PR/57889: Ricardo Branco: ext2fs does not have user immutable and append
file flags, only system ones. Restrict those to the superuser. Before
the behavior was controlled by EXT2FS_SYSTEM_FLAGS. Make that behavior the
default.

Enable UFS_DIRHASH (missed with previous change) and UFS_EXTATTR
(mistakenly commented out with previous change).

branches: 1.50.4;
swwdog(4): Add to GENERIC kernels.

Plus a handful of others that I'm familiar with. Lots of special-
purpose kernels should probably have this too but I'm not going
through all the arm, mips, and ppc evaluation board kernels to see
which ones are relevant.

Omitted from systems I know to be very small:
- sun2/GENERIC
- dreamcast/GENERIC
Feel free to remove it from others that need to be kept smaller.

Compile-tested a few of these just in case:
- alpha/GENERIC
- amd64/GENERIC
- evbmips/OCTEON
- i386/GENERIC
- riscv/GENERIC

PR kern/29702

UFS/LFS dirhash:
- Enable UFS_DIRHASH if the architecture or kernel model specific config
file can use 128MB of RAM or more.
- Remove experimental tag from UFS_DIRHASH; it's been with RUMP kernel
and by a number of NetBSD developers for years.
- Add LFS_DIRHASH if LFS was enabled.
- Be somewhat consistent with FS options order.

evbarm: Enable USERCONF option

move pad to GENERIC.common

branches: 1.46.4;
disable compat_ossaudio, it's not useful without compat_linux

when running netbsd binaries we use userspace libossaudio instead.

"oh. plz undo then. badly named option" - jmcneill

Add VND_COMPRESSION option

Add PPP_BSDCOMP, PPP_DEFLATE, PPP_FILTER options

Add UFS_ACL and UFS_EXTATTR options

Add QUOTA and QUOTA2 options

Add COMPAT_OSSAUDIO

evbarm: GENERIC.common - g/c the commented out copy of pseudo-device fss.

branches: 1.39.2;
vether: Add to kernel configurations

It's only enabled if the kernel enabled bridge AND tap.
Otherwise it's commented out.

enable raidframe.

Comment out "options PMAPCOUNTERS". It adds much overhead and is mostly of
interest to people hacking on the VM system or pmap. Proposed on port-arm@.

PMAP_DEBUG has been deleted on arm

branches: 1.35.4;
Add cgd to evbarm GENERIC.common.

branches: 1.34.2; 1.34.4;
Enable DISKLABEL_EI, which is useful for machines that support both endian.

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.

Add BUSDMA_COUNTERS

Add options NTP and enable clockctl.

Remove "options IPKDB", and the other associated options, from the config
files.

ipkdb is being retired. Its code is really old, and hasn't kept pace with
today's expectations: IPv6, SMP, modern NICs. The associated code for x86
was already removed because it was too incorrect to stay.

There are plans to rewrite a similar feature from scratch.

ok kamil christos

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.28.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.27.2;
Revert previous. I misunderstood how it now works.

Add COMPAT_70 via compat_netbsd70.conf.

add pseudo-device ipsecif

branches: 1.24.2;

+gif

Trailing whitespace

clean up COMPAT_* options for native netbsd code:
- new series of files that are useful for saying "i want everything
since netbsd 1.4", etc.
- use the fact COMPAT_* options have future dependancies to remove
many redundant options.

removes about 3000 lines total across kernel configuration files.
tested about 30 random kernels in the changed list.

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

enable 'options NTP'

Remove TCP_COMPAT_42 from the config files. Pass 3.

branches: 1.18.6;
Drop INSECURE - expect /etc/modules.conf for dtrace

+KDTRACE_HOOKS and INSECURE

convert spaces to tab

PR kern/51208
Add DISKLABEL_EI option (and also FFS_EI if missing), commented out except for
ALL on amd64 and i386.

branches: 1.14.2;
mention PAX_SEGVGUARD dependency on FILEASSOC

branches: 1.13.2;
Add various security options; enables PaX ASLR/MPROTECT

enable NFSSERVER (mostly to silence module warning)

Enable DIAGNOSTIC

options FFS_EI, and options IPSEC for GENERIC.common . No objections
when raised on port-arm, and only affects those boards including this
file.

Tested on BPI and ODROID-C1

Remove KMEMSTATS.

Trailing whitespace.

Add pseudo-devices crypto, swcrypto, bridge, vlan, ppp, pppoe, tun, tap,
gre, and npf.

