HardenedBSD-10-STABLE-v1000047

Warning: this is a security update!

Highlights:

• HBSD: partially backport 13971cb as fix for CVE-2017-1084 (d0b03c5)
• Changed __HardenedBSD_version scheme
• opBSD: plug the last memory protection test in paxtest (cf883c4)
• HBSD MFC: Fix long standing issue in bsdconfig's keymap selection (12c307c)
• HBSD: add our third mirror: de-01.installer.hardenedbsd.org @germany
• HBSD: add our second mirror: allbsd.org @japan
• Implement INHERIT_ZERO for minherit(2)
• Fix several buffer overflows in realpath(3), and other minor issues [FreeBSD-SA-Candidate]
• Libarchive update (bd8807f)
• hyperv/kvp: Fix pool direcrory and file permission

Changelog

Oliver Pinter (8):
      Merge remote-tracking branch 'origin/freebsd/10-stable/master' into hardened/10-stable/master
      HBSD: add our second mirror: allbsd.org @Japan
      HBSD: use http instead of https in mirrorselect, since by default no certs are installed on installer
      HBSD: add our third mirror: de-01.installer.hardenedbsd.org @Germany
      HBSD MFC: Fix long standing issue in bsdconfig's keymap selection
      opBSD: plug the last memory protection test in paxtest
      HBSD: Bump __HardenedBSD_version to 47
      HBSD: Bump __HardenedBSD_version to 1000047

Oliver Pinter + (65):
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master
      Merge branch 'freebsd/10-stable/master' into hardened/10-stable/master

Shawn Webb (4):
      Merge remote-tracking branch 'origin/freebsd/10-stable/master' into hardened/10-stable/master
      HBSD: Resolve merge conflict
      Merge remote-tracking branch 'origin/freebsd/10-stable/master' into hardened/10-stable/master
      HBSD: Resolve merge conflict

alc (1):
      MFC r318995   In r118390, the swap pager's approach to striping swap allocation over   multiple devices was changed.  However, swapoff_one() was not fully and   correctly converted.  In particular, with r118390's introduction of a per-   device blist, the maximum swap block size, "dmmax", became irrelevant to   swapoff_one()'s operation.  Moreover, swapoff_one() was performing out-of-   range operations on the per-device blist that were silently ignored by   blist_fill().

asomers (19):
      MFC r301207:
      MFC r313069:
      MFC r314148, r314150
      MFC r314341:
      MFC r315032-r315036, r315039, r315041
      MFC r316500 (except the part to usr.bin/fortune)
      MFC r316501, r316523
      MFC r316535:
      MFC r316548:
      MFC r316610:
      MFC r316611:
      MFC r316760:
      MFC r316856:
      MFC r317715:
      MFC r317755, r317758
      MFC r317759:
      MFC r318141, r318143-r318144
      MFC r318189:
      MFC r318593:

avg (5):
      MFC r316853: dtrace: fix normalization of stddev aggregation
      MFC r316854: rename vfs.zfs.debug_flags to vfs.zfs.debugflags
      MFC r319096: zfs_lookup: fix bogus arguments to lookup of "snapshot" directory
      MFC r318830: MFV r316921: 8027 tighten up dsl_pool_dirty_delta
      MFC r318832: MFV r316923: 8026 retire zfs_throttle_delay and zfs_throttle_resolution

badger (2):
      Move td_sigqueue to the end of struct thread
      move p_sigqueue to the end of struct proc

bapt (1):
      MFC r318900:

bdrewery (3):
      MFC r306771:
      MFC r303450:
      MFC r317658:

brooks (5):
      MFC r317566:
      MFC r317388:
      MFC r317707:
      MFC r317845-r317846
      MFC r317660, r317710

cy (10):
      Ifdef out a redundant if statement when INET6 is disabled.
      Revert r318203: Neglected to put "MFC 318203:" in the log.
      MFC 317830:
      MFC r318281:
      MFC r318283:
      MFC r318745:
      MFC r318578:
      MFC r318588:
      MFC r318606:
      MFC r318998:

davidcs (6):
      MFC r317180   Cleanup QLA_LOCK/QLA_UNLOCK macros   remove unused QLA_TX_LOCK/QLA_TX_UNLOCK macros   format qla_error_recovery()
      MFC r318126     llh_func_filter needs to be configured for 100G
      MFC r317996     Fix bug where MTX_DEF lock was held while taskqueue_drain() was invoked.     Check IFF_DRV_RUNNING flag is set prior to calling ql_hw_set_multi()
      MFC r318382  1. Move Rx Processing to fp_taskqueue(). With this CPU utilization for     processing interrupts drops to around 1% for 100G and under 1% for     other speeds.  2. Use sysctls for TRACE_LRO_CNT and TRACE_TSO_PKT_LEN  3. remove unused mtx tx_lock  4. bind taskqueue kernel thread to the appropriate cpu core  5. when tx_ring is full, stop further transmits till at least 1/16th of     the Tx Ring is empty. In our case 1K entries. Also if there are     rx_pkts to process, put the taskqueue thread to sleep for 100ms,     before enabling interrupts.  6. Use rx_pkt_threshold of 128.
      MFC r318383  QL_DPRINT macro modfied to handle multiple args; print line#.
      MFC r318676   Check for IPV6 TCP/UDP CSUM offload in pkt header during transmits.

delphij (10):
      MFC r315272, r315370
      MFC r313327:
      MFC r316635:
      MFC r311989 (cem):
      MFC r316649:
      MFC r279663,r279666 (pfg):
      Partial MFC r288030 (rodrigc):
      MFC r318514-r318515, r318517, r318917
      MFC r319369:
      MFC r319852:

dexuan (1):
      MFC: 319690

dim (4):
      MFC r317214:
      MFC r317888 and two upstream prerequisites:
      MFC r318259:
      Work around a gcc 4.2 bug on powerpc architectures, where using -fdata-sections can cause bogus "section type conflict" errors.  See https://gcc.gnu.org/bugzilla/show_bug.cgi?id=33168 for more information.

emaste (2):
      MFC r315237 (kib): Hide kev_iovlen() definition under #ifdef KTRACE
      MFC r318974: uart: add AMT SOL PCI ID

erj (2):
      ixgbe(4): Fix build issue when compiling with netmap enabled
      ixv(4): Fix more tinderbox builds by adding missing declarations.

eugen (1):
      MFC r318150:

gjb (32):
      Document SA-17:04.
      MFC r318190:  Update release/scripts/atlas-upload.sh to account for API changes  made recently by Atlas Hashicorp.  The data returned from GET and  POST requests has changed, which caused a number of regex patterns  to fail to be properly identified as 'success' or 'failure', which  ended up in upload/publish failures.
      MFC r318294:  Correct the URL to instructions for updating system sources.
      MFC r313955 (emaste):  bsdgrep: document ignored option -u
      MFC r305613 (gabor):  Fix typo.
      MFC r308737, r308779:  r308737:   Pass SWAPSIZE in env(1) when invoking mk-vmimage.sh, otherwise   mkimg(1) does not create the second partition after r307008.
      MFC r318646:  Allow PORTSDIR to be overridden in the pkg-stage target.
      MFC r318748:  Honor WITHOUT_TFTP for check-old* and delete-old* targets.
      MFC r314935 (thompsa):  Change ec2.conf to use the pkg tool from a chroot rather than trying  to bootstrap it and fail from the livecd readonly filesystem.
      MFC r318872:  Enable DHCP and IPv6 autoconfig on non-cloud VM images.
      Document r315433, libarchive 3.3.1. Document r316958, tcsh 6.20.00. Document r310490, amd(8) 6.2. Document r316350, tzdata 2017b. Document r309848, file(1) 5.29. Document r309512, Subversion 1.9.5. Document r312516, xz(1) 5.2.3. Prune comments. Bump copyright year.
      Document r311507, cxgbe(4) firmware 1.16.26.0. Document r316485, qlnx(4) addition.
      Document r312359, r314019: alc(4) Killer E2400/E2500 support.
      Document r309340, GARP retransmit capability.
      Document r313206, inetd(8) buildable without libwrap(3).
      Document r316046, WITHOUT_LIBTHR properly removes optional files.
      Document r308915, zfsbootcfg(8).
      Document r317434, ipf(4) 'keep frags' no longer implicit with 'keep state'
      Document r319270, cxgbe(4) firmware update.
      Document r319243, rpcbind(8) warmstart support knob.
      Document r317375, RTT used for receive buffer auto resizing.
      Document r316040, kvm_close(3) return error fix.
      Document r313558, garbage IP addresses in UDP log_in_vain messages fix.
      Document r309258, max_align_t for C11 compliance.
      Document r318675, fix the client side krpc from doing TCP reconnects for ERESTART from sosend().
      Whitespace fixes to conform to FDP style.
      Bump copyright years after previous commit.
      Document r319436, mpr(4) tri-mode support.
      Document r319390, cxgbetool(8) addition. Document r298427, truss(1) '-H' flag. Document r304017, ptrace(2) threaded process debugging improvements. Document r306533, devctl(8) 'clear driver' added. Document r309560, cxgbe(4) T6 support. Document r309447, cxgbe(4) VF support for T4/T5 cards. Document r309560, cxgbe(4) VF support for T6 cards. Document r308154, cxgbe(4) additional virtual interface support. Document r306520, PCI passthrough/bhyve improvements. Document r306472, PCI passthrough/bhyve improvements.
      MFC r318943 (avg):
      MFC r313021, r319621:
      MFC r319954:  Modernize FreeBSD version numbers in freebsd-update(8).  While here, expand a contraction to make textproc/igor happy.

