Bartek Rutkowski 4bf41040fd Enable bsdinstall hardening options by default. ... As discussed previously, in order to introduce new OS hardening defaults, we've added them to bsdinstall in 'off by default' mode. It has been there for a while, so the next step is to change them to 'on by defaul' mode, so that in future we could simply enable them in base OS. Reviewed by: brd Approved by: adrian Differential Revision: https://reviews.freebsd.org/D9641		2017-02-21 09:37:33 +00:00
..
ac
accton
acpi	Merge ACPICA 20161222.	2017-01-05 21:28:25 +00:00
adduser
amd	Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of	2017-01-06 04:22:25 +00:00
ancontrol	ancontrol(8): replace comma with semicolon when pertinent.	2016-08-09 19:46:05 +00:00
apm
apmd	It seems <sys/types.h> is a new prerequisite for <bitstring.h> after	2016-05-24 03:15:46 +00:00
arp	Cleanup on usr.sbin/arp/arp.c	2017-02-09 19:58:12 +00:00
asf
audit
auditd
auditdistd
auditreduce
authpf
autofs	Make autounmountd(8) not die when traced with "truss -p".	2016-11-02 08:12:37 +00:00
bhyve	bhyve: whitespace fix for r313727	2017-02-14 16:49:32 +00:00
bhyvectl	Fix typo.	2016-11-13 17:55:27 +00:00
bhyveload	bhyve: improve memory size documentation	2016-06-26 14:44:01 +00:00
binmiscctl	Another attempt at resolving CID 1305629. The test of cmd == -1	2016-05-13 17:48:04 +00:00
blacklistctl	DIRDEPS_BUILD: Connect new directories and update dependencies.	2016-06-03 19:25:30 +00:00
blacklistd	DIRDEPS_BUILD: Connect new directories and update dependencies.	2016-06-03 19:25:30 +00:00
bluetooth	Avoid undefined behavior when calling va_start() in bnep_send_control(),	2016-08-29 19:40:46 +00:00
boot0cfg
bootparamd
bsdconfig	Guard against bad service name argument(s) to load_rc_config()	2016-10-16 20:59:28 +00:00
bsdinstall	Enable bsdinstall hardening options by default.	2017-02-21 09:37:33 +00:00
bsnmpd	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
btxld
camdd	Fix misc Coverity defects in camdd(8)	2017-01-20 21:40:04 +00:00
cdcontrol	Remove last remnants of acd(4), mcd(4), and scd(4) drivers.	2016-08-25 19:36:58 +00:00
chkgrp
chown	chown/chgrp: Add SIGINFO handler	2017-01-08 06:58:42 +00:00
chroot
ckdist
clear_locks
config	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
cpucontrol	Add support for microcode update on newer AMD CPUs (10h+)	2016-11-02 16:15:49 +00:00
crashinfo	Update crashinfo to work with newer gdb from ports.	2016-07-20 18:41:47 +00:00
cron	Add a 'force' option for non-interactive crontab removal	2016-12-20 17:12:17 +00:00
crunch	Teach crunchide about EM_S390 to make bootstrapping from future	2017-01-10 14:40:30 +00:00
ctladm	Replace Cyrillic characters with Latin (normal) ones.	2017-02-03 16:21:30 +00:00
ctld	Fix build with ICL_KERNEL_PROXY.	2017-01-20 17:43:36 +00:00
ctm
daemon	DIRDEPS_BUILD: Update dependencies.	2016-11-13 00:11:30 +00:00
dconschat
devctl	Implement 'devctl clear driver' to undo a previous 'devctl set driver'.	2016-08-29 22:48:36 +00:00
devinfo
digictl
diskinfo	Quell Coverity for diskinfo(8)	2017-01-04 00:39:06 +00:00
dumpcis
editmap
edquota
eeprom
efivar	DIRDEPS_BUILD: Connect new dependencies.	2016-11-13 00:11:23 +00:00
etcupdate	etcupdate: preserve the metadata of the destination file	2016-09-08 15:53:49 +00:00
extattr	Disable extattr test on UFS1.	2016-09-21 10:58:58 +00:00
extattrctl
fdcontrol	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
fdformat	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
fdread	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
fdwrite
fifolog	Pass the correct size argument to ioctl(DIOCGSECTORSIZE)	2016-11-22 22:10:58 +00:00
