From owner-svn-doc-all@freebsd.org Mon Dec 17 07:56:30 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0D3CA1332F57; Mon, 17 Dec 2018 07:56:30 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A7C73884B9; Mon, 17 Dec 2018 07:56:29 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 9C41AC0E1; Mon, 17 Dec 2018 07:56:29 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBH7uTxR069340; Mon, 17 Dec 2018 07:56:29 GMT (envelope-from rcyu@FreeBSD.org) Received: (from rcyu@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBH7uTMR069339; Mon, 17 Dec 2018 07:56:29 GMT (envelope-from rcyu@FreeBSD.org) Message-Id: <201812170756.wBH7uTMR069339@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rcyu set sender to rcyu@FreeBSD.org using -f From: Ruey-Cherng Yu Date: Mon, 17 Dec 2018 07:56:29 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52693 - head/zh_TW.UTF-8/share/xml X-SVN-Group: doc-head X-SVN-Commit-Author: rcyu X-SVN-Commit-Paths: head/zh_TW.UTF-8/share/xml X-SVN-Commit-Revision: 52693 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: A7C73884B9 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.97 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.997,0]; NEURAL_HAM_SHORT(-0.98)[-0.975,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US]; NEURAL_HAM_LONG(-1.00)[-0.996,0] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2018 07:56:30 -0000 Author: rcyu Date: Mon Dec 17 07:56:29 2018 New Revision: 52693 URL: https://svnweb.freebsd.org/changeset/doc/52693 Log: - Traditional Chinese translation of the latest news item (12.0-RELEASE release announcement) Merge the following from the English version : r52530 ->r52668 Modified: head/zh_TW.UTF-8/share/xml/news.xml Modified: head/zh_TW.UTF-8/share/xml/news.xml ============================================================================== --- head/zh_TW.UTF-8/share/xml/news.xml Fri Dec 14 20:08:13 2018 (r52692) +++ head/zh_TW.UTF-8/share/xml/news.xml Mon Dec 17 07:56:29 2018 (r52693) @@ -22,7 +22,7 @@ The FreeBSD Traditional Chinese Documentation Project From: www/share/xml/news.xml $FreeBSD$ - Original revision: r52660 + Original revision: r52668 --> @@ -38,6 +38,16 @@ 11 + + + &os; 12.0-RELEASE 發布了 + +

FreeBSD + 12.0-RELEASE現已發布了。安裝前，請查看發布通知和發行勘誤以了解12.0的最新消息和問題。更多資訊可查看發行版資訊頁面。

+ Cirrus CI 支援 &os; From owner-svn-doc-all@freebsd.org Mon Dec 17 14:21:09 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7E0C6134115A; Mon, 17 Dec 2018 14:21:09 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 23F276FB91; Mon, 17 Dec 2018 14:21:09 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id CF1EC181AC; Mon, 17 Dec 2018 14:21:08 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBHEL8hG093901; Mon, 17 Dec 2018 14:21:08 GMT (envelope-from rcyu@FreeBSD.org) Received: (from rcyu@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBHEL8Se093900; Mon, 17 Dec 2018 14:21:08 GMT (envelope-from rcyu@FreeBSD.org) Message-Id: <201812171421.wBHEL8Se093900@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rcyu set sender to rcyu@FreeBSD.org using -f From: Ruey-Cherng Yu Date: Mon, 17 Dec 2018 14:21:08 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52694 - head/zh_TW.UTF-8/htdocs X-SVN-Group: doc-head X-SVN-Commit-Author: rcyu X-SVN-Commit-Paths: head/zh_TW.UTF-8/htdocs X-SVN-Commit-Revision: 52694 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 23F276FB91 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.96 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.997,0]; NEURAL_HAM_SHORT(-0.97)[-0.967,0]; NEURAL_HAM_LONG(-1.00)[-0.996,0] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2018 14:21:09 -0000 Author: rcyu Date: Mon Dec 17 14:21:08 2018 New Revision: 52694 URL: https://svnweb.freebsd.org/changeset/doc/52694 Log: - Update entities to reflect 12.0 is now available. Merge the following from the English version : r52445 ->r52666 Modified: head/zh_TW.UTF-8/htdocs/index.xsl Modified: head/zh_TW.UTF-8/htdocs/index.xsl ============================================================================== --- head/zh_TW.UTF-8/htdocs/index.xsl Mon Dec 17 07:56:29 2018 (r52693) +++ head/zh_TW.UTF-8/htdocs/index.xsl Mon Dec 17 14:21:08 2018 (r52694) @@ -5,7 +5,7 @@ ]> - +
  • Production: &rel.current; - &rel1.current;, + &rel2.current;
    • ?> From owner-svn-doc-all@freebsd.org Mon Dec 17 15:09:03 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5389013427F6; Mon, 17 Dec 2018 15:09:03 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E8FC171C81; Mon, 17 Dec 2018 15:09:02 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id D5F37189E8; Mon, 17 Dec 2018 15:09:02 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBHF92Lc017980; Mon, 17 Dec 2018 15:09:02 GMT (envelope-from rcyu@FreeBSD.org) Received: (from rcyu@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBHF92Sd017979; Mon, 17 Dec 2018 15:09:02 GMT (envelope-from rcyu@FreeBSD.org) Message-Id: <201812171509.wBHF92Sd017979@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rcyu set sender to rcyu@FreeBSD.org using -f From: Ruey-Cherng Yu Date: Mon, 17 Dec 2018 15:09:02 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52695 - head/zh_TW.UTF-8/htdocs X-SVN-Group: doc-head X-SVN-Commit-Author: rcyu X-SVN-Commit-Paths: head/zh_TW.UTF-8/htdocs X-SVN-Commit-Revision: 52695 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: E8FC171C81 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.96 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.997,0]; NEURAL_HAM_SHORT(-0.97)[-0.967,0]; NEURAL_HAM_LONG(-1.00)[-0.996,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 17 Dec 2018 15:09:03 -0000 Author: rcyu Date: Mon Dec 17 15:09:02 2018 New Revision: 52695 URL: https://svnweb.freebsd.org/changeset/doc/52695 Log: - Fix the position of the comma. Modified: head/zh_TW.UTF-8/htdocs/index.xsl Modified: head/zh_TW.UTF-8/htdocs/index.xsl ============================================================================== --- head/zh_TW.UTF-8/htdocs/index.xsl Mon Dec 17 14:21:08 2018 (r52694) +++ head/zh_TW.UTF-8/htdocs/index.xsl Mon Dec 17 15:09:02 2018 (r52695) @@ -91,9 +91,9 @@

    最新版本

    • Production: &rel.current; + href="&u.rel.announce;">&rel.current;, &rel1.current;, + href="&u.rel1.announce;">&rel1.current; &rel2.current;
      • From owner-svn-doc-all@freebsd.org Tue Dec 18 11:16:16 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6CE8C134D4B2; Tue, 18 Dec 2018 11:16:16 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 125A68E318; Tue, 18 Dec 2018 11:16:16 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 02B93260A1; Tue, 18 Dec 2018 11:16:16 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBIBGF0l052258; Tue, 18 Dec 2018 11:16:15 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBIBGFPq052257; Tue, 18 Dec 2018 11:16:15 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201812181116.wBIBGFPq052257@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI Date: Tue, 18 Dec 2018 11:16:15 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52696 - head/ja_JP.eucJP/share/xml X-SVN-Group: doc-head X-SVN-Commit-Author: ryusuke X-SVN-Commit-Paths: head/ja_JP.eucJP/share/xml X-SVN-Commit-Revision: 52696 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 125A68E318 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.95 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; NEURAL_HAM_LONG(-1.00)[-0.996,0]; NEURAL_HAM_SHORT(-0.95)[-0.955,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2018 11:16:16 -0000 Author: ryusuke Date: Tue Dec 18 11:16:15 2018 New Revision: 52696 URL: https://svnweb.freebsd.org/changeset/doc/52696 Log: - Merge the following from the English version: r52660 -> r52668 head/ja_JP.eucJP/share/xml/news.xml Modified: head/ja_JP.eucJP/share/xml/news.xml Modified: head/ja_JP.eucJP/share/xml/news.xml ============================================================================== --- head/ja_JP.eucJP/share/xml/news.xml Mon Dec 17 15:09:02 2018 (r52695) +++ head/ja_JP.eucJP/share/xml/news.xml Tue Dec 18 11:16:15 2018 (r52696) @@ -37,6 +37,25 @@ 12 + 11 + + + &os; 12.0-RELEASE + +

      FreeBSD + 12.0-RELEASE ޤ + 󥹥ȡ ꡼Ρ + ꡼ Errata + ɤߡ12.0 ˴ؤǿʤɤǧƤ + FreeBSD Υ꡼˴ؤܤˤĤƤ ꡼ +

      +       +       + + 1 From owner-svn-doc-all@freebsd.org Tue Dec 18 11:49:44 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 8B6A2134E19E; Tue, 18 Dec 2018 11:49:44 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 315648F7E5; Tue, 18 Dec 2018 11:49:44 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 24513265B4; Tue, 18 Dec 2018 11:49:44 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBIBnhSg068834; Tue, 18 Dec 2018 11:49:43 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBIBnhV6068833; Tue, 18 Dec 2018 11:49:43 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201812181149.wBIBnhV6068833@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI Date: Tue, 18 Dec 2018 11:49:43 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52697 - head/ja_JP.eucJP/share/xml X-SVN-Group: doc-head X-SVN-Commit-Author: ryusuke X-SVN-Commit-Paths: head/ja_JP.eucJP/share/xml X-SVN-Commit-Revision: 52697 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 315648F7E5 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.97 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; NEURAL_HAM_SHORT(-0.98)[-0.977,0]; NEURAL_HAM_LONG(-1.00)[-0.996,0] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 18 Dec 2018 11:49:44 -0000 Author: ryusuke Date: Tue Dec 18 11:49:43 2018 New Revision: 52697 URL: https://svnweb.freebsd.org/changeset/doc/52697 Log: Update rel.current.date and rel1.current.date entities. Modified: head/ja_JP.eucJP/share/xml/l10n.ent Modified: head/ja_JP.eucJP/share/xml/l10n.ent ============================================================================== --- head/ja_JP.eucJP/share/xml/l10n.ent Tue Dec 18 11:16:15 2018 (r52696) +++ head/ja_JP.eucJP/share/xml/l10n.ent Tue Dec 18 11:49:43 2018 (r52697) @@ -20,9 +20,9 @@ - + - + From owner-svn-doc-all@freebsd.org Wed Dec 19 11:35:21 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B156D1354EA9; Wed, 19 Dec 2018 11:35:21 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 57BFD7621B; Wed, 19 Dec 2018 11:35:21 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 48ECFDC62; Wed, 19 Dec 2018 11:35:21 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBJBZLXO013309; Wed, 19 Dec 2018 11:35:21 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBJBZLt0013308; Wed, 19 Dec 2018 11:35:21 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201812191135.wBJBZLt0013308@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI Date: Wed, 19 Dec 2018 11:35:21 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52698 - head/ja_JP.eucJP/htdocs/security X-SVN-Group: doc-head X-SVN-Commit-Author: ryusuke X-SVN-Commit-Paths: head/ja_JP.eucJP/htdocs/security X-SVN-Commit-Revision: 52698 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 57BFD7621B X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.95 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; NEURAL_HAM_SHORT(-0.95)[-0.951,0]; NEURAL_HAM_LONG(-1.00)[-0.998,0] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2018 11:35:21 -0000 Author: ryusuke Date: Wed Dec 19 11:35:20 2018 New Revision: 52698 URL: https://svnweb.freebsd.org/changeset/doc/52698 Log: - Merge the following from the English version: r52491 -> r52666 head/ja_JP.eucJP/htdocs/security/security.xml Modified: head/ja_JP.eucJP/htdocs/security/security.xml Modified: head/ja_JP.eucJP/htdocs/security/security.xml ============================================================================== --- head/ja_JP.eucJP/htdocs/security/security.xml Tue Dec 18 11:49:43 2018 (r52697) +++ head/ja_JP.eucJP/htdocs/security/security.xml Wed Dec 19 11:35:20 2018 (r52698) @@ -5,7 +5,7 @@ ]> - + @@ -152,13 +152,13 @@ n/a n/a n/a - 2023 ǯ 12 31 (ͽ) + 2020 ǯ 6 30 (̤) releng/12.0 12.0-RELEASE n/a - n/a + 2018 ǯ 12 11 12.1-RELEASE 3 @@ -194,6 +194,14 @@

      ݡȥǥξܺ٤京ˤĤƤϡ2015 ǯ 2 ʥ

      + +

      ϡ꡼󥸥˥󥰡ƥ + Port ޥ͡ȶĤFreeBSD ץȤˤ + stable ֥ 5 ǯ֥ݡݾڤκɾ + stable/12 ԤФޤ

      + +

      ܺ٤ˤĤƤϡ2018 ǯ 11 ʥ

      From owner-svn-doc-all@freebsd.org Wed Dec 19 17:15:54 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 82825133D59A; Wed, 19 Dec 2018 17:15:54 +0000 (UTC) (envelope-from ygy@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 250B08A490; Wed, 19 Dec 2018 17:15:54 +0000 (UTC) (envelope-from ygy@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 1515018F21; Wed, 19 Dec 2018 17:15:54 +0000 (UTC) (envelope-from ygy@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBJHFr3j072799; Wed, 19 Dec 2018 17:15:53 GMT (envelope-from ygy@FreeBSD.org) Received: (from ygy@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBJHFrCm072798; Wed, 19 Dec 2018 17:15:53 GMT (envelope-from ygy@FreeBSD.org) Message-Id: <201812191715.wBJHFrCm072798@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ygy set sender to ygy@FreeBSD.org using -f From: Guangyuan Yang Date: Wed, 19 Dec 2018 17:15:53 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52699 - head/zh_CN.UTF-8/share/xml X-SVN-Group: doc-head X-SVN-Commit-Author: ygy X-SVN-Commit-Paths: head/zh_CN.UTF-8/share/xml X-SVN-Commit-Revision: 52699 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 250B08A490 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.93 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; NEURAL_HAM_SHORT(-0.94)[-0.936,0]; NEURAL_HAM_LONG(-1.00)[-0.998,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2018 17:15:54 -0000 Author: ygy Date: Wed Dec 19 17:15:53 2018 New Revision: 52699 URL: https://svnweb.freebsd.org/changeset/doc/52699 Log: Update news from the English version. MFen: r52120 -> r52668 Modified: head/zh_CN.UTF-8/share/xml/news.xml Modified: head/zh_CN.UTF-8/share/xml/news.xml ============================================================================== --- head/zh_CN.UTF-8/share/xml/news.xml Wed Dec 19 11:35:20 2018 (r52698) +++ head/zh_CN.UTF-8/share/xml/news.xml Wed Dec 19 17:15:53 2018 (r52699) @@ -20,7 +20,7 @@ the contents of will be preferred over <p>. The FreeBSD Simplified Chinese Documentation Project - Original Revision: r52120 + Original Revision: r52668 From: www/share/xml/news.xml --> @@ -33,6 +33,224 @@ <name>2018</name> <month> + <name>12</name> + + <day> + <name>11</name> + + <event> + <title>&os; 12.0-RELEASE 发布了 + +

