Fix multiple vulnerabilities of ntp.

Approved by: so

Fix multiple ntp vulnerabilities.

Security: FreeBSD-SA-16:24.ntp
Approved by: so

Fix ntp multiple vulnerabilities.

Approved by: so

Fix multiple vulnerabilities of ntp. [SA-16:09]

Fix Linux compatibility layer issetugid(2) system call
vulnerability. [SA-16:10]

Security: FreeBSD-SA-16:09.ntp
Security: FreeBSD-SA-16:10.linux
Approved by: so

o Fix invalid TCP checksums with pf(4). [EN-16:02.pf]
o Fix YP/NIS client library critical bug. [EN-16:03.yplib]
o Fix SCTP ICMPv6 error message vulnerability. [SA-16:01.sctp]
o Fix ntp panic threshold bypass vulnerability. [SA-16:02.ntp]
o Fix Linux compatibility layer incorrect futex handling. [SA-16:03.linux]
o Fix Linux compatibility layer setgroups(2) system call. [SA-16:04.linux]
o Fix TCP MD5 signature denial of service. [SA-16:05.tcp]
o Fix insecure default bsnmpd.conf permissions. [SA-16:06.bsnmpd]

Errata: FreeBSD-EN-16:02.pf
Errata: FreeBSD-EN-16:03.yplib
Security: FreeBSD-SA-16:01.sctp, CVE-2016-1879
Security: FreeBSD-SA-16:02.ntp, CVE-2015-5300
Security: FreeBSD-SA-16:03.linux, CVE-2016-1880
Security: FreeBSD-SA-16:04.linux, CVE-2016-1881
Security: FreeBSD-SA-16:05.tcp, CVE-2016-1882
Security: FreeBSD-SA-16:06.bsnmpd, CVE-2015-5677
Approved by: so

o Fix regressions related to SA-15:25 upgrade of NTP. [1]
o Fix kqueue write events never fired for files greater 2GB. [2]
o Fix kpplications exiting due to segmentation violation on a correct
memory address. [3]

PR: 204046 [1]
PR: 204203 [1]
Errata Notice: FreeBSD-EN-15:19.kqueue [2]
Errata Notice: FreeBSD-EN-15:20.vm [3]
Approved by: so

Upgrade NTP to 4.2.8p4.

Security: FreeBSD-SA-15:25.ntp
Security: CVE-2015-7871
Security: CVE-2015-7855
Security: CVE-2015-7854
Security: CVE-2015-7853
Security: CVE-2015-7852
Security: CVE-2015-7851
Security: CVE-2015-7850
Security: CVE-2015-7849
Security: CVE-2015-7848
Security: CVE-2015-7701
Security: CVE-2015-7703
Security: CVE-2015-7704, CVE-2015-7705
Security: CVE-2015-7691, CVE-2015-7692, CVE-2015-7702
Approved by: so

Copy stable/10@r272459 to releng/10.1 as part of
the 10.1-RELEASE process.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

MFH (r262555): install the sntp(1) man page

Copy head (r256279) to stable/10 as part of the 10.0-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Meinberg clocks support was inadvertently removed during the last vendor
import. Add it back.

PR: bin/182545
Submitted by: Joerg Pulz <Joerg.Pulz@frm2.tum.de>
Approved by: re (delphij)
MFC after: 1 week

General mdoc(7) and typo fixes.

PR: 167804
Submitted by: Nobuyuki Koganemaru (kogane!jp.freebsd.org)
MFC after: 3 days

Remove superfluous paragraph macro.

Spelling fixes for usr.sbin/

* Add the readline(3) API to libedit. The libedit versions of
{readline,history}.h are in /usr/include/edit so as to not conflict with
the GNU libreadline versions. To use the libedit readline(3) one should
add "-I/usr/include/edit" to their Makefile
(spelled "-I${DESTDIR}/${INCLUDEDIR}/edit" within the FreeBSD source tree).

* Enable its use in the BSD licensed utilities that support readline(3).

* To make it easier to sync libedit development with NetBSD, histedit.h
is moved into libedit's directory as history shows shown we keep merging
it into that location.

Obtained from: NetBSD
Sponsored by: Juniper Networks

Fix some duplicate-word typos in manpages.

Submitted by: arundel
MFC after: 1 week

Enable the shared memory reference clock driver. The GPS devices are
getting more and more popular, as source of precise time, and the gpsd
daemon from ports is using the shared memory to synchronize with ntpd.

Reviewed by: roberto

Fix typos and spelling mistakes.

Add a sentence to the man page explaining that the -d option
can only be used when ntpd is compiled with DEBUG support.

PR: docs/138206
Submitted by: Oliver Pinter (oliver dot pntr at gmail dot com)
MFC after: 5 days
Approved by: roberto

Prune empty directories.

