From owner-svn-doc-all@freebsd.org Sun Feb 19 06:17:36 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 2844CCE54E8; Sun, 19 Feb 2017 06:17:36 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id EBBEBFFF; Sun, 19 Feb 2017 06:17:35 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1J6HZ3W032119; Sun, 19 Feb 2017 06:17:35 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1J6HZOK032118; Sun, 19 Feb 2017 06:17:35 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201702190617.v1J6HZOK032118@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI Date: Sun, 19 Feb 2017 06:17:35 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r49999 - head/ja_JP.eucJP/htdocs X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Feb 2017 06:17:36 -0000 Author: ryusuke Date: Sun Feb 19 06:17:34 2017 New Revision: 49999 URL: https://svnweb.freebsd.org/changeset/doc/49999 Log: o Translate untranslated words. Modified: head/ja_JP.eucJP/htdocs/where.xml Modified: head/ja_JP.eucJP/htdocs/where.xml ============================================================================== --- head/ja_JP.eucJP/htdocs/where.xml Sat Feb 18 07:39:35 2017 (r49998) +++ head/ja_JP.eucJP/htdocs/where.xml Sun Feb 19 06:17:34 2017 (r49999) @@ -170,12 +170,12 @@ From owner-svn-doc-all@freebsd.org Sun Feb 19 13:02:34 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9F861CE3981; Sun, 19 Feb 2017 13:02:34 +0000 (UTC) (envelope-from dinoex@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 6ED221D38; Sun, 19 Feb 2017 13:02:34 +0000 (UTC) (envelope-from dinoex@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1JD2XxT096205; Sun, 19 Feb 2017 13:02:33 GMT (envelope-from dinoex@FreeBSD.org) Received: (from dinoex@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1JD2XdO096204; Sun, 19 Feb 2017 13:02:33 GMT (envelope-from dinoex@FreeBSD.org) Message-Id: <201702191302.v1JD2XdO096204@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: dinoex set sender to dinoex@FreeBSD.org using -f From: Dirk Meyer Date: Sun, 19 Feb 2017 13:02:33 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50000 - head/share/pgpkeys X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Feb 2017 13:02:34 -0000 Author: dinoex (ports committer) Date: Sun Feb 19 13:02:33 2017 New Revision: 50000 URL: https://svnweb.freebsd.org/changeset/doc/50000 Log: Update my PGP key. Modified: head/share/pgpkeys/dinoex.key Modified: head/share/pgpkeys/dinoex.key ============================================================================== --- head/share/pgpkeys/dinoex.key Sun Feb 19 06:17:34 2017 (r49999) +++ head/share/pgpkeys/dinoex.key Sun Feb 19 13:02:33 2017 (r50000) @@ -1,114 +1,183 @@ - Key fingerprint = 44 16 EC 0A D3 3A 4F 28 8A 8A 47 93 F1 CF 2F 12 -uid Dirk Meyer -uid Dirk Meyer +pub 4096R/DDC60C60090CE918 2017-01-22 [verf辰llt: 2019-01-22] + Schl.-Fingerabdruck = 9079 E906 F4C9 2513 B3F3 32B8 DDC6 0C60 090C E918 +uid Dirk Meyer +uid Dirk Meyer +sub 4096R/FA8CA937327D1787 2017-01-22 [verf辰llt: 2019-01-22] + +pub 1024R/E5152825331CDA5D 1995-06-04 + Schl.-Fingerabdruck = 44 16 EC 0A D3 3A 4F 28 8A 8A 47 93 F1 CF 2F 12 +uid Dirk Meyer +uid Dirk Meyer +uid Dirk Meyer + ]]> From owner-svn-doc-all@freebsd.org Sun Feb 19 13:17:07 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A47AECE5005; Sun, 19 Feb 2017 13:17:07 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 74073BE3; Sun, 19 Feb 2017 13:17:07 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1JDH688000787; Sun, 19 Feb 2017 13:17:06 GMT (envelope-from rcyu@FreeBSD.org) Received: (from rcyu@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1JDH6tC000786; Sun, 19 Feb 2017 13:17:06 GMT (envelope-from rcyu@FreeBSD.org) Message-Id: <201702191317.v1JDH6tC000786@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rcyu set sender to rcyu@FreeBSD.org using -f From: Ruey-Cherng Yu Date: Sun, 19 Feb 2017 13:17:06 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50001 - head/zh_TW.UTF-8/share/xml X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 19 Feb 2017 13:17:07 -0000 Author: rcyu Date: Sun Feb 19 13:17:06 2017 New Revision: 50001 URL: https://svnweb.freebsd.org/changeset/doc/50001 Log: Traditional Chinese translation of the news items in Feb 2017. Modified: head/zh_TW.UTF-8/share/xml/news.xml Modified: head/zh_TW.UTF-8/share/xml/news.xml ============================================================================== --- head/zh_TW.UTF-8/share/xml/news.xml Sun Feb 19 13:02:33 2017 (r50000) +++ head/zh_TW.UTF-8/share/xml/news.xml Sun Feb 19 13:17:06 2017 (r50001) @@ -65,6 +65,15 @@ (ports)

+ + 8 + + +

遺算 committer: + Tobias Kortkamp + (ports)

+ + 1 From owner-svn-doc-all@freebsd.org Tue Feb 21 14:34:20 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 761BCCE80BC; Tue, 21 Feb 2017 14:34:20 +0000 (UTC) (envelope-from bhd@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 50C40C02; Tue, 21 Feb 2017 14:34:20 +0000 (UTC) (envelope-from bhd@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1LEYJuq016805; Tue, 21 Feb 2017 14:34:19 GMT (envelope-from bhd@FreeBSD.org) Received: (from bhd@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1LEYJd1016803; Tue, 21 Feb 2017 14:34:19 GMT (envelope-from bhd@FreeBSD.org) Message-Id: <201702211434.v1LEYJd1016803@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bhd set sender to bhd@FreeBSD.org using -f From: Bjoern Heidotting Date: Tue, 21 Feb 2017 14:34:19 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50002 - head/de_DE.ISO8859-1/books/handbook/virtualization X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Feb 2017 14:34:20 -0000 Author: bhd Date: Tue Feb 21 14:34:19 2017 New Revision: 50002 URL: https://svnweb.freebsd.org/changeset/doc/50002 Log: Update to r49983: Make the tap device name the same across all the examples to not confuse people. Modified: head/de_DE.ISO8859-1/books/handbook/virtualization/chapter.xml Modified: head/de_DE.ISO8859-1/books/handbook/virtualization/chapter.xml ============================================================================== --- head/de_DE.ISO8859-1/books/handbook/virtualization/chapter.xml Sun Feb 19 13:17:06 2017 (r50001) +++ head/de_DE.ISO8859-1/books/handbook/virtualization/chapter.xml Tue Feb 21 14:34:19 2017 (r50002) @@ -5,7 +5,7 @@ $FreeBSD$ $FreeBSDde: de-docproj/books/handbook/virtualization/chapter.xml,v 1.14 2010/07/03 14:29:30 jkois Exp $ - basiert auf: r49599 + basiert auf: r49983 --> bootNun, da der &linux;-Kernel geladen ist, kann das Gastsystem gestartet werden: - &prompt.root; bhyve -A -H -P -s 0:0,hostbridge -s 1:0,lpc -s 2:0,virtio-net,tap1 -s 3:0,virtio-blk,./linux.img \ + &prompt.root; bhyve -A -H -P -s 0:0,hostbridge -s 1:0,lpc -s 2:0,virtio-net,tap0 -s 3:0,virtio-blk,./linux.img \ -s 4:0,ahci-cd,./somelinux.iso -l com1,stdio -c 4 -m 1024M linuxguest Das System wird booten und das Installtionsprogramm @@ -1279,7 +1279,7 @@ grub> bootStarten Sie die virtuelle Maschine: - &prompt.root; bhyve -A -H -P -s 0:0,hostbridge -s 1:0,lpc -s 2:0,virtio-net,tap1 \$ -s 3:0,virtio-blk,./linux.img -l com1,stdio -c 4 -m 1024M linuxguest + &prompt.root; bhyve -A -H -P -s 0:0,hostbridge -s 1:0,lpc -s 2:0,virtio-net,tap0 \$ -s 3:0,virtio-blk,./linux.img -l com1,stdio -c 4 -m 1024M linuxguest &linux; wird jetzt in der virtuellen Maschine gestartet und prsentiert Ihnen vielleicht einen Anmeldeprompt. Sie @@ -1308,7 +1308,7 @@ grub> bootGeben Sie das ZFS-Volume beim Start der virtuellen Maschine an: - &prompt.root; bhyve -A -H -P -s 0:0,hostbridge -s 1:0,lpc -s 2:0,virtio-net,tap1 -s3:0,virtio-blk,/dev/zvol/zroot/linuxdisk0 \ + &prompt.root; bhyve -A -H -P -s 0:0,hostbridge -s 1:0,lpc -s 2:0,virtio-net,tap0 -s3:0,virtio-blk,/dev/zvol/zroot/linuxdisk0 \ -l com1,stdio -c 4 -m 1024M linuxguest @@ -1333,7 +1333,7 @@ grub> boot &prompt.root; kldload nmdm -&prompt.root; bhyve -A -H -P -s 0:0,hostbridge -s 1:0,lpc -s 2:0,virtio-net,tap1 -s 3:0,virtio-blk,./linux.img \ +&prompt.root; bhyve -A -H -P -s 0:0,hostbridge -s 1:0,lpc -s 2:0,virtio-net,tap0 -s 3:0,virtio-blk,./linux.img \ -l com1,/dev/nmdm0A -c 4 -m 1024M linuxguest &prompt.root; cu -l /dev/nmdm0B Connected From owner-svn-doc-all@freebsd.org Wed Feb 22 15:56:25 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CC2A0CE963C; Wed, 22 Feb 2017 15:56:25 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 9472CCB6; Wed, 22 Feb 2017 15:56:25 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1MFuOjd040176; Wed, 22 Feb 2017 15:56:24 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1MFuOhS040175; Wed, 22 Feb 2017 15:56:24 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201702221556.v1MFuOhS040175@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI Date: Wed, 22 Feb 2017 15:56:24 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50003 - head/ja_JP.eucJP/books/handbook/security X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Feb 2017 15:56:25 -0000 Author: ryusuke Date: Wed Feb 22 15:56:24 2017 New Revision: 50003 URL: https://svnweb.freebsd.org/changeset/doc/50003 Log: - Merge the following from the English version: r21127 -> r22195 head/ja_JP.eucJP/books/handbook/security/chapter.xml Modified: head/ja_JP.eucJP/books/handbook/security/chapter.xml Modified: head/ja_JP.eucJP/books/handbook/security/chapter.xml ============================================================================== --- head/ja_JP.eucJP/books/handbook/security/chapter.xml Tue Feb 21 14:34:19 2017 (r50002) +++ head/ja_JP.eucJP/books/handbook/security/chapter.xml Wed Feb 22 15:56:24 2017 (r50003) @@ -3,7 +3,7 @@ The FreeBSD Documentation Project The FreeBSD Japanese Documentation Project - Original revision: r21127 + Original revision: r22195 $FreeBSD$ --> @@ -76,12 +76,6 @@ &os; で使われている SSH である OpenSSH の設定および使用方法 - ファイルシステムの ACL (アクセス制御リスト) @@ -279,7 +273,7 @@ - root の安全性を高める — + root の安全性を高める – root 権限で動作するサーバと suid/sgid バイナリ。 @@ -320,10 +314,13 @@ コマンド対プロトコル - この文書を通して、コマンドまたはアプリケーションを指すのには - 太字 を使います。 - たとえばプロトコルであると同時にコマンドでもある - ssh などに対して使います。 + この文書を通して、アプリケーションを指すのには + 太字 を使い、 + コマンドを指す場合には、等幅 フォントを使います。 + プロトコルは通常のフォントで表します。 + このような書体による区別は、 + プロトコルであると同時にコマンドでもある + ssh などに対して有効です。 @@ -1615,7 +1612,7 @@ permit port ttyd0 - KerberosIV + <application>KerberosIV</application> MarkMurray寄稿: @@ -1644,7 +1641,7 @@ permit port ttyd0 でしょう。 - KerberosIV のインストール + <application>KerberosIV</application> のインストール MIT @@ -2694,10 +2691,10 @@ jdoe@example.org - システムの時刻は同期していますか? 本当ですか? - 時刻が同期していないと - (通常は 5 分以内で同期されていないと) - 認証に失敗してしまいます。 + レルムにあるすべてのコンピュータの間で時刻が同期していますか？ + 時刻が同期していないと認証に失敗してしまいます。 + NTP を用いた、時刻の同期方法については、 + をご覧ください。 @@ -2797,14 +2794,6 @@ jdoe@example.org - レルムにあるすべてのコンピュータの間で時刻が同期している必要があります。 - この目的に完璧に適しているのが、 - NTP です。 - NTP の詳細については、 - をご覧ください。 - - - (たとえば一週間といった) 長い有効期限のチケットを使いたい場合で、 OpenSSH を使って、 @@ -3001,7 +2990,7 @@ jdoe@example.org Designing - an Authentication System: a Dialogue in Four Scenes + an Authentication System: a Dialog in Four Scenes @@ -3263,7 +3252,7 @@ jdoe@example.org 現在、IPFW に関係するカーネルコンフィグレーションオプションは - 4 つあります。 + 5 つあります。 options IPFIREWALL @@ -3328,6 +3317,19 @@ jdoe@example.org + + + options PFIL_HOOKS + + + &os; 5.3-RELEASE 以降のバージョンでは、 + パケットフィルタのためにコールアウトのフックを追加するため、 + このオプションが必要となります。 + これらのバージョンの &os; では、 + このオプションが指定されていないと、 + IPFW は動作しないでしょう。 + + 以前のバージョンの FreeBSD は @@ -4038,46 +4040,226 @@ jdoe@example.org - OpenSSL + OpenSSL + + + + Tom + Rhodes + + 執筆: + + + + セキュリティ OpenSSL - OpenSSL - FreeBSD 4.0 では、OpenSSL ツールキットが基本構成の一部に - 含まれています。OpenSSL は、 - Secure Sockets Layer v2/v3 (SSLv2/SSLv3) や Transport Layer - Security v1 (TLSv1) ネットワークセキュリティプロトコルと同様の - 多目的な暗号化ライブラリを提供します。 - - しかしながら、OpenSSL に含まれるアルゴリズムのひとつ - (特に IDEA) は、合衆国内、その他の地域において、 - 特許により保護されています。そのため、 - 無制約な利用は許されません。IDEA は - FreeBSD の OpenSSL 配布に含まれていますが、デフォルトではコンパ - イルされません。もし IDEA を使いたいなら、そしてあなたがそのライ - センス条項に合致するなら、/etc/make.conf - の中の MAKE_IDEA スイッチを有効にして、 - make world でソースをリビルドしてください。 + 多くのユーザが見落としがちな機能の一つが、 + &os; に含まれている OpenSSL + ツールキットです。 + OpenSSL は、 + 通常の通信層の上位にあるトランスポート層を暗号化し、 + 多くのネットワークアプリケーションおよびサービスと組み合わせて使用できます。 + + OpenSSL は、 + メールクライアントの暗号化された認証、 + クレジットカードでの支払いといったウェブベースの取引などで使われます。 + www/apache13-ssl および + mail/sylpheed-claws + といった多くの port では、 + OpenSSL + とともに構築するコンパイルに対応しています。 - 現在は RSA アルゴリズムはアメリカとその他の国で自由に利用で - きます。以前は特許により保護されていました。 + + 多くの場合、Ports Collection は、 + make の WITH_OPENSSL_BASE 変数が明示的に + yes に設定されていないと、 + security/openssl + の構築を試みます。 + - - OpenSSL - インストール - + &os; に含まれている OpenSSL + 　のバージョンは、Secure Sockets Layer v2/v3 (SSLv2/SSLv3) や + Transport Layer Security v1 (TLSv1) + ネットワークセキュリティプロトコルに対応しており、 + アプリケーションで利用するための多目的な暗号化ライブラリとして使うことができます。 + + + OpenSSL は、 + IDEA アルゴリズムに対応していますが、 + 合衆国の特許により、デフォルトでは無効になっています。 + もし使用したいのであれば、ライセンス条項を必ず確認し、 + ライセンス条項に合致するのであれば、 + MAKE_IDEA 変数を設定してください。 + + + おそらく最も一般的な OpenSSL + の利用方法のひとつは、 + ソフトウェアアプリケーションが使えるように証明書を提供することです。 + これらの証明書により、 + 会社または個人の公開鍵が、 + 改ざんやなりすましが行われていないことを確認できます。 + もし問題となっている証明書が、認証局 + または CA により検証されなければ、 + 通常警告が表示されます。 + 認証局は、VeriSign のような会社で、 + 個人または会社の公開鍵の検証を行えるように、 + 証明書に署名を行います。 + 証明書を作成するには費用がかかり、 + 証明書の使用は必ずしも必要条件ではありません。 + しかしながら、証明書を使うことで、 + 疑り深いユーザを安心させることができます。 - ソースコードのインストール + 証明書の作成 + + + OpenSSL + 証明書の作成 + + + 以下のコマンドにより、証明書を作成できます。 + + &prompt.root; openssl req -new -nodes -out req.pem -keyout cert.pem +Generating a 1024 bit RSA private key +................++++++ +.......................................++++++ +writing new private key to 'cert.pem' +----- +You are about to be asked to enter information that will be incorporated +into your certificate request. +What you are about to enter is what is called a Distinguished Name or a DN. +There are quite a few fields but you can leave some blank +For some fields there will be a default value, +If you enter '.', the field will be left blank. +----- +Country Name (2 letter code) [AU]:US +State or Province Name (full name) [Some-State]:PA +Locality Name (eg, city) []:Pittsburgh +Organization Name (eg, company) [Internet Widgits Pty Ltd]:My Company +Organizational Unit Name (eg, section) []:Systems Administrator +Common Name (eg, YOUR name) []:localhost.example.org +Email Address []:trhodes@FreeBSD.org + +Please enter the following 'extra' attributes +to be sent with your certificate request +A challenge password []:SOME PASSWORD +An optional company name []:Another Name + + Common Name プロンプト直後に表示されているのは、 + ドメイン名です。 + このプロンプトでは、検証するサーバ名の入力が必要となります。 + ドメイン名以外を入力すると、役に立たない証明書が作成されます。 + 他には、有効期限を指定したり、 + 別の暗号化アルゴリズムを選択することができます。 + &man.openssl.1; マニュアルページには、 + オプションの完全なリストを。 + + 前述のコマンドを実行したディレクトリに、 + req.pem ファイルが作成されます。 + このファイルは、 + 署名のために CA に送ることのできる証明書署名要求 + (certificate request) です。 + + CA の署名が必要ない場合には、 + 自己署名証明書を作成できます。 + 最初に CA の鍵を生成してください。 + + &prompt.root; openssl gendsa -des3 -out \ +myca.key 1024 + + この鍵を使って証明書を作成してください。 + + &prompt.root; openssl req -new -x509 -days 365 -key \ +myca.key -out new.crt + + 新しく 2 つのファイルがこのディレクトリに作成されます。 + プライベート鍵 myca.key および + 証明書 new.crt です。 + これらのファイルを、(好ましくは + /etc 以下で) + root のみが読むことのできるディレクトリに置く必要があります。 + chmod + ユーティリティを使って許可属性を 0600 に設定してください。 + + + + 証明書の使用例 + + これらのファイルで何ができるでしょうか? + 効果的な利用方法は、 + Sendmail + MTA への接続を暗号化することでしょう。 + これにより、 + ローカルの MTA 経由でメールを送信するユーザが、 + テキスト認証を使用しなくてもすむようになります。 - OpenSSL は src-crypto と - src-secure - CVSup コレクションの一部です。 - FreeBSD のソースコードの取得と更新の詳細は、 - FreeBSD - の入手の項を参照して下さい。 + + いくつかの MUA は、 + 証明書がローカルにインストールされていない場合に、 + ユーザに対して、エラーを出力するので、 + 完全に最善の利用方法というわけではありません。 + 証明書のインストールに関する詳細な情報については、 + ソフトウェアに付随の文書を参照してください。 + + + 以下の行をローカルの + .mc ファイルに入れてください。 + + dnl SSL Options +define(`confCACERT_PATH',`/etc/certs')dnl +define(`confCACERT',`/etc/certs/new.crt')dnl +define(`confSERVER_CERT',`/etc/certs/new.crt')dnl +define(`confSERVER_KEY',`/etc/certs/myca.key')dnl +define(`confTLS_SRV_OPTIONS', `V')dnl + + ここで /etc/certs/ + は、証明書および鍵ファイルが保存されているローカルのディレクトリです。 + 最後に、ローカルの .cf + ファイルを再構築する必要があります。 + /etc/mail ディレクトリで、 + make install + と入力すると再構築できます。 + その後、make + restart と入力して、 + Sendmail + デーモンを再起動してください。 + + すべてがうまくいっていれば、 + /var/log/maillog + ファイルにはエラーメッセージは出力されず、 + Sendmail + がプロセスの一覧に表示されます。 + + 以下は簡単な試験の例で、&man.telnet.1; ユーティリティを使って、 + メールサーバに接続しています。 + + &prompt.root; telnet example.com 25 +Trying 192.0.34.166... +Connected to example.com +Escape character is '^]'. +220 example.com ESMTP Sendmail 8.12.10/8.12.10; Tue, 31 Aug 2004 03:41:22 -0400 (EDT) +ehlo example.com +250-pittgoth.com Hello example.com [192.0.34.166], pleased to meet you +250-ENHANCEDSTATUSCODES +250-PIPELINING +250-8BITMIME +250-SIZE +250-DSN +250-ETRN +250-AUTH LOGIN PLAIN +250-STARTTLS +250-DELIVERBY +250 HELP +quit +221 2.0.0 example.com closing connection +Connection closed by foreign host. + + すべてが適切に動いていれば、出力に STARTTLS + 行が表示されます。 @@ -4437,6 +4619,11 @@ Network #2 [ Internal Hosts ] その後、プライベート IP アドレスを &man.ifconfig.8; を使って設定します。 + + &os; 5.X では、 + &man.gifconfig.8; ユーティリティが提供していた機能は、 + &man.ifconfig.8; にマージされました。 + ネットワーク #1 にあるゲートウェイコンピュータで以下の 2 つのコマンドを実行してトンネルを作成します。 @@ -4916,7 +5103,7 @@ spdadd A.B.C.D/32 W.X.Y.Z/32 ipencap -P の) 他のゲートウェイホストにも同じルールが必要です。 spdadd W.X.Y.Z/32 A.B.C.D/32 ipencap -P out ipsec esp/tunnel/W.X.Y.Z-A.B.C.D/require; - spdadd A.B.C.D/32 W.X.Y.Z/32 ipencap -P in ipsec esp/tunnel/A.B.C.D-W.X.Y.Z/require; +spdadd A.B.C.D/32 W.X.Y.Z/32 ipencap -P in ipsec esp/tunnel/A.B.C.D-W.X.Y.Z/require; 最後に、ファイアウォールに ESP および IPENCAP パケットが行き来することを許可するルールを追加する必要があります。 @@ -5435,270 +5622,6 @@ user@unfirewalled-system.example.org's p &man.sshd.8; &man.sftp-server.8; - ファイルシステムアクセス制御リスト From owner-svn-doc-all@freebsd.org Thu Feb 23 07:28:08 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 06975CEAB98; Thu, 23 Feb 2017 07:28:08 +0000 (UTC) (envelope-from delphij@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 98308E32; Thu, 23 Feb 2017 07:28:07 +0000 (UTC) (envelope-from delphij@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1N7S6WE025564; Thu, 23 Feb 2017 07:28:06 GMT (envelope-from delphij@FreeBSD.org) Received: (from delphij@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1N7S50g025554; Thu, 23 Feb 2017 07:28:05 GMT (envelope-from delphij@FreeBSD.org) Message-Id: <201702230728.v1N7S50g025554@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: delphij set sender to delphij@FreeBSD.org using -f From: Xin LI Date: Thu, 23 Feb 2017 07:28:05 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50004 - in head/share: security/advisories security/patches/EN-17:01 security/patches/EN-17:02 security/patches/EN-17:03 security/patches/EN-17:04 security/patches/SA-17:02 xml X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Feb 2017 07:28:08 -0000 Author: delphij Date: Thu Feb 23 07:28:05 2017 New Revision: 50004 URL: https://svnweb.freebsd.org/changeset/doc/50004 Log: Add EN-17:01-04, SA-17:02. Added: head/share/security/advisories/FreeBSD-EN-17:01.pcie.asc (contents, props changed) head/share/security/advisories/FreeBSD-EN-17:02.yp.asc (contents, props changed) head/share/security/advisories/FreeBSD-EN-17:03.hyperv.asc (contents, props changed) head/share/security/advisories/FreeBSD-EN-17:04.mandoc.asc (contents, props changed) head/share/security/advisories/FreeBSD-SA-17:02.openssl.asc (contents, props changed) head/share/security/patches/EN-17:01/ head/share/security/patches/EN-17:01/pcie.patch (contents, props changed) head/share/security/patches/EN-17:01/pcie.patch.asc (contents, props changed) head/share/security/patches/EN-17:02/ head/share/security/patches/EN-17:02/yp.patch (contents, props changed) head/share/security/patches/EN-17:02/yp.patch.asc (contents, props changed) head/share/security/patches/EN-17:03/ head/share/security/patches/EN-17:03/hyperv.patch (contents, props changed) head/share/security/patches/EN-17:03/hyperv.patch.asc (contents, props changed) head/share/security/patches/EN-17:04/ head/share/security/patches/EN-17:04/mandoc.patch (contents, props changed) head/share/security/patches/EN-17:04/mandoc.patch.asc (contents, props changed) head/share/security/patches/SA-17:02/ head/share/security/patches/SA-17:02/openssl-10.patch (contents, props changed) head/share/security/patches/SA-17:02/openssl-10.patch.asc (contents, props changed) head/share/security/patches/SA-17:02/openssl-11.patch (contents, props changed) head/share/security/patches/SA-17:02/openssl-11.patch.asc (contents, props changed) Modified: head/share/xml/advisories.xml head/share/xml/notices.xml Added: head/share/security/advisories/FreeBSD-EN-17:01.pcie.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-EN-17:01.pcie.asc Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,129 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-17:01.pcie Errata Notice + The FreeBSD Project + +Topic: System hang when booting when PCI-express HotPlug is enabled + +Category: core +Module: kernel +Announced: 2017-02-23 +Credits: Alan Somers, Dave Baukus +Affects: FreeBSD 11.0 +Corrected: 2017-02-07 22:40:38 UTC (stable/11, 11.0-STABLE) + 2017-02-23 07:11:48 UTC (releng/11.0, 11.0-RELEASE-p8) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +Native PCI-express HotPlug permits PCI-express devices to be added and +removed at runtime in slots that support HotPlug. + +II. Problem Description + +Some PCI-express slots indicate partial support for PCI-express HotPlug +in the capability registers associated with an individual slot. The +PCI-express HotPlug driver attempted to configure these slots for HotPlug +operation. However, since these slots do not fully support HotPlug, +enabling HotPlug results in unpredictable behavior. + +III. Impact + +On at least some systems, booting a kernel with PCI-express HotPlug +support can hang. + +IV. Workaround + +The hw.pci.enable_pcie_hp loader tunable can be set to 0 to disable +support for PCI-express HotPlug before booting an affected kernel. + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +Afterward, reboot the system. + +2) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +Afterward, reboot the system. + +3) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-17:01/pcie.patch +# fetch https://security.FreeBSD.org/patches/EN-17:01/pcie.patch.asc +# gpg --verify pcie.