From owner-svn-src-svnadmin@FreeBSD.ORG Tue Sep 17 08:43:13 2013 Return-Path: Delivered-To: svn-src-svnadmin@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 2C063E48; Tue, 17 Sep 2013 08:43:13 +0000 (UTC) (envelope-from trasz@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 1AFD92577; Tue, 17 Sep 2013 08:43:13 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id r8H8hCUL092909; Tue, 17 Sep 2013 08:43:12 GMT (envelope-from trasz@svn.freebsd.org) Received: (from trasz@localhost) by svn.freebsd.org (8.14.7/8.14.5/Submit) id r8H8hCaE092908; Tue, 17 Sep 2013 08:43:12 GMT (envelope-from trasz@svn.freebsd.org) Message-Id: <201309170843.r8H8hCaE092908@svn.freebsd.org> From: Edward Tomasz Napierala Date: Tue, 17 Sep 2013 08:43:12 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-svnadmin@freebsd.org Subject: svn commit: r255628 - svnadmin/conf X-SVN-Group: svnadmin MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-svnadmin@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the admin / configuration tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Sep 2013 08:43:13 -0000 Author: trasz Date: Tue Sep 17 08:43:12 2013 New Revision: 255628 URL: http://svnweb.freebsd.org/changeset/base/255628 Log: Explicitly require Security Officer's approval for kernel PRNG bits. Note that there is ongoing discussion about approval requirement for userland PRNG bits. Reviewed by: so (des) Approved by: core (jhb) Modified: svnadmin/conf/approvers Modified: svnadmin/conf/approvers ============================================================================== --- svnadmin/conf/approvers Tue Sep 17 07:41:08 2013 (r255627) +++ svnadmin/conf/approvers Tue Sep 17 08:43:12 2013 (r255628) @@ -32,3 +32,7 @@ ^svnadmin/conf/approvers (core|re) ^svnadmin/conf/access core ^head/LOCKS core +^head/sys/dev/random (security-officer|so|secteam|core) +^head/sys/libkern/arc4random.c (security-officer|so|secteam|core) +^stable/[7-9]/sys/dev/random (security-officer|so|secteam|core) +^stable/[7-9]/sys/libkern/arc4random.c (security-officer|so|secteam|core) From owner-svn-src-svnadmin@FreeBSD.ORG Tue Sep 17 11:30:40 2013 Return-Path: Delivered-To: svn-src-svnadmin@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id BABB2C00; Tue, 17 Sep 2013 11:30:40 +0000 (UTC) (envelope-from glebius@FreeBSD.org) Received: from cell.glebius.int.ru (glebius.int.ru [81.19.69.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 8EE5E2ED6; Tue, 17 Sep 2013 11:30:36 +0000 (UTC) Received: from cell.glebius.int.ru (localhost [127.0.0.1]) by cell.glebius.int.ru (8.14.7/8.14.7) with ESMTP id r8HBUNcn084372; Tue, 17 Sep 2013 15:30:23 +0400 (MSK) (envelope-from glebius@FreeBSD.org) Received: (from glebius@localhost) by cell.glebius.int.ru (8.14.7/8.14.7/Submit) id r8HBUNwq084371; Tue, 17 Sep 2013 15:30:23 +0400 (MSK) (envelope-from glebius@FreeBSD.org) X-Authentication-Warning: cell.glebius.int.ru: glebius set sender to glebius@FreeBSD.org using -f Date: Tue, 17 Sep 2013 15:30:23 +0400 From: Gleb Smirnoff To: Edward Tomasz Napierala Subject: Re: svn commit: r255628 - svnadmin/conf Message-ID: <20130917113023.GM4574@FreeBSD.org> References: <201309170843.r8H8hCaE092908@svn.freebsd.