@opntr opntr released this Apr 20, 2018 · 1481 commits to hardened/11-stable/master since this release

Assets 2

Highlights:

  • Update stable/11 from 11.1-STABLE to 11.2-PRERELEASE (94c28bf)
  • MFC r332452: Update vt(4) "Terminus BSD Console" font to v4.46 (9c72936)
  • Fix double asking of GELI password during boot (328e5ff)
  • Fix efibootmgr on 11-STABLE (d8ec2e2)
  • HBSD MFC r330110: Add kernel retpoline option for amd64 (610cfa8)
  • MFC efibootmgr: r326725-r326728, ... (b166cff)
  • MFC r332045: Fix kernel memory disclosure in tcp_ctloutput (81f1d66) [FreeBSD-SA-Candidate]
  • MFC r332042: Fix kernel memory disclosure in linux_ioctl_socket (66d2c2b) [FreeBSD-SA-Candidate]
  • MFC r332034: linux_ioctl_hdio: fix kernel memory disclosure (fd3044f) [FreeBSD-SA-Candidate]
  • MFC r330356 (eadler): sys/linux: Fix a few potential infoleaks in Linux IPC (5ec3811) [FreeBSD-SA-Candidate]
  • EFIRT fixes (c0df00c)
  • MFC r330354 (eadler): sys/fuse: fix off by one error (9272ccc) [FreeBSD-SA-Candidate]
  • automount updates
  • bhyve updates
  • ipfw updates
  • loader updates
  • pf updates
  • sctp updates
  • vt updates
  • zfs updates

Changelog

Oliver Pinter (11):
      HBSD MFC r328972: add retpoline compiler and linker feature flags
      HBSD MFC r330110: Add kernel retpoline option for amd64
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: load.conf follow up after loader MFCs
      HBSD: resolve merge conflicts in stand/{fdt,ficl}/Makefile
      HBSD: resolve merge conflict in share/mk/src.opts.mk
      HBSD: resolve merge conflict in  share/man/man5/src.conf.5
      HBSD: prepare for upstream recursive setfacl support
      HBSD MFC r332396: setfacl: add recursive functionality
      HBSD MFC r332405: setfacl: minor man page edit to appease igor(1)
      HBSD: update OP-HBSD kernel config

Oliver Pinter + (45):
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master
      Merge branch 'freebsd/11-stable/master' into hardened/11-stable/master

Shawn Webb (3):
      Merge remote-tracking branch 'origin/freebsd/11-stable/master' into hardened/11-stable/master
      HBSD: Resolve merge conflict
      HBSD: Re-introduce SIGINFO support in setfacl(1)

ae (11):
      MFC r331668:   Rework ipfw rules parsing and printing code.
      MFC r328988,r328989:   Rework ipfw dynamic states implementation to be lockless on fast path.
      MFC r332448:   Remove printing of "not" keyword from print_ip() function.
      MFC r332449:   Remove printing of "not" keyword from print_ip6() function.
      MFC r332451:   Fix indenting in ipv6.c file, use tabs instead of mixing tabs and spaces.
      MFC r316825:   Use address of specific union member instead of whole union address to   fix PVS-Studio warnings.
      MFC r332456:   Migrate NAT64 to FIB KPI.
      MFC r332457:   Use cfg->nomatch_verdict as return value from NAT64LSN handler when   given mbuf is considered as not matched.
      MFC r332459:   Fix integer types mismatch for flags field in nat64stl_cfg structure.
      MFC r332475:   Add check that mbuf had not multicast layer2 address.   Such packets should be handled by ip6_mforward().
      MFC r332467:   To avoid possible deadlock do not acquire JQUEUE_LOCK before callout_drain.