Add JIT options and DKWEDGE_{AUTODISCOVER,GPT}

Enable COMPAT_NETBSD32

replace NFS_BOOT_BOOTP with NFS_BOOT_DHCP

options<space><tab>

branches: 1.2.2;
use conf/filesystems.config

Move common non-device stuff to GENERIC.common. Simplify board configs,
and let them all share common settings.

Enable UFS_DIRHASH (missed with previous change) and UFS_EXTATTR
(mistakenly commented out with previous change).

swwdog(4): Add to GENERIC kernels.

Plus a handful of others that I'm familiar with. Lots of special-
purpose kernels should probably have this too but I'm not going
through all the arm, mips, and ppc evaluation board kernels to see
which ones are relevant.

Omitted from systems I know to be very small:
- sun2/GENERIC
- dreamcast/GENERIC
Feel free to remove it from others that need to be kept smaller.

Compile-tested a few of these just in case:
- alpha/GENERIC
- amd64/GENERIC
- evbmips/OCTEON
- i386/GENERIC
- riscv/GENERIC

PR kern/29702

UFS/LFS dirhash:
- Enable UFS_DIRHASH if the architecture or kernel model specific config
file can use 128MB of RAM or more.
- Remove experimental tag from UFS_DIRHASH; it's been with RUMP kernel
and by a number of NetBSD developers for years.
- Add LFS_DIRHASH if LFS was enabled.
- Be somewhat consistent with FS options order.

evbarm: Enable USERCONF option

move pad to GENERIC.common

branches: 1.46.4;
disable compat_ossaudio, it's not useful without compat_linux

when running netbsd binaries we use userspace libossaudio instead.

"oh. plz undo then. badly named option" - jmcneill

Add VND_COMPRESSION option

Add PPP_BSDCOMP, PPP_DEFLATE, PPP_FILTER options

Add UFS_ACL and UFS_EXTATTR options

Add QUOTA and QUOTA2 options

Add COMPAT_OSSAUDIO

evbarm: GENERIC.common - g/c the commented out copy of pseudo-device fss.

branches: 1.39.2;
vether: Add to kernel configurations

It's only enabled if the kernel enabled bridge AND tap.
Otherwise it's commented out.

enable raidframe.

Comment out "options PMAPCOUNTERS". It adds much overhead and is mostly of
interest to people hacking on the VM system or pmap. Proposed on port-arm@.

PMAP_DEBUG has been deleted on arm

branches: 1.35.4;
Add cgd to evbarm GENERIC.common.

branches: 1.34.2; 1.34.4;
Enable DISKLABEL_EI, which is useful for machines that support both endian.

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.

Add BUSDMA_COUNTERS

Add options NTP and enable clockctl.

Remove "options IPKDB", and the other associated options, from the config
files.

ipkdb is being retired. Its code is really old, and hasn't kept pace with
today's expectations: IPv6, SMP, modern NICs. The associated code for x86
was already removed because it was too incorrect to stay.

There are plans to rewrite a similar feature from scratch.

ok kamil christos

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.28.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.27.2;
Revert previous. I misunderstood how it now works.

Add COMPAT_70 via compat_netbsd70.conf.

add pseudo-device ipsecif

branches: 1.24.2;

+gif

Trailing whitespace

clean up COMPAT_* options for native netbsd code:
- new series of files that are useful for saying "i want everything
since netbsd 1.4", etc.
- use the fact COMPAT_* options have future dependancies to remove
many redundant options.

removes about 3000 lines total across kernel configuration files.
tested about 30 random kernels in the changed list.

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

enable 'options NTP'

Remove TCP_COMPAT_42 from the config files. Pass 3.

branches: 1.18.6;
Drop INSECURE - expect /etc/modules.conf for dtrace

+KDTRACE_HOOKS and INSECURE

convert spaces to tab

PR kern/51208
Add DISKLABEL_EI option (and also FFS_EI if missing), commented out except for
ALL on amd64 and i386.

branches: 1.14.2;
mention PAX_SEGVGUARD dependency on FILEASSOC

branches: 1.13.2;
Add various security options; enables PaX ASLR/MPROTECT

enable NFSSERVER (mostly to silence module warning)

Enable DIAGNOSTIC

options FFS_EI, and options IPSEC for GENERIC.common . No objections
when raised on port-arm, and only affects those boards including this
file.

Tested on BPI and ODROID-C1

Remove KMEMSTATS.

Trailing whitespace.

Add pseudo-devices crypto, swcrypto, bridge, vlan, ppp, pppoe, tun, tap,
gre, and npf.

