From owner-freebsd-stable Tue Jul 31 20:49:39 2001 Delivered-To: freebsd-stable@freebsd.org Received: from fledge.watson.org (fledge.watson.org [204.156.12.50]) by hub.freebsd.org (Postfix) with ESMTP id 12EAA37B405; Tue, 31 Jul 2001 20:49:11 -0700 (PDT) (envelope-from robert@fledge.watson.org) Received: from fledge.watson.org (robert@fledge.pr.watson.org [192.0.2.3]) by fledge.watson.org (8.11.4/8.11.4) with SMTP id f713mYf55260; Tue, 31 Jul 2001 23:48:34 -0400 (EDT) (envelope-from robert@fledge.watson.org) Date: Tue, 31 Jul 2001 23:48:34 -0400 (EDT) From: Robert Watson X-Sender: robert@fledge.watson.org To: arch@FreeBSD.org Cc: stable@FreeBSD.org Subject: Patch to modify default inetd.conf, have sysinstall prompt to edit , inetd.conf Message-ID: MIME-Version: 1.0 Content-Type: MULTIPART/MIXED; BOUNDARY="0-909119149-996637714=:54921" Sender: owner-freebsd-stable@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG This message is in MIME format. The first part should be readable text, while the remaining parts are likely unreadable without MIME-aware tools. Send mail to mime@docserver.cac.washington.edu for more info. --0-909119149-996637714=:54921 Content-Type: TEXT/PLAIN; charset=US-ASCII One of the observations that has been made fairly frequently to me is that the current default inetd.conf puts many FreeBSD users at risk unnecessarily, as many of them have moved to using SSH for remote access needs. In particular in light of the recent ftpd and telnetd security bugs, it seems like 4.4-RELEASE would be a good time to move to a more conservative default of having both of these services disabled in the base install, as both NetBSD and OpenBSD have moved to doing. The attached patch modifies inetd.conf to disable all services by default, and expands on the comments in the header so as to be more instructive concerning enabling and disabling services. It also modifies sysinstall such that enabling inetd in the post-install configuration describes inetd more than previously, mentions the risks, and then also presents the opportunity to edit inetd.conf if inetd is enabled. Also, during the normal install, the user is automatically prompted to