: GENERIC src/sys/arch/amd64/conf: ALL GENERIC src/sys/arch/amiga/conf: DRACO GENERIC GENERIC.in INSTALL src/sys/arch/amigappc/conf: GENERIC NULL src/sys/arch/arc/conf: GENERIC src/sys/arch/bebox/conf: GENERIC src/sys/arch/cats/conf: GENERIC src/sys/arch/cesfic/conf: GENERIC src/sys/arch/cobalt/conf: GENERIC src/sys/arch/dreamcast/conf: G1IDE GENERIC src/sys/arch/evbarm/conf: ARMADILLO-IOT-G3 CUBOX CUBOX-I DUOVERO GENERIC.common GUMSTIX HPT5325 IMX6UL-STARTER MARVELL_NAS MMNET_GENERIC MPCSA_GENERIC MV2120 NITROGEN6X OPENBLOCKS_A6 OPENBLOCKS_AX3 OVERO PEPPER SHEEVAPLUG src/sys/arch/evbarm64/conf: A64EMUL src/sys/arch/evbmips/conf: GDIUM LOONGSON SBMIPS src/sys/arch/ews4800mips/conf: GENERIC src/sys/arch/hp300/conf: GENERIC src/sys/arch/hpcmips/conf: GENERIC src/sys/arch/hpcsh/conf: GENERIC src/sys/arch/hppa/conf: GENERIC src/sys/arch/i386/conf: ALL GENERIC src/sys/arch/ibmnws/conf: GENERIC src/sys/arch/iyonix/conf: GENERIC src/sys/arch/landisk/conf: GENERIC src/sys/arch/luna68k/conf: GENERIC INSTALL src/sys/arch/mac68k/conf: GENERIC src/sys/arch/macppc/conf: GENERIC GENERIC_601 src/sys/arch/mipsco/conf: GENERIC src/sys/arch/mmeye/conf: GENERIC MMEYE_WLF src/sys/arch/mvme68k/conf: GENERIC src/sys/arch/netwinder/conf: GENERIC src/sys/arch/news68k/conf: GENERIC src/sys/arch/newsmips/conf: GENERIC src/sys/arch/next68k/conf: GENERIC src/sys/arch/ofppc/conf: GENERIC src/sys/arch/playstation2/conf: GENERIC src/sys/arch/pmax/conf: GENERIC GENERIC64 src/sys/arch/prep/conf: GENERIC src/sys/arch/rs6000/conf: GENERIC src/sys/arch/sandpoint/conf: GENERIC src/sys/arch/sbmips/conf: GENERIC src/sys/arch/sgimips/conf: GENERIC32_IP12 GENERIC32_IP2x GENERIC32_IP3x src/sys/arch/shark/conf: GENERIC src/sys/arch/sparc/conf: GENERIC KRUPS src/sys/arch/sparc64/conf: GENERIC src/sys/arch/sun2/conf: GENERIC src/sys/arch/sun3/conf: GENERIC GENERIC3X src/sys/arch/vax/conf: GENERIC VAX780 src/sys/arch/x68k/conf: GENERIC src/sys/conf: files src/sys/kern: kern_veriexec.c Log Message: Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options. These algorithms are either broken or on their way to being broken. Discussed on tech-security http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html ok riastradh To generate a diff of this commit: cvs rdiff -u -r1.473 -r1.474 src/share/man/man4/options.4 cvs rdiff -u -r1.6 -r1.7 src/share/man/man8/veriexec.8 cvs rdiff -u -r1.83 -r1.84 src/sys/arch/acorn26/conf/GENERIC cvs rdiff -u -r1.121 -r1.122 src/sys/arch/acorn32/conf/GENERIC cvs rdiff -u -r1.376 -r1.377 src/sys/arch/alpha/conf/GENERIC cvs rdiff -u -r1.69 -r1.70 src/sys/arch/amd64/conf/ALL cvs rdiff -u -r1.464 -r1.465 src/sys/arch/amd64/conf/GENERIC cvs rdiff -u -r1.182 -r1.183 src/sys/arch/amiga/conf/DRACO cvs rdiff -u -r1.316 -r1.317 src/sys/arch/amiga/conf/GENERIC cvs rdiff -u -r1.134 -r1.135 src/sys/arch/amiga/conf/GENERIC.in cvs rdiff -u -r1.126 -r1.127 src/sys/arch/amiga/conf/INSTALL cvs rdiff -u -r1.30 -r1.31 src/sys/arch/amigappc/conf/GENERIC cvs rdiff -u -r1.50 -r1.51 src/sys/arch/amigappc/conf/NULL cvs rdiff -u -r1.186 -r1.187 src/sys/arch/arc/conf/GENERIC cvs rdiff -u -r1.154 -r1.155 src/sys/arch/bebox/conf/GENERIC cvs rdiff -u -r1.163 -r1.164 src/sys/arch/cats/conf/GENERIC cvs rdiff -u -r1.66 -r1.67 src/sys/arch/cesfic/conf/GENERIC cvs rdiff -u -r1.152 -r1.153 src/sys/arch/cobalt/conf/GENERIC cvs rdiff -u -r1.3 -r1.4 src/sys/arch/dreamcast/conf/G1IDE cvs rdiff -u -r1.127 -r1.128 src/sys/arch/dreamcast/conf/GENERIC cvs rdiff -u -r1.7 -r1.8 src/sys/arch/evbarm/conf/ARMADILLO-IOT-G3 cvs rdiff -u -r1.3 -r1.4 src/sys/arch/evbarm/conf/CUBOX cvs rdiff -u -r1.9 -r1.10 src/sys/arch/evbarm/conf/CUBOX-I cvs rdiff -u -r1.4 -r1.5 src/sys/arch/evbarm/conf/DUOVERO cvs rdiff -u -r1.20 -r1.21 src/sys/arch/evbarm/conf/GENERIC.common cvs rdiff -u -r1.92 -r1.93 src/sys/arch/evbarm/conf/GUMSTIX cvs rdiff -u -r1.33 -r1.34 src/sys/arch/evbarm/conf/HPT5325 cvs rdiff -u -r1.2 -r1.3 src/sys/arch/evbarm/conf/IMX6UL-STARTER cvs rdiff -u -r1.26 -r1.27 src/sys/arch/evbarm/conf/MARVELL_NAS cvs rdiff -u -r1.31 -r1.32 src/sys/arch/evbarm/conf/MMNET_GENERIC cvs rdiff -u -r1.52 -r1.53 src/sys/arch/evbarm/conf/MPCSA_GENERIC cvs rdiff -u -r1.32 -r1.33 src/sys/arch/evbarm/conf/MV2120 cvs rdiff -u -r1.11 -r1.12 src/sys/arch/evbarm/conf/NITROGEN6X cvs rdiff -u -r1.28 -r1.29 src/sys/arch/evbarm/conf/OPENBLOCKS_A6 cvs rdiff -u -r1.21 -r1.22 src/sys/arch/evbarm/conf/OPENBLOCKS_AX3 cvs rdiff -u -r1.48 -r1.49 src/sys/arch/evbarm/conf/OVERO cvs rdiff -u -r1.5 -r1.6 src/sys/arch/evbarm/conf/PEPPER cvs rdiff -u -r1.56 -r1.57 src/sys/arch/evbarm/conf/SHEEVAPLUG cvs rdiff -u -r1.8 -r1.9 src/sys/arch/evbarm64/conf/A64EMUL cvs rdiff -u -r1.27 -r1.28 src/sys/arch/evbmips/conf/GDIUM cvs rdiff -u -r1.33 -r1.34 src/sys/arch/evbmips/conf/LOONGSON cvs rdiff -u -r1.3 -r1.4 src/sys/arch/evbmips/conf/SBMIPS cvs rdiff -u -r1.53 -r1.54 src/sys/arch/ews4800mips/conf/GENERIC cvs rdiff -u -r1.195 -r1.196 src/sys/arch/hp300/conf/GENERIC cvs rdiff -u -r1.233 -r1.234 src/sys/arch/hpcmips/conf/GENERIC cvs rdiff -u -r1.107 -r1.108 src/sys/arch/hpcsh/conf/GENERIC cvs rdiff -u -r1.13 -r1.14 src/sys/arch/hppa/conf/GENERIC