commit 5deae5c64cbddbf476d650cf6d16e0f1981e10d8
Author: Matthew Dillon
Date: Tue Jun 18 22:59:07 2019 -0700
kernel - Change fill_kinfo_lwp() and fix top
* Change fill_kinfo_lwp(), an internal function used by kern_proc.c
and libkvm, to aggregate lwp data instead of replace
commit 29d19636ae9cd697677888037274b010470f879c
Author: zrj
Date: Tue Jun 18 20:48:20 2019 +0300
openpam: Implement blacklist.
Mainly to avoid issues for users who might miss what `make upgrade`
warns about. Currently only includes previously active OPIE modules.
Do not i
commit e2b8907df11632c6bc7455f25dd7f17b841edfe0
Author: Matthew Dillon
Date: Tue Jun 18 11:54:08 2019 -0700
sshd - Change options defaults to be more secure
* Change the password_authentication default to 0. Passworded logins
are NOT considered secure by default in DragonF
commit a70f318d2f11c4d99425c28ddc434cad094b156f
Author: Matthew Dillon
Date: Tue Jun 18 11:49:32 2019 -0700
Revert "sshd(8): Add USE_PAM handling defaults."
We really did not intend to turn on passworded logins or pam by default.
They need to be turned off by default so the s
commit 61aab03f125a4c950772cd7d6dc1bcaa7403119e
Author: Matthew Dillon
Date: Tue Jun 18 11:54:08 2019 -0700
sshd - Change options defaults to be more secure
* Change the password_authentication default to 0. Passworded logins
are NOT considered secure by default in DragonF
commit b0041c5566a94f0ca5b56deb0cbe913ee3ae8513
Author: Matthew Dillon
Date: Tue Jun 18 11:49:32 2019 -0700
Revert "sshd(8): Add USE_PAM handling defaults."
We really did not intend to turn on passworded logins or pam by default.
They need to be turned off by default so the s
commit 47af96940556d3cde6c471a39e5b88fa750beb50
Author: Aaron LI
Date: Wed Jun 19 00:30:40 2019 +0800
gpt(8): Explicitly avoid out of range in searching MBR partitions
Avoid running off the end of an array in case thing we're looking for
isn't there. This is probably impossi
commit cfa1fd397ebc24eb76c3f9bbeea574341efeabec
Author: Aaron LI
Date: Wed Jun 19 00:21:11 2019 +0800
jail.8: Document sysctl entries jail.{allow_raw_sockets,chflags_allowed}
Meanwhile, update the description of "jail.chflags_allowed" in the code.
Obtained-from: FreeBSD