diff options
author | grog <grog@FreeBSD.org> | 1999-12-10 21:52:18 +0000 |
---|---|---|
committer | grog <grog@FreeBSD.org> | 1999-12-10 21:52:18 +0000 |
commit | 73feefc8af6d4a943bff813f0455b846f4d75978 (patch) | |
tree | b46fd18adaa59cec6b9c41bc2b3597cba0d2676f /release/picobsd | |
parent | d84305a288645b8931287473e05e4a10d99aa121 (diff) | |
download | FreeBSD-src-73feefc8af6d4a943bff813f0455b846f4d75978.zip FreeBSD-src-73feefc8af6d4a943bff813f0455b846f4d75978.tar.gz |
Add 'custom' directory with significantly restructured build (now
using make instead of custom scripts) and two floppies instead of
one. The resultant floppy can do everything that the individual
floppies (dial, net, install, isp, router) could do, modulo some bit
rot that has occurred since PicoBSD last compiled. It also includes
all the programs on the fixit floppy, which could thus also die.
/bin currently contains the following files:
-sh dump ln ns sps
[ ed login ping stty
badsect ex ls ps swapon
cat expr mkdir pwd sync
chgrp fdisk mknod pwd_mkdb sysctl
chmod find more rdump syslogd
chown fsck mount reboot tar
chroot ftp mount_cd9660 restore telnet
clri getty mount_msdos rlogin telnetd
cp grep mount_nfs rm test
date gunzip mount_std rmdir traceroute
dd gzip msg route umount
dev_mkdb hostname mt routed vi
df ifconfig mv rrestore view
dhclient inetd natd rsh vm
dhclient-script init netstat sed w
disklabel kget newfs sh zcat
dmesg kill nfs sleep
Structure is in place for using the same build for the other
directories, but I'm no longer sure we need this. The current first
floppy will run fine by itself, but the size of a compressed kernel
has increased by nearly 50% since 3.2, and there's not much space for
anything useful on the remainder of the floppy. The current method
creates a larger mfs and can read as many floppies as the user can
stand. The footprint appears to be round 14 MB.
Diffstat (limited to 'release/picobsd')
54 files changed, 2186 insertions, 0 deletions
diff --git a/release/picobsd/custom/Makefile b/release/picobsd/custom/Makefile new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/release/picobsd/custom/Makefile diff --git a/release/picobsd/custom/Makefile.conf b/release/picobsd/custom/Makefile.conf new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/release/picobsd/custom/Makefile.conf diff --git a/release/picobsd/custom/Makefile.mfs b/release/picobsd/custom/Makefile.mfs new file mode 100644 index 0000000..a02529e --- /dev/null +++ b/release/picobsd/custom/Makefile.mfs @@ -0,0 +1,44 @@ +# +# $FreeBSD$ +# + +DESTDIR?=${MFS_MOUNTPOINT} + +STAND_LINKS= bin sbin +USR_LINKS= bin sbin libexec +PL_LOCALE_LINKS= pl polish +MY_DEVS= std tun2 cuaa0 cuaa1 cuaa2 vty10 fd0 wd0s1h pty0 ttyd0 cuaa0 wd1 wd2 wd3 bpf0 bpf1 sa0 sa1 + +all: tree links + +tree: + @echo "--- making tree" + mtree -deU -f mfs.mtree -p ${DESTDIR} + +links: tree + @echo "--- making links" + (cd ${DESTDIR}; \ + for i in ${STAND_LINKS}; \ + do \ + ln -s /stand $${i}; \ + done; \ + cd var/run; \ + ln -s /dev/null log; \ + cd ../../usr; \ + for i in ${USR_LINKS}; \ + do \ + ln -s /stand $${i}; \ + done; \ + cd share/misc;\ + ln -s /etc/termcap termcap; ) + + +# We don't do it under 'all' because it's needed only on non-DEVFS systems +devnodes: tree + @echo "--- making device nodes" + (cd ${DESTDIR}/dev; \ + ln -s /dev/MAKEDEV; \ + ./MAKEDEV ${MY_DEVS}; \ + rm MAKEDEV) + +clean: diff --git a/release/picobsd/custom/PICOBSD-C b/release/picobsd/custom/PICOBSD-C new file mode 100644 index 0000000..1ae104e --- /dev/null +++ b/release/picobsd/custom/PICOBSD-C @@ -0,0 +1,221 @@ +# +# GENERIC -- Generic machine with WD/AHx/NCR/BTx family disks +# +# For more information on this file, please read the handbook section on +# Kernel Configuration Files: +# +# http://www.freebsd.org/handbook/kernelconfig-config.html +# +# The handbook is also available locally in /usr/share/doc/handbook +# if you've installed the doc distribution, otherwise always see the +# FreeBSD World Wide Web server (http://www.FreeBSD.ORG/) for the +# latest information. +# +# An exhaustive list of options and more detailed explanations of the +# device lines is also present in the ./LINT configuration file. If you are +# in doubt as to the purpose or necessity of a line, check first in LINT. +# +# $FreeBSD$ + +machine i386 +cpu I386_CPU +cpu I486_CPU +cpu I586_CPU +cpu I686_CPU +ident GENERIC +maxusers 32 + +#makeoptions DEBUG=-g #Build kernel with gdb(1) debug symbols + +options MATH_EMULATE #Support for x87 emulation +options INET #InterNETworking +options FFS #Berkeley Fast Filesystem +options FFS_ROOT #FFS usable as root device [keep this!] +options MD_ROOT #MD is a potential root device +options MFS #Memory Filesystem +options NFS #Network Filesystem +options NFS_ROOT #NFS usable as root device, "NFS" req'ed +options MSDOSFS #MSDOS Filesystem +options CD9660 #ISO 9660 Filesystem +options CD9660_ROOT #CD-ROM usable as root. "CD9660" req'ed +options PROCFS #Process filesystem +options COMPAT_43 #Compatible with BSD 4.3 [KEEP THIS!] +options