certctl(8): New tool for managing OpenSSL CA certificates.

Same command-line syntax as FreeBSD, clearer semantics about which
parts are config and which parts are cache.

build system: Revert all the recent additions of MK[...] knobs that
allow conditionally disabling the building of certain user space
programs in the 'base' set.

There is not enough consensus that this is the right way and a few
people had strong objections, see source-changes-d@.

mk: Add MKTIMED and MKMOUSED flags for compiling NetBSD without timed
and moused

mk: Add a MKLFS flag for excluding the log-structured filesystem userspace
tools from the build.

mk: Rename the MKMBONE option to MKMROUTING for greater accuracy and
to match the related kernel config option.

mk: Allow building base without the MBONE applications by setting
MKMBONE=no in mk.conf

PR/56657: Juraj Hercek: Add plainrsa-gen utility mentioned in racoon.conf(5)
and fix it for OpenSSL 1.1

Descend into wg-userspace.

[ozaki-r] Changes to the kernel core for wireguard

Remove HIPPI support and the esh(4) driver that uses it. There have not
been any users of HIPPI for some time, and it is unlikely to be resurrected.

Add nvmmctl, with two commands for now.

remove sup

branches: 1.280.2;
Retire the LMC driver, and its associated lmcconfig tool. LMC has been
mentioned repeatedly as a non-MP-safe driver that is hard to maintain,
and no one is taking care of it.

LMC was removed from OpenBSD three years ago, and from FreeBSD a few
months ago.

Remove the userland part of ISDN. The kernel part is untouched for now.
ipppctl was actually an exact copy of pppoectl; there is no functional
change in pppoectl in this commit.

Remove the network ATM code.

Remove userland part of ndis

branches: 1.276.2; 1.276.4;
Merge autofs support from: Tomohiro Kusumi
XXX: Does not work yet

Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

bta2dpd - Bluetooth Advand Audio Distribution (A2DP) Profile Daemon.

bta2dpd allows you to stream audio to and from bluetooth devices.
It features high quality stereo audio and is intended for use with pad(4)
device.

As discussed on current-users@ and tech-userlevel@

branches: 1.273.2; 1.273.4;
Add ip6addrctl

Some of the puffs mount programs don't need RUMP, re-enable them.

Add intrctl(8).

Import a substantially modified service(8) command from FreeBSD to
manage rc.d scripts. This command is well known on most other Unixes
and should help soften the learning curve for Unix admins coming
to NetBSD.

branches: 1.269.2;
Descend into sysinst.

branches: 1.268.2;
Unhook pppd

unhook old dhcp

branches: 1.266.2;
exclude programs for MKRUMP = no

Rename wake(8) to wakeonlan(8). Approved by core@.

Disengage ipf

branches: 1.263.2;
Remove quotactl(8). Successor for backup purposes is quotarestore(8).
Note that as of this writing the tool continues to work with the old
proplib-xml packet interface against the new libquota(3), so anyone
who has a use for it can bring it back from the Attic and/or create a
pkgsrc package.

Approved by releng for the freeze, and specifically okayed by core a
couple months ago.

Add quotadump(8), which is a link to repquota, and quotarestore(8),
which is new. Includes man page updates. Approved by releng for
freeze.

Import the new apropos/whatis.

This code has been developed by Abhinav Upadhyay as part of Google's Summer
of Code 2011. It uses libmandoc to parse man pages and builds a Full
Text Index in a SQLite database. The combination of indexing the full
manual page, filtering out stop words and ranking individual matches
based on the section gives a much improved user experience.

The old makewhatis and friends are kept under MKMAKEMANDB=no for now.

install tprof related commands and man pages.

Build and install isibootd(8).

branches: 1.258.2;
Build i2cscan, since it is the list files.

Break up list of directories by first letter.

Enable the build of perfused and libperfuse

Upgrade Heimdal to 1.5pre1 by switching the build from crypto/dist/heimdal
to crypto/external/bsd/heimdal. The latter was just imported as the head
of the Heimdal tree as of a few days ago.

Remove chrtbl(8). Since NetBSD 1.6, the rune type based file format for
LC_CTYPE has been used.

merge the bouyer-quota2 branch. This adds a new on-disk format
to store disk quota usage and limits, integrated with ffs
metadata. Usage is checked by fsck_ffs (no more quotacheck)
and is covered by the WAPBL journal. Enabled with kernel
option QUOTA2 (added where QUOTA was enabled in kernel config files),
turned on with tunefs(8) on a per-filesystem
basis. mount_mfs(8) can also turn quotas on.

See http://mail-index.netbsd.org/tech-kern/2011/02/19/msg010025.html
for details.

Import the Flash and NAND subsytem code contributed by the University
of Szeged, Hungary.

The commit includes:
- Flash layer, which gives a common API to access flash devices
- NAND controller subsystem for the flash layer
- An example OMAP driver which is used on BeagleBoard or alike ARM boards

Retire legacy grfinfo and hilinfo derived from HPBSD
since finally hp300 got wscons.

branches: 1.250.2;
Move chown from usr.sbin to sbin and chgrp from usr.bin to bin directories.
This was discussed and oked on tech-userlevel I have run full build release,
test anita cycle with this patch.

Add ldpd, a RFC 3036 compatible LDP speaker.

unhook tcpdump

unhook ntp 4.2.4 reachover build

Import NPF - a packet filter. Some features:

- Designed to be fully MP-safe and highly efficient.

- Tables/IP sets (hash or red-black tree) for high performance lookups.

- Stateful filtering and Network Address Port Translation (NAPT).
Framework for application level gateways (ALGs).

- Packet inspection engine called n-code processor - inspired by BPF -
supporting generic RISC-like and specific CISC-like instructions for
common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual.

