Approved by: re (cperciva) (cherry picked from commit fb709935d64d5fd4ad21cf8c69faf580760999e4) (cherry picked from commit 484fa40ca71bc9c00ee6d3729e5e27cc5d68e131)
While here, fix compilation be unhiding zfs_tunables hidden in 5714090fb Approved by: re (cperciva) (cherry picked from commit 7128544353ac76cf0acfd02b327dec8e8f7faf1d)
NIST SP800-90B allows for only a single entropy source to be claimed in a FIPS-140-3 certificate. In addition, only hardware sources that have a NIST Entropy Source Validation (ESV) certificate, backed by a SP800-90B Entropy Assessment Report, are usable. Intel has obtained ESV certificates for several of their processors, so RDSEED is a FIPS-140-3 suitable entropy source. However, even though RDRAND is seeded by RDSEED internally, RDRAND would need a RBG certificate and CAVP testing run on the DRBG in order to use it for FIPS-140-3 (SP800-90B) purposes. So we need to know down in the CSPRNG-subsystem which source the entropy came from. In light of the potential issues surrounding AMD Zen 5 CPU's RDSEED implementation[*], allow RDSEED to be disabled in loader.conf. [*] https://www.phoronix.com/news/AMD-EPYC-Turin-RDSEED-Bug Approved by: re (cperciva) Reviewed by: cem MFC after: 3 days Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D53150 Differential Revision: https://reviews.freebsd.org/D53291 (cherry picked from commit 3a12982962ce330c37c154bb2eb8ae0539fc6f48) (cherry picked from commit 38e9d282cd7dacbf64883b45544723408cfd4d09) (cherry picked from commit 9ca8e09abba87991ad5171ed8920f4d1571245d5)
The current IPFW version 3 dates to 2010 (commit cc4d3c30ea28, "Bring in the most recent version of ipfw and dummynet, developed"). The compat code for FreeBSD 8 and earlier has a number of issues and is no longer needed, so remove it. Approved by: re (cperciva) Reported by: Ilja Van Sprundel <ivansprundel@ioactive.com> Reviewed by: ae, glebius Relnotes: Yes Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D53343 (cherry picked from commit c59aab9a5b3970b3ccec744f759e6cb87e938dbe) (cherry picked from commit 9657c50cdd7741404d99881fdd9243175086ede1)
Approved by: re (cperciva) (cherry picked from commit 51d5e8c8ca0f3c8bdd26b042973b3dbe8f30d607)
This version is based on git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git e5f0a698b34ed76002dc5cff3804a61c80233a7a ( tag: v6.17 ). Approved by: re (cperciva) (cherry picked from commit 354a030185c650d1465ed2035a83636b8f825d72) (cherry picked from commit a13158f451cffe04a723a71144e614ebb6821a58)
This version is based on git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git e5f0a698b34ed76002dc5cff3804a61c80233a7a ( tag: v6.17 ). Approved by: re (cperciva) (cherry picked from commit eb15fdb1b72de02e7a4c454f7eeeb1cee5cb83df) (cherry picked from commit 0272ecf586255991f94f80378c4a3384e83fccc5)
This version is based on git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git e5f0a698b34ed76002dc5cff3804a61c80233a7a ( tag: v6.17 ). Some of the changes we reported upstream got incorporated in this (or the v6.16) release. This also includes a change from iwlwifi-next.git::next for missing symbols iwl_mvm_v3_rate_from_fw() and iwl_mvm_v3_rate_to_fw() were originally comitted to mvm/rs.[ch] which we do not have. That left us with unresolved symbols. For the never comitted v6.16 driver update I had started to piece these together but they have been migrated out to utils.c so take them from there until the next release hopefully ships this change. Approved by: re (cperciva) Obtained from: git://git.kernel.org/pub/scm/linux/kernel/git/iwlwifi/iwlwifi-next.git branch next, 1b49af228594452206d5c50a33b6a341428edb63 (cherry picked from commit 6b627f88584ce13118e0a24951b503c0b1f2d5a7) (cherry picked from commit e89beeee25c3d08805e19cfc085a6c5b2f762a21)
These are known to work if loaded manually by loader(8) (for VF2 at least). If nothing else, it is useful to provide a DTB closely tied to the kernel version. Approved by: re (cperciva) MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D53117 (cherry picked from commit 96b137c044d8f7266757e95ff134119f3ac51be5) (cherry picked from commit 2257adb848d0d932f31419b93a2e04ba60b28936)
These are known to work if loaded manually by loader(8) (for the Nezha board at least). If nothing else, it is useful to provide a DTB closely tied to the kernel version. Approved by: re (cperciva) MFC after: 3 days Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D53118 (cherry picked from commit 3ed48eb085f7c4ae5c019ee882e694b432d43911) (cherry picked from commit 9a44b569071db0604759f589679ba49cb70100e7)