SCSI_DELAY=15000 #Be pessimistic about Joe SCSI device +options UCONSOLE #Allow users to grab the console +# options USERCONFIG #boot -c editor +# options VISUAL_USERCONFIG #visual boot -c editor +options KTRACE #ktrace(1) syscall trace support +options SYSVSHM #SYSV-style shared memory +options SYSVMSG #SYSV-style message queues +options SYSVSEM #SYSV-style semaphores + +# To make an SMP kernel, the next two are needed +#options SMP # Symmetric MultiProcessor Kernel +#options APIC_IO # Symmetric (APIC) I/O +# Optionally these may need tweaked, (defaults shown): +#options NCPU=2 # number of CPUs +#options NBUS=4 # number of busses +#options NAPIC=1 # number of IO APICs +#options NINTR=24 # number of INTs + +controller isa0 +controller eisa0 +controller pci0 + +# Floppy drives +controller fdc0 at isa? port IO_FD1 irq 6 drq 2 +device fd0 at fdc0 drive 0 +device fd1 at fdc0 drive 1 + +# ATA and ATAPI devices +controller ata0 at isa? port IO_WD1 irq 14 +controller ata1 at isa? port IO_WD2 irq 15 +controller ata2 +device atadisk0 # ATA disk drives +device atapicd0 # ATAPI CDROM drives +device atapifd0 # ATAPI floppy drives +device atapist0 # ATAPI tape drives +options ATA_STATIC_ID #Static device numbering +#options ATA_ENABLE_ATAPI_DMA #Enable DMA on ATAPI devices + +# SCSI Controllers +# A single entry for any of these controllers (ahb, ahc, amd, ncr, etc...) is +# sufficient for any number of installed devices. +# controller ahb0 # EISA AHA1742 family +controller ahc0 # AHA2940 and onboard AIC7xxx devices +# controller amd0 # AMD 53C974 (Teckram DC-390(T)) +# controller dpt0 # DPT Smartcache - See LINT for options! +# controller isp0 # Qlogic family +# controller ncr0 # NCR/Symbios Logic +controller sym0 # NCR/Symbios Logic (do not mix with ncr, it conflicts) + +# controller adv0 at isa? port ? irq ? +# controller adw0 +# controller bt0 at isa? port ? irq ? +# controller aha0 at isa? port ? irq ? +# controller aic0 at isa? port ? irq ? + +# SCSI peripherals +# Only one of each of these is needed, they are dynamically allocated. +controller scbus0 # SCSI bus (required) +device da0 # Direct Access (disks) +device sa0 # Sequential Access (tape etc) +device cd0 # CD +device pass0 # Passthrough device (direct SCSI access) + +# RAID controllers +# device amr0 # AMI MegaRAID +# device mlx0 # Mylex DAC960 family + +# Proprietary or custom CD-ROM Interfaces +# device wt0 at isa? port 0x300 irq 5 drq 1 +# device mcd0 at isa? port 0x300 irq 10 +# device matcd0 at isa? port 0x230 +# device scd0 at isa? port 0x230 + +# atkbdc0 controls both the keyboard and the PS/2 mouse +controller atkbdc0 at isa? port IO_KBD +device atkbd0 at atkbdc? irq 1 +device psm0 at atkbdc? irq 12 + +device vga0 at isa? port ? conflicts + +# splash screen/screen saver +# pseudo-device splash + +# syscons is the default console driver, resembling an SCO console +device sc0 at isa? + +# Enable this and PCVT_FREEBSD for pcvt vt220 compatible console driver +#device vt0 at isa? +#options XSERVER # support for X server +#options FAT_CURSOR # start with block cursor +# If you have a ThinkPAD, uncomment this along with the rest of the PCVT lines +#options PCVT_SCANSET=2 # IBM keyboards are non-std + +# Floating point support - do not disable. +device npx0 at nexus? port IO_NPX irq 13 + +# Power management support (see LINT for more options) +device apm0 at nexus? disable flags 0x20 # Advanced Power Management + +# PCCARD (PCMCIA) support +#controller card0 +#device pcic0 at isa? +#device pcic1 at isa? + +# Serial (COM) ports +device sio0 at isa? port IO_COM1 flags 0x10 irq 4 +device sio1 at isa? port IO_COM2 irq 3 +device sio2 at isa? disable port IO_COM3 irq 5 +device sio3 at isa? disable port IO_COM4 irq 9 + +# Parallel port +device ppc0 at isa? port? flags 0x40 irq 7 +controller ppbus0 # Parallel port bus (required) +device lpt0 # Printer +device plip0 # TCP/IP over parallel +device ppi0 # Parallel port interface device +#controller vpo0 # Requires scbus and da0 + + +# PCI Ethernet NICs. +device de0 # DEC/Intel DC21x4x (``Tulip'') +device fxp0 # Intel EtherExpress PRO/100B (82557, 82558) +device tx0 # SMC 9432TX (83c170 ``EPIC'') +device vx0 # 3Com 3c590, 3c595 (``Vortex'') + +# PCI Ethernet NICs that use the common MII bus controller code. +controller miibus0 # MII bus support +device dc0 # DEC/Intel 21143 and various workalikes +device rl0 # RealTek 8129/8139 +device sf0 # Adaptec AIC-6915 (``Starfire'') +device sis0 # Silicon Integrated Systems SiS 900/SiS 7016 +device ste0 # Sundance ST201 (D-Link DFE-550TX) +device tl0 # Texas Instruments ThunderLAN +device vr0 # VIA Rhine, Rhine II +device wb0 # Winbond W89C840F +device xl0 # 3Com 3c90x (``Boomerang'', ``Cyclone'') + +# ISA Ethernet NICs. +device ed0 at isa? port 0x280 irq 10 iomem 0xd8000 +device ex0 at isa? port? irq? +device ep0 +# The probe order of these is presently determined by i386/isa/isa_compat.c. +device ie0 at isa? port 0x300 irq 10 iomem 0xd0000 +device fe0 at isa? port 0x300 irq ? +device le0 at isa? port 0x300 irq 