From owner-svn-doc-all@freebsd.org Sun Feb 18 00:29:39 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E50F1F211E6; Sun, 18 Feb 2018 00:29:38 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 9906C76780; Sun, 18 Feb 2018 00:29:38 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 79CD924142; Sun, 18 Feb 2018 00:29:38 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1I0TcvF061897; Sun, 18 Feb 2018 00:29:38 GMT (envelope-from bjk@FreeBSD.org) Received: (from bjk@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1I0Tc1W061896; Sun, 18 Feb 2018 00:29:38 GMT (envelope-from bjk@FreeBSD.org) Message-Id: <201802180029.w1I0Tc1W061896@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bjk set sender to bjk@FreeBSD.org using -f From: Benjamin Kaduk Date: Sun, 18 Feb 2018 00:29:38 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51427 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head X-SVN-Commit-Author: bjk X-SVN-Commit-Paths: head/en_US.ISO8859-1/htdocs/news/status X-SVN-Commit-Revision: 51427 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 00:29:39 -0000 Author: bjk Date: Sun Feb 18 00:29:38 2018 New Revision: 51427 URL: https://svnweb.freebsd.org/changeset/doc/51427 Log: Add 2017Q4 LibreNMS ZFS reporting entry from Zane Bowers-Hadley Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Fri Feb 16 19:08:42 2018 (r51426) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Sun Feb 18 00:29:38 2018 (r51427) @@ -120,4 +120,80 @@ veracity of any claims in these submissions.

+ + LibreNMS + + + + + Zane + Bowers-Hadley + + vvelox@vvelox.net + + + + + LibreNMS ZFS Addition + + + +

LibreNMS is an autodiscovering PHP/MySQL/SNMP-based network + monitoring solution which includes support for a wide range of + network hardware and operating systems, including Cisco, + Linux, &os;, Juniper, Brocade, Foundry, HP and many more.

+ +

Among other things, it can monitor applications and other + functionality running on a server via SNMP extensions. This + has been the area of focus for my present work.

+ +

ZFS support has been committed towards the end of December, + which was too late to make the December release, but it will + be in the January release.

+ +

This brings the ability to monitor ARC and pool information, + with each pool having its own separate set of graphs.

+ +

The ARC graphing is as below.

+ +
    +
  • ARC size in bytes
  • + +
  • ARC size, percent of max size
  • + +
  • ARC size breakdown
  • + +
  • ARC efficiency
  • + +
  • ARC cache hits by list
  • + +
  • ARC cache hits by type
  • + +
  • ARC cache misses by type
  • + +
  • ARC cache hits
  • + +
  • ARC cache misses
  • + +
  • ARC misc (deleted, skips, and recycle misses)
  • +
+ +

The pool tracking is comparatively much simpler, using the + output from zpool list.

+ +
    +
  • Pool Space
  • + +
  • Pool Capacity
  • + +
  • Pool Fragmentation
  • +
+ + + + Suggestions are needed for additional statistics or other + information to monitor, whether &os;-specific or + otherwise. + +
From owner-svn-doc-all@freebsd.org Sun Feb 18 00:37:59 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 99585F21EC1; Sun, 18 Feb 2018 00:37:59 +0000 (UTC) (envelope-from ler@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4986776F68; Sun, 18 Feb 2018 00:37:59 +0000 (UTC) (envelope-from ler@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 3F121242F7; Sun, 18 Feb 2018 00:37:59 +0000 (UTC) (envelope-from ler@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1I0bxWo067132; Sun, 18 Feb 2018 00:37:59 GMT (envelope-from ler@FreeBSD.org) Received: (from ler@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1I0bxMv067131; Sun, 18 Feb 2018 00:37:59 GMT (envelope-from ler@FreeBSD.org) Message-Id: <201802180037.w1I0bxMv067131@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ler set sender to ler@FreeBSD.org using -f From: Larry Rosenman Date: Sun, 18 Feb 2018 00:37:59 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51428 - head/share/pgpkeys X-SVN-Group: doc-head X-SVN-Commit-Author: ler X-SVN-Commit-Paths: head/share/pgpkeys X-SVN-Commit-Revision: 51428 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 00:37:59 -0000 Author: ler (ports committer) Date: Sun Feb 18 00:37:58 2018 New Revision: 51428 URL: https://svnweb.freebsd.org/changeset/doc/51428 Log: Remove former employer from PGP key. Modified: head/share/pgpkeys/ler.key Modified: head/share/pgpkeys/ler.key ============================================================================== --- head/share/pgpkeys/ler.key Sun Feb 18 00:29:38 2018 (r51427) +++ head/share/pgpkeys/ler.key Sun Feb 18 00:37:58 2018 (r51428) @@ -8,7 +8,6 @@ pub rsa2048/697C99B1AB48A77D 2017-01-10 [SC] [expire uid Larry Rosenman uid Larry Rosenman uid Larry Rosenman -uid Larry Rosenman sub rsa2048/FD0614DC2AD28ED9 2017-01-10 [E] [expires: 2020-01-10] ]]> @@ -51,27 +50,19 @@ oACF8G5i/40SeFuQqNCEmSsm8YjFxfsnC4gX5CdPB1GHhnR34nLZ5F VurW00Yp4RFe61SWyPCCdTlumQKHjqKPYcR4rCMLn9PslQxGnQhS2coKnZxaeYRC PSP8cnSCqIhmGGIKiKFg/z05hncjAJkOGJ8jeWRPSLXa/xl9yG8xP7QIYAiU7q0h FbgC3twKGuIW/w2m39BOfJXnU3OVHMqOt3plPCt2EAZKmxe3N4hUDwzPwtRaHWBg -tClMYXJyeSBSb3Nlbm1hbiA8bHJvc2VubWFuQG1vYmlsZWlyb24uY29tPokBVAQT -AQoAPhYhBB44JJ3nYVs7yYMFc2l8mbGrSKd9BQJZK1hjAhsDBQkFo5qABQsJCAcD -BRUKCQgLBRYDAgEAAh4BAheAAAoJEGl8mbGrSKd9JS4H/RPuydWH8uf1djUS527s -tOr078HM5wj0O1MqdtIbFBhHLJEaUjrpQWYpRC7EmYB/qSh+Bk7B42MBxfikCzaL -7rOgdC/lqwjNaUXUJsq4iYQdPVLexGOrMaWYIvRVOwoE0Ll1nJALvhXgjXwMF6nN -I5Fp0qfkngiRWjiIjoHff5Mw3RnRhSbXtKvqpfhh/0EUS+BKevzP7myQq9DbqiL4 -dm9/wQA/is2L7CHw5va/BGFrWSlgbGLmU9xWGY7yCwaIvuLBumGvmZHzYw9hZah9 -RkVRDrSHyGYGycZmawfhJkySnK1TvszfPZJtBsLpfYH085RriDOv/5UbDUL2wPxr -hz65AQ0EWHRQKgEIANFBBbDwjml86ruPEyVfQbb2EwxYXLItNsMFpbvr76Tm9zIR -BQueuYNvNsE4QP2bJi96+96tUTS9ACIkvmnuf0EE1CfOIUXVkTjllKMJPOUDaSQc -zhptpIg4WpBKc2faF/3gUA5U8Kd1VSxfmyNZVBSONPkQu6txWoMac255g+9OkES3 -7a7+VyQN/0EgjRHmcEUbZKSPWXM5lZ0WG2W+qZhrMQwv2DvWa8SeSiGH33Zy4Cr+ -ZjhRYrNVMxM7g4a1rUVXhiRaQj12CYPW0g84PNgvjI8BmzndfKmbDTxWliAO0GEF -N+9aK4Xu6vFCoP/TwK55BVGlmTEF85pEZQ4yKoMAEQEAAYkBPAQYAQoAJhYhBB44 -JJ3nYVs7yYMFc2l8mbGrSKd9BQJYdFAqAhsMBQkFo5qAAAoJEGl8mbGrSKd9+0cI -AI7qYD1l7vEFfBOdjrFIG6zl+lb0lajasojU9UGkROWunNP5K092h1GZ5PfX0DSe -aYdyWnuy2LEI4SIzYhL+uoErWpIS9bYb8pX1Xx7S1yNHG6WzRaY8QQ7+xZWZyrdS -7I222YqUAALIlZHBPBU42muSVxb00Gm1b4O4SEAUMRRDcHDUnRwFtODFG6LBiZT4 -EKp81W4FNr3xs7XYoexI8LLhwd/CCo7q4p4XjcroQ9ktF8oDDjobtcwc7RHXv8jd -/CuNHEWZ8xNOQ/4NIpAFeFTJEy+E7J/YChsVGJaAFjL5Lmj5hf+nl4F7gWr/6PtZ -T3vycikg+OwmHbg0Xqdq2og= -=meol +uQENBFh0UCoBCADRQQWw8I5pfOq7jxMlX0G29hMMWFyyLTbDBaW76++k5vcyEQUL +nrmDbzbBOED9myYvevverVE0vQAiJL5p7n9BBNQnziFF1ZE45ZSjCTzlA2kkHM4a +baSIOFqQSnNn2hf94FAOVPCndVUsX5sjWVQUjjT5ELurcVqDGnNueYPvTpBEt+2u +/lckDf9BII0R5nBFG2Skj1lzOZWdFhtlvqmYazEML9g71mvEnkohh992cuAq/mY4 +UWKzVTMTO4OGta1FV4YkWkI9dgmD1tIPODzYL4yPAZs53Xypmw08VpYgDtBhBTfv +WiuF7urxQqD/08CueQVRpZkxBfOaRGUOMiqDABEBAAGJATwEGAEKACYWIQQeOCSd +52FbO8mDBXNpfJmxq0infQUCWHRQKgIbDAUJBaOagAAKCRBpfJmxq0infftHCACO +6mA9Ze7xBXwTnY6xSBus5fpW9JWo2rKI1PVBpETlrpzT+StPdodRmeT319A0nmmH +clp7stixCOEiM2IS/rqBK1qSEvW2G/KV9V8e0tcjRxuls0WmPEEO/sWVmcq3UuyN +ttmKlAACyJWRwTwVONprklcW9NBptW+DuEhAFDEUQ3Bw1J0cBbTgxRuiwYmU+BCq +fNVuBTa98bO12KHsSPCy4cHfwgqO6uKeF43K6EPZLRfKAw46G7XMHO0R17/I3fwr +jRxFmfMTTkP+DSKQBXhUyRMvhOyf2AobFRiWgBYy+S5o+YX/p5eBe4Fq/+j7WU97 +8nIpIPjsJh24NF6natqI +=6U80 -----END PGP PUBLIC KEY BLOCK----- ]]> From owner-svn-doc-all@freebsd.org Sun Feb 18 00:57:55 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id E3254F23B66; Sun, 18 Feb 2018 00:57:54 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 973A577F42; Sun, 18 Feb 2018 00:57:54 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 91F102462D; Sun, 18 Feb 2018 00:57:54 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1I0vsuV077004; Sun, 18 Feb 2018 00:57:54 GMT (envelope-from bjk@FreeBSD.org) Received: (from bjk@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1I0vsfv077003; Sun, 18 Feb 2018 00:57:54 GMT (envelope-from bjk@FreeBSD.org) Message-Id: <201802180057.w1I0vsfv077003@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bjk set sender to bjk@FreeBSD.org using -f From: Benjamin Kaduk Date: Sun, 18 Feb 2018 00:57:54 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51429 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head X-SVN-Commit-Author: bjk X-SVN-Commit-Paths: head/en_US.ISO8859-1/htdocs/news/status X-SVN-Commit-Revision: 51429 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 18 Feb 2018 00:57:55 -0000 Author: bjk Date: Sun Feb 18 00:57:54 2018 New Revision: 51429 URL: https://svnweb.freebsd.org/changeset/doc/51429 Log: Add 2017Q4 RDAM stack entry from Meny Yossefi Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Sun Feb 18 00:37:58 2018 (r51428) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Sun Feb 18 00:57:54 2018 (r51429) @@ -196,4 +196,78 @@ otherwise. + + + RDMA stack update based on Linux v4.9 + + + + Mellanox Drivers Team + FreeBSD-drivers@mellanox.com + + + + + Subversion Commit Adding the Driver + + + +

An update to the &os; RDMA stack based on code from Linux + v4.9 was merged into &os; 12-CURRENT on November 4th, + including many bug fixes and new features with a focus on + RoCEv2 — Routable RoCE.

+ +

RDMA over Converged Ethernet (RoCE) is a network protocol + that leverages Remote Direct Memory Access (RDMA) capabilities + to accelerate communications between applications hosted on + clusters of servers and storage arrays. RoCE incorporates the + IBTA RDMA semantics to allow devices to perform direct memory + to memory transfers at the application level without involving + the host CPU. Both the transport processing and the memory + translation and placement are performed by hardware resulting + in lower latency, higher throughput, and better performance + compared to software based protocols.

+ +

RoCEv2 is the most recent version of RoCE, adding some routing + capabilities as both IP and UDP headers are included in the + packet format. To complete the RoCEv2 solution, Support for + ECN (Explicit Congestion Notification, lossy fabric) and PFC + (Priority Flow Control, lossless fabric) protocols with rate + limiting options will be added in the first quarter of + 2018.

+ +

This project also introduces the following updates:

+ +
    +
  • libibverbs, librdmacm, + libibumad and vendor-specific libraries + ported from the Linux rdma-core v15+
  • + +
  • InfiniBand diagnostic tools, + infiniband-diags, version 1.6.7
  • + +
  • InfiniBand subnet manager — OpenSM, version 3.3.20+
  • + +
  • LinuxKPI support
  • +
+ +

Important notes:

+ +
    +
  • GPL-only (non dual-licensed) portions of the Linux code were either + excluded or written from scratch under a BSD license by + &a.hselasky;.
  • + +
  • The code has been tested by several RDMA vendors + that also support iWARP.
  • +
+ + + Mellanox Technologies + + + Add ECN (Explicit Congestion Notification) and PFC + (Priority Flow Control) support. + +
From owner-svn-doc-all@freebsd.org Mon Feb 19 05:31:43 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id A02ADF03833; Mon, 19 Feb 2018 05:31:43 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 53B1D811C7; Mon, 19 Feb 2018 05:31:43 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 4EC8E16651; Mon, 19 Feb 2018 05:31:43 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1J5Vhf0037241; Mon, 19 Feb 2018 05:31:43 GMT (envelope-from bjk@FreeBSD.org) Received: (from bjk@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1J5Vhpf037240; Mon, 19 Feb 2018 05:31:43 GMT (envelope-from bjk@FreeBSD.org) Message-Id: <201802190531.w1J5Vhpf037240@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bjk set sender to bjk@FreeBSD.org using -f From: Benjamin Kaduk Date: Mon, 19 Feb 2018 05:31:43 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51430 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head X-SVN-Commit-Author: bjk X-SVN-Commit-Paths: head/en_US.ISO8859-1/htdocs/news/status X-SVN-Commit-Revision: 51430 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Feb 2018 05:31:43 -0000 Author: bjk Date: Mon Feb 19 05:31:43 2018 New Revision: 51430 URL: https://svnweb.freebsd.org/changeset/doc/51430 Log: Add 2017Q4 portmgr entry from rene Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Sun Feb 18 00:57:54 2018 (r51429) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Mon Feb 19 05:31:43 2018 (r51430) @@ -270,4 +270,80 @@ (Priority Flow Control) support. + + + Ports Collection + + + + + René + Ladan + + portmgr-secretary@FreeBSD.org + + + + &os; Ports Management Team + portmgr@FreeBSD.org + + + + + About &os; Ports + Contributing to ports + &os; Ports Monitoring + Ports Management Team + &os; Ports Managemnet Team on Twitter (@FreeBSD_portmgr) + &os; Ports Management Team on Facebook + &os; Ports Management Team on Google+ + + + +

The last quarter of 2017 ended with over 27,000 ports in the + repository. There are currently just under 2,800 open ports + PRs with 685 of them unassigned. There were 6,700 commits + made by 178 committers. The statistics did not change much + since last quarter, however the number of unassigned PRs + dropped slightly.

+ +

This quarter, we welcomed Yuri Victorovich (yuri@), Jason + Bacon (jwb@), and Wolfram Scheider (wosch@) as new or + returning port committers. No commit bits were taken in for + safekeeping.

+ +

Portmgr, together with postmaster@, changed the policy of the + FreeBSD-ports@ mailing list. It is now required to be + subscribed to the list before one can post to it. This will + help in reducing spam on this list and help users finding + better questions to their answers while browsing the list + archive.

+ +

This quarter ports "flavors" went live. Flavors + can be used to build multiple variations of a port, for + example py27-sarge and py36-sarge. All + Python ports and some other ports are now flavored. Other + uses of flavors could be including or excluding X11 + (foo vs foo-x11 or foo-nox11) or + selecting the printer paper size (A4 vs letter).

+ +

USES=fmake has been removed as it was no longer + useful.

+ +

Some default versions got updated: Ruby to 2.4 and Samba to + 4.6. Firefox got updated to version 57.0.3 and pkg to + 1.10.3.

+ +

During the last quarter, antoine@ ran 33 exp-runs to validate changes + to the base system, fix Qt5 ports, test Python flavors and other port + updates, and make rubygem port builds reproducible.

+ + + + Clang 6 is being imported into base. There is a PR that keeps track + of ports failing with this compiler, see PR 224669. If you use + any ports mentioned here, please consider fixing them. + +
From owner-svn-doc-all@freebsd.org Mon Feb 19 17:00:07 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 026E8F100AE; Mon, 19 Feb 2018 17:00:07 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id A94647F1DC; Mon, 19 Feb 2018 17:00:06 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id A40721D3DE; Mon, 19 Feb 2018 17:00:06 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1JH065F016324; Mon, 19 Feb 2018 17:00:06 GMT (envelope-from bjk@FreeBSD.org) Received: (from bjk@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1JH06Ol016323; Mon, 19 Feb 2018 17:00:06 GMT (envelope-from bjk@FreeBSD.org) Message-Id: <201802191700.w1JH06Ol016323@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bjk set sender to bjk@FreeBSD.org using -f From: Benjamin Kaduk Date: Mon, 19 Feb 2018 17:00:06 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51431 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head X-SVN-Commit-Author: bjk X-SVN-Commit-Paths: head/en_US.ISO8859-1/htdocs/news/status X-SVN-Commit-Revision: 51431 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Feb 2018 17:00:07 -0000 Author: bjk Date: Mon Feb 19 17:00:06 2018 New Revision: 51431 URL: https://svnweb.freebsd.org/changeset/doc/51431 Log: Add 2017Q4 PowerNV entry from Wojciech Macek Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Mon Feb 19 05:31:43 2018 (r51430) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Mon Feb 19 17:00:06 2018 (r51431) @@ -346,4 +346,109 @@ any ports mentioned here, please consider fixing them. + + + &os; on PowerNV (ppc64) + + + + + Patryk + Duda + + pdk@semihalf.com + + + + + Wojciech + Macek + + wma@FreeBSD.org + wma@semihalf.com + + + + + Michal + Stanek + + mst@semihalf.com + + + + + Nathan + Whitehorn + + nw@FreeBSD.org + + + + + Semihalf PowerNV Official Repository + Skiboot Repository with the Latest OPAL Firmware + + + +

Semihalf is happy to announce that &os; is running on an IBM + Power8 processor. This project is a continuation of work done + by Nathan Whitehorn, who provided a basic support for a + PowerNV emulator.

+ +

The IBM Power8 family of CPUs offers superior performance + compared to previous CPUs in the Power series. It provides + complete NUMA support with up to 128 execution threads in + two-socket system (2 sockets, 8 cores per socket, 8 threads + per core). All I/O communication is handled by an integrated + PCIe interface equipped with multiple IOMMU engines.

+ +

The support for Power8 system running &os; in a non-virtualized + environment contains:

+ +
    +
  • A generic driver for the OPAL hypervisor
  • + +
  • kboot loader modifications to allow for a + little-endian to load a big-endian kernel ELF image
  • + +
  • An update to the ELF parser in skiboot, allowing + it to understand the &os; kernel file format
  • + +
  • Basic support for the PowerNV architecture, including + modes of operation, memory-management unit (MMU), and + interrupt controller
  • + +
  • SMP operation with up to 128 CPUs
  • + +
  • PCI host bridge subsystem driver, including IOMMU mapping + for external busses
  • + +
  • PCIe host controller driver
  • + +
  • USB-3.0 XHCI driver
  • + +
  • Reworked several drivers to be big-endian compatible
  • + +
  • Chelsio cxgbe(4) 10/25G network adapter
  • + +
  • NVMe SSD driver
  • +
+ +

All work is available in the linked GitHub repository. The + process of getting this work into the official repository has + already started and eventually, all commits will be integrated + into &os;-12 CURRENT.

+ + + IBM + + The FreeBSD Foundation + + QCM Technologies + + Semihalf + + Limelight Networks (Kevin Bowling) +
From owner-svn-doc-all@freebsd.org Mon Feb 19 18:15:15 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id C27A9F175E2; Mon, 19 Feb 2018 18:15:14 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 711EA83D84; Mon, 19 Feb 2018 18:15:14 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 6B8671E0B9; Mon, 19 Feb 2018 18:15:14 +0000 (UTC) (envelope-from bjk@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1JIFEWc057254; Mon, 19 Feb 2018 18:15:14 GMT (envelope-from bjk@FreeBSD.org) Received: (from bjk@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1JIFEq2057253; Mon, 19 Feb 2018 18:15:14 GMT (envelope-from bjk@FreeBSD.org) Message-Id: <201802191815.w1JIFEq2057253@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bjk set sender to bjk@FreeBSD.org using -f From: Benjamin Kaduk Date: Mon, 19 Feb 2018 18:15:14 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51432 - head/en_US.ISO8859-1/htdocs/news/status X-SVN-Group: doc-head X-SVN-Commit-Author: bjk X-SVN-Commit-Paths: head/en_US.ISO8859-1/htdocs/news/status X-SVN-Commit-Revision: 51432 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Feb 2018 18:15:15 -0000 Author: bjk Date: Mon Feb 19 18:15:14 2018 New Revision: 51432 URL: https://svnweb.freebsd.org/changeset/doc/51432 Log: Add 2017Q4 core@ entry from matthew Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Modified: head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml ============================================================================== --- head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Mon Feb 19 17:00:06 2018 (r51431) +++ head/en_US.ISO8859-1/htdocs/news/status/report-2017-10-2017-12.xml Mon Feb 19 18:15:14 2018 (r51432) @@ -451,4 +451,119 @@ Limelight Networks (Kevin Bowling) + + + The &os; Core Team + + + + &os; Core Team + core@FreeBSD.org + + + + +

The most significant action by Core during the final quarter of + 2017 was the approval of the new Code of Conduct after a long + period of development and review. Core added a preamble to the + text emphasizing the principles behind the Code of Conduct over + detailed interpretation of the rules. The new code delegates + the handling of complaints to a Code of Conduct review board; we + are currently finalizing practical arrangements around setting + up the review board before announcing the adoption of the new + code.

+ +

John Hixson of iXsystems was proposed, and accepted, as the + first new Project Member under the new rules adopted earlier + this year. Core feels that John is an excellent choice as the + first member, and looks forwards to adding many other project + members in the future.

+ +

There have been some significant changes around the Security + Officer and secteam. Gordon Tetlow has formally taken over the + role of Security Officer from Xin Li. Xin remains an active + member of secteam, and Ed Maste has now joined secteam as well. +

+ +

Gordon joined Secteam at a point where they were struggling + with handling the widely publicised WPA2 vulnerability + (&os;-SA-17:07.wpa), and had an immediate impact simply by + making a public response, even though the technical fixes were + not entirely ready. Gordon's remit from Core is to examine how + Secteam operates and work out how to manage their case-load while + avoiding the problems of burn-out and overload that have impeded + Secteam's effectiveness in the past.

+ +

One of the key problems is that security problems are handled + in a completely separate bug handling system to general PRs. + This is unusual compared to most similar OS projects, and leads + to difficulties in bringing in available talent from amongst the + entire body of &os; developers in order to be able to share + the load and react quickly. Secteam is working with Bugmeister + to enable suitable access controls within our main Bugzilla + instance, so that we can both conform to bug embargoes and other + confidentiality requirements but also make it easy to solicit + fixes from a wider range of developers and to transition + security bugs to open handling like any other bug once there is + no more need for secrecy.