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <201309170843.r8H8hCaE092908@svn.freebsd.org> User-Agent: Mutt/1.5.21 (2010-09-15) Cc: svn-src-all@freebsd.org, src-committers@freebsd.org, svn-src-svnadmin@freebsd.org X-BeenThere: svn-src-svnadmin@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the admin / configuration tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Sep 2013 11:30:40 -0000 Edward, On Tue, Sep 17, 2013 at 08:43:12AM +0000, Edward Tomasz Napierala wrote: E> Modified: svnadmin/conf/approvers E> ============================================================================== E> --- svnadmin/conf/approvers Tue Sep 17 07:41:08 2013 (r255627) E> +++ svnadmin/conf/approvers Tue Sep 17 08:43:12 2013 (r255628) E> @@ -32,3 +32,7 @@ E> ^svnadmin/conf/approvers (core|re) E> ^svnadmin/conf/access core E> ^head/LOCKS core E> +^head/sys/dev/random (security-officer|so|secteam|core) E> +^head/sys/libkern/arc4random.c (security-officer|so|secteam|core) E> +^stable/[7-9]/sys/dev/random (security-officer|so|secteam|core) E> +^stable/[7-9]/sys/libkern/arc4random.c (security-officer|so|secteam|core) stable/10 won't match. I'd suggest ^stable/[0-9]+/sys -- Totus tuus, Glebius. From owner-svn-src-svnadmin@FreeBSD.ORG Tue Sep 17 15:27:32 2013 Return-Path: Delivered-To: svn-src-svnadmin@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 5D988DDB; Tue, 17 Sep 2013 15:27:32 +0000 (UTC) (envelope-from rpaulo@FreeBSD.org) Received: from felyko.com (felyko.com [IPv6:2607:f2f8:a528::3:1337:ca7]) by mx1.freebsd.org (Postfix) with ESMTP id 451FA2C56; Tue, 17 Sep 2013 15:27:32 +0000 (UTC) Received: from [IPv6:2601:9:4d00:119:9a6:7484:4790:4b32] (unknown [IPv6:2601:9:4d00:119:9a6:7484:4790:4b32]) (using TLSv1 with cipher ECDHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by felyko.com (Postfix) with ESMTPSA id 7E5BA39821; Tue, 17 Sep 2013 08:27:31 -0700 (PDT) Content-Type: text/plain; charset=us-ascii Mime-Version: 1.0 (Mac OS X Mail 6.6 \(1510\)) Subject: Re: svn commit: r255628 - svnadmin/conf From: Rui Paulo In-Reply-To: <201309170843.r8H8hCaE092908@svn.freebsd.org> Date: Tue, 17 Sep 2013 08:27:30 -0700 Content-Transfer-Encoding: quoted-printable Message-Id: <242B42FD-BD20-4B7E-97B6-0F8EBAAE834A@FreeBSD.org> References: <201309170843.r8H8hCaE092908@svn.freebsd.org> To: Edward Tomasz Napierala X-Mailer: Apple Mail (2.1510) Cc: svn-src-all@freebsd.org, src-committers@freebsd.org, svn-src-svnadmin@freebsd.org X-BeenThere: svn-src-svnadmin@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the admin / configuration tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 17 Sep 2013 15:27:32 -0000 On 17 Sep 2013, at 01:43, Edward Tomasz Napierala = wrote: > Author: trasz > Date: Tue Sep 17 08:43:12 2013 > New Revision: 255628 > URL: http://svnweb.freebsd.org/changeset/base/255628 >=20 > Log: > Explicitly require Security Officer's approval for kernel PRNG bits. >=20 > Note that there is ongoing discussion about approval requirement > for userland PRNG bits. >=20 > Reviewed by: so (des) > Approved by: core (jhb) >=20 > Modified: > svnadmin/conf/approvers >=20 > Modified: svnadmin/conf/approvers > = =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D > --- svnadmin/conf/approvers Tue Sep 17 07:41:08 2013 = (r255627) > +++ svnadmin/conf/approvers Tue Sep 17 08:43:12 2013 = (r255628) > @@ -32,3 +32,7 @@ > ^svnadmin/conf/approvers (core|re) > ^svnadmin/conf/access core > ^head/LOCKS core > +^head/sys/dev/random (security-officer|so|secteam|core) > +^head/sys/libkern/arc4random.c = (security-officer|so|secteam|core) > +^stable/[7-9]/sys/dev/random (security-officer|so|secteam|core) > +^stable/[7-9]/sys/libkern/arc4random.c = (security-officer|so|secteam|core) This means that every time we branch a stable release, you have to = change this regular expression... Why not stable/* ? -- Rui Paulo From owner-svn-src-svnadmin@FreeBSD.ORG Thu Sep 19 18:17:07 2013 Return-Path: Delivered-To: svn-src-svnadmin@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 