1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-12-22 11:17:19 +00:00
freebsd/usr.sbin
Bartek Rutkowski 4bf41040fd Enable bsdinstall hardening options by default.
As discussed previously, in order to introduce new OS hardening
defaults, we've added them to bsdinstall in 'off by default' mode.
It has been there for a while, so the next step is to change them
to 'on by defaul' mode, so that in future we could simply enable
them in base OS.

Reviewed by:	brd
Approved by:	adrian
Differential Revision:	https://reviews.freebsd.org/D9641
2017-02-21 09:37:33 +00:00
..
ac
accton Create an acct package for accounting tools. 2016-01-21 17:49:10 +00:00
acpi Merge ACPICA 20161222. 2017-01-05 21:28:25 +00:00
adduser
amd Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of 2017-01-06 04:22:25 +00:00
ancontrol ancontrol(8): replace comma with semicolon when pertinent. 2016-08-09 19:46:05 +00:00
apm Create a package for apm(8). 2016-01-21 18:41:55 +00:00
apmd It seems <sys/types.h> is a new prerequisite for <bitstring.h> after 2016-05-24 03:15:46 +00:00
arp Cleanup on usr.sbin/arp/arp.c 2017-02-09 19:58:12 +00:00
asf
audit
auditd
auditdistd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
auditreduce
authpf
autofs Make autounmountd(8) not die when traced with "truss -p". 2016-11-02 08:12:37 +00:00
bhyve bhyve: whitespace fix for r313727 2017-02-14 16:49:32 +00:00
bhyvectl Fix typo. 2016-11-13 17:55:27 +00:00
bhyveload bhyve: improve memory size documentation 2016-06-26 14:44:01 +00:00
binmiscctl Another attempt at resolving CID 1305629. The test of cmd == -1 2016-05-13 17:48:04 +00:00
blacklistctl DIRDEPS_BUILD: Connect new directories and update dependencies. 2016-06-03 19:25:30 +00:00
blacklistd DIRDEPS_BUILD: Connect new directories and update dependencies. 2016-06-03 19:25:30 +00:00
bluetooth Avoid undefined behavior when calling va_start() in bnep_send_control(), 2016-08-29 19:40:46 +00:00
boot0cfg Adjust previous fix to conform to the existing style in this file. 2016-01-14 15:49:24 +00:00
bootparamd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
bsdconfig Guard against bad service name argument(s) to load_rc_config() 2016-10-16 20:59:28 +00:00
bsdinstall Enable bsdinstall hardening options by default. 2017-02-21 09:37:33 +00:00
bsnmpd Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
btxld Reuse our roundup2() macro instead of reinventing the wheel. 2016-04-18 17:30:33 +00:00
camdd Fix misc Coverity defects in camdd(8) 2017-01-20 21:40:04 +00:00
cdcontrol Remove last remnants of acd(4), mcd(4), and scd(4) drivers. 2016-08-25 19:36:58 +00:00
chkgrp
chown chown/chgrp: Add SIGINFO handler 2017-01-08 06:58:42 +00:00
chroot
ckdist
clear_locks
config Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
cpucontrol Add support for microcode update on newer AMD CPUs (10h+) 2016-11-02 16:15:49 +00:00
crashinfo Update crashinfo to work with newer gdb from ports. 2016-07-20 18:41:47 +00:00
cron Add a 'force' option for non-interactive crontab removal 2016-12-20 17:12:17 +00:00
crunch Teach crunchide about EM_S390 to make bootstrapping from future 2017-01-10 14:40:30 +00:00
ctladm Replace Cyrillic characters with Latin (normal) ones. 2017-02-03 16:21:30 +00:00
ctld Fix build with ICL_KERNEL_PROXY. 2017-01-20 17:43:36 +00:00
ctm Remove a link to the CTM section of the Handbook, which no longer exists. 2016-04-14 21:56:36 +00:00
daemon DIRDEPS_BUILD: Update dependencies. 2016-11-13 00:11:30 +00:00