flowctl
fmtree	Use type-independent formats for printing nlink_t and ino_t.	2017-01-06 16:59:33 +00:00
freebsd-update	MFportsnap r264740: Use case insensitive match when parsing host(1) output.	2016-10-12 20:24:33 +00:00
fstyp	Fix broken fstyp exfat testcase	2017-01-14 01:08:04 +00:00
ftp-proxy
fwcontrol
getfmac
getpmac
gpioctl
gssd
gstat	Add flag -B which does the same like batch mode but without exiting after	2016-11-09 07:31:39 +00:00
hyperv	hyperv/vss: Install the userland daemon to /usr/sbin instead of /	2016-11-17 03:02:35 +00:00
i2c	More typos in strings.	2016-12-02 11:30:21 +00:00
ifmcstat
inetd	Fix up r312105	2017-01-14 10:20:38 +00:00
iostat	Make the "r/s" and "w/s" fields in "iostat -x" a little bit wider;	2016-09-21 11:22:19 +00:00
iovctl
ip6addrctl
ipfwpcap	MFV r313676: libpcap 1.8.1	2017-02-13 08:23:39 +00:00
iscsid	Remove ISCSI_MAX_DATA_SEGMENT_LENGTH, using negotiated value.	2017-01-20 17:14:10 +00:00
jail	Don't assign rtjp twice.	2016-12-26 19:27:12 +00:00
jexec
jls	Improve IP address list representation in libxo output.	2016-12-24 23:51:27 +00:00
kbdcontrol
kbdmap
keyserv	keyserv(1): drop useless comparison.	2016-05-30 20:41:55 +00:00
kgmon
kgzip	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
kldxref	kldxref: bump MAXSEGS to 3	2017-02-10 19:17:10 +00:00
lastlogin
lmcconfig	Use strlcpy() instead of strncpy() when copying ifname to ensure	2016-05-15 21:45:04 +00:00
lpr
lptcontrol
mailstats
mailwrapper
makefs	makefs: use a macro to simplify per-fs function declarations	2017-02-16 03:12:47 +00:00
makemap
manctl
memcontrol
mergemaster	META_MODE: Don't require filemon(4) for mergemaster(8)/etcupdate(8)	2016-07-12 19:47:01 +00:00
mfiutil	Avoid taking the address of a packed struct member in mfiutil	2017-01-09 19:39:35 +00:00
mixer
mld6query
mlxcontrol
mount_smbfs
mountd	Fix the man page to reflect the change done by r307890 to mountd.c	2016-10-25 00:59:23 +00:00
moused	Add Elantech trackpad to the list of known models	2016-09-26 22:07:45 +00:00
mpsutil
mptable
mptutil	"Buses" is the preferred plural of "bus"	2017-01-15 17:54:01 +00:00
mtest
nandsim
nandtool
ndiscvt
ndp	Fix style(9)	2017-02-14 18:11:16 +00:00
newsyslog	Fix improper use of "its".	2016-11-08 23:59:41 +00:00
nfscbd
nfsd	Patch the nfsd so that it doesn't register with rpcbind for an NFSv4 only	2016-12-08 23:29:56 +00:00
nfsdumpstate
nfsrevoke
nfsuserd
ngctl
nghook
nmtree
nologin
nscd	Revert crap accidentally committed	2017-01-28 16:31:23 +00:00
ntp	Fix up grammar.	2017-01-01 10:37:10 +00:00
nvram
ofwdump
pc-sysinstall	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
pciconf	pciconf(8): Replace an assert with errx	2017-02-11 18:04:43 +00:00
periodic	Better document security_show_{success,info,badconfig} in /etc/periodic.conf	2016-05-21 02:14:11 +00:00
pkg	Remove usage of _WITH_GETLINE from usr.sbin	2016-07-30 01:10:05 +00:00
pmcannotate
pmccontrol
pmcstat	Remove an unused field from struct pmcstat_image.	2016-10-15 23:46:55 +00:00
pmcstudy	DIRDEPS_BUILD: Add some missing dirctories to the build.	2016-08-31 19:30:59 +00:00
pnpinfo	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
portsnap	Avoid division by zero in the rare case that portsnap needs to fetch	2016-12-16 22:37:16 +00:00
powerd
ppp	Fix build of ppp when WITHOUT_PAM is set	2016-07-04 21:18:57 +00:00
pppctl
praliases
praudit
procctl
prometheus_sysctl_exporter	Add a Prometheus exporter for sysctl values.	2016-12-21 08:29:44 +00:00
pstat	- pstat(8) does not accept any arguments other than getopt() args,	2016-12-26 17:34:27 +00:00
pw	Really restore the old behaviour for pw usermod -m	2017-01-22 20:03:18 +00:00
