world - Replace gnu diff, diff3, and sdiff with BSD versions

* Replace diff and diff3 with the OpenBSD diff and diff3,
Replace sdiff with the FreeBSD sdiff,
Remove the GNU diff, diff3, and sdiff

world - Replace gnu diff, diff3, and sdiff with BSD versions

* Replace diff and diff3 with the OpenBSD diff and diff3,
Replace sdiff with the FreeBSD sdiff,
Remove the GNU diff, diff3, and sdiff

* Basic testing with dsynth bulk to ensure no significant compatibility
disruptions.

Submitted-by: Tyler <tyler.clark@foxide.xyz>

show more ...

IMPORT openssh-9.8p1

* Fixes CVE-2024-6387-openssh

* NOTE that DragonFly is not known to be vulnerable to this CVE, but
because it is a general signal race we are updating sshd anyway,
just in

IMPORT openssh-9.8p1

* Fixes CVE-2024-6387-openssh

* NOTE that DragonFly is not known to be vulnerable to this CVE, but
because it is a general signal race we are updating sshd anyway,
just in case.

show more ...

Remove various 'r' commands and daemons.

rcp(1), rlogin(1), rlogind(1), rsh(1) and rshd(1). In the unlikely case
that someone still needs them, they can use the net/bsdrcmds port to
bring them back.

Remove various 'r' commands and daemons.

rcp(1), rlogin(1), rlogind(1), rsh(1) and rshd(1). In the unlikely case
that someone still needs them, they can use the net/bsdrcmds port to
bring them back.

FreeBSD removed them in October 2017 and I took their work as a guideline.

show more ...

Remove obsolete comment from libexec's Makefile.

Remove the NO_CRYPT build option.

It has been broken for a long time without anyone complaining about and
we don't want to maintain it either.

In-discussion-with: zrj

build - Remove openssl from base (is now permanently replaced by ressl)

* Remove openssl and related code that previous commits by John Marino
replaced with libressl. Remove build hooks, base now

build - Remove openssl from base (is now permanently replaced by ressl)

* Remove openssl and related code that previous commits by John Marino
replaced with libressl. Remove build hooks, base now only uses libressl.

* Remove crypto/openssl. This has been replaced by the openssl
implementation from ressl.

* Remove lib/libcrypto. This has been replaced by lib/librecrypto which
generates a private_crypo library only used by base.

* Remove lib/libssl. This has been replaced by lib/libressl which
generates a private_ssl library only used by base.

* NOTE: In addition, John has been working on updating dports to ensure
that only the ports-based libssl and libcrypto (both nominally
implemented via ressl and not openssl), and that dports packages
no longer have any chance of using the private versions of these
libraries from base.

show more ...

build - Rewire secure, remove conflicts from libmd, libcrypt

* Remove /usr/src/secure, folding all of its subsystems into
/usr/src. There's no point having a /usr/src/secure any more,
the syste

build - Rewire secure, remove conflicts from libmd, libcrypt

* Remove /usr/src/secure, folding all of its subsystems into
/usr/src. There's no point having a /usr/src/secure any more,
the system won't run without the secure stuff, the idea that some foreign
actor could segregate it in order to legally download code without crypto
is absurd on the modern internet, and the U.S. government stopped caring
decades ago.

* Remove conflicts from libmd and libcrypt. Essentially this removes
the SHA*_*() and MD5_*() APIs from libmd because these APIs already
exist in lib[re]ssl.

The older SHA*() and MD5*() APIs are partially retained for legacy base
code, but will be removed in a later stage (moved to direct-linking the
needed support source).

Conflicting routines in libcrypt have been renamed and internalized to
be libcrypt-only.

* Major rewiring of the Makefile's to support the changes.

show more ...

Remove NO_SENDMAIL and all it masks, except one

The next step in the removal of Sendmail is to remove all the components
that NO_SENDMAIL masked, and then remove the internal NO_SENDMAIL knob
itself

Remove NO_SENDMAIL and all it masks, except one

The next step in the removal of Sendmail is to remove all the components
that NO_SENDMAIL masked, and then remove the internal NO_SENDMAIL knob
itself.

There is one component that got unmasked though: the etc/sendmail
dragonfl*.mc files. I think we may need to keep building these, and
they require contrib/sendmail-8.14 source files. I'll figure out what
needs to have to remove the contrib directory later.

show more ...

Merge branch 'master' of /repository/git/dragonfly

build - Significantly improve parallel buildworld times

* Change the serialized command sequence used for bootstrap tools,
btools, and ctools into dependencies so buildworld can build them
concu

build - Significantly improve parallel buildworld times

* Change the serialized command sequence used for bootstrap tools,
btools, and ctools into dependencies so buildworld can build them
concurrently.

* Utilize the new SUBDIR concurrent build feature by specifying
a SUBDIR_ORDERED make variable (usually empty) in various high-level
Makefile's.

show more ...

Initial import of binutils 2.22 on the new vendor branch

Future versions of binutils will also reside on this branch rather
than continuing to create new binutils branches for each new version.

kernel: Remove some old ISA only drivers.

This commits removes the following old ISA specific drivers, most of which
have been removed in FreeBSD, too:

aha(4) - Adaptec 154xA, 154xB, 154xC, 154x

kernel: Remove some old ISA only drivers.