enable or disable inetd in much the same style as the NFS server. I believe this addresses concerns about enabling remote telnetd login during install, which was one of the primary reasons to leave it enabled by default. Note that this does not disable the installation of the necessary software, merely disable it by default, so users can enable them again easily by modifying inetd.conf, either with the help of sysinstall, or manually. These changes select a safe default, but hopefully offer the necessary flexibility for users needing the services specifically. I've gotten reviews on content and configurability from Warner Losh, Chris Costello, and Jake Burkholder. Assuming no one seriously objects (or only a small number of people do), I'll commit to -CURRENT within a day or so, and MFC (pending RE approval) shortly there-after. Clearly, it would be desirable to have this in as many of the release snapshots as possible. Here, for the patch-impaired, are a couple of excerpts from sysinstall, so that language can be evaluated for readability and comprehensibility for more novice users: x x [ ] Gateway This machine will route packets between interfaces x x [X] inetd This machine wants to run the inet daemon x x [X] NFS client This machine will be an NFS client x xlqqqqqqqqqqqqqqqqqqqqq User Confirmation Requested qqqqqqqqqqqqqqqqqqqqqkx x x xx The Internet Super Server (inetd) allows a number of simple Internet xx x x xx services to be enabled, including finger, ftp, and telnetd. Enabling xx x x xx these services may increase risk of security problems by increasing xx x x xx the exposure of your system. xx x x xx xx x x xx With this in mind, do you wish to enable inetd? xx x x xx xx x x xtqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqux x x xx [ Yes ] No xx x x xlqqqqqqqqqqqqqqqqqqqqq User Confirmation Requested qqqqqqqqqqqqqqqqqqqqqkx x x xx Inetd relies on its configuration file, /etc/inetd.conf, to determine xx x x xx which Internet services will be available. The default FreeBSD xx x x xx inetd.conf leaves all services disabled by default, so they must be xx x x xx specifically enabled in the configuration file before they will xx x x xx