Add JIT options and DKWEDGE_{AUTODISCOVER,GPT}

Enable COMPAT_NETBSD32

replace NFS_BOOT_BOOTP with NFS_BOOT_DHCP

options<space><tab>

branches: 1.2.2;
use conf/filesystems.config

Move common non-device stuff to GENERIC.common. Simplify board configs,
and let them all share common settings.

swwdog(4): Add to GENERIC kernels.

Plus a handful of others that I'm familiar with. Lots of special-
purpose kernels should probably have this too but I'm not going
through all the arm, mips, and ppc evaluation board kernels to see
which ones are relevant.

Omitted from systems I know to be very small:
- sun2/GENERIC
- dreamcast/GENERIC
Feel free to remove it from others that need to be kept smaller.

Compile-tested a few of these just in case:
- alpha/GENERIC
- amd64/GENERIC
- evbmips/OCTEON
- i386/GENERIC
- riscv/GENERIC

PR kern/29702

UFS/LFS dirhash:
- Enable UFS_DIRHASH if the architecture or kernel model specific config
file can use 128MB of RAM or more.
- Remove experimental tag from UFS_DIRHASH; it's been with RUMP kernel
and by a number of NetBSD developers for years.
- Add LFS_DIRHASH if LFS was enabled.
- Be somewhat consistent with FS options order.

evbarm: Enable USERCONF option

move pad to GENERIC.common

branches: 1.46.4;
disable compat_ossaudio, it's not useful without compat_linux

when running netbsd binaries we use userspace libossaudio instead.

"oh. plz undo then. badly named option" - jmcneill

Add VND_COMPRESSION option

Add PPP_BSDCOMP, PPP_DEFLATE, PPP_FILTER options

Add UFS_ACL and UFS_EXTATTR options

Add QUOTA and QUOTA2 options

Add COMPAT_OSSAUDIO

evbarm: GENERIC.common - g/c the commented out copy of pseudo-device fss.

branches: 1.39.2;
vether: Add to kernel configurations

It's only enabled if the kernel enabled bridge AND tap.
Otherwise it's commented out.

enable raidframe.

Comment out "options PMAPCOUNTERS". It adds much overhead and is mostly of
interest to people hacking on the VM system or pmap. Proposed on port-arm@.

PMAP_DEBUG has been deleted on arm

branches: 1.35.4;
Add cgd to evbarm GENERIC.common.

branches: 1.34.2; 1.34.4;
Enable DISKLABEL_EI, which is useful for machines that support both endian.

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.

Add BUSDMA_COUNTERS

Add options NTP and enable clockctl.

Remove "options IPKDB", and the other associated options, from the config
files.

ipkdb is being retired. Its code is really old, and hasn't kept pace with
today's expectations: IPv6, SMP, modern NICs. The associated code for x86
was already removed because it was too incorrect to stay.

There are plans to rewrite a similar feature from scratch.

ok kamil christos

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.28.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.27.2;
Revert previous. I misunderstood how it now works.

Add COMPAT_70 via compat_netbsd70.conf.

add pseudo-device ipsecif

branches: 1.24.2;

+gif

Trailing whitespace

clean up COMPAT_* options for native netbsd code:
- new series of files that are useful for saying "i want everything
since netbsd 1.4", etc.
- use the fact COMPAT_* options have future dependancies to remove
many redundant options.

removes about 3000 lines total across kernel configuration files.
tested about 30 random kernels in the changed list.

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

enable 'options NTP'

Remove TCP_COMPAT_42 from the config files. Pass 3.

branches: 1.18.6;
Drop INSECURE - expect /etc/modules.conf for dtrace

+KDTRACE_HOOKS and INSECURE

convert spaces to tab

PR kern/51208
Add DISKLABEL_EI option (and also FFS_EI if missing), commented out except for
ALL on amd64 and i386.

branches: 1.14.2;
mention PAX_SEGVGUARD dependency on FILEASSOC

branches: 1.13.2;
Add various security options; enables PaX ASLR/MPROTECT

enable NFSSERVER (mostly to silence module warning)

Enable DIAGNOSTIC

options FFS_EI, and options IPSEC for GENERIC.common . No objections
when raised on port-arm, and only affects those boards including this
file.

Tested on BPI and ODROID-C1

Remove KMEMSTATS.

Trailing whitespace.

Add pseudo-devices crypto, swcrypto, bridge, vlan, ppp, pppoe, tun, tap,
gre, and npf.

