From owner-svn-src-head@freebsd.org Sat Jul 21 07:48:06 2018 Return-Path: Delivered-To: svn-src-head@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0B037103F6F2; Sat, 21 Jul 2018 07:48:06 +0000 (UTC) (envelope-from ronald-lists@klop.ws) Received: from smarthost1.greenhost.nl (smarthost1.greenhost.nl [195.190.28.92]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 98F3480617; Sat, 21 Jul 2018 07:48:05 +0000 (UTC) (envelope-from ronald-lists@klop.ws) Received: from smtp.greenhost.nl ([213.108.110.112]) by smarthost1.greenhost.nl with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.84_2) (envelope-from ) id 1fgmcP-00074J-NB; Sat, 21 Jul 2018 09:47:57 +0200 Content-Type: text/plain; charset=utf-8; format=flowed; delsp=yes To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org, "Ian Lepore" Subject: Re: svn commit: r336562 - head References: <201807201802.w6KI2rtH015808@repo.freebsd.org> Date: Sat, 21 Jul 2018 09:48:01 +0200 MIME-Version: 1.0 Content-Transfer-Encoding: 7bit From: "Ronald Klop" Message-ID: In-Reply-To: <201807201802.w6KI2rtH015808@repo.freebsd.org> User-Agent: Opera Mail/12.16 (FreeBSD) X-Authenticated-As-Hash: 398f5522cb258ce43cb679602f8cfe8b62a256d1 X-Virus-Scanned: by clamav at smarthost1.samage.net X-Spam-Level: / X-Spam-Score: -0.2 X-Spam-Status: No, score=-0.2 required=5.0 tests=ALL_TRUSTED, BAYES_50 autolearn=disabled version=3.4.0 X-Scan-Signature: 788438cbfdc4dc137ce560360a3a99c7 X-BeenThere: svn-src-head@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: SVN commit messages for the src tree for head/-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 21 Jul 2018 07:48:06 -0000 On Fri, 20 Jul 2018 20:02:53 +0200, Ian Lepore wrote: > Author: ian > Date: Fri Jul 20 18:02:52 2018 > New Revision: 336562 > URL: https://svnweb.freebsd.org/changeset/base/336562 > > Log: > Add a note about the new 'ntpd' userid, and the fact that rc.d/ntpd now > automatically runs the daemon as that user if it can. Like the work you do hardening the system out-of-the-box. Regards, Ronald. > > Modified: > head/UPDATING > > Modified: head/UPDATING > ============================================================================== > --- head/UPDATING Fri Jul 20 17:46:55 2018 (r336561) > +++ head/UPDATING Fri Jul 20 18:02:52 2018 (r336562) > @@ -38,6 +38,17 @@ NOTE TO PEOPLE WHO THINK THAT FreeBSD 12.x IS SLOW: > in place from zfsloader to loader to allow a smooth transition > until the boot blocks can be updated. > +20180719: > + New uid:gid added, ntpd:ntpd (123:123). Be sure to run mergemaster > + or take steps to update /etc/passwd before doing installworld on > + existing systems. Also, rc.d/ntpd now starts ntpd(8) as user ntpd > + if the new mac_ntpd(4) policy is available, unless ntpd_flags or > + the ntp config file contain options that change file/dir locations. > + When such options (e.g., "statsdir" or "crypto") are used, ntpd can > + still be run as non-root by setting ntpd_user=ntpd in rc.conf, after > + taking steps to ensure that all required files/dirs are accessible > + by the ntpd user. > + > 20180717: > Big endian arm support has been removed. > _______________________________________________ > svn-src-all@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/svn-src-all > To unsubscribe, send any mail to "svn-src-all-unsubscribe@freebsd.org"