function, even once inetd is enabled. xx x x xx xx x x xx Select [Yes] now to invoke an editor on /etc/inetd.conf, or [No] to xx x x xx use the current settings. xx x x xx xx x x xtqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqux x --0-909119149-996637714=:54921 Content-Type: TEXT/PLAIN; charset=US-ASCII; name="inetd_defaults.diff" Content-Transfer-Encoding: BASE64 Content-ID: Content-Description: PyB1c3Iuc2Jpbi9zeXNpbnN0YWxsL2tleW1hcC5oDQo/IHVzci5zYmluL3N5 c2luc3RhbGwvcnRlcm1jYXANCj8gdXNyLnNiaW4vc3lzaW5zdGFsbC9tYWtl ZGV2cy5jDQo/IHVzci5zYmluL3N5c2luc3RhbGwvc3lzaW5zdGFsbA0KPyB1 c3Iuc2Jpbi9zeXNpbnN0YWxsL3N5c2luc3RhbGwuOC5neg0KSW5kZXg6IHVz ci5zYmluL3N5c2luc3RhbGwvY29uZmlnLmMNCj09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT0NClJDUyBmaWxlOiAvaG9tZS9uY3ZzL3NyYy91c3Iuc2Jpbi9zeXNp bnN0YWxsL2NvbmZpZy5jLHYNCnJldHJpZXZpbmcgcmV2aXNpb24gMS4xODMN CmRpZmYgLXUgLXIxLjE4MyBjb25maWcuYw0KLS0tIHVzci5zYmluL3N5c2lu c3RhbGwvY29uZmlnLmMJMjAwMS8wNy8xNyAwNDowOTo1MAkxLjE4Mw0KKysr IHVzci5zYmluL3N5c2luc3RhbGwvY29uZmlnLmMJMjAwMS8wOC8wMSAwMzoz NDo1OQ0KQEAgLTk1NSw2ICs5NTUsMzggQEANCiB9DQogDQogaW50DQorY29u ZmlnSW5ldGQoZGlhbG9nTWVudUl0ZW0gKnNlbGYpDQorew0KKyAgICBjaGFy IGNtZFsyNTZdOw0KKw0KKyAgICBXSU5ET1cgKncgPSBzYXZlc2NyKCk7DQor DQorICAgIGlmIChtc2dZZXNObygiVGhlIEludGVybmV0IFN1cGVyIFNlcnZl ciAoaW5ldGQpIGFsbG93cyBhIG51bWJlciBvZiBzaW1wbGUgSW50ZXJuZXRc biINCisgICAgICAgICAgICAgICAgICJzZXJ2aWNlcyB0byBiZSBlbmFibGVk LCBpbmNsdWRpbmcgZmluZ2VyLCBmdHAsIGFuZCB0ZWxuZXRkLiAgRW5hYmxp bmdcbiINCisgICAgICAgICAgICAgICAgICJ0aGVzZSBzZXJ2aWNlcyBtYXkg aW5jcmVhc2UgcmlzayBvZiBzZWN1cml0eSBwcm9ibGVtcyBieSBpbmNyZWFz aW5nXG4iDQorICAgICAgICAgICAgICAgICAidGhlIGV4cG9zdXJlIG9mIHlv dXIgc3lzdGVtLlxuXG4iDQorICAgICAgICAgICAgICAgICAiV2l0aCB0aGlz IGluIG1pbmQsIGRvIHlvdSB3aXNoIHRvIGVuYWJsZSBpbmV0ZD9cbiIpKSB7 DQorICAgICAgICB2YXJpYWJsZV9zZXQyKCJpbmV0ZF9lbmFibGUiLCAiTk8i LCAxKTsNCisgICAgfSBlbHNlIHsNCisgICAgICAgIC8qIElmIGluZXRkIGlz IGVuYWJsZWQsIHdlJ2xsIG5lZWQgYW4gaW5ldGQuY29uZiAqLw0KKw0KKwlp ZiAoIW1zZ1llc05vKCJpbmV0ZCg4KSByZWxpZXMgb24gaXRzIGNvbmZpZ3Vy YXRpb24gZmlsZSwgL2V0Yy9pbmV0ZC5jb25mLCB0byBkZXRlcm1pbmVcbiIN CisgICAgICAgICAgICAgICAgICAgIndoaWNoIEludGVybmV0IHNlcnZpY2Vz IHdpbGwgYmUgYXZhaWxhYmxlLiAgVGhlIGRlZmF1bHQgRnJlZUJTRFxuIg0K