Add JIT options and DKWEDGE_{AUTODISCOVER,GPT}

Enable COMPAT_NETBSD32

replace NFS_BOOT_BOOTP with NFS_BOOT_DHCP

options<space><tab>

branches: 1.2.2;
use conf/filesystems.config

Move common non-device stuff to GENERIC.common. Simplify board configs,
and let them all share common settings.

UFS/LFS dirhash:
- Enable UFS_DIRHASH if the architecture or kernel model specific config
file can use 128MB of RAM or more.
- Remove experimental tag from UFS_DIRHASH; it's been with RUMP kernel
and by a number of NetBSD developers for years.
- Add LFS_DIRHASH if LFS was enabled.
- Be somewhat consistent with FS options order.

evbarm: Enable USERCONF option

move pad to GENERIC.common

branches: 1.46.4;
disable compat_ossaudio, it's not useful without compat_linux

when running netbsd binaries we use userspace libossaudio instead.

"oh. plz undo then. badly named option" - jmcneill

Add VND_COMPRESSION option

Add PPP_BSDCOMP, PPP_DEFLATE, PPP_FILTER options

Add UFS_ACL and UFS_EXTATTR options

Add QUOTA and QUOTA2 options

Add COMPAT_OSSAUDIO

evbarm: GENERIC.common - g/c the commented out copy of pseudo-device fss.

branches: 1.39.2;
vether: Add to kernel configurations

It's only enabled if the kernel enabled bridge AND tap.
Otherwise it's commented out.

enable raidframe.

Comment out "options PMAPCOUNTERS". It adds much overhead and is mostly of
interest to people hacking on the VM system or pmap. Proposed on port-arm@.

PMAP_DEBUG has been deleted on arm

branches: 1.35.4;
Add cgd to evbarm GENERIC.common.

branches: 1.34.2; 1.34.4;
Enable DISKLABEL_EI, which is useful for machines that support both endian.

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.

Add BUSDMA_COUNTERS

Add options NTP and enable clockctl.

Remove "options IPKDB", and the other associated options, from the config
files.

ipkdb is being retired. Its code is really old, and hasn't kept pace with
today's expectations: IPv6, SMP, modern NICs. The associated code for x86
was already removed because it was too incorrect to stay.

There are plans to rewrite a similar feature from scratch.

ok kamil christos

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.28.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.27.2;
Revert previous. I misunderstood how it now works.

Add COMPAT_70 via compat_netbsd70.conf.

add pseudo-device ipsecif

branches: 1.24.2;

+gif

Trailing whitespace

clean up COMPAT_* options for native netbsd code:
- new series of files that are useful for saying "i want everything
since netbsd 1.4", etc.
- use the fact COMPAT_* options have future dependancies to remove
many redundant options.

removes about 3000 lines total across kernel configuration files.
tested about 30 random kernels in the changed list.

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

enable 'options NTP'

Remove TCP_COMPAT_42 from the config files. Pass 3.

branches: 1.18.6;
Drop INSECURE - expect /etc/modules.conf for dtrace

+KDTRACE_HOOKS and INSECURE

convert spaces to tab

PR kern/51208
Add DISKLABEL_EI option (and also FFS_EI if missing), commented out except for
ALL on amd64 and i386.

branches: 1.14.2;
mention PAX_SEGVGUARD dependency on FILEASSOC

branches: 1.13.2;
Add various security options; enables PaX ASLR/MPROTECT

enable NFSSERVER (mostly to silence module warning)

Enable DIAGNOSTIC

options FFS_EI, and options IPSEC for GENERIC.common . No objections
when raised on port-arm, and only affects those boards including this
file.

Tested on BPI and ODROID-C1

Remove KMEMSTATS.

Trailing whitespace.

Add pseudo-devices crypto, swcrypto, bridge, vlan, ppp, pppoe, tun, tap,
gre, and npf.

Add JIT options and DKWEDGE_{AUTODISCOVER,GPT}

Enable COMPAT_NETBSD32

replace NFS_BOOT_BOOTP with NFS_BOOT_DHCP

options<space><tab>

branches: 1.2.2;
use conf/filesystems.config

Move common non-device stuff to GENERIC.common. Simplify board configs,
and let them all share common settings.

evbarm: Enable USERCONF option

move pad to GENERIC.common

branches: 1.46.4;
disable compat_ossaudio, it's not useful without compat_linux

when running netbsd binaries we use userspace libossaudio instead.