dconschat
devctl Implement 'devctl clear driver' to undo a previous 'devctl set driver'. 2016-08-29 22:48:36 +00:00
devinfo Use uintmax_t (typedef'd to rman_res_t type) for rman ranges. 2016-03-18 01:28:41 +00:00
digictl
diskinfo Quell Coverity for diskinfo(8) 2017-01-04 00:39:06 +00:00
dumpcis
editmap DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
edquota Use strlcpy() instead of strncpy() to ensure that qup->fsname is NUL 2016-05-13 00:02:03 +00:00
eeprom
efivar DIRDEPS_BUILD: Connect new dependencies. 2016-11-13 00:11:23 +00:00
etcupdate etcupdate: preserve the metadata of the destination file 2016-09-08 15:53:49 +00:00
extattr Disable extattr test on UFS1. 2016-09-21 10:58:58 +00:00
extattrctl
fdcontrol Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
fdformat Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
fdread Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
fdwrite
fifolog Pass the correct size argument to ioctl(DIOCGSECTORSIZE) 2016-11-22 22:10:58 +00:00
flowctl
fmtree Use type-independent formats for printing nlink_t and ino_t. 2017-01-06 16:59:33 +00:00
freebsd-update MFportsnap r264740: Use case insensitive match when parsing host(1) output. 2016-10-12 20:24:33 +00:00
fstyp Fix broken fstyp exfat testcase 2017-01-14 01:08:04 +00:00
ftp-proxy
fwcontrol
getfmac
getpmac
gpioctl Fix gcc warnings about possibly uninitialized variables in gpioctl.c. 2016-03-12 15:10:30 +00:00
gssd usr.sbin: minor spelling fixes on comments. 2016-05-01 16:41:25 +00:00
gstat Add flag -B which does the same like batch mode but without exiting after 2016-11-09 07:31:39 +00:00
hyperv hyperv/vss: Install the userland daemon to /usr/sbin instead of / 2016-11-17 03:02:35 +00:00
i2c More typos in strings. 2016-12-02 11:30:21 +00:00
ifmcstat
inetd Fix up r312105 2017-01-14 10:20:38 +00:00
iostat Make the "r/s" and "w/s" fields in "iostat -x" a little bit wider; 2016-09-21 11:22:19 +00:00
iovctl Clean up repeated "All rights reserved" 2016-03-14 17:41:17 +00:00
ip6addrctl
ipfwpcap MFV r313676: libpcap 1.8.1 2017-02-13 08:23:39 +00:00
iscsid Remove ISCSI_MAX_DATA_SEGMENT_LENGTH, using negotiated value. 2017-01-20 17:14:10 +00:00
jail Don't assign rtjp twice. 2016-12-26 19:27:12 +00:00
jexec Define which of the username options (-u/-U) to jexec(8) is the default. 2016-04-23 22:31:58 +00:00
jls Improve IP address list representation in libxo output. 2016-12-24 23:51:27 +00:00
kbdcontrol kbdcontrol: add -P path option to add keymap search paths 2016-03-16 04:05:02 +00:00
kbdmap
keyserv keyserv(1): drop useless comparison. 2016-05-30 20:41:55 +00:00
kgmon Use NULL instead of 0 for pointers. 2016-04-14 11:41:30 +00:00
kgzip Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
kldxref kldxref: bump MAXSEGS to 3 2017-02-10 19:17:10 +00:00
lastlogin
lmcconfig Use strlcpy() instead of strncpy() when copying ifname to ensure 2016-05-15 21:45:04 +00:00
lpr Rename getline with get_line to avoid collision with getline(3) 2016-05-10 11:17:19 +00:00
lptcontrol
mailstats DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
mailwrapper
makefs makefs: use a macro to simplify per-fs function declarations 2017-02-16 03:12:47 +00:00
makemap DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
manctl
memcontrol
mergemaster META_MODE: Don't require filemon(4) for mergemaster(8)/etcupdate(8) 2016-07-12 19:47:01 +00:00
mfiutil Avoid taking the address of a packed struct member in mfiutil 2017-01-09 19:39:35 +00:00
