FreeBSD src
Go to file
Xin LI 48f9270689 Issue warning and refuse to proceed further if the configured
repository signature_type is unsupported by bootstrap pkg(7).

Previously, when signature_type specified an unsupported method,
the bootstrap pkg(7) would proceed like when signature_type is
"none".  MITM attackers may be able to use this vulnerability and
bypass validation and install their own versions of pkg(8).

At this time, only fingerprint and none are supported by the
bootstrap pkg(7).

FreeBSD's official pkg(8) repository uses the fingerprint method
and is therefore unaffected.

Errata candidate.

Discussed with:	bapt@
Submitted by:	Fabian Keil
Obtained from:	ElectroBSD
2015-08-19 18:24:39 +00:00
bin sh: Backslash-newline should not affect field splitting in read builtin. 2015-08-16 12:57:17 +00:00
cddl Plug a memory leak. 2015-08-13 18:45:52 +00:00
contrib Fix minor malloc regressions. 2015-08-19 00:06:46 +00:00
crypto Fix multiple OpenSSH vulnerabilities. 2015-07-28 19:58:38 +00:00
etc etc/rc.d/hostname: permit setting hostname if already set 2015-08-12 16:22:10 +00:00
games Fix a typo. 2015-07-02 11:46:35 +00:00
gnu Roll WITHOUT_ELFTOOLCHAIN_TOOLS into WITHOUT_TOOLCHAIN 2015-08-13 17:50:47 +00:00
include Fix minor malloc regressions. 2015-08-19 00:06:46 +00:00
kerberos5 Fix a typo introduced in r262209. 2015-06-18 21:18:43 +00:00
lib - ANSIfy 2015-08-18 22:37:25 +00:00
libexec Disable SSE in libthr 2015-08-05 12:53:55 +00:00
release Remove a broken link. 2015-08-19 17:51:03 +00:00
rescue Add META_MODE support. 2015-06-13 19:20:56 +00:00
sbin Use arc4random_buf(). While there, unifdef the code for HAVE_ARC4RANDOM. 2015-08-16 23:23:58 +00:00
secure Merge OpenSSL 1.0.1p. 2015-07-09 17:07:45 +00:00
share Add the GPIO driver for the ADI Engineering RCC-VE and RCC-DFF/DFFv2. 2015-08-18 21:05:56 +00:00
sys cxgbe(4): Save the flags for the last adapter-wide synchronized 2015-08-19 15:40:03 +00:00
targets Roll WITHOUT_ELFTOOLCHAIN_TOOLS into WITHOUT_TOOLCHAIN 2015-08-13 17:50:47 +00:00
tests Add various tests to ensure that invalid arguments passed to mmap() 2015-08-06 16:14:29 +00:00
tools Update sysbuild to new ports infrastructure. 2015-08-18 20:19:48 +00:00
usr.bin Expand the decoding of kevent structures. 2015-08-19 01:44:56 +00:00
usr.sbin Issue warning and refuse to proceed further if the configured 2015-08-19 18:24:39 +00:00
.arcconfig Add repository.callsign, to help arcanist figure out what repo it's 2015-07-02 22:23:52 +00:00
.arclint phabricator related changes: 2015-04-20 20:33:22 +00:00
COPYRIGHT Bump copyright year. 2014-12-31 10:00:43 +00:00
LOCKS Explicitly require Security Officer's approval for kernel PRNG bits. 2013-09-17 14:19:05 +00:00
MAINTAINERS Remove cokane@ from MAINTAINERS for 3dfx(4)/tdfx(4) because their email 2014-11-25 05:25:12 +00:00
Makefile Import OpenSSL 1.0.1p. 2015-07-09 16:41:34 +00:00
Makefile.inc1 Separate ELFTOOLCHAIN_BOOTSTRAP from BINUTILS_BOOTSTRAP 2015-08-17 10:48:55 +00:00
ObsoleteFiles.inc Fix minor malloc regressions. 2015-08-19 00:06:46 +00:00
README Import OpenSSL 1.0.1p. 2015-07-09 16:41:34 +00:00
UPDATING Add DEV_RANDOM pseudo-option and use it to "include out" random(4) 2015-08-17 07:36:12 +00:00

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree.  See build(7)
and http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
for more information, including setting make(1) variables.

The `buildkernel` and `installkernel` targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process.  See build(7), config(8),
and http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html
for more information.

Note: If you want to build and install the kernel with the
`buildkernel` and `installkernel` targets, you might need to build
world before.  More information is available in the handbook.

The kernel configuration files reside in the sys/<arch>/conf
sub-directory.  GENERIC is the default configuration used in release builds.
NOTES contains entries and documentation for all possible
devices, not just those commonly used.


Source Roadmap:
---------------

bin		System/user commands.

cddl		Various commands and libraries under the Common Development
		and Distribution License.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc.

games		Amusements.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberos5	Kerberos5 (Heimdal) package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

rescue		Build system for statically linked /rescue utilities.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

sys		Kernel sources.

tests		Regression tests which can be run by Kyua.  See tests/README
		for additional information.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/synching.html