HardenedBSD src tree
Go to file
Pawel Jakub Dawidek 4d8dc3b838 When dropping privileges prefer capsicum over chroot+setgid+setuid.
We can use capsicum for secondary worker processes and hastctl.
When working as primary we drop privileges using chroot+setgid+setuid
still as we need to send ioctl(2)s to ggate device, for which capsicum
doesn't allow (yet).

X-MFC after:	capsicum is merged to stable/8
2011-03-21 21:31:50 +00:00
bin sh(1): Describe subshell environment, command substitution more correctly. 2011-03-20 23:52:45 +00:00
cddl
contrib - Merge in OFED 1.5.3 from projects/ofed/head 2011-03-21 09:58:24 +00:00
crypto
etc - Merge in OFED 1.5.3 from projects/ofed/head 2011-03-21 09:58:24 +00:00
games
gnu Fix typo: s/LIBSERACHPATH/LIBSEARCHPATH/g 2011-03-21 04:03:55 +00:00
include Add missing declarations that I intended to commit with r219359. 2011-03-07 16:05:45 +00:00
kerberos5
lib index(3): Mention that index/rindex are deprecated and not specified by 2011-03-20 20:53:55 +00:00
libexec - Add support for TLS relocations. 2011-03-11 21:08:02 +00:00
release Add support for checking out ports and doc trees from a CVS repository, 2011-03-19 23:06:17 +00:00
rescue
sbin When dropping privileges prefer capsicum over chroot+setgid+setuid. 2011-03-21 21:31:50 +00:00
secure
share - Merge in OFED 1.5.3 from projects/ofed/head 2011-03-21 09:58:24 +00:00
sys Allow the ofed modules to be compiled on i386. 2011-03-21 21:16:40 +00:00
tools Delete all GPT partitions at once. (Suggested by Andrey V. Elsukov <bu7cher@yandex.ru>) 2011-03-21 13:23:25 +00:00
usr.bin - Merge in OFED 1.5.3 from projects/ofed/head 2011-03-21 09:58:24 +00:00
usr.sbin - Merge changes to the base system to support OFED. These include 2011-03-21 09:40:01 +00:00
COPYRIGHT
LOCKS
MAINTAINERS - Initial release of bxe(4) to support Broadcom NetXtreme II 10GbE. 2011-03-14 22:42:41 +00:00
Makefile
Makefile.inc1 - Merge in OFED 1.5.3 from projects/ofed/head 2011-03-21 09:58:24 +00:00
Makefile.mips
ObsoleteFiles.inc
README
UPDATING

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree, the most
commonly used one being ``world'', which rebuilds and installs
everything in the FreeBSD system from the source tree except the
kernel, the kernel-modules and the contents of /etc.  The ``world''
target should only be used in cases where the source tree has not
changed from the currently running version.  See:
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/makeworld.html
for more information, including setting make(1) variables.

The ``buildkernel'' and ``installkernel'' targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process, documentation
for which can be found at:
   http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html
And in the config(8) man page.
Note: If you want to build and install the kernel with the
``buildkernel'' and ``installkernel'' targets, you might need to build
world before.  More information is available in the handbook.

The sample kernel configuration files reside in the sys/<arch>/conf
sub-directory (assuming that you've installed the kernel sources), the
file named GENERIC being the one used to build your initial installation
kernel.  The file NOTES contains entries and documentation for all possible
devices, not just those commonly used.  It is the successor of the ancient
LINT file, but in contrast to LINT, it is not buildable as a kernel but a
pure reference and documentation file.


Source Roadmap:
---------------
bin		System/user commands.

cddl		Various commands and libraries under the Common Development
		and Distribution License.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc.

games		Amusements.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberos5	Kerberos5 (Heimdal) package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

rescue		Build system for statically linked /rescue utilities.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

sys		Kernel sources.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/synching.html