      FreeBSD + 12.0-RELEASE 现已发布。 在安装前， 请查看 发行公告 和 勘误 以了解 + 12.0 的最新消息或问题。 要获取关于 FreeBSD 发行版本的更多信息， 请参阅 发行版信息 页面。

      +       + + + Cirrus CI 支持 &os; + +

      Cirrus CI 系统近期增加了对 + &os; 的支持。 Cirrus CI 通过使用现代云技术， 使您的开发迭代更加快速、 + 有效和安全。 Cirrus CI 和您的团队一起扩展， 让您的软件交付更为快速和经济。 + 要获取更多详情， 请参阅 &os; 虚拟机 教程。

      +       +       + + + 1 + + + &os; 12.0-RC3 发布了 + +

      &os; 12.0 的第三个候选发布版本现已发布。 + 用于 amd64、armv6、armv7、arm64、i386、powerpc、powerpc64、powerpcspe + 和 sparc64 架构的 ISO 映像文件已经 发布， + 可以通过众多的 &os; + 镜像站点 获得。

      +       + +       + + + + 11 + + + 25 + + + &os; 12.0-RC2 发布了 + +

      &os; 12.0 的第二个候选发布版本现已发布。 + 用于 amd64、armv6、armv7、arm64、i386、powerpc、powerpc64、powerpcspe + 和 sparc64 架构的 ISO 映像文件已经 发布， + 可以通过众多的 &os; + 镜像站点 获得。

      +       +       + + + 17 + + + + &os; 12.0-RC1 发布了 + +

      &os; 12.0 的第一个候选发布版本现已发布。 + 用于 amd64、armv6、armv7、arm64、i386、powerpc、powerpc64、powerpcspe + 和 sparc64 架构的 ISO 映像文件已经 发布， + 可以通过众多的 &os; + 镜像站点 获得。

      +       +       + + + 10 + + + &os; 12.0-BETA4 发布了 + +

      &os; 12.0 的第四个 BETA 版本现已发布。 + 用于 amd64、armv6、armv7、arm64、i386、powerpc、powerpc64、powerpcspe + 和 sparc64 架构的 ISO 映像文件已经 发布， + 可以通过众多的 &os; + 镜像站点 获得。

      +       +       + + + 3 + + + &os; 12.0-BETA3 发布了 + +

      &os; 12.0 的第三个 BETA 版本现已发布。 + 用于 amd64、armv6、armv7、arm64、i386、powerpc、powerpc64 + 和 sparc64 架构的 ISO 映像文件已经 发布， + 可以通过众多的 &os; + 镜像站点 获得。

      +       +       +       + + + 10 + + + 27 + + + &os; 12.0-BETA2 发布了 + +

      &os; 12.0 的第二个 BETA 版本现已发布。 + 用于 amd64、armv6、armv7、arm64、i386、powerpc、powerpc64、powerpcspe + 和 sparc64 架构的 ISO 映像文件已经 发布， + 可以通过众多的 &os; + 镜像站点 获得。

      +       +       + + + 20 + + + &os; 12.0-BETA1 发布了 + +

      &os; 12.0 的第一个 BETA 版本现已发布。 + 用于 amd64、armv6、armv7、arm64、i386、powerpc、powerpc64、powerpcspe + 和 sparc64 架构的 ISO 映像文件已经 发布， + 可以通过众多的 &os; + 镜像站点 获得。

      +       +       + + + 16 + +

      新增 committer: + Thomas Munro + (src)

      +       +       + + + 9 + +

      新增 committer: + Yuri Pankov + (src)

      +       +       + + + 8 + +

      新增 committer: + Vinícius Zavam + (ports)

      +       +       + + + 1 + +

      新增 committer: + Alexandre C. Guimaraes + (ports)

      +       +       + +       + + + 9 + + + 21 + +

      新增 committer: + Sergey Kozlov + (ports)

      +       +       + + 6 + +

      新增 committer: + Emmanuel Vadot + (ports)

      +       +       + + 2 + +

      新增 committer: + Kevin Bowling + (ports)

      +       +       + +       + + 8 @@ -98,6 +316,12 @@ 11.2 的最新消息或问题。 要获取关于 FreeBSD 发行版本的更多信息， 请参阅 发行版信息 页面。

      + + +

      新增 committer: + Ben Widawsky + (src)

      +       @@ -397,6 +621,16 @@ 1 + + + 25 + + +

      新增 committer: + Jeb Cramer + (src)