KyAgICAgICAgICAgICAgICAgICAiaW5ldGQuY29uZig1KSBsZWF2ZXMgYWxs IHNlcnZpY2VzIGRpc2FibGVkIGJ5IGRlZmF1bHQsIHNvIHRoZXkgbXVzdCBi ZVxuIg0KKyAgICAgICAgICAgICAgICAgICAic3BlY2lmaWNhbGx5IGVuYWJs ZWQgaW4gdGhlIGNvbmZpZ3VyYXRpb24gZmlsZSBiZWZvcmUgdGhleSB3aWxs XG4iDQorICAgICAgICAgICAgICAgICAgICJmdW5jdGlvbiwgZXZlbiBvbmNl IGluZXRkKDgpIGlzIGVuYWJsZWQuXG5cbiINCisgICAgICAgICAgICAgICAg ICAgIlNlbGVjdCBbWWVzXSBub3cgdG8gaW52b2tlIGFuIGVkaXRvciBvbiAv ZXRjL2luZXRkLmNvbmYsIG9yIFtOb10gdG9cbiINCisgICAgICAgICAgICAg ICAgICAgInVzZSB0aGUgY3VycmVudCBzZXR0aW5ncy5cbiIpKSB7DQorICAg ICAgICAgICAgc3ByaW50ZihjbWQsICIlcyAvZXRjL2luZXRkLmNvbmYiLCB2 YXJpYWJsZV9nZXQoVkFSX0VESVRPUikpOw0KKyAgICAgICAgICAgIGRpYWxv Z19jbGVhcigpOw0KKyAgICAgICAgICAgIHN5c3RlbUV4ZWN1dGUoY21kKTsN CisgICAgICAgICAgICB2YXJpYWJsZV9zZXQyKCJpbmV0ZF9lbmFibGUiLCAi WUVTIiwgMSk7DQorCX0NCisgICAgfQ0KKyAgICByZXN0b3Jlc2NyKHcpOw0K K30NCisNCitpbnQNCiBjb25maWdORlNTZXJ2ZXIoZGlhbG9nTWVudUl0ZW0g KnNlbGYpDQogew0KICAgICBjaGFyIGNtZFsyNTZdOw0KSW5kZXg6IHVzci5z YmluL3N5c2luc3RhbGwvZGlzcGF0Y2guYw0KPT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PQ0KUkNTIGZpbGU6IC9ob21lL25jdnMvc3JjL3Vzci5zYmluL3N5c2lu c3RhbGwvZGlzcGF0Y2guYyx2DQpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMzgN CmRpZmYgLXUgLXIxLjM4IGRpc3BhdGNoLmMNCi0tLSB1c3Iuc2Jpbi9zeXNp bnN0YWxsL2Rpc3BhdGNoLmMJMjAwMS8wNy8wNSAwOTo1MTowOQkxLjM4DQor KysgdXNyLnNiaW4vc3lzaW5zdGFsbC9kaXNwYXRjaC5jCTIwMDEvMDgvMDEg MDM6MzU6MDUNCkBAIC01Miw2ICs1Miw3IEBADQogfSByZXNXb3Jkc1tdID0g ew0KICAgICB7ICJjb25maWdBbm9uRlRQIiwJCWNvbmZpZ0Fub25GVFAJCX0s DQogICAgIHsgImNvbmZpZ1JvdXRlciIsCQljb25maWdSb3V0ZXIJCX0sDQor ICAgIHsgImNvbmZpZ0luZXRkIiwJCWNvbmZpZ0luZXRkCQl9LA0KICAgICB7 ICJjb25maWdORlNTZXJ2ZXIiLAljb25maWdORlNTZXJ2ZXIJCX0sDQogICAg IHsgImNvbmZpZ05UUCIsCQljb25maWdOVFAJCX0sDQogICAgIHsgImNvbmZp Z1BDTkZTRCIsCQljb25maWdQQ05GU0QJCX0sDQpJbmRleDogdXNyLnNiaW4v c3lzaW5zdGFsbC9pbnN0YWxsLmMNCj09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0N ClJDUyBmaWxlOiAvaG9tZS9uY3ZzL3NyYy91c3Iuc2Jpbi9zeXNpbnN0YWxs L2luc3RhbGwuYyx2DQpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMzAwDQpkaWZm IC11IC1yMS4zMDAgaW5zdGFsbC5jDQotLS0gdXNyLnNiaW4vc3lzaW5zdGFs bC9pbnN0YWxsLmMJMjAwMS8wNy8xNyAwNDowOTo1MAkxLjMwMA0KKysrIHVz