"oh. plz undo then. badly named option" - jmcneill

Add VND_COMPRESSION option

Add PPP_BSDCOMP, PPP_DEFLATE, PPP_FILTER options

Add UFS_ACL and UFS_EXTATTR options

Add QUOTA and QUOTA2 options

Add COMPAT_OSSAUDIO

evbarm: GENERIC.common - g/c the commented out copy of pseudo-device fss.

branches: 1.39.2;
vether: Add to kernel configurations

It's only enabled if the kernel enabled bridge AND tap.
Otherwise it's commented out.

enable raidframe.

Comment out "options PMAPCOUNTERS". It adds much overhead and is mostly of
interest to people hacking on the VM system or pmap. Proposed on port-arm@.

PMAP_DEBUG has been deleted on arm

branches: 1.35.4;
Add cgd to evbarm GENERIC.common.

branches: 1.34.2; 1.34.4;
Enable DISKLABEL_EI, which is useful for machines that support both endian.

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.

Add BUSDMA_COUNTERS

Add options NTP and enable clockctl.

Remove "options IPKDB", and the other associated options, from the config
files.

ipkdb is being retired. Its code is really old, and hasn't kept pace with
today's expectations: IPv6, SMP, modern NICs. The associated code for x86
was already removed because it was too incorrect to stay.

There are plans to rewrite a similar feature from scratch.

ok kamil christos

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.28.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.27.2;
Revert previous. I misunderstood how it now works.

Add COMPAT_70 via compat_netbsd70.conf.

add pseudo-device ipsecif

branches: 1.24.2;

+gif

Trailing whitespace

clean up COMPAT_* options for native netbsd code:
- new series of files that are useful for saying "i want everything
since netbsd 1.4", etc.
- use the fact COMPAT_* options have future dependancies to remove
many redundant options.

removes about 3000 lines total across kernel configuration files.
tested about 30 random kernels in the changed list.

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

enable 'options NTP'

Remove TCP_COMPAT_42 from the config files. Pass 3.

branches: 1.18.6;
Drop INSECURE - expect /etc/modules.conf for dtrace

+KDTRACE_HOOKS and INSECURE

convert spaces to tab

PR kern/51208
Add DISKLABEL_EI option (and also FFS_EI if missing), commented out except for
ALL on amd64 and i386.

branches: 1.14.2;
mention PAX_SEGVGUARD dependency on FILEASSOC

branches: 1.13.2;
Add various security options; enables PaX ASLR/MPROTECT

enable NFSSERVER (mostly to silence module warning)

Enable DIAGNOSTIC

options FFS_EI, and options IPSEC for GENERIC.common . No objections
when raised on port-arm, and only affects those boards including this
file.

Tested on BPI and ODROID-C1

Remove KMEMSTATS.

Trailing whitespace.

Add pseudo-devices crypto, swcrypto, bridge, vlan, ppp, pppoe, tun, tap,
gre, and npf.

Add JIT options and DKWEDGE_{AUTODISCOVER,GPT}

Enable COMPAT_NETBSD32

replace NFS_BOOT_BOOTP with NFS_BOOT_DHCP

options<space><tab>

branches: 1.2.2;
use conf/filesystems.config

Move common non-device stuff to GENERIC.common. Simplify board configs,
and let them all share common settings.

move pad to GENERIC.common

disable compat_ossaudio, it's not useful without compat_linux

when running netbsd binaries we use userspace libossaudio instead.

"oh. plz undo then. badly named option" - jmcneill

Add VND_COMPRESSION option

Add PPP_BSDCOMP, PPP_DEFLATE, PPP_FILTER options

Add UFS_ACL and UFS_EXTATTR options

Add QUOTA and QUOTA2 options

Add COMPAT_OSSAUDIO

evbarm: GENERIC.common - g/c the commented out copy of pseudo-device fss.

branches: 1.39.2;
vether: Add to kernel configurations

It's only enabled if the kernel enabled bridge AND tap.
Otherwise it's commented out.

enable raidframe.

Comment out "options PMAPCOUNTERS". It adds much overhead and is mostly of
interest to people hacking on the VM system or pmap. Proposed on port-arm@.

PMAP_DEBUG has been deleted on arm

branches: 1.35.4;
Add cgd to evbarm GENERIC.common.

branches: 1.34.2; 1.34.4;
Enable DISKLABEL_EI, which is useful for machines that support both endian.

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.

Add BUSDMA_COUNTERS

Add options NTP and enable clockctl.