      +       +       4 From owner-svn-doc-all@freebsd.org Wed Dec 19 19:51:28 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 7F15E13425E8; Wed, 19 Dec 2018 19:51:28 +0000 (UTC) (envelope-from gordon@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 307686AC41; Wed, 19 Dec 2018 19:51:28 +0000 (UTC) (envelope-from gordon@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 201591AA29; Wed, 19 Dec 2018 19:51:28 +0000 (UTC) (envelope-from gordon@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBJJpSHd053918; Wed, 19 Dec 2018 19:51:28 GMT (envelope-from gordon@FreeBSD.org) Received: (from gordon@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBJJpPIq053901; Wed, 19 Dec 2018 19:51:25 GMT (envelope-from gordon@FreeBSD.org) Message-Id: <201812191951.wBJJpPIq053901@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: gordon set sender to gordon@FreeBSD.org using -f From: Gordon Tetlow Date: Wed, 19 Dec 2018 19:51:25 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52700 - in head/share: security/advisories security/patches/EN-18:16 security/patches/EN-18:17 security/patches/EN-18:18 security/patches/SA-18:15 xml X-SVN-Group: doc-head X-SVN-Commit-Author: gordon X-SVN-Commit-Paths: in head/share: security/advisories security/patches/EN-18:16 security/patches/EN-18:17 security/patches/EN-18:18 security/patches/SA-18:15 xml X-SVN-Commit-Revision: 52700 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 307686AC41 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.96 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; NEURAL_HAM_SHORT(-0.97)[-0.967,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US]; NEURAL_HAM_LONG(-1.00)[-0.998,0] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 19 Dec 2018 19:51:28 -0000 Author: gordon (src,ports committer) Date: Wed Dec 19 19:51:24 2018 New Revision: 52700 URL: https://svnweb.freebsd.org/changeset/doc/52700 Log: Add SA-18:15 and EN-18:16 through EN-18:18. Approved by: so Added: head/share/security/advisories/FreeBSD-EN-18:16.ptrace.asc (contents, props changed) head/share/security/advisories/FreeBSD-EN-18:17.vm.asc (contents, props changed) head/share/security/advisories/FreeBSD-EN-18:18.zfs.asc (contents, props changed) head/share/security/advisories/FreeBSD-SA-18:15.bootpd.asc (contents, props changed) head/share/security/patches/EN-18:16/ head/share/security/patches/EN-18:16/ptrace.patch (contents, props changed) head/share/security/patches/EN-18:16/ptrace.patch.asc (contents, props changed) head/share/security/patches/EN-18:17/ head/share/security/patches/EN-18:17/vm.patch (contents, props changed) head/share/security/patches/EN-18:17/vm.patch.asc (contents, props changed) head/share/security/patches/EN-18:18/ head/share/security/patches/EN-18:18/zfs.patch (contents, props changed) head/share/security/patches/EN-18:18/zfs.patch.asc (contents, props changed) head/share/security/patches/SA-18:15/ head/share/security/patches/SA-18:15/bootpd.patch (contents, props changed) head/share/security/patches/SA-18:15/bootpd.patch.asc (contents, props changed) Modified: head/share/xml/advisories.xml head/share/xml/notices.xml Added: head/share/security/advisories/FreeBSD-EN-18:16.ptrace.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-EN-18:16.ptrace.asc Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,126 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-18:16.ptrace Errata Notice + The FreeBSD Project + +Topic: kernel panic upon ptrace attach to stopped process + +Category: core +Module: kernel +Announced: 2018-12-19 +Credits: John Baldwin, Konstantin Belousov +Affects: FreeBSD 11.2 +Corrected: 2018-11-09 17:43:23 UTC (stable/11, 11.2-STABLE) + 2018-12-19 17:52:56 UTC (releng/11.2, 11.2-RELEASE-p7) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +ptrace(2) is a system call used by debuggers and related utilities +to take control of a process and inspect its state. To use the +interface, a debugger must first attach to a target process. Once +attached, the ptrace interface allows the debugger to intercept events, +such as signal delivery, involving the target process. + +II. Problem Description + +The ptrace(2) implementation in FreeBSD 11.2 contains a bug such that +a ptrace attach operation will trigger a kernel panic if the target +process is in a stopped state. + +III. Impact + +Users debugging a problem with, for example, gdb, may cause the system to +crash. + +IV. Workaround + +No workaround is available. + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date, and reboot. + +2) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +# shutdown -r +30 "Rebooting for FreeBSD errata update" + +3) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +[FreeBSD 11.2] +# fetch https://security.FreeBSD.org/patches/EN-18:16/ptrace.patch +# fetch https://security.FreeBSD.org/patches/EN-18:16/ptrace.patch.asc +# gpg --verify ptrace.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/11/ r340290 +releng/11.2/ r342224 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlwanjhfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cKOqQ//fJgy4vjyoteYlSq6DagrgleiA9DkM13OsGxqGPOyA5+H+aI4ZtD3mqcK +u9p1eP3AA3sF5RLMvOpAMvJPYv1XMmHLm/15vGhjiLT7xK82jzH9Ic72hBnv6xm6 +lzp2L7dUKQaXwv6AUR9tF6MQXRBlC5FtI3Tf8ajUsNHCA+lMXx2pjYoG6/gWroXn +ycotsBYRicW6n6fJ+tTv9eVEI237+l+KUzqNH26e9Q6wkWtv4UNB5/FAauN6zovF +AJSLs9eTa7QlxsGbJwh/EYuSjw085n9jIFVeMQPN3kIvDHbk59mymSpE6W37QRj0 +c1Kq/nBI4WARrWvRf5KdZYXVJ/iKU3ndulE2gfmetbmHzCM4c7FcQaPqLM5htvfz +sUbu3o3Vq/0/XFj1nyxjX8YIxdveRaopi8rWASyq7JfsieUZt5RPSZM9QgbmoB45 +9fLCFMdMT2kBAUknIxoxlMAOzZV9p0d41Vu6M83Km5TC5iGItpYusScPh6qmxxC9 +WQwh6MzeabGEIFcxv6mCj4IcWGdDevcCIUW/mQBzPFJTdFQwq+A6HdHsNHJSQYZy +okY/P/CzUjupMYMLdbLjsxx7256Tm4wC2PVtvsyVZY/82IT0HGBq7pAp38R+3ANQ +FieQ+S0F0IKZlyNnGGghbH+YYIsehqC24eoymeUFZDias7vyq1A= +=5T6c +-----END PGP SIGNATURE----- Added: head/share/security/advisories/FreeBSD-EN-18:17.vm.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-EN-18:17.vm.asc Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,140 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-18:17.vm Errata Notice + The FreeBSD Project + +Topic: Kernel panic under load on Intel "Skylake" CPUs + +Category: core +Module: kernel +Announced: 2018-12-19 +Credits: Mark Johnston +Affects: FreeBSD 11.2 +Corrected: 2018-12-02 18:08:27 UTC (stable/11, 11.2-STABLE) + 2018-19-19 18:00:58 UTC (releng/11.2, 11.2-RELEASE-p7) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +The physical page allocator is a component of the kernel responsible for +tracking usage of the system's RAM by the kernel and by userland +applications. It maintains lists of unused memory pages which may be +returned by the allocator upon demand. It also maintains an integer +count of the number of pages stored in these lists. + +II. Problem Description + +The kernel contains handling for an Intel erratum affecting Skylake-X +CPUs. The erratum description states that a processor may hang when +performing a certain synchronization operation within a particular 4MB +region of physical memory. FreeBSD works around the erratum by using +a blacklisting mechanism to ensure that the physical page allocator +never returns pages in that region. However, this blacklisting +mechanism contained a bug such that the removal of pages in the region +was not reflected in the free page count. + +III. Impact + +The discrepancy between the free page count and the physical page +allocator's state can trigger a NULL pointer dereference when the +system is under heavy load, resulting in a panic. + +IV. Workaround + +Only systems using a Skylake-X or Skylake Server CPU are affected. + +Affected systems can work around the problem by setting the +"hw.skz63_enable" to 0 in /boot/loader.conf, causing the handling for +the Intel erratum to be disabled upon a reboot of the system. However, +this raises the possibility of being affected by the erratum if software +running on the system makes use of Intel TSX. + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date and reboot the system. + +2) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install +Reboot the system + +3) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +[FreeBSD 11.2] +# fetch https://security.FreeBSD.org/patches/EN-18:17/vm.patch +# fetch https://security.FreeBSD.org/patches/EN-18:17/vm.patch.asc +# gpg --verify vm.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/11/ r341401 +releng/11.2/ r342225 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlwannZfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cKsAxAAkr/ufB1aKSSib0n/e6PXE1FOnjUGgpK+LiiSG+QdW/6oMv/yto+4Qbj2 +3Ht3TPyuoTqwQmHHiSzpnnnRHGDrdffiRYQsziFR89c8iyw7Qni8BYlK2YLYYw9i +TVyT6sxkorpTPZpGQZNaRBwZoWCLaxBvfKC0wVcli9gByOfb5T5J4puUNT4EXIpb +eaimCWG24vsIkWlHeC/8ulHsjEEDBatyfWWl95i8JVMqBDdHZypryJkO0jBo5Uig +PIighKIqDiEwwvjtHfGh4iAn3mFINDbMDdjXyMWYqDbgvX3J6cCv6qaY7p2eizQN +taN1rbC+7MJIFEkTFASvbJq7KOc/PcXOLU4O3964HZbbowdQNwAxQAuMGN6GNLmJ +ydHE7Atei1Py8q3gg9uMpX0TVikzfOL6iBmdzEkg2mgXIeyISLn5BTuE/k9hkVwi +6Boeec1qshtx04gF0xzsp/KPropad4nV09/E4cuo5jHuaq3WgpnDVzVhGEmFZpY7 +Z5B8vHqSc7Ng0xZoQYIcYbGCVBaWNF4WCf/1DZhU44mXkob+CRkv+kROFkfn8lY3 +2Jzjp7LWqPv9CFxIJ7q4BnDTyhxkQksm646tII1JNMcjY0hzFjQDUrVmDRb8ak/E +LsJNDKicqGdCdrHeA8jZm7RxwAmdkhyF/uumPYxJg64Y9DU23SM= +=QgI2 +-----END PGP SIGNATURE----- Added: head/share/security/advisories/FreeBSD-EN-18:18.zfs.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-EN-18:18.zfs.asc Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,131 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-EN-18:18.zfs Errata Notice + The FreeBSD Project + +Topic: ZFS vnode reclaim deadlock + +Category: core +Module: kernel +Announced: 2018-12-19 +Credits: Allan Jude +Affects: FreeBSD 11.2 +Corrected: 2018-12-11 19:34:25 UTC (stable/11, 11.2-STABLE) + 2018-12-19 18:05:50 UTC (releng/11.2, 11.2-RELEASE-p7) + +For general information regarding FreeBSD Errata Notices and Security +Advisories, including descriptions of the fields above, security +branches, and the following sections, please visit +. + +I. Background + +ZFS is one of several filesystems available on FreeBSD. ZFS supports +many advanced features, including checksumming, transparent compression, +and snapshots. + +ZFS saves synchronous writes to the ZFS Intent Log (ZIL), which may be a +separate log device (SLOG), so they can be replayed in the event of a +power failure or system crash. This ensures that the contents of write() +calls that succeeded will still be available after the system +unexpectedly reboots. + +II. Problem Description + +There is a possible deadlock between zil_commit() and zfs_zget() during +the vnode reclaim process. If zfs_zget() is not able to take the vnode +exclusive lock, it will retry indefinately, blocking forward progress. + +III. Impact + +Processes may hang on the waitchan "zilog->zl_writer_lock". + +IV. Workaround + +Increasing the maximum number of vnodes (kern.maxvnodes) may decrease +the frequency of this deadlock. Systems not using ZFS are not affected. + +V. Solution + +Perform one of the following: + +1) Upgrade your system to a supported FreeBSD stable or release / security +branch (releng) dated after the correction date. + +2) To update your system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +3) To update your system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +[FreeBSD 11.2] +# fetch https://security.FreeBSD.org/patches/EN-18:18/zfs.patch +# fetch https://security.FreeBSD.org/patches/EN-18:18/zfs.patch.asc +# gpg --verify zfs.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile your kernel as described in + and reboot the +system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/11/ r341828 +releng/11.2/ r342226 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlwan2pfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cLKthAAq0CXErX6YRoMafBIhnMBgE+07l0FuIS0iHewgcf47jpTdmYp5BKk4n5Z +VUM9vo3zETHXmjedV3drTbJEQWG3H30R8P964YEPoUQjQ4D/AG+hlRKTerGkJx/w +CMMpSZEnRR5JDLrGaB2NfBKUu0s9sPWFMGbgOWYDxxiUUS5NwSYHPlaIu6MB4SXv +AyTwLLlCXf7sH+oQrosu4Pw4emQzEGP41I0N0Nt8Z+kvJdzQd32xGP1M/OsW29LL +SOZfXhERhwVx/2AYmOorkyVuHh1Q8OXbYckxfAXdKgRMm6rOEk3ZdPEH+lVTTw4l +RmFmz5AwU5icDAeILGNjiEPzeF3w8KT1x39CnSB5oofbnDEXcGsL92lHtQY3kkbK +PbUoJmjiGMwGr63HxU+CoR3meG8LJIHK1Bn/D3tSUs1GAZQHYbH6Vv/O2cidWxeD +/hIxffhSbuaN9lMy4gV8wQdxSRz/Am3AsYNVlS9EvCCvwB4lYZOf0GeEhgLFX56h +4w0XGBKy6FE/SHrNALWsyCJCnP1gN3njx/jwL8Dp3Vyqmft06w0KHw/xb5InYk4r +VPn+j1DkfWV97Gi8l+T8B7ir9W3KRDOlJUwInzeKRPojebdxlorM6BFtFsf90dXs +2xD1j/6m7RDqm+rGYPk6CdFJh95M5Roz0WJ1uCs89mpEHofW1kE= +=Gqpb +-----END PGP SIGNATURE----- Added: head/share/security/advisories/FreeBSD-SA-18:15.bootpd.