Update the number of default wskbd entries

OK deraadt@

Create /dev/efi on amd64 and arm64.

ok yasuoka@

Nuke Vax (ra,rx) and HP-300 (hd) devices.

Noticed by kn@

ok millert@

Remove xy/xd. SMD left with sparc.

ok kn@ deraadt@

There is only one pf(4); OK sashan

stop creating old drm device nodes

/dev/switch[0-4] is no longer needed.

create /dev/ drm nodes with the same names as linux

This was proposed by Emil Velikov to simplify libdrm and will remove the
need for some patches in ports.

/dev/drm0 -> /dev/dri/card0
/dev/drmR128

create /dev/ drm nodes with the same names as linux

This was proposed by Emil Velikov to simplify libdrm and will remove the
need for some patches in ports.

/dev/drm0 -> /dev/dri/card0
/dev/drmR128 -> /dev/dri/renderD128

The previous names will remain for a period of time and will later be
removed. Major and minor numbers remain the same.

libdrm will not be changed to use the new names until known privsep
and sandbox use has been updated to allow the new names.

ok deraadt@

show more ...

introduce ujoy(4), a restricted subset of uhid(4) for gamecontrollers.
This includes ujoy_hid_is_collection() to work around limitations of
hid_is_collection() until this can be combined without fall

introduce ujoy(4), a restricted subset of uhid(4) for gamecontrollers.
This includes ujoy_hid_is_collection() to work around limitations of
hid_is_collection() until this can be combined without fallout.

input, testing with 8bitdo controller, and ok brynet@
PS4 controller testing, fix for hid_is_collection, and ok mglocker@

show more ...

wire up kstat(4).

it's only accessible to root:wheel.

ok deraadt@

Create /dev/audio* and /dev/rmidi* with mode 0660 and owned by
root:_sndiod. Stop creating unused /dev/mixer* devices.

suggested by and ok deraadt

wire up pppac(4).

with help from claudio@

Add /dev/dt

Fix fido(4) documentation link (no functional change)

Add fido(4), a HID driver for FIDO/U2F security keys

While FIDO/U2F keys were already supported by the generic uhid(4)
driver, this driver adds the first step to tighten the security of
FIDO/U2F acc

Add fido(4), a HID driver for FIDO/U2F security keys

While FIDO/U2F keys were already supported by the generic uhid(4)
driver, this driver adds the first step to tighten the security of
FIDO/U2F access. Specifically, users don't need read/write access to
all USB/HID devices anymore and the driver also improves integration
with pledge(2) and unveil(2): It is pledge-friendly because it doesn't
require any ioctls to discover the device and unveil-friendly because
it uses a single /dev/fido/* directory for its device nodes.

It also allows to support FIDO/U2F in firefox without further
weakening the "sandbox" of the browser. Firefox does not have a
proper privsep design and many operations, such as U2F access, are
handled directly by the main process. This means that the browser's
"fat" main process needs direct read/write access to all USB HID
devices, at least on other operating systems. With fido(4) we can
support security keys in Firefox under OpenBSD without such a
compromise.

With this change, libfido2 stops using the ioctl to query the device
vendor/product and just assumes "OpenBSD" "fido(4)" instead. The
ioctl is still supported but there was no benefit in obtaining the
vendor product or name; it also allows to use libfido2 under pledge.

With feedback from deraadt@ and many others
OK kettenis@ djm@ and jmc@ for the manpage bits

show more ...

usb devices nodes have been excesively permissive.
repair that.

gpr(4) goes away

make 10 wsmouse devices

for anything other than a regular old mouse, X needs to be able to
directly talk to the device and newer machines can have all kinds of
touchscreens, pen devices, touchpads,

make 10 wsmouse devices

for anything other than a regular old mouse, X needs to be able to
directly talk to the device and newer machines can have all kinds of
touchscreens, pen devices, touchpads, etc.

ok deraadt

show more ...

create drm render node devices

Add more uhid devices, 8 total

ok deraadt

Add kcov(4), a kernel code coverage tracing driver. It's used in conjunction
with the syzkaller kernel fuzzer. So far, 8 distinct panics have been found and
fixed. This effort will continue.

kcov is

Add kcov(4), a kernel code coverage tracing driver. It's used in conjunction
with the syzkaller kernel fuzzer. So far, 8 distinct panics have been found and
fixed. This effort will continue.

kcov is limited to architectures using Clang as their default compiler and is
not enabled by default.

With help from mpi@, thanks!

ok kettenis@ mpi@ visa@

show more ...

Remove unused /dev/audio and /dev/audioctl symlinks.

ok deraadt

Remove /dev/arandom symlink. Nothing in base, xenocara, or ports uses
/dev/arandom any longer. ok deraadt@

Switch DEC 3000 (TURBOchannel) alpha serial code to MI z8530 code.

ttyB* minor numbers change; be sure to rerun MAKEDEV if you do not
upgrade with bsd.rd

Adapted from NetBSD by miod@

Make it explicit that there is only one type of random device:
Create only /dev/urandom as device.
Create /dev/random and /dev/arandom as symlinks.
Drop /dev/srandom, which has been unused for a long

Make it explicit that there is only one type of random device:
Create only /dev/urandom as device.
Create /dev/random and /dev/arandom as symlinks.
Drop /dev/srandom, which has been unused for a long time.
/dev/arandom will go away at a later point.

Discussed with guenther@, ok deraadt@

show more ...