+ +

This quarter also saw the creation of a 10.4-RELEASE branch, + and the extension of the lifetime of 11.0-RELEASE by one month. + The former was in response to requests from a number of + prominent &os; consumers, who needed access to new + functionality but could not immediately upgrade to 11.0-RELEASE. + Releasing 10.4 permitted this without making a significant + extension to the lifetime of the 10.x release series.

+ +

The extension to 11.0-RELEASE EoL was a consequence of failing + to communicate the impending switch to 11.1-RELEASE in good + time. Since this was the first minor version transition under + the new release schedule, in discussion with Secteam and Release + Engineering, we concluded that a delay was necessary to allow + the userbase sufficient warning to upgrade before 11.0-RELEASE + went out of support. This was not a cost-free decision: as + Portmgr reminded us, this affected package building and delayed + implementation of some important updates.

+ +

&os; will be participating in Google Summer of Code again in + 2018. This has become one of our most important routes for + recruiting the new, young developers vital for ensuring the + longevity of the project.

+ +

Pedro Giffuni proposed adopting the SPDX license tagging system + as used by many other projects, including the Linux kernel, in + order to facilitate programatic license management by downstream + consumers. Core agreed enthusiasticly.

+ +

Core has agreed to promote the MIPS architecture to Tier-2 + status.

+ +

A proposal to enhance security by discontinuing HTTP or other + unencrypted channels for all &os; services was not something + Core could approve for the immediate future. While switching to + HTTPS has obvious security benefits, we would need to distribute + appropriate CA certificates as part of the base system and make + certain other changes before this could be achieved relatively + seamlessly. All &os; services are already available over + secure channels, but our documentation did not necessarily + present secure access methods as the preferred routes. Action + is being taken to address the documentation, and this question + will be revisited once the necessary groundwork is in place.

+ +

The fortune(6) program has long been a focus for controversy, + and previous Cores have needed to impose a lock on updates to + the fortune data files. The argument blew up again over the + re-deletion of a number of apparently pro-Nazi quotations. Core + decided that enough was enough and removed all of the fortune + data files except for FreeBSD-tips.dat from the base system. + The tacit approval of many questionable or controversial + opinions by shipping them as a part of the base system is a + liability the project simply cannot afford.

+ +

No new commit bits were issued during this quarter, but we did + see two former committers: Sean Eric Fagan and Wolfram + Schneider, reactivate their commit bits. One committer, Ngie + Cooper, has handed back their bit.

+ +
From owner-svn-doc-all@freebsd.org Mon Feb 19 19:42:46 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 464DBF1E17B; Mon, 19 Feb 2018 19:42:46 +0000 (UTC) (envelope-from jkois@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id E8BCD8795E; Mon, 19 Feb 2018 19:42:45 +0000 (UTC) (envelope-from jkois@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id E22611EF08; Mon, 19 Feb 2018 19:42:45 +0000 (UTC) (envelope-from jkois@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1JJgj0D001899; Mon, 19 Feb 2018 19:42:45 GMT (envelope-from jkois@FreeBSD.org) Received: (from jkois@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1JJgj12001898; Mon, 19 Feb 2018 19:42:45 GMT (envelope-from jkois@FreeBSD.org) Message-Id: <201802191942.w1JJgj12001898@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: jkois set sender to jkois@FreeBSD.org using -f From: Johann Kois Date: Mon, 19 Feb 2018 19:42:45 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51433 - head/de_DE.ISO8859-1/share/xml X-SVN-Group: doc-head X-SVN-Commit-Author: jkois X-SVN-Commit-Paths: head/de_DE.ISO8859-1/share/xml X-SVN-Commit-Revision: 51433 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Feb 2018 19:42:46 -0000 Author: jkois Date: Mon Feb 19 19:42:45 2018 New Revision: 51433 URL: https://svnweb.freebsd.org/changeset/doc/51433 Log: r51216 -> r51424 MFde: Resync the project news Modified: head/de_DE.ISO8859-1/share/xml/news.xml Modified: head/de_DE.ISO8859-1/share/xml/news.xml ============================================================================== --- head/de_DE.ISO8859-1/share/xml/news.xml Mon Feb 19 18:15:14 2018 (r51432) +++ head/de_DE.ISO8859-1/share/xml/news.xml Mon Feb 19 19:42:45 2018 (r51433) @@ -4,7 +4,7 @@ -Sitemap | Legal Notices | © 1995–2017 The FreeBSD Project. Alle Rechte vorbehalten.'> +Sitemap | Legal Notices | © 1995–2018 The FreeBSD Project. Alle Rechte vorbehalten.'> Startseite   |   Ansprechpartner   |   Legal   |   From owner-svn-doc-all@freebsd.org Mon Feb 19 20:11:33 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AE94CF20672; Mon, 19 Feb 2018 20:11:33 +0000 (UTC) (envelope-from jkois@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 630F268F57; Mon, 19 Feb 2018 20:11:33 +0000 (UTC) (envelope-from jkois@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 5C6581F2A6; Mon, 19 Feb 2018 20:11:33 +0000 (UTC) (envelope-from jkois@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1JKBX35013728; Mon, 19 Feb 2018 20:11:33 GMT (envelope-from jkois@FreeBSD.org) Received: (from jkois@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1JKBXv0013727; Mon, 19 Feb 2018 20:11:33 GMT (envelope-from jkois@FreeBSD.org) Message-Id: <201802192011.w1JKBXv0013727@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: jkois set sender to jkois@FreeBSD.org using -f From: Johann Kois Date: Mon, 19 Feb 2018 20:11:33 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51435 - head/de_DE.ISO8859-1/share/xml X-SVN-Group: doc-head X-SVN-Commit-Author: jkois X-SVN-Commit-Paths: head/de_DE.ISO8859-1/share/xml X-SVN-Commit-Revision: 51435 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Feb 2018 20:11:33 -0000 Author: jkois Date: Mon Feb 19 20:11:33 2018 New Revision: 51435 URL: https://svnweb.freebsd.org/changeset/doc/51435 Log: s/2018/2017/ Modified: head/de_DE.ISO8859-1/share/xml/news.xml Modified: head/de_DE.ISO8859-1/share/xml/news.xml ============================================================================== --- head/de_DE.ISO8859-1/share/xml/news.xml Mon Feb 19 19:53:27 2018 (r51434) +++ head/de_DE.ISO8859-1/share/xml/news.xml Mon Feb 19 20:11:33 2018 (r51435) @@ -86,7 +86,7 @@ Informationen zu den Meltdown- und Spectre-Angriffen -

&os; wurde Ende Dezember 2018 über die &os; wurde Ende Dezember 2017 über die Meltdown und Spectre-Angriffe From owner-svn-doc-all@freebsd.org Tue Feb 20 13:37:25 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 797CBF02824; Tue, 20 Feb 2018 13:37:25 +0000 (UTC) (envelope-from pi@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 28C6977A01; Tue, 20 Feb 2018 13:37:25 +0000 (UTC) (envelope-from pi@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 2291A2096; Tue, 20 Feb 2018 13:37:25 +0000 (UTC) (envelope-from pi@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1KDbOdc038220; Tue, 20 Feb 2018 13:37:24 GMT (envelope-from pi@FreeBSD.org) Received: (from pi@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1KDbOmR038219; Tue, 20 Feb 2018 13:37:24 GMT (envelope-from pi@FreeBSD.org) Message-Id: <201802201337.w1KDbOmR038219@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: pi set sender to pi@FreeBSD.org using -f From: Kurt Jaeger Date: Tue, 20 Feb 2018 13:37:24 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51436 - head/en_US.ISO8859-1/htdocs/gnome X-SVN-Group: doc-head X-SVN-Commit-Author: pi X-SVN-Commit-Paths: head/en_US.ISO8859-1/htdocs/gnome X-SVN-Commit-Revision: 51436 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 20 Feb 2018 13:37:25 -0000 Author: pi (ports committer) Date: Tue Feb 20 13:37:24 2018 New Revision: 51436 URL: https://svnweb.freebsd.org/changeset/doc/51436 Log: revise information on Gnome web page on www.freebsd.org PR: 213518 Submitted by: linimon Approved by: wblock Modified: head/en_US.ISO8859-1/htdocs/gnome/index.xsl Modified: head/en_US.ISO8859-1/htdocs/gnome/index.xsl ============================================================================== --- head/en_US.ISO8859-1/htdocs/gnome/index.xsl Mon Feb 19 20:11:33 2018 (r51435) +++ head/en_US.ISO8859-1/htdocs/gnome/index.xsl Tue Feb 20 13:37:24 2018 (r51436) @@ -112,8 +112,8 @@ for how to geting stuff -->

State of the port:

GNOME, MATE, and Cinnamon for &os; are currently - fully supported on 10.2, 10.1, and 10-STABLE while - support for 9.3, 9-STABLE, and 11.0-CURRENT is provided + fully supported on 11.1, 11-STABLE, and 10.4, + while support for 12.0-CURRENT is provided on a best effort basis.

@@ -129,10 +129,12 @@ for how to geting stuff -->
  • GNOME Project
  • GNOME Project news
  • GNOME development platform
  • +
  • Planet GNOME (blogs)
  • MATE Project
  • -
  • Cinnamon Project
  • +
  • Cinnamon Project
  • Related Projects

