freebsd-skq/usr.sbin
Bartek Rutkowski 4bf41040fd Enable bsdinstall hardening options by default.
As discussed previously, in order to introduce new OS hardening
defaults, we've added them to bsdinstall in 'off by default' mode.
It has been there for a while, so the next step is to change them
to 'on by defaul' mode, so that in future we could simply enable
them in base OS.

Reviewed by:	brd
Approved by:	adrian
Differential Revision:	https://reviews.freebsd.org/D9641
2017-02-21 09:37:33 +00:00
..
ac Add META_MODE support. 2015-06-13 19:20:56 +00:00
accton Create an acct package for accounting tools. 2016-01-21 17:49:10 +00:00
acpi Merge ACPICA 20161222. 2017-01-05 21:28:25 +00:00
adduser Add META_MODE support. 2015-06-13 19:20:56 +00:00
amd Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of 2017-01-06 04:22:25 +00:00
ancontrol ancontrol(8): replace comma with semicolon when pertinent. 2016-08-09 19:46:05 +00:00
apm Create a package for apm(8). 2016-01-21 18:41:55 +00:00
apmd It seems <sys/types.h> is a new prerequisite for <bitstring.h> after 2016-05-24 03:15:46 +00:00
arp Cleanup on usr.sbin/arp/arp.c 2017-02-09 19:58:12 +00:00
asf Update dependencies after r291406 added libelf to libkvm. 2015-12-01 05:18:48 +00:00
audit Add META_MODE support. 2015-06-13 19:20:56 +00:00
auditd Add META_MODE support. 2015-06-13 19:20:56 +00:00
auditdistd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
auditreduce Add META_MODE support. 2015-06-13 19:20:56 +00:00
authpf Add META_MODE support. 2015-06-13 19:20:56 +00:00
autofs Make autounmountd(8) not die when traced with "truss -p". 2016-11-02 08:12:37 +00:00
bhyve bhyve: whitespace fix for r313727 2017-02-14 16:49:32 +00:00
bhyvectl Fix typo. 2016-11-13 17:55:27 +00:00
bhyveload bhyve: improve memory size documentation 2016-06-26 14:44:01 +00:00
binmiscctl Another attempt at resolving CID 1305629. The test of cmd == -1 2016-05-13 17:48:04 +00:00
blacklistctl DIRDEPS_BUILD: Connect new directories and update dependencies. 2016-06-03 19:25:30 +00:00
blacklistd DIRDEPS_BUILD: Connect new directories and update dependencies. 2016-06-03 19:25:30 +00:00
bluetooth Avoid undefined behavior when calling va_start() in bnep_send_control(), 2016-08-29 19:40:46 +00:00
boot0cfg Adjust previous fix to conform to the existing style in this file. 2016-01-14 15:49:24 +00:00
bootparamd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
bsdconfig Guard against bad service name argument(s) to load_rc_config() 2016-10-16 20:59:28 +00:00
bsdinstall Enable bsdinstall hardening options by default. 2017-02-21 09:37:33 +00:00
bsnmpd Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
btxld Reuse our roundup2() macro instead of reinventing the wheel. 2016-04-18 17:30:33 +00:00
camdd Fix misc Coverity defects in camdd(8) 2017-01-20 21:40:04 +00:00
cdcontrol Remove last remnants of acd(4), mcd(4), and scd(4) drivers. 2016-08-25 19:36:58 +00:00
chkgrp Revert r286148 2015-08-01 10:40:17 +00:00
chown chown/chgrp: Add SIGINFO handler 2017-01-08 06:58:42 +00:00
chroot Add META_MODE support. 2015-06-13 19:20:56 +00:00
ckdist Add META_MODE support. 2015-06-13 19:20:56 +00:00
clear_locks Add META_MODE support. 2015-06-13 19:20:56 +00:00
config Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
cpucontrol Add support for microcode update on newer AMD CPUs (10h+) 2016-11-02 16:15:49 +00:00
crashinfo Update crashinfo to work with newer gdb from ports. 2016-07-20 18:41:47 +00:00
cron Add a 'force' option for non-interactive crontab removal 2016-12-20 17:12:17 +00:00
crunch Teach crunchide about EM_S390 to make bootstrapping from future 2017-01-10 14:40:30 +00:00