- Convenient userland utility npfctl(8) with npf.conf(8).

NOTE: This is not yet a fully capable alternative to PF or IPFilter.
Further work (support for binat/rdr, return-rst/return-icmp, common ALGs,
state saving/restoring, logging, etc) is in progress.

Thanks a lot to Matt Thomas for various useful comments and code review.
Aye by: board@

unhook old wpa code.

unhook old cron, hook new one.

Add hdaudioctl(8), a tool to manipulate hdaudio(4) devices.
It offer the following subcommands:
list - shows all child codec
get - get a plist of the chosen codec's widget configuration
set - forcibly reconfigure a specified codec from a plist
graph - generate a graphviz file for the specified codec

wake(8) is a command to send Wake-on-LAN packets to machines on the local
ethernet, allowing machines to be powered up without physical access to them.

tonnerre@ and tron@ reviewed it and decided that the bin directories
are not to full for this small and useful command.

Switch over to building iscsi library, target and initiator from the
external framework.

unhook bind

Add crash(8), a utility to diagnose kernel crashes. This is basically
ddb running on crash dumps, but with two notable changes:

- Breakpoints, watches, etc are obviously never going to work so they
are not handled.

- You can pipe output to the shell, e.g. ps | grep foo

Items remaining to be done:

- Port it to architectures other than i386. This isn't difficult, just
a case of making db_disasm.c/db_trace.c or their equivalent compile
and work.

- Make more of the "show" commands work, e.g "show uvmexp".

branches: 1.238.2;
Now that MKPUFFS is default, kill it as advertised.
While there, give puffs and refuse files sensible syspkg entries.

branches: 1.237.4;
Hook up libfetch and pkg_install update.

unhook amd

link btpand(8) to build

Add a dumb, mostly Solaris-compatible psrset command. It's missing some
options. Without it there's no easy way to test or use processor sets.

Import writing part of the UDF file system making optical media like CD's
and DVD's behave like floppy discs. Writing is supported upto and including
version 2.01; version 2.50 and 2.60 will follow.

Also extending the UDF implementation to support symbolic links and
hardlinks.

Added are the mmcformat(8) tool to format rewritable CD/DVD discs and
newfs_udf(8).

Limitations:
all operations can be performed on the file system though the
sheduling is currently optimised for archiving workloads.

mv(1)/rename(2) is currently only implemented for non-directories.

branches: 1.232.2; 1.232.4;
some changes to serial bluetooth host controller interfaces

btuartd(8) should be named btattach(8) for consistency
with other parts of NetBSD

make btattach(8) a single-use tool for less complexity

device specicific initialisation (from btuart(4)) is carried
out prior to activating the line discipline (in btattach(8)),
which simplifies the API somewhat and means that the user
tool and the kernel do not need to be kept in sync.

btuart(4) driver is much reduced; naming is made consistent
and all tsleep() and delay() are removed to userland

Import Heimdal-1.1

Implementation of processor-sets, affinity and POSIX real-time extensions.
Add schedctl(8) - a program to control scheduling of processes and threads.

Notes:
- This is supported only by SCHED_M2;
- Migration of LWP mechanism will be revisited;

Proposed on: <tech-kern>. Reviewed by: <ad>.

branches: 1.229.2; 1.229.6;
Add cpuctl(8). For now this is not much more than a toy for debugging and
benchmarking that allows taking CPUs online/offline.

Add tcpdrop from {Free,Open}BSD.

Descend into fusermount if MKPUFFS is defined

Install sys/dev/bluetooth/btuart.h.
Descend into and build/install usr.sbin/btuartd.
Install etc/rc.d/btuartd.

Move paxctl from usr.bin/paxctl to usr.sbin/paxctl, and make it an admin
tool (man-page moved from section 1 to section 8).

Add srtconfig. It builds OK, at least in my tests, so it shouldn't
break anything having it there, and it's pretty much necessary for
anyone who wants to actually use srt.

add acpitools

if MKPUFFS=yes is given, build & install mount_psshfs (default: no)

branches: 1.221.2;
Add gimpy's OF device tree dumping tool.
Tested on macppc and sparc64

Add a C version of Veriexec's fingerprint generator, written by Matt
Fleming.

This one has some nice options -- for example, an admin can run right
after installing a system:

fpgen -D

and it will fingerprint a set of "common" system directories to the
default loaction. See the man-page for more stuff.

Performance-wise, here are results for both fpgen.sh (old) and this
new tool:

474.599u 574.335s 13:53.05 125.9% 0+0k 0+307io 0pf+0w

0.424u 0.131s 0:00.56 98.2% 0+0k 0+2io 0pf+0w

...guess which is which? (that's ~1500 times *faster*)

Add the lockstat command: displays a summary of kernel locking events
recorded over the lifetime of a called program.

Don't descend into trsp anymore.

rename btcontrol(8) as btdevctl(8) to make it fit with the NetBSD naming
scheme for control programs. This fixes pr 34051.

branches: 1.216.2;
add services_mkdb back.

add support for MKISCSI=no.

Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@,
NetBSD Foundation Membership still pending.) This stack was written by
Iain under sponsorship from Itronix Inc.

The stack includes support for rfcomm networking (networking via your
bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets.

Drivers for both PCMCIA and USB bluetooth controllers are included.

A number of minor changes for NDIS. (OK'd by phil)

1. Removed the makeoptions line from arch/i386/conf/GENERIC. Now
ndis_driver_data.h is simply copied into the kernel build directory instead
of editing the config file to specify its location.

2. Uncommented lines in files.i386 and files.pci related to NDIS. NDIS will
not be compiled into the kernel unless the two lines are uncommented from
GENERIC (I checked using nm), so there is no reason for this to be commented
out.