mixer mixer(8): Style: Tag no-return usage() as __dead2 2016-05-11 17:27:27 +00:00
mld6query
mlxcontrol
mount_smbfs
mountd Fix the man page to reflect the change done by r307890 to mountd.c 2016-10-25 00:59:23 +00:00
moused Add Elantech trackpad to the list of known models 2016-09-26 22:07:45 +00:00
mpsutil Plug various resources leak 2016-04-20 21:32:34 +00:00
mptable
mptutil "Buses" is the preferred plural of "bus" 2017-01-15 17:54:01 +00:00
mtest mtest: Prevent access to uninitialized value. 2016-04-01 01:35:52 +00:00
nandsim usr.sbin: minor spelling fixes on comments. 2016-05-01 16:41:25 +00:00
nandtool
ndiscvt Remove the old depend (mkdep) code and make FAST_DEPEND the one true way. 2016-03-30 23:50:23 +00:00
ndp Fix style(9) 2017-02-14 18:11:16 +00:00
newsyslog Fix improper use of "its". 2016-11-08 23:59:41 +00:00
nfscbd Cleanup unnecessary semicolons from utilities we all love. 2016-04-15 22:31:22 +00:00
nfsd Patch the nfsd so that it doesn't register with rpcbind for an NFSv4 only 2016-12-08 23:29:56 +00:00
nfsdumpstate
nfsrevoke
nfsuserd
ngctl
nghook
nmtree Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
nologin
nscd Revert crap accidentally committed 2017-01-28 16:31:23 +00:00
ntp Fix up grammar. 2017-01-01 10:37:10 +00:00
nvram
ofwdump
pc-sysinstall Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
pciconf pciconf(8): Replace an assert with errx 2017-02-11 18:04:43 +00:00
periodic Better document security_show_{success,info,badconfig} in /etc/periodic.conf 2016-05-21 02:14:11 +00:00
pkg Remove usage of _WITH_GETLINE from usr.sbin 2016-07-30 01:10:05 +00:00
pmcannotate
pmccontrol Use macro MAX() from sys/param.h. 2016-04-22 05:07:59 +00:00
pmcstat Remove an unused field from struct pmcstat_image. 2016-10-15 23:46:55 +00:00
pmcstudy DIRDEPS_BUILD: Add some missing dirctories to the build. 2016-08-31 19:30:59 +00:00
pnpinfo Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
portsnap Avoid division by zero in the rare case that portsnap needs to fetch 2016-12-16 22:37:16 +00:00
powerd Directly set the NONBLOCK flags when creating the socket 2016-05-10 11:18:53 +00:00
ppp Fix build of ppp when WITHOUT_PAM is set 2016-07-04 21:18:57 +00:00
pppctl
praliases DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
praudit
procctl
prometheus_sysctl_exporter Add a Prometheus exporter for sysctl values. 2016-12-21 08:29:44 +00:00
pstat - pstat(8) does not accept any arguments other than getopt() args, 2016-12-26 17:34:27 +00:00
pw Really restore the old behaviour for pw usermod -m 2017-01-22 20:03:18 +00:00
pwd_mkdb Following revision r295924, the changes to a db file should be fsynced 2016-02-23 15:28:13 +00:00
quot prefix UFS symbols with UFS_ to reduce namespace pollution 2017-02-15 19:50:26 +00:00
quotaon
rarpd When clearing rtmsg, pass &rtmsg to bzero() instead of the address of 2016-05-17 04:03:45 +00:00
repquota
rip6query
rmt Use NULL instead of 0 for pointers. 2016-04-14 12:25:00 +00:00
route6d Purge varargs.h in favor of stdarg.h. 2017-01-13 08:01:27 +00:00
rpc.lockd Add missing break in lock_partialfilelock(..) with NFS_RESERR 2016-06-13 11:19:06 +00:00
rpc.statd Mark out_of_mem(..) and usage(..) with __dead2 as they both directly call exit 2016-05-29 04:18:47 +00:00
rpc.umntall
rpc.yppasswdd Wrap EXPAND(..) macro with a do-while(0) loop and put a single statement on each line 2016-05-22 19:06:38 +00:00