ctladm Replace Cyrillic characters with Latin (normal) ones. 2017-02-03 16:21:30 +00:00
ctld Fix build with ICL_KERNEL_PROXY. 2017-01-20 17:43:36 +00:00
ctm Remove a link to the CTM section of the Handbook, which no longer exists. 2016-04-14 21:56:36 +00:00
daemon DIRDEPS_BUILD: Update dependencies. 2016-11-13 00:11:30 +00:00
dconschat Update dependencies after r291406 added libelf to libkvm. 2015-12-01 05:18:48 +00:00
devctl Implement 'devctl clear driver' to undo a previous 'devctl set driver'. 2016-08-29 22:48:36 +00:00
devinfo Use uintmax_t (typedef'd to rman_res_t type) for rman ranges. 2016-03-18 01:28:41 +00:00
digictl Add META_MODE support. 2015-06-13 19:20:56 +00:00
diskinfo Quell Coverity for diskinfo(8) 2017-01-04 00:39:06 +00:00
dumpcis Add META_MODE support. 2015-06-13 19:20:56 +00:00
editmap DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
edquota Use strlcpy() instead of strncpy() to ensure that qup->fsname is NUL 2016-05-13 00:02:03 +00:00
eeprom META_MODE: Remove DEP_MACHINE from Makefile.depend files. 2015-09-25 19:44:01 +00:00
efivar DIRDEPS_BUILD: Connect new dependencies. 2016-11-13 00:11:23 +00:00
etcupdate etcupdate: preserve the metadata of the destination file 2016-09-08 15:53:49 +00:00
extattr Disable extattr test on UFS1. 2016-09-21 10:58:58 +00:00
extattrctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
fdcontrol Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
fdformat Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
fdread Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
fdwrite Add META_MODE support. 2015-06-13 19:20:56 +00:00
fifolog Pass the correct size argument to ioctl(DIOCGSECTORSIZE) 2016-11-22 22:10:58 +00:00
flowctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
fmtree Use type-independent formats for printing nlink_t and ino_t. 2017-01-06 16:59:33 +00:00
freebsd-update MFportsnap r264740: Use case insensitive match when parsing host(1) output. 2016-10-12 20:24:33 +00:00
fstyp Fix broken fstyp exfat testcase 2017-01-14 01:08:04 +00:00
ftp-proxy META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
fwcontrol Fix a ton of speelling errors 2015-10-21 05:37:09 +00:00
getfmac Add META_MODE support. 2015-06-13 19:20:56 +00:00
getpmac Add META_MODE support. 2015-06-13 19:20:56 +00:00
gpioctl Fix gcc warnings about possibly uninitialized variables in gpioctl.c. 2016-03-12 15:10:30 +00:00
gssd usr.sbin: minor spelling fixes on comments. 2016-05-01 16:41:25 +00:00
gstat Add flag -B which does the same like batch mode but without exiting after 2016-11-09 07:31:39 +00:00
hyperv hyperv/vss: Install the userland daemon to /usr/sbin instead of / 2016-11-17 03:02:35 +00:00
i2c More typos in strings. 2016-12-02 11:30:21 +00:00
ifmcstat Add META_MODE support. 2015-06-13 19:20:56 +00:00
inetd Fix up r312105 2017-01-14 10:20:38 +00:00
iostat Make the "r/s" and "w/s" fields in "iostat -x" a little bit wider; 2016-09-21 11:22:19 +00:00
iovctl Clean up repeated "All rights reserved" 2016-03-14 17:41:17 +00:00
ip6addrctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
ipfwpcap MFV r313676: libpcap 1.8.1 2017-02-13 08:23:39 +00:00
iscsid Remove ISCSI_MAX_DATA_SEGMENT_LENGTH, using negotiated value. 2017-01-20 17:14:10 +00:00
jail Don't assign rtjp twice. 2016-12-26 19:27:12 +00:00
jexec Define which of the username options (-u/-U) to jexec(8) is the default. 2016-04-23 22:31:58 +00:00
jls Improve IP address list representation in libxo output. 2016-12-24 23:51:27 +00:00
kbdcontrol kbdcontrol: add -P path option to add keymap search paths 2016-03-16 04:05:02 +00:00
kbdmap kbdmap: include filename when reporting fopen() failure 2015-11-27 21:27:39 +00:00
keyserv keyserv(1): drop useless comparison. 2016-05-30 20:41:55 +00:00