3. Added ndiscvt to usr.sbin/Makefile.

pppstats now handles slstats

Descend into the iscsi directory.

Bye bye sushi (moved via repository copy to othersrc)

Descend into lmcconfig.

Add new sti command.

Descend into wpa.

Import userland utility for playing with gpio devices. From OpenBSD.

Experimental support for extended attributes on UFS1 file systems, using a
backing file per attribute type indexed by inode number to hold the extended
attributes.

This is working pretty well on my test systems, except for the "autostart"
feature. I need someone with a better handle on the VFS locking protocol
to go over that.

This is a work-in-progress. There are parts of this that could be re-factored
allowing this approach to be used on other types of file systems.

Adapted from FreeBSD.

ieee1394 import from FreeBSD.

config and genassym are not sysadmin tools, they are development tools.
As such, they don't belong in /usr/sbin, but rather /usr/bin. Move them
there.

add genassym

Test USE_INET6 instead of MKINET6 for various apps.
Part of PR 30092 from Jukka Salmi.

Move /etc/postinstall (and the etc.tgz set) to /usr/sbin/postinstall
(and the base.tgz set).

branches: 1.199.2;
Add MKIPFILTER; if set to no, don't build and install the ipf(4) programs,
headers and LKM.

Add MKPF; if set to no, don't build and install the pf(4) programs,
headers, LKM and spamd.

Both options default to yes, so nothing changed in the default build.

Reviewed by lukem.

Switch to ipsec-tools for libipsec, setkey, and racoon. From
Emmanuel Dreyfus, with some small changes by me.

Descend into iwictl

remove unnecessary comment

move pf reachover makefiles into usr.sbin/pf. ok'ed by itojun.

before:
sbin/pfctl
usr.sbin/authpf
usr.sbin/spamdb
libexec/ftp-proxy
libexec/spamd
libexec/spamd-setup
libexec/spamlogd
after:
usr.sbin/pf/pfctl
usr.sbin/pf/authpf
usr.sbin/pf/spamdb
usr.sbin/pf/ftp-proxy
usr.sbin/pf/spamd
usr.sbin/pf/spamd-setup
usr.sbin/pf/spamlogd

descend into ipwctl

Add wlanctl(8), a utility for examining 802.11 node tables.

Since spamdb and it's man page is in the set lists, we ought to
descend into the subdirectory to build and install it as well.

Put altq back - which Itojun deleted for us in the same revision.

authpf from OpenBSD 3.5 PF

Consistently check ${TOOLCHAIN_MISSING} against "no".

The file system snapshot pseudo driver.

Uses a hook in spec_strategy() to save data written from a mounted
file system to its block device and a hook in dounmount().

Not enabled by default in any kernel config.

Approved by: Frank van der Linden <fvdl@netbsd.org>

Make building IPv6 support controllable by MKINET6

also build the sntp (rfc2030) program which comes with ntp-4.2

Don't build kvm_mkdb anymore.

Build powerd.

Build map-mbone, mrinfo, mrouted, and mtrace from usr.sbin again instead
of gnu/usr.sbin, now that the license has been cleared.

enable sunlabel

move mbone tools out of basesrc, as they use part of mrouted

move mrouted out of basesrc, as it carries non-BSD license.
agreed w/ core.

* Eliminate the USE_NEW_TOOLCHAIN variable. Instead, split it into
two variables:

TOOLCHAIN_MISSING -- set to "yes" on platforms for which there is
no working in-tree toolchain (hppa, ns32k, sh5, x86_64).

EXTERNAL_TOOLCHAIN -- if defined by the user, points to the root of
an external toolchain (e.g. /usr/local/gnu). This enables the cross-build
framework even for TOOLCHAIN_MISSING platforms.

If TOOLCHAIN_MISSING is set to "yes", MKGDB, MKBFD, and MKGCC are all
unconditionally set to "no", since the bits are not there to build.

If EXTERNAL_TOOLCHAIN is set, MKGCC is unconditionally set to "no",
since the external toolchain's compiler is not in-sync with the
in-tree compiler support components (e.g. libgcc).

* Set MACHINE_CPU much earlier in bsd.own.mk, so that more tests in
that file can use it.

Move pmap(1) to /usr/bin (from /usr/sbin) where it belongs.

Add pmap(1) command

Added touch panel calibration utility.

PR/17402: Julio Merino: Userland portion for moused (with some changes from me).

retire greconfig(8) - you can use ifconfig(8) for everything it can do.

add mscdlabel

branches: 1.172.2;
enable installboot, since it's now useful for at least a couple of ports

Split the notion of building Hesiod, Kerberos, S/key, and YP
infrastructure and using that infrastructure in programs.

* MKHESIOD, MKKERBEROS, MKSKEY, and MKYP control building
of the infratsructure (libraries, support programs, etc.)

* USE_HESIOD, USE_KERBEROS, USE_SKEY, and USE_YP control
building of support for using the corresponding API
in various libraries/programs that can use it.

As discussed on tech-toolchain.

Added etcupdate

Don't descend into dbsym anymore.
Only sun3[x] was building it anyway, and now it's converted to
USE_NEW_TOOLCHAIN, where all ports (will) have it. The other reason to
descend is the man page, but what use is a man page if the program
doesn't get installed? [gnu/usr.sbin/dbsym has its own copy of the
man page.]
Ok'd by thorpej.

Only build dbsym if not USE_NEW_TOOLCHAIN.

put mdsetimage back in for old toolchain platforms

Add a program to attach the IrDA frame level driver to a serial line.
Pretty much like slattach(8).

Enable ifwatchd.