ci5zYmluL3N5c2luc3RhbGwvaW5zdGFsbC5jCTIwMDEvMDgvMDEgMDM6MzU6 MTgNCkBAIC01NzMsNiArNTczLDEwIEBADQogCXZhcmlhYmxlX3NldDIoImdh dGV3YXlfZW5hYmxlIiwgIllFUyIsIDEpOw0KIA0KICAgICBkaWFsb2dfY2xl YXJfbm9yZWZyZXNoKCk7DQorICAgIGlmICghbXNnTm9ZZXMoIkRvIHlvdSB3 YW50IHRvIGNvbmZpZ3VyZSBpbmV0ZCBhbmQgc2ltcGxlIGludGVybmV0IHNl cnZpY2VzPyIpKQ0KKyAgICAgICAgY29uZmlnSW5ldGQoc2VsZik7DQorDQor ICAgIGRpYWxvZ19jbGVhcl9ub3JlZnJlc2goKTsNCiAgICAgaWYgKCFtc2dO b1llcygiRG8geW91IHdhbnQgdG8gaGF2ZSBhbm9ueW1vdXMgRlRQIGFjY2Vz cyB0byB0aGlzIG1hY2hpbmU/IikpDQogCWNvbmZpZ0Fub25GVFAoc2VsZik7 DQogDQpJbmRleDogdXNyLnNiaW4vc3lzaW5zdGFsbC9tZW51cy5jDQo9PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09DQpSQ1MgZmlsZTogL2hvbWUvbmN2cy9zcmMv dXNyLnNiaW4vc3lzaW5zdGFsbC9tZW51cy5jLHYNCnJldHJpZXZpbmcgcmV2 aXNpb24gMS4zMTANCmRpZmYgLXUgLXIxLjMxMCBtZW51cy5jDQotLS0gdXNy LnNiaW4vc3lzaW5zdGFsbC9tZW51cy5jCTIwMDEvMDcvMzEgMjE6MzA6NTcJ MS4zMTANCisrKyB1c3Iuc2Jpbi9zeXNpbnN0YWxsL21lbnVzLmMJMjAwMS8w OC8wMSAwMzozNTo1Mw0KQEAgLTIzNSw2ICsyMzUsNyBAQA0KICAgICAgIHsg IiBGVFAgc2l0ZXMiLAkJIlRoZSBGVFAgbWlycm9yIHNpdGUgbGlzdGluZy4i LAkJTlVMTCwgZG1lbnVTdWJtZW51LCBOVUxMLCAmTWVudU1lZGlhRlRQIH0s DQogICAgICAgeyAiIEdhdGV3YXkiLAkJIlNldCBmbGFnIHRvIHJvdXRlIHBh Y2tldHMgYmV0d2VlbiBpbnRlcmZhY2VzLiIsIGRtZW51VmFyQ2hlY2ssIGRt ZW51VG9nZ2xlVmFyaWFibGUsIE5VTEwsICJnYXRld2F5PVlFUyIgfSwNCiAg ICAgICB7ICIgSFRNTCBEb2NzIiwJCSJUaGUgSFRNTCBkb2N1bWVudGF0aW9u IG1lbnUiLAkJTlVMTCwgZG9jQnJvd3NlciB9LA0KKyAgICAgIHsgIiBpbmV0 ZCBDb25maWd1cmF0aW9uIiwJIkNvbmZpZ3VyZSBpbmV0ZCBhbmQgc2ltcGxl IGludGVybmV0IHNlcnZpY2VzLiIsCWRtZW51VmFyQ2hlY2ssIGNvbmZpZ0lu ZXRkLCBOVUxMLCAiaW5ldGRfZW5hYmxlPVlFUyIgfSwNCiAgICAgICB7ICIg SW5zdGFsbCwgU3RhbmRhcmQiLAkiQSBzdGFuZGFyZCBzeXN0ZW0gaW5zdGFs bGF0aW9uLiIsCU5VTEwsIGluc3RhbGxTdGFuZGFyZCB9LA0KICAgICAgIHsg IiBJbnN0YWxsLCBFeHByZXNzIiwJIkFuIGV4cHJlc3Mgc3lzdGVtIGluc3Rh bGxhdGlvbi4iLAlOVUxMLCBpbnN0YWxsRXhwcmVzcyB9LA0KICAgICAgIHsg IiBJbnN0YWxsLCBDdXN0b20iLAkiVGhlIGN1c3RvbSBpbnN0YWxsYXRpb24g bWVudSIsCQlOVUxMLCBkbWVudVN1Ym1lbnUsIE5VTEwsICZNZW51SW5zdGFs bEN1c3RvbSB9LA0KQEAgLTEzMzIsNyArMTMzMyw3IEBADQogICAgICAgeyAi IEdhdGV3YXkiLAkiVGhpcyBtYWNoaW5lIHdpbGwgcm91dGUgcGFja2V0cyBi ZXR3ZWVuIGludGVyZmFjZXMiLA0KIAlkbWVudVZhckNoZWNrLAlkbWVudVRv