asomers (9):
      MFC r329606:
      MFC r329754:
      MFC r329845, r329872
      MFC r329874:
      MFC r330514:
      MFC r330515:
      MFC r330627:
      MFC r330696, r330709, r330742, r331358
      MFC r330710, r330718-r330720

avg (9):
      MFC r330295: ZFS: fix adding vdevs to very large pools
      MFC r330977: g_access: deal with races created by geoms that drop the topology lock
      MFC r331761: align i386 cpu_reset() with amd64 version
      MFC r331616: vfs_donmount: in certain cases try r/o mount if r/w mount fails
      MFC r331666: ZFS vn_rele_async: catch up with the use of refcount(9) for the vnode use count
      MFC r331874: x86 cpu_reset_proxy: no need to stop_cpus() the original processor
      MFC r331875: x86 cpu_reset: if failed to switch to BSP proceed to cpu_reset_real
      MFC r331878: unify amd64 and i386 cpu_reset() in x86/cpu_machdep.c
      fix pc98 compilation issue in r332760

bapt (1):
      MFC r331005-r331006

brooks (10):
      MFC r331648:
      MFC r331651-r331653
      MFC r331654, r331869
      MFC r331641, r331644, r332158
      MFC r331797:
      GC never enabled support for SIOCGADDRROM and SIOCGCHIPID.
      MFC r332087:
      MFC r332151:
      Fix wl(4) after r332288.
      MFC r332088:

cognet (1):
      MFC r329388, r331441 and r331898, to bring the -CURRENT ck version. r329388: Define CK_MD_TSO for the relevant arches (i386, amd64 and sparc64). Defaulting to CK_MD_RMO has the unfortunate side effect of generating memory barriers that are useless on those arches, and the even more unfortunate side effect of generating lfence/sfence/mfence on i386, even if older CPUs don't support it. This should fix the panic reported when using IPFW on a Pentium 3. Note that mfence and sfence might still be used in a few case, but that shouldn't happen in FreeBSD right now, and should be fixed upstream first.

cy (1):
      MFC r331936, r331942, r331943, r331945, r331947, r331948

davidcs (1):
      MFC r331739 1. Add additional debug prints. 2. Break transmit when IFF_DRV_RUNNING is OFF. 3. set desc_count=0 for default case in switch in ql_rcv_isr()

delphij (1):
      MFC r331180: Plug a possible memory leak.

emaste (25):
      MFC r330354 (eadler): sys/fuse: fix off by one error
      MFC r330356 (eadler): sys/linux: Fix a few potential infoleaks in Linux IPC
      MFC r332034: linux_ioctl_hdio: fix kernel memory disclosure
      MFC r332042: Fix kernel memory disclosure in linux_ioctl_socket
      MFC r332045: Fix kernel memory disclosure in tcp_ctloutput
      MFC r331757: Correct comment typo in Hyper-V
      MFC r331442: Fixup return style(9) in amd64 linux*_sysvec.c
      MFC r320243 (bdrewery): Fix spelling error.
      MFC r328972: add retpoline compiler and linker feature flags
      MFC r331935: vtfontcvt: allow .bdf characters less than full height
      MFC ath(4) potential memory disclosure fixes
      MFC r331082: ANSIfy sys/x86
      MFC r330110: Add kernel retpoline option for amd64
      Regen src.conf.5 after r332306 (WITH_KERNEL_RETPOLINE MFC)
      MFC r331053: ANSIfy i386/vm86.c
      MFC r331439: Sort headers in MD Linuxulator files
      MFC r326641 by bapt: Split body of mails not respecting RFC2822
      dmagent: add -D_WITH_GETLINE to fix stable/11 build
      MFC r318412: fix sparc64 build by restoring 'register' in pcpu.h
      MFC r308490 by syrinx:
      MFC r331758: makefs: sync fragment and block size with newfs
      MFC r331077 (brooks): Add _IOC_NEWLEN() and _IOC_NEWTYPE() macros.
      MFC r332390: make-memstick.sh: put partition args on separate lines
      MFC r332421: vt: add three more cp437 mappings for vga textmode
      MFC r332452: Update vt(4) "Terminus BSD Console" font to v4.46