Add moused, a daemon to take input from a serial mouse and feed it to
a wsmux. This way serial mice can be accessed via /dev/wsmouse like all
other mice.
This program is heavily based on the FreeBSD moused program.

add makefs(8)

Don't descend into this mdsetimage -- we now use the BFD'ified
version in src/gnu/usr.sbin.

Add a simple program for listing, adding, and removing wsmux devices.
It's not a much used utility, but when you need it it's a pain to
be without.

Build pcictl.

do not visit mtrace6

remove pim6[sd]d from the tree. the software had a restrictive license
than we can handle. hope to re-enable it as pkgsrc, or to re-enable it
into basesrc if license updates.

Note that sunndd has been renamed ndbootd.

Build sunndd, used to netboot Sun2 machines.

Add a control utility for `mlx' devices. Derived from FreeBSD's `mlxcontrol'.

Enable ISDN userland utilities.

Enable Sushi

visit usr.sbin/racoon in build process (if MKCRYPTO != no).

Descend into altq.

Put back missing line break.

Add a basic control program for iop devices.

hprop(8) belongs in /usr/sbin, not /usr/libexec.

The Kerberos KDC belongs in /usr/sbin, not in /usr/libexec.

gifconfig(8) is obsolete; functionality has been added to
ifconfig(8).

Add MK... variables to enable/disable various aspects of building
crypto support into the system. See share/mk/bsd.README for more
a full description.

branches: 1.144.2;
Merge a bunch of things from crypto-us and crypto-intl into basesrc,
adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate
bsd.crypto.mk.

There is still a bunch more work to do, but crypto is now more-or-less
fully merged into the base NetBSD distribution.

move setkey(8) from usr.sbin to sbin, to enable us to initialize
IPsec manual key before /usr mount..
(based on "don't use cvsmove" discussion i have seen, I did not use cvsmove)

Remove portmap, add rpcbind.

branches: 1.141.2;
Add ntp, remove xntp.

nuke BUILD_POSTFIX

Remove nfsiod, it is no longer needed.

mbrlabel moves to /sbin.

Add envstat(8) for displaying sensor readings from any envsys(4)
compatible device.

sigh... um, revert to 1.133, not 1.33. oops!

revert previous change

remove sesd

add sesd subdir

Build "sendmail" 8.9.3 instead of 8.8.8.

add pim6sd: PIMv6 sparse mode daemon. (from KAME)

disable sysctl for now (avoid breakage during move from usr.sbin to sbin)

Added tadpolectl

Add user(8).

add cnwctl(8), a control program for cnw interface.
from bsdi/freebsd-pao cnwctl(8).

Remove update(8) now that we have trickle-sync.

branches: 1.125.4;
add rtsold into SUBDIR.

optionally include CRYPTOPATH Makefile.frag files.

For XCU5's sake, and due to popular demand, add link(8) and unlink(8)
utilities. This addresses PR standards/8027 by Giles Lean, who also submitted
a different implementation along with; I chose to add those files I had written
a while ago for reasons of portability and not requiring being cleaned up wrt.
compile-time warnings.

pim6dd: IPv6 PIM (protocol independent multicast),
dense mode routing daemon.

Add wiconfig

add faithd, IPv6-to-IPv4 tcp relay translator.
utilizes pseudo-device "faith".

Use bsd.crypto.mk.

add usr.sbin/pvcsif and usr.sbin/pvctxctl to SUBDIR.

mld6query: throw IPv6 MLD query (similar to IPv4 IGMP)

setkey: configure IPsec keys to the kernel key table
(not subject to export control as itself does not contain crypto)

route6d: RIPng daemon (similar to route6d)
rip6query: RIPng query (similar to ripquery)

NOTE: we usually do not run route6d on end nodes at startup (rtsol should do
the trick). So I figured that route6d can be in /usr/sbin, not in /sbin
(routed is in /sbin). Correct me if I'm wrong.

rtadvd: advertise IPv6 prefix info via router advertisement.
(to be run on routers)

traceroute6: traceroute for IPv6.

TODO: better to be separate, or merged?

ifmcstat: show multicast groups currently joined (in per-interface manner).

ndp, "arp"-alike command for IPv6.

gifconfig, which configures gif IPv[46]-over-IPv[46] pseudo interface.
add gifconfig to SUBDIR.

usbd is dead.

Add memswitch(8).

Turn on catman. Thanks to dante, it now works right.

branches: 1.106.2;
only build postfix if BUILD_POSTFIX is set

activate postfix

Nuke bind 4. bind 8 has been the default for months.

convert from NOxxx= to MKxxx=no.
include <bsd.own.mk> if testing a MKxxx variable.

enable mailwrapper

enable wsconscfg + wsfontload

Fix comment.

BIND 8 is the default now.

Add a utility to allow access to the partitions of a
MBR labeled disk (i.e. a disk partitioned by fdisk)
on any platform (including extended partitions).

Renamed USE_VMAILER to NO_SENDMAIL

Don't build sendmail if USE_VMAILER is defined in mk.conf.
This is a temporary kludge to make it easier for vmailer users not to
accidently blow away vmailer when building the world.

Invent "USE_BIND8" switch to select BIND 8.1.2 instead of BIND 4.9.6.

Also build greconfig

Add USB support. Supported so far:
* UHCI and OHCI host controllers on PCI
* Hubs
* HID devices withe special drivers for mouse and keyboard
* Printers

Adding eshconfig, used to configure esh (HIPPI network interface)

replace bootp{d,ef,gw,test} with bootp

remove gettable and htable, + resort/reformat

branches: 1.89.2;
merge lite-2 rcsids

sort SUBDIR list

Build sup.

move man pages into share/man.

Add `dumpfs', `dumplfs' and `quotacheck'.

Add pkg_install.

Add chrtbl(8).