hselasky (12):
      MFC r317568:
      MFC r317584: Correct manual page link to usbdi(9).
      MFC r313556: Change mlx4 QP allocation scheme.
      MFC r313555: Flexible and asymmetric allocation of EQs and MSI-X vectors for PF/VFs.
      MFC r317505: Don't free uninitialized sysctl contexts in the mlx4en driver. This can cause NULL pointer panics during failed device attach.
      MFC r318531:
      MFC r318353: Avoid use of contiguous memory allocations in busdma when possible.
      MFC r318820: Increase the allowed maximum number of audio channels from 31 to 127 in the PCM feeder mixer. Without this change a value of 32 channels is treated like zero, due to using a mask of 0x1f, causing a kernel assert when trying to playback bitperfect 32-channel audio. Also update the AWK script which is generating the division tables to handle more than 18 channels. This commit complements r282650.
      MFC r318860: Declare the "snd_fxdiv_table" once. This shaves around 24Kbytes of binary data from sound.ko and the kernel.
      MFC r319414: Allow communication between functions on the same host when using the mlx4en(4) driver in SRIOV mode.
      MFC r319413: Free hardware queue resource after port is stopped in the mlx4en(4) driver. Else if the port is up the resource might still be busy and the MTT free will fail.
      MFC r319972: Use static device numbering instead of dynamic one when creating mlx4en network interfaces. This prevents infinite unit number growth typically when the mlx4en driver is used inside virtual machines which support runtime PCI attach and detach.

jhb (6):
      MFC 313409: Defer startup of gjournal switcher kproc.
      MFC 313564: Drop the "created from" line from files generated by makesyscalls.sh.
      MFC 314894: Fix a couple of typos and reword some sentences in bsd.README.
      MFC 316493: Assert that the align parameter to uma_zcreate() is valid.
      MFC 313999: Consolidate statements to initialize files.
      MFC 313407,313449: Copy ELF machine/flags from binaries to core dumps.

jlh (1):
      MFC r318863:   Replace stale handbook URL with the proper oneb.