gjb (60):
      Document EN-18:03, EN-18:04, SA-18:04, SA-18:05.
      Initial pruning of the relnotes page post-11.1-RELEASE.
      Document r331838, clang, lld, lldb, llvm, etc. update to 6.0.0.
      Document r331246, bmake version 20180222.
      Document r330570, less(1) v530.
      Document r331471, ps(1) 'jail' keyword.
      Document r328140, df(1) '--si' alias to '-H'.
      Document r324271, ps(1) capsicum capability mode state information.
      Document r324270, ps(1) realtime and idle priorities in state flags.
      Document r321092, ln(1) '-F' behavior fixed.
      Document r331638, OpenSSL 1.0.2o.
      Document r323134, OpenSSH version 7.4p1.
      Document r323136 which I overlooked, OpenSSH 7.5p1.
      Document r326892, Amazon EC2 instances now use Amazon Time Sync Service, NTP service internal to the EC2 infrastructure.
      Document r331500, TIAO USB multi-protocol adapter support.
      Document r331662, tzdata version 2018d.
      Document r327234, tcpdump(1) 4.9.2.
      Document r322442, subversion 1.9.7.
      Document r328874, file(1) 5.32.
      Document r321303, libarchive(3) 3.3.2.
      Document r324581, mandoc(1) 1.14.3.
      Document r330106, NTP 4.2.8p11.
      Document r322172, libxo(3) 0.8.4.
      Document r329114, GELI passphrase length no longer visible during boot by default.
      Document r325003, diskinfo(8) rotation rate and TRIM/UNMAP support displayed.
      Document r321927, diskinfo(8) '-s' and '-p' flag additions.
      Document r321929, diskinfo(8) '-s' also includes the device model.
      Document r326725, efibootmgr(8) addition.
      Fix the revision efibootmgr(8) was merged to stable/11.
      Document r331586, mlx5io(4) and mlx5tool(8) additions.
      Document r321262, newsyslog(8) RFC5424-compliant log rotation messages.
      Document r322919, pw(8) 'usermod' update to handle empty secondary group lists (-G '').
      Document r326848, pw(8) expiration handling fix.
      Document r330694, "@" and "!" now allowed in GECOS fields.
      Document r321287, sesutil(8) libxo(3) support.
      Document r321241, crontab(1) '-f' flag added.
      Document r321413, bhyve virtio_console(4) support.
      Document r322254, bsdinstall(8) UEFI-only boot on arm64.
      Document r324380, cpucontrol(8) '-n' flag addition.
      Document r327871, cpucontrol(8) CPU feature re-evaluation ('-e').
      Document r330307, cxgbe(4) firmware version 1.16.63.0.
      Document r328599, service(8) '-j' flag addition.
      Document r326778, camcontrol(8) ZAC device type output.
      Document r330692, dhclient(8) RFC2131 compliance fix.
      Document r324674, fsck_ffs(8) no longer reports a filesystem as 'modified' if only the timestamp in the superblock changed.
      Document r328604, fsck_ffs(8) exit with non-zero status if filesystem is not repaired.
      Document r331729, ifconfig(8) random MAC address generation.
      Document r327592, mdmfs(8) tmpfs(5) support.
      Document r326413, pfctl(8) route-to properly handles interfaces with multiple IP addresses.
      Document r322910, umount(8) '-N' flag addition.
      Document r331603, sysctl(8) support for setting multiple values to a multi-value node.
      Document r328668, nvmecontrol(8) SMART data returned in a numeric value instead of a hex value.
      Document r328716, new nvmecontrol(8) WDC-specific control options.
      Document r325473, rsh(1) '-N' flag addition.
      Fix an incomplete sentence.
      MFC r326278 (manu):
      Fix a typo.
      Fix a misspelled word.
      Use 'literal' tags around compiler-rt, as it is a library, not an application.
      Update stable/11 from 11.1-STABLE to 11.2-PRERELEASE, marking the official start of the code slush.

glebius (1):
      Merge r331871:   Handle a special case when a slab can fit only one allocation,   and zone has a large alignment. With alignment taken into   account uk_rsize will be greater than space in a slab. However,   since we have only one item per slab, it is always naturally   aligned.

gonzo (2):
      MFC r328434 by maxim:
      Fix mis-merge of r329507 in r331501

grehan (2):
      MFC r325261   Emulate the "OR reg, r/m" instruction (opcode 0BH).
      MFC r330764   Add CR2 get/set support.

hselasky (3):
      MFC r331642: Add support for right and middle click with integrated button to WSP USB trackpad driver.
      MFC r331694: Swap two instances of regular macros with function macros in the LinuxKPI, to narrow down the substitution scope.
      MFC r331828: Optimise use of Giant in the LinuxKPI.