Complete ntptrace(8) removal:
- do not install man page
- update ObsoleteFiles.inc

Approved by: roberto@

The last big commit: let usr.sbin/ use WARNS=6 by default.

Disable the unneeded inclusion of <utmp.h>.

The utmp code in systime.c is not enabled, so including <utmp.h> has no
effect in our setup. This makes it a little easier for me to migrate to
<utmpx.h>.

Approved by: roberto

ntpd 4.2.4p8 is now in the tree, ntptrace is dead RIP.

Security: CVE-2009-3563

Correct typo: thetime -> the time

PR: docs/139447
Submitted by: Guido Falsi mad at madpilot dot net

Apply the ntp-related part of r195626 to the correct part of the tree --
the mkver which is used in builds is the one in usr.sbin/ntp/scripts,
not the one in contrib/ntp/scripts.

Pointy hat to: cperciva
Approved by: re (rwatson)

- fix typo

PR: docs/128973
Submitted by: tabthorpe

Makefile.inc already defines OPENSSL if crypto is available/wanted.

PR: bin/127296
Submitted by: oliver
MFC after: 3 days

Allow again compilation w/o GNU readline. There are conditionals in
{ntpdc,ntpq}/Makefile.

Submitted by: Ben Kelly <bkelly@vadev.org>

Use the correct systime.c file instead of the "simulation mode" one.
Should fix the current weirdness in ntpd/ntpdate where the current system
time is not read/updated.

Submitted by: naddy
MFC after: 2 weeks
Pointy hat to: me

Add forgotten libopts subdir.

MFC after: 2 weeks

Update the various files to sync with vendor import of 4.2.4p5.
sntp includes a copy of libopts in itself in vendor code, rewrite the
Makefile to compile and use only one copy. It is an internal library, not
installed.

MFC after: 2 weeks

Delete description of non-existent options: "-4" and "-6".

ntpd's "-4" and "-6" options are described in the original documentation
(contrib/ntp/html/ntpd.html). It may be original's doc bug.

PR: docs/112642
Submitted by: Seth Hieronymus<shieronymus@speakeasy.net>
Discussed with: ume
MFC after: 1 week

- Fix typo in ntpd(8).

Noticed by: Ben Kaduk (minimarmot _at_ gmail.com)
Approved by: delphij@ (mentor)

Fix typo.

Correct the description of minpoll and maxpoll.

Note that while later versions of the ntpd documentation use the term
"dual logarithm", the text added here is consistent with the remainder
of the current document.

PR: docs/106926
Submitted by: Jeremy Chadwick

Revise markup.

Markup fixes.

- Fix markup

PR: docs/98471
Submitted by: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
MFC after: 1 day

- Update to ntp-4.2.0

PR: docs/79857
Submitted by: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>

Reimplementation of world/kernel build options. For details, see:

http://lists.freebsd.org/pipermail/freebsd-current/2006-March/061725.html

The src.conf(5) manpage is to follow in a few days.

Brought to you by: imp, jhb, kris, phk, ru (all bugs are mine)

If we don't want HTML docs, we might still want manpages.
If we don't want manpages, we might still want HTML docs.

Add NO_OBJ, remove redundant SCRIPTSNAME.

Fix all the spelling mistakes I could find in the man pages for words
that have at least 3 characters.

MFC after: 1 week
Thanks to: Music band ``Chingon''
for keeping me company while searching for these.

Add Meinberg clocks to the default ntpd. It contains both a DCF77 and a GPS
receiver.

PR: bin/78207
Submitted by: Joerg Pulz <Joerg.Pulz@frm2.tum.de>
Approved by: re (scottl)

Remove kludges intended to support src trees with partial obj trees.

Discussed with: ru

Document that /etc/rc.d/ntpdate will read this file to find out a list
of NTP hosts, if ntpdate_hosts is unset or empty.

PR: conf/79712
Submitted by: Tsurutani Naoki <turutani@scphys.kyoto-u.ac.jp>
mdoc text by: Matteo Riondato <rionda@gufi.org>

Release maintainership. More ambitious minds have plans for the ntp
docs. Last I heard, Harlan Stenn was considering using FreeBSD's
pages as a starting point for the ISC NTP distribution's own pages.
If that happens, everyone wins and these can go away, to be replaced
by imported versions in contrib/ntp.

Expand *n't contractions.

Let bsd.prog.mk set SRCS and MAN to their default values.

NOCRYPT -> NO_CRYPT

Start the dreaded NOFOO -> NO_FOO conversion.

OK'ed by: core

For variables that are only checked with defined(), don't provide
any fake value.

Fix typo.

Submitted by: Patrick Oonk <patrick@cookie.monster.org>
PR: docs/72912
MFC after: 1 week

ntptimeset is not build anymore by default so remove it for the time being.