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/11/ r313408 +releng/11.0/ r314125 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.1.18 (FreeBSD) + +iQIzBAEBCgAdFiEEHPf/b631yp++G4yy7Wfs1l3PaucFAliujNEACgkQ7Wfs1l3P +aucj/RAAsB/+cWKAaf5pLiP9Hh9Rjmry8ZMyiG6RVBB22N8UM34ioiPPSjTu1ogQ +ZCP31fUqCWDwwQgVu6/Nl4Ur/NjeOYMjHAzxyjlgrFPx2RliptZCakMSA7NDBm7h +vhFxlvBdLvYOL1sDTPwO1HuaIRl8f6BMa3p99Ubaur2Blw7Zn2gDaIEDdiG8K2LN +m+R+yJvDqJmpQJcTiqkxMrcfemcmpuVkH/PTaQhjcuZfslQW8eL82dfXsmkuv5tz +J1cXJHSZHhX1Bq+cuKpAVp7rV65iud5nElt1NJiG4GC61h289nSoqsUebWcjzx4j +0XVwCxitLVqgybdD+OtJejxBwgwWnB3K2xicu5WYOSo/jUhXGRLXZTSk1COvDwZZ +4ndeGv1RwwknQTNxfHlnOH9uZozvQq1fCyXZ2CBnsfKs5gxW2GAF1+xTGXD2tSAJ +ntyc9JhiV0EmixG/aiDk8D6HaUnvcqvtUHCewbNXKy2xqRbnNDal613vzhgbNWKi +RqFoPDDCaLsD9uoL/DSh8R8sHh8QuNq903JxPODM0MoioWYGj+xzz5RNY1EwlhcO +nRI3CwmQr/Oxow+ajEqT4MRaQtmHSudmvcF6Syyw6Rt0lWF4R6KxYk2fPdaW18N0 +LU9fqH2IWGSmzPMdnJKI6I49jtOiUaIfXCAGpX15jpVN/1ZUg1k= +=x/qY +-----END PGP SIGNATURE----- Added: head/share/security/advisories/FreeBSD-EN-17:02.yp.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-EN-17:02.yp.asc Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,128 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-17:02.yp Errata Notice + The FreeBSD Project + +Topic: NIS master updates are not pushed to NIS slave + +Category: core +Module: yppush, ypxfr +Announced: 2017-02-23 +Credits: Mark Johnston +Affects: FreeBSD 11.0-RELEASE +Corrected: 2016-10-19 17:18:48 UTC (stable/11, 11.0-STABLE) + 2017-02-23 07:11:48 UTC (releng/11.0, 11.0-RELEASE-p8) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +yppush(8) and ypxfr(8) utilities are used to synchronize databases from +a master NIS server. + +II. Problem Description + +A bug present in FreeBSD 11.0 prevents these utilities from working +properly. In particular, an attempt to synchronize a non-empty map +causes yppush(8) to crash. + +III. Impact + +The problem prevents updates to a master NIS server from being propagated +to NIS slave servers. + +IV. Workaround + +No workaround is available, but NIS configurations which do not make +use of NIS slave servers are unaffected. + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +2) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +A reboot is not required. However, the system administrator may need to +manually run yppush(8) after the update have been applied on slave systems. + +3) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-17:02/yp.patch +# fetch https://security.FreeBSD.org/patches/EN-17:02/yp.patch.asc +# gpg --verify yp.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile the operating system using buildworld and installworld as +described in . + +A reboot is not required. However, the system administrator may need to +manually run yppush(8) after the update have been applied on slave systems. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/11/ r307642 +releng/11.0/ r314125 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.1.18 (FreeBSD) + +iQIzBAEBCgAdFiEEHPf/b631yp++G4yy7Wfs1l3PaucFAliujNcACgkQ7Wfs1l3P +aucX/Q/5AbGPtToi+NC4OB0sNJbCiJD5WOP7tmbNipDm5SGoItN+lXQSv+FN1wbF +9R4vhqBqDROE35PF9QUWdFb1qE4i37lD4DznK7r1urg3n7CWx5zcPYAz3PNA7FFX +IJixTM4fjhoWoKAWMLZhc+7+ez7HB83AZrExXDBFRnj7SvceJw6B//yCRB/he9l3 +trE5yvUyAiSPylG5qfA6upsJftXsluajq0uQ/yD4iGfqT8nqjOrsd4z64S6+3wTT +lnZHyjNEfIqVQ81Lp9EIsqaU7pyvPrjRQqxsHI+rZO/2YVA/RDokeIcq6s+8GN76 +/H7U8XoEuLFNq39s+fHOLTIPGjSM5PN1jqreoJTXnLFqpDtc2WI3W6cvMUY3lD2y +rW3jDrQOxKF8E9qD/wyi7Sa74cC4PduEe9F+fwNOf+gQUtd/NF+OcnSo0imUnmvU +VJy7FHSUQWZY7ZDW0L7CUT6IDBvIncUKlt1DX4b8M9GkX65FtXmd4risExxBlGDh +ikMD+qzCE8tlqzXKPzEmZNLgsAj0nJiZIcD6kMDORLNyzdI7AeqSazg6Pt70XstR +r+GjK1Hclp/lTqaEJLuBrkd2LJGI2Wcyp/nRZ6OifyduvRwk5vKPhQf792zqx+FK +0sZ1T7po0aop1sDFRDZKCHMRxxpKfd5BTxEyQ24v7GL02Dz/rVk= +=zlKa +-----END PGP SIGNATURE----- Added: head/share/security/advisories/FreeBSD-EN-17:03.hyperv.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-EN-17:03.hyperv.asc Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,139 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-17:03.hyperv Errata Notice + The FreeBSD Project + +Topic: Compatibility with Hyper-V/storage after KB3172614 or + KB3179574 + +Category: core +Module: hyperv/storvsc +Announced: 2017-02-23 +Credits: Microsoft OSTC +Affects: FreeBSD 11.0-RELEASE +Corrected: 2016-10-19 07:43:39 UTC (stable/11, 11.0-STABLE) + 2017-02-23 07:11:48 UTC (releng/11.0, 11.0-RELEASE-p8) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +Hyper-V is a default hypervisor provided on Windows server by Microsoft. +ATA driver is the legacy storage driver for FreeBSD on Hyper-V, now they +are replaced by synthetic driver which has better performance. There are +issues when attaching synthetic storage driver for FreeBSD 11 on some of +Hyper-V hosts. + +II. Problem Description + +There are some compatibility issues with the FreeBSD Hyper-V driver, +which will cause the OS disk to be detached if August 2016 update rollup +is applied on Windows host (KB3172614 or KB3179574). + +III. Impact + +FreeBSD 11.0 can not be installed on a guest system on Hyper-V host. + +IV. Workaround + +On Hyper-V connection, when the installer boot prompt, select + + 3. Escape to the loader prompt + +Then: + + set hw.ata.disk_enable=1 + boot. + +Note: this workaround force FreeBSD to use legacy storage driver +which is much slower than synthetic driver. + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +Afterward, reboot the system. + +2) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +Afterward, reboot the system. + +3) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-17:03/hyperv.patch +# fetch https://security.FreeBSD.org/patches/EN-17:03/hyperv.patch.asc +# gpg --verify hyperv.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/11/ r307617 +releng/11.0/ r314125 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + + + +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.1.18 (FreeBSD) + +iQIzBAEBCgAdFiEEHPf/b631yp++G4yy7Wfs1l3PaucFAliujNwACgkQ7Wfs1l3P +auea7BAAtYKNH1OVGWZ2frFoaVAuzLA0Gow599XCM5ycF39HTlavmoR1+KN9g8Gh +r2wEBvIM/Yzla16mmLEzt7QLeSFMP1mgVb1lUtvAp62b/lzb2ImIvL3qhury0nop +eczup/A/nFOOgOa/IEMsxqi5noB5e2ODkWEOayiLNd5fmD/BF+yACEKi0YI0krQY +Oonq4N9ah7z4rT8OYC2LNQPvc00ZAAq9eq/IDdtWDvLgpxOF1W+dJ0MAzLhQwNJn +9cdW13AcrdJHxzyjAGeOd1pedWFs0ueEXLI+J5pVOvpZd3WeAc9Fls8t7GNgYwvf +dpf9uaB765n5tZCa+gc8h2eSzY59aEAQOtHXTqlMGp3ACl7D7Gjmhh42Vp4fgySb +zeeKEqAnNay4NdBEGt/U9CjycNKMKi6/bqLpEq3rxu8QFPzeXuwIB3favj8MpIUI +ZMda4CQ1E9XLgG6YoupSpnVSbvNFZIEQ2RHzZesKlIoQIM4OPSBWPGjSR9UDMNKH +mxb/cWMwO9N4G7xzKSULuIAF33wZYkaKqTfzOKVtOEZ7hlBPlqzfXK2MNqlbc0PO +3bqPvrg8KXL8OyswEy0sZaptQs/jTUZjqI9/JNWY+IdRR1clVrRdpg/YWljwqqvb +hFIarahbNC1fvsMTeAFq8QBGXkoy6ovmjpKrhBfPNpaiL5ccuWU= +=nMwL +-----END PGP SIGNATURE----- Added: head/share/security/advisories/FreeBSD-EN-17:04.mandoc.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-EN-17:04.mandoc.asc Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,124 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-17:04.mandoc Errata Notice + The FreeBSD Project + +Topic: makewhatis output is not reproducible + +Category: contrib +Module: mandoc +Announced: 2017-02-23 +Credits: Ingo Schwarze, Ed Maste +Affects: FreeBSD 11.0-RELEASE +Corrected: 2016-11-26 03:39:02 UTC (stable/11, 11.0-STABLE) + 2017-02-23 07:11:48 UTC (releng/11.0, 11.0-RELEASE-p8) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +The makewhatis utility extracts keywords from UNIX manuals and indexes +them in a database for fast retrieval by apropos(1), whatis(1), and +man(1)'s -k option. + +II. Problem Description + +The generation of makewhatis database is not reproducible. + +III. Impact + +The freebsd-update(8) build procedure may consider mandoc.db as changed when +built multiple times. + +IV. Workaround + +No workaround is available, but the impact is mostly cosmetic. + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +Reboot is not necessary. + +2) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +Reboot is not necessary. + +3) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/EN-17:04/mandoc.patch +# fetch https://security.FreeBSD.org/patches/EN-17:04/mandoc.patch.asc +# gpg --verify mandoc.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile the operating system using buildworld and installworld as +described in . + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/11/ r309183 +releng/11.0/ r314125 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.1.18 (FreeBSD) + +iQIzBAEBCgAdFiEEHPf/b631yp++G4yy7Wfs1l3PaucFAliujOMACgkQ7Wfs1l3P +aucxsA//fsEp6miJAsXLBOFxI1hiRheHb6HlOaXYrMo59sKLgRGRipe34AxIq3Ca +cYvVRHOEpXlUZNMvModg/P42SkkQLDi+2tIenvQUG5T5r3xSRTAHOU0pSRlpfjaA +8OCIaZaWYDIcTOEfaQocIbjwuKfzw5qVxZY6Ot3NPz0QEpOSzFGkbRrM8JxkrVyg +ROtzY/rqaDbhfdKyTCS8PZCIW4ZwNiBjAV9kZysviN3RUSQvLaxEC+vTDjU9BBm5 +CKIU3y0aoSlO4W6A9ahqVb/4hX7A2WBoFpfhMVXsVOzi4SkJhaFKNdjwbq6Nrmxr +hePKGTSYVtcVIaiyf0rJwHDvGK6y4NKCTTqCwlQ7hrMGZHY2D5t5NAdd10uvIrv6 +PDQkJBap5hZTnSeJ+rZt1jSUR1qAJ+xb86Fe1dG30fs6AsKpbYJEpTLWgSXmOfp/ +GQT0SCxv5mxtxMzIom8MUQipYay1cUIiXAh/wlfxERNWHHt3UXoP4/wS9Df+26w9 +zQ/5fk3TbtxAcCpZWBeZr1+pKIomQ4+51wU7zgyjAHvGRDesoA54XS3BOTJPWKnY +G1iNBWECSQC26jwzmSv/MMXf4BqT6ezZXXZ22uMeYQCTD4p0tiC6/H4RUEVSgOSl +TnZ026b3FQRlE6FIOYPK9a4AipnLYu4NW6f9tsJquwRyElLSd/U= +=oyNi +-----END PGP SIGNATURE----- Added: head/share/security/advisories/FreeBSD-SA-17:02.openssl.