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/advisories/FreeBSD-SA-18:15.bootpd.asc Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,132 @@ +-----BEGIN PGP SIGNED MESSAGE----- +Hash: SHA512 + +============================================================================= +FreeBSD-SA-18:15.bootpd Security Advisory + The FreeBSD Project + +Topic: bootpd buffer overflow + +Category: core +Module: bootpd +Announced: 2018-12-19 +Credits: Reno Robert +Affects: All supported versions of FreeBSD. +Corrected: 2018-12-19 18:17:59 UTC (stable/12, 12.0-STABLE) + 2018-12-19 18:21:07 UTC (releng/12.0, 12.0-RELEASE-p1) + 2018-12-19 18:19:15 UTC (stable/11, 11.2-STABLE) + 2018-12-19 18:22:25 UTC (releng/11.2, 11.2-RELEASE-p7) +CVE Name: CVE-2018-17161 + +For general information regarding FreeBSD Security Advisories, +including descriptions of the fields above, security branches, and the +following sections, please visit . + +I. Background + +The bootpd utility implements an Internet Bootstrap Protocol (BOOTP) +server as defined in RFC951, RFC1532, and RFC1533. + +II. Problem Description + +Due to insufficient validation of network-provided data it may be possible +for a malicious attacker to craft a bootp packet which could cause a stack +buffer overflow. + +III. Impact + +It is possible that the buffer overflow could lead to a Denial of Service +or remote code execution. + +IV. Workaround + +Firewall rules may be used to limit reception of bootp packets to only +trusted networks or hosts. Note that the bootp protocol is typically +limited to a common layer 2 broadcast domain, although the bootpgw gateway +can forward bootp requests and responses between subnets. + +V. Solution + +Upgrade your vulnerable system to a supported FreeBSD stable or +release / security branch (releng) dated after the correction date. +Restart bootpd if it is running in standalone mode. + +Perform one of the following: + +1) To update your vulnerable system via a binary patch: + +Systems running a RELEASE version of FreeBSD on the i386 or amd64 +platforms can be updated via the freebsd-update(8) utility: + +# freebsd-update fetch +# freebsd-update install + +2) To update your vulnerable system via a source code patch: + +The following patches have been verified to apply to the applicable +FreeBSD release branches. + +a) Download the relevant patch from the location below, and verify the +detached PGP signature using your PGP utility. + +# fetch https://security.FreeBSD.org/patches/SA-18:15/bootpd.patch +# fetch https://security.FreeBSD.org/patches/SA-18:15/bootpd.patch.asc +# gpg --verify bootpd.patch.asc + +b) Apply the patch. Execute the following commands as root: + +# cd /usr/src +# patch < /path/to/patch + +c) Recompile the operating system using buildworld and installworld as +described in . + +Restart the applicable daemons, or reboot the system. + +VI. Correction details + +The following list contains the correction revision numbers for each +affected branch. + +Branch/path Revision +- ------------------------------------------------------------------------- +stable/12/ r342228 +releng/12.0/ r342230 +stable/11/ r348229 +releng/11.2/ r342231 +- ------------------------------------------------------------------------- + +To see which files were modified by a particular revision, run the +following command, replacing NNNNNN with the revision number, on a +machine with Subversion installed: + +# svn diff -cNNNNNN --summarize svn://svn.freebsd.org/base + +Or visit the following URL, replacing NNNNNN with the revision number: + + + +VII. References + + + +The latest revision of this advisory is available at + +-----BEGIN PGP SIGNATURE----- + +iQKTBAEBCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlwane5fFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cKfzg/+PhmA1AKfXFSkeJJPvdF/7hjKpWaCdVAyUZsuWH5L1Tmb4Lc/pLjw22Ba +Xh/sAKik6pa/nVTZCBgAqoCqmV8CdhScwvRZdVSP5CQ9vnM+6fFcybP0aCZOmiJC +NGAE8nIBdazqWJfNM9HUSIbdqEOtMlVcyE0Ni/TxzcAFdzFowfDnyRm1wqI4zhM7 +YL7pU0kTYJfydjK540rHB1tNBaYHSJ/6ckK3tkjwjVgMsQwNSizKrPsqycoMlMmD +TqQMfDwU8W/jFLsr7OZE66eQBysSiuzYAv3IsipL+50SYgS0aoo3LwKrCcYGN6c/ +S/0SOfNHDgd/7wregI5adKqWJceaqZCVedSVLm6ZaG1Vt3alIjczX9D7wIjuXPlD +AkSKa0HnmSwDC8yWLJYMxuny7vy3uBAUnPiwIT3RrsDC0b28/uwNPbeSbG0Wrf9F +21PDMfeCPc2Vr/TVj9uSIo20pNtVhy+tGbx1Ilsgi3POa3n7pTOuFWHMzQVe3rZA +DLYEbliPxpq9NFJ/2UZQg25weOD5ygwaYZnbsXAMY47D4kteeQOjzomgiacVhE56 +oT8z804nGgGdCe4LpiHihDVzCbBvvuEPw9Edffzm7EWykpy7qn/aJQehfPfcfbeA +dvQ5khiLr0rMUeg9HU6oHu8+Lp4X+wQc3lCF2rXe+oqRierywec= +=jlRR +-----END PGP SIGNATURE----- Added: head/share/security/patches/EN-18:16/ptrace.patch ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-18:16/ptrace.patch Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,152 @@ +--- sys/kern/sys_process.c.orig ++++ sys/kern/sys_process.c +@@ -869,7 +869,7 @@ + } + + /* not currently stopped */ +- if ((p->p_flag & (P_STOPPED_SIG | P_STOPPED_TRACE)) == 0 || ++ if ((p->p_flag & P_STOPPED_TRACE) == 0 || + p->p_suspcount != p->p_numthreads || + (p->p_flag & P_WAITED) == 0) { + error = EBUSY; +@@ -876,12 +876,6 @@ + goto fail; + } + +- if ((p->p_flag & P_STOPPED_TRACE) == 0) { +- static int count = 0; +- if (count++ == 0) +- printf("P_STOPPED_TRACE not set.\n"); +- } +- + /* OK */ + break; + } +@@ -926,11 +920,28 @@ + if (p->p_pptr != td->td_proc) { + proc_reparent(p, td->td_proc); + } +- data = SIGSTOP; + CTR2(KTR_PTRACE, "PT_ATTACH: pid %d, oppid %d", p->p_pid, + p->p_oppid); +- goto sendsig; /* in PT_CONTINUE below */ + ++ sx_xunlock(&proctree_lock); ++ proctree_locked = 0; ++ MPASS(p->p_xthread == NULL); ++ MPASS((p->p_flag & P_STOPPED_TRACE) == 0); ++ ++ /* ++ * If already stopped due to a stop signal, clear the ++ * existing stop before triggering a traced SIGSTOP. ++ */ ++ if ((p->p_flag & P_STOPPED_SIG) != 0) { ++ PROC_SLOCK(p); ++ p->p_flag &= ~(P_STOPPED_SIG | P_WAITED); ++ thread_unsuspend(p); ++ PROC_SUNLOCK(p); ++ } ++ ++ kern_psignal(p, SIGSTOP); ++ break; ++ + case PT_CLEARSTEP: + CTR2(KTR_PTRACE, "PT_CLEARSTEP: tid %d (pid %d)", td2->td_tid, + p->p_pid); +@@ -1117,8 +1128,10 @@ + sigqueue_delete(&td3->td_sigqueue, + SIGSTOP); + } +- td3->td_dbgflags &= ~(TDB_XSIG | TDB_FSTP); ++ td3->td_dbgflags &= ~(TDB_XSIG | TDB_FSTP | ++ TDB_SUSPEND); + } ++ + if ((p->p_flag2 & P2_PTRACE_FSTP) != 0) { + sigqueue_delete(&p->p_sigqueue, SIGSTOP); + p->p_flag2 &= ~P2_PTRACE_FSTP; +@@ -1129,54 +1142,45 @@ + break; + } + ++ sx_xunlock(&proctree_lock); ++ proctree_locked = 0; ++ + sendsig: +- /* ++ MPASS(proctree_locked == 0); ++ ++ /* + * Clear the pending event for the thread that just + * reported its event (p_xthread). This may not be + * the thread passed to PT_CONTINUE, PT_STEP, etc. if + * the debugger is resuming a different thread. ++ * ++ * Deliver any pending signal via the reporting thread. + */ +- td2 = p->p_xthread; +- if (proctree_locked) { +- sx_xunlock(&proctree_lock); +- proctree_locked = 0; +- } ++ MPASS(p->p_xthread != NULL); ++ p->p_xthread->td_dbgflags &= ~TDB_XSIG; ++ p->p_xthread->td_xsig = data; ++ p->p_xthread = NULL; + p->p_xsig = data; +- p->p_xthread = NULL; +- if ((p->p_flag & (P_STOPPED_SIG | P_STOPPED_TRACE)) != 0) { +- /* deliver or queue signal */ +- td2->td_dbgflags &= ~TDB_XSIG; +- td2->td_xsig = data; + +- /* +- * P_WKILLED is insurance that a PT_KILL/SIGKILL always +- * works immediately, even if another thread is +- * unsuspended first and attempts to handle a different +- * signal or if the POSIX.1b style signal queue cannot +- * accommodate any new signals. +- */ +- if (data == SIGKILL) +- p->p_flag |= P_WKILLED; ++ /* ++ * P_WKILLED is insurance that a PT_KILL/SIGKILL ++ * always works immediately, even if another thread is ++ * unsuspended first and attempts to handle a ++ * different signal or if the POSIX.1b style signal ++ * queue cannot accommodate any new signals. ++ */ ++ if (data == SIGKILL) ++ p->p_flag |= P_WKILLED; + +- if (req == PT_DETACH) { +- FOREACH_THREAD_IN_PROC(p, td3) +- td3->td_dbgflags &= ~TDB_SUSPEND; +- } +- /* +- * unsuspend all threads, to not let a thread run, +- * you should use PT_SUSPEND to suspend it before +- * continuing process. +- */ +- PROC_SLOCK(p); +- p->p_flag &= ~(P_STOPPED_TRACE|P_STOPPED_SIG|P_WAITED); +- thread_unsuspend(p); +- PROC_SUNLOCK(p); +- if (req == PT_ATTACH) +- kern_psignal(p, data); +- } else { +- if (data) +- kern_psignal(p, data); +- } ++ /* ++ * Unsuspend all threads. To leave a thread ++ * suspended, use PT_SUSPEND to suspend it before ++ * continuing the process. ++ */ ++ PROC_SLOCK(p); ++ p->p_flag &= ~(P_STOPPED_TRACE | P_STOPPED_SIG | P_WAITED); ++ thread_unsuspend(p); ++ PROC_SUNLOCK(p); + break; + + case PT_WRITE_I: Added: head/share/security/patches/EN-18:16/ptrace.patch.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-18:16/ptrace.patch.asc Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlwankRfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cLE8Q/+JVnRMXEnZZ7d5ZDYHmLcdiWmx8WoSFVqR7uMZMUcxinhvPMtVGdKqRw2 +upRV2WU8oZQ5LzGbXGPc/1fOqVjrObmiTdegRKWmFqXpoGb5cZ5Pp+NzC45BdhcD +BhQHujb/uAuviJNOz5anoOlP4lC/nATBtUjc1jfBhJJT9OTYhAXShB74mbwmK1yW +RaLx4P38psoCAHxhl7waBLpfN+HLJUNFcLRAkQ4347+pElaLOzOY+wW+TwDv2ONq +3J7+reDtROpT87/R2rPa5xk0v+/uaRISe1T3SKxb+6W/860SjvT3QCjrP2s2rESb +7uvd9yqLESd87BVvrI9znI7Egr5wmpy3GUrLSOPXk8ogAbdPU8TS844aXqxqmH+G +xOesYYSPpihHBex1zMtR7O66xXGBR0vljCjsQtRuu3sATnogDy3PAGFCUjgIbP2L +wo4DHo7ImwNcLuKHxWbvTLmUFl/UucWN00cFVy5CEGMXVUbZvLjZoJrZT2Q9C6b5 +3+LtucyXt9gGR/p/QaphHSBrPpOx4F4vuxKmpB0hqRt/MhIV012ehHH+3ydGE4Zm +4y7FHii6bNpadIY236E2u0iMG5KVCy9J4SrBWX57D2fO3bXYPoLfq5Zg/HNvK56t +f8CRhERopkuJpoq9evT/Q/m74G9KznDHpixCTKycJ4klrzEAixY= +=bI0z +-----END PGP SIGNATURE----- Added: head/share/security/patches/EN-18:17/vm.patch ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-18:17/vm.patch Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,14 @@ +--- sys/vm/vm_page.c.orig ++++ sys/vm/vm_page.c +@@ -304,8 +304,10 @@ + + mtx_lock(&vm_page_queue_free_mtx); + ret = vm_phys_unfree_page(m); ++ if (ret != 0) ++ vm_phys_freecnt_adj(m, -1); + mtx_unlock(&vm_page_queue_free_mtx); +- if (ret) { ++ if (ret != 0) { + TAILQ_INSERT_TAIL(&blacklist_head, m, listq); + if (verbose) + printf("Skipping page with pa 0x%jx\n", (uintmax_t)pa); Added: head/share/security/patches/EN-18:17/vm.patch.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-18:17/vm.patch.asc Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlwann1fFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cIZdQ//ckpouBTa4BbaZmcle7mpC0oW4qCXfdA6VoMsUK+eBTbvXgMzKH0lwlro +Q3dwJKNM6k2TEX6Nz20Du13cK/cyz7IUTPN+fssaNucuE3bQ0DjABhRWpio/SyCt +S8CkqxnjNzH7qrhMLtxWyWyvu/vPxvZHwp1ys/Z9DqrySzAf/aSOyfyc5o1G46PS +rWUhhiwtmrO10/RLSdjdm1FQvrBW3raj9Lnw4oINHvggwvU/8sIk34MQqqbJH8Oo +8yYZ/vRoEw+h5Ok//QN+CC/9cmTM8WyDA4Mgxy8CkbrjZjZAVuSsnlHfK8hYxfaV +j+3GvRkwoYDeBYHlWkc0mO8+F5wg2SeyBMUDjJNa3z7QL4+gcT329A6Z3+/pJqiH +yBehEiDHjfbMm0HNItCVYtgYH5JLto1W/ckIf/Aqo/Q4JyrIMdDPviCWEURzyPAp +rgQxAQujUw1KOQANbT0ElD3kR93ILELU21wQHVTGH9IEt6pHVZ/MDNDN5B0Try51 +t7UdJ4J5Azb9C9i+oM0gDV0QhOxFCk1GInOCDAoAfO9ELiWoBG7F568EwPCSLH/Q +CfF6M7aT7/2B2XWADj5TgW95JXe8Q7h/9jlKkSCT5jfrSUp97HcW/g1m0oSKEEnp +nzN8sLdQeDlyPWnSCVZUAj2KhlNMQR362FyiBRkmWuA3Jo6b7sY= +=f2RG +-----END PGP SIGNATURE----- Added: head/share/security/patches/EN-18:18/zfs.patch ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-18:18/zfs.patch Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,44 @@ +--- sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_znode.c.orig ++++ sys/cddl/contrib/opensolaris/uts/common/fs/zfs/zfs_znode.c +@@ -1155,15 +1155,27 @@ + */ + ASSERT3P(zp, !=, NULL); + ASSERT3U(zp->z_id, ==, obj_num); +- *zpp = zp; +- vp = ZTOV(zp); +- +- /* Don't let the vnode disappear after ZFS_OBJ_HOLD_EXIT. */ +- VN_HOLD(vp); ++ if (zp->z_unlinked) { ++ err = SET_ERROR(ENOENT); ++ } else { ++ vp = ZTOV(zp); ++ /* ++ * Don't let the vnode disappear after ++ * ZFS_OBJ_HOLD_EXIT. ++ */ ++ VN_HOLD(vp); ++ *zpp = zp; ++ err = 0; ++ } + + sa_buf_rele(db, NULL); + ZFS_OBJ_HOLD_EXIT(zfsvfs, obj_num); + ++ if (err) { ++ getnewvnode_drop_reserve(); ++ return (err); ++ } ++ + locked = VOP_ISLOCKED(vp); + VI_LOCK(vp); + if ((vp->v_iflag & VI_DOOMED) != 0 && +@@ -1196,7 +1208,7 @@ + } + VI_UNLOCK(vp); + getnewvnode_drop_reserve(); +- return (0); ++ return (err); + } + + /* Added: head/share/security/patches/EN-18:18/zfs.patch.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/EN-18:18/zfs.patch.asc Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlwanpBfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cJMxA/9HdSKhs93mVCHCDsPMLhbE80hJtnU6qD2T7LnRPgfEviKj20ZQ4lYZ/Vg +5p28UFH3ubQ5Y0tRqJxhJGdFUwcNsBMa5VsUIrhD+xiVSr8dGVy0VcgFf3LoxE/b +Dm+3xM+vHYHyTIx3AKpS1ZQBHY6NbQa4zUhFG/BLvMrGx94tzWzCbgHkx3/qa4rT +uO++Z4tQb5ekFTjPrVNp37cvcZ0qli6TNBAZ/8HNsGKGYgUllZ22M/e7WQqmbqPC +yP6ILHqiMtMB5YADBQNE2/VtRVqzYtDA4Mj2QD6j2A4qUO5Cf4gxAR22qS0wpBv7 +/QEHMX9v2VR+oZtGGVK5lTypxmw4Rr4S6+MWEkN7C0dCqT67ut38QSnShpaQLajo +SaoqnVIPbq56Ep7Qxom3zgaPph9zfS9n6dKPuAR2YC/gpUpskoo0ecboBepfMWzW +YtxDZC1Cj8D+b1CGkG849iEZVENK8JFQBH4/amX+PQZn5RVJPRCsGuqqjp98rDRl +vLlI1oLmrC5isAO1/rre42AW0HXSD/1HQ2a0IG49/QbNKM1FqwnL5VPnCoEbYvmh +AJa/y3xc6ejeatJ++pRJNfTed1Mh/kBaSlAGSEAinXtDkwqIh/oW3nbOLuvYhj/W +ij6dhFzcKaV+LwH08CNOVYkeLIP+YH8Vngc8xK70BxVexsv3vKs= +=YWPI +-----END PGP SIGNATURE----- Added: head/share/security/patches/SA-18:15/bootpd.patch ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/SA-18:15/bootpd.patch Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,13 @@ +--- libexec/bootpd/bootpd.c.orig ++++ libexec/bootpd/bootpd.c +@@ -636,6 +636,10 @@ + char *homedir, *bootfile; + int n; + ++ if (bp->bp_htype >= hwinfocnt) { ++ report(LOG_NOTICE, "bad hw addr type %u", bp->bp_htype); ++ return; ++ } + bp->bp_file[sizeof(bp->bp_file)-1] = '\0'; + + /* XXX - SLIP init: Set bp_ciaddr = recv_addr here? */ Added: head/share/security/patches/SA-18:15/bootpd.patch.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ head/share/security/patches/SA-18:15/bootpd.patch.asc Wed Dec 19 19:51:24 2018 (r52700) @@ -0,0 +1,18 @@ +-----BEGIN PGP SIGNATURE----- + +iQKTBAABCgB9FiEE/A6HiuWv54gCjWNV05eS9J6n5cIFAlwangJfFIAAAAAALgAo +aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldEZD +MEU4NzhBRTVBRkU3ODgwMjhENjM1NUQzOTc5MkY0OUVBN0U1QzIACgkQ05eS9J6n +5cI1CQ//Xz4zLGczdRBddOo9DFvICnZc+OaJ4RZaPg9SIR4YZSNya1tjXNQIRX7M +ZwF2J3OIQajWnyG39FaNjdpku0Ga3oYJygkOGJpYpbqMPXzOpTd3uqfbW/jtTDGl +7e74Nkn/EAkjxws7+wodfw11aMpQWPrEWAC/HUeP69g7LQPEI9R8S+IsPJoE1e0i +Nqd8kZFzigT0/qUF5qpqFu5bqXtT6quaUePxLomvYHDKM+z8Iv/wK+CzrJ0EWDyW +yo8fhnoq2Mkzh1IJtH8UgFmgr70SRLaXinh1Zl0hUeKhkBorJwyZyCF4QJXZLdee +NLM1eVFpNuYqQYtvo9+e42FZurIZmVKhbQRXCw87xSbXFUR3Rw0raph2p07jlhOE +pmtJ1ByXYRXQkPG4lz8r0sLMvMMQyiX4wRfK/Hhu3sqEHPDzI78L1fpAOnG1j10t +bsfRF7VprbxntEBJiF0mB1E7Bouxl99xlcFw+W/O+ayjixvL2qRVANuQP+1EKLLu +vnaw+72uIZhXm8XrA3IXuXUB3A3D+KnvXoR5LaX0eUITjx+r1oH5+oGMzFTWHtSY +TCgs8sqL/K3D2yw2JL0NBhn74j+xF0nMCuZdif5F0gFYckuVhVCC8aS1iXbDK4XT +ImIrgLhbCRc+HFqdM2qWStUnpn3u7RvLkAblRqErWxEOMBp0Shw= +=idvx +-----END PGP SIGNATURE----- Modified: head/share/xml/advisories.xml ============================================================================== --- head/share/xml/advisories.xml Wed Dec 19 17:15:53 2018 (r52699) +++ head/share/xml/advisories.xml Wed Dec 19 19:51:24 2018 (r52700) @@ -11,6 +11,15 @@ 12 + 19 + + + FreeBSD-SA-18:15.bootpd + + + + + 04 Modified: head/share/xml/notices.xml ============================================================================== --- head/share/xml/notices.xml Wed Dec 19 17:15:53 2018 (r52699) +++ head/share/xml/notices.xml Wed Dec 19 19:51:24 2018 (r52700) @@ -8,6 +8,27 @@ 2018 + 12 + + + 19 + + + FreeBSD-EN-18:18.zfs + + + + FreeBSD-EN-18:17.vm + + + + FreeBSD-EN-18:16.ptrace + + + + + + 11 From owner-svn-doc-all@freebsd.org Thu Dec 20 06:29:25 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C7D4F1337D21; Thu, 20 Dec 2018 06:29:24 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 7862E8F451; Thu, 20 Dec 2018 06:29:24 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 6A7FF21AFD; Thu, 20 Dec 2018 06:29:24 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBK6TOvf096152; Thu, 20 Dec 2018 06:29:24 GMT (envelope-from rcyu@FreeBSD.org) Received: (from rcyu@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBK6TJfv096149; Thu, 20 Dec 2018 06:29:19 GMT (envelope-from rcyu@FreeBSD.org) Message-Id: <201812200629.wBK6TJfv096149@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rcyu set sender to rcyu@FreeBSD.org using -f From: Ruey-Cherng Yu Date: Thu, 20 Dec 2018 06:29:19 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52701 - head/zh_TW.UTF-8/books/handbook X-SVN-Group: doc-head X-SVN-Commit-Author: rcyu X-SVN-Commit-Paths: head/zh_TW.UTF-8/books/handbook X-SVN-Commit-Revision: 52701 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 7862E8F451 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.96 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; NEURAL_HAM_SHORT(-0.97)[-0.967,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US]; NEURAL_HAM_LONG(-1.00)[-0.998,0] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2018 06:29:25 -0000 Author: rcyu Date: Thu Dec 20 06:29:19 2018 New Revision: 52701 URL: https://svnweb.freebsd.org/changeset/doc/52701 Log: - fix typo. Reported by: lwhsu Modified: head/zh_TW.UTF-8/books/handbook/book.xml head/zh_TW.UTF-8/books/handbook/zh_TW.po Modified: head/zh_TW.UTF-8/books/handbook/book.xml ============================================================================== --- head/zh_TW.UTF-8/books/handbook/book.xml Wed Dec 19 19:51:24 2018 (r52700) +++ head/zh_TW.UTF-8/books/handbook/book.xml Thu Dec 20 06:29:19 2018 (r52701) @@ -16,7 +16,8 @@ $FreeBSD$ --> - + + @@ -44,7 +45,9 @@ + + @@ -97,6 +100,7 @@ + @@ -165,9 +169,11 @@ + + @@ -175,6 +181,7 @@ + @@ -230,6 +237,7 @@ + @@ -238,6 +246,7 @@ + @@ -263,8 +272,10 @@ + + @@ -272,6 +283,7 @@ + @@ -294,6 +306,7 @@ + @@ -311,6 +324,7 @@ + @@ -343,7 +357,9 @@ + + @@ -426,6 +442,7 @@ + @@ -437,6 +454,7 @@ + @@ -452,6 +470,7 @@ + @@ -471,6 +490,7 @@ + @@ -484,6 +504,7 @@ + @@ -506,6 +527,7 @@ + @@ -514,6 +536,7 @@ + @@ -538,6 +561,7 @@ + @@ -560,6 +584,8 @@ + + @@ -595,6 +621,7 @@ + @@ -670,6 +697,7 @@ 2015 2016 2017 + 2018 The FreeBSD Documentation Project @@ -747,7 +775,13 @@ - 歡迎使用 FreeBSD！ 