kgmon Use NULL instead of 0 for pointers. 2016-04-14 11:41:30 +00:00
kgzip Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
kldxref kldxref: bump MAXSEGS to 3 2017-02-10 19:17:10 +00:00
lastlogin Add META_MODE support. 2015-06-13 19:20:56 +00:00
lmcconfig Use strlcpy() instead of strncpy() when copying ifname to ensure 2016-05-15 21:45:04 +00:00
lpr Rename getline with get_line to avoid collision with getline(3) 2016-05-10 11:17:19 +00:00
lptcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
mailstats DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
mailwrapper Add META_MODE support. 2015-06-13 19:20:56 +00:00
makefs makefs: use a macro to simplify per-fs function declarations 2017-02-16 03:12:47 +00:00
makemap DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
manctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
memcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
mergemaster META_MODE: Don't require filemon(4) for mergemaster(8)/etcupdate(8) 2016-07-12 19:47:01 +00:00
mfiutil Avoid taking the address of a packed struct member in mfiutil 2017-01-09 19:39:35 +00:00
mixer mixer(8): Style: Tag no-return usage() as __dead2 2016-05-11 17:27:27 +00:00
mld6query Add META_MODE support. 2015-06-13 19:20:56 +00:00
mlxcontrol Add META_MODE support. 2015-06-13 19:20:56 +00:00
mount_smbfs META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
mountd Fix the man page to reflect the change done by r307890 to mountd.c 2016-10-25 00:59:23 +00:00
moused Add Elantech trackpad to the list of known models 2016-09-26 22:07:45 +00:00
mpsutil Plug various resources leak 2016-04-20 21:32:34 +00:00
mptable Stop suggesting -grope argument when -grope argument was actually given 2015-10-22 21:13:35 +00:00
mptutil "Buses" is the preferred plural of "bus" 2017-01-15 17:54:01 +00:00
mtest mtest: Prevent access to uninitialized value. 2016-04-01 01:35:52 +00:00
nandsim usr.sbin: minor spelling fixes on comments. 2016-05-01 16:41:25 +00:00
nandtool META MODE: Connect MK_NAND directories. 2015-12-02 05:31:01 +00:00
ndiscvt Remove the old depend (mkdep) code and make FAST_DEPEND the one true way. 2016-03-30 23:50:23 +00:00
ndp Fix style(9) 2017-02-14 18:11:16 +00:00
newsyslog Fix improper use of "its". 2016-11-08 23:59:41 +00:00
nfscbd Cleanup unnecessary semicolons from utilities we all love. 2016-04-15 22:31:22 +00:00
nfsd Patch the nfsd so that it doesn't register with rpcbind for an NFSv4 only 2016-12-08 23:29:56 +00:00
nfsdumpstate Add META_MODE support. 2015-06-13 19:20:56 +00:00
nfsrevoke Add META_MODE support. 2015-06-13 19:20:56 +00:00
nfsuserd Document the new "-manage-gids" option for the nfsuserd daemon. 2015-11-30 22:16:30 +00:00
ngctl ngctl dot: Drop invalid trailing semi-colon 2015-09-22 01:31:01 +00:00
nghook Add META_MODE support. 2015-06-13 19:20:56 +00:00
nmtree Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
nologin new depends 2015-06-16 23:37:19 +00:00
nscd Revert crap accidentally committed 2017-01-28 16:31:23 +00:00
ntp Fix up grammar. 2017-01-01 10:37:10 +00:00
nvram
ofwdump DIRDEPS_BUILD: Update dependencies. 2015-12-07 23:53:01 +00:00
pc-sysinstall Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
pciconf pciconf(8): Replace an assert with errx 2017-02-11 18:04:43 +00:00
periodic Better document security_show_{success,info,badconfig} in /etc/periodic.conf 2016-05-21 02:14:11 +00:00
pkg Remove usage of _WITH_GETLINE from usr.sbin 2016-07-30 01:10:05 +00:00
pmcannotate Add META_MODE support. 2015-06-13 19:20:56 +00:00
pmccontrol Use macro MAX() from sys/param.h. 2016-04-22 05:07:59 +00:00
pmcstat Remove an unused field from struct pmcstat_image. 2016-10-15 23:46:55 +00:00