Add xntp

Remove trailing space from last commit

Update sbin and usr.sbin Makefiles for mountd, nfsd, nfsiod in /usr/sbin.

Build dhcp, not dhcpd.

Added mopd.

Build rpc.lockd and rpc.statd

Add lastlogin to the list of subdirectories.

add bad144 to the alpha's SUBDIR list

We no longer have to build config.old on the hp300. (Yay!! Woo!!)

Add tcpdchk and tcpdmatch.

Add ipf.

Alphabetize the SUBDIRs (Fix pr#3088)

Rename: rdconfig => mdconfig; rdsetimage => mdsetimage

amd works on the alpha now, so build it unconditionally.

Always clean apm/apmd. Fixes PR #2854, from Dave Huang <khym@bga.com>.

add rdsetimage, sort

add dhcpd.

add Advanced Power Management driver
Includes bootstrap support from FreeBSD (Tatsumi HOSOKAWA and <ukai>)

Build rpc.yppasswdd and the ypserv suite.

Fix typo in last commit.

Screenblank support:
- new fbio.h in arch/amiga/include, defining only FBIOSVIDEO
- add an IOCTL translation to arch/amiga/dev/grf.c
- add screenblank to the list of specials to build on amiga.

Added missing clean rules for grfconfig and videomode (amiga-port)

Change Makefile to build screenblank on Decstations.

Don't make config.old on pmaxes. Pmaxes now use (new) config, and config.old
can no longer build compilable kernels.

merge in changes from 1.1 release branch

New-style RCS id.

branches: 1.56.2;
add grfconfig to amiga subdirs

add videomode to amiga specific subdirs

add gspa subdir

Add rdconfig

gwr's port of pcnfsd

don't forget to clean eeprom

Build eeprom where appropriate.

Build screenblank where appropriate.

alphabetize machine-specific program lists, clean all progs on all machines

Add MBONE tools.

Atari-port now also uses iteconfig

only build config.old on machines that need it.

build config.old instead of config.new

the alpha says 'no' to amd

Added zic and zdump

Added netgroup_mkdb

Add dbsym to SUBDIRS for sun3 (only)

Add: bootpd bootpgw bootpef bootptest

add rdate

Mrouted's back

don't do mrouted, for now...

trade swapinfo for pstat

sysctl

add iteconfig for amiga's

hilinfo and grfinfo for the hp300

ac

add as

separate yp stuff

First version of a quot utility

torch flcopy

kill dbsym; it's not been used for a while

Add cron to subdirs

add comment noting 'catman', which isn't ready to be in subdirs list yet.

build rbootd and mrouted

compile rpc.bootparamd

Add vnconfig command.

build rarpd

Compile amd.

Compile spray too.

Build slstats command

compile tcpdump too

chown here now

don't try to install accountant; it doesn't exist anymore

make config.new on all platforms

ppp from paul mackerras

Add RCS identifiers.

Moved rwalld to libexec

add accountant

compile usr.sbin/yp

added swapinfo from Kevin Lahey <kml@rokkaku.atl.ga.us>

added accton, edquota, flcopy, gettable, htable, iostat, quotaon,
repquota, trpt, and trsp, per (currently alpha) patch 125.

moved chown into sbin from usr.sbin

updated for addition of rwalld

added support for kgmon

after 0.2.2 "stable" patches applied

branches: 1.1.1;
Initial revision

build system: Revert all the recent additions of MK[...] knobs that
allow conditionally disabling the building of certain user space
programs in the 'base' set.

There is not enough consensus that this is the right way and a few
people had strong objections, see source-changes-d@.

mk: Add MKTIMED and MKMOUSED flags for compiling NetBSD without timed
and moused

mk: Add a MKLFS flag for excluding the log-structured filesystem userspace
tools from the build.

mk: Rename the MKMBONE option to MKMROUTING for greater accuracy and
to match the related kernel config option.

mk: Allow building base without the MBONE applications by setting
MKMBONE=no in mk.conf

PR/56657: Juraj Hercek: Add plainrsa-gen utility mentioned in racoon.conf(5)
and fix it for OpenSSL 1.1

Descend into wg-userspace.

[ozaki-r] Changes to the kernel core for wireguard

Remove HIPPI support and the esh(4) driver that uses it. There have not
been any users of HIPPI for some time, and it is unlikely to be resurrected.

Add nvmmctl, with two commands for now.

remove sup

branches: 1.280.2;
Retire the LMC driver, and its associated lmcconfig tool. LMC has been
mentioned repeatedly as a non-MP-safe driver that is hard to maintain,
and no one is taking care of it.

LMC was removed from OpenBSD three years ago, and from FreeBSD a few
months ago.

Remove the userland part of ISDN. The kernel part is untouched for now.
ipppctl was actually an exact copy of pppoectl; there is no functional
change in pppoectl in this commit.

Remove the network ATM code.

Remove userland part of ndis

branches: 1.276.2; 1.276.4;
Merge autofs support from: Tomohiro Kusumi
XXX: Does not work yet

Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

bta2dpd - Bluetooth Advand Audio Distribution (A2DP) Profile Daemon.

bta2dpd allows you to stream audio to and from bluetooth devices.
It features high quality stereo audio and is intended for use with pad(4)
device.

As discussed on current-users@ and tech-userlevel@

branches: 1.273.2; 1.273.4;
Add ip6addrctl

Some of the puffs mount programs don't need RUMP, re-enable them.

Add intrctl(8).

Import a substantially modified service(8) command from FreeBSD to
manage rc.d scripts. This command is well known on most other Unixes
and should help soften the learning curve for Unix admins coming
to NetBSD.

branches: 1.269.2;
Descend into sysinst.

branches: 1.268.2;
Unhook pppd

unhook old dhcp

branches: 1.266.2;
exclude programs for MKRUMP = no

Rename wake(8) to wakeonlan(8). Approved by core@.