本使用手冊涵蓋範圍包括了 FreeBSD 11.1-RELEASE, FreeBSD 11.0-RELEASE 與 FreeBSD 10.4-RELEASE 的安裝與平日操作的說明。 這份使用手冊是很多人的集體創作，而且仍然『持續不斷』的進行中，因此部份章節可能尚未仍未完成，如果您有興趣協助本計畫的話，請寄電子郵件至 FreeBSD 文件專案郵遞論壇。 + Welcome to FreeBSD! This handbook covers the installation + and day to day use of + FreeBSD 12.0-RELEASE and + FreeBSD 11.2-RELEASE. This book is + the result of ongoing work by many individuals. Some sections + might be outdated. Those interested in helping to update and + expand this document should send email to the FreeBSD documentation project mailing list. 在 FreeBSD 網站 可以找到本文件的最新版本，舊版文件可從 https://docs.FreeBSD.org/doc/ 取得。本文件也提供各種格式與不同壓縮方式的版本可自 FreeBSD FTP 伺服器 或是其中一個 鏡像網站 下載。 列印出來的實體書面資料可在 FreeBSD 商城 購買。 此外，您可在 搜尋頁面 中搜尋本文件或其他文件的資料。 @@ -1369,112 +1403,124 @@ 4.4BSD-Lite - FreeBSD 是一個從 4.4BSD-Lite 衍生出而能在以 Intel (x86 與 Itanium), AMD64, ARM, Sun UltraSPARC 為基礎的電腦上執行的作業系統。同時，移植到其他平台的工作也在進行中。 對於本計劃歷史的介紹，請看 FreeBSD 歷史， 對於 FreeBSD 的最新版本介紹，請看 最新的發行版。 若打算對於 FreeBSD 計劃有所貢獻的話 (程式碼、硬體、經費)， 請看 如何對 FreeBSD 貢獻。 + FreeBSD is an Open Source, standards-compliant Unix-like + operating system for x86 (both 32 and 64 bit), ARM, AArch64, + RISC-V, MIPS, POWER, PowerPC, and Sun UltraSPARC + computers. It provides all the features that are + nowadays taken for granted, such as preemptive multitasking, + memory protection, virtual memory, multi-user facilities, SMP + support, all the Open Source development tools for different + languages and frameworks, and desktop features centered around + X Window System, KDE, or GNOME. Its particular strengths + are: - - FreeBSD 能做什麼？ + + + Liberal Open Source license, + which grants you rights to freely modify and extend + its source code and incorporate it in both Open Source + projects and closed products without imposing + restrictions typical to copyleft licenses, as well + as avoiding potential license incompatibility + problems. + - FreeBSD 提供給你許多先進功能。這些功能包括： + + Strong TCP/IP networking + TCP/IP + networking - FreeBSD + implements industry standard protocols with ever + increasing performance and scalability. This makes + it a good match in both server, and routing/firewalling + roles - and indeed many companies and vendors use it + precisely for that purpose. + - - - 動態優先權調整的 先佔式多工 - preemptive multitasking - 能夠確保，即使在系統負擔很重的情況下，程式執行平順並且應用程式與使用者公平地共享資源。 - + + Fully integrated OpenZFS support, + including root-on-ZFS, ZFS Boot Environments, fault + management, administrative delegation, support for jails, + FreeBSD specific documentation, and system installer + support. + - - 多人共用 - multi-user facilities - 代表著許多人可以同時使用一個 FreeBSD 系統來處理各自的事務。 系統的硬體周邊 (如印表機及磁帶機) 也可以讓所有的使用者適當地分享。 也可以針對各別使用者或一群使用者的系統資源，予以設限，以保護系統不致被過度使用。 - + + Extensive security features, + from the Mandatory Access Control framework to Capsicum + capability and sandbox mechanisms. + - - 強大的 TCP/IP 網路 - TCP/IP networking - 功能可支援許多業界標準，如：SCTP、DHCP、NFS、NIS、PPP、SLIP、IPSec、IPv6 的支援，也就是說 FreeBSD 可以容易地跟其他作業系統透過網路共同運作，或是當作企業的伺服器用途 ，例如提供遠端檔案共享 (NFS) 及電子郵件等服務， 或是讓您的企業連上網際網路並提供 WWW、FTP、路由及防火牆 (安全性) 等必備服務。 - + + Over 30 thousand prebuilt + packages for all supported architectures, + and the Ports Collection which makes it easy to build your + own, customized ones. + - - 記憶體保護 能確保程式 (或使用者) 不會互相干擾，即使任何程式有不正常的運作，都不會影響其他程式的執行。 - + + Documentation - in addition + to Handbook and books from different authors that cover + topics ranging from system administration to kernel + internals, there are also the man1 pages, not only + for userspace daemons, utilities, and configuration files, + but also for kernel driver APIs (section 9) and individual + drivers (section 4). + - - 業界標準的 X Window 系統 - X Window System - (X11R7) 可以在常見的便宜 VGA 顯示卡/螢幕， 提供了圖形化的使用者介面 (GUI)，並且包括了完整的原始程式碼。 - + + Simple and consistent repository structure + and build system - FreeBSD uses a single + repository for all of its components, both kernel and + userspace. This, along with an unified and easy to + customize build system and a well thought out development + process makes it easy to integrate FreeBSD with build + infrastructure for your own product. + - - - binary compatibility - Linux - - binary compatibility - SCO - - binary compatibility - SVR4 - - binary compatibility - BSD/OS - - binary compatibility - NetBSD - Binary 相容性 可執行許多其他作業系統 (如： Linux、SCO、SVR4、BSDI 和 NetBSD) 的可執行檔。 - + + Staying true to Unix philosophy, + preferring composability instead of monolithic all + in one daemons with hardcoded behavior. + - - 數以萬計的 立即可以執行 的應用程式，這些都可透過 FreeBSD 的 Port 及 套件 管理機制來取得。 不再需要費心到網路上到處搜尋所需要的軟體。 - + + binary compatibility + Linux + Binary compatibility with Linux, + which makes it possible to run many Linux binaries without + the need for virtualisation. + + - - 在網路上有數以千計 易於移植 的應用程式。FreeBSD 的原始程式碼與許多常見的商業版 UNIX 系統都相容， 所以大部分的程式都只需要很少的修改 (或根本不用修改) ，就可以編譯執行。 - - - 依需要換頁的 虛擬記憶體 - virtual memory - 及 合併式 VM/buffer 快取 設計，有效的滿足了需使用大量記憶體的程式，同時也能維持與其他使用者的互動。 - + FreeBSD is based on the 4.4BSD-Lite + 4.4BSD-Lite + release from Computer + Systems Research Group (CSRG) + Computer Systems Research Group (CSRG) + at the University of California at Berkeley, and + carries on the distinguished tradition of BSD systems + development. In addition to the fine work provided by CSRG, + the FreeBSD Project has put in many thousands of man-hours + into extending the functionality and fine-tuning the system + for maximum performance and reliability + in real-life load situations. FreeBSD offers performance and + reliability on par with other Open Source and commercial + offerings, combined with cutting-edge features not available + anywhere else. - - 支援 CPU 的對稱多工處理 (SMP) - Symmetric Multi-Processing - (SMP) - ：可以支援多 CPU 的電腦系統。 - + + FreeBSD 能做什麼？ - - - compilers - C - - compilers - C++ - 完全相容的 C、C++ 以及 Fortran 的環境和其他開發工具。 以及其他許多可供進階研發的程式語言也收集在 Port 和套件集。 - + The applications to which FreeBSD can be put are truly + limited only by your own imagination. From software + development to factory automation, inventory control to + azimuth correction of remote satellite antennae; if it can be + done with a commercial UNIX product then it is more than + likely that you can do it with FreeBSD too! FreeBSD also benefits + significantly from literally thousands of high quality + applications developed by research centers and universities + around the world, often available at little to no cost. - - 整個系統都有 原始程式碼 - source code - ， 這讓你對作業環境擁有最完全的掌握度。 既然能擁有完全開放的系統，何苦被特定封閉軟體所約束，任廠商擺佈呢？ - - - - 廣泛且豐富的 線上文件。 - - - - 當然囉，還不止如此！ - - - - FreeBSD 系統乃是基於美國加州大學柏克萊分校的電腦系統研究組 (Computer Systems Research Group 也就是 CSRG) 所發行的 4.4BSD-Lite - 4.4BSD-Lite - ，以及基於 BSD 系統開發的優良傳統。 除了由 CSRG 所提供的高品質的成果， 為了提供可處理真正具負荷的工作， FreeBSD 計劃也投入了數千小時以上的細部調整， 以能獲得最好的執行效率以及系統的穩定度。 正當許多商業上的巨人正努力地希望能提供效能及穩定時，FreeBSD 已經具備這樣的特質，並具有其他地方沒有的尖端功能。 - - FreeBSD 的運用範圍無限，其實完全限制在你的想像力上。 從軟體的開發到工廠自動化，或是人造衛星上面的天線的方位角度的遠端控制； 這些功能若可以用商用的 UNIX 產品來達成， 那麼極有可能使用 FreeBSD 也能辦到！ FreeBSD 也受益於來自於全球各研究中心及大學所開發的數千個高品質的軟體 ，這些通常只需要花費很少的費用或根本就是免費的。 當然也有商業軟體，而且出現的數目是與日俱增。 - 由於每個人都可以取得 FreeBSD 的原始程式碼， 這個系統可以被量身訂做成能執行任何原本完全無法想像的功能或計劃， 而對於從各廠商取得的作業系統通常沒有辦法這樣地被修改。 以下提供一些人們使用 FreeBSD 的例子： @@ -1483,9 +1529,7 @@ - 全球資訊網伺服器 - web servers - (標準的或更安全的 [SSL]) + Web servers @@ -1507,12 +1551,15 @@ - + + electronic mail email - + + email - 電子郵件伺服器 + + Email servers @@ -1568,6 +1615,19 @@ 使用者 執行 FreeBSD 的大型站台 + FreeBSD has been known for its web serving capabilities - + sites that run on FreeBSD include + Hacker News, + Netcraft, + NetEase, + Netflix, + Sina, + Sony Japan, + Rambler, + Yahoo!, and + Yandex. + + FreeBSD 先進的功能、成熟的安全性、可預測的發佈週期以及自由的授權條款，讓 FreeBSD 已經被用來做為建立許多商業、開源應用、裝置以及產品的平台，有許多世界上最大的資訊公司使用 FreeBSD： @@ -1597,25 +1657,23 @@ + Dell EMC Isilon + + Isilon + - Isilon's enterprise storage appliances + are based on FreeBSD. The extremely liberal FreeBSD license + allowed Isilon to integrate their intellectual property + throughout the kernel and focus on building their product + instead of an operating system. + + + Dell KACE Dell KACE - KACE 系統管理設備中運作了 FreeBSD，因為 FreeBSD 的可靠性、可擴展性以及支持其持續發展的社群。 - Experts Exchange - Experts Exchange - - 所有面對大眾的 Web 伺服器皆由 FreeBSD 驅動，且他們大量使用 Jail 來隔離開發與測試環境，減少了虛擬化的額外開銷。 - - - - Isilon - Isilon - - Isilon 的企業存儲設備以 FreeBSD 為基礎。非常自由的 FreeBSD 授權條款讓 Isilon 整合了它們的智慧財產到整個核心，並專注打造自己的產品，而不是一個作業系統。 - - - - iXsystems iXsystems - 統合存儲 (Unified Storage) 設備的 TrueNAS 產品線是以 FreeBSD 為基礎。除了該公司自己的商業產品外，iXsystems 也管理著 TrueOS 和 FreeNAS 兩個開源計劃的開發。 @@ -1769,92 +1827,9 @@ - FreeBSD 也同時被用來驅動一些網際網路上的大型網站，包括： + Wikipedia also maintains a list + of products based on FreeBSD. - - - Yahoo! - - Yahoo! - - - - - Yandex - - Yandex - - - - - Rambler - - Rambler - - - - - Sina - - Sina - - - - - Pair - Networks - - Pair Networks - - - - - Sony - Japan - - Sony Japan - - - - - Netcraft - - Netcraft - - - - - Netflix - - Netflix - - - - - NetEase - - NetEase - - - - - Weathernews - - Weathernews - - - - - TELEHOUSE - America - - TELEHOUSE America - - - - - - 還有許多的應用。維基百科也維護了一份 以 FreeBSD 為基礎的產品。 @@ -1989,9 +1964,20 @@ FreeBSD 核心團隊 - 如果把 FreeBSD 看成是一家公司的話， FreeBSD 核心團隊 (FreeBSD core team) + The FreeBSD core team + core team - 就相當於董事會。 核心團隊的主要職責在於確保此計劃有良好的架構，以朝著正確的方向發展。 此外，邀請熱血且負責的軟體開發者加入提交者的行列， 以在若干成員離去時得以補充新血。 目前的核心團隊是在 2014 年 7 月從提交者候選人之中選出來的，這個選舉每兩年會舉辦一次。 + would be equivalent to the board of + directors if the FreeBSD Project were a company. The + primary task of the core team is to make sure the + project, as a whole, is in good shape and is heading in + the right directions. Inviting dedicated and + responsible developers to join our group of committers + is one of the functions of the core team, as is the + recruitment of new core team members as others move on. + The current core team was elected from a pool of + committer candidates in July 2018. Elections are held + every 2 years. 如同多數的開發者，核心團隊大部分成員加入 FreeBSD 開發都是志工性質而已， 並未從本計劃中獲得任何薪酬，所以這只是一個 承諾 不應該被誤解為 保證支援 才對。 前面用 董事會 來舉例可能不是很恰當，或許我們應該說： 他們是一群自願放棄原本的優渥生活、個人其他領域成就， 而選擇投入 FreeBSD 開發的熱血有為者才對！ @@ -2028,7 +2014,15 @@ 其他文件 - 所有最近的 FreeBSD 版本在安裝程式 (不是 sysinstall8 就是 bsdinstall8) 都有提供一個選項在初始系統安裝時可安裝額外的說明文件到 /usr/local/share/doc/freebsd。說明文件也可在往後使用套件安裝，詳細說明於 。您可以使用任何支援 HTML 的瀏覽器進入下列 URL 檢視已安裝在本機的操作手冊： + All supported FreeBSD versions provide an option in the + installer to + install additional documentation under + /usr/local/share/doc/freebsd during the + initial system setup. Documentation may also be installed at + any later time using packages as described in + . You may view the + locally installed manuals with any HTML capable browser using + the following URLs: @@ -2125,8 +2119,54 @@ 安裝 - 自從 FreeBSD 9.0-RELEASE 開始，FreeBSD 提供一個易用，文字介面的安裝程式 bsdinstall。 本章描述如何用 bsdinstall 來安裝 FreeBSD。 + There are several different ways of getting FreeBSD to run, + depending on the environment. Those are: + + + Virtual Machine images, to download and import on a + virtual environment of choice. These can be downloaded from + the Download + FreeBSD page. There are images for KVM + (qcow2), VMWare (vmdk), + Hyper-V (vhd), and raw device images that are + universally supported. These are not installation images, + but rather the preconfigured (already + installed) instances, ready to run and perform + post-installation tasks. + + + + Virtual Machine images available at Amazon's AWS + Marketplace, Microsoft + Azure Marketplace, and Google + Cloud Platform, to run on their respective hosting + services. For more information on deploying FreeBSD on Azure + please consult the relevant chapter in the Azure + Documentation. + + + + SD card images, for embedded systems such as Raspberry + Pi or BeagleBone Black. These can be downloaded from the + Download + FreeBSD page. These files must be uncompressed and + written as a raw image to an SD card, from which the board + will then boot. + + + + Installation images, to install FreeBSD on + a hard drive for the usual desktop, laptop, or server + systems. + + + + The rest of this chapter describes the fourth case, + explaining how to install FreeBSD using the text-based + installation program named + bsdinstall. + 一般來說，本章所寫的安裝說明是針對 i386 和 AMD64 架構。如果可以用於其他平台，將會列表說明。 安裝程式和本章所敘述的內容可能會有些微差異，所以請將本章視為通用的指引，而不是完全照著來做。 @@ -2209,15 +2249,6 @@ - pc98 - - NEC PC-9801/9821 系列幾乎所有 i386 相容處理器包括 80486、Pentium、 Pentium Pro 和 Pentium II 都有支援。 所有 AMD, Cyrix, IBM, 及 IDT 的i386 相容處理器都有支援。 相容 NEC PC-9801 的 EPSON PC-386/486/586 系列都有支援。 NEC FC-9801/9821 及 NEC SV-98 系列也有支援。 - - 不支援高解析度模式。NEC PC-98XA/XL/RL/XL^2 和 NEC PC-H98 系列只支援正常 (PC-9801 相容) 模式。 FreeBSD 對稱多處理器 SMP 相關功能並不支援。 PC-H98， SV-H98 和FC-H98 新延伸標準架構 (NESA) 匯流排不支援。 - - - - powerpc 所有內建 USB 的 New World ROM Apple Mac 系統都有支援。 SMP 在多 CPU 的機器都有支援。 @@ -2306,7 +2337,15 @@ 檢查 FreeBSD 勘誤表 - 儘管 FreeBSD 計劃努力確保每個 FreeBSD 發行版能夠儘可能地穩定，但錯誤偶爾還是會悄悄出現，並有極小的可能會發生影響安裝流程的錯誤，當這些問題被發現並修正後，會被紀錄在 FreeBSD 網站的 FreeBSD 勘誤表 (https://www.freebsd.org/releases/11.1R/errata.html)。 安裝前先檢查勘誤表，以確保沒有會影響到安裝的問題。 + Although the FreeBSD Project strives to ensure that + each release of FreeBSD is as stable as possible, bugs + occasionally creep into the process. On very rare occasions + those bugs affect the installation process. As these + problems are discovered and fixed, they are noted in the + FreeBSD Errata (https://www.freebsd.org/releases/12.0R/errata.html) + on the FreeBSD web site. Check the errata before installing to + make sure that there are no problems that might affect the + installation. 