summaryrefslogtreecommitdiff
path: root/share
AgeCommit message (Collapse)Author
2018-07-10Xr pci(4)Jonathan Gray
2018-07-10sync arm64 and armv7 pciJonathan Gray
2018-07-09no more i386_vm86.2;Jason McIntyre
2018-07-09these pages don;t need Bk/Ek;Jason McIntyre
order the options in pkg_outdated;
2018-07-09out-of-date -> pkg_outdated;Jason McIntyre
2018-07-09out-of-date -> pkg_outdatedMarc Espie
2018-07-09resolve-lib -> port-resolve-lib-helper;Jason McIntyre
2018-07-09resolve-lib -> port-resolve-lib-helperMarc Espie
2018-07-09move helper script to a more sensible nameMarc Espie
2018-07-09rename pure helper script, not for user consumptionMarc Espie
2018-07-09dolock -> portlock;Jason McIntyre
2018-07-09dolock -> portlockMarc Espie
(no discussion about this one)
2018-07-09manpage for bnxt(4)Jonathan Matthew
2018-07-09remove bogus .Sx macros; noticed by Mikhail <mp39590 at gmail dot com>Ingo Schwarze
OK jmc@
2018-07-08Include the standard string mentioning 802.11 versions in bwfm(4)'sStuart Henderson
description, to aid searches. ok and reminder for usb(4) and pci(4) jmc@
2018-07-05supply an arch for Dt;Jason McIntyre
2018-07-05acpipci(4)Mark Kettenis
2018-07-05update the route message documentationSebastian Benoit
ok claudio@
2018-07-05Add support for the VIA VX900 chipset in viapm(4).Frederic Cambus
OK kettenis@
2018-07-02Add @acpi attachment.Mark Kettenis
Pointed out by mlarkin@
2018-07-01sync description for acpisurface and remove a blank line;Jason McIntyre
ok mlarkin
2018-06-30end of line requires \Theo de Raadt
2018-06-30acpisurface(4): man pages and makefile changesMike Larkin
2018-06-27certificate keyword renamed to cert; from raf czlonkaJason McIntyre
2018-06-26add missing .An and .Mt macros below AUTHORSIngo Schwarze
2018-06-26various minor tweaks;Jason McIntyre
2018-06-26move ports infra manpages into base, as discussed withMarc Espie
schwarze@, deraadt@, landry@...
2018-06-23Small wording tweak which is slightly closer to the ever elusive truth.rob
Ok tb@
2018-06-19Rename some unused fields in struct uvmexp toKenneth R Westerback
unusedNN. Missing man page bits pointed out by jmc@. Ports source scan by sthen@. ok deraadt@ guenther@
2018-06-19Update update-patches description, document EDIT_PATCHESkn
OK jca
2018-06-19describe more supported hardwareJonathan Matthew
2018-06-19Correct pfCntProtoCksum description.Martin Pieuchot
From joel@
2018-06-19eoip tunnels Ethernet, not IPDavid Gwynne
2018-06-18space needed between macro args and punctuation;Jason McIntyre
2018-06-18point readers to multicast(4) directly, the documentation has moved.Sebastian Benoit
ok jmc@
2018-06-18Talk about the common USE_LIBTOOL vs BUILD_DEPENDS case (ports that onlyStuart Henderson
need libtool.m4 from devel/libtool just need BUILD_DEPENDS, USE_LIBTOOL is a special case for things that don't work with base libtool). ok aja espie
2018-06-18consistently spell "real-time clock";Jason McIntyre
ok deraadt bentley schwarze
2018-06-18the directive is "listen on";Jason McIntyre
2018-06-18remove the example output from ifconfig and route: it will keep getting out ofJason McIntyre
date and provided little aid anyway; merge the network if and routing tables sections; ok benno
2018-06-17if there is an audioamd page, i can;t find it;Jason McIntyre
while here, kill some Tn;
2018-06-16TIOCSTI is goneTheo de Raadt
2018-06-16Mention i.MX 7.Mark Kettenis
2018-06-16imxrtc(4)Mark Kettenis
2018-06-13Tweak about "-p" and "-pg".YASUOKA Masahiko
ok jsg
2018-06-11use the correct name for the cert; ok gillesJason McIntyre
2018-06-07Make callers of VOP_CREATE(9) and VOP_MKNOD(9) responsible forVisa Hankala
unlocking the directory vnode. OK mpi@, helg@
2018-06-07tweak previous;Jason McIntyre
2018-06-07Mention enabling PIE by default is turned off by using "-pg".YASUOKA Masahiko
2018-06-06pluart(4) is mi nowJonathan Gray
2018-06-06Add RETGUARD to clang for amd64. This security mechanism uses per-functionmortimer
random cookies to protect access to function return instructions, with the effect that the integrity of the return address is protected, and function return instructions are harder to use in ROP gadgets. On function entry the return address is combined with a per-function random cookie and stored in the stack frame. The integrity of this value is verified before function return, and if this check fails, the program aborts. In this way RETGUARD is an improved stack protector, since the cookies are per-function. The verification routine is constructed such that the binary space immediately before each ret instruction is padded with int03 instructions, which makes these return instructions difficult to use in ROP gadgets. In the kernel, this has the effect of removing approximately 50% of total ROP gadgets, and 15% of unique ROP gadgets compared to the 6.3 release kernel. Function epilogues are essentially gadget free, leaving only the polymorphic gadgets that result from jumping into the instruction stream partway through other instructions. Work to remove these gadgets will continue through other mechanisms. Remaining work includes adding this mechanism to assembly routines, which must be done by hand. Many thanks to all those who helped test and provide feedback, especially deaadt, tb, espie and naddy. ok deraadt@