ian (2):
      MFC r331868:
      Remove .info debugging output that accidentally got left in for MFC commit.

imp (1):
      MFC r332780,r332783:     Intel drives have an optimal alignment for I/O. While they honor I/Os     that cross this boundary, they perform better when this isn't the     case. Intel uses the 3rd byte in the vendor specific area for     this. The DC P3500 was previously listed without any explanation. Add     the DC P3520 and DC P4500 to the list.

jhb (3):
      MFC 328101,328911: Require SHF_ALLOC for kernel object module sections.
      MFC 331324: Ensure thread library is initialized in pthread_testcancel().
      MFC 331466: Add a workaround to the hypervisor detection for older versions of KVM.

jkim (1):
      MFC:	r314875, r331963

jtl (10):
      MFC r332120:   If a user closes the socket before we call tcp_usr_abort(), then   tcp_drop() may unlock the INP.  Currently, tcp_usr_abort() does not   check for this case, which results in a panic while trying to unlock   the already-unlocked INP (not to mention, a use-after-free violation).
      MFC r331926:   r330675 introduced an extra window check in the LRO code to ensure it   captured and reported the highest window advertisement with the same   SEQ/ACK.  However, the window comparison uses modulo 2**16 math, rather   than directly comparing the absolute values.  Because windows use   absolute values and not modulo 2**16 math (i.e. they don't wrap), we   need to compare the absolute values.
      MFC r331488:   This change adds a flag to the DAD entry to indicate whether it is   currently on the queue. This prevents accidentally doubly-removing a DAD   entry from the queue, while also simplifying some of the logic in   nd6_dad_stop().
      MFC r331484:   Remove some unneccessary variable sets in IPv6 code, as detected by   clang's static analyzer.
      MFC r331309:   If the INP lock is uncontested, avoid taking a reference and jumping   through the lock-switching hoops.
      MFC r329071:   On bootup, the amd64 pmap initialization code creates page-table   mappings for the pages used for the kernel and some initial allocations   used for the page table. It maps the kernel and the blocks used for   these initial allocations using 2MB pages.
      MFC r329171:   Mark the pages used for the initial page-table entries as wired. This   makes them consistent with the way other page-table pages are allocated.   It also provides the rest of the VM system a good clue that these pages   are used.
      MFC r330510:   Prior to r329071, pmap_bootstrap() used pmap_kmem_choose() to round the   first available virtual address to a 2MB boundary. After r329071,   create_pagetables() rounds firstaddr up to a 2MB boundary. This ensures   the kernel is mapped in super-pages, which is the point of the logic   in pmap_kmem_choose(). Therefore, it is no longer necessary for   pmap_bootstrap() to round up to the 2MB boundary again.
      MFC r330511:   We shouldn't need to execute code in the recursive page table mappings;   therefore, it should be safe to set the NX bit on the PML4E for the   recursive page table mappings.  According to the Intel docs, the effect   of the NX bit should propogate to any page reached through a PML4E which   has the NX bit set.
      MFC r306768:   If the new window size is less than the old window size, skip the   calculations to check if we should advertise a larger window.

ken (2):
      MFC r331766, r331768:
      MFC r332458:   ------------------------------------------------------------------------   r332458 | ken | 2018-04-12 15:21:18 -0600 (Thu, 12 Apr 2018) | 34 lines