Disengage ipf

branches: 1.263.2;
Remove quotactl(8). Successor for backup purposes is quotarestore(8).
Note that as of this writing the tool continues to work with the old
proplib-xml packet interface against the new libquota(3), so anyone
who has a use for it can bring it back from the Attic and/or create a
pkgsrc package.

Approved by releng for the freeze, and specifically okayed by core a
couple months ago.

Add quotadump(8), which is a link to repquota, and quotarestore(8),
which is new. Includes man page updates. Approved by releng for
freeze.

Import the new apropos/whatis.

This code has been developed by Abhinav Upadhyay as part of Google's Summer
of Code 2011. It uses libmandoc to parse man pages and builds a Full
Text Index in a SQLite database. The combination of indexing the full
manual page, filtering out stop words and ranking individual matches
based on the section gives a much improved user experience.

The old makewhatis and friends are kept under MKMAKEMANDB=no for now.

install tprof related commands and man pages.

Build and install isibootd(8).

branches: 1.258.2;
Build i2cscan, since it is the list files.

Break up list of directories by first letter.

Enable the build of perfused and libperfuse

Upgrade Heimdal to 1.5pre1 by switching the build from crypto/dist/heimdal
to crypto/external/bsd/heimdal. The latter was just imported as the head
of the Heimdal tree as of a few days ago.

Remove chrtbl(8). Since NetBSD 1.6, the rune type based file format for
LC_CTYPE has been used.

merge the bouyer-quota2 branch. This adds a new on-disk format
to store disk quota usage and limits, integrated with ffs
metadata. Usage is checked by fsck_ffs (no more quotacheck)
and is covered by the WAPBL journal. Enabled with kernel
option QUOTA2 (added where QUOTA was enabled in kernel config files),
turned on with tunefs(8) on a per-filesystem
basis. mount_mfs(8) can also turn quotas on.

See http://mail-index.netbsd.org/tech-kern/2011/02/19/msg010025.html
for details.

Import the Flash and NAND subsytem code contributed by the University
of Szeged, Hungary.

The commit includes:
- Flash layer, which gives a common API to access flash devices
- NAND controller subsystem for the flash layer
- An example OMAP driver which is used on BeagleBoard or alike ARM boards

Retire legacy grfinfo and hilinfo derived from HPBSD
since finally hp300 got wscons.

branches: 1.250.2;
Move chown from usr.sbin to sbin and chgrp from usr.bin to bin directories.
This was discussed and oked on tech-userlevel I have run full build release,
test anita cycle with this patch.

Add ldpd, a RFC 3036 compatible LDP speaker.

unhook tcpdump

unhook ntp 4.2.4 reachover build

Import NPF - a packet filter. Some features:

- Designed to be fully MP-safe and highly efficient.

- Tables/IP sets (hash or red-black tree) for high performance lookups.

- Stateful filtering and Network Address Port Translation (NAPT).
Framework for application level gateways (ALGs).

- Packet inspection engine called n-code processor - inspired by BPF -
supporting generic RISC-like and specific CISC-like instructions for
common patterns (e.g. IPv4 address matching). See npf_ncode(9) manual.

- Convenient userland utility npfctl(8) with npf.conf(8).

NOTE: This is not yet a fully capable alternative to PF or IPFilter.
Further work (support for binat/rdr, return-rst/return-icmp, common ALGs,
state saving/restoring, logging, etc) is in progress.

Thanks a lot to Matt Thomas for various useful comments and code review.
Aye by: board@

unhook old wpa code.

unhook old cron, hook new one.

Add hdaudioctl(8), a tool to manipulate hdaudio(4) devices.
It offer the following subcommands:
list - shows all child codec
get - get a plist of the chosen codec's widget configuration
set - forcibly reconfigure a specified codec from a plist
graph - generate a graphviz file for the specified codec

wake(8) is a command to send Wake-on-LAN packets to machines on the local
ethernet, allowing machines to be powered up without physical access to them.

tonnerre@ and tron@ reviewed it and decided that the bin directories
are not to full for this small and useful command.

Switch over to building iscsi library, target and initiator from the
external framework.

unhook bind

Add crash(8), a utility to diagnose kernel crashes. This is basically
ddb running on crash dumps, but with two notable changes:

- Breakpoints, watches, etc are obviously never going to work so they
are not handled.

- You can pipe output to the shell, e.g. ps | grep foo

Items remaining to be done:

- Port it to architectures other than i386. This isn't difficult, just
a case of making db_disasm.c/db_trace.c or their equivalent compile
and work.

- Make more of the "show" commands work, e.g "show uvmexp".

branches: 1.238.2;
Now that MKPUFFS is default, kill it as advertised.
While there, give puffs and refuse files sensible syspkg entries.

branches: 1.237.4;
Hook up libfetch and pkg_install update.

unhook amd

link btpand(8) to build

Add a dumb, mostly Solaris-compatible psrset command. It's missing some
options. Without it there's no easy way to test or use processor sets.

Import writing part of the UDF file system making optical media like CD's
and DVD's behave like floppy discs. Writing is supported upto and including
version 2.01; version 2.50 and 2.60 will follow.

Also extending the UDF implementation to support symbolic links and
hardlinks.

Added are the mmcformat(8) tool to format rewritable CD/DVD discs and
newfs_udf(8).

