14.0 relnotes: Additions

[olce]

Summary

• Changes to the 'security.bsd.see_jail_proc' security policy.
• Changes to the 'security.bsd.see_other_gids' security policy.
• Zenbleed bug/vulnerability

Sponsored by: The FreeBSD Foundation

[carlavilla]

Nice, thanks for the upgrade :)

[karels]

Looks good, thanks! I would suggest prepending "the sysctl" to security.... in both places to make it obvious that these are sysctl names. It would probably be good to mention the tunable/sysctl controlling Zenbleed too, as there is no other reference.

[olce]

Implement suggestions.

[karels]

Thanks for the mitigations(7) link, I wasn't aware of that one.

Who should commit this?

website/content/en/releases/14.0R/relnotes.adoc

456

There should be a newline after each period (one sentence per line).

[olce]

One sentence per line.

[olce]

Commit the good diff, sorry for the noise.

[carlavilla]

In D42488#969644, @karels wrote:

Thanks for the mitigations(7) link, I wasn't aware of that one.

Who should commit this?

you :D

(or wait to this night and I'll make the commit, np)

[emaste]

I can push the change for @olce.freebsd_certner.fr if you like

[carlavilla]

In D42488#969658, @emaste wrote:

I can push the change for @olce.freebsd_certner.fr if you like

sure, np, thanks!

[karels]

Ed, feel free. I don't remember if I've done the --author thing before.