Remove "options IPKDB", and the other associated options, from the config
files.

ipkdb is being retired. Its code is really old, and hasn't kept pace with
today's expectations: IPv6, SMP, modern NICs. The associated code for x86
was already removed because it was too incorrect to stay.

There are plans to rewrite a similar feature from scratch.

ok kamil christos

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.28.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.27.2;
Revert previous. I misunderstood how it now works.

Add COMPAT_70 via compat_netbsd70.conf.

add pseudo-device ipsecif

branches: 1.24.2;

+gif

Trailing whitespace

clean up COMPAT_* options for native netbsd code:
- new series of files that are useful for saying "i want everything
since netbsd 1.4", etc.
- use the fact COMPAT_* options have future dependancies to remove
many redundant options.

removes about 3000 lines total across kernel configuration files.
tested about 30 random kernels in the changed list.

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

enable 'options NTP'

Remove TCP_COMPAT_42 from the config files. Pass 3.

branches: 1.18.6;
Drop INSECURE - expect /etc/modules.conf for dtrace

+KDTRACE_HOOKS and INSECURE

convert spaces to tab

PR kern/51208
Add DISKLABEL_EI option (and also FFS_EI if missing), commented out except for
ALL on amd64 and i386.

branches: 1.14.2;
mention PAX_SEGVGUARD dependency on FILEASSOC

branches: 1.13.2;
Add various security options; enables PaX ASLR/MPROTECT

enable NFSSERVER (mostly to silence module warning)

Enable DIAGNOSTIC

options FFS_EI, and options IPSEC for GENERIC.common . No objections
when raised on port-arm, and only affects those boards including this
file.

Tested on BPI and ODROID-C1

Remove KMEMSTATS.

Trailing whitespace.

Add pseudo-devices crypto, swcrypto, bridge, vlan, ppp, pppoe, tun, tap,
gre, and npf.

Add JIT options and DKWEDGE_{AUTODISCOVER,GPT}

Enable COMPAT_NETBSD32

replace NFS_BOOT_BOOTP with NFS_BOOT_DHCP

options<space><tab>

branches: 1.2.2;
use conf/filesystems.config

Move common non-device stuff to GENERIC.common. Simplify board configs,
and let them all share common settings.

disable compat_ossaudio, it's not useful without compat_linux

when running netbsd binaries we use userspace libossaudio instead.

"oh. plz undo then. badly named option" - jmcneill

Add VND_COMPRESSION option

Add PPP_BSDCOMP, PPP_DEFLATE, PPP_FILTER options

Add UFS_ACL and UFS_EXTATTR options

Add QUOTA and QUOTA2 options

Add COMPAT_OSSAUDIO

evbarm: GENERIC.common - g/c the commented out copy of pseudo-device fss.

branches: 1.39.2;
vether: Add to kernel configurations

It's only enabled if the kernel enabled bridge AND tap.
Otherwise it's commented out.

enable raidframe.

Comment out "options PMAPCOUNTERS". It adds much overhead and is mostly of
interest to people hacking on the VM system or pmap. Proposed on port-arm@.

PMAP_DEBUG has been deleted on arm

branches: 1.35.4;
Add cgd to evbarm GENERIC.common.

branches: 1.34.2; 1.34.4;
Enable DISKLABEL_EI, which is useful for machines that support both endian.

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.

Add BUSDMA_COUNTERS

Add options NTP and enable clockctl.

Remove "options IPKDB", and the other associated options, from the config
files.

ipkdb is being retired. Its code is really old, and hasn't kept pace with
today's expectations: IPv6, SMP, modern NICs. The associated code for x86
was already removed because it was too incorrect to stay.

There are plans to rewrite a similar feature from scratch.

ok kamil christos

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.28.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.27.2;
Revert previous. I misunderstood how it now works.

Add COMPAT_70 via compat_netbsd70.conf.

add pseudo-device ipsecif

branches: 1.24.2;

+gif

Trailing whitespace

clean up COMPAT_* options for native netbsd code:
- new series of files that are useful for saying "i want everything
since netbsd 1.4", etc.
- use the fact COMPAT_* options have future dependancies to remove
many redundant options.

removes about 3000 lines total across kernel configuration files.
tested about 30 random kernels in the changed list.