44F4EB1E; Thu, 19 Sep 2013 18:17:07 +0000 (UTC) (envelope-from jhb@freebsd.org) Received: from bigwig.baldwin.cx (bigwig.baldwin.cx [IPv6:2001:470:1f11:75::1]) (using TLSv1 with cipher ADH-CAMELLIA256-SHA (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 1E9E82F1A; Thu, 19 Sep 2013 18:17:07 +0000 (UTC) Received: from jhbbsd.localnet (unknown [209.249.190.124]) by bigwig.baldwin.cx (Postfix) with ESMTPSA id BE47EB987; Thu, 19 Sep 2013 14:17:05 -0400 (EDT) From: John Baldwin To: Edward Tomasz Napierala Subject: Re: svn commit: r255628 - svnadmin/conf Date: Thu, 19 Sep 2013 11:22:37 -0400 User-Agent: KMail/1.13.5 (FreeBSD/8.4-CBSD-20130906; KDE/4.5.5; amd64; ; ) References: <201309170843.r8H8hCaE092908@svn.freebsd.org> In-Reply-To: <201309170843.r8H8hCaE092908@svn.freebsd.org> MIME-Version: 1.0 Content-Type: Text/Plain; charset="utf-8" Content-Transfer-Encoding: 7bit Message-Id: <201309191122.37616.jhb@freebsd.org> X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.2.7 (bigwig.baldwin.cx); Thu, 19 Sep 2013 14:17:05 -0400 (EDT) Cc: svn-src-all@freebsd.org, src-committers@freebsd.org, svn-src-svnadmin@freebsd.org X-BeenThere: svn-src-svnadmin@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the admin / configuration tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 19 Sep 2013 18:17:07 -0000 On Tuesday, September 17, 2013 4:43:12 am Edward Tomasz Napierala wrote: > Author: trasz > Date: Tue Sep 17 08:43:12 2013 > New Revision: 255628 > URL: http://svnweb.freebsd.org/changeset/base/255628 > > Log: > Explicitly require Security Officer's approval for kernel PRNG bits. > > Note that there is ongoing discussion about approval requirement > for userland PRNG bits. Rather, so's approval definitely is required for userland PRNG bits. It is currently not easy to express this in the approvers file without individually listing various files. If at some point the files are rearranged to make the approvers entry simple to add, then so will add one. However, all PRNG commits must be approved by so whether in userland or the kernel. -- John Baldwin From owner-svn-src-svnadmin@FreeBSD.ORG Fri Sep 20 18:03:02 2013 Return-Path: Delivered-To: svn-src-svnadmin@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 0331D44C; Fri, 20 Sep 2013 18:03:02 +0000 (UTC) (envelope-from sbruno@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id E54772749; Fri, 20 Sep 2013 18:03:01 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id r8KI311V023650; Fri, 20 Sep 2013 18:03:01 GMT (envelope-from sbruno@svn.freebsd.org) Received: (from sbruno@localhost) by svn.freebsd.org (8.14.7/8.14.5/Submit) id r8KI31pe023649; Fri, 20 Sep 2013 18:03:01 GMT (envelope-from sbruno@svn.freebsd.org) Message-Id: <201309201803.r8KI31pe023649@svn.freebsd.org> From: Sean Bruno Date: Fri, 20 Sep 2013 18:03:01 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-svnadmin@freebsd.org Subject: svn commit: r255733 - svnadmin/conf X-SVN-Group: svnadmin MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-svnadmin@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the admin / configuration tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 18:03:02 -0000 Author: sbruno Date: Fri Sep 20 18:03:01 2013 New Revision: 255733 URL: http://svnweb.freebsd.org/changeset/base/255733 Log: Release hiren from mentorship Modified: svnadmin/conf/mentors Modified: svnadmin/conf/mentors ============================================================================== --- svnadmin/conf/mentors Fri Sep 20 17:06:49 2013 (r255732) +++ svnadmin/conf/mentors Fri Sep 20 18:03:01 2013 (r255733) @@ -18,7 +18,6 @@ carl jimharris cy andre Co-mentor: glebius eri mlaier Co-mentor: thompsa erwin delphij -hiren sbruno jceel wkoszek Co-mentor: cognet jonathan rwatson jwd rmacklem From owner-svn-src-svnadmin@FreeBSD.ORG Fri Sep 20 20:04:30 2013 Return-Path: Delivered-To: svn-src-svnadmin@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 152C282D; Fri, 20 Sep 2013 20:04:30 +0000 (UTC) (envelope-from davidch@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id DD6F52E49; Fri, 20 Sep 2013 20:04:29 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id r8KK4TQ0026676; Fri, 20 Sep 2013 20:04:29 GMT (envelope-from davidch@svn.freebsd.org) Received: (from davidch@localhost) by svn.freebsd.org (8.14.7/8.14.5/Submit) id r8KK4TEZ026675; Fri, 20 Sep 2013 20:04:29 GMT (envelope-from davidch@svn.freebsd.org) Message-Id: <201309202004.r8KK4TEZ026675@svn.freebsd.org> From: David Christensen Date: Fri, 20 Sep 2013 20:04:29 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-svnadmin@freebsd.org Subject: svn commit: r255735 - svnadmin/conf X-SVN-Group: svnadmin MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-svnadmin@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the admin / configuration tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 20:04:30 -0000 Author: davidch Date: Fri Sep 20 20:04:29 2013 New Revision: 255735 URL: http://svnweb.freebsd.org/changeset/base/255735 Log: Temporary size limit increase for bxe(4) update. Modified: svnadmin/conf/sizelimit.conf Modified: svnadmin/conf/sizelimit.conf ============================================================================== --- svnadmin/conf/sizelimit.conf Fri Sep 20 19:25:01 2013 (r255734) +++ svnadmin/conf/sizelimit.conf Fri Sep 20 20:04:29 2013 (r255735) @@ -36,3 +36,4 @@ rwatson sam stas thompsa +davidch From owner-svn-src-svnadmin@FreeBSD.ORG Fri Sep 20 20:26:16 2013 Return-Path: Delivered-To: svn-src-svnadmin@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 33646E5D; Fri, 20 Sep 2013 20:26:16 +0000 (UTC) (envelope-from davidch@FreeBSD.org) Received: from svn.freebsd.org (svn.freebsd.org [IPv6:2001:1900:2254:2068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id 087E72F89; Fri, 20 Sep 2013 20:26:16 +0000 (UTC) Received: from svn.freebsd.org ([127.0.1.70]) by svn.freebsd.org (8.14.7/8.14.7) with ESMTP id r8KKQFfC038137; Fri, 20 Sep 2013 20:26:15 GMT (envelope-from davidch@svn.freebsd.org) Received: (from davidch@localhost) by svn.freebsd.org (8.14.7/8.14.5/Submit) id r8KKQF5W038136; Fri, 20 Sep 2013 20:26:15 GMT (envelope-from davidch@svn.freebsd.org) Message-Id: <201309202026.r8KKQF5W038136@svn.freebsd.org> From: David Christensen Date: Fri, 20 Sep 2013 20:26:15 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-svnadmin@freebsd.org Subject: svn commit: r255737 - svnadmin/conf X-SVN-Group: svnadmin MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-svnadmin@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: SVN commit messages for the admin / configuration tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 20 Sep 2013 20:26:16 -0000 Author: davidch Date: Fri Sep 20 20:26:15 2013 New Revision: 255737 URL: http://svnweb.freebsd.org/changeset/base/255737 Log: Removed my name after completing bxe(4) update. Modified: svnadmin/conf/sizelimit.conf Modified: svnadmin/conf/sizelimit.conf ============================================================================== --- svnadmin/conf/sizelimit.conf Fri Sep 20 20:18:49 2013 (r255736) +++ svnadmin/conf/sizelimit.conf Fri Sep 20 20:26:15 2013 (r255737) @@ -36,4 +36,3 @@ rwatson sam stas thompsa -davidch