jpaetzel (2):
      MFC 318401
      MFC 319670

ken (9):
      MFC r317680:
      MFC r317745:
      MFC r317774, r317776
      MFC r317799:
      MFC r317848:
      MFC r317854:
      MFC r317775:
      MFC r317740:
      MFC r318185:

kib (13):
      MFC r317436: getpagesize(3) cannot fail.
      MFC r317606: Style.
      MFC r317610: Restructure normal (non-error) control flow in sem_close().
      MFC r317611: Make semaphore names list mutex non-recursive.
      MFC r317908: Remove spl() calls from UFS code.
      MFC r318243: Do not wake up sleeping thread in reschedule_signals() if the signal is blocked.  The spurious wakeup might result in spurious EINTR.
      MFC r318298: Fix several buffer overflows in realpath(3), and other minor issues.
      MFC r318299: Simplify cleanup on failure in realpath(3).
      MFC r318303: Style.
      MFC r319086: Mention that the basep argument to getdirentries(2) can be NULL.
      MFC r318450: Add tests for some cases in r318298.
      MFC r318781: Add BIT_OR2(), BIT_AND2(), BIT_NAND2(), BIT_XOR() and BIT_XOR2().
      MFC r318780: Use __BSD_VISIBLE test instead checking for absense of _POSIX_SOURCE.

marius (13):
      MFC: r293642
      MFC: r310712
      MFC: r311817
      MFC: r292420
      MFC: r287013 (partial), r294616, r314097 (partial)
      MFC: r292180 (partial), r297127 (partial), r311911, r311923, r312939,      r313250, r313712, r314811 (partial), r314887 (partial), r315430,      r317981, r315466
      MFC: r315431
      MFC: r317343
      MFC: r317578
      MFC: r317982
      MFC: r315598
      MFC: r318282
      MFC: r314345, r318276

mav (3):
      MFC r317064: Optimize pathologic case of telldir() for Samba.
      MFC r317356: Switch isp_reset to scratchpad not requiring ISP_MBOXDMASETUP.
      MFC r318516: Fix time handling in cv_timedwait_hires().

mm (1):
      MFC r317782,318181:

ngie (46):
      MFC r317154:
      MFC r317160:
      MFC r315793:
      MFC r315766,r315768:
      MFC r315766,r315768:
      Revert r318615 to correct commit message
      Regenerate src.conf(5) per r318614
      MFC r315775:
      MFC r316103:
      :raw no longer SIGSEGVs on FreeBSD; revert the signal expectation
      MFC r317288,r317289:
      MFC r318546:
      MFC r316099:
      MFC r317290,r317291,r317292,r317293,r317294,r317295,r317304,r317306,r317307,r317308,r317309:
      MFC r317310,r317316:
      MFC r316131:
      MFC r309412,r316109,r316132:
      MFC r318315:
      MFC r316179,r316180,r316181,r316260:
      MFC r315561: r315561 (by trasz):
      MFC r317313:
      MFC r319015:
      MFC r317154,r317155,r317162,r317163,r317164:
      MFC r317168:
      Regenerate src.conf(5) after adding MK_RPCBIND_WARMSTART_SUPPORT
      MFC r319027,r319028,r319029,r319030,r319031,r319033,r319034,r319035,r319036,r319037,r319038,r319039,r319040,r319041,r319042,r319043,r319044,r319045,r319046:
      MFC r319056,r319058,r319059,r319060,r319061,r319078:
      MFC r317311,r317312,r319019:
      MFC r316740:
      MFC r316742:
      MFC r317632:
      MFC r319156,r319159:
      MFC r318178:
      MFC r318175:
      MFC r318179:
      MFC r319158:
      MFC r319157:
      MFC r318177:
      MFC r318434:
      MFC r318436:
      MFC r318437:
      MFC r314579,r314785:
      Regenerate src.conf(5)
      MFC r318210:
      MFC r318211:
      MFC r316503,r316504,r316505:

np (17):
      MFC r311846: cxgbe(4): Refresh t4_msg.h, mainly for definitions related to the crypto engine.
      MFC r316774:
      MFC r311880, r314167, r316118, r316571, r316573, r316580, r316936-r316937, r316940, and r317410.
      MFC r314131:
      MFC r313346:
      MFC r313318:
      MFC r307008:
      MFC r309725:
      MFC r316172:
      MFC r316506:
      MFC r316971:
      MFC r317820 and r317837.
      MFC r317702, r317847, r318307
      MFC r318014, r318091, r318125, and r318263.
      MFC r314176 and r318973.
      MFC r318762:
      MFC r318774:

nyan (1):
      MFC: r317591

pfg (3):
      Revert r314937 as anonymous unions in GCC don't seem to work.
      MFC r317583: Fix some cases where an index was used before its limits check.
      MFC r317596: mixer(8): Prevent possible sscanf() overflow.