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

enable 'options NTP'

Remove TCP_COMPAT_42 from the config files. Pass 3.

branches: 1.18.6;
Drop INSECURE - expect /etc/modules.conf for dtrace

+KDTRACE_HOOKS and INSECURE

convert spaces to tab

PR kern/51208
Add DISKLABEL_EI option (and also FFS_EI if missing), commented out except for
ALL on amd64 and i386.

branches: 1.14.2;
mention PAX_SEGVGUARD dependency on FILEASSOC

branches: 1.13.2;
Add various security options; enables PaX ASLR/MPROTECT

enable NFSSERVER (mostly to silence module warning)

Enable DIAGNOSTIC

options FFS_EI, and options IPSEC for GENERIC.common . No objections
when raised on port-arm, and only affects those boards including this
file.

Tested on BPI and ODROID-C1

Remove KMEMSTATS.

Trailing whitespace.

Add pseudo-devices crypto, swcrypto, bridge, vlan, ppp, pppoe, tun, tap,
gre, and npf.

Add JIT options and DKWEDGE_{AUTODISCOVER,GPT}

Enable COMPAT_NETBSD32

replace NFS_BOOT_BOOTP with NFS_BOOT_DHCP

options<space><tab>

branches: 1.2.2;
use conf/filesystems.config

Move common non-device stuff to GENERIC.common. Simplify board configs,
and let them all share common settings.

Add VND_COMPRESSION option

Add PPP_BSDCOMP, PPP_DEFLATE, PPP_FILTER options

Add UFS_ACL and UFS_EXTATTR options

Add QUOTA and QUOTA2 options

Add COMPAT_OSSAUDIO

evbarm: GENERIC.common - g/c the commented out copy of pseudo-device fss.

branches: 1.39.2;
vether: Add to kernel configurations

It's only enabled if the kernel enabled bridge AND tap.
Otherwise it's commented out.

enable raidframe.

Comment out "options PMAPCOUNTERS". It adds much overhead and is mostly of
interest to people hacking on the VM system or pmap. Proposed on port-arm@.

PMAP_DEBUG has been deleted on arm

branches: 1.35.4;
Add cgd to evbarm GENERIC.common.

branches: 1.34.2; 1.34.4;
Enable DISKLABEL_EI, which is useful for machines that support both endian.

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.

Add BUSDMA_COUNTERS

Add options NTP and enable clockctl.

Remove "options IPKDB", and the other associated options, from the config
files.

ipkdb is being retired. Its code is really old, and hasn't kept pace with
today's expectations: IPv6, SMP, modern NICs. The associated code for x86
was already removed because it was too incorrect to stay.

There are plans to rewrite a similar feature from scratch.

ok kamil christos

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.28.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.27.2;
Revert previous. I misunderstood how it now works.

Add COMPAT_70 via compat_netbsd70.conf.

add pseudo-device ipsecif

branches: 1.24.2;

+gif

Trailing whitespace

clean up COMPAT_* options for native netbsd code:
- new series of files that are useful for saying "i want everything
since netbsd 1.4", etc.
- use the fact COMPAT_* options have future dependancies to remove
many redundant options.

removes about 3000 lines total across kernel configuration files.
tested about 30 random kernels in the changed list.

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

enable 'options NTP'

Remove TCP_COMPAT_42 from the config files. Pass 3.

branches: 1.18.6;
Drop INSECURE - expect /etc/modules.conf for dtrace

+KDTRACE_HOOKS and INSECURE

convert spaces to tab

PR kern/51208
Add DISKLABEL_EI option (and also FFS_EI if missing), commented out except for
ALL on amd64 and i386.

branches: 1.14.2;
mention PAX_SEGVGUARD dependency on FILEASSOC

branches: 1.13.2;
Add various security options; enables PaX ASLR/MPROTECT

enable NFSSERVER (mostly to silence module warning)

Enable DIAGNOSTIC

options FFS_EI, and options IPSEC for GENERIC.common . No objections
when raised on port-arm, and only affects those boards including this
file.

Tested on BPI and ODROID-C1

Remove KMEMSTATS.

Trailing whitespace.

Add pseudo-devices crypto, swcrypto, bridge, vlan, ppp, pppoe, tun, tap,
gre, and npf.

Add JIT options and DKWEDGE_{AUTODISCOVER,GPT}

Enable COMPAT_NETBSD32

replace NFS_BOOT_BOOTP with NFS_BOOT_DHCP

options<space><tab>

branches: 1.2.2;
use conf/filesystems.config

Move common non-device stuff to GENERIC.common. Simplify board configs,
and let them all share common settings.

evbarm: GENERIC.common - g/c the commented out copy of pseudo-device fss.

vether: Add to kernel configurations

It's only enabled if the kernel enabled bridge AND tap.
Otherwise it's commented out.

enable raidframe.