pwd_mkdb
quot	prefix UFS symbols with UFS_ to reduce namespace pollution	2017-02-15 19:50:26 +00:00
quotaon
rarpd	When clearing rtmsg, pass &rtmsg to bzero() instead of the address of	2016-05-17 04:03:45 +00:00
repquota
rip6query
rmt
route6d	Purge varargs.h in favor of stdarg.h.	2017-01-13 08:01:27 +00:00
rpc.lockd	Add missing break in lock_partialfilelock(..) with NFS_RESERR	2016-06-13 11:19:06 +00:00
rpc.statd	Mark out_of_mem(..) and usage(..) with __dead2 as they both directly call exit	2016-05-29 04:18:47 +00:00
rpc.umntall
rpc.yppasswdd	Wrap EXPAND(..) macro with a do-while(0) loop and put a single statement on each line	2016-05-22 19:06:38 +00:00
rpc.ypupdated
rpc.ypxfrd
rpcbind	Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of	2017-01-06 04:13:08 +00:00
rrenumd
rtadvctl
rtadvd	Add link-layer address option in RA even for IFT_L2VLAN and IFT_BRIDGE.	2016-11-05 19:51:13 +00:00
rtprio
rtsold	Garbage collect IFT_IEEE80211 (but leave the define for possible reuse)	2017-01-28 17:08:40 +00:00
rwhod	Style(9) fixes	2017-01-09 00:25:33 +00:00
sa	Skip lastcomm and sa tests on unsupported architectures	2016-06-26 00:53:31 +00:00
sendmail	Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of	2017-01-06 04:16:03 +00:00
service
services_mkdb	Remove usage of _WITH_GETLINE from usr.sbin	2016-07-30 01:10:05 +00:00
sesutil	Fix sesutil fault operation.	2016-09-30 20:35:12 +00:00
setfib
setfmac
setpmac
smbmsg	smbmsg: use a more convenient way of accessing data read from a slave	2016-11-11 15:00:13 +00:00
snapinfo
spkrtest
spray
syslogd	Sort sys/ #includes some more	2017-02-07 01:28:55 +00:00
sysrc	Change my given name from "Garrett" to "Ngie"	2016-06-13 10:30:49 +00:00
tcpdchk
tcpdmatch
tcpdrop
tcpdump	Reduce diff to upstream using HAVE_CAPSICUM instead of __FreeBSD__. It'll also	2017-02-02 19:56:41 +00:00
tests
timed	Undo the bogus gethostname() change from r299709.	2016-05-14 04:29:13 +00:00
traceroute	Capsicumize traceroute.	2017-02-20 23:48:50 +00:00
traceroute6	Fix an infinite loop at an non-responding hop when other echo replies	2016-11-05 18:00:36 +00:00
trpt	Remove "long" variables from the TCP stack (not including the modular	2016-10-06 16:28:34 +00:00
tzsetup	Fix build of tzsetup when WITHOUT_DIALOG is set	2016-10-22 22:35:39 +00:00
uathload	Rename devname to udevname after including stdlib.h in r303445	2016-07-30 20:39:39 +00:00
uefisign	uefisign: Remove backwards-compatibility sys/capability.h support	2016-09-19 16:07:32 +00:00
ugidfw
uhsoctl
unbound	Upgrade to Unbound 1.5.9.	2016-09-04 12:17:57 +00:00
usbconfig
usbdump
utx
vidcontrol	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
vigr
vipw
wake
watch
watchdogd	fix a watchdogd regression introduced in r308040	2016-11-10 10:45:12 +00:00
wlandebug
wpa	Extend manual to cover more commands and options.	2017-01-24 08:56:54 +00:00
yp_mkdb
ypbind
ypldap	Use memset(3) instead of bzero(3).	2016-12-02 06:07:27 +00:00
yppoll
yppush
ypserv	Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of	2017-01-06 04:10:33 +00:00
ypset
zic
zonectl	DIRDEPS_BUILD: Connect new directories and update dependencies.	2016-06-03 19:25:30 +00:00
zzz
Makefile	Add a Prometheus exporter for sysctl values.	2016-12-21 08:29:44 +00:00
Makefile.amd64	Remove the si(4) driver and sicontrol(8) for Specialix serial cards.	2016-08-19 21:14:27 +00:00
Makefile.arm
Makefile.arm64
Makefile.i386	Remove pc98 support completely.	2017-01-28 02:22:15 +00:00
Makefile.inc
Makefile.mips
Makefile.powerpc	Create a new MACHINE_ARCH for Freescale PowerPC e500v2	2016-10-22 01:57:15 +00:00
Makefile.sparc64