5 iomem 0xd0000 +device lnc0 at isa? port 0x280 irq 10 drq 0 +device cs0 at isa? port 0x300 irq ? +# requires PCCARD (PCMCIA) support to be activated +#device xe0 at isa? port? irq ? + +# PCCARD NIC drivers. +# ze and zp take over the pcic and cannot coexist with generic pccard +# support, nor the ed and ep drivers they replace. +#device ze0 at isa? port 0x300 irq 10 iomem 0xd8000 +#device zp0 at isa? port 0x300 irq 10 iomem 0xd8000 + +# Pseudo devices - the number indicates how many units to allocated. +pseudo-device loop # Network loopback +pseudo-device ether # Ethernet support +# pseudo-device sl 1 # Kernel SLIP +pseudo-device ppp 1 # Kernel PPP +pseudo-device tun # Packet tunnel. +pseudo-device pty # Pseudo-ttys (telnet etc) +pseudo-device md # Memory "disks" + +# The `bpf' pseudo-device enables the Berkeley Packet Filter. +# Be aware of the administrative consequences of enabling this! +pseudo-device bpf #Berkeley packet filter + +# USB support +#controller uhci0 # UHCI PCI->USB interface +#controller ohci0 # OHCI PCI->USB interface +#controller usb0 # USB Bus (required) +#device ugen0 # Generic +#device uhid0 # "Human Interface Devices" +#device ukbd0 # Keyboard +#device ulpt0 # Printer +#controller umass0 # Disks/Mass storage - Requires scbus and da0 +#device ums0 # Mouse diff --git a/release/picobsd/custom/crunch1/Makefile b/release/picobsd/custom/crunch1/Makefile new file mode 100644 index 0000000..fa94474 --- /dev/null +++ b/release/picobsd/custom/crunch1/Makefile @@ -0,0 +1,38 @@ +# +# $FreeBSD$ +# +SRC?=/usr/src + +all: crunch + +crunch: + @cat crunch.conf|sed -e "s@/usr/src@${SRC}@" >crunch1.conf + @crunchgen ./crunch1.conf + @${MAKE} -f crunch1.mk -DNOPAM all \ + "CFLAGS=${CFLAGS} -DRELEASE_CRUNCH -DCRUNCHED_BINARY -DNOSECURE -DNOCRYPT" #2>&1 >/dev/null + +clean: + rm -f *.o *.stub *.lo *_stub.c *.mk \ + crunch.cache \ + crunch.mk \ + crunch.c \ + crunch1* \ + crunch \ + .tmp_* \ + *~ \ + *.gz + +install: + rm -f ${MFS_MOUNTPOINT}/stand/* + cp crunch1 ${MFS_MOUNTPOINT}/stand/crunch + chmod 555 ${MFS_MOUNTPOINT}/stand/crunch + for i in `crunchgen -l crunch1.conf` ; \ + do \ + ln ${MFS_MOUNTPOINT}/stand/crunch ${MFS_MOUNTPOINT}/stand/$${i}; \ + done + rm ${MFS_MOUNTPOINT}/stand/crunch + # Install the MIB files + #cp mibs/*.txt ${MFS_MOUNTPOINT}/usr/local/share/snmp/mibs/ + + +.include <bsd.prog.mk> diff --git a/release/picobsd/custom/crunch1/crunch.conf b/release/picobsd/custom/crunch1/crunch.conf new file mode 100644 index 0000000..912a5b4 --- /dev/null +++ b/release/picobsd/custom/crunch1/crunch.conf @@ -0,0 +1,45 @@ +# +# $FreeBSD$ +# +# NOTE: the string "/usr/src" will be automatically replaced with the +# correct value set in 'build' script - you should change it there + +# other sources +srcdirs /usr/src/bin +srcdirs /usr/src/libexec +srcdirs /usr/src/sbin/i386 +srcdirs /usr/src/sbin +srcdirs /usr/src/usr.bin +srcdirs /usr/src/gnu/usr.bin +srcdirs /usr/src/usr.sbin +# sources for ns & vm +srcdirs ../../tinyware + +progs sh test ln login getty stty +progs w msg kget reboot +progs init df sps ns vm cat +progs mv cp rm mknod chmod chown mkdir ls syslogd rmdir +progs sysctl pwd_mkdb dev_mkdb +progs mount umount +progs dd swapon tar gzip + +# ppp causes problems to crunch1 +# progs pwd ppp telnet more +# progs passwd date +# ipfw doesn't compile +# progs mount_cd9660 mount_nfs ping traceroute routed ipfw + +ln test [ +ln sh -sh +# ln mount_msdos msdos +ln sps ps +ln msg dmesg +ln ns netstat +ln chown chgrp +ln gzip gunzip +ln gzip zcat + +libs -lmytinfo -lipx -lz -lpcap -lalias -lwrap +libs -ledit -lutil -lmd -lcrypt -lmp -lgmp -lm -lkvm +libs -lgnuregex -ltelnet -lcurses +libs -lradius # used by ppp diff --git a/release/picobsd/custom/crunch2/Makefile b/release/picobsd/custom/crunch2/Makefile new file mode 100644 index 0000000..7b12b5f --- /dev/null +++ b/release/picobsd/custom/crunch2/Makefile @@ -0,0 +1,32 @@ +# +# $FreeBSD$ +# +SRC?=/usr/src + +all: crunch install + +crunch: + @cat crunch.conf|sed -e "s@/usr/src@${SRC}@" >crunch2.conf + @crunchgen ./crunch2.conf + @${MAKE} -f crunch2.mk -DNOPAM all \ + "CFLAGS=${CFLAGS} -DRELEASE_CRUNCH -DCRUNCHED_BINARY -DNOSECURE -DNOCRYPT" #2>&1 >/dev/null + +clean: + rm -f *.o *.stub *.lo *_stub.c *.mkcrunch.cache Make.log *~ + rm -f crunch.mk crunch.c crunch2* crunch .tmp_* *.gz + rm -rf floppy2 + +install: floppy2 + rm -rf floppy2/sbin/* + cp crunch2 floppy2/sbin/crunch + chmod 555 floppy2/sbin/crunch + for i in `crunchgen -l crunch2.conf` ; \ + do \ + ln floppy2/sbin/crunch floppy2/sbin/$${i}; \ + done + rm floppy2/sbin/crunch + +floppy2: + mkdir -p $@/sbin + +.include <bsd.prog.mk> diff --git a/release/picobsd/custom/crunch2/crunch.conf b/release/picobsd/custom/crunch2/crunch.conf new file mode 100644 index 0000000..08b2e0b --- /dev/null +++ b/release/picobsd/custom/crunch2/crunch.conf @@ -0,0 +1,33 @@ +# +# $FreeBSD$ +# +# NOTE: the string "/usr/src" will be automatically replaced with the +# correct value set in 'build' script - you should change it there + +# other sources +srcdirs /usr/src/bin +srcdirs /usr/src/sbin/i386 +srcdirs /usr/src/sbin +srcdirs /usr/src/usr.bin +srcdirs /usr/src/gnu/usr.bin +srcdirs /usr/src/usr.sbin +srcdirs /usr/src/libexec + +progs ftp rlogin rsh disklabel fsck vi inetd telnetd ifconfig +progs badsect chroot clri dump ed expr fdisk find ftp grep mt +progs restore sed sleep sync hostname route dhclient telnet +progs mount_nfs ping traceroute routed natd +progs pwd more date mount_msdos mount_cd9660 newfs +progs kill mount_std + +ln vi ex +ln vi view +ln dump rdump +ln restore rrestore +ln mount_nfs nfs + +libs -lmytinfo -lipx -lz -lpcap -lalias -lwrap -lcurses +libs -ledit -lutil -lmd -lcrypt -lmp -lgmp -lm -lkvm +libs -lgnuregex -ltelnet +libs -lradius # used by ppp + diff --git a/release/picobsd/custom/floppy.etc/fstab b/release/picobsd/custom/floppy.etc/fstab new file mode 100644 index 0000000..3b1e907 --- /dev/null +++ b/release/picobsd/custom/floppy.etc/fstab @@ -0,0 +1,9 @@ +#proc /proc procfs rw 0 0 +#/dev/fd0c /start_floppy ufs rw 1 1 +#/dev/wd0s1 /dos msdos rw 0 0 +/dev/wcd0c /cdrom cd9660 ro,noauto 0 0 +/dev/wd0s1a /mnt ufs ro,noauto 0 0 +/dev/wd0s1b none swap sw,noauto 0 0 +/dev/wd0s1e /mnt/usr ufs ro,noauto 0 0 +/dev/wd0s1f /mnt/var ufs ro,noauto 0 0 +/dev/wd0s1g /mnt/cache ufs ro,noauto 0 0 diff --git a/release/picobsd/custom/floppy.etc/host.conf b/release/picobsd/custom/floppy.etc/host.conf new file mode 100644 index 0000000..7531124 --- /dev/null +++ b/release/picobsd/custom/floppy.etc/host.conf @@ -0,0 +1,3 @@ +# $FreeBSD$ +hosts +bind diff --git a/release/picobsd/custom/floppy.etc/inetd.conf b/release/picobsd/custom/floppy.etc/inetd.conf new file mode 100644 index 0000000..c7c50de --- /dev/null +++ b/release/picobsd/custom/floppy.etc/inetd.conf @@ -0,0 +1,21 @@ +# +# Internet server configuration database +# +# @(#)inetd.conf 5.4 (Berkeley) 6/30/90 +# +telnet stream tcp nowait root /usr/libexec/telnetd telnetd +# +# "Small servers" -- used to be standard on, but we're more conservative +# about things due to Internet security concerns. Only turn on what you +# need. +# +#daytime stream tcp nowait root internal +#daytime dgram udp wait root internal +#time stream tcp nowait root internal +#time dgram udp wait root internal +#echo stream tcp nowait root internal +#echo dgram udp wait root internal +#discard stream tcp nowait root internal +#discard dgram udp wait root internal +#chargen stream tcp nowait root internal +#chargen dgram udp wait root internal diff --git a/release/picobsd/custom/floppy.etc/master.passwd b/release/picobsd/custom/floppy.etc/master.passwd new file mode 100644 index 0000000..21760f2 --- /dev/null +++ b/release/picobsd/custom/floppy.etc/master.passwd @@ -0,0 +1,8 @@ +root::0:0::0:0:Charlie &:/root:/bin/sh +toor:*:0:0::0:0:Bourne-again Superuser:/root: +daemon:*:1:1::0:0:Owner of many system processes:/root:/nonexistent +operator:*:2:20::0:0:System &:/usr/guest/operator:/bin/csh +bin:*:3:7::0:0:Binaries Commands and Source,,,:/:/nonexistent +nobody:*:65534:65534::0:0:Unprivileged user:/nonexistent:/nonexistent +user:$1$T9q8Coad$WatJttamwr2UAdbfKbWxj.:1002:1002:polish:0:0:user:/home/user:/bin/sh +netman::9999:209::0:0:Network access:/netman:/bin/sh diff --git a/release/picobsd/custom/floppy.etc/mfs.rc b/release/picobsd/custom/floppy.etc/mfs.rc new file mode 100644 index 0000000..d746cb7 --- /dev/null +++ b/release/picobsd/custom/floppy.etc/mfs.rc @@ -0,0 +1,34 @@ +#!/bin/sh +# $FreeBSD$ +### WARNING !!!!!! ##### +# We remove this file during execution (see EOF). +# Awful things happen if its size is > 1024B + +stty status '^T' + +trap : 2 +trap : 3 + +HOME=/; export HOME +PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin +export PATH + +trap "echo 'Reboot interrupted'; exit 1" 3 + +### Special setup for one floppy PICOBSD ### +echo "" +echo "-------------------------------------------" +echo " Please wait. The system is coming up..." +echo "-------------------------------------------" +echo "" +echo "Reading /etc from startup floppy..." +mount -o rdonly /dev/fd0a /start_floppy +cd /start_floppy/etc +cp -Rp . /etc/ +cd /etc +pwd_mkdb -p ./master.passwd +umount /start_floppy +echo "Ok. (Now you can remove floppy if you like)" +echo "" +. rc +exit 0 diff --git a/release/picobsd/custom/floppy.etc/ppp/ppp.conf b/release/picobsd/custom/floppy.etc/ppp/ppp.conf new file mode 100644 index 0000000..ed5da5d --- /dev/null +++ b/release/picobsd/custom/floppy.etc/ppp/ppp.conf @@ -0,0 +1,8 @@ +# PPP Sample Configuration File +# Written by Toshiharu OHNO +default: + set device /dev/cuaa1 + set speed 38400 + disable lqr + deny lqr + set dial "ABORT BUSY ABORT NO\\sCARRIER TIMEOUT 5 \"\" ATE1Q0 OK-AT-OK \\dATDT\\T TIMEOUT 40 CONNECT" diff --git a/release/picobsd/custom/floppy.etc/ppp/ppp.deny b/release/picobsd/custom/floppy.etc/ppp/ppp.deny new file mode 100644 index 0000000..51e1e9b --- /dev/null +++ b/release/picobsd/custom/floppy.etc/ppp/ppp.deny @@ -0,0 +1,15 @@ +# list of users disallowed any pppd access via 'system +# password login'. +# read by pppd(8). +root +toor +daemon +operator +bin +games +news +man +ftp +uucp +xten +ingres diff --git a/release/picobsd/custom/floppy.etc/ppp/ppp.linkup b/release/picobsd/custom/floppy.etc/ppp/ppp.linkup new file mode 100644 index 0000000..05107c6 --- /dev/null +++ b/release/picobsd/custom/floppy.etc/ppp/ppp.linkup @@ -0,0 +1,10 @@ +# Example of ppp.linkup file +# +iij-demand: + delete ALL + add 0 0 HISADDR +# +# Otherwise, simply add peer as default gateway. +# +MYADDR: + add 0 0 HISADDR diff --git a/release/picobsd/custom/floppy.etc/ppp/ppp.secret.sample b/release/picobsd/custom/floppy.etc/ppp/ppp.secret.sample new file mode 100644 index 0000000..bfaab76 --- /dev/null +++ b/release/picobsd/custom/floppy.etc/ppp/ppp.secret.sample @@ -0,0 +1,23 @@ +################################################## +# +# Example of ppp.secret file +# +# This file is used to authenticate incoming connections. +# You must ``enable'' either PAP or CHAP in your ppp.conf file. +# The peer may then use any of the Authname/Authkey pairs listed. +# If an IP address is given, it will be assigned to the peer. +# +# If an entry exists for your local machine (as given by the +# ``hostname -s'' command), the password specified will be +# required for all server socket connections. Refer to the ppp(8) +# and pppctl(8) man pages for further details. +# +# $FreeBSD$ +# +################################################## + +# Authname Authkey Peer's IP address + +oscar OurSecretKey 192.244.184.34/24 +BigBird X4dWg9327 192.244.184.33/32 +tama localPasswdForControl diff --git a/release/picobsd/custom/floppy.etc/profile b/release/picobsd/custom/floppy.etc/profile new file mode 100644 index 0000000..8de7c89 --- /dev/null +++ b/release/picobsd/custom/floppy.etc/profile @@ -0,0 +1,5 @@ +# System-wide .profile file for sh(1). +BLOCKSIZE=K; export BLOCKSIZE +set -o emacs +PATH=/stand:/mnt/bin:/mnt/sbin:/mnt/usr/bin:/mnt/usr/sbin export PATH +stty erase diff --git a/release/picobsd/custom/floppy.etc/rc b/release/picobsd/custom/floppy.etc/rc new file mode 100644 index 0000000..45772ef --- /dev/null +++ b/release/picobsd/custom/floppy.etc/rc @@ -0,0 +1,56 @@ +#!/bin/sh +# $FreeBSD$ +### Special setup for PicoBSD ### +mount -a -t nonfs +reply=y +while [ "$reply" != "n" ]; do + echo -n "Do you have an additional floppy? [yn] " + read reply + if [ "$reply" = "y" ]; then + cd / + tar xzvf /dev/fd0 + fi +done +if [ -f /etc/rc.conf ]; then + . /etc/rc.conf +fi +rm -f /var/run/* +if [ "x$swapfile" != "xNO" -a -w "$swapfile" -a -b /dev/vn0b ]; then + echo "Adding $swapfile as additional swap." + vnconfig /dev/vn0b $swapfile && swapon /dev/vn0b +fi +# configure serial devices +if [ -f /etc/rc.serial ]; then + . /etc/rc.serial +fi +# start up the initial network configuration. +if [ -f /etc/rc.network ]; then + . /etc/rc.network + network_pass1 +fi +mount -a -t nfs +chmod 666 /dev/tty[pqrsPQRS]* +# clean up left-over files +(cd /var/run && { cp /dev/null utmp; chmod 644 utmp; }) +if [ -n "$network_pass1_done" ]; then + network_pass2 +fi +if [ -n "$network_pass2_done" ]; then + network_pass3 +fi +if [ "X${inetd_enable}" = X"YES" ]; then + echo "Starting inetd."; inetd ${inetd_flags} +fi + +dev_mkdb + +echo '' +if [ "x$swapfile" = "xNO" ]; then + echo "WARNING: no swap partition!" + echo "Don't run too many programs at the same time..." +fi +# Only one /tmp +ln -s /tmp /var + +# This needs to be in /sbin, but /sbin is magic. +mv /etc/dhclient-script /sbin diff --git a/release/picobsd/custom/floppy.etc/rc.conf b/release/picobsd/custom/floppy.etc/rc.conf new file mode 100644 index 0000000..94c31ba --- /dev/null +++ b/release/picobsd/custom/floppy.etc/rc.conf @@ -0,0 +1,14 @@ +#!/bin/sh +# $FreeBSD$ +swapfile="NO" # Set to name of swapfile if aux swapfile desired. +hostname="Pico.freebsd.org" # Set this! +firewall="NO" # firewall type (see /etc/rc.firewall) or NO +tcp_extensions="NO" # Allow RFC1323 & RFC1644 extensions (or NO). +network_interfaces="lo0" # List of network interfaces (lo0 is loopback). +ifconfig_lo0="inet 127.0.0.1" # default loopback device configuration. +#ifconfig_lo0_alias0="inet 127.0.0.254 netmask 0xffffffff" # Sample alias entry. +inetd_enable="YES" # Run the network daemon dispatcher (or NO) +snmpd_enable="YES" # Run the SNMP daemon (or NO) +snmpd_flags="-C -c /etc/snmpd.conf" # Optional flags to snmpd +defaultrouter="NO" # Set to default gateway (or NO). +gateway_enable="NO" # Set to YES if this host will be a gateway. diff --git a/release/picobsd/custom/floppy.etc/rc.network b/release/picobsd/custom/floppy.etc/rc.network new file mode 100644 index 0000000..235db0a --- /dev/null +++ b/release/picobsd/custom/floppy.etc/rc.network @@ -0,0 +1,79 @@ +#!/bin/sh - +# $FreeBSD$ +network_pass1() { + echo -n 'Doing initial network setup:' + # Set the host name if it is not already set + if [ -z "`hostname -s`" ] ; then + hostname $hostname + echo ' hostname' + fi + # Set up all the network interfaces, calling startup scripts if needed + for ifn in ${network_interfaces}; do + if [ -e /etc/start_if.${ifn} ]; then + . /etc/start_if.