Comment out "options PMAPCOUNTERS". It adds much overhead and is mostly of
interest to people hacking on the VM system or pmap. Proposed on port-arm@.

PMAP_DEBUG has been deleted on arm

branches: 1.35.4;
Add cgd to evbarm GENERIC.common.

branches: 1.34.2; 1.34.4;
Enable DISKLABEL_EI, which is useful for machines that support both endian.

Enable BUFQ_PRIOCSCAN, CARP, Veriexec by default in GENERIC kernel configs.
On ports without a GENERIC kernel config enable in individul files, e.g evbmips.
Omit on:
atari, dreamcast, emips, epoc32, evbppc/VIRTEX*, ia64, luna68x, mvme68k,
mvmeppc, playstation2, riscv, sun2, sun3, x68k, zaurus due to resource
constraints or port infancy.

Add BUSDMA_COUNTERS

Add options NTP and enable clockctl.

Remove "options IPKDB", and the other associated options, from the config
files.

ipkdb is being retired. Its code is really old, and hasn't kept pace with
today's expectations: IPv6, SMP, modern NICs. The associated code for x86
was already removed because it was too incorrect to stay.

There are plans to rewrite a similar feature from scratch.

ok kamil christos

Remove the kernel PMC code. Sent yesterday on tech-kern@.

This change:

* Removes "options PERFCTRS", the associated includes, and the associated
ifdefs. In doing so, it removes several XXXSMPs in the MI code, which is
good.

* Removes the PMC code of ARM XSCALE.

* Removes all the pmc.h files. They were all empty, except for ARM XSCALE.

* Reorders the x86 PMC code not to rely on the legacy pmc.h file. The
definitions are put in sysarch.h.

* Removes the kern/sys_pmc.c file, and along with it, the sys_pmc_control
and sys_pmc_get_info syscalls. They are marked as OBSOL in kern,
netbsd32 and rump.

* Removes the pmc_evid_t and pmc_ctr_t types.

* Removes all the associated man pages. The sets are marked as obsolete.

branches: 1.28.2;
Add initial support for ARMv8 (AARCH64) (by nisimura@ and ryo@)

- sys/arch/evbarm64 is gone and integrated into sys/arch/evbarm. (by skrll@)
- add support fdt. evbarm/conf/GENERIC64 fdt (bcm2837,sunxi,tegra) based generic 64bit kernel config. (by skrll@, jmcneill@)

branches: 1.27.2;
Revert previous. I misunderstood how it now works.

Add COMPAT_70 via compat_netbsd70.conf.

add pseudo-device ipsecif

branches: 1.24.2;

+gif

Trailing whitespace

clean up COMPAT_* options for native netbsd code:
- new series of files that are useful for saying "i want everything
since netbsd 1.4", etc.
- use the fact COMPAT_* options have future dependancies to remove
many redundant options.

removes about 3000 lines total across kernel configuration files.
tested about 30 random kernels in the changed list.

Remove support for VERIFIED_EXEC_FP_RMD160, VERIFIED_EXEC_FP_SHA1, and VERIFIED_EXEC_FP_MD5 options.
These algorithms are either broken or on their way to being broken.

Discussed on tech-security
http://mail-index.netbsd.org/tech-security/2017/08/21/msg000936.html

ok riastradh

enable 'options NTP'

Remove TCP_COMPAT_42 from the config files. Pass 3.

branches: 1.18.6;
Drop INSECURE - expect /etc/modules.conf for dtrace

+KDTRACE_HOOKS and INSECURE

convert spaces to tab

PR kern/51208
Add DISKLABEL_EI option (and also FFS_EI if missing), commented out except for
ALL on amd64 and i386.

branches: 1.14.2;
mention PAX_SEGVGUARD dependency on FILEASSOC

branches: 1.13.2;
Add various security options; enables PaX ASLR/MPROTECT

enable NFSSERVER (mostly to silence module warning)

Enable DIAGNOSTIC

options FFS_EI, and options IPSEC for GENERIC.common . No objections
when raised on port-arm, and only affects those boards including this
file.

Tested on BPI and ODROID-C1

Remove KMEMSTATS.

Trailing whitespace.

Add pseudo-devices crypto, swcrypto, bridge, vlan, ppp, pppoe, tun, tap,
gre, and npf.

Add JIT options and DKWEDGE_{AUTODISCOVER,GPT}

Enable COMPAT_NETBSD32

replace NFS_BOOT_BOOTP with NFS_BOOT_DHCP

options<space><tab>

branches: 1.2.2;
use conf/filesystems.config