kevans committed rGb567434a592e: stand: set st_dev/st_ino in the loader's ZFS stat for veriexec (authored by Etienne Bonnand <etienne.bonnand@defenso.fr>).

kevans committed rG135df7785431: usb: xhci: allow up to 1s for SET_ADDRESS.

kevans committed rG8befc9e8b194: kern: fix oversight in security.bsd.unprivileged_kenv_read.

kevans committed rG4f42ec2f38ee: prometheus_sysctl_exporter: don't abort on bad labels.

kevans committed rGf7d84c7b3858: evdev: add devnum sysctl (authored by quentin.thebault_defenso.fr).

kevans committed rG6ce4a4dea4df: stdio: *memstream: grow the buffer by 1.5x on write.

kevans committed rG3d29c3a3ec99: stdio: *memstream: decouple the buffer size from the stream length.

kevans committed rG1ce0ad4b3aa5: rockchip: fix stack overflow in rk8xx_rtc.

kevans committed rGa76cac3a2062: usbdump: add -t to omit timestamps.

kevans committed rGc675e0710ea6: stdio: *memstream: slightly streamline growth function.

kevans committed rG10904e0c2b4c: hid: u2f: stop interrupts on last-close.

kevans committed rG29a68ae63cac: kern: syscall_thread_enter() cannot fail.

kevans committed rG3e0270c52875: kern: osd: abstract away the math for locating a slot method.

kevans committed rG240bd2eeb21f: evdev: use a prometheus-safe label for ev_sysctl_tree.

kevans committed rGda9d26a215a6: kern: add a security knob to disable unprivileged access to kenv.

kevans committed rGf58af5d9c538: kern: osd: trash a slot's methods upon deregistration.

kevans committed rG2b25a0ebb48d: socket: remove tautological condition in so_unsplice().

kevans committed rG690207d4efc1: build: provide a FORTIFY_SOURCE.<src file> override.

kevans committed rG6834c2660904: adjtime(2): document that delta can be NULL.

kevans committed rG70c07351df58: rights(4): fix our representation of the unused bits.

kevans committed rGe73fcd4c3205: evdev: add devnum sysctl (authored by quentin.thebault_defenso.fr).

kevans committed rG6e81fbf5833d: bsdinstall: add a hardening knob for unprivileged kenv access.

kevans committed rG387634c880be: kern: syscall_thread_enter() cannot fail.

kevans committed rG01e37e47d240: rockchip: fix stack overflow in rk8xx_rtc.

kevans committed rGc839c1566147: kern: add a security knob to disable unprivileged access to kenv.

kevans committed rGe55aa7b67cb0: evdev: use a prometheus-safe label for ev_sysctl_tree.

kevans committed rG8ab54c5d7dd9: rights(4): fix our representation of the unused bits.

kevans committed rGf08af2491ffd: adjtime(2): document that delta can be NULL.

kevans committed rGa3a884c0d43a: stdio: *memstream: grow the buffer by 1.5x on write.

kevans committed rG781defc7eb06: stdio: *memstream: decouple the buffer size from the stream length.

kevans committed rG28327c58ee6d: stdio: *memstream: slightly streamline growth function.

kevans committed R9:722a2d47e5ae: pgpkeys: add my @f.o uid to my new key, as well.

kevans committed R9:eb8499eb89a5: pgpkeys: update the keys for core@.

kevans committed R9:9452c6943ef8: news: add the ports reset script.

kevans committed R9:bd5cfe18aceb: pgpkeys: include second key for kevans.

kevans committed rG2e3892671a6f: hid: u2f: stop interrupts on last-close.

kevans added a reverting change for rGd94e034d5046: pkg: Add -j and -r options: rG9dfaf1cb37f8: Revert "pkg: Add -j and -r options".

kevans committed rG9dfaf1cb37f8: Revert "pkg: Add -j and -r options".

kevans committed rG87fb416ac882: usbdump: add -t to omit timestamps.

kevans committed rGd387a43ec8e2: rockchip: fix stack overflow in rk8xx_rtc.

kevans committed rGf5329a0d1471: kern: imgact: fix imgp->interpreted.

kevans committed rGeca26803d880: kern: syscall_thread_enter() cannot fail.

kevans committed rGcb8bda40695f: evdev: use a prometheus-safe label for ev_sysctl_tree.

kevans committed rG3de9dc5bf4b4: libc: gen: add a test for rtld underflowing our posix_spawn thread.

kevans committed rG4ffa7e126ed0: kern: osd: trash a slot's methods upon deregistration.

kevans committed rG72ebcfae48c4: kern: osd: abstract away the math for locating a slot method.

kevans committed rG4fd518fcb2bb: kern: add a security knob to disable unprivileged access to kenv.

kevans committed rG57fefbee1f95: rights(4): fix our representation of the unused bits.

kevans committed rG8ed580b1d381: adjtime(2): document that delta can be NULL.

kevans committed rG8a3d28375450: socket: remove tautological condition in so_unsplice().

kevans committed rGc08a86e0c6d9: tests: unix: add SCM_RIGHTS tests for SO_PASSRIGHTS.

kevans committed rG59bd4840df03: linux: implement SO_PASSRIGHTS.

kevans committed rG2f363febf8bf: tests: unix: pull a recvfd_payload_cmsg out of recvfd_payload.