    From owner-svn-doc-all@freebsd.org Wed Feb 21 18:21:36 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 83A54F1BEB2; Wed, 21 Feb 2018 18:21:36 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 388596A20D; Wed, 21 Feb 2018 18:21:36 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 3363D1C085; Wed, 21 Feb 2018 18:21:36 +0000 (UTC) (envelope-from bcr@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1LILacQ018577; Wed, 21 Feb 2018 18:21:36 GMT (envelope-from bcr@FreeBSD.org) Received: (from bcr@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1LILaVP018576; Wed, 21 Feb 2018 18:21:36 GMT (envelope-from bcr@FreeBSD.org) Message-Id: <201802211821.w1LILaVP018576@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: bcr set sender to bcr@FreeBSD.org using -f From: Benedict Reuschling Date: Wed, 21 Feb 2018 18:21:36 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51437 - head/en_US.ISO8859-1/books/handbook/x11 X-SVN-Group: doc-head X-SVN-Commit-Author: bcr X-SVN-Commit-Paths: head/en_US.ISO8859-1/books/handbook/x11 X-SVN-Commit-Revision: 51437 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 21 Feb 2018 18:21:36 -0000 Author: bcr Date: Wed Feb 21 18:21:35 2018 New Revision: 51437 URL: https://svnweb.freebsd.org/changeset/doc/51437 Log: Fix the path to the XDM configuration file. It now resides in /usr/local/etc/X11/xdm/xdm-config. Submitted by: rcgfuller@gmail.com Modified: head/en_US.ISO8859-1/books/handbook/x11/chapter.xml Modified: head/en_US.ISO8859-1/books/handbook/x11/chapter.xml ============================================================================== --- head/en_US.ISO8859-1/books/handbook/x11/chapter.xml Tue Feb 20 13:37:24 2018 (r51436) +++ head/en_US.ISO8859-1/books/handbook/x11/chapter.xml Wed Feb 21 18:21:35 2018 (r51437) @@ -1388,7 +1388,7 @@ EndSection To configure XDM to listen for any remote connection, comment out the DisplayManager.requestPort line in - /usr/local/lib/X11/xdm/xdm-config by + /usr/local/etc/X11/xdm/xdm-config by putting a ! in front of it: ! SECURITY: do not listen for XDMCP or Chooser requests From owner-svn-doc-all@freebsd.org Thu Feb 22 17:15:31 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id DF651F183A7; Thu, 22 Feb 2018 17:15:30 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8CBF16E1EC; Thu, 22 Feb 2018 17:15:30 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 8307127EF; Thu, 22 Feb 2018 17:15:30 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1MHFUTg017117; Thu, 22 Feb 2018 17:15:30 GMT (envelope-from dbaio@FreeBSD.org) Received: (from dbaio@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1MHFUTc017116; Thu, 22 Feb 2018 17:15:30 GMT (envelope-from dbaio@FreeBSD.org) Message-Id: <201802221715.w1MHFUTc017116@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: dbaio set sender to dbaio@FreeBSD.org using -f From: "Danilo G. Baio" Date: Thu, 22 Feb 2018 17:15:30 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51438 - head/en_US.ISO8859-1/articles/contributors X-SVN-Group: doc-head X-SVN-Commit-Author: dbaio X-SVN-Commit-Paths: head/en_US.ISO8859-1/articles/contributors X-SVN-Commit-Revision: 51438 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Feb 2018 17:15:31 -0000 Author: dbaio (ports committer) Date: Thu Feb 22 17:15:30 2018 New Revision: 51438 URL: https://svnweb.freebsd.org/changeset/doc/51438 Log: Add Mathieu Simon to contributors Maintainer of net-mgmt/lldpd PR: 225595 Modified: head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Modified: head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml ============================================================================== --- head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Wed Feb 21 18:21:35 2018 (r51437) +++ head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Thu Feb 22 17:15:30 2018 (r51438) @@ -6742,6 +6742,11 @@ + Mathieu Simon + freebsd@simweb.ch + + + Mats Lofkvist mal@algonet.se From owner-svn-doc-all@freebsd.org Thu Feb 22 17:53:46 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 9E86CF1B4FA; Thu, 22 Feb 2018 17:53:46 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4A38F6FC65; Thu, 22 Feb 2018 17:53:46 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 453D02E8C; Thu, 22 Feb 2018 17:53:46 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1MHrkUm036826; Thu, 22 Feb 2018 17:53:46 GMT (envelope-from dbaio@FreeBSD.org) Received: (from dbaio@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1MHrk2O036825; Thu, 22 Feb 2018 17:53:46 GMT (envelope-from dbaio@FreeBSD.org) Message-Id: <201802221753.w1MHrk2O036825@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: dbaio set sender to dbaio@FreeBSD.org using -f From: "Danilo G. Baio" Date: Thu, 22 Feb 2018 17:53:46 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51439 - head/en_US.ISO8859-1/articles/contributors X-SVN-Group: doc-head X-SVN-Commit-Author: dbaio X-SVN-Commit-Paths: head/en_US.ISO8859-1/articles/contributors X-SVN-Commit-Revision: 51439 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Feb 2018 17:53:46 -0000 Author: dbaio (ports committer) Date: Thu Feb 22 17:53:45 2018 New Revision: 51439 URL: https://svnweb.freebsd.org/changeset/doc/51439 Log: Add Eero Hänninen to contributors Maintainer of: devel/py-daemons devel/py-python-statsd textproc/py-regex www/mod_qos x11-toolkits/py-xlib PR: 226115 Modified: head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Modified: head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml ============================================================================== --- head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Thu Feb 22 17:15:30 2018 (r51438) +++ head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Thu Feb 22 17:53:45 2018 (r51439) @@ -2969,6 +2969,11 @@ + Eero Hänninen + fax@nohik.ee + + + Ege Rekk aagero@aage.priv.no From owner-svn-doc-all@freebsd.org Thu Feb 22 19:24:03 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id B14C2F236B1; Thu, 22 Feb 2018 19:24:03 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 5B4B573C96; Thu, 22 Feb 2018 19:24:03 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 5642841B9; Thu, 22 Feb 2018 19:24:03 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1MJO3ig088542; Thu, 22 Feb 2018 19:24:03 GMT (envelope-from dbaio@FreeBSD.org) Received: (from dbaio@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1MJO3oQ088541; Thu, 22 Feb 2018 19:24:03 GMT (envelope-from dbaio@FreeBSD.org) Message-Id: <201802221924.w1MJO3oQ088541@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: dbaio set sender to dbaio@FreeBSD.org using -f From: "Danilo G. Baio" Date: Thu, 22 Feb 2018 19:24:03 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51440 - head/en_US.ISO8859-1/articles/contributors X-SVN-Group: doc-head X-SVN-Commit-Author: dbaio X-SVN-Commit-Paths: head/en_US.ISO8859-1/articles/contributors X-SVN-Commit-Revision: 51440 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 22 Feb 2018 19:24:03 -0000 Author: dbaio (ports committer) Date: Thu Feb 22 19:24:03 2018 New Revision: 51440 URL: https://svnweb.freebsd.org/changeset/doc/51440 Log: Update contributor Gustau Pérez Now contrib.additional.xml hasn't unicode characters Modified: head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Modified: head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml ============================================================================== --- head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Thu Feb 22 17:53:45 2018 (r51439) +++ head/en_US.ISO8859-1/articles/contributors/contrib.additional.xml Thu Feb 22 19:24:03 2018 (r51440) @@ -3808,7 +3808,7 @@ - Gustau Pérez + Gustau Pérez gustau.perez@gmail.com From owner-svn-doc-all@freebsd.org Fri Feb 23 21:25:33 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4981BF216A9; Fri, 23 Feb 2018 21:25:33 +0000 (UTC) (envelope-from rene@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id F0FB379AAA; Fri, 23 Feb 2018 21:25:32 +0000 (UTC) (envelope-from rene@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id E7A3E1BF29; Fri, 23 Feb 2018 21:25:32 +0000 (UTC) (envelope-from rene@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1NLPWBp080216; Fri, 23 Feb 2018 21:25:32 GMT (envelope-from rene@FreeBSD.org) Received: (from rene@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1NLPWBP080214; Fri, 23 Feb 2018 21:25:32 GMT (envelope-from rene@FreeBSD.org) Message-Id: <201802232125.w1NLPWBP080214@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rene set sender to rene@FreeBSD.org using -f From: Rene Ladan Date: Fri, 23 Feb 2018 21:25:32 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51441 - head/en_US.ISO8859-1/articles/contributors X-SVN-Group: doc-head X-SVN-Commit-Author: rene X-SVN-Commit-Paths: head/en_US.ISO8859-1/articles/contributors X-SVN-Commit-Revision: 51441 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 23 Feb 2018 21:25:33 -0000 Author: rene Date: Fri Feb 23 21:25:32 2018 New Revision: 51441 URL: https://svnweb.freebsd.org/changeset/doc/51441 Log: Move tabthorpe