${ifn} + fi + # Do the primary ifconfig if specified + eval ifconfig_args=\$ifconfig_${ifn} + if [ -n "${ifconfig_args}" ] ; then + ifconfig ${ifn} ${ifconfig_args} + fi + # Check to see if aliases need to be added + alias=0 + while : + do + eval ifconfig_args=\$ifconfig_${ifn}_alias${alias} + if [ -n "${ifconfig_args}" ]; then + ifconfig ${ifn} ${ifconfig_args} alias + alias=`expr ${alias} + 1` + else + break; + fi + done + ifconfig ${ifn} + done + # Load the filters if required + if [ -n "$firewall_enable" -a -f /etc/rc.firewall -a \ + "x$firewall_enable" = "xYES" ] ; then + . /etc/rc.firewall + echo "Firewall rules loaded." + else + echo "Warning: kernel has firewall functionality, but firewall rules weren't loaded." + echo " All ip services are ENABLED by default." + fi + # Configure routing + if [ "x$defaultrouter" != "xNO" ] ; then + static_routes="default ${static_routes}" + route_default="default ${defaultrouter}" + fi + # Set up any static routes. This should be done before router discovery. + if [ "x${static_routes}" != "x" ]; then + for i in ${static_routes}; do + eval route_args=\$route_${i} + route add ${route_args} + done + fi + echo -n 'Additional routing options:' + if [ -n "$tcp_extensions" -a "x$tcp_extensions" != "xYES" ] ; then + echo -n ' tcp_extensions=NO' + sysctl -w net.inet.tcp.rfc1323=0 >/dev/null 2>&1 + sysctl -w net.inet.tcp.rfc1644=0 >/dev/null 2>&1 + fi + if [ "X$gateway_enable" = X"YES" ]; then + echo -n ' IP_gateway=YES' + sysctl -w net.inet.ip.forwarding=1 >/dev/null 2>&1 + fi + if [ "X$arpproxy_all" = X"YES" ]; then + echo -n ' turning on ARP_PROXY_ALL: ' + sysctl -w net.link.ether.inet.proxyall=1 2>&1 + fi + echo '.' + network_pass1_done=YES # Let future generations know we made it. +} + +network_pass2() { + network_pass2_done=YES +} + +network_pass3() { + network_pass3_done=YES +} diff --git a/release/picobsd/custom/floppy.etc/resolv.conf b/release/picobsd/custom/floppy.etc/resolv.conf new file mode 100644 index 0000000..873fb77 --- /dev/null +++ b/release/picobsd/custom/floppy.etc/resolv.conf @@ -0,0 +1,3 @@ +# $FreeBSD$ +domain sitaranetworks.com +nameserver 199.103.141.105 diff --git a/release/picobsd/custom/floppy.etc/services b/release/picobsd/custom/floppy.etc/services new file mode 100644 index 0000000..eec499f --- /dev/null +++ b/release/picobsd/custom/floppy.etc/services @@ -0,0 +1,94 @@ +echo 4/ddp +echo 7/tcp +echo 7/udp +discard 9/tcp +discard 9/udp +systat 11/tcp +systat 11/udp +daytime 13/tcp +daytime 13/udp +qotd 17/tcp +qotd 17/udp +chargen 19/tcp +chargen 19/udp +ftp-data 20/tcp +ftp-data 20/udp +ftp 21/tcp +ftp 21/udp +ssh 22/tcp +ssh 22/udp +telnet 23/tcp +telnet 23/udp +smtp 25/tcp +smtp 25/udp +time 37/tcp +time 37/udp +domain 53/tcp +domain 53/udp +tacacs-ds 65/tcp +tacacs-ds 65/udp +bootps 67/tcp +bootps 67/udp +bootpc 68/tcp +bootpc 68/udp +tftp 69/tcp +tftp 69/udp +gopher 70/tcp +gopher 70/udp +finger 79/tcp +finger 79/udp +http 80/tcp +http 80/udp +pop2 109/tcp +pop2 109/udp +pop3 110/tcp +pop3 110/udp +uucp-path 117/tcp +uucp-path 117/udp +nntp 119/tcp +nntp 119/udp +netbios-ns 137/tcp +netbios-ns 137/udp +netbios-dgm 138/tcp +netbios-dgm 138/udp +netbios-ssn 139/tcp +netbios-ssn 139/udp +imap 143/tcp +imap 143/udp +snmp 161/tcp +snmp 161/udp +snmptrap 162/tcp +snmptrap 162/udp +bgp 179/tcp +bgp 179/udp +irc 194/tcp +irc 194/udp +ipx 213/tcp +ipx 213/udp +imap3 220/tcp +imap3 220/udp +ldap 389/tcp +ldap 389/udp +netware-ip 396/tcp +netware-ip 396/udp +https 443/tcp +https 443/udp +exec 512/tcp +biff 512/udp +login 513/tcp +who 513/udp +cmd 514/tcp +syslog 514/udp +printer 515/tcp +printer 515/udp +talk 517/tcp +talk 517/udp +ntalk 518/tcp +ntalk 518/udp +timed 525/tcp +timed 525/udp +uucp 540/tcp +uucp 540/udp +uucp-rlogin 541/tcp +uucp-rlogin 541/udp +natd 8668/divert # Network Address Translation diff --git a/release/picobsd/custom/floppy.etc/shells b/release/picobsd/custom/floppy.etc/shells new file mode 100644 index 0000000..df377f1 --- /dev/null +++ b/release/picobsd/custom/floppy.etc/shells @@ -0,0 +1,6 @@ +# List of acceptable shells for chpass(1). +# Ftpd will not allow users to connect who are not using +# one of these shells. + +/bin/sh +/bin/csh diff --git a/release/picobsd/custom/floppy.etc/ttys b/release/picobsd/custom/floppy.etc/ttys new file mode 100644 index 0000000..2ed125d --- /dev/null +++ b/release/picobsd/custom/floppy.etc/ttys @@ -0,0 +1,27 @@ +#console none unknown off secure +vga none cons25 off secure +# +ttyv0 "/usr/libexec/getty Pc" cons25 on secure +# Virtual terminals +ttyv1 "/usr/libexec/getty Pc" cons25 on secure +ttyv2 "/usr/libexec/getty Pc" cons25 on secure +ttyv3 "/usr/libexec/getty Pc" cons25 on secure +ttyv4 "/usr/libexec/getty Pc" cons25 on secure +ttyv5 "/usr/libexec/getty Pc" cons25 on secure +ttyv6 "/usr/libexec/getty Pc" cons25 on secure +ttyv7 "/usr/libexec/getty Pc" cons25 on secure +ttyv8 "/usr/libexec/getty Pc" cons25 on secure +ttyv9 "/usr/libexec/getty Pc" cons25 on secure +# The 'dialup' keyword identifies dialin lines to login, fingerd