Prodded by: imp

Join the 21st century: Cryptography is no longer an optional component
of releases. The -DNOCRYPT build option still exists for anyone who
really wants to build non-cryptographic binaries, but the "crypto"
release distribution is now part of "base", and anyone installing from a
release will get cryptographic binaries.

Approved by: re (scottl), markm
Discussed on: freebsd-current, in late April 2004

mlockall(2) was introduced during the 5.0-CURRENT lifetime.

Include support for NOCRYPT & NO_OPENSSL world.

It does survive « make release ».

Uses an upcoming patch from the vendor branch (ntp-stable) of ntp-keygen.

Submitted by: Marius Strobl <marius@alchemy.franken.de>

Correct another cut/paste mistake. Sorry folks.

Pointy hat to: me
Submitted by: Marius Strobl <marius@alchemy.franken.de>

Remove arlib (libares.a) from the build. It is not IPv6 compatible, not
really tested and probably not 64 bits-safe.

Discussed with: Harlann Stenn <www.ntp.org>

Correct a cut/paste error.

Allow ntpd to be compiled w/o readline when NO_GNU is defined. Part of a
larger patchset to get a GNU-free world.

Patch rewritten to cope with the 4.2.0 changes.

Submitted by: des

Add missing Makefile from previous commit.

Update our ntpd to the long awaited 4.2.0 version.

This bring us several things:
- updated drivers
- IPv6 support at last
- ntp-genkeys is replaced by ntp-keygen
- ntptrace is now a script (courtesy of John Hay)
- lots of renamed files from .htm to .html (while I prefer .html, I
find the change a bit gratuitous)
- still no manpages :(

Please test and report.

Commit very much helped by: GNU arch (http://gnuarch.org/)

Eliminated double whitespace.

Mechanically kill hard sentence breaks.

Add missing spaces after "logconfig" in example lines.

PR: docs/64082
Submitted by: Tsurutani Naoki
MFC after: 3 days

Xref police: ntp.conf(8) -> ntp.conf(5).

Follow the trend of moving MAINTAINER lines from Makefile into
src/MAINTAINERS.

style.Makefile(5)

Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,
especially in troff files.

Fix typos, mostly s/ an / a / where appropriate and a few s/an/and/
Add FreeBSD Id tag where missing.

english(4) police.

mdoc(7) police: Deal with self-xrefs.

Uniformly refer to a file system as "file system".

Approved by: re

mdoc(7) police: kill whitespace at EOL.

Approved by: re

These two patches makes it easier to compile custom versions of
NTP on FreeBSD:

The first one allows one to avoid installing the html files.

The second one allows one to override the CLOCKDEFS on the
make command line.

Submitted by: phk

Update ntpd to 4.1.1b. There are two new drivers and the usual bunch of
fixes. See contrib/ntp/ChangeLog for details.

MFC after: 1 month
Prodded by: jhay
Tested on: sparc64 (panther), alpha (beast) and i386.

Update ntpd to 4.1.1a. This contains many bug fixes made on the STABLE
branch and a few new drivers. See contrib/ntp/ChangeLog for details.

Hide kernel header sys/lock.h from ntp [1]

PR: bin/33914
Submitted by: thomas, bde[1]
MFC after: 1 month

The .Nm utility

Fix spelling errors: minumum, overriden, inheritted

MFC after: 3 weeks

Consistancy check: s/file system/filesystem/g

Removed now unused INTERNALSTATICLIB.
INTERNALLIB now implies NOPIC and NOPROFILE.
Removed gratuitous NOMAN.

Various fixes, mostly for problems introduced by my mdoc transcription,
rather than problems that existed in the original HTML "source".

PR: docs/33585
Submitted: Norihiro Kumagai <kumagai@attbi.com>

There are 4 key formats, not 3.

PR: 33586
Submitted by: Norihiro Kumagai <kuma@12-225-156-18.client.attbi.com>

Correct typos and macro usage.

PR: 33179, 33181, 33295
Submitted by: Norihiro Kumagai <kumagai@attbi.com>
Reviewed by: sheldonh (MAINTAINER)
MFC after: 2 days

Install files via FILES.

Re-connect NTP docs to build.

mdoc(7) police: This still can be done with one-line display.

Fixed breakage of NOSHARED worlds in previous commit. -lreadline was
added but not its postrequisite -ltermcap.

Fixed breakage of DPADD in previous commit. ${LIBREADLINE} was misspelled
-lreadline. This should have been fatal since there is no file named
-lreadline, but it worked because of an undcumented bugfeature in make(1)
(or its configuration files): missing source files named -l* are silently
assumed to be up to date libraries. `make checkdpadd' also fails to detect
this error.

Add forgotten ntp-genkeys directory/Makefile.

Connect the new ntp-genkeys.8 page to the build.

Update for the import of 4.1.0.