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-SA-17:02.openssl.asc Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,164 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-SA-17:02.openssl Security Advisory + The FreeBSD Project + +Topic: OpenSSL multiple vulnerabilities + +Category: contrib +Module: openssl +Announced: 2017-02-23 +Affects: All supported versions of FreeBSD. +Corrected: 2017-01-26 19:14:14 UTC (stable/11, 11.0-STABLE) + 2017-02-23 07:11:48 UTC (releng/11.0, 11.0-RELEASE-p8) + 2017-01-27 07:45:06 UTC (stable/10, 10.3-STABLE) + 2017-02-23 07:12:18 UTC (releng/10.3, 10.3-RELEASE-p16) +CVE Name: CVE-2016-7055, CVE-2017-3731, CVE-2017-3732 + +For general information regarding FreeBSD Security Advisories, +including descriptions of the fields above, security branches, and the +following sections, please visit . + +I. Background + +FreeBSD includes software from the OpenSSL Project. The OpenSSL Project is +a collaborative effort to develop a robust, commercial-grade, full-featured +Open Source toolkit implementing the Secure Sockets Layer (SSL v2/v3) +and Transport Layer Security (TLS v1) protocols as well as a full-strength +general purpose cryptography library. + +II. Problem Description + +If an SSL/TLS server or client is running on a 32-bit host, and a specific +cipher is being used, then a truncated packet can cause that server or +client to perform an out-of-bounds read, usually resulting in a crash. +[CVE-2017-3731] + +There is a carry propagating bug in the x86_64 Montgomery squaring procedure. +No EC algorithms are affected. Analysis suggests that attacks against RSA and +DSA as a result of this defect would be very difficult to perform and are not +believed likely. Attacks against DH are considered just feasible (although +very difficult) because most of the work necessary to deduce information +about a private key may be performed offline. The amount of resources +required for such an attack would be very significant and likely only +accessible to a limited number of attackers. An attacker would additionally +need online access to an unpatched system using the target private key in +a scenario with persistent DH parameters and a private key that is shared +between multiple clients. [CVE-2017-3732] + +Montgomery multiplication may produce incorrect results. [CVE-2016-7055] + +III. Impact + +A remote attacker may trigger a crash on servers or clients that supported +RC4-MD5. [CVE-2017-3731] + +A remote attacker may be able to deduce information about a private key, +but that would require enormous amount of resources. [CVE-2017-3732, +CVE-2016-7055] + +IV. Workaround + +No workaround is available. + +V. Solution + +Perform one of the following: + +1) Upgrade your vulnerable system to a supported FreeBSD stable or +release / security branch (releng) dated after the correction date. + +Restart all daemons that use the library, or reboot the system. + +2) To update your vulnerable system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +Restart all daemons that use the library, or reboot the system. + +3) To update your vulnerable system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +[FreeBSD 11.0] +# fetch https://security.FreeBSD.org/patches/SA-17:02/openssl-11.patch +# fetch https://security.FreeBSD.org/patches/SA-17:02/openssl-11.patch.asc +# gpg --verify openssl-11.patch.asc + +[FreeBSD 10.3] +# fetch https://security.FreeBSD.org/patches/SA-17:02/openssl-10.patch +# fetch https://security.FreeBSD.org/patches/SA-17:02/openssl-10.patch.asc +# gpg --verify openssl-10.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile the operating system using buildworld and installworld as +described in . + +Restart all daemons that use the library, or reboot the system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/10/ r312863 +releng/10.3/ r314125 +stable/11/ r312826 +releng/11.0/ r314126 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + + + + + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.1.18 (FreeBSD) + +iQIzBAEBCgAdFiEEHPf/b631yp++G4yy7Wfs1l3PaucFAliujOsACgkQ7Wfs1l3P +aufZHhAAy8U5oOrLGq0XH8Dumpkyc+bFOmsEh+S1hL6jFL13jUVpDqogZ3w/a7If +Hcqiyipx5dbcGbHJayokfimkxPcIYydYQK9NwWaXVlnZifvgWka+KxtcD0u2A8S5 +cpTbNl+CALQQqEF3+JmOc4Uq2Dtui0xFG1N5Og4oF5Uo+lvQh4bcJ1UbfhMdq8EG +US3hGlJLJJW75m3jkgHyu0o7A0swnNTUQrW9Z0p/3iTiel7fM57d/N1who+kt59V +UErXTzMDBT1kkWRne0aTA71gdy3SUeRiVi9/LWggjIRJNyMnQjO3UI2UOIHLLQAG +CXcZLPekB87iHZxMAw8oV6b4GIkJhqUFW2ep2AZkUdDZ2Mup9bDrx/0Ik0jHjyQY +KEmZDroHvP8z569q+aWfIIpMXPv6zJTnent45U2/q13wMHJwWsADu9ukeWKTw7wI +P0Rc3vht+AXbXFi9SjxwdldgrVszV7x8Yi6W9KhHsGqCl6NBCW9Md/PWbNQQUVkq +I5tV0WB3pTwOk0yMi3h/okM9VBr1lPDU18W0he5T9wbOh4w0jwFb8AqMu1slst3l +9MlhRfO/4LIDlfRQ/dj4dOfVLZqEd/xleax99yFXZUzibUYrOMlBxNaKvV80plwB +Kg2Hr3DJuJa3599kNgXMCNV1lRIOJbJ9dRmX6B0YzMgvxKPIXY4= +=8Jsr +-----END PGP SIGNATURE----- Added: head/share/security/patches/EN-17:01/pcie.patch ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-17:01/pcie.patch Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,11 @@ +--- sys/dev/pci/pci_pci.c.orig ++++ sys/dev/pci/pci_pci.c +@@ -935,6 +935,8 @@ + + if ((sc->pcie_slot_cap & PCIEM_SLOT_CAP_HPC) == 0) + return; ++ if ((sc->pcie_link_cap & PCIEM_LINK_CAP_DL_ACTIVE) == 0) ++ return; + + /* + * Some devices report that they have an MRL when they actually Added: head/share/security/patches/EN-17:01/pcie.patch.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-17:01/pcie.patch.asc Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.1.18 (FreeBSD) + +iQIzBAABCgAdFiEEHPf/b631yp++G4yy7Wfs1l3PaucFAliujPUACgkQ7Wfs1l3P +aucnkRAAlrRIt4XdzSyuVFcuK3vIhbO2MEhlVmsduYElQ+S/A/QOyhgAVN83TveN +3JvQSozXA8OTw7cGDOD8SiL7Hyr79PsC+cWkbD/XhQGLwXtwcaywTTIOuc7ny0Cj +4m7tl3DzO8FN0rKGoOCC0UCiaTamKfh3Wl+mMHHPBOtYyk+DKzSw7TnTLaRrI90q +wWnQnF5Xr1pCbJBwyx3EvIQq9AL6d5nRm6af8cksWaChpH1w6elNl0Q0FbojKkdp +6aweLHYORRu8cVqDsOjuWoNq6BMyEF/cooqufmBb5JkpgwaFgVntp7aI0ql8Ts/v +mkvSqMTyzPiJGEBoDDqBosQdb66MeGIV9PZIjR8AQEIwagXo4KCNq3PwW8kPKlJ1 +8vrxRGQc8xSKRvv7h0Xvg5Ovhodu7UV1RtFVUqWMAdeLqTy6mtyRmjOKb4ouy7wC +V9/ZgG87zYHHpLmg6EmQfAB3fa8ksR30/rJEBxehxdbJTAwaxCfK2RWpRu4MVTH1 +uJrbEbiFHpSHM46LJ9JbkLfOfNMLuDz0K688D3eecWvpzyO7Zk7NqPV1fWOlcQLk +xtdOFzmSV8Cr1UBiUV7AaAap20nXWrqQ7Lp5Q9fj7y7l7xVznh95Tf6VlFergBMB +hR2MHvbCHExx9vokyWSYyz/yq7mnCJWNcSMDdRCfAjqqpSD9lGI= +=2ZA+ +-----END PGP SIGNATURE----- Added: head/share/security/patches/EN-17:02/yp.patch ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-17:02/yp.patch Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,13 @@ +--- libexec/ypxfr/ypxfr_getmap.c.orig ++++ libexec/ypxfr/ypxfr_getmap.c +@@ -43,8 +43,8 @@ + + extern bool_t xdr_ypresp_all_seq(XDR *, unsigned long *); + +-static int (*ypresp_allfn)(); +-static void *ypresp_data; ++extern int (*ypresp_allfn)(); ++extern void *ypresp_data; + extern DB *specdbp; + extern enum ypstat yp_errno; + Added: head/share/security/patches/EN-17:02/yp.patch.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-17:02/yp.patch.asc Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,17 @@ +-----BEGIN PGP SIGNATURE----- +Version: GnuPG v2.1.18 (FreeBSD) + +iQIzBAABCgAdFiEEHPf/b631yp++G4yy7Wfs1l3PaucFAliujPkACgkQ7Wfs1l3P +audR3A//Y0/IZ4iyUh3N0Twwc/ywoSV2ph+D2XF9PmI3HWTk4F+uEN+/02XNDhft +V9T25LuyuaROBrvDDgpN+9d8V82zxo8K4YiSi8YaarQq71q7lAUAJ0YIg+an9ije +4M6HNDRk0x99rueb2gmOSk/6EWyUzLSwlumzhG1SdKrgz0VN2ItoSdE9FDNfHqTG +UfCeXa5bgoQUU/yNfzQu4QfuTQzx/Oq2Kfjr5wIOK+bZxLk6tlInDxBhg5oJq/KZ +zXgL4mJmqF/glDNKxpa8yZxHmiXql9wwI/mnRmVODQ2CCHDcuSx6uOxpS8PNhect +31PpPR9wFtFOBGbXsuBHGUkGVjjReADXcBU0SdaFY02WlonQXnvc7RhzFu4TOo5Z +6LTOxyiCIc7ZJW1nW7HmXZl5VfzWL/wmK0QHlLSMJ24tPwrAizPlT0OEwsjOlhCq +LYfWRKBRPlu8x7Ow8J0ecYCouhPGy4dYA4o68fBvpk27HUREw0VgfpTPNgrcZinK +VEM+z5zx7fQXuNkwb3GYQzCGDKLbZTtxZ35APlIzhCYtUdJ1kA5Q/udvxNIbd1zD +apmj7h4+xgx5T+ncmPsyROm805LdXFGsMT9CcMrqECadGzRMC0Cq0tyOINnFHryp +hmSVl1mp7YQpafXKSMs/2CvxPcTrBjw9vgZBOdaJD1+j2/gLkSA= +=8C44 +-----END PGP SIGNATURE----- Added: head/share/security/patches/EN-17:03/hyperv.patch ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-17:03/hyperv.patch Thu Feb 23 07:28:05 2017 (r50004) @@ -0,0 +1,277 @@ +--- sys/cam/ata/ata_xpt.c.orig ++++ sys/cam/ata/ata_xpt.c +@@ -40,6 +40,7 @@ + #include + #include + ++#include + #include + #include + #include +@@ -824,6 +825,7 @@ + { + struct ccb_pathinq cpi; + int16_t *ptr; ++ int veto = 0; + + ident_buf = &softc->ident_data; + for (ptr = (int16_t *)ident_buf; +@@ -830,6 +832,17 @@ + ptr < (int16_t *)ident_buf + sizeof(struct ata_params)/2; ptr++) { + *ptr = le16toh(*ptr); + } ++ ++ /* ++ * Allow others to veto this ATA disk attachment. This ++ * is mainly used by VMs, whose disk controllers may ++ * share the disks with the simulated ATA controllers. ++ */ ++ EVENTHANDLER_INVOKE(ada_probe_veto, path, ident_buf, &veto); ++ if (veto) { ++ goto device_fail; ++ } ++ + if (strncmp(ident_buf->model, "FX", 2) && + strncmp(ident_buf->model, "NEC", 3) && + strncmp(ident_buf->model, "Pioneer", 7) && +--- sys/conf/files.amd64.orig ++++ sys/conf/files.amd64 +@@ -268,7 +268,6 @@ + dev/hyperv/netvsc/hv_net_vsc.c optional hyperv + dev/hyperv/netvsc/hv_netvsc_drv_freebsd.c optional hyperv + dev/hyperv/netvsc/hv_rndis_filter.c optional hyperv +-dev/hyperv/stordisengage/hv_ata_pci_disengage.c optional hyperv + dev/hyperv/storvsc/hv_storvsc_drv_freebsd.c optional hyperv + dev/hyperv/utilities/hv_heartbeat.c optional hyperv + dev/hyperv/utilities/hv_kvp.c optional hyperv +--- sys/conf/files.i386.orig ++++ sys/conf/files.i386 +@@ -239,7 +239,6 @@ + dev/hyperv/netvsc/hv_net_vsc.c optional hyperv + dev/hyperv/netvsc/hv_netvsc_drv_freebsd.c optional hyperv + dev/hyperv/netvsc/hv_rndis_filter.c optional hyperv +-dev/hyperv/stordisengage/hv_ata_pci_disengage.c optional hyperv + dev/hyperv/storvsc/hv_storvsc_drv_freebsd.c optional hyperv + dev/hyperv/utilities/hv_heartbeat.c optional hyperv + dev/hyperv/utilities/hv_kvp.c optional hyperv +--- sys/dev/hyperv/storvsc/hv_storvsc_drv_freebsd.c.orig ++++ sys/dev/hyperv/storvsc/hv_storvsc_drv_freebsd.c +@@ -58,6 +58,7 @@ + #include + #include + #include ++#include + #include + #include + +@@ -139,6 +140,15 @@ + struct hv_storvsc_request hs_reset_req; + }; + ++static eventhandler_tag storvsc_handler_tag; ++/* ++ * The size of the vmscsi_request has changed in win8. The ++ * additional size is for the newly added elements in the ++ * structure. These elements are valid only when we are talking ++ * to a win8 host. ++ * Track the correct size we need to apply. ++ */ ++static int vmscsi_size_delta = sizeof(struct vmscsi_win8_extension); + + /** + * HyperV storvsc timeout testing cases: +@@ -954,21 +964,15 @@ + static int + storvsc_probe(device_t dev) + { +- int ata_disk_enable = 0; + int ret = ENXIO; + + switch (storvsc_get_storage_type(dev)) { + case DRIVER_BLKVSC: + if(bootverbose) +- device_printf(dev, "DRIVER_BLKVSC-Emulated ATA/IDE probe\n"); +- if (!getenv_int("hw.ata.disk_enable", &ata_disk_enable)) { +- if(bootverbose) +- device_printf(dev, +- "Enlightened ATA/IDE detected\n"); +- device_set_desc(dev, g_drv_props_table[DRIVER_BLKVSC].drv_desc); +- ret = BUS_PROBE_DEFAULT; +- } else if(bootverbose) +- device_printf(dev, "Emulated ATA/IDE set (hw.ata.disk_enable set)\n"); ++ device_printf(dev, ++ "Enlightened ATA/IDE detected\n"); ++ device_set_desc(dev, g_drv_props_table[DRIVER_BLKVSC].drv_desc); ++ ret = BUS_PROBE_DEFAULT; + break; + case DRIVER_STORVSC: + if(bootverbose) +@@ -2018,27 +2022,45 @@ + ccb->ccb_h.status &= ~CAM_STATUS_MASK; + if (vm_srb->scsi_status == SCSI_STATUS_OK) { + const struct scsi_generic *cmd; +- ++ cmd = (const struct scsi_generic *) ++ ((ccb->ccb_h.flags & CAM_CDB_POINTER) ? ++ csio->cdb_io.cdb_ptr : csio->cdb_io.cdb_bytes); + if (vm_srb->srb_status != SRB_STATUS_SUCCESS) { +- if (vm_srb->srb_status == SRB_STATUS_INVALID_LUN) { +- xpt_print(ccb->ccb_h.path, "invalid LUN %d\n", +- vm_srb->lun); +- } else { +- xpt_print(ccb->ccb_h.path, "Unknown SRB flag: %d\n", +- vm_srb->srb_status); +- } + /* + * If there are errors, for example, invalid LUN, + * host will inform VM through SRB status. + */ +- ccb->ccb_h.status |= CAM_SEL_TIMEOUT; ++ if (bootverbose) { ++ if (vm_srb->srb_status == SRB_STATUS_INVALID_LUN) { ++ xpt_print(ccb->ccb_h.path, ++ "invalid LUN %d for op: %s\n", ++ vm_srb->lun, ++ scsi_op_desc(cmd->opcode, NULL)); ++ } else { ++ xpt_print(ccb->ccb_h.path, ++ "Unknown SRB flag: %d for op: %s\n", ++ vm_srb->srb_status, ++ scsi_op_desc(cmd->opcode, NULL)); ++ } ++ } ++ ++ /* ++ * XXX For a selection timeout, all of the LUNs ++ * on the target will be gone. It works for SCSI ++ * disks, but does not work for IDE disks. ++ * ++ * For CAM_DEV_NOT_THERE, CAM will only get ++ * rid of the device(s) specified by the path. ++ */ ++ if (storvsc_get_storage_type(sc->hs_dev->device) == ++ DRIVER_STORVSC) ++ ccb->ccb_h.status |= CAM_SEL_TIMEOUT; ++ else ++ ccb->ccb_h.status |= CAM_DEV_NOT_THERE; + } else { + ccb->ccb_h.status |= CAM_REQ_CMP; + } + +- cmd = (const struct scsi_generic *) +- ((ccb->ccb_h.flags & CAM_CDB_POINTER) ? +- csio->cdb_io.cdb_ptr : csio->cdb_io.cdb_bytes); + if (cmd->opcode == INQUIRY) { + struct scsi_inquiry_data *inq_data = + (struct scsi_inquiry_data *)csio->data_ptr; +@@ -2059,7 +2081,7 @@ + resp_buf[3], resp_buf[4]); + } + if (vm_srb->srb_status == SRB_STATUS_SUCCESS && +- data_len > SHORT_INQUIRY_LENGTH) { ++ data_len >= SHORT_INQUIRY_LENGTH) { + char vendor[16]; + + cam_strvis(vendor, inq_data->vendor, +@@ -2152,3 +2174,57 @@ + return (DRIVER_UNKNOWN); + } + ++#define PCI_VENDOR_INTEL 0x8086 ++#define PCI_PRODUCT_PIIX4 0x7111 ++ ++static void ++storvsc_ada_probe_veto(void *arg __unused, struct cam_path *path, ++ struct ata_params *ident_buf __unused, int *veto) ++{ ++ ++ /* ++ * The ATA disks are shared with the controllers managed ++ * by this driver, so veto the ATA disks' attachment; the ++ * ATA disks will be attached as SCSI disks once this driver ++ * attached. ++ */ ++ if (path->device->protocol == PROTO_ATA) { ++ struct ccb_pathinq cpi; ++ ++ bzero(&cpi, sizeof(cpi)); ++ xpt_setup_ccb(&cpi.ccb_h, path, CAM_PRIORITY_NONE); ++ cpi.ccb_h.func_code = XPT_PATH_INQ; ++ xpt_action((union ccb *)&cpi); ++ if (cpi.ccb_h.status == CAM_REQ_CMP && ++ cpi.hba_vendor == PCI_VENDOR_INTEL && ++ cpi.hba_device == PCI_PRODUCT_PIIX4) { ++ (*veto)++; ++ if (bootverbose) { ++ xpt_print(path, ++ "Disable ATA disks on " ++ "simulated ATA controller (0x%04x%04x)\n", ++ cpi.hba_device, cpi.hba_vendor); ++ } ++ } ++ } ++} ++ ++static void ++storvsc_sysinit(void *arg __unused) ++{ ++ if (vm_guest == VM_GUEST_HV) { ++ storvsc_handler_tag = EVENTHANDLER_REGISTER(ada_probe_veto, ++ storvsc_ada_probe_veto, NULL, EVENTHANDLER_PRI_ANY); ++ } ++} ++SYSINIT(storvsc_sys_init, SI_SUB_DRIVERS, SI_ORDER_SECOND, storvsc_sysinit, ++ NULL); ++ ++static void ++storvsc_sysuninit(void *arg __unused) ++{ *** DIFF OUTPUT TRUNCATED AT 1000 LINES *** From owner-svn-doc-all@freebsd.org Thu Feb 23 20:55:54 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6F651CEAA39; Thu, 23 Feb 2017 20:55:54 +0000 (UTC) (envelope-from glebius@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 200FD10AC; Thu, 23 Feb 2017 20:55:54 +0000 (UTC) (envelope-from glebius@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1NKtrtC061824; Thu, 23 Feb 2017 20:55:53 GMT (envelope-from glebius@FreeBSD.org) Received: (from glebius@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1NKtrcK061823; Thu, 23 Feb 2017 20:55:53 GMT (envelope-from glebius@FreeBSD.org) Message-Id: <201702232055.v1NKtrcK061823@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: glebius set sender to glebius@FreeBSD.org using -f From: Gleb Smirnoff Date: Thu, 23 Feb 2017 20:55:53 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50005 - head/share/security/advisories X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 23 Feb 2017 20:55:54 -0000 Author: glebius (src committer) Date: Thu Feb 23 20:55:53 2017 New Revision: 50005 URL: https://svnweb.freebsd.org/changeset/doc/50005 Log: Correct patch level of 10.3-RELEASE. Submitted by: many Modified: head/share/security/advisories/FreeBSD-SA-17:02.openssl.asc Modified: head/share/security/advisories/FreeBSD-SA-17:02.openssl.asc ============================================================================== --- head/share/security/advisories/FreeBSD-SA-17:02.openssl.asc Thu Feb 23 07:28:05 2017 (r50004) +++ head/share/security/advisories/FreeBSD-SA-17:02.openssl.asc Thu Feb 23 20:55:53 2017 (r50005) @@ -14,7 +14,7 @@ Affects: All supported versions o Corrected: 2017-01-26 19:14:14 UTC (stable/11, 11.0-STABLE) 2017-02-23 07:11:48 UTC (releng/11.0, 11.0-RELEASE-p8) 2017-01-27 07:45:06 UTC (stable/10, 10.3-STABLE) - 2017-02-23 07:12:18 UTC (releng/10.3, 10.3-RELEASE-p16) + 2017-02-23 07:12:18 UTC (releng/10.3, 10.3-RELEASE-p17) CVE Name: CVE-2016-7055, CVE-2017-3731, CVE-2017-3732 For general information regarding FreeBSD Security Advisories, @@ -146,19 +146,18 @@ VII. References The latest revision of this advisory is available at -----BEGIN PGP SIGNATURE----- -Version: GnuPG v2.1.18 (FreeBSD) -iQIzBAEBCgAdFiEEHPf/b631yp++G4yy7Wfs1l3PaucFAliujOsACgkQ7Wfs1l3P -aufZHhAAy8U5oOrLGq0XH8Dumpkyc+bFOmsEh+S1hL6jFL13jUVpDqogZ3w/a7If -Hcqiyipx5dbcGbHJayokfimkxPcIYydYQK9NwWaXVlnZifvgWka+KxtcD0u2A8S5 -cpTbNl+CALQQqEF3+JmOc4Uq2Dtui0xFG1N5Og4oF5Uo+lvQh4bcJ1UbfhMdq8EG -US3hGlJLJJW75m3jkgHyu0o7A0swnNTUQrW9Z0p/3iTiel7fM57d/N1who+kt59V -UErXTzMDBT1kkWRne0aTA71gdy3SUeRiVi9/LWggjIRJNyMnQjO3UI2UOIHLLQAG -CXcZLPekB87iHZxMAw8oV6b4GIkJhqUFW2ep2AZkUdDZ2Mup9bDrx/0Ik0jHjyQY -KEmZDroHvP8z569q+aWfIIpMXPv6zJTnent45U2/q13wMHJwWsADu9ukeWKTw7wI -P0Rc3vht+AXbXFi9SjxwdldgrVszV7x8Yi6W9KhHsGqCl6NBCW9Md/PWbNQQUVkq -I5tV0WB3pTwOk0yMi3h/okM9VBr1lPDU18W0he5T9wbOh4w0jwFb8AqMu1slst3l -9MlhRfO/4LIDlfRQ/dj4dOfVLZqEd/xleax99yFXZUzibUYrOMlBxNaKvV80plwB -Kg2Hr3DJuJa3599kNgXMCNV1lRIOJbJ9dRmX6B0YzMgvxKPIXY4= -=8Jsr +iQIcBAEBCgAGBQJYr0wJAAoJEO1n7NZdz2rnmrUP/3YO9Ruq7XQUbGbmDcn1WcmK +Z4c9ZGCrHYv92fj1XiCpAVZJw4AMUvREZfdGM9qfWD4KogirOsuU7ZoQlJX4PT8d +XwncHhv9Pbz2e7HpIME1G2/T0Zvl1A8ptuYzvIkG7eX++V2OEHJWaEdl7GSvllNy +75yBZJwHjjylCQtcFwcxE8L/VsN3ZL4o1uGDRO2sWo7AD6b5J3MzJ5OutVW+cWrq +HnmDiqRp+bzNeyNspcLTRM9OU+ja0V2e4384EPyHi5garJtMZklK4g9ywZOB8gl0 +3dsFMrGlb9ey03ewFEs9wfghTuPJU+M+v01GQ+SqFhRHVnoml3S6jG/UiN8BVe6s +ESZLbT2PmfGCGDi3FMrBrEz1e9fQrJP0xQ1/XKknG7yrwZloAes0WwOT/DeSde7C +oBsNWS6xOhjrq6WXLG6GSSBlmiw/z6zhVgNyixMV1FYrsaHs6Jko8Zrxr4GL3MxB +G6y8qLs7897WYZFn01vIAHVXGftBxukY8PZHsGCwA+OKjIxU2mmrcT7ARwoEMVot +HqsrLMogZnITqb0pfNRtXbgm/SWuh/GRdNGfS4soFyGCu/4vbKgAc0VETECoz3l8 +sybQLMexhzdeCCIVPOeEgiKCdaS/QDp7kgdLfiiAKpDaOQ6pFEnyHJOZ1w/mJpNy +8EUN7AzNSSV9kEUAoBUw +=7cmn -----END PGP SIGNATURE----- From owner-svn-doc-all@freebsd.org Fri Feb 24 10:10:37 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B9113CEBD56; Fri, 24 Feb 2017 10:10:37 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 17A26B57; Fri, 24 Feb 2017 10:10:37 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1OAAaHE084754; Fri, 24 Feb 2017 10:10:36 GMT (envelope-from rcyu@FreeBSD.org) Received: (from rcyu@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1OAAadu084752; Fri, 24 Feb 2017 10:10:36 GMT (envelope-from rcyu@FreeBSD.org) Message-Id: <201702241010.v1OAAadu084752@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rcyu set sender to rcyu@FreeBSD.org using -f From: Ruey-Cherng Yu Date: Fri, 24 Feb 2017 10:10:36 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50006 - head/zh_TW.UTF-8/books/handbook X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Feb 2017 10:10:37 -0000 Author: rcyu Date: Fri Feb 24 10:10:35 2017 New Revision: 50006 URL: https://svnweb.freebsd.org/changeset/doc/50006 Log: Update po file with newest handbook document. Update translate 4. Installing Applications: Packages and Ports Update translate 6.2. Browsers Fix translate (Gateway, MTA). Translated following chaptors or sectors: 11. Configuration and Tuning 11.13. Power and Resource Management 12. The FreeBSD Booting Process 12.1. Synopsis 12.2. FreeBSD Boot Process 12.3. Configuring Boot Time Splash Screens 12.4. Device Hints 12.5. Shutdown Sequence 13. Security 13.1. Synopsis 13.2. Introduction 17. Storage 17.8. Backup Basics 28. Network Servers 28.5. Lightweight Directory Access Protocol (LDAP) 28.6. Dynamic Host Configuration Protocol (DHCP) A. Obtaining FreeBSD A.2. FTP Sites A.3. Using Subversion A.4. Using rsync Submitted by: cwlin0416@gmail.com Differential Revision: https://reviews.freebsd.org/D9761 Modified: head/zh_TW.UTF-8/books/handbook/book.xml head/zh_TW.UTF-8/books/handbook/zh_TW.po Modified: head/zh_TW.UTF-8/books/handbook/book.xml ============================================================================== --- head/zh_TW.UTF-8/books/handbook/book.xml Thu Feb 23 20:55:53 2017 (r50005) +++ head/zh_TW.UTF-8/books/handbook/book.xml Fri Feb 24 10:10:35 2017 (r50006) @@ -241,6 +241,7 @@ + @@ -282,6 +283,7 @@ + @@ -342,6 +344,7 @@ + @@ -414,6 +417,7 @@ + @@ -494,6 +498,7 @@ + @@ -2255,7 +2260,7 @@ - 荐 IP 篏 + 荐荐 IP 篏 @@ -3250,7 +3255,7 @@ Ethernet address 0:3:ba:b:92:d4, Host ID - 荐莊怨 (Default Router) - IP 篏膓我窮荐 + 荐莊怨 (Default Router) - IP 篏膓我窮荐荐 @@ -3298,7 +3303,7 @@ Ethernet address 0:3:ba:b:92:d4, Host ID - 荐莊怨 (Default Router) - IPv6 篏膓我窮荐 + 荐莊怨 (Default Router) - IPv6 篏膓我窮荐荐 @@ -4856,7 +4861,7 @@ root 5211 0.0 0.2 3620 1724 2 /etc/mail/ - MTA (Mail Transport Agent) 檎荐絎罟鐚 sendmail8 + 灸散活叱篁ｇ腮綣鐚 sendmail8 檎荐絎罟 @@ -5956,7 +5961,7 @@ Swap: 2048M Total, 2048M Free ports 絅篁 - FreeBSD 綏峨у産莟絲膤紫輝綏ュ件罩ゅ FreeBSD 箴篋 2 腮絎茖膃筝壕蕭絅篁句∞茵鏝亥怨紮腆弱 FreeBSD Port 絅篁狗鐚篁ュ演膩茘絅順 Binary 絎茖 Binary 絅篁狗 ∴荀筝腮劫鐚遵掩亥紵蕭膓画君箴絎茖荵蕭 + FreeBSD у産莟絲膤紫輝綏ュ潔鐚罩ゅ FreeBSD 箴篋腮絎茖膃筝壕蕭絅篁句∞茵鏝亥怨紮腆弱茖 FreeBSD Port 絅篁狗鐚篁ュ演膩茘絅順 Binary 絎茖 Binary 絅篁狗腮号遵篏睡亥紵蕭膓画君箴絎茖荵蕭 莅絎腴鐚絨篋茹ｏ鍵 @@ -5998,7 +6003,7 @@ Swap: 2048M Total, 2048M Free - 茹ｅ膰荵蕭 寂弱絽御篏睡 tarball 筝篁 compress1, gzip1 bzip21 紕膰 + 寂弱頵ｅ膰荵蕭 寂弱絽悟 tarball 筝篁ョ綣鍿膰鐚絋 compress1, gzip1, bzip21 xz1 @@ -6014,17 +6019,19 @@ Swap: 2048M Total, 2048M Free - 絋荵蕭絅篁倶茴号霡紙 FreeBSD 羝荅篏 ｅ初荀篆剛筝荅画蕭紮腆惹醇ｅ幻篏睡 絲罩ょ腴鐚 綏牙莇 24,000 膃筝号腮綣鎴牙茴腱紙 FreeBSD + FreeBSD Port 荐荐箴緇紮腆主隈茘腮綣翫腮綺筝膤糸罟罅鐚腟 Port 罟罅篋筝莠茹ｅ膰篆茖膩茘絎茖腮綣綽荀莖荐 - FreeBSD Binary 絅篁銀賢篋腮綣膩茘絅順篁ゃ荐絎罟篁吟 絅篁九篁ヤ戎 pkg 篁や膊∞鐚絋 pkg install + ヨ蕭絨茴 FreeBSD ｡