Limitations:
all operations can be performed on the file system though the
sheduling is currently optimised for archiving workloads.

mv(1)/rename(2) is currently only implemented for non-directories.

branches: 1.232.2; 1.232.4;
some changes to serial bluetooth host controller interfaces

btuartd(8) should be named btattach(8) for consistency
with other parts of NetBSD

make btattach(8) a single-use tool for less complexity

device specicific initialisation (from btuart(4)) is carried
out prior to activating the line discipline (in btattach(8)),
which simplifies the API somewhat and means that the user
tool and the kernel do not need to be kept in sync.

btuart(4) driver is much reduced; naming is made consistent
and all tsleep() and delay() are removed to userland

Import Heimdal-1.1

Implementation of processor-sets, affinity and POSIX real-time extensions.
Add schedctl(8) - a program to control scheduling of processes and threads.

Notes:
- This is supported only by SCHED_M2;
- Migration of LWP mechanism will be revisited;

Proposed on: <tech-kern>. Reviewed by: <ad>.

branches: 1.229.2; 1.229.6;
Add cpuctl(8). For now this is not much more than a toy for debugging and
benchmarking that allows taking CPUs online/offline.

Add tcpdrop from {Free,Open}BSD.

Descend into fusermount if MKPUFFS is defined

Install sys/dev/bluetooth/btuart.h.
Descend into and build/install usr.sbin/btuartd.
Install etc/rc.d/btuartd.

Move paxctl from usr.bin/paxctl to usr.sbin/paxctl, and make it an admin
tool (man-page moved from section 1 to section 8).

Add srtconfig. It builds OK, at least in my tests, so it shouldn't
break anything having it there, and it's pretty much necessary for
anyone who wants to actually use srt.

add acpitools

if MKPUFFS=yes is given, build & install mount_psshfs (default: no)

branches: 1.221.2;
Add gimpy's OF device tree dumping tool.
Tested on macppc and sparc64

Add a C version of Veriexec's fingerprint generator, written by Matt
Fleming.

This one has some nice options -- for example, an admin can run right
after installing a system:

fpgen -D

and it will fingerprint a set of "common" system directories to the
default loaction. See the man-page for more stuff.

Performance-wise, here are results for both fpgen.sh (old) and this
new tool:

474.599u 574.335s 13:53.05 125.9% 0+0k 0+307io 0pf+0w

0.424u 0.131s 0:00.56 98.2% 0+0k 0+2io 0pf+0w

...guess which is which? (that's ~1500 times *faster*)

Add the lockstat command: displays a summary of kernel locking events
recorded over the lifetime of a called program.

Don't descend into trsp anymore.

rename btcontrol(8) as btdevctl(8) to make it fit with the NetBSD naming
scheme for control programs. This fixes pr 34051.

branches: 1.216.2;
add services_mkdb back.

add support for MKISCSI=no.

Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@,
NetBSD Foundation Membership still pending.) This stack was written by
Iain under sponsorship from Itronix Inc.

The stack includes support for rfcomm networking (networking via your
bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets.

Drivers for both PCMCIA and USB bluetooth controllers are included.

A number of minor changes for NDIS. (OK'd by phil)

1. Removed the makeoptions line from arch/i386/conf/GENERIC. Now
ndis_driver_data.h is simply copied into the kernel build directory instead
of editing the config file to specify its location.

2. Uncommented lines in files.i386 and files.pci related to NDIS. NDIS will
not be compiled into the kernel unless the two lines are uncommented from
GENERIC (I checked using nm), so there is no reason for this to be commented
out.

3. Added ndiscvt to usr.sbin/Makefile.

pppstats now handles slstats

Descend into the iscsi directory.

Bye bye sushi (moved via repository copy to othersrc)

Descend into lmcconfig.

Add new sti command.

Descend into wpa.

Import userland utility for playing with gpio devices. From OpenBSD.

Experimental support for extended attributes on UFS1 file systems, using a
backing file per attribute type indexed by inode number to hold the extended
attributes.

This is working pretty well on my test systems, except for the "autostart"
feature. I need someone with a better handle on the VFS locking protocol
to go over that.

This is a work-in-progress. There are parts of this that could be re-factored
allowing this approach to be used on other types of file systems.

Adapted from FreeBSD.

ieee1394 import from FreeBSD.

config and genassym are not sysadmin tools, they are development tools.
As such, they don't belong in /usr/sbin, but rather /usr/bin. Move them
there.

add genassym

Test USE_INET6 instead of MKINET6 for various apps.
Part of PR 30092 from Jukka Salmi.

Move /etc/postinstall (and the etc.tgz set) to /usr/sbin/postinstall
(and the base.tgz set).

branches: 1.199.2;
Add MKIPFILTER; if set to no, don't build and install the ipf(4) programs,
headers and LKM.

Add MKPF; if set to no, don't build and install the pf(4) programs,
headers, LKM and spamd.

Both options default to yes, so nothing changed in the default build.

Reviewed by lukem.

Switch to ipsec-tools for libipsec, setkey, and racoon. From
Emmanuel Dreyfus, with some small changes by me.

Descend into iwictl

remove unnecessary comment

move pf reachover makefiles into usr.sbin/pf. ok'ed by itojun.

before:
sbin/pfctl
usr.sbin/authpf
usr.sbin/spamdb
libexec/ftp-proxy
libexec/spamd
libexec/spamd-setup
libexec/spamlogd
after:
usr.sbin/pf/pfctl
usr.sbin/pf/authpf
usr.sbin/pf/spamdb
usr.sbin/pf/ftp-proxy
usr.sbin/pf/spamd
usr.sbin/pf/spamd-setup
usr.sbin/pf/spamlogd

descend into ipwctl

Add wlanctl(8), a utility for examining 802.11 node tables.

Since spamdb and it's man page is in the set lists, we ought to
descend into the subdirectory to build and install it as well.

Put altq back - which Itojun deleted for us in the same revision.

authpf from OpenBSD 3.5 PF

Consistently check ${TOOLCHAIN_MISSING} against "no".

