Changes in config

ffbaa453c1914846ede99d9b8499eb9b52b77e9a - bsdinstall: Stop loading cryptodev for ZFS installations

Wed, 08 May 2024 18:01:52 +0200

bsdinstall: Stop loading cryptodev for ZFS installations- zfs depends on the crypto module, not cryptodev, and most arm64 kernel configs include std.dev, which includes "device crypto" anyway.- This config works around a problem with kldxref lacking cross-target support, but that has since been fixed.- Loading cryptodev creates /dev/crypto, which gives unprivileged users access to the kernel's opencrypto framework. Very few applications need it, so we're needlessly increasing the kernel's surface area.Thus, stop auto-loading cryptodev.Reviewed by: kevans, allanjude, desDifferential Revision: https://reviews.freebsd.org/D45127 List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf - Remove $FreeBSD$: one-line sh pattern

Wed, 16 Aug 2023 19:55:03 +0200

Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

9ed054096dc24e96ee692a4e52c9ecbfee2723fd - Revert r361257: bsdinstall: do a `certctl rehash` upon installation [...]

Thu, 17 Sep 2020 22:35:45 +0200

Revert r361257: bsdinstall: do a `certctl rehash` upon installation [...]As of r365829, any given base distribution set will now include the /etc/sslsymlinks that this rehash would've otherwise installed. This extra step isno longer required.MFC after: 1 weekX-MFC-With: r365837 List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

e25152834cdf3b353892835a4f3b157e066a8ed4 - MFH

Thu, 27 Aug 2020 22:25:33 +0200

MFHSponsored by: Rubicon Communications, LLC (netgate.com) List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

60403b98b907a7f80016de24e1770e323c3dcdbb - bsdinstall: Update loader.conf for new OpenZFS deps

Tue, 25 Aug 2020 23:07:27 +0200

bsdinstall: Update loader.conf for new OpenZFS depszfs.ko now includes the SPL but relies on cryptodev instead.Reported by: D Scott PhillipsSponsored by: iXsystems, Inc. List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

1840a4fa017c839d5d2b41442965f193493d0ad4 - bsdinstall: do a `certctl rehash` upon installation of configuration

Tue, 19 May 2020 17:19:39 +0200

bsdinstall: do a `certctl rehash` upon installation of configurationIf certctl is installed on the system we're configuring, do a certctlrehash.Note that certctl may not be present if the world we've installed was builteither WITHOUT_OPENSSL or WITHOUT_CAROOT. In this scenario, we don'tcurrently see if the host has a certctl as this may be an indication thatthe system *shouldn't* have certs installed into /etc/ssl.Reviewed by: allanjude, dteskeMFC after: 3 daysDifferential Revision: https://reviews.freebsd.org/D24640 List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

8b3bc70a2b2d3889f9163e5e5a24747cea6417e6 - Merge ^/head r352764 through r353315.

Tue, 08 Oct 2019 20:17:02 +0200

Merge ^/head r352764 through r353315. List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

e7a71e6d1b925a755feaf1114523cde1873b2059 - Add a comment explaining why the opensolaris_load line in loader.conf

Wed, 02 Oct 2019 18:09:28 +0200

Add a comment explaining why the opensolaris_load line in loader.confis explicitly added.Requested by: rgrimesMFC after: 3 daysMFC with: r353004Sponsored by: Rubicon Communications, LLC (Netgate) List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

8cdae52ef6d091bee9c9545af671011e5e483fb7 - Explicitly add opensolaris_load="YES" to loader.conf through the

Wed, 02 Oct 2019 15:30:17 +0200

Explicitly add opensolaris_load="YES" to loader.conf through theinstaller when installing the system on a ZFS root filesystem.For arm64, zfs_load="YES" does not add opensolaris.ko as a klddependency, so add it explicitly to prevent boot-time failuresout-of-box.PR: 240478MFC after: 3 daysSponsored by: Rubicon Communications, LLC (Netgate) List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

01d4e2149e5566e5d9394913dc9fb032da259e0b - MFH r338661 through r339200.

Fri, 05 Oct 2018 19:53:47 +0200

MFH r338661 through r339200.Sponsored by: The FreeBSD Foundation List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

ce44d808538c6e32a86b2d79302418d17b28a854 - Merge ^/head r338731 through r338987.

Thu, 27 Sep 2018 22:00:07 +0200

Merge ^/head r338731 through r338987. List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

33a5ef35871ac9c19afafc9dfe4cf5901236e618 - Fix variable name typo in the bsdinstall ttys hardening code.

Thu, 20 Sep 2018 18:37:50 +0200

Fix variable name typo in the bsdinstall ttys hardening code.Submitted by: Jörg Pernfuß Reviewed by: allanjude, dab, emasteApproved by: re (gjb)Differential Revision: https://reviews.freebsd.org/D12476 List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

8fcbcc2d7435d069fa203edfc910c518cd1c6a2f - MFhead@r323635

Sat, 16 Sep 2017 05:54:20 +0200

MFhead@r323635 List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

b754c27916c5d1b0fe2f57d6d4ba94c7de1b541b - MFH @ r323558.

Wed, 13 Sep 2017 21:12:28 +0200

MFH @ r323558. List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

c12530ca4c1b0b7618a3c095129275799ed5eac5 - Ignore error return from newaliases(1)

Mon, 11 Sep 2017 19:39:21 +0200

Ignore error return from newaliases(1)This was originally added as "exit $SUCCESS" but with nothing to set theSUCCESS variable. Thus it became an exit with no argument, which justexits with the status of the preceding command.MFC after: 3 daysSponsored by: The FreeBSD Foundation List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

531c2d7af3cd2e64eec94aa1b19c4b2f16fce515 - MFhead@r320180

Mon, 24 Jul 2017 20:02:13 +0200

MFhead@r320180 List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

bca9d05fdb058aa709621661c2feccae8940d94b - Merge ^/head r319973 through 321382.

Sun, 23 Jul 2017 17:22:06 +0200

Merge ^/head r319973 through 321382. List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

d2043ca373caadb5ebf0b851bb440c67997a6232 - Merge ^/head r320573 through r320970.

Fri, 14 Jul 2017 00:01:38 +0200

Merge ^/head r320573 through r320970. List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

82ec242f2e5538faaed8fba1ed74babee8d1aa83 - Add option to bsdinstall to disable insecure console, update stack guard option

Wed, 05 Jul 2017 15:37:27 +0200

Add option to bsdinstall to disable insecure console, update stack guard optionThis patch adds new bsdinstall option to hardening section that allows usersto change this behaviour to secure one and updates stack guard option so itwould set the value of relevant sysctl to 512 (2MB)Submitted by: Bartek RutkowskiReviewed by: adrian, bapt, emasteApproved by: bapt, emasteMFC after: 1 daySponsored by: Pixeware LTDDifferential Revision: https://reviews.freebsd.org/D9700 List of files: /freebsd/usr.sbin/bsdinstall/scripts/config

a3604b95ed1b025e84c6b948b9939cf63fc9f9ce - Merge ^/head r320042 through r320397.

Tue, 27 Jun 2017 08:44:32 +0200

Merge ^/head r320042 through r320397. List of files: /freebsd/usr.sbin/bsdinstall/scripts/config