Update the mdoc NTP documentation transcribed from the HTML documentation
for ntp-4.1.0.

Unfortunately, David Mills insists on managing the documentation in
such a way as to make it impossible for me to make things easy on our
translators, without printing out the documentation and reading through
it side-by-side with a finger on each page.

mdoc(7) police: join split punctuation to macro calls.

Miscellaneous fixes.

In particularly, the -h and -m flags were incorrectly described.

Perform a major cleanup of the usr.sbin Makefiles.
These are not perfectly in agreement with each other style-wise, but they
are orders of orders of magnitude more consistent style-wise than before.

mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2).

- Backout botched attempt to introduce MANSECT feature.
- MAN[1-9] -> MAN.

setlocale(3) has been fixed to match POSIX standard:
LC_ALL takes precedence over other LC_* envariables.

Preceed/preceeding are not english words. Use precede and preceding.

mdoc(7) police: split punctuation characters + misc fixes.

Prepare for mdoc(7)NG.

mdoc(7) police: use the new features of the Nm macro.

Fix cross-references which referred to xntp* instead of ntp*.

PR: 22483
Submitted by: Philipp Mergenthaler <un1i@rz.uni-karlsruhe.de>

Improve some slightly confused formatting.

Reviewed by: sheldonh

Fix more HTML -> mdoc transcription errors.

Submitted by: Kazu TAKAMUNE <takamune@avrl.mei.co.jp>

Remove trailing whitespace.

Work around mdoc macro argument limit.

PR: 18562
Submitted by: takamune@avrl.mei.co.jp (Kazu TAKAMUNE)

Work around the mdoc argument limit in the Nd name description.

PR: 18465
Submitted by: Kazu TAKAMUNE <takamune@avrl.mei.co.jp>

Fix a typo inherited from the HTML documentation:
assocation -> association

PR: 17501
Submitted by: Yoshihiko SARUMARU <mistral@imasy.org>

Replace erroneous use of Ic (internal command) with the intended
It (list item) and remove a duplicated list entry obscured by this
mistake.

PR: 17500
Submitted by: Yoshihiko SARUMARU <mistral@imasy.org>

Disable RTPRIO and P1003.1B scheduling in ntpd. Only leave BSD_NICE
for a scheduling boost. This is a conservative change that should
make no difference in practice and eliminate concerns about this being
the source of some SMP hangs.

Configuration scripts should never auto-configure P1003.1B
without a second test. The behavior with respect to regular time
sharing, who can access it, etc., is not defined.

Approved by: jkh

Remove single-space hard sentence breaks. These degrade the quality
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.

Merge into the manual pages the changes from 4.0.99b:
ntpd.8:
add -gx to SYNOPSIS
clarify explanation of -g
ntp.conf.5:
add missing field description for rawstats lines

Install audio.htm, driver3[567].htm and qth.htm.

Fix date again.
Previous fix was overwritten by new commits.

Update to 4.0.99b. According to Harlan Stenn, the things holding the
release of 4.1.0 are not FreeBSD-related so importing this one is
not a problem.

Add myself as ntp docs maintainer, with roberto's permission.

Move the Variables section of the old ntp_misc(8) manual page to
the correct location in the ntpd(8) page.

Abandon hope of keeping in line with the author's structure,
in favour of placing information in the correct sections.

The ntp_acc(8), ntp_auth(8), ntp_clock(8), ntp_conf(8),
ntp_misc(8) and ntp_mon(8) pages have been merged into
ntp.conf(5) and ntp.keys(5).

Requested by: rgrimes, wollman

Add selected manual pages transcribed from the HTML documentation.
Those pages which have not been transcribed are referenced as
gracefully as possible.

There is no perfect section for the ntp_* files, which document
configuration options for the NTP suite, so I'm putting them in
the same section as the pages for the utilities themselves.

Activate doc/ subdir

Install ntp html docs as /usr/share/doc/ntp

- remove trace of libkvm. It is not used at all.
- reorganise the Makefiles: the order of variables was not the usual one.

Explained gently by: bde

Use LC_TIME=C for date

Don't compile mktime, it is already present elsewhere.

Submitted by: bde

Remove the old binaries (they've been renamed) without the 'x').

Suggested by: phk

Add the NMEA and the ONCORE driver.

Submitted by: wollman, phk

Please welcome the brand new ntp4 daemon & utilities in the FreeBSD tree.
This is the second part of the commit (the third -- link in usr.sbin/Makefile)
will be done after a more complete review by phk & obrien.

NOTE: the number of drivers included in the default configuration is very
minimal, mainly local clocks and the one I use RAWDCF. Anyone wanting to
have a more complete version will find recompilation very easy.

It builds and runs on both alpha & i386. It also does survive "make world".

Reviewed by: phk, obrien (partly)