etc. +ttyd0 "/usr/libexec/getty std.9600" xterm on secure +# Pseudo terminals +ttyp0 none network secure +ttyp1 none network secure +ttyp2 none network secure +ttyp3 none network +ttyp4 none network +ttyp5 none network +ttyp6 none network +ttyp7 none network +ttyp8 none network +ttyp9 none network diff --git a/release/picobsd/custom/floppy.tree.exclude b/release/picobsd/custom/floppy.tree.exclude new file mode 100644 index 0000000..7ac83b2 --- /dev/null +++ b/release/picobsd/custom/floppy.tree.exclude @@ -0,0 +1 @@ +CVS diff --git a/release/picobsd/custom/floppy.tree/boot/loader.rc b/release/picobsd/custom/floppy.tree/boot/loader.rc new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/release/picobsd/custom/floppy.tree/boot/loader.rc diff --git a/release/picobsd/custom/floppy.tree/kernel.config b/release/picobsd/custom/floppy.tree/kernel.config new file mode 100644 index 0000000..e69de29 --- /dev/null +++ b/release/picobsd/custom/floppy.tree/kernel.config diff --git a/release/picobsd/custom/lang/README.en b/release/picobsd/custom/lang/README.en new file mode 100644 index 0000000..d2482ae --- /dev/null +++ b/release/picobsd/custom/lang/README.en @@ -0,0 +1,41 @@ +1998.07.12, Warsaw, Poland + + PicoBSD @VER@ (NET) + ----------------- + + +What is PicoBSD? +---------------- + +It's a one floppy version of FreeBSD (please see http://www.freebsd.org), +configured mainly for networking applications. It can be used as a router or +firewall, or kind of a fixit floppy (or all of them). + +You can find more information on the home page of this project at: + + http://www.freebsd.org/~picobsd/ + +What are minimal requirements? +------------------------------ + +* 386SX CPU or better (there is an FPU emulator in kernel) +* 10MB RAM - the more the better. If you have an HDD, you can make a + swap partition or swap file (using vnode driver and vnconfig). Then you + probably will be able to run with ca. 6MB only. But RAM is cheap... +* Modem sitting on COM1-COM4 (default is to use COM2), if you want to have + a PPP connection. +* Network card: compatible with NE2000, PCI Intel, 3Com 3c509 or with DEC + chipsets (ed, ep, fxp and de drivers). The kernel supports two of each + ISA (i.e. +6 total) plus two PPP connections (tun interfaces). So you can + easily build something like router with as many as 8 outlets :-) + +For detailed description and list of supported hardware see the original +documentation, or: + + http://www.freebsd.org/~picobsd/picobsd.html + +I'll be glad hearing from you about your experiences with PicoBSD. Thanks. + +Have fun! + +Andrzej Bialecki <abial@freebsd.org> diff --git a/release/picobsd/custom/lang/README.pl b/release/picobsd/custom/lang/README.pl new file mode 100644 index 0000000..d7e3f67 --- /dev/null +++ b/release/picobsd/custom/lang/README.pl @@ -0,0 +1,56 @@ +1998.07.12, Warszawa + + PicoBSD @VER@ (wersja NET) + ------------------------ + +Co to jest PicoBSD? +------------------- + +Jest to jednodyskietkowa wersja FreeBSD skonfigurowana glownie pod katem +zastosowania jako klient/serwer uslug sieciowych (takich jak routing, +firewall, NFS). W celu zapoznania sie z pelnym systemem zajrzyj na +http://www.freebsd.org. Oficjalna strona tego projektu znajduje sie na +http://www.freebsd.org/~picobsd. + +Jakie sa minimalne wymagania? +----------------------------- + +* Procesor 386SX lub lepszy (jadro posiada emulator FPU) +* 10MB pamieci - jest to absolutnie nieprzekraczalne minimum. Oczywiscie im + wiecej, tym lepiej - ograniczenie jest glownie spowodowane brakiem swapu. Po + zapoznaniu sie z systemem mozesz sobie skonfigurowac tzw. swap-file na dysku + twardym, np. na partycji DOS-owej. Wowczas prawdopodobnie wystarczy 6MB + pamieci. +* Modem, skonfigurowany na COM1-COM4 (standardowo system wykorzystuje COM2), + jesli bedzie wykorzystywany dostep przez PPP. +* Karta sieciowa: kompatybilna z NE2000, niektore typy 3Com, lub wersje PCI z + chipsetem DEC21040 (drivery ed, ep, fxp i de). Jadro jest skonfigurowane + tak, zeby moc obsluzyc po dwie karty ed, ep, i de (czyli w sumie siedem) + oraz dwa polaczenia PPP rownoczesnie. Mozna wiec zbudowac router z 9 + interfejsami... :-) + +Jakie sa roznice w stosunku do poprzedniej wersji? +-------------------------------------------------- + +* Poszerzony zestaw sterownikow w jadrze systemu +* dodana obsluga CD-ROM +* agent SNMP (pelna wersja ucd-snmp, pozwalajaca na monitorowanie procesow i + zdalne uruchamianie skryptow) +* brak ssh, ftp i edytora ee (oznacza to, ze musisz edytowac pliki + konfiguracyjne montujac dyskietke na normalnym systemie) +* dodany inetd, telnetd, routed, tftpd, bootpd, ps, kill, netstat, + ping, traceroute +* brak vnconfig i vn(4): w przypadku routera powinien on miec tyle pamieci + RAM, zeby nie potrzebowac swapu, lub miec normalny swap. +* dodana obsluga hasel (passwd(1)) +* dodana obsluga NFS (klient) +* sa dwaj uzytkownicy: root (haslo 'setup') i user (haslo 'PicoBSD'). Ze + wzgledu na skomplikowana sprawe z prawami dostepu, user praktycznie moze + jedynie zrobic te