pmcstudy DIRDEPS_BUILD: Add some missing dirctories to the build. 2016-08-31 19:30:59 +00:00
pnpinfo Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
portsnap Avoid division by zero in the rare case that portsnap needs to fetch 2016-12-16 22:37:16 +00:00
powerd Directly set the NONBLOCK flags when creating the socket 2016-05-10 11:18:53 +00:00
ppp Fix build of ppp when WITHOUT_PAM is set 2016-07-04 21:18:57 +00:00
pppctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
praliases DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
praudit Add META_MODE support. 2015-06-13 19:20:56 +00:00
procctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
prometheus_sysctl_exporter Add a Prometheus exporter for sysctl values. 2016-12-21 08:29:44 +00:00
pstat - pstat(8) does not accept any arguments other than getopt() args, 2016-12-26 17:34:27 +00:00
pw Really restore the old behaviour for pw usermod -m 2017-01-22 20:03:18 +00:00
pwd_mkdb Following revision r295924, the changes to a db file should be fsynced 2016-02-23 15:28:13 +00:00
quot prefix UFS symbols with UFS_ to reduce namespace pollution 2017-02-15 19:50:26 +00:00
quotaon Add META_MODE support. 2015-06-13 19:20:56 +00:00
rarpd When clearing rtmsg, pass &rtmsg to bzero() instead of the address of 2016-05-17 04:03:45 +00:00
repquota Add META_MODE support. 2015-06-13 19:20:56 +00:00
rip6query Add META_MODE support. 2015-06-13 19:20:56 +00:00
rmt Use NULL instead of 0 for pointers. 2016-04-14 12:25:00 +00:00
route6d Purge varargs.h in favor of stdarg.h. 2017-01-13 08:01:27 +00:00
rpc.lockd Add missing break in lock_partialfilelock(..) with NFS_RESERR 2016-06-13 11:19:06 +00:00
rpc.statd Mark out_of_mem(..) and usage(..) with __dead2 as they both directly call exit 2016-05-29 04:18:47 +00:00
rpc.umntall Add META_MODE support. 2015-06-13 19:20:56 +00:00
rpc.yppasswdd Wrap EXPAND(..) macro with a do-while(0) loop and put a single statement on each line 2016-05-22 19:06:38 +00:00
rpc.ypupdated DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rpc.ypxfrd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rpcbind Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of 2017-01-06 04:13:08 +00:00
rrenumd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rtadvctl Add META_MODE support. 2015-06-13 19:20:56 +00:00
rtadvd Add link-layer address option in RA even for IFT_L2VLAN and IFT_BRIDGE. 2016-11-05 19:51:13 +00:00
rtprio Add META_MODE support. 2015-06-13 19:20:56 +00:00
rtsold Garbage collect IFT_IEEE80211 (but leave the define for possible reuse) 2017-01-28 17:08:40 +00:00
rwhod Style(9) fixes 2017-01-09 00:25:33 +00:00
sa Skip lastcomm and sa tests on unsupported architectures 2016-06-26 00:53:31 +00:00
sendmail Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of 2017-01-06 04:16:03 +00:00
service Add an additional check to service(8) -e incase rcvar is blank 2015-09-08 22:50:17 +00:00
services_mkdb Remove usage of _WITH_GETLINE from usr.sbin 2016-07-30 01:10:05 +00:00
sesutil Fix sesutil fault operation. 2016-09-30 20:35:12 +00:00
setfib Add META_MODE support. 2015-06-13 19:20:56 +00:00
setfmac Add META_MODE support. 2015-06-13 19:20:56 +00:00
setpmac Add META_MODE support. 2015-06-13 19:20:56 +00:00
smbmsg smbmsg: use a more convenient way of accessing data read from a slave 2016-11-11 15:00:13 +00:00
snapinfo Add META_MODE support. 2015-06-13 19:20:56 +00:00
spkrtest Add META_MODE support. 2015-06-13 19:20:56 +00:00
spray Add META_MODE support. 2015-06-13 19:20:56 +00:00
syslogd Sort sys/ #includes some more 2017-02-07 01:28:55 +00:00
sysrc Change my given name from "Garrett" to "Ngie" 2016-06-13 10:30:49 +00:00