and vg to the Developer Alumni section. With hat: portmgr-secretary Modified: head/en_US.ISO8859-1/articles/contributors/contrib.committers.xml head/en_US.ISO8859-1/articles/contributors/contrib.develalumni.xml Modified: head/en_US.ISO8859-1/articles/contributors/contrib.committers.xml ============================================================================== --- head/en_US.ISO8859-1/articles/contributors/contrib.committers.xml Thu Feb 22 19:24:03 2018 (r51440) +++ head/en_US.ISO8859-1/articles/contributors/contrib.committers.xml Fri Feb 23 21:25:32 2018 (r51441) @@ -9,10 +9,6 @@ xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"> - &a.tabthorpe.email; - - - &a.eadler.email; @@ -470,10 +466,6 @@ xmlns:xlink="http://www.w3.org/1999/xlink" version="5. &a.mjg.email; - - - - &a.vg.email; Modified: head/en_US.ISO8859-1/articles/contributors/contrib.develalumni.xml ============================================================================== --- head/en_US.ISO8859-1/articles/contributors/contrib.develalumni.xml Thu Feb 22 19:24:03 2018 (r51440) +++ head/en_US.ISO8859-1/articles/contributors/contrib.develalumni.xml Fri Feb 23 21:25:32 2018 (r51441) @@ -4,6 +4,14 @@ xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"> + &a.tabthorpe.email; (2007 - 2018) + + + + &a.vg.email; (2013 - 2018) + + + &a.kevlo.email; (1999 - 2017) From owner-svn-doc-all@freebsd.org Sat Feb 24 08:08:58 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 0FFEDF219D3; Sat, 24 Feb 2018 08:08:58 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id AEFCA74465; Sat, 24 Feb 2018 08:08:57 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id A9A5A22CC0; Sat, 24 Feb 2018 08:08:57 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1O88vuN001814; Sat, 24 Feb 2018 08:08:57 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1O88veh001813; Sat, 24 Feb 2018 08:08:57 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201802240808.w1O88veh001813@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI Date: Sat, 24 Feb 2018 08:08:57 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51442 - head/ja_JP.eucJP/books/handbook/security X-SVN-Group: doc-head X-SVN-Commit-Author: ryusuke X-SVN-Commit-Paths: head/ja_JP.eucJP/books/handbook/security X-SVN-Commit-Revision: 51442 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Feb 2018 08:08:58 -0000 Author: ryusuke Date: Sat Feb 24 08:08:57 2018 New Revision: 51442 URL: https://svnweb.freebsd.org/changeset/doc/51442 Log: - Merge the following from the English version: r41645 -> r42014 head/ja_JP.eucJP/books/handbook/security/chapter.xml Modified: head/ja_JP.eucJP/books/handbook/security/chapter.xml Modified: head/ja_JP.eucJP/books/handbook/security/chapter.xml ============================================================================== --- head/ja_JP.eucJP/books/handbook/security/chapter.xml Fri Feb 23 21:25:32 2018 (r51441) +++ head/ja_JP.eucJP/books/handbook/security/chapter.xml Sat Feb 24 08:08:57 2018 (r51442) @@ -3,7 +3,7 @@ The FreeBSD Documentation Project The FreeBSD Japanese Documentation Project - Original revision: r41645 + Original revision: r42014 $FreeBSD$ --> @@ -36,26 +36,22 @@ &os; ¤Ë¤ª¤±¤ë¹âÅÙ¤ÊÏÃÂê¤Ë¤Ä¤¤¤Æ´Êñ¤ËÀâÌÀ¤·¤Þ¤¹¡£ ¤³¤³¤Ç°·¤¦ÏÃÂê¤Î¿¤¯¤Ï¡¢ °ìÈÌŪ¤Ê¥·¥¹¥Æ¥à¤ä¥¤¥ó¥¿¡¼¥Í¥Ã¥È¥»¥­¥å¥ê¥Æ¥£¤Ë¤â¤¢¤Æ¤Ï¤Þ¤ê¤Þ¤¹¡£ - ¥¤¥ó¥¿¡¼¥Í¥Ã¥È¤Ï¤â¤Ï¤ä¡¢Ã¯¤â¤¬¿ÆÀÚ¤ÊÎٿͤǤ¢¤í¤¦¤È¤¹¤ë - ͧ¹¥Åª¤Ê ¾ì¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£ - ¤¢¤Ê¤¿¤Î¥·¥¹¥Æ¥à¤ò°ÂÁ´¤ËÊݤĤ³¤È¤Ï¡¢ - ¤¢¤Ê¤¿¤Î¥Ç¡¼¥¿¡¢ÃÎŪºâ»º¡¢»þ´Ö¡¢¤½¤Î¾¤ò¡¢ + ¥·¥¹¥Æ¥à¤ò°ÂÁ´¤ËÊݤĤ³¤È¤Ï¡¢¥Ç¡¼¥¿¡¢ÃÎŪºâ»º¡¢»þ´Ö¡¢¤½¤Î¾¤ò¡¢ ¥Ï¥Ã¥«¡¼¤ä¤½¤ÎƱÎफ¤é¼é¤ë¤¿¤á¤Ë¤Ï·ç¤«¤»¤Þ¤»¤ó¡£ &os; ¤Ï¡¢ - ¥·¥¹¥Æ¥à¤È¥Í¥Ã¥È¥ï¡¼¥¯¤ÎÀ°¹çÀ­¤È°ÂÁ´À­¤ò³Î¼Â¤Ë¤¹¤ë»ÅÁȤߤȰìÏ¢¤Î¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤òÄ󶡤·¤Æ¤¤¤Þ¤¹¡£ + ¥·¥¹¥Æ¥à¤È¥Í¥Ã¥È¥ï¡¼¥¯¤ÎÀ°¹çÀ­¤ª¤è¤Ó°ÂÁ´À­¤òÊݸ¤ë»ÅÁȤߤȰìÏ¢¤Î¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤òÄ󶡤·¤Æ¤¤¤Þ¤¹¡£ ¤³¤Î¾Ï¤òÆɤà¤È¡¢°Ê²¼¤Î¤³¤È¤¬¤ï¤«¤ê¤Þ¤¹¡£ &os; - ¤Ë´Ø¤¹¤ë´ðËÜŪ¤Ê¥·¥¹¥Æ¥à¥»¥­¥å¥ê¥Æ¥£¤Î¹Í¤¨Êý + ¤Ë¤ª¤±¤ë´ðËÜŪ¤Ê¥·¥¹¥Æ¥à¥»¥­¥å¥ê¥Æ¥£¤Î¹Í¤¨Êý - DES ¤ä MD5 ¤Î¤è¤¦¤Ê¡¢ - &os; ¤ÇÍøÍѤǤ­¤ë¤µ¤Þ¤¶¤Þ¤Ê°Å¹æ²½¼êË¡¤Ë¤Ä¤¤¤Æ + &os; ¤ÇÍøÍѤǤ­¤ë¤µ¤Þ¤¶¤Þ¤Ê°Å¹æ²½¼êË¡ @@ -63,45 +59,49 @@ - inetd ¤ÈÁȤ߹ç¤ï¤»¤Æ + &man.inetd.8; ¤ÈÁȤ߹ç¤ï¤»¤Æ TCP Wrappers ¤òÀßÄꤹ¤ëÊýË¡ &os; ¤Ë¤ª¤±¤ë - Kerberos5 ¤ÎÀßÄêÊýË¡ + Kerberos ¤ÎÀßÄêÊýË¡ - IPsec ¤ª¤è¤Ó FreeBSD/&windows; ¥³¥ó¥Ô¥å¡¼¥¿¤Î´Ö¤Ç - VPN ¤ÎÀßÄêÊýË¡ + IPsec ¤òÀßÄꤷ¤Æ VPN ¤ò¹½ÃÛ¤¹¤ëÊýË¡ - &os; ¤Ç»È¤ï¤ì¤Æ¤¤¤ë SSH ¤Ç¤¢¤ë + &os; ¤Ë¤±¤ë OpenSSH ¤ÎÀßÄꤪ¤è¤Ó»ÈÍÑÊýË¡ - ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Î ACL (¥¢¥¯¥»¥¹À©¸æ¥ê¥¹¥È) - ¤È¤Ï²¿¤«¡¢¤Þ¤¿¤½¤Î»ÈÍÑË¡ + ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à ACL (¥¢¥¯¥»¥¹À©¸æ¥ê¥¹¥È) + ¤Î»ÈÍÑÊýË¡ - Portaudit - ¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤ò»È¤Ã¤Æ¡¢Ports Collection + Ports Collection ¤«¤é¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤¿¥µ¡¼¥É¥Ñ¡¼¥Æ¥£À½¥½¥Õ¥È¥¦¥§¥¢ packages - ¤ò´Æºº¤¹¤ëÊýË¡ + ¤ò Portaudit + ¤ò»È¤Ã¤Æ´Æºº¤¹¤ëÊýË¡ - ¸ø³«¤µ¤ì¤ë &os; ¥»¥­¥å¥ê¥Æ¥£´«¹ð¤ÎÍøÍÑÊýË¡ + &os; ¥»¥­¥å¥ê¥Æ¥£´«¹ð¤ÎÍøÍÑÊýË¡ ¥×¥í¥»¥¹¥¢¥«¥¦¥ó¥Æ¥£¥ó¥°¤¬¤É¤Î¤è¤¦¤Ê¤â¤Î¤«¡¢ &os; ¾å¤ÇÍ­¸ú¤Ë¤¹¤ëÊýË¡¤Ë¤Ä¤¤¤Æ + + + ¥ê¥½¡¼¥¹À©¸Â¥Ç¡¼¥¿¥Ù¡¼¥¹¤È¤Ï²¿¤«¡¢ + ¤³¤Î»ÅÁȤߤò»È¤Ã¤¿¥æ¡¼¥¶»ñ¸»¤Î´ÉÍýÊýË¡ + ¤³¤Î¾Ï¤òÆɤàÁ°¤Ë¡¢¼¡¤Î¤³¤È¤¬É¬Íפˤʤê¤Þ¤¹¡£ @@ -112,33 +112,26 @@ - + ¤Ï¤¸¤á¤Ë ¥»¥­¥å¥ê¥Æ¥£¤È¤Ï¡¢¥·¥¹¥Æ¥à´ÉÍý¼Ô¤ò¤¤¤Ä¤âǺ¤Þ¤»¤ë»Å»ö¤Î°ì¤Ä¤Ç¤¹¡£ - ¤¹¤Ù¤Æ¤Î BSD &unix; ¥Þ¥ë¥Á¥æ¡¼¥¶¥·¥¹¥Æ¥à¤Ï¡¢ - ½¾Í褫¤é¤¤¤¯¤Ä¤«¤Î¥»¥­¥å¥ê¥Æ¥£µ¡¹½¤òÈ÷¤¨¤Æ¤¤¤Þ¤¹¤¬¡¢ - ¥æ¡¼¥¶¤òµ¿¿´°Åµ´¤Ë´Ù¤é¤»¤Ê¤¤¤è¤¦¤ËÄɲäΥ»¥­¥å¥ê¥Æ¥£µ¡¹½¤ò¹½ÃÛ¤·Êݼ餹¤ë»Å»ö¤Ï¤ª¤½¤é¤¯¡¢ - ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤È¤·¤Æ¤â¤Ã¤È¤âÂ礭¤ÊÀÕ̳¤Î°ì¤Ä¤Ç¤·¤ç¤¦¡£ - ¥Þ¥·¥ó¤Î°ÂÁ´À­¤ËÈ¿±Ç¤µ¤ì¤ë¤Î¤Ï¡¢´ÉÍý¼Ô¤¬ºî¶È¤·¤¿¤³¤È¤À¤±¤Ç¤¹¡£ - ¤Þ¤¿¥»¥­¥å¥ê¥Æ¥£ÌäÂê¤Ï¡¢²÷Ŭ¤Ê´Ä¶­¤ËɬÍפʤâ¤Î¤È¶¥¹ç¤·¤Þ¤¹¡£ - °ìÈÌ¤Ë &unix; ¥·¥¹¥Æ¥à¤ÏËÄÂç¤Ê¿ô¤Î¥×¥í¥»¥¹¤òƱ»þ¤ËÆ°ºî¤µ¤»¤ë¤³¤È¤¬¤Ç¤­¡¢ - ¤½¤Î¥×¥í¥»¥¹¤ÎÂçÉôʬ¤Ï¡¢¥µ¡¼¥Ð — - ³°Éô¤«¤éÀܳ¤·¡¢ÄÌ¿®¤¹¤ë¤â¤Î¤È¤·¤ÆÆ°ºî¤·¤Þ¤¹¡£ - ¤«¤Ä¤Æ¤Î¥ß¥Ë¥³¥ó¤È¥á¥¤¥ó¥Õ¥ì¡¼¥à¤¬¥Ç¥¹¥¯¥È¥Ã¥×¤Ë¤È¤Ã¤Æ¤«¤ï¤ê¡¢ - ¤µ¤é¤Ë¥³¥ó¥Ô¥å¡¼¥¿¤¬Áê¸ß¤ËÀܳ¤µ¤ì¤¿¥Í¥Ã¥È¥ï¡¼¥¯¤ò·ÁÀ®¤¹¤ë¤è¤¦¤Ë¤Ê¤Ã¤¿º£Æü¡¢ - ¥»¥­¥å¥ê¥Æ¥£¤Ï°ìÁØÂ礭¤Ê´Ø¿´»ö¤Ë¤Ê¤Ã¤Æ¤­¤Æ¤¤¤Þ¤¹¡£ + &os; ¤Ï¡¢¸ÇÍ­¤Î¥»¥­¥å¥ê¥Æ¥£µ¡¹½¤òÈ÷¤¨¤Æ¤¤¤Þ¤¹¤¬¡¢ + ÄɲäΥ»¥­¥å¥ê¥Æ¥£µ¡¹½¤òÀßÄꤷÊݼ餹¤ë»Å»ö¤Ï¤ª¤½¤é¤¯¡¢ + ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤È¤·¤Æ¤â¤Ã¤È¤âÂ礭¤ÊÀÕ̳¤Î°ì¤Ä¤Ç¤·¤ç¤¦¡£ ¤Þ¤¿¡¢¥·¥¹¥Æ¥à¥»¥­¥å¥ê¥Æ¥£¤Ë¤Ï¡¢ ¤µ¤Þ¤¶¤Þ¤Ê·Á¤Ç¤Î¹¶·â¤ËÂн褹¤ë¤³¤È¤È¤â´Ø·¸¤·¤Æ¤¤¤Þ¤¹¡£ ¹¶·â¤ÎÃæ¤Ë¤Ï root - ¸¢¸Â¤òÃ¥¤ª¤¦ (root ¸¢¸Â¤òÇˤë) ¤È¤Ï¤·¤Ê¤¤¤±¤ì¤É¤â¡¢ + ¸¢¸Â¤òÃ¥¤ª¤¦¤È¤Ï¤·¤Ê¤¤¤±¤ì¤É¤â¡¢ ¥¯¥é¥Ã¥·¥å¤ä¥·¥¹¥Æ¥à¤ÎÉÔ°ÂÄê¾õÂÖ¤ò°ú¤­µ¯¤³¤½¤¦¤È¤¹¤ë¤â¤Î¤â¤¢¤ê¤Þ¤¹¡£ ¤³¤Î¥»¥­¥å¥ê¥Æ¥£ÌäÂê¤Ï¡¢¤¤¤¯¤Ä¤«¤ËʬÎह¤ë¤³¤È¤¬²Äǽ¤Ç¤¹¡£ @@ -152,7 +145,7 @@ - ¥¢¥¯¥»¥¹²Äǽ¤Ê¥µ¡¼¥Ð¤ò»È¤Ã¤¿ root ¸¢¸Â¤ÎÉÔÀµÍøÍÑ + ¥¢¥¯¥»¥¹²Äǽ¤Ê¥µ¡¼¥Ó¥¹¤ò»È¤Ã¤¿ root ¸¢¸Â¤ÎÉÔÀµÍøÍÑ @@ -177,20 +170,14 @@ ¥µ¡¼¥Ó¥¹Ë¸³² (DoS) - ¥µ¡¼¥Ó¥¹Ë¸³²¹¶·â (DoS ¹¶·â) ¤È¤Ï¡¢ + ¥µ¡¼¥Ó¥¹Ë¸³²¹¶·â (DoS ¹¶·â) ¤È¤Ï¡¢ ¥Þ¥·¥ó¤«¤éɬÍפʻñ¸»¤òÃ¥¤¦¹Ô°Ù¤Ç¤¹¡£ - Ä̾¥µ¡¼¥Ó¥¹Ë¸³²¹¶·â¤Ï¤½¤Î¥Þ¥·¥ó¤Ç¼Â¹Ô¤µ¤ì¤ë¥µ¡¼¥Ð¤ä - ¥Í¥Ã¥È¥ï¡¼¥¯¥¹¥¿¥Ã¥¯¤ò²áÉé²Ù¾õÂ֤ˤ·¤Æ¥Þ¥·¥ó¤ò¥¯¥é¥Ã¥·¥å¤µ¤»¤¿¤ê¡¢ + Ä̾¥µ¡¼¥Ó¥¹Ë¸³²¹¶·â¤Ï¤½¤Î¥Þ¥·¥ó¤Ç¼Â¹Ô¤µ¤ì¤ë¥µ¡¼¥Ð¤ä¥Í¥Ã¥È¥ï¡¼¥¯¥¹¥¿¥Ã¥¯¤ò²áÉé²Ù¾õÂ֤ˤ·¤Æ¡¢ + ¥Þ¥·¥ó¤ò¥¯¥é¥Ã¥·¥å¤µ¤»¤¿¤ê¡¢ ¥Þ¥·¥ó¤ò»È¤¨¤Ê¤¯¤·¤¿¤ê¤¹¤ë¤è¤¦¤ÊÎÏǤ¤»¤ÎÊýË¡¤Ç¤¹¡£ - ¥µ¡¼¥Ó¥¹Ë¸³²¹¶·â¤ÎÃæ¤Ë¤Ï¡¢ - ¥Í¥Ã¥È¥ï¡¼¥¯¥¹¥¿¥Ã¥¯¤Î¥Ð¥°¤òÍøÍѤ·¤Æ¡¢ - ¥Ñ¥±¥Ã¥È°ì¤Ä¤Ç¥Þ¥·¥ó¤ò¥¯¥é¥Ã¥·¥å¤µ¤»¤è¤¦¤È¤¹¤ë¤â¤Î¤â¤¢¤ê¤Þ¤¹¡£ - ¸å¼Ô¤Ë¤Ï¡¢¥«¡¼¥Í¥ë¤Ë¥Ð¥°½¤Àµ¤ò»Ü¤¹¤³¤È¤Ë¤è¤Ã¤Æ¤Î¤ßÂбþ¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£ ¥µ¡¼¥Ð¥×¥í¥»¥¹¤ËÂФ¹¤ë¹¶·â¤Ï¡¢¥ª¥×¥·¥ç¥ó¤òŬÀڤ˻ØÄꤹ¤ë¤³¤È¤Ë¤è¤Ã¤Æ¡¢ ¹¶·â¤µ¤ì¤Æ¤¤¤ë¾õ¶·¤Ç¥µ¡¼¥Ð¥×¥í¥»¥¹¤ÎÉé²Ù¾å¾º¤Ë¸Â³¦¤òÀßÄꤹ¤ë¤³¤È¤ÇÂбþ¤Ç¤­¤ë¾ì¹ç¤¬Â¿¤¤¤Ç¤¹¡£¤³¤ì¤é¤ËÈæ¤Ù¤ë¤È¡¢ ¥Í¥Ã¥È¥ï¡¼¥¯¤Ø¤ÎÎÏǤ¤»¤Î¹¶·â¤Ø¤ÎÂбþ¤Ï¤º¤Ã¤ÈÆñ¤·¤¯¤Ê¤ê¤Þ¤¹¡£ - ¤¿¤È¤¨¤Ð¡¢µ¶Â¤¥Ñ¥±¥Ã¥È¤Ë¤è¤ë¹¶·â (spoof-packet attack) ¤Ï¡¢ - ¥¤¥ó¥¿¡¼¥Í¥Ã¥È¤«¤é¥·¥¹¥Æ¥à¤òÀÚ¤êÎ¥¤¹°Ê³°¤ÎÊýË¡¤ÇËɤ°¤³¤È¤Ï¤Û¤È¤ó¤ÉÉÔ²Äǽ¤Ç¤¹¡£ ¤³¤Î¹¶·â¤Ë¤è¤Ã¤Æ¡¢¥Þ¥·¥ó¤òÍî¤È¤·¤Æ¤·¤Þ¤¦¤³¤È¤Ï¤Ç¤­¤Ê¤¤¤«¤â¤·¤ì¤Þ¤»¤ó¤¬¡¢ Àܳ¤·¤Æ¤¤¤ë¥¤¥ó¥¿¡¼¥Í¥Ã¥È²óÀþ¤ò˰Ϥµ¤»¤Æ¤·¤Þ¤¦¤³¤È¤Ï¤Ç¤­¤Þ¤¹¡£ @@ -200,34 +187,22 @@ ¥æ¡¼¥¶¥¢¥«¥¦¥ó¥È¤ÎÉÔÀµÍøÍѤϡ¢ - ¥µ¡¼¥Ó¥¹Ë¸³²¹¶·â¤è¤ê¤â¤º¤Ã¤È¤è¤¯¤¢¤ëÌäÂê¤Ç¤¹¡£ - ¤³¤Î¤´»þÀª¤Ç¤â¡¢¼«Ê¬¤¿¤Á¤Î¥Þ¥·¥ó¤Çɸ½à¤Î - telnetd, - rlogind, - rshd, - ftpd - ¥µ¡¼¥Ð¤ò¼Â¹Ô¤µ¤»¤Æ¤¤¤ë¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ï¿¤¤¤Î¤Ç¤¹¡£ - ¤³¤ì¤é¤Î¥µ¡¼¥Ð¤Ï¡¢¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢ - °Å¹æ²½¤µ¤ì¤¿¥³¥Í¥¯¥·¥ç¥ó¾å¤ÇÆ°ºî¤·¤Æ¤¤¤Þ¤»¤ó¡£ - ¤½¤Î·ë²Ì¡¢Êú¤¨¤Æ¤¤¤ë¥æ¡¼¥¶¿ô¤¬É¸½à¤¯¤é¤¤¤Ç¤¢¤ì¤Ð¡¢¥ê¥â¡¼¥È¥í¥°¥¤¥ó - (¤½¤Î¥·¥¹¥Æ¥à¤Ë¥í¥°¥¤¥ó¤¹¤ë¤Ë¤ÏºÇ¤âÉáÄ̤ÇÊØÍø¤ÊÊýË¡¤Ç¤¹) - ¤·¤Æ¤¤¤ë¥æ¡¼¥¶¤Î¤¦¤Á°ì¿Í°Ê¾å¤Ï¡¢ - ¥Ñ¥¹¥ï¡¼¥É¤òÇÁ¤­¸«¤é¤ì¤Æ¤·¤Þ¤¦¤Ç¤·¤ç¤¦¡£ + DoS ¹¶·â¤è¤ê¤â¤º¤Ã¤È¤è¤¯¤¢¤ëÌäÂê¤Ç¤¹¡£ + ¤³¤Î¤´»þÀª¤Ç¤â¡¢ + °Å¹æ²½¤µ¤ì¤Æ¤¤¤Ê¤¤¥µ¡¼¥Ó¥¹¤ò¼Â¹Ô¤µ¤»¤Æ¤¤¤ë¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ï¿¤¯¡¢ + ¤½¤Î¤¿¤á¡¢¥ê¥â¡¼¥È¤«¤é¥í¥°¥¤¥ó¤·¤Æ¤¤¤ë¥æ¡¼¥¶¤Ï¡¢ + ¥Ñ¥¹¥ï¡¼¥É¤òÇÁ¤­¸«¤é¤ì¤Æ¤·¤Þ¤¦´í¸±À­¤¬¤¢¤ê¤Þ¤¹¡£ ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤¬Ãí°Õ¿¼¤¤¿Í¤Ê¤é¤Ð¡¢ - ¤¿¤È¤¨¥í¥°¥¤¥ó¤¬À®¸ù¤·¤Æ¤¤¤¿¤È¤·¤Æ¤â¡¢ ¥ê¥â¡¼¥È¥¢¥¯¥»¥¹¥í¥°¤ò²òÀϤ·¤Æ¡¢ - µ¿¤ï¤·¤¤Á÷¿®¸µ¥¢¥É¥ì¥¹¤òõ¤¹¤â¤Î¤Ç¤¹¡£ + µ¿¤ï¤·¤¤Á÷¿®¸µ¥¢¥É¥ì¥¹¤äµ¿¤ï¤·¤¤¥í¥°¥¤¥ó¤òõ¤¹¤â¤Î¤Ç¤¹¡£ - ¤Ò¤È¤¿¤Ó¹¶·â¼Ô¤¬¥æ¡¼¥¶¥¢¥«¥¦¥ó¥È¤Ø¤Î¥¢¥¯¥»¥¹¸¢¤òÆþ¼ê¤·¤¿¤é¡¢ - ¹¶·â¼Ô¤Ï root - ¸¢¸Â¤òÇˤì¤ë¤È²¾Äꤹ¤ë¤Ù¤­¤Ç¤¹¡£ - ¤·¤«¤·¡¢¥»¥­¥å¥ê¥Æ¥£¤ò½½Ê¬°Ý»ý¤·¡¢ + ¥»¥­¥å¥ê¥Æ¥£¤ò½½Ê¬°Ý»ý¤·¡¢ ¼êÆþ¤ì¤Î¹Ô¤­ÆϤ¤¤¿¥·¥¹¥Æ¥à¤Ë¤ª¤¤¤Æ¤Ï¡¢ ¤¢¤ë¥æ¡¼¥¶¥¢¥«¥¦¥ó¥È¤Ø¤Î¥¢¥¯¥»¥¹¤¬²Äǽ¤È¤Ê¤Ã¤Æ¤â¡¢ ɬ¤º¤·¤â¹¶·â¼Ô¤Ë root - ¤Ø¤Î¥¢¥¯¥»¥¹¸¢¤òÍ¿¤¨¤ë¤È¤Ï¸Â¤ê¤Þ¤»¤ó¡£¤³¤Î°ã¤¤¤Ï½ÅÍפǤ¹¡£ - ¤È¤¤¤¦¤Î¤Ï¡¢°ìÈÌŪ¤Ë - root ¤Ø¤Î¥¢¥¯¥»¥¹¸¢¤¬¤Ê¤±¤ì¤Ð¡¢ + ¤Ø¤Î¥¢¥¯¥»¥¹¸¢¤òÍ¿¤¨¤ë¤È¤Ï¸Â¤ê¤Þ¤»¤ó¡£ + root + ¤Ø¤Î¥¢¥¯¥»¥¹¸¢¤¬¤Ê¤±¤ì¤Ð¡¢ ¹¶·â¼Ô¤Ï¼«Ê¬¤Î¿¯Æþ¤Îº¯Àפò±£Ê乤뤳¤È¤¬¤Ç¤­¤Þ¤»¤ó¤·¡¢ ¤½¤Î¥æ¡¼¥¶¤Î¥Õ¥¡¥¤¥ë¤ò°ú¤Ã¤«¤­²ó¤·¤¿¤ê¡¢ ¥Þ¥·¥ó¤ò¥¯¥é¥Ã¥·¥å¤µ¤»¤¿¤ê¤¹¤ë¤Î¤¬¤»¤¤¤¼¤¤¤Ç¤¹¡£ @@ -240,38 +215,18 @@ ΢¸ý (¥Ð¥Ã¥¯¥É¥¢) - ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ï¡¢¤¢¤ë¥Þ¥·¥ó¾å¤Ç - root - ¸¢¸Â¤òÃ¥¼è¤¹¤ëÊýË¡¤Ï¡¢ - ÀøºßŪ¤Ë²¿Ä̤ê¤â¤¢¤ë¤È¤¤¤¦¤³¤È¤ò¿´¤·¤Æ¤ª¤«¤Í¤Ð¤Ê¤ê¤Þ¤»¤ó¡£ + root + ¸¢¸Â¤òÃ¥¼è¤¹¤ëÊýË¡¤Ï¡¢ÀøºßŪ¤Ë²¿Ä̤ê¤â¤¢¤ê¤Þ¤¹¡£ ¹¶·â¼Ô¤Ï root ¤Î¥Ñ¥¹¥ï¡¼¥É¤òÃΤäƤ¤¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¤·¡¢ ¹¶·â¼Ô¤¬ root - ¸¢¸Â¤Ç¼Â¹Ô¤µ¤ì¤Æ¤¤¤ë¥µ¡¼¥Ð¤Î¥Ð¥°¤ò¸«¤Ä¤±¡¢ - ¥Í¥Ã¥È¥ï¡¼¥¯Àܳ¤ò²ð¤·¤Æ - root - ¸¢¸Â¤òÇˤ뤳¤È¤¬¤Ç¤­¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - ¤Þ¤¿¡¢¹¶·â¼Ô¤Ï suid-root ¥×¥í¥°¥é¥à¤Ë¸ºß¤¹¤ë¥Ð¥°¤òÃΤäƤ¤¤Æ¡¢ - ¥æ¡¼¥¶¥¢¥«¥¦¥ó¥È¤òÇˤì¤Ð - root - ¸¢¸Â¤òÃ¥¼è¤Ç¤­¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - ¹¶·â¼Ô¤¬¤¢¤ë¥Þ¥·¥ó¾å¤Ç - root - ¸¢¸Â¤òÇˤëÊýË¡¤òÃΤ俤ʤé¤Ð¡¢ - ¹¶·â¼Ô¤Ï΢¸ý¤òÍÑ°Õ¤¹¤ëɬÍפ¬¤¢¤ê¤Þ¤»¤ó¡£ - ¤³¤ì¤Þ¤Ç¤Ëȯ¸«¤µ¤ì¡¢¤Õ¤µ¤¬¤ì¤¿ - root - ¤Î·ê¤Î¿¤¯¤Ë¤Ï¡¢¹¶·â¼Ô¤¬¼«Ê¬¤Î¤·¤¿¤³¤È¤Îº¯Àפò¾Ã¤½¤¦¤È¤·¤¿ºî¶È¤¬¡¢ - ¤«¤Ê¤ê¤Î³ä¹ç¤Ç´Þ¤Þ¤ì¤Æ¤¤¤Þ¤¹¡£ - ¤½¤Î¤¿¤á¡¢¤Û¤È¤ó¤É¤Î¹¶·â¼Ô¤Ï΢¸ý¤òºî¤ë¤Î¤Ç¤¹¡£Î¢¸ý¤Ï¡¢ - ¹¶·â¼Ô¤¬¤¿¤ä¤¹¤¯¥·¥¹¥Æ¥à¤Ø¤Î - root - ¥¢¥¯¥»¥¹¤òºÆ¤ÓÆÀ¤é¤ì¤ë¤è¤¦¤Ë¤·¤Þ¤¹¤¬¡¢ - ͭǽ¤Ê´ÉÍý¼Ô¤Ë¿¯Æþ¤ò¸¡ÃΤ¹¤ëÊØÍø¤Ê¼êÃʤòÍ¿¤¨¤ë¤â¤Î¤Ç¤â¤¢¤ê¤Þ¤¹¡£ - ¹¶·â¼Ô¤Ë΢¸ý¤òºî¤é¤»¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¤È¤¤¤¦¤³¤È¤Ï¡¢ - ¥»¥­¥å¥ê¥Æ¥£¤Ë¤È¤Ã¤Æ¤Ï¼ÂºÝ¤Ë¤ÏÎɤ¯¤Ê¤¤¤³¤È¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - ¤Ê¤¼¤Ê¤é¡¢ - ¹¶·â¼Ô¤¬ºÇ½é¤Ë¸«¤Ä¤±¤Æ¿¯Æþ¤·¤Æ¤­¤¿¥»¥­¥å¥ê¥Æ¥£¥Û¡¼¥ë¤Ï¤Õ¤µ¤¬¤ì¤Ê¤¤¤«¤é¤Ç¤¹¡£ + ¸¢¸Â¤Ç¼Â¹Ô¤µ¤ì¤Æ¤¤¤ë¥µ¡¼¥Ó¥¹¤Î¥Ð¥°¤ÎÀȼåÀ­¤òÍøÍѤǤ­¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¡£ + ¤Þ¤¿¡¢¹¶·â¼Ô¤Ï SUID-root + ¥×¥í¥°¥é¥à¤Ë¸ºß¤¹¤ë¥Ð¥°¤òÃΤäƤ¤¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¡£ + ¹¶·â¼Ô¤Ï¡¢ + ¥Ð¥Ã¥¯¥É¥¢¤È¤·¤ÆÃΤé¤ì¤Æ¤¤¤ë¥×¥í¥°¥é¥à¤ò»È¤Ã¤ÆÀȼåÀ­¤Ê¥·¥¹¥Æ¥à¤òõ¤·¤¿¤ê¡¢ + ½¤Àµ¤µ¤ì¤Æ¤¤¤Ê¤¤ÀȼåÀ­¤òÍøÍѤ·¤Æ¥¢¥¯¥»¥¹¤·¤¿¤ê¡¢ + ¹¶·â¼Ô¤Ë¤è¤ë°ãË¡¹Ô°Ù¤Îº¯Àפò¾Ã¤½¤¦¤È¤·¤¿¤ê¤¹¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¡£ ¥»¥­¥å¥ê¥Æ¥£¤ò²þÁ±¤¹¤ëÊýË¡¤Ï¡¢¾ï¤Ë¡¢ ¥¿¥Þ¥Í¥®¤ÎÈé¤Î¤è¤¦¤Ë³¬Áز½¤¹¤ë¼êË¡ @@ -288,7 +243,7 @@ root ¤Î°ÂÁ´À­¤ò¹â¤á¤ë – root ¸¢¸Â¤ÇÆ°ºî¤¹¤ë¥µ¡¼¥Ð¤È - suid/sgid ¥Ð¥¤¥Ê¥ê¡£ + SUID/SGID ¥Ð¥¤¥Ê¥ê¡£ @@ -314,8 +269,7 @@ - ËܾϤμ¡¤ÎÀá¤Ç¤Ï¡¢ - ¾åµ­¤Î³Æ¹àÌܤˤĤ¤¤Æ¤è¤ê¿¼¤¯·¡¤ê²¼¤²¤Æ¤¤¤­¤Þ¤¹¡£ + ¼¡¤ÎÀá¤Ç¤Ï¡¢¾åµ­¤Î¹àÌܤˤĤ¤¤Æ¤è¤ê¿¼¤¯·¡¤ê²¼¤²¤Æ¤¤¤­¤Þ¤¹¡£ @@ -326,60 +280,41 @@ &os; ¤Î°ÂÁ´À­¤ò¹â¤á¤ë - - ¥³¥Þ¥ó¥ÉÂÐ¥×¥í¥È¥³¥ë - - ¤³¤Îʸ½ñ¤òÄ̤·¤Æ¡¢¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¤ò»Ø¤¹¤Î¤Ë¤Ï - ÂÀ»ú ¤ò»È¤¤¡¢ - ¥³¥Þ¥ó¥É¤ò»Ø¤¹¾ì¹ç¤Ë¤Ï¡¢ÅùÉý ¥Õ¥©¥ó¥È¤ò»È¤¤¤Þ¤¹¡£ - ¥×¥í¥È¥³¥ë¤ÏÄ̾ï¤Î¥Õ¥©¥ó¥È¤Çɽ¤·¤Þ¤¹¡£ - ¤³¤Î¤è¤¦¤Ê½ñÂΤˤè¤ë¶èÊ̤ϡ¢ - ¥×¥í¥È¥³¥ë¤Ç¤¢¤ë¤ÈƱ»þ¤Ë¥³¥Þ¥ó¥É¤Ç¤â¤¢¤ë - ssh ¤Ê¤É¤ËÂФ·¤ÆÍ­¸ú¤Ç¤¹¡£ - - - °Ê²¼¤ÎÀá¤Ç¤Ï¡¢ËܾϤΠ¤³¤ÎÀá¤Ç¤Ï¡¢Á°Àá ¤Ç¤È¤ê¤¢¤²¤¿ &os; - ¥·¥¹¥Æ¥à¤Î°ÂÁ´À­¤ò¹â¤á¤ëÊýË¡¤Ë¤Ä¤¤¤Æ½Ò¤Ù¤Þ¤¹¡£ + ¥·¥¹¥Æ¥à¤Î°ÂÁ´À­¤ò¹â¤á¤ëÊýË¡¤Ë¤Ä¤¤¤ÆÀâÌÀ¤·¤Þ¤¹¡£ <systemitem class="username">root</systemitem> - ¥¢¥«¥¦¥ó¥È¤È¥¹¥¿¥Ã¥Õ¥¢¥«¥¦¥ó¥È¤Î°ÂÁ´À­¤ò¹â¤á¤ë + ¥¢¥«¥¦¥ó¥È¤Î°ÂÁ´À­¤ò¹â¤á¤ë - su + &man.su.1; - root - ¤Î¥¢¥«¥¦¥ó¥È¤Î°ÂÁ´À­¤ò³ÎÊݤ·¤Ê¤¤¤¦¤Á¤«¤é¥¹¥¿¥Ã¥Õ¤Î¥¢¥«¥¦¥ó¥È¤Î°ÂÁ´À­¤ò¤¦¤ó¤Ì¤ó¤·¤Æ¤â¤·¤«¤¿¤¬¤¢¤ê¤Þ¤»¤ó¡£ - ¤Û¤È¤ó¤É¤Î¥·¥¹¥Æ¥à¤Ç¤Ï¡¢root - ¥¢¥«¥¦¥ó¥È¤Ë³ä¤êÅö¤Æ¤¿¥Ñ¥¹¥ï¡¼¥É¤¬ 1 - ¤Ä¤¢¤ê¤Þ¤¹¡£¤Þ¤ººÇ½é¤Ë¤¹¤Ù¤­¤³¤È¤Ï¡¢ - ¤³¤Î¥Ñ¥¹¥ï¡¼¥É¤Ï¤¤¤Ä¤Ç¤âÉÔÀµÍøÍÑ¤Î´í¸±¤Ë»¯¤µ¤ì¤Æ¤¤¤ë¤È²¾Äꤹ¤ë¤³¤È¤Ç¤¹¡£ - ¤³¤ì¤Ï root - ¤Î¥Ñ¥¹¥ï¡¼¥É¤ò¾Ã¤¹¤Ù¤­¤À¤È¸À¤Ã¤Æ¤¤¤ë¤Î¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£ + ¤Û¤È¤ó¤É¤Î¥·¥¹¥Æ¥à¤Ç¤Ï¡¢ root - ¤Î¥Ñ¥¹¥ï¡¼¥É¤Ï¡¢¥Þ¥·¥ó¤Ë¥³¥ó¥½¡¼¥ë¤«¤é¥¢¥¯¥»¥¹¤¹¤ë¤Î¤Ë¤Ï¡¢ + ¥¢¥«¥¦¥ó¥È¤Ë³ä¤êÅö¤Æ¤¿¥Ñ¥¹¥ï¡¼¥É¤¬ 1 ¤Ä¤¢¤ê¤Þ¤¹¡£ + ¤³¤Î¥Ñ¥¹¥ï¡¼¥É¤Ï¤¤¤Ä¤Ç¤âÉÔÀµÍøÍÑ¤Î´í¸±¤Ë»¯¤µ¤ì¤Æ¤¤¤ë¤È¹Í¤¨¤Æ¤¯¤À¤µ¤¤¡£ + ¤³¤ì¤Ï¥Ñ¥¹¥ï¡¼¥É¤ò̵¸ú¤Ë¤¹¤Ù¤­¤À¤È¸À¤Ã¤Æ¤¤¤ë¤Î¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£ + ¥Ñ¥¹¥ï¡¼¥É¤Ï¡¢¥Þ¥·¥ó¤Ë¥³¥ó¥½¡¼¥ë¤«¤é¥¢¥¯¥»¥¹¤¹¤ë¤Î¤Ë¤Ï¡¢ ¤Û¤È¤ó¤É¤¤¤Ä¤Ç¤âɬÍפʤâ¤Î¤Ç¤¹¡£ - ¤³¤³¤Ç¸À¤¤¤¿¤¤¤Î¤Ï¡¢¥³¥ó¥½¡¼¥ë°Ê³°¤«¤é¤Ï¡¢ - ¤½¤·¤Æ²Äǽ¤Ê¤é &man.su.1; ¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¾ì¹ç¤â + ¤·¤«¤·¤Ê¤¬¤é¡¢¥³¥ó¥½¡¼¥ë°Ê³°¤«¤é¤Ï¡¢ + ¤½¤·¤Æ²Äǽ¤Ê¤é &man.su.1; + ¥³¥Þ¥ó¥É¤ò¼Â¹Ô¤¹¤ë¾ì¹ç¤â¥Ñ¥¹¥ï¡¼¥É¤ò»È¤¨¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¤Ù¤­¤Ç¤¹¡£ + ¤¿¤È¤¨¤Ð¡¢/etc/ttys ¤Î¥¨¥ó¥È¥ê¤Ë¤ª¤¤¤Æ¡¢ + ÆÃÄê¤Î¥¿¡¼¥ß¥Ê¥ë¤ËÂФ· root - ¤Î¥Ñ¥¹¥ï¡¼¥É¤ò»È¤¨¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¤Ù¤­¤Ç¤¢¤ë¡¢¤È¤¤¤¦¤³¤È¤Ç¤¹¡£ - ¤¿¤È¤¨¤Ð¡¢¤¢¤Ê¤¿¤¬»È¤Ã¤Æ¤¤¤ë pty ¤¬¡¢ - /etc/ttys ¥Õ¥¡¥¤¥ë¤Ç insecure - ¤È»ØÄꤵ¤ì¤Æ¤¤¤ë¤«³Îǧ¤·¤Æ¤¯¤À¤µ¤¤¡£¤½¤¦¤¹¤ë¤È¡¢ - telnet ¤ä rlogin ·Ðͳ¤Ç¤Ï + ¤Ç¥í¥°¥¤¥ó¤Ç¤­¤Ê¤¤¤è¤¦¤Ë + insecure ¤ÈÀßÄꤷ¤Æ¤¯¤À¤µ¤¤¡£ + &os; ¤Ç¤Ï¡¢¥Ç¥Õ¥©¥ë¥È¤Ç¡¢ + /etc/ssh/sshd_config ¤Ë¤ª¤¤¤Æ + PermitRootLogin ¤¬ no + ¤ÈÀßÄꤵ¤ì¤Æ¤¤¤ë¤Î¤Ç¡¢&man.ssh.1; ¤ò»È¤Ã¤¿ root - ¤ÇľÀÜ¥í¥°¥¤¥ó¤Ç¤­¤Ê¤¤¤è¤¦¤Ë¤Ê¤ê¤Þ¤¹¡£ - ¤³¤ì¤Ï¡¢/etc/ssh/sshd_config ¤òÊÔ½¸¤·¤Æ - PermitRootLogin ¤Ë no - ¤¬ÀßÄꤵ¤ì¤ë¤è¤¦¤Ë¤¹¤ë¤³¤È¤Ç¼Â¸½¤Ç¤­¤Þ¤¹¡£ - sshd ¤Î¤è¤¦¤Ê¡¢ - ÊÌ¤Î¥í¥°¥¤¥ó¥µ¡¼¥Ó¥¹¤ò»È¤Ã¤Æ¤¤¤ë¾ì¹ç¤Ç¤âƱÍͤˡ¢Ä¾ÀÜ - root - ¤Ø¥í¥°¥¤¥ó¤¹¤ë¤³¤È¤òµö¤·¤Æ¤¤¤Ê¤¤¤«¤É¤¦¤«³Îǧ¤·¤Æ¤¯¤À¤µ¤¤¡£ - ¤¹¤Ù¤Æ¤Î¥¢¥¯¥»¥¹¼êÃÊ — ¤¿¤È¤¨¤Ð FTP - ¤Î¤è¤¦¤Ê¥µ¡¼¥Ó¥¹¤¬¡¢Îɤ¯¥¯¥é¥Ã¥¯¤ÎÂоݤȤʤ뤳¤È¤ò¹Í¤¨¤Þ¤·¤ç¤¦¡£ + ¤Ø¥í¥°¥¤¥ó¤Ï̵¸ú¤Ë¤Ê¤Ã¤Æ¤¤¤Þ¤¹¡£ + ¤¹¤Ù¤Æ¤Î¥¢¥¯¥»¥¹¼êÃÊ¡¢¤¿¤È¤¨¤Ð FTP + ¤è¤¦¤Ê¥µ¡¼¥Ó¥¹¤Ï¡¢Îɤ¯¥¯¥é¥Ã¥¯¤ÎÂоݤȤʤ뤳¤È¤òÍý²ò¤·¤Æ¤¯¤À¤µ¤¤¡£ root ¤Ø¤ÎľÀÜ¥í¥°¥¤¥ó¤Ï¡¢ ¥·¥¹¥Æ¥à¥³¥ó¥½¡¼¥ë·Ðͳ¤Ç¤Î¤ß²Äǽ¤Ç¤¢¤ë¤Ù¤­¤Ê¤Î¤Ç¤¹¡£ @@ -387,57 +322,34 @@ wheel - ¤Þ¤¿ÅöÁ³¡¢¥·¥¹¥Æ¥à´ÉÍý¼Ô¤È¤·¤Æ¼«Ê¬¤¬ + ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ï root - ¤Ë¤Ê¤ì¤ë¤è¤¦¤Ë¤·¤Æ¤ª¤¯É¬Íפ¬¤¢¤ê¤Þ¤¹¤«¤é¡¢ - ¤½¤Î¤¿¤á¤Î·ê¤ò¤¤¤¯¤Ä¤«³«¤±¤Æ¤ª¤­¤Þ¤¹¡£ - ¤·¤«¤·¡¢¤½¤ì¤é¤Î·ê¤òÆ°ºî¤µ¤»¤ë¤Ë¤Ï¡¢ - ¤µ¤é¤ËÄɲäΥѥ¹¥ï¡¼¥Éǧ¾Ú¤¬É¬ÍפǤ¢¤ë¤è¤¦¤Ë¤·¤Æ¤ª¤¯¤³¤È¤¬½ÅÍפǤ¹¡£ - root - ¤Ç¥¢¥¯¥»¥¹²Äǽ¤È¤¹¤ëÊýË¡¤Î°ì¤Ä¤È¤·¤Æ¡¢Å¬Àڤʥ¹¥¿¥Ã¥Õ¥¢¥«¥¦¥ó¥È¤ò - (/etc/group Ãæ¤Î) + ¤Ë¤Ê¤ì¤ë¤è¤¦¤Ë¤·¤Æ¤ª¤¯É¬Íפ¬¤¢¤ë¤Î¤Ç¡¢ + ÄɲäΥѥ¹¥ï¡¼¥Éǧ¾Ú¤ÎÀßÄ꤬ɬÍפȤʤê¤Þ¤¹¡£ + ¤Ò¤È¤Ä¤Ï¡¢Å¬Àڤʥ桼¥¶¥¢¥«¥¦¥ó¥È¤ò + /etc/group Ãæ¤Î + wheel ¤Ë²Ã¤¨¤ëÊýË¡¤Ç¤¹¡£ wheel - ¥°¥ë¡¼¥×¤Ë²Ã¤¨¤ë¤³¤È¤¬¤¢¤ê¤Þ¤¹¡£ - wheel - ¥°¥ë¡¼¥×¤ËÆþ¤Ã¤Æ¤¤¤ë¥¹¥¿¥Ã¥Õ¥á¥ó¥Ð¤Ï - su ¤ò»È¤Ã¤Æ + ¤Î¥á¥ó¥Ð¤Ï¡¢&man.su.1; ¤ò»È¤Ã¤Æ root ¤Ë¤Ê¤ë¤³¤È¤¬µö¤µ¤ì¤Þ¤¹¡£ - ¥Ñ¥¹¥ï¡¼¥É¥¨¥ó¥È¥ê¤Ë¤ª¤¤¤Æ¡¢¥¹¥¿¥Ã¥Õ¥á¥ó¥Ð¤ò - wheel - ¥°¥ë¡¼¥×¤ËÃÖ¤¯¤³¤È¤Ë¤è¤Ã¤ÆľÀÜ - wheel - ¸¢¸Â¤òÍ¿¤¨¤Æ¤Ï¤¤¤±¤Þ¤»¤ó¡£¥¹¥¿¥Ã¥Õ¥á¥ó¥Ð¤Î¥¢¥«¥¦¥ó¥È¤Ï - staff - ¥°¥ë¡¼¥×¤Ë½ê°¤µ¤»¤ë¤Ù¤­¤Ç¡¢¤½¤Î¾å¤Ç - /etc/group ¥Õ¥¡¥¤¥ë¤òÄ̤·¤Æ - wheel - ¥°¥ë¡¼¥×¤Ë²Ã¤¨¤ë¤Ù¤­¤Ç¤¹¡£¼ÂºÝ¤Ë + ¼ÂºÝ¤Ë root - ¥¢¥¯¥»¥¹¤ÎɬÍפʥ¹¥¿¥Ã¥Õ¥á¥ó¥Ð¤Î¤ß + ¥¢¥¯¥»¥¹¤ÎɬÍפʥ桼¥¶¤Î¤ß wheel - ¥°¥ë¡¼¥×¤ËÃÖ¤¯¤è¤¦¤Ë¤¹¤Ù¤­¤Ç¤¹¡£ - ¾¤Îǧ¾ÚÊýË¡¤Î¾ì¹ç¡¢¤¿¤È¤¨¤Ð Kerberos ¤ò»ÈÍѤ¹¤ë¾ì¹ç¤Ë¤Ï¡¢ - root ¥¢¥«¥¦¥ó¥È¤Î - Kerberos .k5login ¥Õ¥¡¥¤¥ë¤ò»È¤¨¤Ð¡¢Ã¯¤â - wheel ¥°¥ë¡¼¥×¤ËÃÖ¤¯É¬Íפʤ¯ - root ¤Ë &man.ksu.1; - ¤¹¤ë¤³¤È¤òµö²Ä¤Ç¤­¤Þ¤¹¡£ - ¤³¤Î¤ä¤êÊý¤Ï¤è¤ê¤è¤¤²ò·èºö¤Ê¤Î¤«¤â¤·¤ì¤Þ¤»¤ó¡£¤Ê¤¼¤Ê¤é¡¢ - wheel ¤Î¥á¥«¥Ë¥º¥à¤Ç¤Ï¡¢ - ¿¯Æþ¼Ô¤¬¥Ñ¥¹¥ï¡¼¥É¥Õ¥¡¥¤¥ë¤ò¼ê¤ËÆþ¤ì¡¢¥¹¥¿¥Ã¥Õ¥¢¥«¥¦¥ó¥È¤Î¤¤¤º¤ì¤« - 1 ¤Ä¤òÇˤ뤳¤È¤¬¤Ç¤­¤ë¤È¡¢ + ¤ËÃÖ¤¯¤è¤¦¤Ë¤¹¤Ù¤­¤Ç¤¹¡£ + Kerberos ¤ò»ÈÍѤ·¤Æǧ¾Ú¹Ô¤¦¾ì¹ç¤Ë¤Ï¡¢ root - ¤òÇˤ뤳¤È¤¬¤Þ¤À¤Ç¤­¤Æ¤·¤Þ¤¦¤«¤é¤Ç¤¹¡£ - wheel - ¤Î¥á¥«¥Ë¥º¥à¤òÍѤ¤¤ëÊý¤¬¡¢²¿¤â¤·¤Ê¤¤¤è¤ê¤ÏÎɤ¤¤Î¤Ç¤¹¤¬¡¢ - ɬ¤º¤·¤âºÇ¤â°ÂÁ´¤ÊÁªÂò»è¤È¤Ï¸Â¤ê¤Þ¤»¤ó¡£ + ¤Î¥Û¡¼¥à¥Ç¥£¥ì¥¯¥È¥ê¤Ë .k5login + ¤òºîÀ®¤¹¤ë¤³¤È¤Ç¡¢ + ï¤â wheel ¤ËÃÖ¤¯É¬Íפʤ¯ + &man.ksu.1; ¤¹¤ë¤³¤È¤òµö²Ä¤Ç¤­¤Þ¤¹¡£ ¥¢¥«¥¦¥ó¥È¤ò´°Á´¤Ë¥í¥Ã¥¯¤¹¤ë¤Ë¤Ï¡¢ - &man.pw.8; ¥³¥Þ¥ó¥É¤ò»È¤¦¤Ù¤­¤Ç¤¹¡£ + &man.pw.8; ¤ò»È¤Ã¤Æ¤¯¤À¤µ¤¤¡£ &prompt.root; pw lock staff - ¤³¤ì¤Ë¤è¤ê¡¢¥æ¡¼¥¶¤Ï¡¢&man.ssh.1; + ¤³¤ì¤Ë¤è¤ê¡¢»ØÄꤵ¤ì¤¿¥æ¡¼¥¶¤Ï¡¢&man.ssh.1; ¤ò´Þ¤à¤¤¤«¤Ê¤ëÊýË¡¤Ç¤â¥í¥°¥¤¥ó¤Ç¤­¤Ê¤¯¤Ê¤ê¤Þ¤¹¡£ ¥¢¥«¥¦¥ó¥È¤Ø¤Î¥¢¥¯¥»¥¹¤ò¥Ö¥í¥Ã¥¯¤¹¤ë¤â¤¦°ì¤Ä¤ÎÊýË¡¤Ï¡¢ @@ -445,16 +357,16 @@ * 1 ʸ»ú¤ËÃÖ¤­´¹¤¨¤ë¤³¤È¤Ç¤¹¡£ ¤³¤Îʸ»ú¤Ï¡¢°Å¹æ²½¤µ¤ì¤¿¥Ñ¥¹¥ï¡¼¥É¤Ë¥Þ¥Ã¥Á¤¹¤ë¤³¤È¤Ï¤Ê¤¤¤Î¤Ç¡¢ ¥æ¡¼¥¶¥¢¥¯¥»¥¹¤ò¥Ö¥í¥Ã¥¯¤·¤Þ¤¹¡£ - ¤¿¤È¤¨¤Ð¡¢¼¡¤Î¥¹¥¿¥Ã¥Õ¥¢¥«¥¦¥ó¥È¤ò¡¢ + ¤¿¤È¤¨¤Ð¡¢¼¡¤Î¥¢¥«¥¦¥ó¥È¤Î¥¨¥ó¥È¥ê¤ò¡¢ foobar:R9DT/Fa1/LV9U:1000:1000::0:0:Foo Bar:/home/foobar:/usr/local/bin/tcsh - ¤³¤¦Êѹ¹¤·¤Þ¤¹¡£ + &man.vipw.8; ¤ò»È¤Ã¤Æ°Ê²¼¤Î¤è¤¦¤ËÊѹ¹¤·¤Þ¤¹¡£ foobar:*:1000:1000::0:0:Foo Bar:/home/foobar:/usr/local/bin/tcsh ¤³¤ÎÊѹ¹¤Ë¤è¤Ã¤Æ - foobar ¥æ¡¼¥¶¤Ï¡¢ + foobar ¤Ï¡¢ Ä̾ï¤Î¥í¥°¥¤¥ó¤Ï¤Ç¤­¤Ê¤¯¤Ê¤ê¤Þ¤¹¡£ ¤³¤Î¤è¤¦¤Ê¥¢¥¯¥»¥¹À©¸Â¤ò¤·¤¿¸å¤Ï¡¢ ¥µ¥¤¥È¤Ç Kerberos ¤ò¥»¥Ã¥È¥¢¥Ã¥×¤·¤¿¤ê¡¢ @@ -463,34 +375,24 @@ ¤³¤ì¤é¤Î¥»¥­¥å¥ê¥Æ¥£¤Î»ÅÁȤߤǤϡ¢ À©¸Â¤Î¶¯¤¤¥µ¡¼¥Ð¤«¤éÀ©¸Â¤Î¼å¤¤¥µ¡¼¥Ð¤Ø¥í¥°¥¤¥ó¤¹¤ë¤³¤È¤òÁ°Äó¤È¤·¤Æ¤¤¤Þ¤¹¡£ - ¤¿¤È¤¨¤Ð¡¢¥á¥¤¥ó¥Þ¥·¥ó¤Ç¡¢ÍÍ¡¹¤Ê¼ïÎà¤Î¥µ¡¼¥Ð¤ò¼Â¹Ô¤µ¤»¤Æ¤¤¤ë¾ì¹ç¡¢ - ¥ï¡¼¥¯¥¹¥Æ¡¼¥·¥ç¥ó¤Ç¤Ï¤½¤ì¤é¤Î¥µ¡¼¥Ð¤ò¼Â¹Ô¤µ¤»¤Æ¤Ï¤Ê¤ê¤Þ¤»¤ó¡£ + ¤¿¤È¤¨¤Ð¡¢¥µ¡¼¥Ð¤¬¥Í¥Ã¥È¥ï¡¼¥¯¥µ¡¼¥Ó¥¹¤ò¼Â¹Ô¤µ¤»¤Æ¤¤¤ë¾ì¹ç¡¢ + ¥ï¡¼¥¯¥¹¥Æ¡¼¥·¥ç¥ó¤Ç¤Ï¤½¤ì¤é¤Î¥µ¡¼¥Ó¥¹¤ò¼Â¹Ô¤µ¤»¤Æ¤Ï¤Ê¤ê¤Þ¤»¤ó¡£ ¥ï¡¼¥¯¥¹¥Æ¡¼¥·¥ç¥ó¤ò½½Ê¬¤Ë°ÂÁ´¤Ë¤·¤Æ¤ª¤¯¤¿¤á¤Ë¤Ï¡¢ - ¼Â¹Ô¤¹¤ë¥µ¡¼¥Ð¤Î¿ô¤ò¡¢ - °ì¤Ä¤â¥µ¡¼¥Ð¤¬¼Â¹Ô¤µ¤ì¤Æ¤¤¤Ê¤¤¤È¤¤¤¦¤¯¤é¤¤¤Ë¤Þ¤Ç¤Ç¤­¤ë¸Â¤ê¸º¤é¤¹¤Ù¤­¤Ç¤¹¡£ - ¤Þ¤¿¡¢¥Ñ¥¹¥ï¡¼¥É¤ÇÊݸ¤ì¤¿¥¹¥¯¥ê¡¼¥ó¥»¡¼¥Ð¤òÁö¤é¤»¤Æ¤ª¤¯¤Ù¤­¤Ç¤¹¡£ - ¥ï¡¼¥¯¥¹¥Æ¡¼¥·¥ç¥ó¤Ø¤ÎʪÍýŪ¥¢¥¯¥»¥¹¤¬Í¿¤¨¤é¤ì¤¿¤È¤¹¤ë¤È¡¢ + ¼Â¹Ô¤¹¤ë¥µ¡¼¥Ó¥¹¤ò¥¼¥í¤Ë¤¹¤ë¤«¡¢²Äǽ¤Ê¸Â¤ê¸º¤é¤·¡¢ + ¥Ñ¥¹¥ï¡¼¥É¤ÇÊݸ¤ì¤¿¥¹¥¯¥ê¡¼¥ó¥»¡¼¥Ð¤òÁö¤é¤»¤Æ¤ª¤¯¤Ù¤­¤Ç¤¹¡£ + ¥·¥¹¥Æ¥à¤Ø¤ÎʪÍýŪ¥¢¥¯¥»¥¹¤¬Í¿¤¨¤é¤ì¤¿¤È¤¹¤ë¤È¡¢ ¤â¤Á¤í¤ó¸À¤¦¤Þ¤Ç¤â¤Ê¤¯¡¢ - ¹¶·â¼Ô¤Ï´ÉÍý¼Ô¤¬ÀßÄꤷ¤¿¤¤¤«¤Ê¤ë¼ïÎà¤Î¥»¥­¥å¥ê¥Æ¥£¤ò¤â¤¦¤ÁÇˤ뤳¤È¤¬¤Ç¤­¤ë¤Î¤Ç¤¹¡£ - ¤³¤Î¤³¤È¤Ï¡¢´ÉÍý¼Ô¤È¤·¤Æɬ¤º¹Í¤¨¤Æ¤ª¤«¤Í¤Ð¤Ê¤é¤Ê¤¤ÌäÂê¤Ç¤¹¤¬¡¢ - ¥·¥¹¥Æ¥àÇˤê¤ÎÂç¿¿ô¤Ï¡¢¥Í¥Ã¥È¥ï¡¼¥¯·Ðͳ¤Ç¥ê¥â¡¼¥È¤«¤é¡¢ - ¥ï¡¼¥¯¥¹¥Æ¡¼¥·¥ç¥ó¤ä¥µ¡¼¥Ð¤Ø¤ÎʪÍýŪ¥¢¥¯¥»¥¹¼êÃʤò»ý¤¿¤Ê¤¤¿Í¡¹¤Ë¤è¤Ã¤Æ¹Ô¤ï¤ì¤ë¤È¤¤¤¦»ö¼Â¤â¤Þ¤¿¡¢ - ǰƬ¤ËÃÖ¤¤¤Æ¤ª¤¯É¬Íפ¬¤¢¤ê¤Þ¤¹¡£ + ¹¶·â¼Ô¤Ï¤¤¤«¤Ê¤ë¼ïÎà¤Î¥»¥­¥å¥ê¥Æ¥£¤ò¤â¤¦¤ÁÇˤ뤳¤È¤¬¤Ç¤­¤ë¤Î¤Ç¤¹¡£ + ¹¬¤¤¤Ë¤â¡¢¥·¥¹¥Æ¥àÇˤê¤ÎÂç¿¿ô¤Ï¡¢¥Í¥Ã¥È¥ï¡¼¥¯·Ðͳ¤Ç¥ê¥â¡¼¥È¤«¤é¡¢ + ¥·¥¹¥Æ¥à¤Ø¤ÎʪÍýŪ¥¢¥¯¥»¥¹¼êÃʤò»ý¤¿¤Ê¤¤¿Í¡¹¤Ë¤è¤Ã¤Æ¹Ô¤ï¤ì¤Æ¤¤¤Þ¤¹¡£ - Kerberos ¤Î¤è¤¦¤ÊÊýË¡¤ò»È¤¦¤³¤È¤Ç¡¢ - ¥¹¥¿¥Ã¥Õ¥¢¥«¥¦¥ó¥È¤Î¥Ñ¥¹¥ï¡¼¥É¤ÎÊѹ¹¤â¤·¤¯¤ÏÄä»ß¤ò°ì²Õ½ê¤Ç¹Ô¤Ê¤¦¤³¤È¤È¡¢ - ¥¹¥¿¥Ã¥Õ¥á¥ó¥Ð¤¬¥¢¥«¥¦¥ó¥È¤ò»ý¤Ä¤¹¤Ù¤Æ¤Î¥Þ¥·¥ó¤Ë¨»þ¤Ë¤½¤Î¸ú²Ì¤òµÚ¤Ü¤¹¤³¤È¤¬²Äǽ¤È¤Ê¤ê¤Þ¤¹¡£ - ¥¹¥¿¥Ã¥Õ¥á¥ó¥Ð¤Î¥¢¥«¥¦¥ó¥È¤¬´í¸±¤Ë»¯¤µ¤ì¤¿¤È¤­¤Ë¡¢ - ¤¹¤Ù¤Æ¤Î¥Þ¥·¥ó¤Ç¥¹¥¿¥Ã¥Õ¥á¥ó¥Ð¤Î¥Ñ¥¹¥ï¡¼¥É¤ò¨ºÂ¤ËÊѹ¹¤¹¤ëǽÎϤò²á¾®É¾²Á¤·¤Æ¤Ï¤¤¤±¤Þ¤»¤ó¡£ - ¥Ñ¥¹¥ï¡¼¥É¤¬Ê¬»¶¤µ¤ì¤Æ¤¤¤ë¾õ¶·¤Ç¤Ï¡¢ - N Âæ¤Î¥Þ¥·¥ó¤Ç¥Ñ¥¹¥ï¡¼¥É¤òÊѹ¹¤¹¤ë¤È¡¢ - ¤Æ¤ó¤ä¤ï¤ó¤ä¤Î»öÂÖ¤ò¾·¤¯²ÄǽÀ­¤¬¤¢¤ê¤Þ¤¹¡£ - Kerberos ¤ò»ÈÍѤ¹¤ë¤È¡¢¥Ñ¥¹¥ï¡¼¥É¤ÎºÆȯ¹Ô¤ËÀ©¸Â - (re-passwording restriction) ¤ò²Ý¤¹¤ë¤³¤È¤â¤Ç¤­¤Þ¤¹¡£ - ¤³¤Îµ¡Ç½¤ò»È¤¦¤³¤È¤Ë¤è¤ê¡¢¤¢¤ë Kerberos - ¥Á¥±¥Ã¥È¤ò¤·¤Ð¤é¤¯·Ð¤Ä¤È¥¿¥¤¥à¥¢¥¦¥È¤Ë¤¹¤ë¤³¤È¤¬¤Ç¤­¤ë¤À¤±¤Ç¤Ê¤¯¡¢ - °ìÄê´ü´Ö (Î㤨¤Ð¡¢1 ¥ö·î¤Ë 1 ²ó) ·Ð¤Ä¤È¡¢ - ¥æ¡¼¥¶¤Ë¿·¤·¤¤¥Ñ¥¹¥ï¡¼¥É¤òÁª¤Ö¤è¤¦¤ËÍ׵᤹¤ë¤³¤È¤â¤Ç¤­¤Þ¤¹¡£ + Kerberos ¤ò»È¤¦¤³¤È¤Ç¡¢ + ¥æ¡¼¥¶¤Î¥Ñ¥¹¥ï¡¼¥É¤ÎÊѹ¹¤â¤·¤¯¤ÏÄä»ß¤ò°ì²Õ½ê¤Ç¹Ô¤Ê¤¦¤³¤È¤È¡¢ + ¥æ¡¼¥¶¤¬¥¢¥«¥¦¥ó¥È¤ò»ý¤Ä¤¹¤Ù¤Æ¤Î¥Þ¥·¥ó¤Ë¨»þ¤Ë¤½¤Î¸ú²Ì¤òµÚ¤Ü¤¹¤³¤È¤¬²Äǽ¤È¤Ê¤ê¤Þ¤¹¡£ + ¥¢¥«¥¦¥ó¥È¤¬´í¸±¤Ë»¯¤µ¤ì¤¿¤È¤­¤Ë¡¢ + ¤¹¤Ù¤Æ¤Î¥Þ¥·¥ó¾å¤Î´ØÏ¢¤¹¤ë¥Ñ¥¹¥ï¡¼¥É¤ò¨ºÂ¤ËÊѹ¹¤¹¤ëǽÎϤò²á¾®É¾²Á¤·¤Æ¤Ï¤¤¤±¤Þ¤»¤ó¡£ + Kerberos ¤Ç¤Ï¡¢Kerberos ¥Á¥±¥Ã¥È¤Ë¥¿¥¤¥à¥¢¥¦¥È¤òÀßÄê¤Ç¤­¡¢ + ÀßÄꤷ¤¿´ü´Ö¤¬·Ð²á¤¹¤ë¤È¥æ¡¼¥¶¤Ë¿·¤·¤¤¥Ñ¥¹¥ï¡¼¥É¤òÁª¤Ö¤è¤¦¤ËÍ׵᤹¤ë¤È¤¤¤Ã¤¿ÄɲäÎÀ©¸Â¤ò²Ý¤¹¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£ @@ -498,134 +400,43 @@ SUID/SGID ¥Ð¥¤¥Ê¥ê¤Î°ÂÁ´À­¤ò¹â¤á¤ë - ntalk - - - comsat - - - finger - - º½¾ì (sandbox) - sshd + &man.sshd.8; - - telnetd - - - rshd - - - rlogind - - ÍÑ¿´¿¼¤¤¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ï¡¢ - ¼«Ê¬¤ËɬÍפʥµ¡¼¥Ð¥×¥í¥»¥¹¤À¤±¤ò²áÉÔ­¤Ê¤¯¼Â¹Ô¤µ¤»¤ë¤â¤Î¤Ç¤¹¡£ + ÍÑ¿´¿¼¤¤¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ï¡¢É¬Íפʥµ¡¼¥Ó¥¹¤À¤±¤òÍ­¸ú¤Ë¤·¡¢ ¥µ¡¼¥É¥Ñ¡¼¥Æ¥£À½¤Î¥µ¡¼¥Ð¤Ï¡¢ - ¤è¤¯¥Ð¥°¤ò»ý¤Ã¤Æ¤¤¤¬¤Á¤À¤È¤¤¤¦¤³¤È¤ËÃí°Õ¤·¤Æ²¼¤µ¤¤¡£ - ¤¿¤È¤¨¤Ð¡¢¸Å¤¤¥Ð¡¼¥¸¥ç¥ó¤Î - imapd ¤ä - popper - ¤ò¼Â¹Ô¤µ¤»¤Æ¤ª¤¯¤Î¤Ï¡¢Á´À¤³¦¤ËËüǽ¤Î + ¤è¤¯¥Ð¥°¤ò»ý¤Ã¤Æ¤¤¤¬¤Á¤À¤È¤¤¤¦¤³¤È¤ËÃí°Õ¤·¤Æ¤¤¤ë¤â¤Î¤Ç¤¹¡£ + Ãí°Õ¿¼¤¯¥Á¥§¥Ã¥¯¤·¤Æ¤¤¤Ê¤¤¥µ¡¼¥Ð¤Ï¡¢·è¤·¤Æ¼Â¹Ô¤·¤Æ¤Ï¤¤¤±¤Þ¤»¤ó¡£ + ¿¤¯¤Î¥Ç¡¼¥â¥ó¤Ï¡¢¥µ¡¼¥Ó¥¹ÀìÍѤΥ¢¥«¥¦¥ó¥È¡¢¤â¤·¤¯¤Ï + º½¾ì (sandbox) ¤Çµ¯Æ°¤µ¤»¤ë¤³¤È¤¬¤Ç¤­¤ë¤Î¤Ç¡¢ root - ¤ÎÀÚÉä¤òÍ¿¤¨¤Æ¤¤¤ë¤è¤¦¤Ê¤â¤Î¤Ç¤¹¡£ - ¼«Ê¬¤ÇÃí°Õ¿¼¤¯¥Á¥§¥Ã¥¯¤·¤Æ¤¤¤Ê¤¤¥µ¡¼¥Ð¤Ï¡¢ - ·è¤·¤Æ¼Â¹Ô¤·¤Æ¤Ï¤¤¤±¤Þ¤»¤ó¡£ - root - ¤Ç¼Â¹Ô¤µ¤»¤ëɬÍפΤ¢¤ë¥µ¡¼¥Ð¤Ï¤Û¤È¤ó¤É¤¢¤ê¤Þ¤»¤ó¡£¤¿¤È¤¨¤Ð¡¢ - ntalk, - comsat, - finger ¥Ç¡¼¥â¥ó¤ò¡¢ - ÀìÍѥ桼¥¶¤Î º½¾ì (sandbox) - ¤Ç¼Â¹Ô¤µ¤»¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£ - ´ÉÍý¼Ô¤¬ËÄÂç¤Ê¿ô¤ÎÌäÂê¤ò·Ð¸³¤·¤Æ¤¤¤Ê¤¤¤Î¤Ê¤é¡¢ - ¤³¤Î¡Öº½¾ì¡×¤Ï´°àú¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¤¬¡¢ - ¥»¥­¥å¥ê¥Æ¥£¤Ë´Ø¤¹¤ë¥¿¥Þ¥Í¥®Åª¥¢¥×¥í¡¼¥Á¤Ï¤³¤³¤Ç¤âÀ®¤êΩ¤Á¤Þ¤¹¡£ - º½¾ì¤Ç¼Â¹Ô¤µ¤ì¤Æ¤¤¤ë¥µ¡¼¥Ð¥×¥í¥»¥¹¤ò·Ðͳ¤·¤Æ¿¯Æþ¤ò²Ì¤¿¤¹¤³¤È¤¬¤Ç¤­¤¿¤È¤·¤Æ¤â¡¢ - ¹¶·â¼Ô¤Ï¤µ¤é¤Ëº½¾ì¤«¤é³°¤Ëæ½Ð¤·¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£ - ¹¶·â¼Ô¤¬Ä̲᤻¤Í¤Ð¤Ê¤é¤Ê¤¤Áؤοô¤¬Áý¤¨¤ì¤ÐÁý¤¨¤ë¤Û¤É¡¢ - ¤½¤ì¤À¤±¹¶·â¼Ô¤¬¿¯Æþ¤ËÀ®¸ù¤¹¤ë³ÎΨ¤¬¸º¤ê¤Þ¤¹¡£ - Root ¤ÎÈ´¤±·ê¤ÏÎò»ËŪ¤Ë¡¢´ðËÜ¥·¥¹¥Æ¥à¥µ¡¼¥Ð¤â´Þ¤á¡¢ - root - ¸¢¸Â¤Ç¼Â¹Ô¤µ¤ì¤ë¤Û¤È¤ó¤É¤¹¤Ù¤Æ¤Î¥µ¡¼¥Ð¥×¥í¥»¥¹¤Çȯ¸«¤µ¤ì¤Æ¤¤¤Þ¤¹¡£ - ¥æ¡¼¥¶¤¬ sshd ·Ðͳ¤Ç¤Î¤ß¥í¥°¥¤¥ó¤·¡¢ - telnetd, - rshd, - rlogind - ·Ðͳ¤Ç¥í¥°¥¤¥ó¤¹¤ë¤³¤È¤¬·è¤·¤Æ¤Ê¤¤¥Þ¥·¥ó¤ò²ÔƯ¤µ¤»¤Æ¤¤¤ë¤Î¤Ç¤¢¤ì¤Ð¡¢ - ¤½¤ì¤é¤Î¥µ¡¼¥Ó¥¹¤òÄä»ß¤µ¤»¤Æ²¼¤µ¤¤! + ¸¢¸Â¤Ç¥µ¡¼¥Ó¥¹¤ò¼Â¹Ô¤¹¤ëÁ°¤Ë¤Ï¡¢¤è¤¯¹Í¤¨¤Æ¤¯¤À¤µ¤¤¡£ + &man.telnetd.8; ¤Þ¤¿¤Ï &man.rlogind.8; + ¤Î¤è¤¦¤Ê°ÂÁ´¤Ç¤Ï¤Ê¤¤¥µ¡¼¥Ó¥¹¤ÏÍ­¸ú¤Ë¤·¤Ê¤¤¤Ç¤¯¤À¤µ¤¤¡£ - &os; ¤Ç¤Ï¡¢º£¤Ç¤Ï - ntalkd, - comsat, - finger - ¤Ïº½¾ì¤Ç¼Â¹Ô¤µ¤»¤ë¤³¤È¤¬¥Ç¥Õ¥©¥ë¥È¤Ë¤Ê¤Ã¤Æ¤¤¤Þ¤¹¡£ - ¼¡¤Ëº½¾ì¤Ç¼Â¹Ô¤µ¤»¤ë¤Ù¤­¥×¥í¥°¥é¥à¤Î¸õÊä¤È¤·¤Æ¡¢ - &man.named.8; ¤¬¤¢¤ê¤Þ¤¹¡£ - /etc/defaults/rc.conf ¥Õ¥¡¥¤¥ë¤Ë¤Ï¡¢ - named - ¤òº½¾ì¤Ç¼Â¹Ô¤¹¤ë¤¿¤á¤ËɬÍפʰú¿ô¤¬¥³¥á¥ó¥È¥¢¥¦¥È¤µ¤ì¤¿·Á¼°¤Ç´Þ¤Þ¤ì¤Æ¤¤¤Þ¤¹¡£ - ¿·¤·¤¤¥·¥¹¥Æ¥à¤ò¥¤¥ó¥¹¥È¡¼¥ë¤·¤Æ¤¤¤ë¤«¡¢ - ¤½¤ì¤È¤â´û¸¤Î¥·¥¹¥Æ¥à¤ò¥¢¥Ã¥×¥°¥ì¡¼¥É¤·¤Æ»È¤Ã¤Æ¤¤¤ë¤«¤Ë°Í¸¤·¤Þ¤¹¤¬¡¢ - º½¾ì¤È¤·¤Æ»ÈÍѤ¹¤ëÆÃÊ̤Υ桼¥¶¥¢¥«¥¦¥ó¥È¤¬¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤Æ¤¤¤Ê¤¤¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - ÍÑ¿´¿¼¤¤¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ç¤¢¤ì¤Ð¡¢¤Ç¤­¤ë¤À¤±¤¤¤Ä¤Ç¤â¸¦µæ¤òÂդ餺¡¢ - ¥µ¡¼¥Ð¤Ëº½¾ì¤ò»Å¹þ¤à¤â¤Î¤Ç¤·¤ç¤¦¡£ - - - sendmail - - - Ä̾º½¾ì¤Ç¼Â¹Ô¤·¤Ê¤¤¥µ¡¼¥Ð¤¬Â¾¤Ë¤¤¤¯¤Ä¤«¤¢¤ê¤Þ¤¹¡£ - sendmail, - popper, - imapd, - ftpd ¤Ê¤É¤Ç¤¹¡£ - ¤³¤ì¤é¤Î¤¦¤Á¤¤¤¯¤Ä¤«¤Î¥µ¡¼¥Ð¤Ë¤ÏÂå¤ï¤ê¤È¤Ê¤ë¤â¤Î¤¬¤¢¤ê¤Þ¤¹¤¬¡¢ - Âå¤ï¤ê¤Î¤â¤Î¤ò¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ë¤Ë¤Ï¡¢ - ¤¢¤Ê¤¿¤¬»×¤¦¤è¤ê¿¤¯¤Î»Å»ö¤¬É¬Íפˤʤ뤫¤â¤·¤ì¤Þ¤»¤ó - (ÊØÍø¤µ¤È¤¤¤¦Í×ÁǤ¬¤Þ¤¿¤â¾¡Íø¤ò¼ý¤á¤ë¤ï¤±¤Ç¤¹)¡£ - ¤³¤ì¤é¤Î¥µ¡¼¥Ð¤Ï¡¢root - ¸¢¸Â¤Ç¼Â¹Ô¤·¤Ê¤±¤ì¤Ð¤Ð¤Ê¤é¤Ê¤¤¤«¤â¤·¤ì¤Þ¤»¤ó¡£¤Þ¤¿¡¢ - ¤³¤ì¤é¤Î¥µ¡¼¥Ð·Ðͳ¤ÇÀ¸¤¸¤ë¿¯Æþ¤ò¸¡½Ð¤¹¤ë¤¿¤á¤Ë¤Ï¡¢ - ¾¤Î»ÅÁȤߤËÍê¤é¤Ê¤¯¤Æ¤Ï¤Ê¤é¤Ê¤¤¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - - ¥·¥¹¥Æ¥à¤Î root - ¸¢¸Â¤ÎÀøºßŪ¤Ê·ê¤Ç¾¤ËÂ礭¤Ê¤â¤Î¤Ë¤Ï¡¢ - ¥·¥¹¥Æ¥à¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤µ¤ì¤¿ suid-root/sgid ¥Ð¥¤¥Ê¥ê¤¬¤¢¤ê¤Þ¤¹¡£ + ¾¤Î¥·¥¹¥Æ¥à¤ÎÀøºßŪ¤Ê¥»¥­¥å¥ê¥Æ¥£¥Û¡¼¥ë¤Ë¤Ï¡¢ + SUID-root ¤ª¤è¤Ó SGID ¥Ð¥¤¥Ê¥ê¤¬¤¢¤ê¤Þ¤¹¡£ ¤³¤ì¤é¤Î¥Ð¥¤¥Ê¥ê¤Ï¡¢ - rlogin ¤Î¤è¤¦¤Ë¡¢/bin, /sbin, /usr/bin ¤Þ¤¿¤Ï /usr/sbin ¤Ë¸ºß¤¹¤ë¤â¤Î¤¬¤Û¤È¤ó¤É¤Ç¤¹¡£ 100% °ÂÁ´¤Ê¤â¤Î¤Ï¸ºß¤·¤Ê¤¤¤È¤Ï¤¤¤¨¡¢ - ¥·¥¹¥Æ¥à¥Ç¥Õ¥©¥ë¥È¤Î siud/sgid ¥Ð¥¤¥Ê¥ê¤ÏÈæ³ÓŪ°ÂÁ´¤È¤¤¤¨¤Þ¤¹¡£ - ¤½¤ì¤Ç¤â¤Ê¤ª¡¢root - ¥»¥­¥å¥ê¥Æ¥£¥Û¡¼¥ë¤¬¤³¤ì¤é¤Î¥Ð¥¤¥Ê¥ê¤Ë¤È¤­¤ª¤êȯ¸«¤µ¤ì¤Æ¤¤¤Þ¤¹¡£ - 1998 ǯ¤Ë xterm - (ÉáÄÌ¡¢suid ÀßÄꤵ¤ì¤Æ¤¤¤Þ¤¹) ¤òÀȼå¤Ë¤·¤Æ¤¤¤¿ - Xlib ¤Î - root - ¥»¥­¥å¥ê¥Æ¥£¥Û¡¼¥ë¤¬¸«¤Ä¤«¤ê¤Þ¤·¤¿¡£ - °ÂÁ´¤Ç¤¢¤ëÊý¤¬¤è¤¤¤Î¤Ç¡¢ - ÍÑ¿´¿¼¤¤¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ï»ÄÇ°¤Ë»×¤¤¤Ê¤¬¤é¤â¡¢ - ¥¹¥¿¥Ã¥Õ¤Î¤ß¤¬¼Â¹Ô¤¹¤ëɬÍפ¬¤¢¤ë suid ¥Ð¥¤¥Ê¥ê¤Ï¡¢ - ¥¹¥¿¥Ã¥Õ¤Î¤ß¤¬¥¢¥¯¥»¥¹²Äǽ¤ÊÆÃÊ̤ʥ°¥ë¡¼¥×¤Ë´Þ¤á¤ë¤è¤¦¤ËÀ©¸Â¤ò²Ã¤¨¡¢ - ï¤â»È¤ï¤Ê¤¤ suid ¥Ð¥¤¥Ê¥ê¤Ï - (chmod 000 ¤ò¼Â¹Ô¤·¤Æ) ÊÒÉÕ¤±¤Æ¤·¤Þ¤¦¤Ç¤·¤ç¤¦¡£ - ¥Ç¥£¥¹¥×¥ì¥¤¤ò»ý¤¿¤Ê¤¤¥µ¡¼¥Ð¤Ï¡¢°ìÈÌŪ¤Ë - xterm ¤Î¥Ð¥¤¥Ê¥ê¤òɬÍפȤ·¤Þ¤»¤ó¡£ - sgid ¥Ð¥¤¥Ê¥ê¤â¤Û¤È¤ó¤ÉƱÍÍ¤Î´í¸±¤Ê¸ºß¤Ë¤Ê¤êÆÀ¤Þ¤¹¡£ - ¿¯Æþ¼Ô¤¬ kmem ¤Ë sgid ¤µ¤ì¤¿¥Ð¥¤¥Ê¥ê¤òÇˤ뤳¤È¤¬¤Ç¤­¤¿¾ì¹ç¡¢ + ¥·¥¹¥Æ¥à¥Ç¥Õ¥©¥ë¥È¤Î SUID/SGID ¥Ð¥¤¥Ê¥ê¤ÏÈæ³ÓŪ°ÂÁ´¤È¤¤¤¨¤Þ¤¹¡£ + SUID ¥Ð¥¤¥Ê¥ê¤Ï¡¢ + ¥¹¥¿¥Ã¥Õ¤Î¤ß¤¬¥¢¥¯¥»¥¹²Äǽ¤ÊÆÃÊ̤ʥ°¥ë¡¼¥×¤ËÀ©¸Â¤·¡¢ + »È¤ï¤Ê¤¤ SUID ¥Ð¥¤¥Ê¥ê¤Ïºï½ü¤¹¤ë¤³¤È¤¬¿ä¾©¤µ¤ì¤Þ¤¹¡£ + SGID ¥Ð¥¤¥Ê¥ê¤â¤Û¤È¤ó¤ÉƱÍÍ¤Î´í¸±¤Ê¸ºß¤Ë¤Ê¤êÆÀ¤Þ¤¹¡£ + ¿¯Æþ¼Ô¤¬ kmem ¤Ë SGID ¤µ¤ì¤¿¥Ð¥¤¥Ê¥ê¤òÇˤ뤳¤È¤¬¤Ç¤­¤¿¾ì¹ç¡¢ ¤½¤Î¿¯Æþ¼Ô¤Ï /dev/kmem ¤òÆɤ߽Ф¹¤³¤È¤¬¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ë¤Ç¤·¤ç¤¦¡£¤Ä¤Þ¤ê¡¢ °Å¹æ²½¤µ¤ì¤¿¥Ñ¥¹¥ï¡¼¥É¥Õ¥¡¥¤¥ë¤òÆɤ߽Ф¹¤³¤È¤¬¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ë¤Î¤Ç¡¢ - ¥Ñ¥¹¥ï¡¼¥É¤ò»ý¤Ä¤É¤Î¥¢¥«¥¦¥ó¥È¤ò¤â¡¢ - ÀøºßŪ¤Ê´í¸±¤Ë»¯¤¹¤³¤È¤Ë¤Ê¤ê¤Þ¤¹¡£Â¾¤Ë¤â¡¢ + ¥æ¡¼¥¶¥¢¥«¥¦¥ó¥È¤ò¡¢ÀøºßŪ¤Ê´í¸±¤Ë»¯¤¹¤³¤È¤Ë¤Ê¤ê¤Þ¤¹¡£Â¾¤Ë¤â¡¢ kmem ¥°¥ë¡¼¥×¤òÇˤä¿¿¯Æþ¼Ô¤¬ pty ¤òÄ̤·¤ÆÁ÷¤é¤ì¤¿¥­¡¼¥¹¥È¥í¡¼¥¯¤ò´Æ»ë¤Ç¤­¤ë¤È¤¤¤¦´í¸±¤¬¤¢¤ê¤Þ¤¹¡£ ¥­¡¼¥¹¥È¥í¡¼¥¯¤Ë¤Ï¡¢°ÂÁ´¤ÊÊýË¡¤Ç¥í¥°¥¤¥ó¤¹¤ë¥æ¡¼¥¶¤¬»È¤Ã¤Æ¤¤¤ë pty @@ -642,16 +453,10 @@ ¥æ¡¼¥¶¥¢¥«¥¦¥ó¥È¤Î°ÂÁ´À­¤ò¹â¤á¤ë ¥æ¡¼¥¶¥¢¥«¥¦¥ó¥È¤Ï¡¢ÉáÄÌ¡¢°ÂÁ´À­¤ò¹â¤á¤ë¤³¤È¤¬ºÇ¤âº¤Æñ¤Ç¤¹¡£ - ¥¹¥¿¥Ã¥Õ¤ËÂФ·¤Æ¤Ï¡¢¤È¤Æ¤â¸·³Ê¤Ê¥¢¥¯¥»¥¹À©¸Â¤ò¶¯À©¤·¥Ñ¥¹¥ï¡¼¥É¤ò - ¥¢¥¹¥¿¥ê¥¹¥¯ ¤Ç³°¤¹¤³¤È¤¬¤Ç¤­¤ë¤Ç¤·¤ç¤¦¤¬¡¢ - ´ÉÍý¼Ô¤¬»ý¤Á¤¦¤ë°ìÈ̥桼¥¶¤¹¤Ù¤Æ¤Î¥¢¥«¥¦¥ó¥È¤ËÂФ·¤ÆƱ¤¸¤³¤È¤Ï¤Ç¤­¤Ê¤¤¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - ´ÉÍý¼Ô¤¬½½Ê¬¤ËÅýΨ¤ò¤È¤ë¤³¤È¤¬¤Ç¤­¤ë¤Ê¤é¡¢´ÉÍý¼Ô¤Ï¾¡Íø¤·¡¢ - ¥æ¡¼¥¶¤Î¥¢¥«¥¦¥ó¥È¤Î°ÂÁ´¤òŬÀڤ˳ÎÊݤǤ­¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - ¤½¤ì¤¬¤Ç¤­¤Ê¤¤¤Ê¤é¤Ð¡¢ - ¤è¤ê¤¤¤Ã¤½¤¦µ¤¤òÇۤäưìÈ̥桼¥¶¤Î¥¢¥«¥¦¥ó¥È¤ò´Æ»ë¤¹¤ë¤è¤ê¤Û¤«¤¢¤ê¤Þ¤»¤ó¡£ - °ìÈ̥桼¥¶¥¢¥«¥¦¥ó¥È¤ËÂФ· ssh ¤ä Kerberos ¤òÍøÍѤ¹¤ë¤³¤È¤Ë¤Ï¡¢ - ¥·¥¹¥Æ¥à´ÉÍý¤¬¤µ¤é¤ËÁý¤¨¤¿¤ê¥Æ¥¯¥Ë¥«¥ë¥µ¥Ý¡¼¥È¤¬É¬Íפˤʤë¤Ê¤É¤ÎÌäÂ꤬¤¢¤ê¤Þ¤¹¡£ - ¤½¤ì¤Ç¤â¡¢°Å¹æ²½¥Ñ¥¹¥ï¡¼¥É¥Õ¥¡¥¤¥ë¤ÈÈæ³Ó¤¹¤ë¤È¤Ï¤ë¤«¤ËÎɤ¤²ò¤Ç¤¹¡£ + µ¤¤òÇۤäƥ桼¥¶¥¢¥«¥¦¥ó¥È¤ò´Æ»ë¤¹¤ë¤è¤ê¤Û¤«¤¢¤ê¤Þ¤»¤ó¡£ + ¥æ¡¼¥¶¥¢¥«¥¦¥ó¥È¤ËÂФ· &man.ssh.1; ¤ä Kerberos ¤òÍøÍѤ¹¤ë¤Ë¤Ï¡¢ + ¥·¥¹¥Æ¥à´ÉÍý¤¬¤µ¤é¤ËÁý¤¨¤¿¤ê¥Æ¥¯¥Ë¥«¥ë¥µ¥Ý¡¼¥È¤¬É¬Íפˤʤê¤Þ¤¹¤¬¡¢ + °Å¹æ²½¥Ñ¥¹¥ï¡¼¥É¥Õ¥¡¥¤¥ë¤ÈÈæ³Ó¤¹¤ë¤È¤Ï¤ë¤«¤ËÎɤ¤ÊýË¡¤òÄ󶡤·¤Þ¤¹¡£ @@ -659,7 +464,7 @@ ¤Ç¤­¤ë¤À¤±Â¿¤¯¤Î¥Ñ¥¹¥ï¡¼¥É¤ò¥¢¥¹¥¿¥ê¥¹¥¯¤Ç³°¤·¡¢ ¤½¤ì¤é¤Î¥¢¥«¥¦¥ó¥È¤Î¥¢¥¯¥»¥¹¤Ë¤Ï - ssh ¤ä Kerberos ¤ò»È¤¦¤è¤¦¤Ë¤¹¤ë¤³¤È¤¬¡¢Í£°ì¤Î³Î¼Â¤ÊÊýË¡¤Ç¤¹¡£ + &man.ssh.1; ¤ä Kerberos ¤ò»È¤¦¤è¤¦¤Ë¤¹¤ë¤³¤È¤¬¡¢Í£°ì¤Î³Î¼Â¤ÊÊýË¡¤Ç¤¹¡£ °Å¹æ²½¥Ñ¥¹¥ï¡¼¥É¥Õ¥¡¥¤¥ë (/etc/spwd.db) ¤Ï root @@ -667,90 +472,79 @@ ¤¿¤È¤¨¡¢¿¯Æþ¼Ô¤¬ root ¤Î½ñ¤­¹þ¤ß¸¢¸Â¤ÏÆÀ¤é¤ì¤Ê¤¯¤È¤â¡¢ Æɤ߽Ф·¥¢¥¯¥»¥¹¸¢¸Â¤òÆÀ¤ë¤³¤È¤Ï²Äǽ¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - ¥»¥­¥å¥ê¥Æ¥£¥¹¥¯¥ê¥×¥È¤Ç¾ï¤Ë¥Ñ¥¹¥ï¡¼¥É¥Õ¥¡¥¤¥ë¤ÎÊѹ¹¤ò¥Á¥§¥Ã - ¥¯¤·¡¢Êó¹ð¤¹¤ë¤è¤¦¤Ë¤¹¤Ù¤­¤Ç¤¹ (¥Õ¥¡¥¤¥ë¤Î´°Á´À­¤Î¥Á¥§¥Ã¥¯ - ÀỲ¾È)¡£ + Àá¤ÇÀâÌÀ¤µ¤ì¤Æ¤¤¤ë¤è¤¦¤Ë¡¢ + ¥»¥­¥å¥ê¥Æ¥£¥¹¥¯¥ê¥×¥È¤Ç¥Ñ¥¹¥ï¡¼¥É¥Õ¥¡¥¤¥ë¤ÎÊѹ¹¤ò¥Á¥§¥Ã¥¯¤·¡¢ + Êó¹ð¤¹¤ë¤è¤¦¤Ë¤¹¤Ù¤­¤Ç¤¹¡£ - ¥«¡¼¥Í¥ë¤Î¥³¥¢¡¢raw ¥Ç¥Ð¥¤¥¹¡¢¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Î°ÂÁ´À­¤ò - ¹â¤á¤ë + ¥«¡¼¥Í¥ë¤Î¥³¥¢¡¢raw ¥Ç¥Ð¥¤¥¹¡¢ + ¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤Î°ÂÁ´À­¤ò¹â¤á¤ë - root - ¤Î¸¢¸Â¤òÇˤë¤È¡¢¹¶·â¼Ô¤Ï¤Û¤È¤ó¤É²¿¤Ç¤â¤Ç¤­¤Þ¤¹¤¬¡¢ - Æä˽ÅÊõ¤µ¤ì¤ëÆÃÄê¤Î»öÊÁ¤â¤¤¤¯¤Ä¤«¤¢¤ê¤Þ¤¹¡£ - ¤¿¤È¤¨¤Ð¡¢ºÇ¶á¤Î¥«¡¼¥Í¥ë¤Ï¡¢ÁȤ߹þ¤ß¤Î¥Ñ¥±¥Ã¥ÈÇÁ¤­¸«¥Ç¥Ð¥¤¥¹ + ºÇ¶á¤Î¥«¡¼¥Í¥ë¤Ï¡¢ÁȤ߹þ¤ß¤Î¥Ñ¥±¥Ã¥ÈÇÁ¤­¸«¥Ç¥Ð¥¤¥¹ (packet sniffing device) ¥É¥é¥¤¥Ð¤òÈ÷¤¨¤Æ¤¤¤ë¤â¤Î¤¬¤Û¤È¤ó¤É¤Ç¤¹¡£ - &os; ¤Ç¤Ï bpf ¥Ç¥Ð¥¤¥¹¤È¸Æ¤Ð¤ì¤Æ¤¤¤Þ¤¹¡£ - ¿¯Æþ¼Ô¤ÏÉáÄÌ¡¢ - ¿¯ÆþºÑ¤ß¤Î¥Þ¥·¥ó¤Ç¥Ñ¥±¥Ã¥ÈÇÁ¤­¸«¥×¥í¥°¥é¥à¤ò¼Â¹Ô¤µ¤»¤è¤¦¤È»î¤ß¤Þ¤¹¡£ - ¿¯Æþ¼Ô¤Ë¤ï¤¶¤ï¤¶¤½¤¦¤¤¤¦µ¡Ç½¤òÄ󶡤¹¤ëɬÍפϤʤ¤¤Î¤Ç¡¢ - ¤Û¤È¤ó¤É¤Î¥·¥¹¥Æ¥à¤Ç bpf - ¥Ç¥Ð¥¤¥¹¤òÁȤ߹þ¤à¤Ù¤­¤Ç¤Ï¤¢¤ê¤Þ¤»¤ó¡£ + &os; ¤Ç¤Ï bpf ¤È¸Æ¤Ð¤ì¤Æ¤¤¤Þ¤¹¡£ + ¤³¤Î¥Ç¥Ð¥¤¥¹¤Ï DHCP ¤ÇɬÍפȤʤ뤿¤á¡¢ + DHCP ¤òÄ󶡤·¤¿¤ê»È¤¦É¬ÍפΤʤ¤¥·¥¹¥Æ¥à¤Ç¤Ï¡¢ + ¥«¥¹¥¿¥à¥«¡¼¥Í¥ë¥³¥ó¥Õ¥£¥°¥ì¡¼¥·¥ç¥ó¥Õ¥¡¥¤¥ë¤«¤é³°¤¹¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£ - sysctl + &man.sysctl.8; - bpf ¥Ç¥Ð¥¤¥¹¤ò³°¤·¤Æ¤â¡¢ - /dev/mem ¤È - /dev/kmem - ¤È¤¤¤¦Çº¤ß¤Î¼ï¤¬¤Þ¤À»Ä¤Ã¤Æ¤¤¤Þ¤¹¡£¤³¤ÎÌäÂê¤Ë´Ø¤·¤Æ¤Ï¡¢¿¯Æþ¼Ô¤Ï - raw ¥Ç¥£¥¹¥¯¥Ç¥Ð¥¤¥¹¤Ë½ñ¤­¹þ - ¤à¤³¤È¤â¤Ç¤­¤Þ¤¹¡£¤Û¤«¤Ë¤â¡¢¥â¥¸¥å¡¼¥ë¥í¡¼¥À¡¢&man.kldload.8; - ¤È¤¤¤¦¡¢Ê̤Υ«¡¼¥Í¥ëµ¡Ç½¤¬¤¢¤ê¤Þ¤¹¡£¤ä¤ëµ¤¤Þ¤ó¤Þ¤ó¤Î¿¯Æþ¼Ô¤Ï¡¢KLD - ¥â¥¸¥å¡¼¥ë¤ò»È¤Ã¤Æ¼«Ê¬Æȼ«¤Î bpf - ¤â¤·¤¯¤Ï¤½¤Î¾ÇÁ¤­¸«¥Ç¥Ð¥¤¥¹¤òÆ°ºîÃæ¤Î¥«¡¼¥Í¥ë¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤Ç¤­¤Þ¤¹¡£ - ¤³¤ÎÌäÂê¤òÈò¤±¤ë¤¿¤á¡¢ - ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ï¥«¡¼¥Í¥ë¤ò¤è¤ê¹â¤¤¥»¥­¥å¥¢¥ì¥Ù¥ë¡¢ - ¾¯¤Ê¤¯¤È¤â¥»¥­¥å¥¢¥ì¥Ù¥ë 1 ¤Ç¼Â¹Ô¤µ¤»¤ëɬÍפ¬¤¢¤ê¤Þ¤¹¡£ + bpf ¤ò³°¤·¤Æ¤â¡¢ + /dev/mem ¤ª¤è¤Ó + /dev/kmem ¤È¤¤¤¦ÌäÂ꤬¤Þ¤À»Ä¤Ã¤Æ¤¤¤Þ¤¹¡£ + ¿¯Æþ¼Ô¤Ï raw ¥Ç¥£¥¹¥¯¥Ç¥Ð¥¤¥¹¤Ë½ñ¤­¹þ¤à¤³¤È¤â¤Ç¤­¤Þ¤¹¡£ + ¤ä¤ëµ¤¤Þ¤ó¤Þ¤ó¤Î¿¯Æþ¼Ô¤Ï¡¢&man.kldload.8; + ¤ò»È¤Ã¤Æ¼«Ê¬Æȼ«¤Î bpf¡¢ + ¤â¤·¤¯¤Ï¾¤ÎÇÁ¤­¸«¥Ç¥Ð¥¤¥¹¤òÆ°ºîÃæ¤Î¥«¡¼¥Í¥ë¤Ë¥¤¥ó¥¹¥È¡¼¥ë¤Ç¤­¤Þ¤¹¡£ + ¤³¤ÎÌäÂê¤òÈò¤±¤ë¤¿¤á¡¢¥«¡¼¥Í¥ë¤ò¤è¤ê¹â¤¤¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¡¢ + ¾¯¤Ê¤¯¤È¤â¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë 1 ¤Ç¼Â¹Ô¤µ¤»¤ëɬÍפ¬¤¢¤ê¤Þ¤¹¡£ - ¥«¡¼¥Í¥ë¤Î¥»¥­¥å¥¢¥ì¥Ù¥ë¤Ï¤¤¤¯¤Ä¤«¤ÎÊýË¡¤ÇÀßÄê¤Ç¤­¤Þ¤¹¡£ - ¸½ºßÆ°¤¤¤Æ¤¤¤ë¥«¡¼¥Í¥ë¤Î¥»¥­¥å¥¢¥ì¥Ù¥ë¤ò¹â¤á¤ëºÇ¤â´Êñ¤ÊÊýË¡¤Ï¡¢ - sysctl ¤ò»È¤Ã¤Æ - kern.securelevel - ¥«¡¼¥Í¥ëÊÑ¿ô¤òÁàºî¤¹¤ëÊýË¡¤Ç¤¹¡£ + ¥«¡¼¥Í¥ë¤Î¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤Ï¤¤¤¯¤Ä¤«¤ÎÊýË¡¤ÇÀßÄê¤Ç¤­¤Þ¤¹¡£ + ¸½ºßÆ°¤¤¤Æ¤¤¤ë¥«¡¼¥Í¥ë¤Î¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤ò¹â¤á¤ëºÇ¤â´Êñ¤ÊÊýË¡¤Ï¡¢ + kern.securelevel ¤òÀßÄꤹ¤ëÊýË¡¤Ç¤¹¡£ &prompt.root; sysctl kern.securelevel=1 - ¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢&os; ¤Î¥«¡¼¥Í¥ë¤Ï¥»¥­¥å¥¢¥ì¥Ù¥ë -1 ¤Çµ¯Æ°¤·¤Þ¤¹¡£ + ¥Ç¥Õ¥©¥ë¥È¤Ç¤Ï¡¢&os; ¤Î¥«¡¼¥Í¥ë¤Ï¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë + -1 ¤Çµ¯Æ°¤·¤Þ¤¹¡£ + ¤³¤Î¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤Ï¡¢ + Êѹ¹ÉԲĤΥե¡¥¤¥ë¥Õ¥é¥°¤ò³°¤·¤¿¤ê¡¢ + ¤¹¤Ù¤Æ¤Î¥Ç¥Ð¥¤¥¹¤ËÂФ·¤ÆÆɤ߹þ¤ß¤ª¤è¤Ó½ñ¤­¹þ¤ß¤¬¤Ç¤­¤¿¤ê¤¹¤ë¤Î¤Ç¡¢ + insecure mode ¤È¸Æ¤Ð¤ì¤Þ¤¹¡£ ¤³¤Î¥»¥­¥å¥¢¥ì¥Ù¥ë¤Ï¡¢´ÉÍý¼Ô¤Þ¤¿¤Ï &man.init.8; ¤Ë¤è¤ëµ¯Æ°»þ¤Î¥¹¥¯¥ê¥×¥È¤Ë¤è¤êÊѹ¹¤µ¤ì¤Ê¤¤¸Â¤ê -1 ¤Î¤Þ¤Þ¤Ç¤¹¡£ - /etc/rc.conf ¥Õ¥¡¥¤¥ë¤Ç¡¢ - kern_securelevel_enable ÊÑ¿ô¤ò - YES¡¢ + /etc/rc.conf ¤Ë¤ª¤¤¤Æ¡¢ + kern_securelevel_enable ¤ò + YES ¤È¤·¡¢ kern_securelevel - ÊÑ¿ô¤òɬÍפȤ¹¤ëÃͤËÀßÄꤹ¤ë¤³¤È¤Ç¡¢ + ¤ËɬÍפȤ¹¤ëÃͤòÀßÄꤹ¤ë¤³¤È¤Ç¡¢ ¥·¥¹¥Æ¥àµ¯Æ°»þ¤Ë¥»¥­¥å¥¢¥ì¥Ù¥ë¤ò¹â¤á¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£ - &os; - ¥·¥¹¥Æ¥à¤Îµ¯Æ°¥¹¥¯¥ê¥×¥È¼Â¹Ôľ¸å¤Î¥Ç¥Õ¥©¥ë¥È¤Î¥»¥­¥å¥¢¥ì¥Ù¥ë¤Ï - -1 ¤Ç¤¹¡£ - ¤³¤Î¥»¥­¥å¥¢¥ì¥Ù¥ë¤Ç¤Ï¡¢ - Êѹ¹ÉԲĤΥե¡¥¤¥ë¥Õ¥é¥°¤ò³°¤·¤¿¤ê¡¢ - ¤¹¤Ù¤Æ¤Î¥Ç¥Ð¥¤¥¹¤ËÂФ·¤ÆÆɤ߹þ¤ß¤ª¤è¤Ó½ñ¤­¹þ¤ß¤¬¤Ç¤­¤¿¤ê¤¹¤ë¤Î¤Ç¡¢ - insecure mode ¤È¸Æ¤Ð¤ì¤Þ¤¹¡£ - - ¥»¥­¥å¥¢¥ì¥Ù¥ë¤ò 1 °Ê¾å¤ËÀßÄꤹ¤ë¤È¡¢ + ¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤ò 1 °Ê¾å¤ËÀßÄꤹ¤ë¤È¡¢ ÄɲÃÀìÍѤª¤è¤ÓÊѹ¹ÉԲĥե¡¥¤¥ë¤Î¥Õ¥é¥°¤ò³°¤¹¤³¤È¤Ï¤Ç¤­¤Ê¤¯¤Ê¤ê¡¢ ¤Þ¤¿ raw ¥Ç¥Ð¥¤¥¹¤Ø¤Î¥¢¥¯¥»¥¹¤¬µñÈݤµ¤ì¤Þ¤¹¡£ ¤è¤ê¹â¤¤¥ì¥Ù¥ë¤ËÀßÄꤹ¤ë¤È¡¢¤è¤ê¿¤¯¤ÎÁàºî¤ËÀ©¸Â¤¬¤«¤«¤ê¤Þ¤¹¡£ - ³Æ¥»¥­¥å¥¢¥ì¥Ù¥ë¤Î´°Á´¤ÊÀâÌÀ¤Ë¤Ä¤¤¤Æ¤Ï¡¢ - &man.security.7; ¥Þ¥Ë¥å¥¢¥ë¥Ú¡¼¥¸¤ò¤´Í÷¤¯¤À¤µ¤¤¡£ + ³Æ¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤Î´°Á´¤ÊÀâÌÀ¤Ë¤Ä¤¤¤Æ¤Ï¡¢ + &man.security.7; ¤ª¤è¤Ó &man.init.8; ¤ò¤´Í÷¤¯¤À¤µ¤¤¡£ - ¥»¥­¥å¥¢¥ì¥Ù¥ë¤ò 1 °Ê¾å¤ËÀßÄꤷ¤¿¾ì¹ç¤Ë¤Ï¡¢ - X11 (/dev/io ¤Ø¤Î¥¢¥¯¥»¥¹¤¬¥Ö¥í¥Ã¥¯¤µ¤ì¤Þ¤¹) - ¤ä¥½¡¼¥¹¤«¤é &os; ¤ò¹½ÃÛ¤·¤Æ¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ë¤È¤­ - (installworld ¤Î¥×¥í¥»¥¹¤Ç¤Ï¡¢ - ¤¤¤¯¤Ä¤«¤Î¥Õ¥¡¥¤¥ë¤ÎÄɲÃÀìÍѤª¤è¤ÓÊѹ¹ÉԲĤΥե饰¤Ï°ì»þŪ¤Ë¥ê¥»¥Ã¥È¤µ¤ì¤Þ¤¹) - ¤Ê¤É¡¢¤½¤ì°Ê³°¤Ë¤âÌäÂ꤬°ú¤­µ¯¤³¤µ¤ì¤ë²ÄǽÀ­¤¬¤¢¤ê¤Þ¤¹¡£ - X11 ¤ÎÌäÂê¤Ë¤Ä¤¤¤Æ¤Ï¡¢ + ¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤ò 1 °Ê¾å¤ËÀßÄꤷ¤¿¾ì¹ç¤Ë¤Ï¡¢ + /dev/io ¤Ø¤Î¥¢¥¯¥»¥¹¤¬¥Ö¥í¥Ã¥¯¤µ¤ì¤ë¤¿¤á¡¢ + &xorg; ¤ä¡¢ + installworld ¤Î¥×¥í¥»¥¹¤Ç¤Ï¡¢ + ¤¤¤¯¤Ä¤«¤Î¥Õ¥¡¥¤¥ë¤ÎÄɲÃÀìÍѤª¤è¤ÓÊѹ¹ÉԲĤΥե饰¤Ï°ì»þŪ¤Ë¥ê¥»¥Ã¥È¤µ¤ì¤ë¤¿¤á¡¢ + ¥½¡¼¥¹¤«¤é &os; + ¤ò¹½ÃÛ¤·¤Æ¥¤¥ó¥¹¥È¡¼¥ë¤¹¤ë¤È¤­¤Ê¤É¤ÇÌäÂ꤬°ú¤­µ¯¤³¤µ¤ì¤ë²ÄǽÀ­¤¬¤¢¤ê¤Þ¤¹¡£ + &xorg; ¤ÎÌäÂê¤Ë¤Ä¤¤¤Æ¤Ï¡¢ µ¯Æ°¥×¥í¥»¥¹½é´ü¤Î¥»¥­¥å¥¢¥ì¥Ù¥ë¤¬½½Ê¬Ä㤤¤È¤­¤Ë &man.xdm.1; ¤òµ¯Æ°¤¹¤ë¤³¤È¤Ç¡¢¤³¤ÎÌäÂê¤ËÂбþ¤Ç¤­¤Þ¤¹¡£ ¤³¤Î¤è¤¦¤Ê±þµÞ½èÃ֤ϡ¢ - ¤¹¤Ù¤Æ¤Î¥»¥­¥å¥¢¥ì¥Ù¥ë¤ä¤½¤ì¤é¤¬²Ý¤¹ÀøºßŪ¤Ê¤¹¤Ù¤Æ¤ÎÀ©¸Â¤Ë¤ÏÂбþ¤Ç¤­¤Ê¤¤¤Ç¤·¤ç¤¦¡£ + ¤¹¤Ù¤Æ¤Î¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤ä¤½¤ì¤é¤¬²Ý¤¹ÀøºßŪ¤Ê¤¹¤Ù¤Æ¤ÎÀ©¸Â¤Ë¤ÏÂбþ¤Ç¤­¤Ê¤¤¤Ç¤·¤ç¤¦¡£ ¾¯¤·Àè¤ò¸«±Û¤·¤¿·×²èŪ¤ÊÂбþ¤ò¤¹¤Ù¤­¤Ç¤¹¡£ ³Æ¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤Ç²Ý¤µ¤ì¤ëÀ©¸Â¤Ï¡¢ ¥·¥¹¥Æ¥à¤ò»ÈÍѤ¹¤ë¤³¤È¤Ë¤è¤ëÍøÊØÀ­¤òÃø¤·¤¯¸º¤é¤·¤Æ¤·¤Þ¤¦¤¿¤á¡¢ @@ -760,134 +554,122 @@ ÀßÄê¤Ë´Ø¤¹¤ë°Õ³°À­¤ò¾¯¤Ê¤¯¤Ç¤­¤ë¤Ç¤·¤ç¤¦¡£ - ¥«¡¼¥Í¥ë¤Î¥»¥­¥å¥¢¥ì¥Ù¥ë¤ò 1 °Ê¾å¤ËÀßÄꤷ¤¿¾ì¹ç¤Ë¤Ï¡¢ + ¥«¡¼¥Í¥ë¤Î¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤ò 1 °Ê¾å¤ËÀßÄꤷ¤¿¾ì¹ç¤Ë¤Ï¡¢ ¥·¥¹¥Æ¥àµ¯Æ°¤Ë´Ø¤ï¤ë½ÅÍפʥХ¤¥Ê¥ê¤ä¥Ç¥£¥ì¥¯¥È¥ê¡¢ - ¥¹¥¯¥ê¥×¥È¥Õ¥¡¥¤¥ë (¤¹¤Ê¤ï¤Á¡¢ - ¥»¥­¥å¥¢¥ì¥Ù¥ë¤¬ÀßÄꤵ¤ì¤ë¤Þ¤Ç¤Î´Ö¤Ë¼Â¹Ô¤µ¤ì¤ë¤¹¤Ù¤Æ¤Î¤â¤Î¤ËÂФ·¤Æ)¡¢ + ¥¹¥¯¥ê¥×¥È¥Õ¥¡¥¤¥ë¡¢¤½¤·¤Æ¡¢ + ¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤¬ÀßÄꤵ¤ì¤ë¤Þ¤Ç¤Î´Ö¤Ë¼Â¹Ô¤µ¤ì¤ë¤¹¤Ù¤Æ¤Î¤â¤Î¤ËÂФ·¤Æ¡¢ schg ¥Õ¥é¥°¤òÀßÄꤹ¤ë¤³¤È¤ÏÍ­ÍѤǤ·¤ç¤¦¡£ - ¤³¤ÎÀßÄê¤ò¤ä¤ê²á¤®¤Æ¤â¹½¤¤¤Þ¤»¤ó¤¬¡¢ - ¤è¤ê¹â¤¤¥»¥­¥å¥¢¥ì¥Ù¥ë¤ÇÆ°ºî¤·¤Æ¤¤¤ë¾ì¹ç¡¢ - ¥·¥¹¥Æ¥à¤Î¥¢¥Ã¥×¥°¥ì¡¼¥É¤¬¤Ï¤ë¤«¤Ëº¤Æñ¤Ë¤Ê¤ê¤Þ¤¹¡£ - ¥·¥¹¥Æ¥à¤ò¤è¤ê¹â¤¤°ÂÁ´¥ì¥Ù¥ë¤Ç¼Â¹Ô¤µ¤»¤ë¤è¤¦¤Ë¤¹¤ë¤¬¡¢ - ¤¹¤Ù¤Æ¤Î¥·¥¹¥Æ¥à¥Õ¥¡¥¤¥ë¤È¥Ç¥£¥ì¥¯¥È¥ê¤Ë schg + ¥·¥¹¥Æ¥à¤ò¤è¤ê¹â¤¤¥»¥­¥å¥ê¥Æ¥£¥ì¥Ù¥ë¤Ç¼Â¹Ô¤µ¤»¤ë¤è¤¦¤Ë¤¹¤ë¤¬¡¢ + schg ¥Õ¥é¥°¤òÀßÄꤷ¤Ê¤¤¤È¤¤¤¦¤È¤³¤í¤ÇÂŶ¨¤¹¤ë¤È¤¤¤¦¼ê¤â¤¢¤ê¤Þ¤¹¡£ ¤â¤¦°ì¤Ä¤Î²ÄǽÀ­¤È¤·¤Æ¤Ï¡¢Ã±½ã¤Ë / ¤ª¤è¤Ó /usr ¤òÆɤ߹þ¤ßÀìÍѤǥޥ¦¥ó¥È¤¹¤ë¤³¤È¤Ç¤¹¡£ ¤³¤³¤ÇÆÃÉ®¤¹¤Ù¤­¤³¤È¤Ï¡¢¥·¥¹¥Æ¥à¤ò¼é¤í¤¦¤È¤·¤Æ¸·¤·¤¯¤·¤¹¤®¤ë¤È¡¢ - ¿¯Æþ¤ò¸¡½Ð¤¹¤ë¤È¤¤¤¦Èó¾ï¤Ë½ÅÍפʤ³¤È¤¬¤Ç¤­¤Ê¤¯¤Ê¤Ã¤Æ¤·¤Þ¤¦¤È¤¤¤¦¤³¤È¤Ç¤¹¡£ + ¿¯Æþ¤ò¸¡½Ð¤¹¤ë¤³¤È¤¬¤Ç¤­¤Ê¤¯¤Ê¤Ã¤Æ¤·¤Þ¤¦¤È¤¤¤¦¤³¤È¤Ç¤¹¡£ - ¥Õ¥¡¥¤¥ë¤Î´°Á´À­¤Î¥Á¥§¥Ã¥¯: ¥Ð¥¤¥Ê¥ê¡¢ - ÀßÄê¥Õ¥¡¥¤¥ë¤Ê¤É + ¥Õ¥¡¥¤¥ë¤Î´°Á´À­¤Î¥Á¥§¥Ã¥¯ - ¤³¤È¤³¤ÎÌäÂê¤Ë»ê¤ë¤È¡¢¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ë¤Ç¤­¤ë¤³¤È¤Ï¡¢ + ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ë¤Ç¤­¤ë¤³¤È¤Ï¡¢ ÊØÍø¤µ¤È¤¤¤¦Í×ÁǤ¬¤½¤Î½¹¤¤Æ¬¤ò¾å¤²¤Ê¤¤ÄøÅ٤ˡ¢ ¥³¥¢¥·¥¹¥Æ¥à¤ÎÀßÄê¤ÈÀ©¸æ¥Õ¥¡¥¤¥ë¤òËɸ椹¤ë¤³¤È¤À¤±¤Ç¤¹¡£ ¤¿¤È¤¨¤Ð¡¢/ ¤ª¤è¤Ó /usr ¤Ë¤¢¤ëÂçÉôʬ¤Î¥Õ¥¡¥¤¥ë¤Ë schg - ¥Ó¥Ã¥È¤òÀßÄꤹ¤ë¤¿¤á¤Ë chflags + ¥Ó¥Ã¥È¤òÀßÄꤹ¤ë¤¿¤á¤Ë &man.chflags.1; ¤ò»ÈÍѤ¹¤ë¤Î¤Ï¡¢¤ª¤½¤é¤¯µÕ¸ú²Ì¤Ç¤·¤ç¤¦¡£ ¤Ê¤¼¤Ê¤é¡¢¤½¤¦¤¹¤ë¤³¤È¤Ç¥Õ¥¡¥¤¥ë¤ÏÊݸî¤Ç¤­¤Þ¤¹¤¬¡¢ ¿¯Æþ¤ò¸¡½Ð¤¹¤ëÁë¤òÊĤ¶¤·¤Æ¤·¤Þ¤¦¤³¤È¤Ë¤â¤Ê¤ë¤«¤é¤Ç¤¹¡£ - ¥»¥­¥å¥ê¥Æ¥£¤Î¥¿¥Þ¥Í¥®¤ÎºÇ¸å¤ÎÁؤϤª¤½¤é¤¯ºÇ¤â½ÅÍפʤâ¤Î - — ¸¡½Ð¤Ç¤¹¡£ - ¥»¥­¥å¥ê¥Æ¥£¤Î»Ä¤ê¤Î¤â¤Î¤Ï¡¢ÆÍÁ³¤Î¿¯Æþ¤ò¸¡½Ð¤Ç¤­¤Ê¤±¤ì¤Ð¡¢ - ¤Þ¤Ã¤¿¤¯Í­ÍѤǤϤ¢¤ê¤Þ¤»¤ó - (¤¢¤ë¤¤¤Ï¡¢¤â¤Ã¤È°­¤±¤ì¤Ð¡¢ - °ÂÁ´À­¤ËÂФ¹¤ë´Ö°ã¤Ã¤¿´¶³Ð¤ò¿¢¤¨ÉÕ¤±¤Æ¤·¤Þ¤¤¤Þ¤¹)¡£ - ¥¿¥Þ¥Í¥®¤Î»Å»ö¤ÎȾʬ¤Ï¡¢ + ¥»¥­¥å¥ê¥Æ¥£Âкö¤Ï¡¢ + ¿¯Æþ¤Î²ÄǽÀ­¤ò¸¡½Ð¤Ç¤­¤Ê¤±¤ì¤Ð¡¢Í­ÍѤǤϤʤ¯¡¢ + ¤â¤Ã¤È°­¤±¤ì¤Ð¡¢°ÂÁ´À­¤ËÂФ¹¤ë´Ö°ã¤Ã¤¿´¶³Ð¤ò¿¢¤¨ÉÕ¤±¤Æ¤·¤Þ¤¤¤Þ¤¹¡£ + ¥»¥­¥å¥ê¥Æ¥£¤ËÂФ¹¤ë»Å»ö¤ÎȾʬ¤Ï¡¢ ¹¶·â¼Ô¤ò¹¶·â¤ÎºÇÃæ¤ËÊᤨ¤ë¤è¤¦¤Ë¤¹¤ë¤¿¤á¤Ë¡¢ ¹¶·â¼Ô¤ò¿©¤¤»ß¤á¤ë¤Î¤Ç¤Ï¤Ê¤¯¿¯Æþ¤òÃ٤餻¤ë¤³¤È¤Ê¤Î¤Ç¤¹¡£ ¿¯Æþ¤ò¸¡½Ð¤¹¤ëºÇ¤âÎɤ¤ÊýË¡¤Ï¡¢Êѹ¹¤µ¤ì¤Æ¤¤¤¿¤ê¡¢ ¾Ã¤¨¤Æ¤¤¤¿¤ê¡¢Æþ¤ì¤¿³Ð¤¨¤¬¤Ê¤¤¤Î¤ËÆþ¤Ã¤Æ¤¤¤ë¥Õ¥¡¥¤¥ë¤òõ¤¹¤³¤È¤Ç¤¹¡£ Êѹ¹¤µ¤ì¤¿¥Õ¥¡¥¤¥ë¤òõ¤¹¤Î¤ËºÇ¤âÎɤ¤ÊýË¡¤Ï¡¢¤â¤¦°ì¤Ä¤Î - (¤·¤Ð¤·¤ÐÃæ±û¤Ë½¸¤á¤é¤ì¤¿)¡¢ + ¤·¤Ð¤·¤ÐÃæ±û¤Ë½¸¤á¤é¤ì¤¿¡¢ ¥¢¥¯¥»¥¹¤¬À©¸Â¤µ¤ì¤¿¥·¥¹¥Æ¥à¤«¤é¹Ô¤Ê¤¦¤â¤Î¤Ç¤¹¡£ ¤µ¤é¤Ë°ÂÁ´¤Ç¥¢¥¯¥»¥¹À©¸Â¤µ¤ì¤¿¥·¥¹¥Æ¥à¾å¤Ç¥»¥­¥å¥ê¥Æ¥£ÍÑ¥¹¥¯¥ê¥×¥È¤ò½ñ¤±¤Ð¡¢ ¥¹¥¯¥ê¥×¥È¤ÏÀøºßŪ¤Ê¹¶·â¼Ô¤«¤é¤Ï¤Û¤Ü¸«¤¨¤Ê¤¯¤Ê¤ê¤Þ¤¹¡£ - ¤³¤ì¤Ï½ÅÍפʤ³¤È¤Ç¤¹¡£ - ¤³¤ÎÍ­¸úÀ­¤òºÇÂç¸Â¤Ë³èÍѤ¹¤ë¤¿¤á¤Ë¤Ï¡¢°ìÈÌŪ¤Ë¡¢ - ¥¢¥¯¥»¥¹¤ÎÀ©¸Â¤µ¤ì¤¿¥Þ¥·¥ó¤«¤é¼ÂºÝ¤Ë»È¤Ã¤Æ¤¤¤ë¾¤Î¥Þ¥·¥ó¤Ø¤Î¤«¤Ê¤ê¤Î¥¢¥¯¥»¥¹¤òµö²Ä¤¹¤ëɬÍפ¬¤¢¤ê¤Þ¤¹¡£ - ÉáÄ̤ϡ¢Â¾¤Î¥Þ¥·¥ó¤«¤é¥¢¥¯¥»¥¹À©¸Â¤µ¤ì¤¿¥Þ¥·¥ó¤ØÆɤ߹þ¤ßÀìÍѤΠ- NFS ¥¨¥¯¥¹¥Ý¡¼¥È¤ò¤·¤¿¤ê¡¢¥¢¥¯¥»¥¹À©¸Â¤µ¤ì¤¿¥Þ¥·¥ó¤«¤é¾¤Î¥Þ¥·¥ó¤Ø - ssh Àܳ¤ò¹Ô¤Ê¤¦¤¿¤á¤Ë¡¢ - ssh ¸°¤Î¥Ú¥¢¤òºî¤Ã¤¿¤ê¤¹¤ë¤³¤È¤Ç¹Ô¤¤¤Þ¤¹¡£ + ¤³¤ÎÍ­¸úÀ­¤òºÇÂç¸Â¤Ë³èÍѤ¹¤ë¤¿¤á¤Ë¤Ï¡¢ + ¥¢¥¯¥»¥¹¤ÎÀ©¸Â¤µ¤ì¤¿¥Þ¥·¥ó¤«¤é¾¤Î¥Þ¥·¥ó¤Ø¤Î¤«¤Ê¤ê¤Î¥¢¥¯¥»¥¹¤òµö²Ä¤¹¤ëɬÍפ¬¤¢¤ê¤Þ¤¹¡£ + ÉáÄ̤ϡ¢Æɤ߹þ¤ßÀìÍѤΠNFS ¥¨¥¯¥¹¥Ý¡¼¥È¤ò¤·¤¿¤ê¡¢ + &man.ssh.1; ¸°¤Î¥Ú¥¢¤òÀßÄꤷ¤¿¤ê¤·¤Þ¤¹¡£ ¥Í¥Ã¥È¥ï¡¼¥¯¤Î¥È¥é¥Õ¥£¥Ã¥¯¤òÊ̤ˤ·¤Æ¡¢ - NFS ¤ÏºÇ¤â²Ä»ëÀ­¤Î¤Ê¤¤ÊýË¡¤Ç¤¹ — - ³Æ¥¯¥é¥¤¥¢¥ó¥È¾å¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤ò¡¢ + NFS ¤ÏºÇ¤â²Ä»ëÀ­¤Î¤Ê¤¤ÊýË¡¤Ç¤¹¡£ + ´ÉÍý¼Ô¤Ï¡¢³Æ¥¯¥é¥¤¥¢¥ó¥È¾å¤Î¥Õ¥¡¥¤¥ë¥·¥¹¥Æ¥à¤ò¡¢ »ö¼Â¾å¸¡½Ð¤µ¤ì¤º¤Ë´Æ»ë¤Ç¤­¤ë¤è¤¦¤Ë¤Ê¤ê¤Þ¤¹¡£ ¥¢¥¯¥»¥¹À©¸Â¤µ¤ì¤¿¥µ¡¼¥Ð¤¬¥¹¥¤¥Ã¥Á¤òÄ̤·¤Æ¥¯¥é¥¤¥¢¥ó¥È¤ËÀܳ¤µ¤ì¤Æ¤¤¤ë¾ì¹ç¡¢ - ¤¿¤¤¤Æ¤¤ NFS ¤¬¤è¤êÎɤ¤ÁªÂò»è¤Ç¤¹¡£ - ¥¢¥¯¥»¥¹À©¸Â¤µ¤ì¤¿¥µ¡¼¥Ð¤¬¥Ï¥Ö¤ä¡¢ + ¤¿¤¤¤Æ¤¤ NFS ¤¬¤è¤êÎɤ¤ÁªÂò»è¤Ç¤¹¡£ + ¥¢¥¯¥»¥¹À©¸Â¤µ¤ì¤¿¥µ¡¼¥Ð¤¬¡¢ ¤¤¤¯¤Ä¤«¤Î¥ë¡¼¥Æ¥£¥ó¥°ÁؤòÄ̤·¤Æ¥¯¥é¥¤¥¢¥ó¥È¤ËÀܳ¤·¤Æ¤¤¤ë¾ì¹ç¡¢ - NFS ¤Ï (¥Í¥Ã¥È¥ï¡¼¥¯¤ÎÌ̤Ç) ¤¢¤Þ¤ê¤Ë¤â´í¸±¤Ê¤Î¤Ç¡¢ - ssh ¤ÎÊý¤¬Ç§¾Ú¤ò¹Ô¤Ã¤¿ÀפϻĤê¤Þ¤¹¤¬¡¢Îɤ¤ÊýË¡¤Ç¤·¤ç¤¦¡£ + NFS ¤Ï¤¢¤Þ¤ê¤Ë¤â´í¸±¤Ê¤Î¤Ç¡¢ + &man.ssh.1; ¤ÎÊý¤¬Îɤ¤ÊýË¡¤Ç¤·¤ç¤¦¡£ ¥¢¥¯¥»¥¹À©¸Â¤µ¤ì¤¿¥Þ¥·¥ó¤Ë¡¢ ´Æ»ë¤·¤è¤¦¤È¤¹¤ë¥¯¥é¥¤¥¢¥ó¥È¥·¥¹¥Æ¥à¤Ø¤Î¾¯¤Ê¤¯¤È¤âÆɤ߹þ¤ß¤Î¥¢¥¯¥»¥¹¸¢¤òÍ¿¤¨¤¿¤é¡¢ - ¼¡¤Ë¼ÂºÝ¤Ë´Æ»ë¤¹¤ë¤¿¤á¤Î¥¹¥¯¥ê¥×¥È¤ò½ñ¤«¤Ê¤¯¤Æ¤Ï¤¤¤±¤Þ¤»¤ó¡£ - NFS ¥Þ¥¦¥ó¥È¤ò¤¹¤ì¤Ð¡¢&man.find.1; ¤ä &man.md5.1; + ¼¡¤Ë´Æ»ë¤¹¤ë¤¿¤á¤Î¥¹¥¯¥ê¥×¥È¤ò½ñ¤«¤Ê¤¯¤Æ¤Ï¤¤¤±¤Þ¤»¤ó¡£ + NFS ¥Þ¥¦¥ó¥È¤ò¤¹¤ì¤Ð¡¢&man.find.1; ¤ä &man.md5.1; ¤Ê¤É¤Îñ½ã¤Ê¥·¥¹¥Æ¥à¥æ¡¼¥Æ¥£¥ê¥Æ¥£¤Ç¥¹¥¯¥ê¥×¥È¤ò½ñ¤¯¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£ - ¾¯¤Ê¤¯¤È¤â 1 Æü 1 ²ó¡¢¥¯¥é¥¤¥¢¥ó¥È¤Î¥Õ¥¡¥¤¥ë¤òľÀÜ md5 ¤Ë¤«¤±¡¢ + ¾¯¤Ê¤¯¤È¤â 1 Æü 1 ²ó¡¢¥¯¥é¥¤¥¢¥ó¥È¤Î¥·¥¹¥Æ¥à¥Õ¥¡¥¤¥ë¤òľÀÜ + &man.md5.1; ¤Ë¤«¤±¡¢ ¤µ¤é¤Ë¤â¤Ã¤ÈÉÑÈË¤Ë /etc ¤ª¤è¤Ó /usr/local/etc ¤Ë¤¢¤ë¤è¤¦¤Ê¥³¥ó¥È¥í¡¼¥ëÍÑ¥Õ¥¡¥¤¥ë¤ò»î¸³¤¹¤ë¤Î¤¬°ìÈ֤Ǥ¹¡£ ¥¢¥¯¥»¥¹À©¸Â¤µ¤ì¤¿¥Þ¥·¥ó¤¬Àµ¤·¤¤¤ÈÃΤäƤ¤¤ë¡¢ ´ð¤È¤Ê¤ë md5 ¾ðÊó¤ÈÈæ¤Ù¤Æ°ã¤¤¤¬¸«¤Ä¤«¤Ã¤¿¾ì¹ç¡¢ - ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤ËÄ´¤Ù¤ÆÍߤ·¤¤¤ÈÈáÌĤò¾å¤²¤ë¤è¤¦¤Ë¤¹¤Ù¤­¤Ç¤¹¡£ + ¥·¥¹¥Æ¥à´ÉÍý¼Ô¤Ë·Ù¹ð¤¹¤ë¤è¤¦¤Ë¤¹¤Ù¤­¤Ç¤¹¡£ Í¥¤ì¤¿¥»¥­¥å¥ê¥Æ¥£ÍÑ¥¹¥¯¥ê¥×¥È¤Ï¡¢/ ¤ª¤è¤Ó /usr ¤Ê¤É¤Î¥·¥¹¥Æ¥à¥Ñ¡¼¥Æ¥£¥·¥ç¥ó¾å¤ÇÉÔŬÅö¤Ë - suid ¤µ¤ì¤¿¥Ð¥¤¥Ê¥ê¤ä¡¢ + SUID ¤µ¤ì¤¿¥Ð¥¤¥Ê¥ê¤ä¡¢ ¿·¤¿¤ËºîÀ®¤µ¤ì¤¿¥Õ¥¡¥¤¥ë¤äºï½ü¤µ¤ì¤¿¥Õ¥¡¥¤¥ë¤¬¤Ê¤¤¤«¤É¤¦¤«¤òÄ´¤Ù¤ë¤Ç¤·¤ç¤¦¡£ - NFS ¤Ç¤Ï¤Ê¤¯¡¢ssh ¤ò»ÈÍѤ¹¤ë¾ì¹ç¤Ï¡¢ - ¥»¥­¥å¥ê¥Æ¥£ÍÑ¥¹¥¯¥ê¥×¥È¤ò½ñ¤¯¤Î¤Ï¤º¤Ã¤ÈÆñ¤·¤¤¤³¤È¤Ç¤¹¡£ - ¥¹¥¯¥ê¥×¥È¤òÆ°¤«¤¹¤¿¤á¤Ë¤Ï¡¢¥¯¥é¥¤¥¢¥ó¥È¤ËÂФ·¤Æ¥¹¥¯¥ê¥×¥È¤ò - scp ¤·¤Ê¤¯¤Æ¤Ï¤¤¤±¤Þ¤»¤ó¤·¡¢ - ¤½¤ì¤ÏÌܤ˸«¤¨¤Æ¤·¤Þ¤¤¤Þ¤¹¡£ - ¤½¤·¤Æ¡¢°ÂÁ´¤Î¤¿¤á¤Ë¤Ï¡¢¥¹¥¯¥ê¥×¥È¤¬»È¤¦¥Ð¥¤¥Ê¥ê (find ¤Ê¤É) ¤ò - scp ¤¹¤ëɬÍפ⤢¤ê¤Þ¤¹¡£ - ¥¯¥é¥¤¥¢¥ó¥È¥Þ¥·¥ó¤Î ssh + NFS ¤Ç¤Ï¤Ê¤¯¡¢&man.ssh.1; ¤ò»ÈÍѤ¹¤ë¾ì¹ç¤Ï¡¢ + ¥»¥­¥å¥ê¥Æ¥£ÍÑ¥¹¥¯¥ê¥×¥È¤ò½ñ¤¯¤Î¤Ï¤è¤êÆñ¤·¤¤¤³¤È¤Ç¤¹¡£ + ¤¿¤È¤¨¤Ð¡¢¥¹¥¯¥ê¥×¥È¤òÆ°¤«¤¹¤¿¤á¤Ë¤Ï¡¢¥¯¥é¥¤¥¢¥ó¥È¤ËÂФ·¤Æ¥¹¥¯¥ê¥×¥È¤ò + &man.scp.1; ¤·¤Ê¤¯¤Æ¤Ï¤¤¤±¤Þ¤»¤ó¤·¡¢ + ¥¯¥é¥¤¥¢¥ó¥È¥Þ¥·¥ó¤Î &man.ssh.1; ¥¯¥é¥¤¥¢¥ó¥È¤Ï¤¹¤Ç¤Ë¹¶·â¤µ¤ì¤Æ¤·¤Þ¤Ã¤Æ¤¤¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - ·ë¶É¤Î¤È¤³¤í¡¢°ÂÁ´¤Ç¤Ê¤¤¥ê¥ó¥¯¾å¤Î¾ì¹ç¤Ï - ssh ¤ÏɬÍפ«¤â¤·¤ì¤Þ¤»¤ó¤¬¡¢ssh - ¤ò°·¤¦¤Î¤Ï¤È¤Æ¤âÂçÊѤʤ³¤È¤Ç¤¹¡£ + °ÂÁ´¤Ç¤Ê¤¤¥ê¥ó¥¯¾å¤Î¾ì¹ç¤Ï + &man.ssh.1; ¤ÏɬÍפ«¤â¤·¤ì¤Þ¤»¤ó¤¬¡¢ + °·¤¤¤Ï¤È¤Æ¤âÂçÊѤˤʤê¤Þ¤¹¡£ Í¥¤ì¤¿¥»¥­¥å¥ê¥Æ¥£ÍÑ¥¹¥¯¥ê¥×¥È¤Ï¡¢ - ¥æ¡¼¥¶¤ä¥¹¥¿¥Ã¥Õ¥á¥ó¥Ð¤Î¥¢¥¯¥»¥¹ÀßÄê¥Õ¥¡¥¤¥ë¤ÎÊѹ¹¤â¥Á¥§¥Ã¥¯¤¹¤ë¤â¤Î¤Ç¤¹¡£ - .rhosts, .shosts, - .ssh/authorized_keys ¤Ê¤É MD5 + .rhosts, + .ssh/authorized_keys + ¤Ê¤É¤Î±£¤·ÀßÄê¥Õ¥¡¥¤¥ë¤ÎÊѹ¹¤â¥Á¥§¥Ã¥¯¤¹¤ë¤â¤Î¤Ç¤¹¡£ + ¤³¤ì¤é¤Ï MD5 ¥Á¥§¥Ã¥¯¤ÎÈϰϳ°¤Ë¤Ê¤Ã¤Æ¤·¤Þ¤¦¤Ç¤¢¤í¤¦¥Õ¥¡¥¤¥ë·²¤Ç¤¹¡£ - ¥æ¡¼¥¶ÍѤΥǥ£¥¹¥¯ÍÆÎ̤¬Èó¾ï¤ËÂ礭¤¤¾ì¹ç¤Ï¡¢¥Ñ¡¼¥Æ¥£¥·¥ç¥ó - ¾å¤Î³Æ¥Õ¥¡¥¤¥ë¤ò¸«¤Æ²ó¤ë¤Î¤ËÂçÊѤʻþ´Ö¤¬¤«¤«¤ë¤«¤â¤·¤ì¤Þ¤»¤ó¡£ - ¤³¤Î¾ì¹ç¤Ï¡¢¥Þ¥¦¥ó¥È¥Õ¥é¥°¤òÀßÄꤷ¤Æ¡¢ - suid ¤µ¤ì¤¿¥Ð¥¤¥Ê¥ê¤òÃÖ¤±¤Ê¤¤¤è¤¦¤Ë¤¹¤ë¤Î¤¬Îɤ¤¹Í¤¨¤Ç¤¹¡£ *** DIFF OUTPUT TRUNCATED AT 1000 LINES *** From owner-svn-doc-all@freebsd.org Sat Feb 24 08:23:10 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 89073F225C9; Sat, 24 Feb 2018 08:23:10 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 334EA74CFC; Sat, 24 Feb 2018 08:23:10 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 2DE022300D; Sat, 24 Feb 2018 08:23:10 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1O8NA7I011606; Sat, 24 Feb 2018 08:23:10 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1O8NAl8011605; Sat, 24 Feb 2018 08:23:10 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201802240823.w1O8NAl8011605@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI Date: Sat, 24 Feb 2018 08:23:10 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51443 - head/ja_JP.eucJP/books/handbook/x11 X-SVN-Group: doc-head X-SVN-Commit-Author: ryusuke X-SVN-Commit-Paths: head/ja_JP.eucJP/books/handbook/x11 X-SVN-Commit-Revision: 51443 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Feb 2018 08:23:10 -0000 Author: ryusuke Date: Sat Feb 24 08:23:09 2018 New Revision: 51443 URL: https://svnweb.freebsd.org/changeset/doc/51443 Log: - Merge the following from the English version: r50137 -> r51437 head/ja_JP.eucJP/books/handbook/x11/chapter.xml Modified: head/ja_JP.eucJP/books/handbook/x11/chapter.xml Modified: head/ja_JP.eucJP/books/handbook/x11/chapter.xml ============================================================================== --- head/ja_JP.eucJP/books/handbook/x11/chapter.xml Sat Feb 24 08:08:57 2018 (r51442) +++ head/ja_JP.eucJP/books/handbook/x11/chapter.xml Sat Feb 24 08:23:09 2018 (r51443) @@ -3,7 +3,7 @@ The FreeBSD Documentation Project The FreeBSD Japanese Documentation Project - Original revision: r50137 + Original revision: r51437 $FreeBSD$ --> XDM ¤¬Â¾¤Î¥ê¥â¡¼¥È¥³¥Í¥¯¥·¥ç¥ó¤òÂÔ¤Á¼õ¤±¤ë¤è¤¦¤Ë¤¹¤ë¤¿¤á¤Ë¤Ï¡¢ - xdm-config ¤Î + /usr/local/etc/X11/xdm/xdm-config ¤Î DisplayManager.requestPort ¹Ô¤ò¡¢¹ÔƬ¤Ë ! ¤òÃÖ¤¯¤³¤È¤Ç¥³¥á¥ó¥È¥¢¥¦¥È¤·¤Æ¤¯¤À¤µ¤¤¡£ @@ -1474,7 +1474,7 @@ DisplayManager.requestPort: 0 ¤½¤·¤Æ¥¢¥×¥ê¥±¡¼¥·¥ç¥ó¤¬¸ß¤¤¤Ë¤¦¤Þ¤¯¤ä¤ê¼è¤ê¤Ç¤­¤ë¤è¤¦¤Ê»ÅÁȤߤ¬´Þ¤Þ¤ì¤Æ¤¤¤Þ¤¹¡£ &os; ¾å¤Î GNOME ¤Ë´Ø¤¹¤ë¤â¤Ã¤È¾Ü¤·¤¤¾ðÊó¤Ï¡¢http://www.FreeBSD.org/gnome. + xlink:href="https://www.FreeBSD.org/gnome">https://www.FreeBSD.org/gnome ¤Ç¸«¤ë¤³¤È¤¬¤Ç¤­¤Þ¤¹¡£ ¤³¤Î¥¦¥§¥Ö¥µ¥¤¥È¤Ë¤Ï¡¢&os; ¤Ç¤Î GNOME ¤Î¥¤¥ó¥¹¥È¡¼¥ë¡¢ÀßÄê¡¢´ÉÍý¤Ë´Ø¤¹¤ë¿¤¯¤Î¾ðÊ󤬤¢¤ê¤Þ¤¹¡£ From owner-svn-doc-all@freebsd.org Sat Feb 24 08:34:52 2018 Return-Path: Delivered-To: svn-doc-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id AE205F23090; Sat, 24 Feb 2018 08:34:52 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4D0437525F; Sat, 24 Feb 2018 08:34:52 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 47F2F231C4; Sat, 24 Feb 2018 08:34:52 +0000 (UTC) (envelope-from ryusuke@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w1O8YqSE016616; Sat, 24 Feb 2018 08:34:52 GMT (envelope-from ryusuke@FreeBSD.org) Received: (from ryusuke@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w1O8YqCn016615; Sat, 24 Feb 2018 08:34:52 GMT (envelope-from ryusuke@FreeBSD.org) Message-Id: <201802240834.w1O8YqCn016615@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: ryusuke set sender to ryusuke@FreeBSD.org using -f From: Ryusuke SUZUKI Date: Sat, 24 Feb 2018 08:34:52 +0000 (UTC) To: doc-committers@freebsd.org, svn-doc-all@freebsd.org, svn-doc-head@freebsd.org Subject: svn commit: r51444 - head/ja_JP.eucJP/books/handbook/security X-SVN-Group: doc-head X-SVN-Commit-Author: ryusuke X-SVN-Commit-Paths: head/ja_JP.eucJP/books/handbook/security X-SVN-Commit-Revision: 51444 X-SVN-Commit-Repository: doc MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-doc-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: "SVN commit messages for the entire doc trees \(except for " user" , " projects" , and " translations" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 24 Feb 2018 08:34:52 -0000 Author: ryusuke Date: Sat Feb 24 08:34:51 2018 New Revision: 51444 URL: https://svnweb.freebsd.org/changeset/doc/51444 Log: - Merge the following from the English version: r42014 -> r42266 head/ja_JP.eucJP/books/handbook/security/chapter.xml Modified: head/ja_JP.eucJP/books/handbook/security/chapter.xml Modified: head/ja_JP.eucJP/books/handbook/security/chapter.xml ============================================================================== --- head/ja_JP.eucJP/books/handbook/security/chapter.xml Sat Feb 24 08:23:09 2018 (r51443) +++ head/ja_JP.eucJP/books/handbook/security/chapter.xml Sat Feb 24 08:34:51 2018 (r51444) @@ -3,7 +3,7 @@ The FreeBSD Documentation Project The FreeBSD Japanese Documentation Project - Original revision: r42014 + Original revision: r42266 $FreeBSD$ --> @@ -3201,7 +3201,7 @@ bb:48:db:f2:93:57:80:b6:aa:bc:f5:d5:ba:8f:79:17 user@h DSA ¤Þ¤¿¤Ï RSA ¤Î¤É¤Á¤é¤ò»È¤¦¾ì¹ç¤Ë¤â¡¢ ¥ê¥â¡¼¥È¥Þ¥·¥ó¤Î ~/.ssh/authorized_keys - ¥Õ¥¡¥¤¥ë¤Ë´Þ¤Þ¤ì¤Æ¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£ + ¤Ë´Þ¤Þ¤ì¤Æ¤Ê¤±¤ì¤Ð¤Ê¤ê¤Þ¤»¤ó¡£ ¤³¤ÎÀßÄê¤Ë¤è¤ê¡¢¥Ñ¥¹¥ï¡¼¥É¤ËÂå¤ï¤ê¡¢ SSH @@ -3283,7 +3283,7 @@ Identity added: /home/user/.ssh/id_dsa (/home/user/.ss ¾å¤Çµ¯Æ°¤µ¤ì¤ë¤¹¤Ù¤Æ¤Î¥×¥í¥°¥é¥à¤Ë¤ª¤¤¤Æ¡¢ &man.ssh-agent.1; ¥µ¡¼¥Ó¥¹¤¬Ä󶡤µ¤ì¤ë¤è¤¦¤Ë¤Ê¤ê¤Þ¤¹¡£ ~/.xinitrc - ¥Õ¥¡¥¤¥ë¤ÎÎã¤Ï°Ê²¼¤È¤Ê¤ê¤Þ¤¹¡£ + ¤ÎÎã¤Ï°Ê²¼¤È¤Ê¤ê¤Þ¤¹¡£ exec ssh-agent startxfce4 @@ -4074,7 +4074,7 @@ VII. References cap_mkdb ¤ò»È¤Ã¤¿¥ê¥½¡¼¥¹¥Ç¡¼¥¿¥Ù¡¼¥¹¤Î¹½ÃÛ¡¢ /etc/master.passwd - ¥Õ¥¡¥¤¥ë¤Ø¤ÎÊѹ¹¤¬É¬ÍפȤʤê¤Þ¤¹¡£ + ¤Ø¤ÎÊѹ¹¤¬É¬ÍפȤʤê¤Þ¤¹¡£ ¤µ¤é¤Ë¡¢¥Ñ¥¹¥ï¡¼¥É¥Ç¡¼¥¿¥Ù¡¼¥¹¤Ï¡¢ pwd_mkdb ¤ò»È¤Ã¤ÆºÆ¹½ÃÛ¤¹¤ëɬÍפ¬¤¢¤ê¤Þ¤¹¡£ ¤³¤ÎÊ£¿ô²ó¤ËÅϤë¥×¥í¥»¥¹¤Ï¡¢ @@ -4116,7 +4116,7 @@ options RCTL ¤³¤ì¤Ï´ðËÜŪ¤Ê¥ë¡¼¥ë¤Ç¤¹¡£ ¤³¤³¤Ç¡¢subject ¤Ï user¡¢ subject-id ¤Ï trhodes ¤Ç¤¹¡£ - maxproc ¤Ï¤â¤Á¤í¤ó¥×¥í¥»¥¹¤ÎºÇÂç¿ô¤Ç¤¢¤ê¡¢action ¤Ç¤¹¡£ + maxproc ¤Ï¤â¤Á¤í¤ó¥×¥í¥»¥¹¤ÎºÇÂç¿ô¤Ç¤¢¤ê¡¢resource ¤Ç¤¹¡£ ¤³¤³¤Ç action ¤Ï¡¢deny ¤ÈÀßÄꤵ¤ì¤Æ¤ª¤ê¡¢ ¿·¤·¤¤¥×¥í¥»¥¹¤ÎÀ¸À®¤¬¥Ö¥í¥Ã¥¯¤µ¤ì¤Þ¤¹¡£ ¤³¤ÎÎã¤Ç¤Ï¡¢¥æ¡¼¥¶ trhodes ¤Î¥×¥í¥»¥¹¤Ï @@ -4142,7 +4142,7 @@ eval: Cannot fork: Resource temporarily unavailable&prompt.root; rctl -a jail:httpd:memoryuse:deny=2G/jail - ¥ë¡¼¥ë¤ò /etc/rctl.conf ¥Õ¥¡¥¤¥ë¤ËÄɲ乤ë¤È¡¢ + ¥ë¡¼¥ë¤ò /etc/rctl.conf ¤ËÄɲ乤ë¤È¡¢ ºÆµ¯Æ°¤·¤Æ¤â¥ë¡¼¥ë¤Ï»ý³¤·¤Þ¤¹¡£ ¥Õ¥©¡¼¥Þ¥Ã¥È¤Ï¡¢¥ë¡¼¥ë¤«¤éºÇ½é¤Î¥³¥Þ¥ó¥É¤ÎÉôʬ¤ò½ü¤¤¤¿¤â¤Î¤È¤Ê¤ê¤Þ¤¹¡£ ¤¿¤È¤¨¤Ð¡¢¾å¤Î¥ë¡¼¥ë¤òÄɲ乤ë¤Ë¤Ï¡¢