kevans (55):
      MFC r331743: Add libdl to clibs package
      MFC r330868, r331241, r331361, r331365: EFIRT Fixes
      MFC r330844: Correct minor typo in comment, efi_dmcap -> efi_tmcap
      MFC r331413: efidev: Drop a quick note in about efi_cfgtbl/efi_runtime
      MFC r307826,r328949: Firstboot fs mount changes
      MFC r328951: Refactor cleanvar to remove shell expansion vulnerability
      MFC r331718: stand: Add workaround for HP BIOS issues
      stable/11: Bump FreeBSD_Version for recent rc ${name}_limits bits
      MFC r320160: dtc: Update to upstream 917526
      MFC r330005-r330007, r330021, r330029, r330622, r331207: Solo loader.conf(5)
      MFC r331212,r331213: Move /boot/overlays to /boot/dtb/overlays
      MFC efivar changes: r321429, r323056-r323057, r323066, r323259-r323260, r323519, r325684, r326050-r326051, r326231, r326287, r326457-r326459, r326472, r326658, r326805, r327574-r327575, r330279
      MFC efibootmgr: r326725-r326728, r326771, r326800-r326804, r326806, r327163  r327572-r327573, r327610-r327611, r327877, r331069
      MFC r329268, r329517
      MFC r329725, r329831
      MFC r329726, r329737, r329740
      MFC r329345: Eliminate bsd.stand.mk and -fPIC 32-bit intel builds
      MFC r329745: load_elf.c: Use consistent indentation
      MFC r329758: Fix compilation with LOADER_DEBUG defined after r329725.
      MFC r329859,r329860: Float protection in stand
      MFC r329879, r329892
      MFC r330026: libsa: Move MAXWAIT from net.h to net.c
      MFC r330056: libsa: replace remaining _write callbacks by null_write
      MFC r330077, r330248
      Revert lua bits that snuck in with r332144
      MFC r330249-r330250
      MFC r330788: beri loader: Replace getc/putc with beri_ prefixed versions
      MFC r329190, r329315, r330131: metadata load file unification
      MFC r330365, r330371: OFW changes
      stable/11: Mark EFI as a broken option on pc98
      MFC r330806-r330815, r330837, r330864, r330883
      MFC r331331: Apply r228478 (CTASSERT => _Static_assert()) to bootstrap.h
      MFC r330970, r331067, r331767, r331852, r331858
      MFC r330116, r330118, r330251, r330254
      Regenerate src.conf(5) after r332162
      MFC r322324: capsicum_helpers: Add FIODTYPE to default ioctls allowed
      MFC r332146: Re-sort LOADER options
      Revert r331880, MFC of r328331 and bump FreeBSD_version
      MFC r308896
      MFC r309350, r309352
      MFC r319828, r324625
      MFC r328037: Rename 'recv' to 'receive' to appease shadow warnings from GCC.
      MFC r306758 (emaste): locate: ANSIfy
      MFC r308432, r308657: Capsicumize some trivial stdio programs
      MFC r319897-r319898, r319904: Improve yes' throughput
      MFC r332372-r332374: tail(1)/head(1) compatibility long options
      MFC r322318-r322319
      geom_aes: Provide some deprecation notices
      MFC r323108, r323125, r326047-r326049
      MFC r308137, r316312, r332361
      MFC r332483:
      MFC r332387: Annotate geom modules with MODULE_VERSION
      MFC r332561,r332573: Rename volume label for ESP
      MFC r332429, r332431
      MFC r332416: Refactor currdev setting

kib (4):
      MFC r331760: Make vm_map_max/min/pmap KBI stable.
      MFC r332060: Make the INTO instruction operational in 32bit mode.
      MFC r332061: Fix ERESTART for lcall $7,$0 syscalls.
      MFC r332182: Handle Skylake-X errata SKZ63.

kp (7):
      MFC r331225:
      MFC r332101:
      MFC r332136:
      MFC r332107:
      MFC r332142:
      MFC r331436:
      MFC r331546:

lidl (3):
      MFC r323206: Enable dtrace support for mips64 and the ERL kernel config
      MFC r324512: Don't use a non-zero argument for __builtin_frame_address
      MFC r328861: Update blacklist-helper to not emit messages from pf during operation.

markj (5):
      MFC r331738, r331853: Have TD_LOCKS_DEC() assert that td_locks is positive.
      MFC r331245: Drop KTR_CONTENTION.
      MFC r331934: Wrap long lines.
      MFC r332043: Typo.
      MFC r332079: Fix the definitions of get_cpu() and put_cpu().