cvs rdiff -u -r1.428 -r1.429 src/sys/arch/i386/conf/ALL cvs rdiff -u -r1.1166 -r1.1167 src/sys/arch/i386/conf/GENERIC cvs rdiff -u -r1.50 -r1.51 src/sys/arch/ibmnws/conf/GENERIC cvs rdiff -u -r1.94 -r1.95 src/sys/arch/iyonix/conf/GENERIC cvs rdiff -u -r1.55 -r1.56 src/sys/arch/landisk/conf/GENERIC cvs rdiff -u -r1.122 -r1.123 src/sys/arch/luna68k/conf/GENERIC cvs rdiff -u -r1.22 -r1.23 src/sys/arch/luna68k/conf/INSTALL cvs rdiff -u -r1.222 -r1.223 src/sys/arch/mac68k/conf/GENERIC cvs rdiff -u -r1.332 -r1.333 src/sys/arch/macppc/conf/GENERIC cvs rdiff -u -r1.13 -r1.14 src/sys/arch/macppc/conf/GENERIC_601 cvs rdiff -u -r1.89 -r1.90 src/sys/arch/mipsco/conf/GENERIC cvs rdiff -u -r1.122 -r1.123 src/sys/arch/mmeye/conf/GENERIC cvs rdiff -u -r1.21 -r1.22 src/sys/arch/mmeye/conf/MMEYE_WLF cvs rdiff -u -r1.95 -r1.96 src/sys/arch/mvme68k/conf/GENERIC cvs rdiff -u -r1.131 -r1.132 src/sys/arch/netwinder/conf/GENERIC cvs rdiff -u -r1.127 -r1.128 src/sys/arch/news68k/conf/GENERIC cvs rdiff -u -r1.130 -r1.131 src/sys/arch/newsmips/conf/GENERIC cvs rdiff -u -r1.142 -r1.143 src/sys/arch/next68k/conf/GENERIC cvs rdiff -u -r1.163 -r1.164 src/sys/arch/ofppc/conf/GENERIC cvs rdiff -u -r1.10 -r1.11 src/sys/arch/playstation2/conf/GENERIC cvs rdiff -u -r1.192 -r1.193 src/sys/arch/pmax/conf/GENERIC cvs rdiff -u -r1.25 -r1.26 src/sys/arch/pmax/conf/GENERIC64 cvs rdiff -u -r1.182 -r1.183 src/sys/arch/prep/conf/GENERIC cvs rdiff -u -r1.36 -r1.37 src/sys/arch/rs6000/conf/GENERIC cvs rdiff -u -r1.94 -r1.95 src/sys/arch/sandpoint/conf/GENERIC cvs rdiff -u -r1.103 -r1.104 src/sys/arch/sbmips/conf/GENERIC cvs rdiff -u -r1.30 -r1.31 src/sys/arch/sgimips/conf/GENERIC32_IP12 cvs rdiff -u -r1.109 -r1.110 src/sys/arch/sgimips/conf/GENERIC32_IP2x cvs rdiff -u -r1.112 -r1.113 src/sys/arch/sgimips/conf/GENERIC32_IP3x cvs rdiff -u -r1.128 -r1.129 src/sys/arch/shark/conf/GENERIC cvs rdiff -u -r1.254 -r1.255 src/sys/arch/sparc/conf/GENERIC cvs rdiff -u -r1.73 -r1.74 src/sys/arch/sparc/conf/KRUPS cvs rdiff -u -r1.200 -r1.201 src/sys/arch/sparc64/conf/GENERIC cvs rdiff -u -r1.96 -r1.97 src/sys/arch/sun2/conf/GENERIC cvs rdiff -u -r1.173 -r1.174 src/sys/arch/sun3/conf/GENERIC cvs rdiff -u -r1.127 -r1.128 src/sys/arch/sun3/conf/GENERIC3X cvs rdiff -u -r1.201 -r1.202 src/sys/arch/vax/conf/GENERIC cvs rdiff -u -r1.22 -r1.23 src/sys/arch/vax/conf/VAX780 cvs rdiff -u -r1.184 -r1.185 src/sys/arch/x68k/conf/GENERIC cvs rdiff -u -r1.1180 -r1.1181 src/sys/conf/files cvs rdiff -u -r1.16 -r1.17 src/sys/kern/kern_veriexec.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.