Z2dsZVZhcmlhYmxlLCBOVUxMLCAiZ2F0ZXdheV9lbmFibGU9WUVTIiB9LA0K ICAgICAgIHsgIiBpbmV0ZCIsCSJUaGlzIG1hY2hpbmUgd2FudHMgdG8gcnVu IHRoZSBpbmV0IGRhZW1vbiIsDQotCWRtZW51VmFyQ2hlY2ssCWRtZW51VG9n Z2xlVmFyaWFibGUsIE5VTEwsICJpbmV0ZF9lbmFibGU9WUVTIiB9LA0KKwlk bWVudVZhckNoZWNrLAljb25maWdJbmV0ZCwgTlVMTCwgImluZXRkX2VuYWJs ZT1ZRVMiIH0sDQogICAgICAgeyAiIE5GUyBjbGllbnQiLAkiVGhpcyBtYWNo aW5lIHdpbGwgYmUgYW4gTkZTIGNsaWVudCIsDQogCWRtZW51VmFyQ2hlY2ss CWRtZW51VG9nZ2xlVmFyaWFibGUsIE5VTEwsICJuZnNfY2xpZW50X2VuYWJs ZT1ZRVMiIH0sDQogICAgICAgeyAiIE5GUyBzZXJ2ZXIiLAkiVGhpcyBtYWNo aW5lIHdpbGwgYmUgYW4gTkZTIHNlcnZlciIsDQpJbmRleDogdXNyLnNiaW4v c3lzaW5zdGFsbC9zeXNpbnN0YWxsLmgNCj09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT0NClJDUyBmaWxlOiAvaG9tZS9uY3ZzL3NyYy91c3Iuc2Jpbi9zeXNpbnN0 YWxsL3N5c2luc3RhbGwuaCx2DQpyZXRyaWV2aW5nIHJldmlzaW9uIDEuMjA5 DQpkaWZmIC11IC1yMS4yMDkgc3lzaW5zdGFsbC5oDQotLS0gdXNyLnNiaW4v c3lzaW5zdGFsbC9zeXNpbnN0YWxsLmgJMjAwMS8wNy8xNyAwNDowOTo1MAkx LjIwOQ0KKysrIHVzci5zYmluL3N5c2luc3RhbGwvc3lzaW5zdGFsbC5oCTIw MDEvMDgvMDEgMDM6MzY6MDYNCkBAIC00NDcsNiArNDQ3LDcgQEANCiBleHRl cm4gaW50CWNvbmZpZ1hEZXNrdG9wKGRpYWxvZ01lbnVJdGVtICpzZWxmKTsN CiBleHRlcm4gaW50CWNvbmZpZ1JvdXRlcihkaWFsb2dNZW51SXRlbSAqc2Vs Zik7DQogZXh0ZXJuIGludAljb25maWdQQ05GU0QoZGlhbG9nTWVudUl0ZW0g KnNlbGYpOw0KK2V4dGVybiBpbnQJY29uZmlnSW5ldGQoZGlhbG9nTWVudUl0 ZW0gKnNlbGYpOw0KIGV4dGVybiBpbnQJY29uZmlnTkZTU2VydmVyKGRpYWxv Z01lbnVJdGVtICpzZWxmKTsNCiBleHRlcm4gaW50CWNvbmZpZ1dyaXRlUkNf Y29uZihkaWFsb2dNZW51SXRlbSAqc2VsZik7DQogZXh0ZXJuIGludAljb25m aWdTZWN1cml0eVByb2ZpbGUoZGlhbG9nTWVudUl0ZW0gKnNlbGYpOw0KSW5k ZXg6IGV0Yy9pbmV0ZC5jb25mDQo9PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09DQpS Q1MgZmlsZTogL2hvbWUvbmN2cy9zcmMvZXRjL2luZXRkLmNvbmYsdg0KcmV0 cmlldmluZyByZXZpc2lvbiAxLjQ4DQpkaWZmIC11IC1yMS40OCBpbmV0ZC5j b25mDQotLS0gZXRjL2luZXRkLmNvbmYJMjAwMS8wMy8zMCAxMDoyNTo0MAkx LjQ4DQorKysgZXRjL2luZXRkLmNvbmYJMjAwMS8wOC8wMSAwMzozNjoxMA0K QEAgLTIsMTIgKzIsMTQgQEANCiAjDQogIyBJbnRlcm5ldCBzZXJ2ZXIgY29u ZmlndXJhdGlvbiBkYXRhYmFzZQ0KICMNCi0jIGRlZmluZSAqYm90aCogSVB2 NCBhbmQgSVB2NiBlbnRyaWVzIGZvciBkdWFsLXN0YWNrIHN1cHBvcnQuDQor IyBEZWZpbmUgKmJvdGgqIElQdjQgYW5kIElQdjYgZW50cmllcyBmb3IgZHVh bC1zdGFjayBzdXBwb3J0Lg0KKyMgVG8gZGlzYWJsZSBhIHNlcnZpY2UsIGNv