tcpdchk Use LIBEXECDIR for /usr/libexec. 2015-11-26 01:14:40 +00:00
tcpdmatch Use LIBEXECDIR for /usr/libexec. 2015-11-26 01:14:40 +00:00
tcpdrop Add META_MODE support. 2015-06-13 19:20:56 +00:00
tcpdump Reduce diff to upstream using HAVE_CAPSICUM instead of __FreeBSD__. It'll also 2017-02-02 19:56:41 +00:00
tests Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
timed Undo the bogus gethostname() change from r299709. 2016-05-14 04:29:13 +00:00
traceroute Capsicumize traceroute. 2017-02-20 23:48:50 +00:00
traceroute6 Fix an infinite loop at an non-responding hop when other echo replies 2016-11-05 18:00:36 +00:00
trpt Remove "long" variables from the TCP stack (not including the modular 2016-10-06 16:28:34 +00:00
tzsetup Fix build of tzsetup when WITHOUT_DIALOG is set 2016-10-22 22:35:39 +00:00
uathload Rename devname to udevname after including stdlib.h in r303445 2016-07-30 20:39:39 +00:00
uefisign uefisign: Remove backwards-compatibility sys/capability.h support 2016-09-19 16:07:32 +00:00
ugidfw Add META_MODE support. 2015-06-13 19:20:56 +00:00
uhsoctl Prevent use-after-free with ctx->ns in set_nameservers(..), which could occur 2015-12-22 05:57:23 +00:00
unbound Upgrade to Unbound 1.5.9. 2016-09-04 12:17:57 +00:00
usbconfig Add META_MODE support. 2015-06-13 19:20:56 +00:00
usbdump Reuse our roundup2() macro instead of reinventing the wheel. 2016-04-18 17:30:33 +00:00
utx Add META_MODE support. 2015-06-13 19:20:56 +00:00
vidcontrol Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
vigr META MODE: Update dependencies with 'the-lot' and add missing directories. 2015-12-01 05:23:19 +00:00
vipw Add META_MODE support. 2015-06-13 19:20:56 +00:00
wake Fix a few mandoc warnings. 2015-08-12 10:34:05 +00:00
watch Use strlcpy() when the string is expected to be nul-terminated. 2015-10-06 22:49:25 +00:00
watchdogd fix a watchdogd regression introduced in r308040 2016-11-10 10:45:12 +00:00
wlandebug Belatedly fix documentation on which interface to use as argument. 2015-08-17 09:18:54 +00:00
wpa Extend manual to cover more commands and options. 2017-01-24 08:56:54 +00:00
yp_mkdb Staticfy and constify some variables and clean up the code a bit to make it 2015-07-28 02:32:40 +00:00
ypbind Use strlcpy() instead of strncpy() when copying to dom_domain to 2016-05-12 21:35:40 +00:00
ypldap Use memset(3) instead of bzero(3). 2016-12-02 06:07:27 +00:00
yppoll Update META_MODE dependencies. 2015-09-17 05:06:34 +00:00
yppush DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ypserv Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of 2017-01-06 04:10:33 +00:00
ypset Rename YP to NIS in the manpages. 2015-09-03 07:18:52 +00:00
zic Use more appropriate ${SHAREDIR} rather than /usr/share. 2015-10-27 23:35:02 +00:00
zonectl DIRDEPS_BUILD: Connect new directories and update dependencies. 2016-06-03 19:25:30 +00:00
zzz Add META_MODE support. 2015-06-13 19:20:56 +00:00
Makefile Add a Prometheus exporter for sysctl values. 2016-12-21 08:29:44 +00:00
Makefile.amd64 Remove the si(4) driver and sicontrol(8) for Specialix serial cards. 2016-08-19 21:14:27 +00:00
Makefile.arm Make the building of libsmb and mount_smbfs unconditional, now that r292552 2015-12-21 17:41:08 +00:00
Makefile.arm64 arm64: build usr.sbin/acpi subdirectory 2015-11-08 20:56:04 +00:00
Makefile.i386 Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
Makefile.inc
Makefile.mips Document why we use -z nonexecstack in the Makefile since it 2015-11-21 16:37:11 +00:00
Makefile.powerpc Create a new MACHINE_ARCH for Freescale PowerPC e500v2 2016-10-22 01:57:15 +00:00
Makefile.sparc64 Make the building of libsmb and mount_smbfs unconditional, now that r292552 2015-12-21 17:41:08 +00:00