所有發行版的資訊和勘誤表可以在 FreeBSD 網站的發行資訊找到 (https://www.freebsd.org/releases/index.html)。 @@ -2341,7 +2380,7 @@ -memstick.img：這個檔案含有所有安裝 FreeBSD 所需的檔案，包含原始碼及 Port 套件集。這個檔案應依據以下操作指示寫入到 USB 隨身碟使用。 - + -mini-memstick.img：類似 -bootonly.iso，但不含安裝檔 (可依所要下載)，安裝時需要網際網路連線，可依 的說明將此檔案寫入至 USB 隨身碟。 @@ -4895,11 +4934,6 @@ root 5211 0.0 0.2 3620 1724 2 I+ 2:09AM - /etc/namedb/ - named8 設定檔。 - - - /etc/periodic/ 每日、每週、每月透過 cron8，執行的定期排程 Script，詳情請參閱 periodic8。 @@ -6108,7 +6142,10 @@ Swap: 2048M Total, 2048M Free 要持續追蹤 Port 的更新可以訂閱 FreeBSD Port 郵遞論壇 與 FreeBSD Port 問題郵遞論壇。 - 在安裝任何應用程式之前，請先查看 是否有與該應用程式相關的安全性問題或輸入 pkg audit -F 來檢查所有已安裝的應用程式是否有已知的漏洞。 + Before installing any application, check + for security issues related to the application or type + pkg audit -F to check all installed + applications for known vulnerabilities. 本章接下來的部份將說明如何在 FreeBSD 使用 Binary 套件及 Port 套件安裝與管理第三方軟體。 @@ -6240,7 +6277,12 @@ Info: Lists information about open files (similar to FreeBSD 內建啟動 (Bootstrap) 工具可用來下載並安裝 pkg 及其操作手冊。這個工具是設計在 FreeBSD 版本 10.X 之後使用。 - 不是所有 FreeBSD 版本及架構支援此啟動程序，目前支援的清單列於 ，對不支援的版本，必須改透過 Port 套件集或者 Binary 套件來安裝 pkg。 + Not all FreeBSD versions and architectures + support this bootstrap process. The current list is at + . + For other cases, + pkg must instead be installed + from the Ports Collection or as a binary package. @@ -6550,7 +6592,18 @@ Deinstalling ca_root_nss-3.15.1_1... done 下面我們會介紹如何使用 Port 套件集來安裝、移除軟體的基本用法。 make 可用的目標及環境變數詳細說明可參閱 ports7。 - 在編譯任何 Port 套件前，請先確認已經如前章節所敘述之方法更新 Port 套件集。安裝任何第三方軟體皆可能會導致安全性漏洞，建議在安裝前先閱讀 了解 Port 已知的安全性問題。或者在每次安裝新 Port 前執行 pkg audit -F。此指令可以設定在每日系統安全性檢查時自動完成安全性稽查以及更新漏洞資料庫。要取得更多資訊，請參考 pkg-audit8 及 periodic8。 + Before compiling any port, be sure to update the Ports + Collection as described in the previous section. Since + the installation of any third-party software can introduce + security vulnerabilities, it is recommended to first check + + for known security issues related to the port. Alternately, + run pkg audit -F before installing a new + port. This command can be configured to automatically + perform a security audit and an update of the vulnerability + database during the daily security system check. For more + information, refer to pkg-audit8 and + periodic8. 使用 Port 套件集會假設您擁有可正常連線的網路，同時也會需要超級使用者的權限。 @@ -6692,7 +6745,7 @@ The deinstallation will free 229 kB - 升級與管理 Port 的工具 + Tools to Upgrade and Manage Ports ports upgrading-tools @@ -7266,7 +7319,40 @@ ports-mgmt/pkg 顯示卡 + Because of changes made in recent versions of FreeBSD, it + is now possible to use graphics drivers provided by the Ports + framework or as packages. As such, users can use one of the + following drivers available from + graphics/drm-kmod. + + + Intel KMS driver + Radeon KMS driver + AMD KMS driver + + + 2D and 3D acceleration is supported on most + Intel KMS driver graphics cards provided by Intel. + + Driver name: i915kms + + 2D and 3D acceleration is supported on most older + Radeon KMS driver graphics cards provided by AMD. + + Driver name: radeonkms + + 2D and 3D acceleration is supported on most newer + AMD KMS driver graphics cards provided by AMD. + + Driver name: amdgpu + + For reference, please see + or + for a list of supported GPUs. + + + Intel @@ -7836,7 +7922,7 @@ EndSection Seth Kingsley - Contributed by + Originally contributed by @@ -7855,7 +7941,14 @@ EndSection 更改關 (off) 為開 (on) 然後儲存編輯。在此項目中的 ttyv8 代表 XDM 會在第 9 個虛擬終端機執行。 - XDM 的設定目錄位於 /usr/local/lib/X11/xdm。此目錄中包含數個可用來更改 XDM 行為與外觀的檔案以及在 XDM 執行時用來設定桌面的一些 Script 及程式， 摘要了每個檔案的功能。這些檔案正確的語法與用法在 xdm1 有說明。 + The XDM configuration directory + is located in /usr/local/etc/X11/xdm. + This directory contains several files used to change the + behavior and appearance of XDM, as + well as a few scripts and programs used to set up the desktop + when XDM is running. summarizes the function of each + of these files. The exact syntax and usage of these files is + described in xdm1. XDM 設定檔 @@ -7886,7 +7979,10 @@ EndSection Xsession - 預設的登入階段 Script，使用者登入之後由 XDM 執行。一般每一位使用者都會有自訂的階段 Script 在 ~/.xsession 來覆蓋此 Script 的設定。 + Default session script for logins which is run by + XDM after a user has logged + in. This points to a customized session + script in ~/.xsession. @@ -7918,13 +8014,20 @@ EndSection 預設只有同系統的使用者可以使用 XDM 登入。要開啟讓其他系統的使用者可連線到顯示伺服器，需編輯存取控制規則及開啟連線傾聽程式。 - 要設定 XDM 傾聽作何遠端的連線，在 /usr/local/lib/X11/xdm/xdm-config 中的 DisplayManager.requestPort 行前加上 ! 來註解該行： + To configure XDM to listen for + any remote connection, comment out the + DisplayManager.requestPort line in + /usr/local/etc/X11/xdm/xdm-config by + putting a ! in front of it: ! SECURITY: do not listen for XDMCP or Chooser requests ! Comment out this line if you want to manage X terminals with xdm DisplayManager.requestPort: 0 - 儲存編輯並重新啟動 XDM，要限制遠端存取，請看 /usr/local/lib/X11/xdm/Xaccess 中的範例項目，並參考 xdm1 取得進一步資訊。 + Save the edits and restart XDM. + To restrict remote access, look at the example entries in + /usr/local/etc/X11/xdm/Xaccess and refer + to xdm1 for further information. @@ -7986,9 +8089,7 @@ hald_enable="YES" 第三種方法是使用 XDM 做為顯示管理程式，在這個方法需要建立一個可執行的 ~/.xsession： - % echo "#!/bin/sh" > ~/.xsession -% echo "exec /usr/local/bin/gnome-session" >> ~/.xsession -% chmod +x ~/.xsession + % echo "exec /usr/local/bin/gnome-session" > ~/.xsession @@ -8031,9 +8132,7 @@ hald_enable="YES" 第三種啟動 KDE 的方式是透過 XDM，要使用這個方法需要建立一個可執行的 ~/.xsession 如下： - % echo "#!/bin/sh" > ~/.xsession -% echo "exec /usr/local/bin/startkde" >> ~/.xsession -% chmod +x ~/.xsession + % echo "exec /usr/local/bin/startkde" > ~/.xsession 啟動 KDE 之後，請參考內建的說明系統來取得更多有關如何使用各種選單及應用程式的資訊。 @@ -8052,15 +8151,28 @@ hald_enable="YES" # cd /usr/ports/x11-wm/xfce4 # make install clean - 不像 GNOME 或 KDE，Xfce 並沒有自己的登入管理程式，要由指令列啟動 Xfce 需輸入 startx，在這之前需先加入其項目到 ~/.xinitrc： + Xfce uses + D-Bus for a message bus. This + application is automatically installed as dependency of + Xfce. Enable it in + /etc/rc.conf so it will be started when + the system boots: - % echo "exec /usr/local/bin/startxfce4 --with-ck-launch" > ~/.xinitrc + dbus_enable="YES" + Unlike GNOME or + KDE, + Xfce does not provide its own login + manager. In order to start Xfce + from the command line by typing startx, + first create ~/.xinitrc with this + command: + + % echo ". /usr/local/etc/xdg/xfce4/xinitrc" > ~/.xinitrc + 另一種方式是使用 XDM，要設定這個方式需建立一個可執行的 ~/.xsession： - % echo "#!/bin/sh" > ~/.xsession -% echo "exec /usr/local/bin/startxfce4 --with-ck-launch" >> ~/.xsession -% chmod +x ~/.xsession + % echo ". /usr/local/etc/xdg/xfce4/xinitrc" > ~/.xsession @@ -8548,7 +8660,12 @@ EndSection Firefox - Firefox 是一套已完整植到 FreeBSD 的開放源始碼瀏覽器，它具備符合 HTML 標準的顯示引擎、頁籤瀏覽、彈出視窗封鎖、擴充套件、強化安全性及其他更多功能。Firefox 的基礎使用了 Mozilla 的程式庫。 + Firefox is an open source + browser that features a + standards-compliant HTML display engine, tabbed browsing, + popup blocking, extensions, improved security, and more. + Firefox is based on the + Mozilla codebase. 要安裝最新釋出版本的 Firefox 套件可輸入： @@ -8564,81 +8681,6 @@ EndSection # cd /usr/ports/www/firefox # make install clean - - - Firefox 與 <trademark>Java</trademark> 附加元件 - - Firefox 的安裝並不包含 Java 支援，雖然如此 java/icedtea-web 提供了免費的網頁瀏覽器附加元件來執行 Java applet，此附加元件可以用 Binary 套件安裝： *** DIFF OUTPUT TRUNCATED AT 1000 LINES *** From owner-svn-doc-all@freebsd.org Thu Dec 20 08:01:45 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B5DB7133AD33; Thu, 20 Dec 2018 08:01:45 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5A68E6B891; Thu, 20 Dec 2018 08:01:45 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4D25F22BEB; Thu, 20 Dec 2018 08:01:45 +0000 (UTC) (envelope-from rcyu@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBK81jOn045435; Thu, 20 Dec 2018 08:01:45 GMT (envelope-from rcyu@FreeBSD.org) Received: (from rcyu@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBK81jGs045434; Thu, 20 Dec 2018 08:01:45 GMT (envelope-from rcyu@FreeBSD.org) Message-Id: <201812200801.wBK81jGs045434@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rcyu set sender to rcyu@FreeBSD.org using -f From: Ruey-Cherng Yu Date: Thu, 20 Dec 2018 08:01:45 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52702 - head/zh_TW.UTF-8/share/xml X-SVN-Group: doc-head X-SVN-Commit-Author: rcyu X-SVN-Commit-Paths: head/zh_TW.UTF-8/share/xml X-SVN-Commit-Revision: 52702 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 5A68E6B891 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.95 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; NEURAL_HAM_LONG(-1.00)[-0.998,0]; NEURAL_HAM_SHORT(-0.95)[-0.950,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2018 08:01:45 -0000 Author: rcyu Date: Thu Dec 20 08:01:44 2018 New Revision: 52702 URL: https://svnweb.freebsd.org/changeset/doc/52702 Log: - Update entities to reflect 12.0 is now available. Merge the following from the English version : r52445 ->r52666 Modified: head/zh_TW.UTF-8/share/xml/navibar.l10n.ent Modified: head/zh_TW.UTF-8/share/xml/navibar.l10n.ent ============================================================================== --- head/zh_TW.UTF-8/share/xml/navibar.l10n.ent Thu Dec 20 06:29:19 2018 (r52701) +++ head/zh_TW.UTF-8/share/xml/navibar.l10n.ent Thu Dec 20 08:01:44 2018 (r52702) @@ -2,7 +2,7 @@
    • Production Release:
      &rel.current;
      • - Production Release:
      &rel1.current; + Production Release:
      &rel2.current; ?> -
    • 即將發佈:
      - &betarel2.current;
    • 開發快照 From owner-svn-doc-all@freebsd.org Thu Dec 20 16:21:53 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 55B28134C085; Thu, 20 Dec 2018 16:21:53 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id F0BAE8767E; Thu, 20 Dec 2018 16:21:52 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id E216327F; Thu, 20 Dec 2018 16:21:52 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBKGLqTQ012369; Thu, 20 Dec 2018 16:21:52 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBKGLqBC012368; Thu, 20 Dec 2018 16:21:52 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201812201621.wBKGLqBC012368@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI Date: Thu, 20 Dec 2018 16:21:52 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52703 - head/ja_JP.eucJP/htdocs X-SVN-Group: doc-head X-SVN-Commit-Author: ryusuke X-SVN-Commit-Paths: head/ja_JP.eucJP/htdocs X-SVN-Commit-Revision: 52703 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: F0BAE8767E X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.97 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; NEURAL_HAM_SHORT(-0.97)[-0.972,0]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2018 16:21:53 -0000 Author: ryusuke Date: Thu Dec 20 16:21:52 2018 New Revision: 52703 URL: https://svnweb.freebsd.org/changeset/doc/52703 Log: - Merge the following from the English version: r52445 -> r52666 head/ja_JP.eucJP/htdocs/index.xsl Modified: head/ja_JP.eucJP/htdocs/index.xsl Modified: head/ja_JP.eucJP/htdocs/index.xsl ============================================================================== --- head/ja_JP.eucJP/htdocs/index.xsl Thu Dec 20 08:01:44 2018 (r52702) +++ head/ja_JP.eucJP/htdocs/index.xsl Thu Dec 20 16:21:52 2018 (r52703) @@ -5,7 +5,7 @@ ]> - + ݡȤƤ꡼
      • ץ: &rel.current; - &rel.current;, &rel1.current;, + href="&u.rel1.announce;">&rel1.current; + &rel2.current;
        • ?> From owner-svn-doc-all@freebsd.org Thu Dec 20 21:54:06 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 3E9DA1355577; Thu, 20 Dec 2018 21:54:06 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E58AF6FA71; Thu, 20 Dec 2018 21:54:05 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id D91DD3EDC; Thu, 20 Dec 2018 21:54:05 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBKLs5x2089724; Thu, 20 Dec 2018 21:54:05 GMT (envelope-from bcr@FreeBSD.org) Received: (from bcr@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBKLs59E089723; Thu, 20 Dec 2018 21:54:05 GMT (envelope-from bcr@FreeBSD.org) Message-Id: <201812202154.wBKLs59E089723@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bcr set sender to bcr@FreeBSD.org using -f From: Benedict Reuschling Date: Thu, 20 Dec 2018 21:54:05 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52704 - head/en_US.ISO8859-1/books/handbook/network-servers X-SVN-Group: doc-head X-SVN-Commit-Author: bcr X-SVN-Commit-Paths: head/en_US.ISO8859-1/books/handbook/network-servers X-SVN-Commit-Revision: 52704 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: E58AF6FA71 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.96 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; NEURAL_HAM_SHORT(-0.96)[-0.963,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 20 Dec 2018 21:54:06 -0000 Author: bcr Date: Thu Dec 20 21:54:05 2018 New Revision: 52704 URL: https://svnweb.freebsd.org/changeset/doc/52704 Log: Rewrite the LDAP server section of the handbook. The Lightweight Directory Access Protocol (LDAP) section of the handbook contains several errors (typos, wrong steps) and was in need of updates to reflect current versions of the software. Rocky Hotas provided a patch for review that fixes many of those bugs and extends the instructions in the first part. The second part received a complete rewrite, providing working example configuration files and steps to get the server running. I made only a few cleanups and corrections to the patch to fit our documentation guidelines. Most of the work was done by the submitter, big thanks for his work and patience! PR: 219142 Submitted by: rockyhotas@post.com Reviewed by: remko, wollman, wblock, myself, others Approved by: bcr Differential Revision: https://reviews.freebsd.org/D10600 Modified: head/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml Modified: head/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml Thu Dec 20 16:21:52 2018 (r52703) +++ head/en_US.ISO8859-1/books/handbook/network-servers/chapter.xml Thu Dec 20 21:54:05 2018 (r52704) @@ -1000,7 +1000,7 @@ Exports list on foobar: The &man.autofs.5; map format is the same as in other operating systems. Information about this format from other - sources can be useful, like the Mac OS X document. @@ -2248,9 +2248,18 @@ TWO (,hotel,test-domain) Tom Rhodes - Written by + Originally contributed by + + + + Rocky + Hotas + + Updates by + + LDAP @@ -2340,32 +2349,35 @@ result: 0 Success LDAP Server &os; does not provide a built-in LDAP - server. Begin the configuration by installing the net/openldap24-server package or port. - Since the port has many configurable options, it is - recommended that the default options are reviewed to see if - the package is sufficient, and