bW1lbnQgaXQgb3V0IGJ5IHByZWZpeGluZyB0aGUgbGluZSB3aXRoICcjJy4N CisjIFRvIGVuYWJsZSBhIHNlcnZpY2UsIHJlbW92ZSB0aGUgJyMnIGF0IHRo ZSBiZWdpbm5pbmcgb2YgdGhlIGxpbmUuDQogIw0KLWZ0cAlzdHJlYW0JdGNw CW5vd2FpdAlyb290CS91c3IvbGliZXhlYy9mdHBkCWZ0cGQgLWwNCi1mdHAJ c3RyZWFtCXRjcDYJbm93YWl0CXJvb3QJL3Vzci9saWJleGVjL2Z0cGQJZnRw ZCAtbA0KLXRlbG5ldAlzdHJlYW0JdGNwCW5vd2FpdAlyb290CS91c3IvbGli ZXhlYy90ZWxuZXRkCXRlbG5ldGQNCi10ZWxuZXQJc3RyZWFtCXRjcDYJbm93 YWl0CXJvb3QJL3Vzci9saWJleGVjL3RlbG5ldGQJdGVsbmV0ZA0KKyNmdHAJ c3RyZWFtCXRjcAlub3dhaXQJcm9vdAkvdXNyL2xpYmV4ZWMvZnRwZAlmdHBk IC1sDQorI2Z0cAlzdHJlYW0JdGNwNglub3dhaXQJcm9vdAkvdXNyL2xpYmV4 ZWMvZnRwZAlmdHBkIC1sDQorI3RlbG5ldAlzdHJlYW0JdGNwCW5vd2FpdAly b290CS91c3IvbGliZXhlYy90ZWxuZXRkCXRlbG5ldGQNCisjdGVsbmV0CXN0 cmVhbQl0Y3A2CW5vd2FpdAlyb290CS91c3IvbGliZXhlYy90ZWxuZXRkCXRl bG5ldGQNCiAjc2hlbGwJc3RyZWFtCXRjcAlub3dhaXQJcm9vdAkvdXNyL2xp YmV4ZWMvcnNoZAlyc2hkDQogI3NoZWxsCXN0cmVhbQl0Y3A2CW5vd2FpdAly b290CS91c3IvbGliZXhlYy9yc2hkCXJzaGQNCiAjbG9naW4Jc3RyZWFtCXRj cAlub3dhaXQJcm9vdAkvdXNyL2xpYmV4ZWMvcmxvZ2luZAlybG9naW5kDQpA QCAtMTcsMTAgKzE5LDEzIEBADQogI2V4ZWMJc3RyZWFtCXRjcAlub3dhaXQJ cm9vdAkvdXNyL2xpYmV4ZWMvcmV4ZWNkCXJleGVjZA0KICN1dWNwZAlzdHJl YW0JdGNwCW5vd2FpdAlyb290CS91c3IvbGliZXhlYy91dWNwZAl1dWNwZA0K ICNubnRwCXN0cmVhbQl0Y3AJbm93YWl0CXVzZW5ldAkvdXNyL2xpYmV4ZWMv bm50cGQJbm50cGQNCisjDQogIyBydW4gY29tc2F0IGFzIHJvb3QgdG8gYmUg YWJsZSB0byBwcmludCBwYXJ0aWFsIG1haWxib3ggY29udGVudHMgdy8gYmlm ZiwNCiAjIG9yIHVzZSB0aGUgc2FmZXIgdHR5OnR0eSB0byBqdXN0IHByaW50 IHRoYXQgbmV3IG1haWwgaGFzIGJlZW4gcmVjZWl2ZWQuDQotY29tc2F0CWRn cmFtCXVkcAl3YWl0CXR0eTp0dHkJL3Vzci9saWJleGVjL2NvbXNhdAljb21z YXQNCi1udGFsawlkZ3JhbQl1ZHAJd2FpdAl0dHk6dHR5CS91c3IvbGliZXhl Yy9udGFsa2QJbnRhbGtkDQorI2NvbXNhdAlkZ3JhbQl1ZHAJd2FpdAl0dHk6 dHR5CS91c3IvbGliZXhlYy9jb21zYXQJY29tc2F0DQorIw0KKyMgbnRhbGsg aXMgcmVxdWlyZWQgZm9yIHRoZSAndGFsaycgdXRpbGl0eSB0byB3b3JrIGNv cnJlY3RseQ0KKyNudGFsawlkZ3JhbQl1ZHAJd2FpdAl0dHk6dHR5CS91c3Iv bGliZXhlYy9udGFsa2QJbnRhbGtkDQogI3RmdHAJZGdyYW0JdWRwCXdhaXQJ bm9ib2R5CS91c3IvbGliZXhlYy90ZnRwZAl0ZnRwZCAvdGZ0cGJvb3QNCiAj Ym9vdHBzCWRncmFtCXVkcAl3YWl0CXJvb3QJL3Vzci9saWJleGVjL2Jvb3Rw ZAlib290cGQNCiAjDQo= --0-909119149-996637714=:54921-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message