rpc.ypupdated DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rpc.ypxfrd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rpcbind Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of 2017-01-06 04:13:08 +00:00
rrenumd DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
rtadvctl
rtadvd Add link-layer address option in RA even for IFT_L2VLAN and IFT_BRIDGE. 2016-11-05 19:51:13 +00:00
rtprio
rtsold Garbage collect IFT_IEEE80211 (but leave the define for possible reuse) 2017-01-28 17:08:40 +00:00
rwhod Style(9) fixes 2017-01-09 00:25:33 +00:00
sa Skip lastcomm and sa tests on unsupported architectures 2016-06-26 00:53:31 +00:00
sendmail Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of 2017-01-06 04:16:03 +00:00
service
services_mkdb Remove usage of _WITH_GETLINE from usr.sbin 2016-07-30 01:10:05 +00:00
sesutil Fix sesutil fault operation. 2016-09-30 20:35:12 +00:00
setfib
setfmac
setpmac
smbmsg smbmsg: use a more convenient way of accessing data read from a slave 2016-11-11 15:00:13 +00:00
snapinfo
spkrtest
spray
syslogd Sort sys/ #includes some more 2017-02-07 01:28:55 +00:00
sysrc Change my given name from "Garrett" to "Ngie" 2016-06-13 10:30:49 +00:00
tcpdchk
tcpdmatch
tcpdrop
tcpdump Reduce diff to upstream using HAVE_CAPSICUM instead of __FreeBSD__. It'll also 2017-02-02 19:56:41 +00:00
tests Merge ^/user/ngie/release-pkg-fix-tests to unbreak how test files are installed 2016-05-04 23:20:53 +00:00
timed Undo the bogus gethostname() change from r299709. 2016-05-14 04:29:13 +00:00
traceroute Capsicumize traceroute. 2017-02-20 23:48:50 +00:00
traceroute6 Fix an infinite loop at an non-responding hop when other echo replies 2016-11-05 18:00:36 +00:00
trpt Remove "long" variables from the TCP stack (not including the modular 2016-10-06 16:28:34 +00:00
tzsetup Fix build of tzsetup when WITHOUT_DIALOG is set 2016-10-22 22:35:39 +00:00
uathload Rename devname to udevname after including stdlib.h in r303445 2016-07-30 20:39:39 +00:00
uefisign uefisign: Remove backwards-compatibility sys/capability.h support 2016-09-19 16:07:32 +00:00
ugidfw
uhsoctl
unbound Upgrade to Unbound 1.5.9. 2016-09-04 12:17:57 +00:00
usbconfig
usbdump Reuse our roundup2() macro instead of reinventing the wheel. 2016-04-18 17:30:33 +00:00
utx
vidcontrol Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
vigr
vipw
wake
watch
watchdogd fix a watchdogd regression introduced in r308040 2016-11-10 10:45:12 +00:00
wlandebug
wpa Extend manual to cover more commands and options. 2017-01-24 08:56:54 +00:00
yp_mkdb
ypbind Use strlcpy() instead of strncpy() when copying to dom_domain to 2016-05-12 21:35:40 +00:00
ypldap Use memset(3) instead of bzero(3). 2016-12-02 06:07:27 +00:00
yppoll
yppush DIRDEPS_BUILD: Regenerate without local dependencies. 2016-02-24 17:20:11 +00:00
ypserv Conditionalize wrap(3) use based on MK_TCP_WRAPPERS instead of 2017-01-06 04:10:33 +00:00
ypset
zic
zonectl DIRDEPS_BUILD: Connect new directories and update dependencies. 2016-06-03 19:25:30 +00:00
zzz
Makefile Add a Prometheus exporter for sysctl values. 2016-12-21 08:29:44 +00:00
Makefile.amd64 Remove the si(4) driver and sicontrol(8) for Specialix serial cards. 2016-08-19 21:14:27 +00:00
Makefile.arm
Makefile.arm64
Makefile.i386 Remove pc98 support completely. 2017-01-28 02:22:15 +00:00
Makefile.inc
Makefile.mips
Makefile.powerpc Create a new MACHINE_ARCH for Freescale PowerPC e500v2 2016-10-22 01:57:15 +00:00
Makefile.sparc64