kernel - Add per-process capability-based restrictions

* This new system allows userland to set capability restrictions which
turns off numerous kernel features and root accesses. These restricti

kernel - Add per-process capability-based restrictions

* This new system allows userland to set capability restrictions which
turns off numerous kernel features and root accesses. These restrictions
are inherited by sub-processes recursively. Once set, restrictions cannot
be removed.

Basic restrictions that mimic an unadorned jail can be enabled without
creating a jail, but generally speaking real security also requires
creating a chrooted filesystem topology, and a jail is still needed
to really segregate processes from each other. If you do so, however,
you can (for example) disable mount/umount and most global root-only
features.

* Add new system calls and a manual page for syscap_get(2) and syscap_set(2)

* Add sys/caps.h

* Add the "setcaps" userland utility and manual page.

* Remove priv.9 and the priv_check infrastructure, replacing it with
a newly designed caps infrastructure.

* The intention is to add path restriction lists and similar features to
improve jailess security in the near future, and to optimize the
priv_check code.

show more ...

backlight(9): Initial port.

- backlight(9) is a generic panel backlight driver.
- backlight(8) is the userland program to control
backlight devices' properties.
- Required by linuxkpi

Taken f

backlight(9): Initial port.

- backlight(9) is a generic panel backlight driver.
- backlight(8) is the userland program to control
backlight devices' properties.
- Required by linuxkpi

Taken from: FreeBSD

show more ...

world - Add covid(1) utility and port manual page from netbsd

* Move from section (4) to section (1) and include a utility which
dumps one of the genome sequences. Just to put an exclamation
ma

world - Add covid(1) utility and port manual page from netbsd

* Move from section (4) to section (1) and include a utility which
dumps one of the genome sequences. Just to put an exclamation
mark on the amount of damage such an absurdly short genetic sequence
can wreak on the world

show more ...

build - Add zstd to the build (libzstd as private library)

* Bring in contrib/zstd from FreeBSD.

* Add libzstd as a private library (i.e. priv/libprivate_zstd) to
avoid confusion. (Note that Fre

build - Add zstd to the build (libzstd as private library)

* Bring in contrib/zstd from FreeBSD.

* Add libzstd as a private library (i.e. priv/libprivate_zstd) to
avoid confusion. (Note that FreeBSD also has zstd in base as
a private library).

* Add zstd, unzstd, zstdcat, zstdmt utilities.

* Integrate into libarchive, initrd, dsynth, and misc other
base system elements.

Ported-from: FreeBSD

show more ...

timeout(1): Port to DragonFly

Our procctl(2) is different from FreeBSD's procctl(2), so need to adjust
its usage.

Also hook into our build system and update the man page.

getaddrinfo(1): Actually hook into the build and remove unneeded headers.

The <sys/cdefs.h> should be removed along with the __FBSDID and we
include either <sys/types.h> or <sys/param.h> but not bot

getaddrinfo(1): Actually hook into the build and remove unneeded headers.

The <sys/cdefs.h> should be removed along with the __FBSDID and we
include either <sys/types.h> or <sys/param.h> but not both.

show more ...

Import stdbuf(1) together with libstdbuf(3) from FreeBSD

The stdbuf(1) is a utility to change the initial buffering of stdin,
stdout and stderr streams for a given command. It achieves this
functio

Import stdbuf(1) together with libstdbuf(3) from FreeBSD

The stdbuf(1) is a utility to change the initial buffering of stdin,
stdout and stderr streams for a given command. It achieves this
functionality by preloading the libstdbuf(3) library and configuring the
needed environment variables. Under the hood, libstdbuf(3) library
calls setvbuf(3) to do the actual work.

Changes from FreeBSD:
* Removed 32bit i386 code from stdbuf(1)
* Fix typos and update HISTORY section in libstdbuf.3 man page
* Update the example to actually work on DragonFly

show more ...

Hook ssh-copy-id into the build and adjust README.DELETED.

flame_graph - Add initial code to support flame graphs

* Add better PC sampling code to the kernel, capable of generating
call stack traces.

* Implement an initial flame_graph utility.

flame_g

flame_graph - Add initial code to support flame graphs

* Add better PC sampling code to the kernel, capable of generating
call stack traces.

* Implement an initial flame_graph utility.

flame_graph > /tmp/x.out &
(let it run a while)

flame_graph -p < /tmp/x.out

Requested-by: mjg

show more ...

Remove checknr(1) which stopped being useful a long time ago.

It reports a ton of errors on pretty much any manual page, regardless
of macro dialect.

mandoc(1) (and groff) have much better checking

Remove checknr(1) which stopped being useful a long time ago.

It reports a ton of errors on pretty much any manual page, regardless
of macro dialect.

mandoc(1) (and groff) have much better checking capabilities.

show more ...

world - Add dsynth to the build

* Add dsynth to the world build.