筝羝荅鐚醇荀膓筝篋篆罩ｆ醇ｅ幻絎茖筝決 - FreeBSD Port 絅篁九篋綏画┃荐絅遵紮腆主隈茘腮綣腮綺 Port 絅篁銀賢罟罅筝莠茹ｅ膰篆茖膩茘絎茖腮綣闈腮筝荀莖荐 + 九罩わ綏我莇 24,000 膃筝号腮綣鎴牙茴腱紙 FreeBSD九茵鐚篋腮綣鋈膩茘絅順 絅篁 (Package) 箴筝莠 - Port 膤紫輝篁ラ FreeBSD 絅篁句∞篁や∝絅篁吟 + 篋 Binary 絅篁九篏睡 FreeBSD 絅篁句∞篁や膊∞ - 筝茫 Binary 絅篁倶 Port 絅篁狗醇娯緒ヤ札 Binary Port 絅篁九茖腮綣鐚筝荅我腮綣娯腮綣鎺絨茴絎茖鐚絎茖荅牙綣鎺 + 筝茫 Binary 絅篁倶 Port 醇娯эョ Binary 絅篁倶 Port 箴絎茖腮綣鐚筝荅我腮綣ユ娯腮綣鎺絨茴絎茖鐚絎茖荅牙綣鎺 - 九腮茵絽悟娯室鐚篏 Binary 絅篁九 Port 絅篁倶藥 荀荀荀絎茖腮綣羆箴御 + FreeBSD Binary 絅篁銀賢筝腮綣鋇膩茘絅順篁ゃ荐絎罟篁ュ篁駈Binary 絅篁九篁ヤ戎 pkg8 篁や膊∞鐚絋 pkg install + + 九腮茵絽悟娯室鐚篏 Binary 絅篁九 Port 藥 荀荀荀絎茖腮綣羆箴御 Binary 絅篁九藥 @@ -6191,26 +6198,35 @@ Info: Lists information about open fil pkg 遺篁ｅ篁句∞綏ュ欠箴篁ｈ綏ュ件箴荐怨処 Binary 絅篁倶翫辱雁亜 - pkg 筝筝箴篁 Port 膊∞綏ュ桁 ports-mgmt/portmaster ports-mgmt/portupgrade鐚篋綏ュ桁箴絎茖箴 Binary Port 絅篁狗膃筝壕蕭鐚 pkg 遵茖 Binary 絅篁吟 + 絨弱Ŭ活篏睡 FreeBSD ≦霱筝膩茘 Binary 絅篁句腴佘篏睡 pkg 膊∞絅篁銀梢綏画恭紊 + + 篏鐚絨守ｄ活緇紮腆惹篏睡綏援罟罅綺膩茘腴佘荀 Port 膊∞綏ュ + + pkg 順∞ Binary 絅篁駈篁ヤ順九堺推撮 Port 膊∞綏ュ件篋綏ュ桁箴絎茖箴 Binary Port 絅篁狗荵蕭鐚 pkg 遵茖 Binary 絅篁吟 紮篏睡 <application>pkg</application> - FreeBSD у産 (Bootstrap) 綏ュ桁箴筝莠筝絎茖 pkg 倶篏 + FreeBSD у産 (Bootstrap) 綏ュ桁箴筝莠筝絎茖 pkg 倶篏綏ュ傑荐荐 FreeBSD 10.X 箙緇篏睡 + + + 筝 FreeBSD 倶吚ゅ腮綺鐚吡羝 鐚絨筝吡鐚綽拷 Port 絅篁狗 Binary 絅篁銀絎茖 pkg + + - 荀(Bootstrap)膤紫輝茫決鐚 + 荀 (Bootstrap) 膤紫輝茫決鐚 # /usr/sbin/pkg - 絨莠 FreeBSD 鐚pkg 綽拷 Port 絅篁狗 Binary 絅篁銀絎茖 + 綽膓臥膓画君ｇ箴腮綣鋎睡 - 荀絎茖 Port 絅篁駈茫決鐚 + 鐚荀絎茖 Port 絅篁駈決鐚 # cd /usr/ports/ports-mgmt/pkg # make # make install clean - 九膣篏睡絅篁句鎧腟援∽膤紫輝鐚綽絨莖綺莉亥弱鐚罩ゆ亥綏ュ傑ラｄ綏峨茖絅篁吟筝 pkg 綏峨茖鐚綽決篁ヤ篁ゅ絅篁区綺緇弱颰井亥弱鐚 + 九膣篏睡 pkg_* 綏ュ欠∽膤紫輝鐚綽絨莖綺莉亥弱鐚絋罩ゆ亥綏ュ傑ラｄ綏峨茖絅篁吟pkg 絎茖絎緇鐚綽決篁ヤ篁ゅ絅篁区綺緇弱颰井亥弱鐚 # pkg2ng @@ -6221,15 +6237,14 @@ Info: Lists information about open fil - 絅篁区綺莉腮醇у壕堺亥∝茯ゃ絽醐篋茯ょ絎綽順ワ九罩わ篁倶決 pkg2ng 緇≧莉膃筝壕蕭羝鐚篋腮綣綽医茖 + 絅篁区綺莉腮醇у壕堺亥∝茯ゃ絽醐篋茯ょ絎綽順ワ割戎絋罩わ篁倶決 pkg2ng 緇≧莉荵蕭羝鐚篋腮綣綽医茖 - 坂腆坂 FreeBSD Port 絅篁狗絨域蕭莖荐荐糸 pkg 絅篁倶弱鐚FreeBSD 10.X 箙荀 /etc/make.conf ユよ鐚 + 坂腆坂 FreeBSD Port 絅篁狗絨域蕭莖荐荐糸 pkg 絅篁区綺鐚FreeBSD 10.X 箙荀 /etc/make.conf ユよ鐚 WITH_PKGNG= yes - 荐 pkg 篏睡 FreeBSD 絅篁狗≦霱ヨ緇膩茘荐絅篁倶罅綺莖荐鐚茫 - + 荐 pkg 篏睡 FreeBSD 絅篁狗≦霱 (Repository) Binary 絅篁吟ヨ緇膩茘荐絅篁倶罅綺莖荐鐚茫 銀 pkg 荐絎檎茯茫 pkg.conf5 @@ -6319,7 +6334,7 @@ Proceed with deleting packages [y/N]: 腮醇ュ群絎茖絅篁 - 句上醇膃筝合腮綣鋇主憠蕭羲闆鐚荀上咲篋腮綣鐚篏睡 pkg у産腮醇ユ吟荀ヨ√群絎茖膤紫輝筝荵蕭篁私綏牙ョ羲闆決鐚 + 膃筝合腮綣鋇句上醇主憠蕭羲闆鐚荀上咲篋腮綣鐚篏睡 pkg у産腮醇ユ吟荀ヨ√群絎茖膤紫輝筝荵蕭篁私綏牙ョ羲闆決鐚 # pkg audit -F @@ -6401,7 +6416,11 @@ Deinstalling ca_root_nss-3.15.1_1... don 篏睡 Port 絅篁狗 - Port 絅篁狗筝膤糸峨 /usr/ports Makefiles篆茖颷井鐚筝膤糸罟罅箴膩茘絎茖 FreeBSD 筝腮綣篏睡 Port 絎茖腮綣鐚綽絎茖 Port 絅篁狗鐚ユ絎茖 FreeBSD 腮綣鋇絎茖鐚篏睡筝銀賢筝腮号箴絎茖鐚 + Port 絅篁狗筝後 Makefiles篆茖颷井罅鐚罸鋇腟篋罟罅箴膩茘絎茖 FreeBSD 筝筝腮綣鐚括┗坂 Port + + 荐鐚Port 絅篁狗峨 /usr/ports 絖筝 + + 腮綣篁ヤ戎 Port 膩茘箙鐚綽絎茖 Port 絅篁狗ュ絎茖 FreeBSD 羃絎茖鐚篁ヤ戎篁ヤ銀賢筝腮劫鎘茖鐚 Portsnap 号 @@ -6462,7 +6481,7 @@ Deinstalling ca_root_nss-3.15.1_1... don - Port 絅篁狗絎茖筝膤糸篁ｈ；荵蕭蕁鐚罸蕁綺筝絖篁ｈ；罸紙腮綣 篋絖腮怨 Port Skeleton鐚茖♂∽罅箴荐 FreeBSD 絋篏膩茘絎茖荅牙綣鐚罸 Port Skeleton 篁ヤ罟罅鐚 + Port 絅篁狗筝篁ｈ；筝荵蕭蕁鐚罸蕁綺筝絖篁ｈ；罸腮綣鐚罸у後箴荐 FreeBSD 絋篏膩茘絎茖荅牙綣閡罅腮綣鎕括┗篏 Port Skeleton鐚罸 Port Skeleton 篁ヤ罟罅鐚 @@ -6642,7 +6661,20 @@ The deinstallation will free 229 kB 荅膣箙鐚茫緇罟薤沿 /usr/ports/UPDATING 箴緇菴ｄ Port 綏峨膣膤紫輝綏峨茖罟罅筝茯腮馹膣 Port 醇荀篏睡決蕁紊罩ラ鐚箴絋罟罅弱贋鴻荐絎罟篏臀贋鴻篁私筝後合馹ｄ荀膣 Port 檎腓削筝箴ч篋腓阪決膣 - 荀決絲膣鐚篏睡 Portmaster Portupgrade + + 膣膊∞ Port 綏ュ + + ports upgrading-tools + + Port 絅篁狗後綏ュ桁篁ラ画膣鐚罸鋇腮綏ュ潔醇九藥膽咲 + + 篁ュ紊у Port 絎茖篏睡 Portmaster Portupgrade鐚憜莠亥 Synth 篏睡 + + + ｄ腮綏ュ桁劫膤紫輝篏括御羆堺主鎧腟援∞＜綮肴医篏睡篁私篋綏ュ隙篁処 + + + 篏睡 <application>Portmaster</application> 膣 Port @@ -6651,7 +6683,7 @@ The deinstallation will free 229 kB portmaster - ports-mgmt/portmaster 箴膣綏峨茖 Port 絨鎴у轡件絎筝荀娯銀 Port 莖綺箴水 FreeBSD 篏睡鐚荀篏睡 Port 絎茖罩ゅ轡桁鐚 + ports-mgmt/portmaster 箴膣綏峨茖 Port 絨鎴у轡件絎Ü戎篋 FreeBSD 榊膤紫輝絎茖綏ュ件筝荀娯銀 Port 莖綺箴水 FreeBSD 篏睡鐚荀篏睡 Port 絎茖罩ゅ轡桁鐚 # cd /usr/ports/ports-mgmt/portmaster # make install clean @@ -6715,6 +6747,8 @@ The deinstallation will free 229 kB Portmaster 箙箴絎茖亥 Port 亥鎧腟縁膩茘絎茖 Port 膣娯罔∞荀篏睡緒荀絎 Port 篏 Port 絅篁狗筝篏臀鐚 # portmaster shells/bash + + 翫 ports-mgmt/portmaster 莖荐喝 pkg-descr 緇 @@ -6724,7 +6758,7 @@ The deinstallation will free 229 kB portupgrade - Ί篁ョ箴膣 Port 綏ュ傑 Portupgrade鐚 ports-mgmt/portupgrade 緇絅篁倶 Port鐚罩ゅ轡傑絎茖筝絅篁ョ箴膊∞ Port 腮綣鐚篏絎荀娯 Ruby荀絎茖荅 Port鐚 + ports-mgmt/portupgrade Ί篁ョ箴膣 Port 綏ュ件罩ゅ轡傑絎茖筝絅篁ョ箴膊∞ Port 腮綣鐚絎荀娯 Ruby荀絎茖荅 Port鐚 # cd /usr/ports/ports-mgmt/portupgrade # make install clean @@ -6744,7 +6778,10 @@ The deinstallation will free 229 kB # portupgrade -PP gnome3 ュŬ活筝莠 Port distfiles 絅篁駈篏睡 吾ヤ荀膩茘絎茖篁私沿タ鐚篏睡 茫 portupgrade 篏箴緇檎翫莖荐 + + 翫 ports-mgmt/portupgrade 莖荐喝 pkg-descr 緇 + @@ -6759,11 +6796,11 @@ The deinstallation will free 229 kB # portsclean -C - ゆや紊鐚荐怨紮腆主取罟罅峨 /usr/ports/distfilesユ絎茖 Portupgrade鐚罩ゆ篁ゅゆ筝茴篁私 Port 綣 distfiles鐚 + ゆや紊鐚荐怨紮腆主取罟罅峨 /usr/ports/distfiles篏睡 Portupgrade ゆ筝茴篁私 Port 綣 distfiles鐚 # portsclean -D - 荀篏睡 Portupgrade 箴腱脂ゆ茴篁私絎茖膤紫輝筝 Port 綣 distfiles鐚 + Portupgrade 篁ョЩゆ茴篁私絎茖膤紫輝筝 Port 綣 distfiles鐚 # portsclean -DD @@ -6771,9 +6808,9 @@ The deinstallation will free 229 kB # portmaster --clean-distfiles - 荐篁ゆ篋劫頾√鋎睡腆肴荀 distfile + 荐鐚 distfile 荀茴わ篁ゆ篁ヤ劫篏睡腆肴 - や篁ヤ篁ゅ鐚ports-mgmt/pkg_cutleaves 絅篁倶 Port 腱脂や荀篏睡 Port + や篁ヤ篁ゅ鐚ports-mgmt/pkg_cutleaves 腱脂や荀篏睡 Port @@ -6786,7 +6823,7 @@ The deinstallation will free 229 kB 九膤紫輝筝決 poudriere 筝筝筝絎荀篏睡 ZFS鐚篏篏睡篋綛銀戎篋 ZFS鐚綽 /usr/local/etc/poudriere.conf 絎 ZPOOL 篁ュ FREEBSD_HOST 荐絎遺菴≦霱絎臂 CCACHE_DIR 篏睡 devel/ccache 綽巡綽膩茘腟筝羝絨ｄ絽悟隈茘腮綣霅主膩茘罨≧吾絨 poudriere 莖上遺腴筝莠 /poudriere 醇罸莠剛梢鐚銀荐絎｡荐寂梢莇喝 - 究謙亥檎箴絎臂荀決紊絨膩茘筝茫腟篋莇喝荐狗鐚筝茫 RAM 篋ゆ腥咲鐚ヨ荐狗筝莇鰹膩茘 Jail 絨罩≫研茴羝わ醇絅茯よ + 究謙亥檎箴絎臂荀決紊絨膩茘筝腟篋莇喝荐狗鐚筝茫 RAM 篋ゆ腥咲鐚ヨ荐狗筝莇鰹膩茘 Jail 篏絨罩≫研茴羝わ絅茯よ 紮 Jail Port 罔 @@ -6859,9 +6896,9 @@ ports-mgmt/pkg # poudriere bulk -j 10amd64 -p local -z workstation -f 10amd64-local-workstation-pkglist - Ctrlt 篁ラ¨腓榊膩茘鐚Poudriere 箙膩茘 /poudriere/logs/bulk/jailname 筝罟罅鐚膓臥篌堺箴蕁腓榊隈茘莖荐 + 決鐚筝 Ctrlt 篁ラ¨腓榊膩茘鐚Poudriere 箙膩茘 /poudriere/logs/bulk/jailname 筝罟罅鐚膓臥篌堺箴蕁腓榊隈茘莖荐 - 絅篁句憜篁ュ poudriere 罟罅綺箴絎茖 + 絎箙緇鐚医篁句憜篁ュ poudriere 罟罅綺箴絎茖 荀緇翫篏睡 poudriere 莖荐鐚茫 poudriere8 筝紫恐腴 @@ -6874,7 +6911,7 @@ ports-mgmt/pkg enabled: no } - 絽御膂≦荀箴 poudriere 腟絎∽句劫 HTTP絎茖筝膓臥篌堺箴箴絅篁句鐚絽御鐚/usr/local/poudriere/data/packages/10amd64鐚銀賢 10amd64 膩茘腮宴 + 絽御膂≦荀箴 poudriere 罟罅綺腟絎∽句劫 HTTP絎茖筝膓臥篌堺箴箴絅篁句鐚絽御鐚/usr/local/poudriere/data/packages/10amd64鐚銀賢 10amd64 膩茘腮宴 ヨｅ絅篁倶罅綺 URL 鐚http://pkg.example.com/10amd64鐚 /usr/local/etc/pkg/repos/custom.conf 罟罅綺荐絎罟削 @@ -6892,7 +6929,7 @@ ports-mgmt/pkg - 紊ч篁醇腮綣鎘茖 /usr/local/etc 絎茖喝筝荐荐絎罟鐚腮綣紊ч頥絎罟羈綮榊筝絖箴絖冗篋荐絎罟膀箴荐絎罟絽御篏睡 .sample 腟絨常荀罟∽ラ篋罟罅у刻筝処筝篋膩莠莅荐絎罟膃膤紫輝羆鐚荀膩莠荐絎罟膀茲茖処我罅筝ｻ .sample 罟 + 紊ч篁醇腮綣鎘茖 /usr/local/etc 絎茖喝筝荐荐絎罟鐚ユ腮綣紊ч頥絎罟綮榊筝絖箴絖冗篋荐絎罟膀箴荐絎罟罅腮演絽娯戎 .sample 腟絨常荐絎罟荀篁膣井ョ筝処筝篋膩莠莅荐絎罟膃膤紫輝羆鐚荀膩莠荐絎罟膀茲茖処我罅筝ｻ .sample 罟 @@ -6901,6 +6938,11 @@ ports-mgmt/pkg 篁醇腮綣篁ユ劫決鐚腮綣荀ヨ┃絎 /etc/rc.conf篋腮綣絽御絎茖 Script /usr/local/etc/rc.d鐚茫 箴緇翫莖荐 + + + 箴荐荐鐚腮綣鋇絎茖決九 Script鐚箙筝茹ｉゅ茖膣決銀賢罩 Script鐚腟膤紫輝膊∞ｻ羆阪 + + @@ -6927,9 +6969,9 @@ ports-mgmt/pkg 絨羆膓茘隙査∞鐚 Port Skeleton 筝莠後 make maintainer 沿 Port Makefile 箴緇膓茘隙査∞糸灸散篏絲腟膓茘隙査∞灸散у壕荐緇荀 Port Makefile 筝 $FreeBSD: 筝頑莠後榊茯よ - 筝篋 Port 筝怨篋榊境茘件 級茫紕 膓茘件Ű灸散医欠 freebsd-listname@FreeBSD.org 醇鐚絲篆≧荐緇篁ｅュ茫紕腮宴 + 筝篋 Port 筝怨篋榊境茘件 級茫紕 膓茘件荐怨鐚篏筝鐚Ű灸散医欠 freebsd-listname@FreeBSD.org 醇鐚絲篆≧荐緇篁ｅュ茫紕腮宴 - 絨ゅ倶蕁腓 ports@FreeBSD.org Port 巡援劫篋榊境茘件荅 Port 篆罩ｈ吂荐沿臥級茫紕筝腓丞召箴鐚絽御∴綽綏ュ + 絨ゅ倶 ports@FreeBSD.org 膓茘欠 Port 巡援劫篋榊境茘件荅 Port 篆罩ｈ吨醇箴荐沿臥級茫紕筝腓丞召箴鐚罩∴綽綏ュ! ュ篆≦羃緇篁私鐚篁ヤ 医 FreeBSD 馹 茯篏睡 Bugzilla 阪馹宴 @@ -6977,7 +7019,7 @@ ports-mgmt/pkg 篏睡 bsdinstall 絎茖 FreeBSD 筝筝絎茖篏睡篁≪腴絨茯絋篏絎茖筝荐絎 Xorg鐚荅我腮綣箴丈腆主 X Window 膤紫輝箴箴医･茯絋篏上遺研絎茖罅∝医荀腦膊∞腮綣 - 鎁遵茖荐絎 Xorg 筝筝絎茖腮箴荀腦膊∞腮綣檎篏睡茫 pcbsd.org 膓牙 + 鎁遵茖荐絎 Xorg 筝筝絎茖腮箴荀腦膊∞腮綣檎篏睡茫 膓牙 翫 Xorg 吓襲霃蕭莖荐鐚茫 x.org 膓牙 @@ -7084,16 +7126,16 @@ ports-mgmt/pkg FreeBSD鐚Xorg 絅篁倶 Port 箴絎茖 + 篏睡 Binary 絅篁句絎茖綺莠綽鐚篏荐檎莠絨鐚 + + # pkg install xorg + 荀緇 Port 絅篁狗膩茘絎茖鐚 # cd /usr/ports/x11/xorg # make install clean - 篏睡 Binary 絅篁九茖綽鐚篏荐檎莠絨鐚 - - # pkg install xorg - - 腮絎茖劫絎翫茖 Xorg 膤紫輝罩ゆ劫颮綮肴医ぇ紊娯戎 + 腮絎茖劫絎翫茖 Xorg 膤紫輝鐚絨紊у娯戎莠綮肴遺戎 Binary 絅篁九茖 莠膕丞亜 X 膤紫輝腟膓薊篏睡篏睡鐚 x11/xorg-minimal 緇絨延絎茖紊у悟篁吟醇後昆篁ュ腮綣鐚篁醇腮綣荀篋蕁紊篁倶初篏 @@ -7117,7 +7159,11 @@ ports-mgmt/pkg 綽紮 - Xorg 吓ぇ紊後幻荀蕁腓阪＜窮や札罔茖臀鐚Xorg 究謙篋茖臀鐚筝筝荀荐絎 + Xorg 吓ぇ紊後幻荀蕁腓阪＜窮や札罔茖臀 + + + 蕁腓阪＜蕁腓阪篁ュ莠後ヨ臀究謙鐚♂篁私荐臀ら荐臀紊掩鐚茫水産腴 xorg.conf 決 罩ラ + @@ -7166,6 +7212,8 @@ ports-mgmt/pkg 荐絎罟 + 絽娯荀荐臀鐚ら荐臀≧篏鐚茫筝荀綮榊荐絎罟 + @@ -7524,6 +7572,10 @@ EndSection 篋羈 Xorg 荐絎≧劫隋蕭筝篏鐚荀篏睡筝荐絎絨篋羈綮榊荐荐絎罟 + + 綽荀茫炊綮榊荐絎罟鐚綽荀荐臀篏筝罩ｅ幻 + + 荐絎罟 Xorg 号究謙亥隋蕭∝鐚罟罅絨筝紮荐荐絎緇綛 ∝ xorg.conf鐚 @@ -7557,7 +7609,11 @@ EndSection 掩 Xorg у産荐絖後罅√榊腮綣鋇筝緇鰹紊у憥檎膩ｏ莎隙緇筝絨罐鐚絨鎕綛鞘絎筝羝罐筝鐚茖≧綛上莢脂莖 Type1 (PostScript) 絖鐚筝遵号 Xorg 篏睡箴絋鐚URW 絖 (Times Roman, Helvetica, Palatino 銀) Freefont 絖 (x11-fonts/freefonts) 篋翫絖鐚篏銀賢紊ч腟綵∵蕭絋 GIMP 篏睡絖鐚筝筝遵篏肴√絖篏睡罩ゅ鐚Xorg 篁ョ亜荐絎篏睡 TrueType 絖翫筝脂荅括完莖荐鐚茫 X7 篏 - 荀緇 Port 絅篁狗絎茖筝菴亥 Type1 絖決篁ヤ篁わ + 荀 Binary 絅篁九茖筝菴亥 Type1 絖決篁ヤ篁わ + + # pkg install urwfonts + + Port 絅篁狗膩茘鐚決篁ヤ篁わ # cd /usr/ports/x11-fonts/urwfonts # make install clean @@ -8485,7 +8541,11 @@ EndSection Firefox <trademark>Java</trademark> 篁 - Firefox 絎茖筝筝 Java 呃九罩 java/icedtea-web 箴篋莢紫膓臥頳遵篁銀決 Java applet鐚罩ら篁九篁ョ Binary 絅篁九茖 Port 膩茘鐚 + Firefox 絎茖筝筝 Java 呃九罩 java/icedtea-web 箴篋莢紫膓臥頳遵篁銀決 Java applet鐚罩ら篁九篁ョ Binary 絅篁九茖鐚 + + # pkg install icedtea-web + + Port 絅篁狗膩茘鐚 # cd /usr/ports/java/icedtea-web # make install clean @@ -8595,7 +8655,11 @@ EndSection Konqueror 筝Ŭ膓臥頳遵鐚 絎箙罟罅膊∞紊紵蕭頳遵絎 x11/kde4-baseapps 絅篁倶 Port 筝 - Konqueror 篏睡 WebKit 篁ュ絎 KTHMLWebKit 筝絅茴荐怨憘撮頳遵篏睡膵綣鐚 Chromium荀 FreeBSD Konqueror 篏睡 WebKit 絎茖 www/kwebkitpart 絅篁倶 Port罩ょ箴腓榊篏睡 Port 膩茘鐚 + Konqueror 篏睡 WebKit 篁ュ絎 KTHMLWebKit 筝絅茴荐怨憘撮頳遵篏睡膵綣鐚 Chromium荀 FreeBSD Konqueror 篏睡 WebKit 絎茖 www/kwebkitpart 絅篁倶 Port罩ょ箴腓榊篏睡 Binary 絅篁九茖鐚 + + # pkg install kwebkitpart + + Port 絅篁狗絎茖鐚 # cd /usr/ports/www/kwebkitpart # make install clean @@ -10397,7 +10461,11 @@ bktr0: Pinnacle/Miro TV, Philips SECAM t 荐絎 MythTV 緇腴 - To install MythTV using the port: + 荀篏睡 Binary 絅篁九茖 MythTV 鐚 + + # pkg install mythtv + + Port 絅篁狗絎茖鐚 # cd /usr/ports/multimedia/mythtv # make install @@ -10544,6 +10612,17 @@ Re-scan of bus 3 was successful graphics/xsane installs xsane. + 荀 Binary 絅篁九茖篁遵鐚 + + # pkg install xsane sane-frontends + + Port 絅篁狗絎茖鐚 + + # cd /usr/ports/graphics/sane-frontends +# make install clean +# cd /usr/ports/graphics/xsane +# make install clean + After installing the graphics/sane-backends port or package, use sane-find-scanner to check the scanner @@ -14049,7 +14128,7 @@ export PATH 綮銀叱腮綣頥絎 - 憜 FreeBSD 綣 rc.d鐚莅荐絎腮綣腮綣雁亜筝箴翫純篏睡 亥球鐚篁ヨ┃絎腮綣銀劫箙緇筝篁ラ /etc/rc.conf 箴渇蕁紊罔箴篁ｅ罩糸 Script 筝罔筝堺 Script 醇絋筝箴腓削 + 憜 FreeBSD 綣 rc.d鐚荐絎腮綣莅雁亜筝箴翫純篏睡 亥球鐚篁ヨ┃絎腮綣銀劫箙緇筝篁ラ /etc/rc.conf 箴渇蕁紊罔箴篁ｅ罩糸 Script 筝罔筝堺 Script 醇絋筝箴腓削 #!