The file system snapshot pseudo driver.

Uses a hook in spec_strategy() to save data written from a mounted
file system to its block device and a hook in dounmount().

Not enabled by default in any kernel config.

Approved by: Frank van der Linden <fvdl@netbsd.org>

Make building IPv6 support controllable by MKINET6

also build the sntp (rfc2030) program which comes with ntp-4.2

Don't build kvm_mkdb anymore.

Build powerd.

Build map-mbone, mrinfo, mrouted, and mtrace from usr.sbin again instead
of gnu/usr.sbin, now that the license has been cleared.

enable sunlabel

move mbone tools out of basesrc, as they use part of mrouted

move mrouted out of basesrc, as it carries non-BSD license.
agreed w/ core.

* Eliminate the USE_NEW_TOOLCHAIN variable. Instead, split it into
two variables:

TOOLCHAIN_MISSING -- set to "yes" on platforms for which there is
no working in-tree toolchain (hppa, ns32k, sh5, x86_64).

EXTERNAL_TOOLCHAIN -- if defined by the user, points to the root of
an external toolchain (e.g. /usr/local/gnu). This enables the cross-build
framework even for TOOLCHAIN_MISSING platforms.

If TOOLCHAIN_MISSING is set to "yes", MKGDB, MKBFD, and MKGCC are all
unconditionally set to "no", since the bits are not there to build.

If EXTERNAL_TOOLCHAIN is set, MKGCC is unconditionally set to "no",
since the external toolchain's compiler is not in-sync with the
in-tree compiler support components (e.g. libgcc).

* Set MACHINE_CPU much earlier in bsd.own.mk, so that more tests in
that file can use it.

Move pmap(1) to /usr/bin (from /usr/sbin) where it belongs.

Add pmap(1) command

Added touch panel calibration utility.

PR/17402: Julio Merino: Userland portion for moused (with some changes from me).

retire greconfig(8) - you can use ifconfig(8) for everything it can do.

add mscdlabel

branches: 1.172.2;
enable installboot, since it's now useful for at least a couple of ports

Split the notion of building Hesiod, Kerberos, S/key, and YP
infrastructure and using that infrastructure in programs.

* MKHESIOD, MKKERBEROS, MKSKEY, and MKYP control building
of the infratsructure (libraries, support programs, etc.)

* USE_HESIOD, USE_KERBEROS, USE_SKEY, and USE_YP control
building of support for using the corresponding API
in various libraries/programs that can use it.

As discussed on tech-toolchain.

Added etcupdate

Don't descend into dbsym anymore.
Only sun3[x] was building it anyway, and now it's converted to
USE_NEW_TOOLCHAIN, where all ports (will) have it. The other reason to
descend is the man page, but what use is a man page if the program
doesn't get installed? [gnu/usr.sbin/dbsym has its own copy of the
man page.]
Ok'd by thorpej.

Only build dbsym if not USE_NEW_TOOLCHAIN.

put mdsetimage back in for old toolchain platforms

Add a program to attach the IrDA frame level driver to a serial line.
Pretty much like slattach(8).

Enable ifwatchd.

Add moused, a daemon to take input from a serial mouse and feed it to
a wsmux. This way serial mice can be accessed via /dev/wsmouse like all
other mice.
This program is heavily based on the FreeBSD moused program.

add makefs(8)

Don't descend into this mdsetimage -- we now use the BFD'ified
version in src/gnu/usr.sbin.

Add a simple program for listing, adding, and removing wsmux devices.
It's not a much used utility, but when you need it it's a pain to
be without.

Build pcictl.

do not visit mtrace6

remove pim6[sd]d from the tree. the software had a restrictive license
than we can handle. hope to re-enable it as pkgsrc, or to re-enable it
into basesrc if license updates.

Note that sunndd has been renamed ndbootd.

Build sunndd, used to netboot Sun2 machines.

Add a control utility for `mlx' devices. Derived from FreeBSD's `mlxcontrol'.

Enable ISDN userland utilities.

Enable Sushi

visit usr.sbin/racoon in build process (if MKCRYPTO != no).

Descend into altq.

Put back missing line break.

Add a basic control program for iop devices.

hprop(8) belongs in /usr/sbin, not /usr/libexec.

The Kerberos KDC belongs in /usr/sbin, not in /usr/libexec.

gifconfig(8) is obsolete; functionality has been added to
ifconfig(8).

Add MK... variables to enable/disable various aspects of building
crypto support into the system. See share/mk/bsd.README for more
a full description.

branches: 1.144.2;
Merge a bunch of things from crypto-us and crypto-intl into basesrc,
adding support for Heimdal/KTH Kerberos where easy to do so. Eliminate
bsd.crypto.mk.

There is still a bunch more work to do, but crypto is now more-or-less
fully merged into the base NetBSD distribution.

move setkey(8) from usr.sbin to sbin, to enable us to initialize
IPsec manual key before /usr mount..
(based on "don't use cvsmove" discussion i have seen, I did not use cvsmove)

Remove portmap, add rpcbind.

branches: 1.141.2;
Add ntp, remove xntp.

nuke BUILD_POSTFIX

Remove nfsiod, it is no longer needed.

mbrlabel moves to /sbin.

Add envstat(8) for displaying sensor readings from any envsys(4)
compatible device.

sigh... um, revert to 1.133, not 1.33. oops!

revert previous change

remove sesd

add sesd subdir

Build "sendmail" 8.9.3 instead of 8.8.8.

add pim6sd: PIMv6 sparse mode daemon. (from KAME)

disable sysctl for now (avoid breakage during move from usr.sbin to sbin)

Added tadpolectl

Add user(8).

add cnwctl(8), a control program for cnw interface.
from bsdi/freebsd-pao cnwctl(8).