mav (32):
      MFC r332145: Do not fail devices just for errors in descriptor format.
      MFC r307317: MFV r307313: 5120 zfs should allow large block/gzip/raidz boot pool (loader project)
      MFC r329732: MFV r329502: 7614 zfs device evacuation/removal
      MFC r329755: MFV r329753: 8809 libzpool should leverage work done in libfakekernel
      MFC r329759: 9018 Replace kmem_cache_reap_now() with kmem_cache_reap_soon()
      MFC r329761: MFV r329760: 7638 Refactor spa_load_impl into several functions
      MFC r329765: MFV r329762: 8961 SPA load/import should tell us why it failed
      MFC r329769: MFV r329766: 8962 zdb should work on non-idle pools
      MFC r329771: MFV r329770: 9035 zfs: this statement may fall through
      MFC r329775: MFV r329774: 8408 dsl_props_set_sync_impl() does not handle nested nvlists correctly
      MFC r329777: MFV r329776: 8477 Assertion failed in vdev_state_dirty(): spa_writeable(spa)
      MFC r329783: 8942 zfs promote .../%recv should be an error
      MFC r329798: MFV r329793, r329795: 9075 Improve ZFS pool import/load process and corrupted pool recovery
      MFC r329802: MFV r329799, r329800: 9079 race condition in starting and ending condesing thread for indirect vdevs
      MFC r329805: MFV r329803: 9080 recursive enter of vdev_indirect_rwlock from vdev_indirect_remap()
      MFC r329808: MFV r329807: 8940 Sending an intra-pool resumable send stream may result in EXDEV
      MFC r331404: MFV r331400: 8484 Implement aggregate sum and use for arc counters
      MFC r331406: MFV r331405: 9084 spa_*_ashift must ignore spare devices
      MFC r331408: MFV r331407: 9213 zfs: sytem typo
      MFC r331414: Reduce struct aggsum_bucket padding to fit into one cache line.
      MFC r331420 (by avg): zfs: fix mismatch between format specifier and type
      MFC r331699: Partial MFV r329753: 8809 libzpool should leverage work done in libfakekernel
      MFC r331701: MFV r331695, 331700: 9166 zfs storage pool checkpoint
      MFC r331703: MFV 331702: 9187 racing condition between vdev label and spa_last_synced_txg in vdev_validate
      MFC r331705: MFV 331704: 9191 dump vdev tree to zfs_dbgmsg when spa load fails due to missing log devices
      MFC r331707: MFV r331706: 9235 rename zpool_rewind_policy_t to zpool_load_policy_t
      MFC r331709: MFV r331708: 9321 arc_loan_compressed_buf() can increment arc_loaned_bytes by the wrong value
      MFC r331711: MFV 331710: 9188 increase size of dbuf cache to reduce indirect block decompression
      MFC r331713: MFV r331712: 9280 Assertion failure while running removal_with_ganging test with 4K devices
      MFC r331950: 9434 Speculative prefetch is blocked by device removal code.
      MFC r332641: MFV man pages update from r329502: 7614 zfs device evacuation/removal.
      MFC r332523: 9433 Fix ARC hit rate

mckusick (1):
      MFC of 332264, 332266, 332415:

mmel (2):
      MFC (cherry pick)r306197,r306327,r306328,r308390,r308391,r310600,r314703:
      MFC r328201:

nyan (2):
      MFi386: r329199
      - Use __FBSDID(). - Fix pc98 build.   Merge from sys/dev/syscons/scterm-teken.c r330918.

oleg (2):
      Fix ipfw table creation when net.inet.ip.fw.tables_sets = 0 and non zero set specified on table creation. This fixes following:
      MFC r332403:

pfg (2):
      MFC r331969, r332035: pthread.h: drop nullability attributes.
      MFC r328957: {ext2|ufs}_readdir: Avoid setting negative ncookies.

rgrimes (2):
      MFC: r304147(bde)
      MFC: r332075

shurd (3):
      Work around netmap issue with ixgbe
      Move 1-second spin into ixgbe_netmap_reg()
      MFC r332388:

smh (1):
      MFC r327559:

