Build date: 1774479604 - Wed Mar 25 23:00:04 UTC 2026 Build cvs date: 1774473869 - Wed Mar 25 21:24:29 UTC 2026 Build id: 2026-03-26.1 Build tags: amd64-regress ports sysupgrade Applied the following diff(s): /home/anton/tmp/robsd/src-sys-em.diff /home/anton/tmp/robsd/src-sys-uhidev-sispm.diff /home/anton/tmp/robsd/src-sysupgrade.diff P distrib/miniroot/install.sub M sys/dev/usb/uhidev.c P sys/kern/kern_pledge.c P sys/kern/kern_sysctl.c P usr.bin/tmux/tmux.1 M usr.sbin/bgpd/session.c commit TiBB92QMwsfaVlZZ Author: kn Date: 2026/03/25 21:24:29 Simplify ro/rw overwrite in munge_fstab() The installer mounts every 'ffs' fstab(5) entry 'rw' and all else 'ro', regardless of their mode in the file. Merge the two symmetrical sed invocations swapping besaid options into one by using a variable for the desired mode. OK afresh1 krw distrib/miniroot/install.sub commit FqpabEVDo4AnmKfJ Author: kn Date: 2026/03/25 21:07:46 drop in-line comments repeating munge_fstab() function description OK afresh1 krw distrib/miniroot/install.sub commit Wm549P9SeBiGkz48 Author: nicm Date: 2026/03/25 10:08:50 Use \\- for hyphens in tmux.1 to cause newer groff versions to render them correctly (ASCII hyphen rather than Unicode) which aids copy and paste. From Keith Thompson in GitHub issue 4948. usr.bin/tmux/tmux.1 commit Usx6grIz9ZmjayPU Author: deraadt Date: 2026/03/25 05:14:10 In the namei callback for __pledge_open() invert the logic of checking pledge/namei modes and then checking for the path. Now, first identify the path with array bsearch then check the pledge/namei modes. Since this is __pledge_open(), if the path is not known, terminate with an EACCES abort. If the path is known but the pledge/namei modes don't suggest an unveil bypass, allow the code to fallthrough to the rpath/wpath checks, and then back into namei for unveil validation. ok dgl sys/kern/kern_pledge.c commit ConoqBuAIggEPEVV Author: deraadt Date: 2026/03/25 05:05:41 Wrap the pledge-related sysctl code in SMALL_KERNEL, because it is big and the ramdisk does not need it ok mlarkin, discussed with dgl sys/kern/kern_pledge.c sys/kern/kern_sysctl.c