kevans committed rG0ae7df3708dd: sockets: plumb SO_PASSRIGHTS into *sockopt(2).

kevans committed rG9b16399225f8: unix: implement basic SO_PASSRIGHTS functionality.

kevans committed R9:31179643a9d6: 15.x relnotes: note stable MAC address changes.

kevans committed R11:84f7eb7ee051: sysutil/u-boot-rpi*: zap CONFIG_ENV_FAT_DEVICE_AND_PART.

kevans committed rG13184a69faa7: build: provide a FORTIFY_SOURCE.<src file> override.

kevans committed rGf77062f506f7: lualoader: add be-list and be-switch commands.

kevans committed rGb575dac3e415: devd: Use PF_LOCAL instead of PF_INET (authored by zarychtam_plan-b.pwste.edu.pl).

kevans committed rGa03b45d38f8f: jail: open the fstab files with fopen("re") (authored by crest_freebsd_rlwinm.de).

kevans committed rG2edb8d4f60cd: cron: log when a crontab path is too long (authored by chris.longros_gmail.com).

kevans committed rG76720b010873: pci: bcm2838: cleanup on attach failure to fix devmatch panic.

kevans committed rGdc7494fb32df: pci: pci_host_generic: provide cleanup methods outside of detach.

kevans committed rGa53d4b5b2a08: kern: ofw: provide ofw_bus_destroy_iinfo to teardown interrupt-map.

kevans committed rGbddfcbd9bbc6: lualoader: add be-list and be-switch commands.

kevans committed rGee07da0c1e95: jail: open the fstab files with fopen("re") (authored by crest_freebsd_rlwinm.de).

kevans committed rG92a2764ba175: linuxkpi: work with numpages > 1 in the set_pages_*() KPIs.

kevans committed rG87224fa65140: devd: Use PF_LOCAL instead of PF_INET (authored by zarychtam_plan-b.pwste.edu.pl).

kevans committed rG10b44bf791c9: cron: log when a crontab path is too long (authored by chris.longros_gmail.com).

kevans committed rG52e2e6bfc31a: ssp: fix our gets_s implementation under _FORTIFY_SOURCE.

kevans committed rGdc0cc22a8981: fexecve(2): call out a scenario where you want !O_EXEC.

kevans committed rG4a56809bb9eb: ctld: kernel-sourced portal groups are not dummies.

kevans committed rGf25b4d986c94: pci: bcm2838: cleanup on attach failure to fix devmatch panic.

kevans committed rG2db75e8df850: linuxkpi: work with numpages > 1 in the set_pages_*() KPIs.

kevans committed rG800c4034d201: kern: ofw: provide ofw_bus_destroy_iinfo to teardown interrupt-map.

kevans committed rG1f7337264f7d: pci: pci_host_generic: provide cleanup methods outside of detach.

kevans committed rG0de1f3a8aa7f: fexecve(2): call out a scenario where you want !O_EXEC.

kevans committed rG3129ecee97c1: ctld: kernel-sourced portal groups are not dummies.

kevans committed rGc7ff706b31c2: lualoader: add be-list and be-switch commands.

kevans committed rGa05af6ddf901: pci: bcm2838: cleanup on attach failure to fix devmatch panic.

kevans committed rGb230a7b9a52c: kern: ofw: provide ofw_bus_destroy_iinfo to teardown interrupt-map.

kevans committed rG31a94ec32b53: pci: pci_host_generic: provide cleanup methods outside of detach.

kevans committed rG8dad29555a58: linuxkpi: fix 32-bit arm build.

kevans committed rG67f7f2781daa: linuxkpi: work with numpages > 1 in the set_pages_*() KPIs.

kevans committed rG92f623e4a988: rge: add the Intel Killer E5000 PCI ID.

kevans committed rGd64438a09dc8: libregex: fix our mapping for \w.

kevans committed rG187de25ef99e: jail: avoid leaking jail config fds to exec.* hooks (authored by crest_freebsd_rlwinm.de).

kevans committed rGc35bb8ba8984: jail: avoid leaking jail config fds to exec.* hooks (authored by crest_freebsd_rlwinm.de).

kevans committed rG58811b0ae096: jail: open the fstab files with fopen("re") (authored by crest_freebsd_rlwinm.de).

kevans committed rG8583bcb5b400: Revert "build: provide a FORTIFY_SOURCE.<src file> override".

kevans added a reverting change for rGc46a0b590716: build: provide a FORTIFY_SOURCE.<src file> override: rG8583bcb5b400: Revert "build: provide a FORTIFY_SOURCE.<src file> override".

kevans committed rG9c18d55a768a: fexecve(2): call out a scenario where you want !O_EXEC.

kevans committed rG4d4acdbfc22c: stat: fix use of devname(3).

kevans committed rG910f78a5143a: tests: fix remaining test failures under _FORTIFY_SOURCE.

kevans committed rGd98f4f0698ef: ssp: fix our gets_s implementation under _FORTIFY_SOURCE.

kevans committed rGc46a0b590716: build: provide a FORTIFY_SOURCE.<src file> override.

kevans committed rG09db36421d01: Fix memory corruption bugs in BSM record parsing (authored by csjp).

kevans committed rG14dfca710fd0: mac_seeotheruids: allow specificgid to be a list of groups.

kevans committed rGb9414a1ccf1d: Fix memory corruption bugs in BSM record parsing (authored by csjp).