trasz (44):
      MFC r324237:
      MFC r324626:
      MFC r328194:
      MFC r328196:
      MFC r328197:
      MFC r328219:
      MFC r327382:
      MFC r327522:
      MFC r330875:
      MFC r325312:
      MFC r325390:
      MFC r325400:
      MFC r325392:
      MFC r326250:
      MFC r326251:
      MFC r326252:
      MFC r329312 by eadler@:
      MFC r325403:
      MFC r326248:
      MFC r326430:
      MFC r328337:
      MFC r328339:
      MFC r328338:
      MFC r328589:
      MFC r328590:
      MFC r328341:
      MFC r326471:
      MFC r326730:
      MFC r327777:
      MFC r328195:
      MFC r328335:
      MFC r328336:
      MFC r328342:
      MFC r330024:
      MFC r330740:
      MFC r330741:
      MFC r330937:
      MFC r331013:
      MFC r325317:
      MFC r325314:
      MFC r325315:
      MFC r325316:
      MFC r325318:
      MFC r325313:

tuexen (82):
      MFC r320650:
      MFC r320653: Move to open state after plausibility checks.
      MFC r321034:
      MFC r321197:
      MFC r321204:
      MFC r321205:
      MFC r321289:
      MFC r321463:
      MFC r322812:
      MFC r322967:
      MFC r323352:
      MFC r323372:
      MFC r323374:
      MFC r323376:
      MFC r323377:
      MFC r323378:
      MFC r323505:
      MFC r323657:
      MFC r323670:
      MFC r323763:
      MFC r323774:
      MFC r323776:
      MFC r323833:
      MFC r323847:
      MFC r323850:
      MFC r323861:
      MFC r323902:
      MFC r323904:
      MFC r324056:
      MFC r324119:
      MFC r324120:
      MFC r324122:
      MFC r324216:
      MFC r324218:
      MFC r324317:
      MFC r324615:
      MFC r324638:
      MFC r324729:
      MFC r324730:
      MFC r324954:
      MFC r324958:
      MFC r324971:
      MFC r325046:
      MFC r325284:
      MFC r325370:
      MFC r325434:
      MFC r325746:
      MFC r325788:
      MFC r325864:
      MFC r326672:
      MFC r326829:
      MFC r326233:
      MFC r327844:
      MFC r328028:
      MFC r328066:
      MFC r328477:
      MFC r328478:
      MFC r328488:
      MFC r331061:
      MFC r327919:
      MFC r327921:
      MFC r327961:
      MFC r327962:
      MFC r327966:
      MFC r327967:
      MFC r327994:
      MFC r327995:
      MFC r328014:
      MFC r328015:
      MFC r328033:
      MFC r328058:
      MFC r328059:
      MFC r328081:
      MFC r327205:
      Clarify that the break is not missing.
      MFC r327209:
      MFC r327214:
      MFC r327203:
      MFC r332269:
      MFC r332271:
      MFC r332273: Fix a logical inversion bug. Thanks to Irene Ruengeler for finding and reporting this bug.
      MFC r332353:

Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-11-STABLE-v1100055.2/

CHECKSUM.SHA512:

SHA512 (HardenedBSD-11-STABLE-v1100055.2-amd64-bootonly.iso) = 530257bfc3d35b450f1080a2468fc2acc05133840a25a2d531d50e23b13f45018d9ce00790d4f86a8882854cc838ebf8e1f26ffef3254aeda9aca8894d81e796
SHA512 (HardenedBSD-11-STABLE-v1100055.2-amd64-disc1.iso) = 420993d25e5106dbd5018c4d6562b98dcd7a6b2e346b8eb8a9682d4dfcc97e24d79269a14a428c51a57d1df121770cfdea486aad7a4e722e71c610abcb007149
SHA512 (HardenedBSD-11-STABLE-v1100055.2-amd64-memstick.img) = 0615d0b403c1fc651b36ba4846af8587d5a2996993ec277baf478104486b06ced464a2d80516bf286b6e21bee58a8bce422ad3ddccd3a4fc76a09af4cf3c8fd0
SHA512 (HardenedBSD-11-STABLE-v1100055.2-amd64-mini-memstick.img) = 636f6510bfe2362204124ae392def900c6e7cde06b640c696297e8eba17e365d62a9b06970e58aa6d62c5d2ba6ff34206705f32f68c31a386c42905d77d32262

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----
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=JHSI
-----END PGP SIGNATURE-----

CHECKSUM.SHA512.txt
CHECKSUM.SHA512.asc.txt
shortlog-HardenedBSD-11-STABLE-v1100055.2.txt