Colin Percival a235643007 Disable SSL renegotiation in order to protect against a serious ...

protocol flaw. [09:15]

Correctly handle failures from unsetenv resulting from a corrupt
environment in rtld-elf. [09:16]

Fix permissions in freebsd-update in order to prevent leakage of
sensitive files. [09:17]

Approved by:	so (cperciva)
Security:	FreeBSD-SA-09:15.ssl
Security:	FreeBSD-SA-09:16.rtld
Security:	FreeBSD-SA-09:17.freebsd-udpate

2009-12-03 09:18:40 +00:00

..

bluetooth

Correct BD_ADDR entry for "Dummy" device in the default hcsecd.conf.

2006-05-18 17:53:49 +00:00

defaults

Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6

2009-12-02 15:05:26 +00:00

devd

revert r187343

2009-01-16 20:42:43 +00:00

etc.amd64

Switch the default terminal emulation style to xterm for most platforms.

2009-11-13 05:54:55 +00:00

etc.arm

Switch the default terminal emulation style to xterm for most platforms.

2009-11-13 05:54:55 +00:00

etc.i386

Convert syscons on i386 to TERM=xterm.

2009-11-13 11:28:54 +00:00

etc.ia64

Switch the default terminal emulation style to xterm for most platforms.

2009-11-13 05:54:55 +00:00

etc.mips

Switch the default terminal emulation style to xterm for most platforms.

2009-11-13 05:54:55 +00:00

etc.pc98

Use cons25w on pc98.

2009-11-13 11:54:52 +00:00

etc.powerpc

Switch the default terminal emulation style to xterm for most platforms.

2009-11-13 05:54:55 +00:00

etc.sparc64

Switch the default terminal emulation style to xterm for most platforms.

2009-11-13 05:54:55 +00:00

gss

Implement support for RPCSEC_GSS authentication to both the NFS client

2008-11-03 10:38:00 +00:00

mail

Add the URL for RFC2142

2009-03-23 00:40:07 +00:00

mtree

Disable SSL renegotiation in order to protect against a serious

2009-12-03 09:18:40 +00:00

namedb

1. New feature; option to have the script loop until a specified hostname

2009-05-16 20:55:28 +00:00

pam.d

tabify

2009-10-05 09:28:54 +00:00

periodic

Silence warning printed by getfsspec(3) when /etc/fstab does not exist

2009-09-28 03:32:35 +00:00

ppp

With uart(4) default, change /dev/cuad# to /dev/cuau# so that

2008-07-19 20:00:18 +00:00

rc.d

Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6

2009-12-02 15:05:26 +00:00

root

Switch the default terminal emulation style to xterm for most platforms.

2009-11-13 05:54:55 +00:00

sendmail

A no-op commit to simulate the effect of a forced commit so the file

2008-08-31 18:21:15 +00:00

amd.map

Switch default proto to TCP.

2006-11-06 01:42:11 +00:00

apmd.conf

…

auth.conf

…

crontab

Remove HOME= - this has surprised me several times in the past.

2009-06-14 06:37:19 +00:00

csh.cshrc

…

csh.login

…

csh.logout

…

ddb.conf

Use the new command file feature of ddb(8) to support setting ddb(4)

2008-03-05 18:32:58 +00:00

devd.conf

o Add missed semicolon in action script.

2009-05-16 15:12:56 +00:00

devfs.conf

…

dhclient.conf

…

disktab

Replace duplicate and not quite accurate capabilities

2006-10-14 16:39:03 +00:00

fbtab

…

freebsd-update.conf

Add support for backing up the old kernel when installing a new kernel

2009-08-19 20:47:31 +00:00

ftpusers

…

gettytab

Partially revert the change to the gettytab made in r198214.

2009-10-19 11:10:44 +00:00

group

Create group ftp by default. This is gid 14 as this is the historical

2007-06-11 18:36:39 +00:00

hosts

…

hosts.allow

Comment out lines that use example addresses and example.com names so

2006-08-29 09:20:48 +00:00

hosts.equiv

…

hosts.lpd

…

inetd.conf

Do the first step in removing lukemftpd from the base system. Disconnect

2009-09-03 16:34:20 +00:00

libalias.conf

Fix a regression: let natd load libalias modules before /usr is mounted

2006-10-08 14:02:00 +00:00

login.access

…

login.conf

Usermode portion of the support for swap allocation accounting:

2009-06-23 20:57:27 +00:00

mac.conf

…

Makefile

Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6

2009-12-02 15:05:26 +00:00

man.alias

…

master.passwd

…

minfree

…

motd

…

netconfig

…

netstart

Add hostid to the ranks.

2009-03-19 12:52:19 +00:00

network.subr

- Add AF_IPX and AF_NATM to afexists().

2009-10-02 02:24:25 +00:00

networks

…

newsyslog.conf

The slip.log file got removed along with the MPSAFE tty work. If slip

2008-12-02 16:46:01 +00:00

nls.alias

…

nscd.conf

- Extend the nsswitch to support Services, Protocols and Rpc

2006-04-28 12:03:38 +00:00

nsmb.conf

…

nsswitch.conf

Install /etc/nsswitch.conf statically rather than generating it at

2006-05-03 15:14:47 +00:00

ntp.conf

1) Use our vendor domain at the pool.

2009-07-13 05:51:33 +00:00

opieaccess

…

pccard_ether

Implement a "quiet" mode for rc.d/netif, which only outputs

2008-06-23 20:50:11 +00:00

pf.os

Synchronize pf.os with OpenBSD.

2006-10-23 05:09:44 +00:00

phones

Kill the default phone numbers.

2006-08-31 21:13:12 +00:00

portsnap.conf

Add INDEX-8 to the default portsnap configuration file, and remove INDEX-5.

2009-07-27 20:24:00 +00:00

printcap

…

profile

…

protocols

Update /etc/protocols with IANA list updated 2007-02-12

2007-05-20 03:55:22 +00:00

rc

Remove pointless informational message.

2008-06-23 04:18:22 +00:00

rc.bsdextended

Clean up, comment out non-base utilities, fix up comments.

2006-04-22 11:02:44 +00:00

rc.firewall

Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6

2009-12-02 15:05:26 +00:00

rc.initdiskless

Add support to rc.initdiskless for /conf/T/M/remount_subdir.

2008-09-09 18:40:50 +00:00

rc.resume

Change the module example to kldload since this is the resume side.

2008-07-21 22:55:40 +00:00

rc.sendmail

…

rc.shutdown

Instead of killing the 'watchdog' subshell and leaving a sleep for

2009-01-25 10:31:45 +00:00

rc.subr

Fix qouting in a comment, to make it look more consistent

2009-10-18 19:51:06 +00:00

rc.suspend

With uart(4) default, change sio# to uart# so that

2008-07-19 20:12:33 +00:00

regdomain.xml

Remove gsm hacks now that we can do this "right":

2009-01-28 19:25:51 +00:00

remote

Add ucomX shortcuts just like its uart sibling.

2008-10-27 17:19:14 +00:00

rpc

…

services

Add OpenVPN IANA assigned port number.

2009-10-03 11:02:36 +00:00

shells

…

snmpd.config

o Fix a comment: refer to the write community name by the OID not by

2006-12-31 11:19:48 +00:00

sysctl.conf

…

syslog.conf

syslog.conf: pop up from logging only ppp messages at the end of file

2009-06-11 15:07:02 +00:00

termcap.small

Sync termcap.small with main termcap; add xterm entry for libteken

2009-06-13 13:35:18 +00:00