Add a wtmpcvt(1) utility from FreeBSD to convert wtmp -> wtmpx.

world: Remove OPIE from base.

The OPIE has been deprecated since
ed5666c1699a23a9ae3c0aca97dabaae71e26431

Remove symorder(1). It's no longer useful.

Remove groff from base.

There is a dports package available for people who need it. Also,
for some manual pages in dports, man(1) will report that mandoc(1)
cannot render them, and advise to install

Remove groff from base.

There is a dports package available for people who need it. Also,
for some manual pages in dports, man(1) will report that mandoc(1)
cannot render them, and advise to install groff too, which man(1)
will then use.

Also remove vgrind(1) and the old base me(7) macros.

Disable the groff part of manlint for now, also mandiff. I will
decide later if it should be made to work with dports groff.

There are a number of related utilities, like colcrt, checknr etc.
that I have not touched yet. Their fate will be decided later.

There are also some references to these tools left in existing
manual pages.

show more ...

Switch to the new man(1) command.

* Exchange our old GNU man(1) command with the one from FreeBSD that I
recently imported. It uses mandoc(1) by default. If mandoc(1) reports
that it cannot rend

Switch to the new man(1) command.

* Exchange our old GNU man(1) command with the one from FreeBSD that I
recently imported. It uses mandoc(1) by default. If mandoc(1) reports
that it cannot render a page, man(1) will fall back to groff (right
now our base groff, later the groff pkg when we remove it).

* Install mandoc(1) as apropos(1) and makewhatis(8). This means
makewhatis moves from /usr/sbin to /usr/bin.

* Use mandoc(1) instead of groff for most purposes of bsd.man.mk.

* Remove /usr/share/man/cat*. It's not necessary anymore to cache
formatted manual pages.

show more ...

Remove catman(1) since it is no longer needed in modern times.

It was used to bulk format manual pages for faster displaying.

su(1)'s EXAMPLES section was taken from FreeBSD.

Our man(1) command st

Remove catman(1) since it is no longer needed in modern times.

It was used to bulk format manual pages for faster displaying.

su(1)'s EXAMPLES section was taken from FreeBSD.

Our man(1) command still stores and utilizes manual pages in
/usr/share/man/cat* after this commit.

show more ...

Import ministat(1) from FreeBSD

This utility calculates fundamental statistical properties of the input
data and determines whether or not there is statistical difference
between them.

From the HIS

Import ministat(1) from FreeBSD

This utility calculates fundamental statistical properties of the input
data and determines whether or not there is statistical difference
between them.

From the HISTORY section of the man page:
"The ministat command was written by Poul-Henning Kamp out of
frustration over all the bogus benchmark claims made by people with no
understanding of the importance of uncertainty and statistics."

show more ...

various: remove incorrect comments

These appear to have come from the initial import and never updated.

Remove various 'r' commands and daemons.

rcp(1), rlogin(1), rlogind(1), rsh(1) and rshd(1). In the unlikely case
that someone still needs them, they can use the net/bsdrcmds port to
bring them back.

Remove various 'r' commands and daemons.

rcp(1), rlogin(1), rlogind(1), rsh(1) and rshd(1). In the unlikely case
that someone still needs them, they can use the net/bsdrcmds port to
bring them back.

FreeBSD removed them in October 2017 and I took their work as a guideline.

show more ...

Remove the NO_CRYPT build option.

It has been broken for a long time without anyone complaining about and
we don't want to maintain it either.

In-discussion-with: zrj

Bring in OpenBSD's banner(1).

I find it more pleasing to the eyes than banner(6).

While there, constify array in lpd(8) too.

Taken-from: OpenBSD

banner(6): Move to games/ where it belongs.

I somehow managed to miss this one when prepping the 07917fe88dd.
Now all (6) utilities are really in games/.

Only a single (6) manpage is outside games/

banner(6): Move to games/ where it belongs.

I somehow managed to miss this one when prepping the 07917fe88dd.
Now all (6) utilities are really in games/.

Only a single (6) manpage is outside games/
share/man/man6/intro.6
It stays there.

show more ...

games: Move out non (6) utilities from /usr/games/.

The strfile(8) and unstr(8) are pretty generic on their own and do not belong
in /usr/games/ (with all NO_GAMES stuff). All (6) utilities are stil

games: Move out non (6) utilities from /usr/games/.

The strfile(8) and unstr(8) are pretty generic on their own and do not belong
in /usr/games/ (with all NO_GAMES stuff). All (6) utilities are still in games.

* Move stfile(8) and unstr(8) to usr.bin/.
* Move out strfile from btools and convert it to hostprog (like nvi).
* Compile strfile.nx only if NO_SHARE is not set.

While there, apply 3rd to usr.bin/vi too (somehow skipped it in bf31779ebd).

show more ...

Remove the ancient rdist(1) tool along with related periodic(8) scripts.

There are substitutes in dports' net/44bsd-rdist and net/rdist6.