/bin/sh # @@ -14578,7 +14657,7 @@ ifconfig_dc1="inet 10.0.0.1 netmask 255. # service netif restart - ラ荐綏画┃絎 /etc/rc.conf 箙罔ｈ筝篁わ + ラ荐荐綏画┃絎 /etc/rc.conf 箙罔ｈ筝篁わ # service routing restart @@ -15344,18 +15423,7 @@ device_probe_and_attach: cbb0 attach ret 茯炊∞腆 - The following section will discuss various tuning - mechanisms and options which may be applied to disk - devices. In many cases, disks with mechanical parts, - such as SCSI drives, will be the - bottleneck driving down the overall system performance. While - a solution is to install a drive without mechanical parts, - such as a solid state drive, mechanical drives are not - going away anytime in the near future. When tuning disks, - it is advisable to utilize the features of the iostat8 - command to test various changes to the system. This - command will allow the user to obtain valuable information - on system IO. + ･筝箴腴膀荐茫脾腆茖臀筝腮茯炊∞罘区檎紊у御箴筝鐚篏睡罘罌医篁句隋腆鐚絋 SCSI 脾腆罘鐚阪贋顔膤紫輝巡筝狗吾九群膓筝篏睡罘罌医篁句脾腆罘茹ｆ浦号鐚絋鐚堺隋腆鐚篏篏睡罘罌医篁句脾腆罘т研筝羔紊宴茯炊∞腆鐚綮肴医篁ュ iostat8 篁ょ巡羝荅腮絨膤紫輝莅器篁ゅ莅篏睡緇膤紫輝 IO 檎莖荐 Sysctl 莅 @@ -16116,56 +16184,11 @@ kern.maxvnodes: 100000 - It is important to utilize hardware resources in an - efficient manner. Power and resource management allows the - operating system to monitor system limits and to possibly - provide an alert if the system temperature increases - unexpectedly. An early specification for providing power - management was the Advanced Power Management - (APM) facility. APM - controls the power usage of a system based on its activity. - However, it was difficult and inflexible for operating systems - to manage the power usage and thermal properties of a system. - The hardware was managed by the BIOS and the - user had limited configurability and visibility into the power - management settings. The APM - BIOS is supplied by the vendor and is - specific to the hardware platform. An APM - driver in the operating system mediates access to the - APM Software Interface, which allows - management of power levels. - - There are four major problems in APM. - First, power management is done by the vendor-specific - BIOS, separate from the operating system. - For example, the user can set idle-time values for a hard drive - in the APM BIOS so that, - when exceeded, the BIOS spins down the hard - drive without the consent of the operating system. Second, the - APM logic is embedded in the - BIOS, and it operates outside the scope of - the operating system. This means that users can only fix - problems in the APM - BIOS by flashing a new one into the - ROM, which is a dangerous procedure with the - potential to leave the system in an unrecoverable state if it - fails. Third, APM is a vendor-specific - technology, meaning that there is a lot of duplication of - efforts and bugs found in one vendor's BIOS - may not be solved in others. Lastly, the APM - BIOS did not have enough room to implement a - sophisticated power policy or one that can adapt well to the - purpose of the machine. - - The Plug and Play BIOS - (PNPBIOS) was unreliable in many situations. - PNPBIOS is 16-bit technology, so the - operating system has to use 16-bit emulation in order to - interface with PNPBIOS methods. FreeBSD - provides an APM driver as - APM should still be used for systems - manufactured at or before the year 2000. The driver is - documented in apm4. + 篁ユ劫隋蕭莖羣緇荀鐚紙莖羣膊∞莅篏罐膤紫輝篁ョｆｧ膤紫輝駈筝筝膤紫輝羣綺鎀蕭遵弱肴宴箴紙膊∞荀靊臥紙膊∞ (Advanced Power Management, APM)鐚APM 号膤紫輝篏睡羈箴箴ｧ狗紙区鐚篏睡 APM 荀篏罐膤紫輝箴膊∞膤紫輝紙羣綺絮ф育ｄ羃綵х鐚榊゜蕭 BIOS 膊∞鐚篏睡絨紙膊∞荐絎Ŭ荐絎ц荀э筝 APM BIOS 延箴筝劫惹篋隋蕭綛喝佘篏罐膤紫輝筝綽 APM 薊腮綣坂賢篁絖 APM 荵蕭篁∽遵膊∞紙膈膣 + + APM 筝肢馹膃筝鐚紙膊∞延劫 BIOS 箴絎鐚篏罐膤紫輝箴絋鐚篏睡 APM BIOS 荐絎隋腆臀種莇 BIOS 緇球篏罐膤紫輝鋇篏隋腆莉膃篋鐚APM 颮у BIOS 銀賢鐚筝筝篏罐膤紫輝膀箙紊篏鐚篁ｈ；篏睡Ű遵亥蕭 ROM 箴篆罩 APM BIOS 筝馹鐚罔ｇ腮綺演鐚ュけ鐚醇莅膤紫輝峨ョ≧緇膃筝鐚APM 箴劫茵鐚篁ｈ；荐怨茲綏ヤ鐚筝箴 BIOS 上亥馹銀箴紙茹ｆ浦緇筝藥鐚APM BIOS 筝羃莇喝腥咲箴絲篏茲紙膊∞睡絅初筝紙腮綣 + + Plug and Play BIOS (PNPBIOS) 緇紊羈筝筝筝鐚PNPBIOS 16 篏茵鐚篁ヤ罐膤紫輝綽罔≧ 16 篏遵 PNPBIOSFreeBSD 箴篋筝 APM 薊腮綣鋐 APM鐚 2000 綛岩茖初膤紫輝鐚荅臥腮綣茯 apm4 ACPI @@ -16175,55 +16198,22 @@ kern.maxvnodes: 100000 APM - The successor to APM is the Advanced - Configuration and Power Interface (ACPI). - ACPI is a standard written by an alliance of - vendors to provide an interface for hardware resources and power - management. It is a key element in Operating - System-directed configuration and Power Management - as it provides more control and flexibility to the operating - system. + APM 緇膵取臥荐臀紙篁 (Advanced Configuration and Power Interface, ACPI)ACPI 筝絅延絲榊罔羣鐚箴篋隋蕭莖羣紙膊∞篁鐚絎 篏罐膤紫輝贋･荐臀紙膊∞ (Operating System-directed configuration and Power Management) 窮荀膣鐚箴篋篏罐膤紫輝翫ｧ倶劫綵с - This chapter demonstrates how to configure - ACPI on FreeBSD. It then offers some tips on - how to debug ACPI and how to submit a problem - report containing debugging information so that developers can - diagnosis and fix ACPI issues. + 腴膀絨腓榊絋篏 FreeBSD 荐絎 ACPI鐚九箴筝篋絋篏絨 ACPI ら腓坂札絋篏篋ゅら莖荐馹縁莅寂査∴遵荐堺隙研篆罩 ACPI 馹 荐絎 <acronym>ACPI</acronym> - In FreeBSD the acpi4 driver is loaded by default at - system boot and should not be compiled - into the kernel. This driver cannot be unloaded after boot - because the system bus uses it for various hardware - interactions. However, if the system is experiencing - problems, ACPI can be disabled altogether - by rebooting after setting - hint.acpi.0.disabled="1" in - /boot/loader.conf or by setting this - variable at the loader prompt, as described in . - - - ACPI and APM - cannot coexist and should be used separately. The last one - to load will terminate if the driver notices the other is - running. - - - ACPI can be used to put the system into - a sleep mode with acpiconf, the - flag, and a number from - 1 to 5. Most users only - need 1 (quick suspend to - RAM) or 3 (suspend to - RAM). Option 5 performs - a soft-off which is the same as running - halt -p. - - Other options are available using - sysctl. Refer to acpi4 and - acpiconf8 for more information. + FreeBSD acpi4 薊腮綣荐膤紫輝紮莠ワ筝筝茴膩茘井後銀賢薊腮綣罘箙緇≧茴梧鐚榊鎧腟怨羌篏睡絎腮隋蕭篋九罩わョ鎧腟演医馹鐚ACPI 篁ヨ←鐚 /boot/loader.conf 筝荐絎 hint.acpi.0.disabled="1" 箙緇育罘莠ョ綣腓堺荐絎莅醐絋 筝茯 + + + ACPI APM 筝遵絖筝篏睡鐚ユ究謙井Ί罩ｅ決鐚荀莠ョ緇絨筝激 + + + ACPI 篁ョ箴莅膤紫輝峨ョ∞罔≦鐚篏睡 acpiconf 罔筝 1 5 後紊у娯戎Ū篏睡 1 (綽緇遵 RAM) 3 (緇遵 RAM)鐚檎 5 決荵罘 (Soft-off)鐚絋決 halt -p 筝罔ｃ + + 銀檎篏睡 sysctl 箴荐絎鐚茫 acpi4 篁ュ acpiconf8 篁ュ緇翫莖荐 @@ -16767,7 +16757,7 @@ debug.acpi.level="ACPI_LV_ERROR"booting bootstrap - 緇肢域ヤ罐膤紫輝罧究腮腮援罘腮綺 (Bootstrap process) 罘 (booting)FreeBSD 罘腮綺箴紊ч絎∵遵綵э御絎茖肢銀篏罐膤紫輝筝篏罐膤紫輝筝後篏罐膤紫輝純 + 緇肢域ヤ罐膤紫輝罧究腮腮援 罘腮綺 (Bootstrap process) 罘 (Booting)FreeBSD 罘腮綺箴紊ч絎∵遵綵э御絎茖肢銀篏罐膤紫輝筝篏罐膤紫輝筝後篏罐膤紫輝純 腴荅括完茯篁ヨ┃絎檎腓榊絋篏荐 FreeBSD 罘羌腮鐚銀賢主篋鐚翫医 FreeBSD 後究謙茖臀 init8篋篋主罘荐絖蕁我緇篋処域俄 @@ -16803,48 +16793,19 @@ debug.acpi.level="ACPI_LV_ERROR" FreeBSD 罘腮綺 - Turning on a computer and starting the operating system - poses an interesting dilemma. By definition, the computer does - not know how to do anything until the operating system is - started. This includes running programs from the disk. If the - computer can not run a program from the disk without the - operating system, and the operating system programs are on the - disk, how is the operating system started? - - This problem parallels one in the book The - Adventures of Baron Munchausen. A character had - fallen part way down a manhole, and pulled himself out by - grabbing his bootstraps and lifting. In the early days of - computing, the term bootstrap was applied - to the mechanism used to load the operating system. It has - since become shortened to booting. + 肢筝篏罐膤紫輝篏憘筝莇ｇ医ч鐚肢篏罐膤紫輝箙筝筝ラ荀絋篏篁私篋鐚篋篋箙筝緇脾腆決腮綣絋肢≧羃篏罐膤紫輝羈筝決腮綣鐚篏罐膤紫輝腮綣荳脾腆筝鐚ｉ瑳篏罐膤紫輝荀絋篏? + + 馹絋 The Adventures of Baron Munchausen 筝娯賢筝茹我俄羇茖￥篁篏鋋翫筝翫原 (Bootstrap) 綏掩篋坂鐚罩ゅ肢 bootstrap 筝荅箴莠ヤ罐膤紫輝罘駈緇箴茴膰 booting BIOS Basic Input/Output SystemBIOS - On x86 hardware, the Basic Input/Output System - (BIOS) is responsible for loading the - operating system. The BIOS looks on the hard - disk for the Master Boot Record (MBR), which - must be located in a specific place on the disk. The - BIOS has enough knowledge to load and run the - MBR, and assumes that the - MBR can then carry out the rest of the tasks - involved in loading the operating system, possibly with the help - of the BIOS. + x86 隋蕭筝鐚堺莠後/莠後榊鎧腟 (Basic Input/Output System, BIOS) 莢莢莠ヤ罐膤紫輝 BIOS 上亥゜腆筝筝脂罘荐 (Master Boot Record, MBR)鐚荅画綽篏主腆筝劫篏臀BIOS 莇喝ヨ篁ヨヤ研決 MBR鐚筝筝荐 MBR BIOS 筝篁ュ･筝箴莠ヤ罐膤紫輝綏ヤ - FreeBSD provides for booting from both the older - MBR standard, and the newer GUID Partition - Table (GPT). GPT - partitioning is often found on computers with the Unified - Extensible Firmware Interface (UEFI). - However, FreeBSD can boot from GPT partitions - even on machines with only a legacy BIOS - with gptboot8. Work is under way to provide direct - UEFI booting. + FreeBSD 莠 MBR 罔羣莠亥 GUID 峨茵 (GUID Partition Table, GPT) 筝処遵罘 (Booting)GPT 脾腆臥絽御吡輝筝綮銀叱蕭篁 (Unified Extensible Firmware Interface, UEFI) 肢筝上違筝茫絋篏鐚FreeBSD 割戎Ŭ括輝 BIOS 罘筝鐚箙篁ヤ戎 gptboot8 GPT 峨罘贋･篏睡 UEFI 罘弱轡篏罩ｅ画筝 Master Boot Record @@ -16854,49 +16815,18 @@ debug.acpi.level="ACPI_LV_ERROR"Boot Loader - The code within the MBR is typically - referred to as a boot manager, especially - when it interacts with the user. The boot manager usually has - more code in the first track of the disk or within the file - system. Examples of boot managers include the standard FreeBSD - boot manager boot0, also called - Boot Easy, and - Grub, which is used by many Linux - distributions. - - If only one operating system is installed, the - MBR searches for the first bootable (active) - slice on the disk, and then runs the code on that slice to load - the remainder of the operating system. When multiple operating - systems are present, a different boot manager can be installed - to display a list of operating systems so the user - can select one to boot. - - The remainder of the FreeBSD bootstrap system is divided into - three stages. The first stage knows just enough to get the - computer into a specific state and run the second stage. The - second stage can do a little bit more, before running the third - stage. The third stage finishes the task of loading the - operating system. The work is split into three stages because - the MBR puts limits on the size of the - programs that can be run at stages one and two. Chaining the - tasks together allows FreeBSD to provide a more flexible - loader. + MBR 筝腮綣絽御腮延罘膊∞腮綣 (Boot manager)鐚劫ユｄ篏睡篋腮綣罘膊∞腮綣絽御Ί篁順腮綣絖丈主腆膃筝脾荵罟罅膤紫輝罘膊∞腮綣箴絖罔羣 FreeBSD 罘膊∞腮綣 boot0 腮 Boot Easy 篁ュ Grub 絽悟弱腮 Linux 取 + + ュŬ絎茖筝篏罐膤紫輝鐚MBR 絨脾腆筝膃筝罘 (篏睡筝) 峨 (Slice)鐚九決荅峨峨筝腮綣鋐莠ュ筝篏罐膤紫輝倶紊篏罐膤紫輝絖鐚篁ュ茖蕁腓坂罐膤紫輝羝罘膊∞腮綣鐚篁ヨ篏睡篁ラ御荀篏罐膤紫輝 + + 蕕 FreeBSD 罘膤紫輝筝罧居膃筝罧球Ǔラ絋篏莅肢峨ョ劫筝決膃篋罧居膃篋罧球決膃筝罧灸篋罸莠紊筝藥鐚膃筝罧究絎莠ヤ罐膤紫輝綏ヤ綏ヤ筝罧窮 MBR 九罧灸罧灸遵決腮綣紊у絨篋綏ヤｇ筝莎決 FreeBSD 遵箴贋綵х莠ョ綣 kernel init8 - The kernel is then started and begins to probe for devices - and initialize them for use. Once the kernel boot process is - finished, the kernel passes control to the user process - init8, which makes sure the disks are in a usable state, - starts the user-level resource configuration which mounts file - systems, sets up network cards to communicate on the network, - and starts the processes which have been configured to run at - startup. + 後･紮究謙茖臀筝紮篋茖臀箴篏睡後罘腮綺鎘箙緇鐚後箴炊渇ｧ倶腟篏睡腮綺 init8鐚腮綺腆坂脾腆篁ヤ戎鐚九篏睡絮ょ莖羣荐臀箴莠罟罅膤紫輝荐絎膓画君＞札遵ｇ膓画君ｄ茴荐絎罘荀腮綺 - This section describes these stages in more detail and - demonstrates how to interact with the FreeBSD boot process. + 腴膀絨頑括完篁膣拷篋罧灸研腓榊絋篏 FreeBSD 罘腮綺鋋 罘膊∞腮綣 @@ -16906,19 +16836,9 @@ debug.acpi.level="ACPI_LV_ERROR"Master Boot Record (MBR) - The boot manager code in the MBR is - sometimes referred to as stage zero of - the boot process. By default, FreeBSD uses the - boot0 boot manager. - - The MBR installed by the FreeBSD installer - is based on /boot/boot0. The size and - capability of boot0 is restricted - to 446 bytes due to the slice table and - 0x55AA identifier at the end of the - MBR. If boot0 - and multiple operating systems are installed, a message - similar to this example will be displayed at boot time: + 腮怨 MBR 筝罘膊∞腮綣咲罘腮綺 膃狗罧 (Stage zero)鐚FreeBSD 荐篏睡 boot0 罘膊∞腮綣 + + FreeBSD 絎茖腮綣絎茖 MBR 箴炊篁 /boot/boot0 阪榊boot0 紊у絎拷頮九 446 篏腟掩弱画； 0x55AA 茘ョ⊆篏 MBR 腴ュ茖紊篏罐膤紫輝篏睡 boot0 鐚罘蕁腓阪筝膀箴荐鐚 <filename>boot0</filename> √ @@ -16929,54 +16849,23 @@ F2 FreeBSD Default: F2 - Other operating systems will overwrite an existing - MBR if they are installed after FreeBSD. If - this happens, or to replace the existing - MBR with the FreeBSD MBR, - use the following command: + 銀篁篏罐腟沿ュ FreeBSD 箙緇絎茖荀憝 MBR鐚ラ篁銀主篋鐚荀篏睡 FreeBSD MBR 篁ｇ憝 MBR 篏睡篁ヤ篁わ # fdisk -B -b /boot/boot0 device - where device is the boot disk, - such as ad0 for the first - IDE disk, ad2 for the - first IDE disk on a second - IDE controller, or da0 - for the first SCSI disk. To create a - custom configuration of the MBR, refer to - boot0cfg8. + 銀賢 device 罘脾腆鐚箴絋膃筝 IDE 脾腆 ad0鐚膃篋 IDE ｧ九膃筝 IDE脾腆 ad2鐚膃筝 SCSI 脾腆 da0荀綮榊荐 MBR 荐絎茫 boot0cfg8 罧灸罧灸 - Conceptually, the first and second stages are part of the - same program on the same area of the disk. Because of space - constraints, they have been split into two, but are always - installed together. They are copied from the combined - /boot/boot by the FreeBSD installer or - bsdlabel. - - These two stages are located outside file systems, in the - first track of the boot slice, starting with the first sector. - This is where boot0, or any other - boot manager, expects to find a program to run which will - continue the boot process. - - The first stage, boot1, is very - simple, since it can only be 512 bytes in size. It knows just - enough about the FreeBSD bsdlabel, which - stores information about the slice, to find and execute - boot2. - - Stage two, boot2, is slightly more - sophisticated, and understands the FreeBSD file system enough to - find files. It can provide a simple interface to choose the - kernel or loader to run. It runs - loader, which is much more - sophisticated and provides a boot configuration file. If the - boot process is interrupted at stage two, the following - interactive screen is displayed: + 网綽灸鐚膃筝膃篋罧球榊腆筝筝筝筝腮綣筝篁緒掩主咲筝駈絎茴篁緒篏筝篏球茖絎 FreeBSD 絎茖腮綣 bsdlabel 緇 /boot/boot 茲茖処箴 + + 罧球篏惹罅膤紫輝箙紊鐚罘峨膃筝脾荵鐚緇膃筝脾腆 (Sector) 紮鐚篏臀箴炊 boot0 銀罘膊∞腮綣峨井刻筝絨上篁ュ決腮綣鋌ョ梗膾罘腮綺 + + 膃筝罧窮 boot1 絽悟膂≦鐚阪Ű醇 512 篏腟紊у絎Ű処緇峨峨莖荐 FreeBSD bsdlabel 篁ュ絨鞘研決 boot2 + + 罧灸 boot2 腮緇茲筝藥鐚遵茹 FreeBSD 罟罅膤紫輝箴絨罟罅絎篁ユ箴筝膂≦篁≫御荀決後莠ョ綣絎決莠ョ綣 (loader) 頑筝処罘荐絎罟ラ罘腮綺罧灸筝件蕁腓坂札筝篋鐚 <filename>boot2</filename> √ @@ -16986,22 +16875,12 @@ Default: 0:ad(0,a)/boot/loader boot: - To replace the installed boot1 and - boot2, use bsdlabel, - where diskslice is the disk and - slice to boot from, such as ad0s1 for the - first slice on the first IDE disk: + 荀贋綏峨茖 boot1 boot2 篏睡 bsdlabel鐚銀賢 diskslice 荀罘脾腆峨鐚箴絋 ad0s1 篁ｈ；膃筝 IDE 脾腆膃筝峨鐚 # bsdlabel -B diskslice - If just the disk name is used, such as - ad0, bsdlabel will - create the disk in dangerously dedicated - mode, without slices. This is probably not the - desired action, so double check the - diskslice before pressing - Return. + ュÜ戎脾腆腮縁絋 ad0鐚bsdlabel 箴炊篁 演絨罔≦ 箴綮榊脾腆鐚筝綮榊篁私峨処篏筝鐚篁ュ筝 Return 灸茫罨∞∈茯 diskslice @@ -17010,43 +16889,18 @@ boot: boot-loader - The loader is the final stage - of the three-stage bootstrap process. It is located on the - file system, usually as - /boot/loader. - - The loader is intended as an - interactive method for configuration, using a built-in command - set, backed up by a more powerful interpreter which has a more - complex command set. - - During initialization, loader - will probe for a console and for disks, and figure out which - disk it is booting from. It will set variables accordingly, - and an interpreter is started where user commands can be - passed from a script or interactively. + loader 筝罧級罘腮紊緇筝罧居莠ョ綣鋎惹罅膤紫輝箙筝鐚絽後 /boot/loader + + loader 筝肢井頑篁ら綣桁ぇ頑阪榊у産篁ら箴筝篋劫鋐荐絎 + + 紮腮筝鐚loader 究謙 Console 脾腆鐚筝上阪篁ョ箴罘脾腆 Script 篋莠後ヤ戎篁ょ井号荐絎後莅娯研頑 loader loader configuration - The loader will then read - /boot/loader.rc, which by default reads - in /boot/defaults/loader.conf which sets - reasonable defaults for variables and reads - /boot/loader.conf for local changes to - those variables. loader.rc then acts on - these variables, loading whichever modules and kernel are - selected. - - Finally, by default, loader - issues a 10 second wait for key presses, and boots the kernel - if it is not interrupted. If interrupted, the user is - presented with a prompt which understands the command set, - where the user may adjust variables, unload all modules, load - modules, and then finally boot or reboot. lists the most commonly - used loader commands. For a - complete discussion of all available commands, refer to - loader8. + loader ･莅 /boot/loader.rc鐚腮綣荐莅 /boot/defaults/loader.conf 箴荐絎莅檎荐寂札莅 /boot/loader.conf 箴絨篋莅後亥贋鴻loader.rc ･箴篋莅娯篏鐚莅御罔∞後 + + 緇鐚荐羈筝 loader 緇窮よ叱 10 腱鐚ユ茴筝欠荅掩･後ヨ←篏睡筝件篏睡蕁腓堺腓阪鐚罩ゆ篏睡篁ヤ戎篁ら箴茯炊頑吾梧罔∞莠ユ─腟鐚九緇罘育罘 筝坂絽娯戎 loader 篁ゃ荀絎岩茹ｆ篁わ茫 loader8 莠ョ綣у産篁 @@ -17063,141 +16917,99 @@ boot: autoboot seconds - Proceeds to boot the kernel if not interrupted - within the time span given, in seconds. It displays a - countdown, and the default time span is 10 - seconds. + ュ絎 (腱) ф筝件膵主後罩ゆ篁ゆ蕁腓阪醐荐 10 腱 boot -options kernelname - Immediately proceeds to boot the kernel, with - any specified options or kernel name. Providing a - kernel name on the command-line is only applicable - after an unload has been issued. - Otherwise, the previously-loaded kernel will be - used. If kernelname is not - qualified it will be searched under - /boot/kernel and - /boot/modules. + 篏睡絎檎後腮援喝後掩篁ゅ絎後腮怨綽決 unload鐚篏睡莠ラ後 kernelname 筝絎雁莊緇絨 /boot/kernel /boot/modules 綺筝 boot-conf - Goes through the same automatic configuration of - modules based on specified variables, most commonly - kernel. This only makes sense if - unload is used first, before - changing some variables. + 箴絎莅後絽悟 kernel 筝罨∞後罔∞荐臀Ŭ決 unload 箙緇鐚絨莅頑娯劫篏睡 help topic - Shows help messages read from - /boot/loader.help. If the topic - given is index, the list of - available topics is displayed. + 蕁腓肴 /boot/loader.help 緇茯荐ユ絎筝脂 index 蕁腓堺筝脂 include filename - Reads the specified file and interprets it line - by line. An error immediately stops the *** DIFF OUTPUT TRUNCATED AT 1000 LINES *** From owner-svn-doc-all@freebsd.org Fri Feb 24 22:41:43 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7534DCECE02; Fri, 24 Feb 2017 22:41:43 +0000 (UTC) (envelope-from delphij@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 424BE10D8; Fri, 24 Feb 2017 22:41:43 +0000 (UTC) (envelope-from delphij@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1OMfgVT000342; Fri, 24 Feb 2017 22:41:42 GMT (envelope-from delphij@FreeBSD.org) Received: (from delphij@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1OMfgNJ000341; Fri, 24 Feb 2017 22:41:42 GMT (envelope-from delphij@FreeBSD.org) Message-Id: <201702242241.v1OMfgNJ000341@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: delphij set sender to delphij@FreeBSD.org using -f From: Xin LI Date: Fri, 24 Feb 2017 22:41:42 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50007 - head/share/xml X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 24 Feb 2017 22:41:43 -0000 Author: delphij Date: Fri Feb 24 22:41:42 2017 New Revision: 50007 URL: https://svnweb.freebsd.org/changeset/doc/50007 Log: Start new year with its own year node. Modified: head/share/xml/notices.xml Modified: head/share/xml/notices.xml ============================================================================== --- head/share/xml/notices.xml Fri Feb 24 10:10:35 2017 (r50006) +++ head/share/xml/notices.xml Fri Feb 24 22:41:42 2017 (r50007) @@ -30,7 +30,9 @@ + + 2016 From owner-svn-doc-all@freebsd.org Sat Feb 25 14:51:30 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8EA4DCEC04E; Sat, 25 Feb 2017 14:51:30 +0000 (UTC) (envelope-from lifanov@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 5B613C5B; Sat, 25 Feb 2017 14:51:30 +0000 (UTC) (envelope-from lifanov@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1PEpTLq090776; Sat, 25 Feb 2017 14:51:29 GMT (envelope-from lifanov@FreeBSD.org) Received: (from lifanov@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1PEpTUr090775; Sat, 25 Feb 2017 14:51:29 GMT (envelope-from lifanov@FreeBSD.org) Message-Id: <201702251451.v1PEpTUr090775@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: lifanov set sender to lifanov@FreeBSD.org using -f From: Nikolai Lifanov Date: Sat, 25 Feb 2017 14:51:29 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50008 - head/en_US.ISO8859-1/articles/contributors X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Feb 2017 14:51:30 -0000 Author: lifanov (ports committer) Date: Sat Feb 25 14:51:29 2017 New Revision: 50008 URL: https://svnweb.freebsd.org/changeset/doc/50008 Log: add Philip Stoev as contributor for databases/mysqlwsrep56-server Modified: head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Modified: head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml ============================================================================== --- head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Fri Feb 24 22:41:42 2017 (r50007) +++ head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Sat Feb 25 14:51:29 2017 (r50008) @@ -8526,6 +8526,11 @@ + Philip Stoev + philip.stoev@galeracluster.com + + + Philippe Lefebvre nemesis@balistik.net From owner-svn-doc-all@freebsd.org Sat Feb 25 15:07:25 2017 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 11A23CEC6BA; Sat, 25 Feb 2017 15:07:25 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id D52AEB67; Sat, 25 Feb 2017 15:07:24 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id v1PF7N5X097260; Sat, 25 Feb 2017 15:07:23 GMT (envelope-from bcr@FreeBSD.org) Received: (from bcr@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id v1PF7Ntu097259; Sat, 25 Feb 2017 15:07:23 GMT (envelope-from bcr@FreeBSD.org) Message-Id: <201702251507.v1PF7Ntu097259@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bcr set sender to bcr@FreeBSD.org using -f From: Benedict Reuschling Date: Sat, 25 Feb 2017 15:07:23 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r50009 - head/en_US.ISO8859-1/books/handbook/desktop X-SVN-Group: doc-head MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.23 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 25 Feb 2017 15:07:25 -0000 Author: bcr Date: Sat Feb 25 15:07:23 2017 New Revision: 50009 URL: https://svnweb.freebsd.org/changeset/doc/50009 Log: Remove one last instance of PC-BSD, renamed to TrueOS, from the handbook's desktop chapter. PR: 217351 Submitted by: brianstamand@gmail.com Modified: head/en_US.ISO8859-1/books/handbook/desktop/chapter.xml Modified: head/en_US.ISO8859-1/books/handbook/desktop/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/handbook/desktop/chapter.xml Sat Feb 25 14:51:29 2017 (r50008) +++ head/en_US.ISO8859-1/books/handbook/desktop/chapter.xml Sat Feb 25 15:07:23 2017 (r50009) @@ -36,7 +36,7 @@ Users who prefer to install a pre-built desktop version of FreeBSD rather than configuring one from scratch should refer to the - pcbsd.org + trueos.org website.