rgrimes (1):
      MFC r314693   Change /etc/rmt symlink from absolute to relative path,   correcting the mistake made in r6499

rmacklem (20):
      MFC: r316782 Add call to svcpool_close() for the NFSv4 callback pool (svcpool_nfscbd).
      MFC: r316792 Add an NFSv4.1 mount option for "use one openowner".
      MFC: r316793 Document the "oneopenown" option added by r316792.
      MFC: r316829 Remove unused "cred" argument to ncl_flush().
      MFC: r317236 Fix the setting of atime for Linux client NFSv4 mounts.
      MFC: r317269 Set default uid/gid to nobody/nogroup for NFSv4 mapping.
      MFC: r317350 Fix the default uid/gid values in nfsuserd.c
      MFC: r317270 Get rid of bogus statement in the nfsuserd.8 man page.
      MFC: r317272 Add checks for failed operations to the NFSv4 client function nfscl_mtofh().
      MFC: r317275, r317344 Don't create a backchannel for a DS connection.
      MFC: r317276 Don't set ND_NOMOREDATA for a failed Setattr operation (NFSv4).
      MFC: r317296 Fix some krpc leaks for the NFSv4.1/pNFS client.
      MFC: r317305 Fix the NFSv4.1/pNFS client return layout on close.
      MFC: r317345 Make the NFSv4 client to use a write open for reading if allowed by the server.
      MFC: r317382 Allow use of a write open stateid for reading in the NFSv4 server.
      MFC: r317465 Fix handling of a NFSv4.1 callback reply from the session cache.
      MFC: r317576 Modify the NFSv4.1/pNFS client to ask for a maximum length of layout.
      MFC: r317906 Fix the client side krpc from doing TCP reconnects for ERESTART from sosend().
      MFC: r317931 Fix mount_nfs so that it doesn't create mounttab entries for NFSv4 mounts.
      MFC: r318287 Make nfscl_mtofh() return ENXIO when *nfhpp == NULL.

rpokala (3):
      MFC r318160, 318176: Persistently store NIC's hardware MAC address, and add a way to retrive it
      Persistently store NIC's hardware MAC address, and add a way to retrive it
      MFC r318688: "struct ata_params" field "reserved206[2]" actually starts at offset 20*7*.

sephe (5):
      MFC 317821     hyperv/kbd: Channel read expects non-NULL channel argument.
      MFC 317786
      MFC 318136
      MFC 317783     hyperv/kvp: Fix pool direcrory and file permission
      MFC 318512

slm (2):
      MFC r286567, r286568, r289426, r289429, r295113, r295286, r299367, r299369,     r308217, r308301, r311958, r312437, r318188, r318427, r318679
      MFC r318895: Fix several problems with mapping code in mps(4). MFC r318896: Fix several problems with mapping code in mpr(4).

smh (1):
      Revert the partial MFC of r313045 which broke dtrace

truckman (2):
      MFC r318511
      MFC r318527

Installer images: http://installer.hardenedbsd.org/pub/HardenedBSD/releases/amd64/amd64/ISO-IMAGES/HardenedBSD-10-STABLE-v1000047/

CHECKSUM.SHA512:

SHA512 (HardenedBSD-10-STABLE-v1000047-amd64-bootonly.iso) = 2fa9ff9ba85e25956fbc31bd8c25508ca5328f969fee99bd92e6be1f2e61851ad532e723876c964ad379808eb05f26193252d82145915c5a23d3d698a6efd088
SHA512 (HardenedBSD-10-STABLE-v1000047-amd64-disc1.iso) = b81647c374938520abb0e63eeebe23e715660d078dbbec9d2e828feb4fc14286664527ce4d35a0f569317b098385c5e4d77665ac27a6286a3bb3679864ef522b
SHA512 (HardenedBSD-10-STABLE-v1000047-amd64-memstick.img) = e3179eea6383454559c948f172398ff56b80c29e3c68b888cd7bacb542b760b295b7f3dc73ee2a1fd69e2005a0d6cdfe54fc016bdc78e043d4955906347b2584
SHA512 (HardenedBSD-10-STABLE-v1000047-amd64-mini-memstick.img) = 483e770295e08979207013fda30b3b652d7f4969845fc77959ef71f5c1fa1182931572a5c8a3dbe59e5c81c42b369f9c87559a17cc913d95101af0f3f0448765
SHA512 (HardenedBSD-10-STABLE-v1000047-amd64-uefi-bootonly.iso) = 8bdecf399e6c42d88d8ec02daf95b265d1c781af7c8e8ec7d5ed7c6e242955c261b9d23f811d21d044ce00694fcc9c6dd0018acda101df24657646c90ed8c2f0
SHA512 (HardenedBSD-10-STABLE-v1000047-amd64-uefi-disc1.iso) = d24c1d981b48342fa9eca9545ff8db08b1e0805a176d2eea7b880c145293e2db1c18f01d5a9f019bc5f70d9d8b9ad669dd5da6db287f9e13b0971a3f63e9b363
SHA512 (HardenedBSD-10-STABLE-v1000047-amd64-uefi-memstick.img) = 0c6148d245ec920e8a45666d481c66d81c9aefbeb9ec2887b395d843d216c0a10717b106c562928d4e1439b0b837666629637f9a4ee8f79a0bf8ab71d3d5b915
SHA512 (HardenedBSD-10-STABLE-v1000047-amd64-uefi-mini-memstick.img) = c0645cc7cb4ef946d6565d859736c6cc64a7d78a207533c054a330b911132ef50fe62516d0cb967fd4c5dc8342c0db5f29174d8490e4e020603f3fac9e6cf3ba

CHECKSUM.SHA512.asc:

-----BEGIN PGP SIGNATURE-----

iQIzBAABCAAdFiEEu1M4jTvZiSgVy54wgZsRom/9GI0FAllPwg4ACgkQgZsRom/9
GI13hA//chLhjM+rMKRSRhcvOnUotoeb5Wf5NZ+WXod6TMHK5jQUrhBivvqpNeEn
6yEolaDkjep2/eYGG5flVL/PxX13JWgVShWTS7Hu3JlOxFANtzt9ckIayaaDJJRS
fhXZgn6LsZw2G8G1PmY3PnynHgB05OrVbz9vf3AFZ6gp5Ju35JNyk9ikYlMZ49Yb
lao/3evASKS6amPCZamrCjtGD0DtoZQegNCa2EjboCshEPnfPKTkTJQzS/W8RSUp
nVIHHWExdCOLW/9byGh28YqnhpKdz+UH/b14cxrM9p2pRYhhigcOcUK2uN6+qQxw
99HsO0ST5Brj3MRVRu1DyFjf5ycKrF0EiUucfD5gtju2zhmN/bNxVo2JTQaiyVcF
rLGmpe2w7Hu9q2JwFRYZQCK0pGgSCarPIfJYhpueHCll7zd1uVMdHuFo2YatvSka
CeiBvxVyXXZ2M4SlImOPLhDNVxutxrQIumzNLaTkZy3XQ5/Ts/tzidosOj1fhyos
yTwXCVRXNfgjeLCZrISA9qTwjVyMgolLCNPMeBfKwR9A0HVq35JHByu3vcCWAz9W
O//b8VCbZIMLcxSu3WtxyIOqMTgJDsov24oFRg1Lezbp/Dol1KTi7LB1qxKYik21
FJ7yt4djaUoaO2WP5IQjjhlflP3M+thz9TpUoeIQYXTw2fzR+58=
=3ZsF
-----END PGP SIGNATURE-----

shortlog-HardenedBSD-10-STABLE-v1000047.txt
CHECKSUM.SHA512.txt
CHECKSUM.SHA512.asc.txt