This commits removes the following old ISA specific drivers, most of which
have been removed in FreeBSD, too:

aha(4) - Adaptec 154xA, 154xB, 154xC, 154xCF and 154xCP SCSI cards
asc(4) - GI1904-based hand scanner
ctx - ImageNation CORTEX-I Frame Grabber
dgb(4) - DigiBoard serial cards (digi(4) driver remains)
el(4) - 3Com Etherlink 3C501 NIC
gpib - National Instruments AT-GPIB and AT-GPIB/TNT boards
gsc(4) - Genius GS-4500 hand scanner
ie(4) - Intel i82586 based 8 and 16 bit ISA ethernet cards
labpc(4) - National Instruments LABPC and LABPC+ driver
le(4) - DEC EtherWORKS II/III ethernet cards
mse(4) - Bus and InPort mouse driver
rc(4) - RISCom/8 multiport serial cards
rdp(4) - RealTek RTL8002 based pocket ethernet adapters
spigot - Creative Labs Spigot video acquisition board
tw(4) - TW-523 X-10 interface
wl(4) - T1 speed ISA/radio LAN card
wt(4) - Archive/Wangtek cartridge tape driver

Along with those, a number of associated programs are removed, too:

sasc(1) sgsc(1) wlconfig(8) xten(1) xtend(8)

show more ...

Merge branch 'master' of ssh://crater.dragonflybsd.org/repository/git/dragonfly

Oops! Actually install /usr/libexec/telnetd.

Noticed-by: swildner

Merge branch 'master' into amd64

Merge branch 'master' of ssh://crater.dragonflybsd.org/repository/git/dragonfly

Add a wrapper script to allow "foreign" compilers into our build system.

With this commit, all CCVER values not associated with a compiler in
base will be relegated to the wrapper script which then

Add a wrapper script to allow "foreign" compilers into our build system.

With this commit, all CCVER values not associated with a compiler in
base will be relegated to the wrapper script which then (in conjunction
with the compilers.conf file) determines which non-base compiler to
use.

So far, defaults for clang (built from SVN) and pkgsrc/wip/gcc44 are
provided.

For more info see the compilers.conf(5) manual page and my mail on
kernel@:

http://leaf.dragonflybsd.org/mailarchive/kernel/2009-06/msg00013.html

show more ...

Merge branch 'master' of ssh://crater.dragonflybsd.org/repository/git/dragonfly into devel

Remove rexecd(8).

It's been obsolete since the 4.3BSD days, and it's been discouraged for
over a decade.

Add the DragonFly Mail Agent dma(8) to the base.

dma is a small Mail Transport Agent (MTA), designed for home and office
use. It accepts mails from locally installed Mail User Agents (MUA) and
deli

Add the DragonFly Mail Agent dma(8) to the base.

dma is a small Mail Transport Agent (MTA), designed for home and office
use. It accepts mails from locally installed Mail User Agents (MUA) and
delivers the mails either locally or to a remote destination. Remote
delivery includes several features like TLS/SSL support and SMTP authen-
tication (AUTH LOGIN only).

dma is not intended as a replacement for real, big MTAs like sendmail(8)
or postfix(8). Consequently, dma does not listen on port 25 for incoming
connections.

Current list of features:
- Local mail delivery with alias-support
- Remote mail delivery either direct or via a smarthost
- TLS/SSL and STARTTLS support for encrypted connections
- virtualusers (address rewriting) support
- SMTP authentication (currently only plain SMTP login)
- Sendmail compatible command line options
- IPv6 support

Code-collaboration-with: codecode@
Man-page-collaboration-with: swildner@
Approved-by: dillon@

show more ...

Retire the getNAME utility which was only used by an old script in
share/man/man0 (which no longer exists).

Remove lukemftpd from our source tree as discussed on users@:

http://leaf.dragonflybsd.org/mailarchive/users/2006-11/msg00026.html

This is still available from pkgsrc.

* Generally change NOXXX to NO_XXX, similar to work done in FreeBSD.
* Revamp the NO_XXX documentation in make.conf

Submitted-by: "Carl A. Schmidt" <carl@carlschmidt.net>

Uesrland part of PF

Obtained-from: OpenBSD
Ported-by: Devon O'Dell and Simon 'corecode' Schubert

Additioncally, do a pass over the code to get it WARNS=6 clean.
This means mostly fixing const'ness

Uesrland part of PF

Obtained-from: OpenBSD
Ported-by: Devon O'Dell and Simon 'corecode' Schubert

Additioncally, do a pass over the code to get it WARNS=6 clean.
This means mostly fixing const'ness of strings and cleanup sign/unsigned
comparisions. The warnings in authpf about unused arguments have been
removed by use of __unused.

show more ...

Attach bind-9.2.4rc4 to the base system. Rip out bind-8 binaries and add
in / adjust for most bind-9 binaries. Note that some pre-generated header
files have been hacked into /usr/src/usr.sbin/name

Attach bind-9.2.4rc4 to the base system. Rip out bind-8 binaries and add
in / adjust for most bind-9 binaries. Note that some pre-generated header
files have been hacked into /usr/src/usr.sbin/named and might have to be
regenerated from the original distribution when incorporating updates to
bind. But, for the most part, the build is clean.

Clean up rc.d/named and etc/defaults/rc.conf, add a README file to
/etc/namedb describing setup requirements, and change the default
named.conf file and RCNG variables to (if named is enabled) run named in
a chrooted environment as user 'bind'. Adapt the 'getroot' script that
I have used for many years to provide a better root.zone master methodology
instead of the root hints file that has been traditionally shipped.

Adjust the mtree files and distrib-dirs target to create the necessary
infrastructure in /etc/namedb for handling a chrooted named.

NOTE: bind-8 had 'ndc' and 'named-xfer'. bind-8 has rndc and there is no
named-xfer (it is builtin to named). nslookup still exists but is deprecated
in favor of 'dig', and the old dnskeygen/dnsquery mechanism has been replaced
by the newer dnssec-* mechanism.

show more ...