to instead compile the port if - any options should be changed. In most cases, the defaults - are fine. However, if SQL support is needed, this option must - be enabled and the port compiled using the instructions in - . + server. Begin the configuration by installing net/openldap-server package or + port: - Next, create the directories to hold the data and to store - the certificates: + &prompt.root; pkg install openldap-server - &prompt.root; mkdir /var/db/openldap-data -&prompt.root; mkdir /usr/local/etc/openldap/private + There is a large set of default options enabled in the + + package. Review them by running + pkg info openldap-server. If they are not + sufficient (for example if SQL support is needed), please + consider recompiling the port using the appropriate framework. - Copy over the database configuration file: + The installation creates the directory + /var/db/openldap-data to hold the data. + The directory to store the certificates must be + created: - &prompt.root; cp /usr/local/etc/openldap/DB_CONFIG.example /var/db/openldap-data/DB_CONFIG + &prompt.root; mkdir /usr/local/etc/openldap/private - The next phase is to configure the certificate authority. + The next phase is to configure the Certificate Authority. The following commands must be executed from /usr/local/etc/openldap/private. This is important as the file permissions need to be restrictive and - users should not have access to these files. To create the - certificate authority, start with this command and follow the + users should not have access to these files. More detailed + information about certificates and their parameters can be + found in . To create the + Certificate Authority, start with this command and follow the prompts: &prompt.root; openssl req -days 365 -nodes -new -x509 -keyout ca.key -out ../ca.crt @@ -2375,7 +2387,7 @@ result: 0 Success Common Name. This entry must be different than the system hostname. If this will be a self signed certificate, prefix the hostname - with CA for certificate authority. + with CA for Certificate Authority. The next task is to create a certificate signing request and a private key. Input this command and follow the @@ -2385,7 +2397,9 @@ result: 0 Success During the certificate generation process, be sure to correctly set the Common Name attribute. - Once complete, sign the key: + The Certificate Signing Request must be signed with the + Certificate Authority in order to be used as a valid + certificate: &prompt.root; openssl x509 -req -days 365 -in server.csr -out ../server.crt -CA ../ca.crt -CAkey ca.key -CAcreateserial @@ -2398,172 +2412,351 @@ result: 0 Success Remember to use the same Common Name attribute when prompted. When finished, ensure that a total of eight (8) new files have been generated through the - proceeding commands. If so, the next step is to edit - /usr/local/etc/openldap/slapd.conf and - add the following options: + proceeding commands. - TLSCipherSuite HIGH:MEDIUM:+SSLv3 -TLSCertificateFile /usr/local/etc/openldap/server.crt -TLSCertificateKeyFile /usr/local/etc/openldap/private/server.key -TLSCACertificateFile /usr/local/etc/openldap/ca.crt + The daemon running the OpenLDAP server is + slapd. Its configuration is performed + through slapd.ldif: the old + slapd.conf has been deprecated by + OpenLDAP. - Then, edit - /usr/local/etc/openldap/ldap.conf and add - the following lines: + Configuration + examples for slapd.ldif are + available and can also be found in + /usr/local/etc/openldap/slapd.ldif.sample. + Options are documented in slapd-config(5). Each section + of slapd.ldif, like all the other LDAP + attribute sets, is uniquely identified through a DN. Be sure + that no blank lines are left between the + dn: statement and the desired end of the + section. In the following example, TLS will be used to + implement a secure channel. The first section represents the + global configuration: - TLS_CACERT /usr/local/etc/openldap/ca.crt -TLS_CIPHER_SUITE HIGH:MEDIUM:+SSLv3 + # +# See slapd-config(5) for details on configuration options. +# This file should NOT be world readable. +# +dn: cn=config +objectClass: olcGlobal +cn: config +# +# +# Define global ACLs to disable default read access. +# +olcArgsFile: /var/run/openldap/slapd.args +olcPidFile: /var/run/openldap/slapd.pid +olcTLSCertificateFile: /usr/local/etc/openldap/server.crt +olcTLSCertificateKeyFile: /usr/local/etc/openldap/private/server.key +olcTLSCACertificateFile: /usr/local/etc/openldap/ca.crt +#olcTLSCipherSuite: HIGH +olcTLSProtocolMin: 3.1 +olcTLSVerifyClient: never - While editing this file, uncomment the following entries - and set them to the desired values: , - , and - . Set the to - contain and - . Then, add two entries pointing to - the certificate authority. When finished, the entries should - look similar to the following: + The Certificate Authority, server certificate and server + private key files must be specified here. It is recommended + to let the clients choose the security cipher and omit option + olcTLSCipherSuite (incompatible with TLS + clients other than openssl). Option + olcTLSProtocolMin lets the server require a + minimum security level: it is recommended. While + verification is mandatory for the server, it is not for the + client: olcTLSVerifyClient: never. - BASE dc=example,dc=com -URI ldap:// ldaps:// + The second section is about the backend modules and can be + configured as follows: -SIZELIMIT 12 -TIMELIMIT 15 + # +# Load dynamic backend modules: +# +dn: cn=module,cn=config +objectClass: olcModuleList +cn: module +olcModulepath: /usr/local/libexec/openldap +olcModuleload: back_mdb.la +#olcModuleload: back_bdb.la +#olcModuleload: back_hdb.la +#olcModuleload: back_ldap.la +#olcModuleload: back_passwd.la +#olcModuleload: back_shell.la -TLS_CACERT /usr/local/etc/openldap/ca.crt -TLS_CIPHER_SUITE HIGH:MEDIUM:+SSLv3 + The third section is devoted to load the needed + ldif schemas to be used by the databases: + they are essential. - The default password for the server should then be - changed: + dn: cn=schema,cn=config +objectClass: olcSchemaConfig +cn: schema - &prompt.root; slappasswd -h "{SHA}" >> /usr/local/etc/openldap/slapd.conf +include: file:///usr/local/etc/openldap/schema/core.ldif +include: file:///usr/local/etc/openldap/schema/cosine.ldif +include: file:///usr/local/etc/openldap/schema/inetorgperson.ldif +include: file:///usr/local/etc/openldap/schema/nis.ldif - This command will prompt for the password and, if the - process does not fail, a password hash will be added to the - end of slapd.conf. Several hashing - formats are supported. Refer to the manual page for - slappasswd for more information. + Next, the frontend configuration section: - Next, edit - /usr/local/etc/openldap/slapd.conf and - add the following lines: + # Frontend settings +# +dn: olcDatabase={-1}frontend,cn=config +objectClass: olcDatabaseConfig +objectClass: olcFrontendConfig +olcDatabase: {-1}frontend +olcAccess: to * by * read +# +# Sample global access control policy: +# Root DSE: allow anyone to read it +# Subschema (sub)entry DSE: allow anyone to read it +# Other DSEs: +# Allow self write access +# Allow authenticated users read access +# Allow anonymous users to authenticate +# +#olcAccess: to dn.base="" by * read +#olcAccess: to dn.base="cn=Subschema" by * read +#olcAccess: to * +# by self write +# by users read +# by anonymous auth +# +# if no access controls are present, the default policy +# allows anyone and everyone to read anything but restricts +# updates to rootdn. (e.g., "access to * by * read") +# +# rootdn can always read and write EVERYTHING! +# +olcPasswordHash: {SSHA} +# {SSHA} is already the default for olcPasswordHash - password-hash {sha} -allow bind_v2 + Another section is devoted to the configuration + backend, the only way to later access the + OpenLDAP server configuration is as a global + super-user. - The in this file must be updated - to match the used in - /usr/local/etc/openldap/ldap.conf and - should also be set. A recommended - value for is something like - . Before saving this file, place - the in front of the password output - from slappasswd and delete the old - . The end result should - look similar to this: + dn: olcDatabase={0}config,cn=config +objectClass: olcDatabaseConfig +olcDatabase: {0}config +olcAccess: to * by * none +olcRootPW: {SSHA}iae+lrQZILpiUdf16Z9KmDmSwT77Dj4U - TLSCipherSuite HIGH:MEDIUM:+SSLv3 -TLSCertificateFile /usr/local/etc/openldap/server.crt -TLSCertificateKeyFile /usr/local/etc/openldap/private/server.key -TLSCACertificateFile /usr/local/etc/openldap/ca.crt -rootpw {SHA}W6ph5Mm5Pz8GgiULbPgzG37mj9g= + The default administrator username is + cn=config. Type + slappasswd in a shell, choose a password + and use its hash in olcRootPW. If this + option is not specified now, before + slapd.ldif is imported, no one will be + later able to modify the + global configuration section. - Finally, enable the OpenLDAP - service in /etc/rc.conf and set the - URI: + The last section is about the database backend: - slapd_enable="YES" -slapd_flags="-4 -h ldaps:///" + ####################################################################### +# LMDB database definitions +####################################################################### +# +dn: olcDatabase=mdb,cn=config +objectClass: olcDatabaseConfig +objectClass: olcMdbConfig +olcDatabase: mdb +olcDbMaxSize: 1073741824 +olcSuffix: dc=domain,dc=example +olcRootDN: cn=mdbadmin,dc=domain,dc=example +# Cleartext passwords, especially for the rootdn, should +# be avoided. See slappasswd(8) and slapd-config(5) for details. +# Use of strong authentication encouraged. +olcRootPW: {SSHA}X2wHvIWDk6G76CQyCMS1vDCvtICWgn0+ +# The database directory MUST exist prior to running slapd AND +# should only be accessible by the slapd and slap tools. +# Mode 700 recommended. +olcDbDirectory: /var/db/openldap-data +# Indices to maintain +olcDbIndex: objectClass eq - At this point the server can be started and tested: + This database hosts the actual + contents of the LDAP + directory. Types other than mdb are + available. Its super-user, not to be confused with the global + one, is configured here: a (possibly custom) username in + olcRootDN and the password hash in + olcRootPW; slappasswd + can be used as before. - &prompt.root; service slapd start + This repository + contains four examples of slapd.ldif. To + convert an existing slapd.conf into + slapd.ldif, refer to this + page (please note that this may introduce some + unuseful options). - If everything is configured correctly, a search of the - directory should show a successful connection with a single - response as in this example: + When the configuration is completed, + slapd.ldif must be placed in an empty + directory. It is recommended to create it as: - &prompt.root; ldapsearch -Z + &prompt.root; mkdir /usr/local/etc/openldap/slapd.d/ + + Import the configuration database: + + &prompt.root; /usr/local/sbin/slapadd -n0 -F /usr/local/etc/openldap/slapd.d/ -l /usr/local/etc/openldap/slapd.ldif + + Start the slapd daemon: + + &prompt.root; /usr/local/libexec/slapd -F /usr/local/etc/openldap/slapd.d/ + + Option -d can be used for debugging, + as specified in slapd(8). To verify that the server is + running and working: + + &prompt.root; ldapsearch -x -b '' -s base '(objectclass=*)' namingContexts # extended LDIF # # LDAPv3 -# base <dc=example,dc=com> (default) with scope subtree +# base <> with scope baseObject # filter: (objectclass=*) -# requesting: ALL +# requesting: namingContexts # +# +dn: +namingContexts: dc=domain,dc=example + # search result -search: 3 -result: 32 No such object +search: 2 +result: 0 Success -# numResponses: 1 +# numResponses: 2 +# numEntries: 1 - - If the command fails and the configuration looks - correct, stop the slapd service and - restart it with debugging options: + The server must still be trusted. If that has never been + done before, follow these instructions. Install the OpenSSL + package or port: - &prompt.root; service slapd stop -&prompt.root; /usr/local/libexec/slapd -d -1 - + &prompt.root; pkg install openssl - Once the service is responding, the directory can be - populated using ldapadd. In this example, - a file containing this list of users is first created. Each - user should use the following format: + From the directory where ca.crt is + stored (in this example, + /usr/local/etc/openldap), run: - dn: dc=example,dc=com -objectclass: dcObject -objectclass: organization -o: Example -dc: Example + &prompt.root; c_rehash . -dn: cn=Manager,dc=example,dc=com -objectclass: organizationalRole -cn: Manager + Both the CA and the server certificate are now correctly + recognized in their respective roles. To verify this, run + this command from the server.crt + directory: - To import this file, specify the file name. The following - command will prompt for the password specified earlier and the - output should look something like this: + &prompt.root; openssl verify -verbose -CApath . server.crt - &prompt.root; ldapadd -Z -D "cn=Manager,dc=example,dc=com" -W -f import.ldif -Enter LDAP Password: -adding new entry "dc=example,dc=com" + If slapd was running, restart it. As + stated in /usr/local/etc/rc.d/slapd, to + properly run slapd at boot the + following lines must be added to + /etc/rc.conf: -adding new entry "cn=Manager,dc=example,dc=com" + lapd_enable="YES" +slapd_flags='-h "ldapi://%2fvar%2frun%2fopenldap%2fldapi/ +ldap://0.0.0.0/"' +slapd_sockets="/var/run/openldap/ldapi" +slapd_cn_config="YES" - Verify the data was added by issuing a search on the - server using ldapsearch: + slapd does not provide debugging at + boot. Check /var/log/debug.log, + dmesg -a and + /var/log/messages for this + purpose. - &prompt.user; ldapsearch -Z -# extended LDIF -# -# LDAPv3 -# base <dc=example,dc=com> (default) with scope subtree -# filter: (objectclass=*) -# requesting: ALL -# + The following example adds the group + team and the user john + to the domain.example + LDAP database, which is still empty. + First, create the file + domain.ldif: -# example.com -dn: dc=example,dc=com + &prompt.root; cat domain.ldif +dn: dc=domain,dc=example objectClass: dcObject objectClass: organization -o: Example -dc: Example +o: domain.example +dc: domain -# Manager, example.com -dn: cn=Manager,dc=example,dc=com -objectClass: organizationalRole -cn: Manager +dn: ou=groups,dc=domain,dc=example +objectClass: top +objectClass: organizationalunit +ou: groups -# search result -search: 3 -result: 0 Success +dn: ou=users,dc=domain,dc=example +objectClass: top +objectClass: organizationalunit +ou: users -# numResponses: 3 -# numEntries: 2 +dn: cn=team,ou=groups,dc=domain,dc=example +objectClass: top +objectClass: posixGroup +cn: team +gidNumber: 10001 - At this point, the server should be configured and - functioning properly. +dn: uid=john,ou=users,dc=domain,dc=example +objectClass: top +objectClass: account +objectClass: posixAccount +objectClass: shadowAccount +cn: John McUser +uid: john +uidNumber: 10001 +gidNumber: 10001 +homeDirectory: /home/john/ +loginShell: /usr/bin/bash +userPassword: secret + + See the OpenLDAP documentation for more details. Use + slappasswd to replace the plain text + password secret with a hash in + userPassword. The path specified as + loginShell must exist in all the systems + where john is allowed to login. Finally, + use the mdb administrator to modify the + database: + + &prompt.root; ldapadd -W -D "cn=mdbadmin,dc=domain,dc=example" -f domain.ldif + + Modifications to the global + configuration section can only be performed by + the global super-user. For example, assume that the option + olcTLSCipherSuite: HIGH:MEDIUM:SSLv3 was + initially specified and must now be deleted. First, create a + file that contains the following: + + &prompt.root; cat global_mod +dn: cn=config +changetype: modify +delete: olcTLSCipherSuite + + Then, apply the modifications: + + &prompt.root; ldapmodify -f global_mod -x -D "cn=config" -W + + When asked, provide the password chosen in the + configuration backend section. The + username is not required: here, cn=config + represents the DN of the database section to be modified. + Alternatively, use ldapmodify to delete a + single line of the database, ldapdelete to + delete a whole entry. + + If something goes wrong, or if the global super-user + cannot access the configuration backend, it is possible to + delete and re-write the whole configuration: + + &prompt.root; rm -rf /usr/local/etc/openldap/slapd.d/ + + slapd.ldif can then be edited and + imported again. Please, follow this procedure only when no + other solution is available. + + This is the configuration of the server only. The same + machine can also host an LDAP client, with its own separate + configuration. @@ -2810,7 +3003,7 @@ host fantasia { The default lease expiry time in seconds. A client - can be configured to override this value. + can be configured to override this value. @@ -4088,7 +4281,7 @@ Starting smbd. /etc/ntp.conf: - Sample <filename>/etc/ntp.conf</filename> + Sample <filename>/etc/ntp.conf</filename> server ntplocal.example.com prefer server timeserver.example.org @@ -4177,7 +4370,7 @@ driftfile /var/db/ntp.drift directives in /etc/ppp/ppp.conf. For example: - set filter dial 0 deny udp src eq 123 + set filter dial 0 deny udp src eq 123 # Prevent NTP traffic from initiating dial out set filter dial 1 permit 0 0 set filter alive 0 deny udp src eq 123 From owner-svn-doc-all@freebsd.org Fri Dec 21 18:16:07 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 6B39A1352DEC; Fri, 21 Dec 2018 18:16:07 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E0E3676759; Fri, 21 Dec 2018 18:16:06 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id D2A59191C7; Fri, 21 Dec 2018 18:16:06 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBLIG6Ln039417; Fri, 21 Dec 2018 18:16:06 GMT (envelope-from bcr@FreeBSD.org) Received: (from bcr@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBLIG66A039416; Fri, 21 Dec 2018 18:16:06 GMT (envelope-from bcr@FreeBSD.org) Message-Id: <201812211816.wBLIG66A039416@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bcr set sender to bcr@FreeBSD.org using -f From: Benedict Reuschling Date: Fri, 21 Dec 2018 18:16:06 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52705 - head/en_US.ISO8859-1/books/handbook/ports X-SVN-Group: doc-head X-SVN-Commit-Author: bcr X-SVN-Commit-Paths: head/en_US.ISO8859-1/books/handbook/ports X-SVN-Commit-Revision: 52705 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: E0E3676759 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.97 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; NEURAL_HAM_SHORT(-0.98)[-0.975,0]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2018 18:16:07 -0000 Author: bcr Date: Fri Dec 21 18:16:06 2018 New Revision: 52705 URL: https://svnweb.freebsd.org/changeset/doc/52705 Log: Improve the handbook section about leaf/automatic packages. The patch includes instructions on how to list the prime (non-automatic) packages, and how to mark a package as automatic or non-automatic. PR: 233894 Submitted by: public@fzwte.net Reviewed by: ygy@, myself Approved by: ygy Differential Revision: https://reviews.freebsd.org/D18497 Modified: head/en_US.ISO8859-1/books/handbook/ports/chapter.xml Modified: head/en_US.ISO8859-1/books/handbook/ports/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/handbook/ports/chapter.xml Thu Dec 20 21:54:05 2018 (r52704) +++ head/en_US.ISO8859-1/books/handbook/ports/chapter.xml Fri Dec 21 18:16:06 2018 (r52705) @@ -627,12 +627,12 @@ Proceed with deleting packages [y/N]: y - Automatically Removing Leaf Dependencies + Automatically Removing Unused Packages Removing a package may leave behind dependencies which are no longer required. Unneeded packages that were installed - as dependencies can be automatically detected and removed - using: + as dependencies (leaf packages) can be automatically detected + and removed using: &prompt.root; pkg autoremove Packages to be autoremoved: @@ -642,6 +642,49 @@ The autoremoval will free 723 kB Proceed with autoremoval of packages [y/N]: y Deinstalling ca_root_nss-3.15.1_1... done + + Packages installed as dependencies are + called automatic packages. Non-automatic + packages, i.e the packages that were explicity installed not + as a dependency to another package, can be listed + using: + + &prompt.root; pkg prime-list +nginx +openvpn +sudo + + pkg prime-list is an alias command + declared in /usr/local/etc/pkg.conf. + There are many others that can be used to query the package + database of the system. For instance, command + pkg prime-origins can be used to get the + origin port directory of the list mentioned above: + + &prompt.root; pkg prime-origins +www/nginx +security/openvpn +security/sudo + + This list can be used to rebuild all packages + installed on a system using build tools such as + ports-mgmt/poudriere or + ports-mgmt/synth. + + Marking an installed package as automatic can be + done using: + + &prompt.root; pkg set -A 1 devel/cmake + + Once a package is a leaf package and is marked + as automatic, it gets selected by + pkg autoremove. + + Marking an installed package as not + automatic can be done using: + + &prompt.root; pkg set -A 0 devel/cmake + From owner-svn-doc-all@freebsd.org Fri Dec 21 18:45:12 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 324391353846; Fri, 21 Dec 2018 18:45:12 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id CBDD877564; Fri, 21 Dec 2018 18:45:11 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id BD1AB196E6; Fri, 21 Dec 2018 18:45:11 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBLIjBXt054615; Fri, 21 Dec 2018 18:45:11 GMT (envelope-from bcr@FreeBSD.org) Received: (from bcr@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBLIjBjZ054614; Fri, 21 Dec 2018 18:45:11 GMT (envelope-from bcr@FreeBSD.org) Message-Id: <201812211845.wBLIjBjZ054614@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bcr set sender to bcr@FreeBSD.org using -f From: Benedict Reuschling Date: Fri, 21 Dec 2018 18:45:11 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52706 - head/share/xml X-SVN-Group: doc-head X-SVN-Commit-Author: bcr X-SVN-Commit-Paths: head/share/xml X-SVN-Commit-Revision: 52706 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: CBDD877564 X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.97 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; NEURAL_HAM_SHORT(-0.98)[-0.975,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US]; NEURAL_HAM_LONG(-1.00)[-0.999,0] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2018 18:45:12 -0000 Author: bcr Date: Fri Dec 21 18:45:11 2018 New Revision: 52706 URL: https://svnweb.freebsd.org/changeset/doc/52706 Log: Add the BSD Day 2019 in Argentina. While here, fix a trailing whitespace and use two spaces after a sentence stop in the other entries in this file. Obtained from: bsdday.com.ar website (via twitter) Modified: head/share/xml/events2019.xml Modified: head/share/xml/events2019.xml ============================================================================== --- head/share/xml/events2019.xml Fri Dec 21 18:16:06 2018 (r52705) +++ head/share/xml/events2019.xml Fri Dec 21 18:45:11 2018 (r52706) @@ -39,12 +39,12 @@ European Meeting (FOSDEM) is a free event for software hackers to meet, share ideas and collaborate. Every year 8000+ open source developers from all over the world gather at the event in - Brussels, Belgium. During the FOSDEM, developer rooms (devrooms) - are assigned to self organized open source groups and projects - to meet together and showcase their projects; a BSD devroom will host talks about BSD operating systems and - projects. If you want to submit a talk, see the CfP. @@ -93,8 +93,8 @@ United Kingdom Aberdeen - University of Aberdeen, Fraser Noble Building, - Room 213 + University of Aberdeen, Fraser Noble Building, + Room 213 The Aberdeen hackathon is placed at the half way @@ -125,4 +125,32 @@ BSDCan hosts talks and tutorials on a range of topics based around the BSD family of operating systems. + + + BSDday Argentina 2019 + http://bsdday.com.ar/ + + 2019 + 05 + 29 + + + 2019 + 05 + 30 + + + Argentina + Buenos Aires + Departamento de Computacion de la Facultad de Ciencias + Exactas y Naturales de la Universidad de Buenos Aires + + The BSDday is an event where users, administrators + and developers of operating systems of type BSD come together to + share knowledge, talks, contacts and get to know each other. In + the event lectures, debates, courses and installations of the + systems will be exposed. The event is also a great entry for + Linux users, Unix and other operating systems to the BSD + world. + From owner-svn-doc-all@freebsd.org Fri Dec 21 22:08:26 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 08E3D1358DF5; Fri, 21 Dec 2018 22:08:26 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9BB2B867AC; Fri, 21 Dec 2018 22:08:25 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 8BF371B990; Fri, 21 Dec 2018 22:08:25 +0000 (UTC) (envelope-from feld@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBLM8PAS061694; Fri, 21 Dec 2018 22:08:25 GMT (envelope-from feld@FreeBSD.org) Received: (from feld@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBLM8PqA061693; Fri, 21 Dec 2018 22:08:25 GMT (envelope-from feld@FreeBSD.org) Message-Id: <201812212208.wBLM8PqA061693@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: feld set sender to feld@FreeBSD.org using -f From: Mark Felder Date: Fri, 21 Dec 2018 22:08:25 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52707 - head/share/pgpkeys X-SVN-Group: doc-head X-SVN-Commit-Author: feld X-SVN-Commit-Paths: head/share/pgpkeys X-SVN-Commit-Revision: 52707 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 9BB2B867AC X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.97 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.998,0]; NEURAL_HAM_LONG(-1.00)[-0.999,0]; NEURAL_HAM_SHORT(-0.97)[-0.973,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 21 Dec 2018 22:08:26 -0000 Author: feld (ports committer) Date: Fri Dec 21 22:08:25 2018 New Revision: 52707 URL: https://svnweb.freebsd.org/changeset/doc/52707 Log: Update my PGP key Modified: head/share/pgpkeys/feld.key Modified: head/share/pgpkeys/feld.key ============================================================================== --- head/share/pgpkeys/feld.key Fri Dec 21 18:45:11 2018 (r52706) +++ head/share/pgpkeys/feld.key Fri Dec 21 22:08:25 2018 (r52707) @@ -1,58 +1,116 @@ -uid Mark Felder -sub 2048R/80920C42C025EB78 2013-11-09 [expires: 2015-11-10] +pub rsa4096/C293776A9FFC6D85 2018-12-21 [SC] [expires: 2022-12-21] + Key fingerprint = 3B06 0178 660C 6BB0 A96F F010 C293 776A 9FFC 6D85 +uid Mark Felder +uid Mark Felder +sub rsa4096/397E8F99C5EEA440 2018-12-21 [E] [expires: 2022-12-21] +sub rsa4096/1D62130F8816BEBD 2018-12-21 [A] ]]> From owner-svn-doc-all@freebsd.org Sat Dec 22 10:04:27 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A64F4134DCBE; Sat, 22 Dec 2018 10:04:27 +0000 (UTC) (envelope-from ygy@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) server-signature RSA-PSS (4096 bits) client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 486FE8228E; Sat, 22 Dec 2018 10:04:27 +0000 (UTC) (envelope-from ygy@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 32F7623726; Sat, 22 Dec 2018 10:04:27 +0000 (UTC) (envelope-from ygy@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id wBMA4RRK044247; Sat, 22 Dec 2018 10:04:27 GMT (envelope-from ygy@FreeBSD.org) Received: (from ygy@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id wBMA4Rn0044246; Sat, 22 Dec 2018 10:04:27 GMT (envelope-from ygy@FreeBSD.org) Message-Id: <201812221004.wBMA4Rn0044246@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ygy set sender to ygy@FreeBSD.org using -f From: Guangyuan Yang Date: Sat, 22 Dec 2018 10:04:27 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r52708 - head/zh_CN.UTF-8/htdocs X-SVN-Group: doc-head X-SVN-Commit-Author: ygy X-SVN-Commit-Paths: head/zh_CN.UTF-8/htdocs X-SVN-Commit-Revision: 52708 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-Rspamd-Queue-Id: 486FE8228E X-Spamd-Bar: -- Authentication-Results: mx1.freebsd.org X-Spamd-Result: default: False [-2.96 / 15.00]; local_wl_from(0.00)[FreeBSD.org]; NEURAL_HAM_MEDIUM(-1.00)[-0.999,0]; NEURAL_HAM_SHORT(-0.96)[-0.963,0]; ASN(0.00)[asn:11403, ipnet:2610:1c1:1::/48, country:US]; NEURAL_HAM_LONG(-1.00)[-0.999,0] X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 22 Dec 2018 10:04:27 -0000 Author: ygy Date: Sat Dec 22 10:04:26 2018 New Revision: 52708 URL: https://svnweb.freebsd.org/changeset/doc/52708 Log: Update index page from the English version. MFen: r51914 -> r52666 Modified: head/zh_CN.UTF-8/htdocs/index.xsl Modified: head/zh_CN.UTF-8/htdocs/index.xsl ============================================================================== --- head/zh_CN.UTF-8/htdocs/index.xsl Fri Dec 21 22:08:25 2018 (r52707) +++ head/zh_CN.UTF-8/htdocs/index.xsl Sat Dec 22 10:04:26 2018 (r52708) @@ -6,7 +6,7 @@ - + 生产环境适用: &rel.current;, &rel1.current;, + href="&u.rel1.announce;">&rel1.current; + &rel2.current; + ?>
      • 即将发布: &betarel.current;