1
0
mirror of https://git.FreeBSD.org/src.git synced 2024-10-18 02:19:39 +00:00
Mirror of the FreeBSD src repository https://git.FreeBSD.org/src.git .
Go to file
Kyle Evans dee3902d1e bhyveload(8): document some SECURITY CONSIDERATIONS
The situation is improved now that we're running in a sandbox, but there
is still some host machine access that could be concerning depending on
the context.  These concerns may be somewhat mitigated by the fact that
the host machine usually provides the loader binary, even when the guest
image is providing the loader scripts -- they only bring the lua
scripts, and they have to be able to execute arbitrary syscalls rather
than the interfaces provided by libsa(3).

Reviewed by:	jhb, markj

(cherry picked from commit 5df041c4bb)
2024-01-22 11:19:18 -06:00
.cirrus-ci Cirrus-CI: add some timing info on pkg install failure 2021-08-04 15:02:00 -04:00
.github MAINTAINERS: Add myself to stand 2023-05-07 22:30:10 -06:00
bin cp: Add tests for hard link case. 2024-01-17 19:28:22 +01:00
cddl zfsd: fault disks that generate too many I/O delay events 2024-01-19 18:50:25 -07:00
contrib vendor/bc: MFC upgrade from version 6,6.0 to 6.7.5 2024-01-18 18:51:39 +01:00
crypto kerberos: Fix numerous segfaults when using weak crypto 2024-01-22 07:48:51 -08:00
etc Proactively remove libc++ __tuple header file that became a directory 2024-01-07 18:46:19 +01:00
gnu Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
include resolv: Add a required include to resolv.h 2024-01-15 19:33:59 +09:00
kerberos5 kerberos5: Mitigate the possibility of using an old libcrypto 2024-01-22 07:49:05 -08:00
lib Remove _POSIX_PRIORITIZED_IO references from man pages 2024-01-19 18:52:18 -07:00
libexec libexec/rc/rc.initdiskless: make tar's path flexible 2024-01-19 05:45:28 -05:00
release Increase the size of riscv GENERICSD images to 6 GB 2024-01-15 07:29:35 -06:00
rescue zfs: merge openzfs/zfs@32949f256 (zfs-2.2-release) into stable/14 2023-09-03 09:15:24 +02:00
sbin route: error on IPv4 network routes with incorrect destination 2024-01-22 10:42:16 -06:00
secure ssh: Update to OpenSSH 9.6p1 2024-01-07 14:31:11 -05:00
share pci_vendors: update to 2023-11-11 2024-01-22 10:40:39 +01:00
stand Stop #defining FREEBSD_ELF 2024-01-04 16:28:48 -08:00
sys jail: add security.jail.mlock_allowed 2024-01-22 10:39:16 +01:00
targets Merge llvm-project main llvmorg-17-init-19304-gd0b54bb50e51 2024-01-07 18:46:17 +01:00
tests Add a regression test for PR 276191. 2024-01-19 19:01:14 -07:00
tools Make kldxref a bootstrap tool and use unconditionally 2024-01-18 14:30:06 -08:00
usr.bin renice: Clean up the tests a bit. 2024-01-21 17:08:48 +01:00
usr.sbin bhyveload(8): document some SECURITY CONSIDERATIONS 2024-01-22 11:19:18 -06:00
.arcconfig arcanist: use FreeBSD/git project repository instead of FreeBSD/svn 2022-08-23 14:16:41 +00:00
.arclint
.cirrus.yml Cirrus CI: Trigger on pull requests or downstream repos 2024-01-11 08:29:12 -05:00
.clang-format Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
.git-blame-ignore-revs git-blame-ignore-revs: OptionalObsoleteFiles.inc sorting commits 2023-12-02 00:56:40 +00:00
.gitattributes
.gitignore .gitignore: Ignore LSP generated .cache 2023-03-07 10:04:18 -05:00
CONTRIBUTING.md CONTRIBUTING.md: reinsert double spaces 2023-07-10 12:24:24 -06:00
COPYRIGHT Happy New Year 2023! 2023-01-01 13:44:43 +08:00
LOCKS Remove $FreeBSD$: one-line bare tag 2023-08-16 11:55:20 -06:00
MAINTAINERS Remove $FreeBSD$: one-line bare tag 2023-08-16 11:55:20 -06:00
Makefile pkgbase: create source package 2023-12-07 08:47:16 +01:00
Makefile.inc1 Make kldxref a bootstrap tool and use unconditionally 2024-01-18 14:30:06 -08:00
Makefile.libcompat build{libcompat}: Pass UNIVERSE_TOOLCHAIN_PATH to the _lc_build-tools submake 2023-08-21 21:00:45 -07:00
Makefile.sys.inc Remove $FreeBSD$: one-line sh pattern 2023-08-16 11:55:03 -06:00
ObsoleteFiles.inc geom_map(4): Garbage collect disconnected driver 2024-01-18 21:14:46 +01:00
README.md README.md: link to the list of supported platforms 2022-11-01 12:20:55 -03:00
RELNOTES RELNOTES: Add an entry for commit b8e137d8d3 2023-12-26 15:29:11 -08:00
UPDATING UPDATING: Add an entry for commit d34f4baaf1 2024-01-19 17:58:15 -08:00

FreeBSD Source:

This is the top level of the FreeBSD source directory.

FreeBSD is an operating system used to power modern servers, desktops, and embedded platforms. A large community has continually developed it for more than thirty years. Its advanced networking, security, and storage features have made FreeBSD the platform of choice for many of the busiest web sites and most pervasive embedded networking and storage devices.

For copyright information, please see the file COPYRIGHT in this directory. Additional copyright information also exists for some sources in this tree - please see the specific source directories for more information.

The Makefile in this directory supports a number of targets for building components (or all) of the FreeBSD source tree. See build(7), config(8), FreeBSD handbook on building userland, and Handbook for kernels for more information, including setting make(1) variables.

For information on the CPU architectures and platforms supported by FreeBSD, see the FreeBSD website's Platforms page.

Source Roadmap:

Directory Description
bin System/user commands.
cddl Various commands and libraries under the Common Development and Distribution License.
contrib Packages contributed by 3rd parties.
crypto Cryptography stuff (see crypto/README).
etc Template files for /etc.
gnu Commands and libraries under the GNU General Public License (GPL) or Lesser General Public License (LGPL). Please see gnu/COPYING and gnu/COPYING.LIB for more information.
include System include files.
kerberos5 Kerberos5 (Heimdal) package.
lib System libraries.
libexec System daemons.
release Release building Makefile & associated tools.
rescue Build system for statically linked /rescue utilities.
sbin System commands.
secure Cryptographic libraries and commands.
share Shared resources.
stand Boot loader sources.
sys Kernel sources (see sys/README.md).
targets Support for experimental DIRDEPS_BUILD
tests Regression tests which can be run by Kyua. See tests/README for additional information.
tools Utilities for regression testing and miscellaneous tasks.
usr.bin User commands.
usr.sbin System administration commands.

For information on synchronizing your source tree with one or more of the FreeBSD Project's development branches, please see FreeBSD Handbook.