rzeczy, ktore nie wymagaja praw roota (czyli np. telnet). +* dodany skrypt 'update', ktory powoduje uaktualnienie zawartosci katalogu + /etc na dyskietce w stosunku do tego, co znajduje sie na MFS. + + +Milej zabawy! + +Andrzej Bialecki <abial@freebsd.org> diff --git a/release/picobsd/custom/lang/boot.help.en b/release/picobsd/custom/lang/boot.help.en new file mode 100644 index 0000000..7cbce13 --- /dev/null +++ b/release/picobsd/custom/lang/boot.help.en @@ -0,0 +1,18 @@ +Usage: bios_drive:interface(unit,partition)kernel_name options + bios_drive 0, 1, ... + interface fd, wd or sd + unit 0, 1, ... + partition a, c, ... + kernel_name name of kernel, or ? for list of files in root directory + options -a (ask name) -C (cdrom) -c (userconfig) -D (dual consoles) + -d (debug early) -g (gdb) -h (serial console) -P (probe kbd) + -r (default root) -s (single user) -v (verbose) +Examples: + 1:sd(0,a)mykernel boot `mykernel' on the first SCSI drive when one IDE + drive is present + 1:wd(2,a) boot from the second (secondary master) IDE drive + 1:sd(0,a)? list the files in the root directory on the specified + drive/unit/partition, and set the default bios_drive, + interface, unit and partition + -cv boot with the defaults, then run UserConfig to modify + hardware parameters (c), and print verbose messages (v) diff --git a/release/picobsd/custom/lang/boot.help.pl b/release/picobsd/custom/lang/boot.help.pl new file mode 100644 index 0000000..bb5b422 --- /dev/null +++ b/release/picobsd/custom/lang/boot.help.pl @@ -0,0 +1,16 @@ +Opcje: dysk_bios:kontroler(dysk,partycja)nazwa_kernela opcje + dysk_bios 0, 1, ... + kontroler fd (dyskietka), wd (dysk IDE) lub sd (dysk SCSI) + dysk 0, 1, ... (numer dysku w kontrolerze) + partycja a, c, e, f ... (wedlug nazewnictwa BSD) + nazwa_kernela nazwa pliku kernela, lub ? zeby dostac liste plikow + opcje -a (pytaj o rootdev) -C (cdrom) -c (userconf.) -D (podwojna konsola) + -d (uruchom debugger) -g (gdb) -h (konsola szeregowa) + -P (probkuj klawiature) -r (domyslny rootdev) -s (tryb single user) + -v (verbose - szczegolowe komunikaty) +Np: 1:sd(0,a)mykernel startuj `mykernel' z 1 dysku SCSI gdy jest tez 1 dysk + IDE, i jednoczesnie ustaw go jako domyslny dysk_bios, + kontroler, dysk i partycje + -cv startuj z parametrami domyslnymi, potem uruchom + konfiguracje param. sprzetowych (-c), i podawaj + szczegolowe komunikaty w trakcie bootowania (-v). diff --git a/release/picobsd/custom/lang/hosts.en b/release/picobsd/custom/lang/hosts.en new file mode 100644 index 0000000..53f13ba --- /dev/null +++ b/release/picobsd/custom/lang/hosts.en @@ -0,0 +1,5 @@ +# $FreeBSD$ +# This file should contain the addresses and aliases +# for local hosts that share this file. +127.0.0.1 localhost localhost.mydomain.edu +127.0.0.1 pico.mydomain.edu diff --git a/release/picobsd/custom/lang/hosts.pl b/release/picobsd/custom/lang/hosts.pl new file mode 100644 index 0000000..89081d79 --- /dev/null +++ b/release/picobsd/custom/lang/hosts.pl @@ -0,0 +1,5 @@ +# $FreeBSD$ +# This file should contain the addresses and aliases +# for local hosts that share this file. +127.0.0.1 localhost localhost.mydomain.org.pl +127.0.0.1 pico.mydomain.org.pl diff --git a/release/picobsd/custom/lang/motd.en b/release/picobsd/custom/lang/motd.en new file mode 100644 index 0000000..9719418 --- /dev/null +++ b/release/picobsd/custom/lang/motd.en @@ -0,0 +1,12 @@ +================================================== + [31m)\_)\[37m +PicoBSD @VER@ (NET) [31m([37m[1mo,o[m[31m)[37m + [32m__ [31m\~/[37m +Welcome to PicoBSD! [32m-->=[41m===[40m[31m\[37m + [32m~~[37m [31md d[37m +You can find a short description of the [35mpicoBSD[37m +system in file /README. You can view it using +"more /README". + +For more info contact the author (abial@freebsd.org). + diff --git a/release/picobsd/custom/lang/motd.pl b/release/picobsd/custom/lang/motd.pl new file mode 100644 index 0000000..4b1fcf5 --- /dev/null +++ b/release/picobsd/custom/lang/motd.pl @@ -0,0 +1,12 @@ +======================================================= + [31m)\_)\[37m +PicoBSD @VER@ (NET) [31m([37m[1mo,o[m[31m)[37m + [32m__ [31m\~/[37m +Witamy w PicoBSD! [32m-->=[41m===[40m[31m\[37m + [32m~~[37m [31md d[37m +W glownym katalogu w pliku README znajdziesz [35mpicoBSD[37m +krotki opis systemu. Mozesz go obejrzec przy pomocy +"more /README". + +Wiecej informacji znajdziesz u autora (abial@freebsd.org). + diff --git a/release/picobsd/custom/lang/reboot.en b/release/picobsd/custom/lang/reboot.en new file mode 100755 index 0000000..4601bb8 --- /dev/null +++ b/release/picobsd/custom/lang/reboot.en @@ -0,0 +1,2 @@ +#!/bin/sh +exec /sbin/echo "Press Ctrl-Alt-Del instead of $0" diff --git a/release/picobsd/custom/lang/reboot.pl b/release/picobsd/custom/lang/reboot.pl new file mode 100755 index 0000000..8181ced --- /dev/null +++ b/release/picobsd/custom/lang/reboot.pl @@ -0,0 +1,2 @@ +#!/bin/sh +exec /sbin/echo "Zamiast $0 nacisnij Ctrl-Alt-Del" diff --git a/release/picobsd/custom/lang/update.en b/release/picobsd/custom/lang/update.en new file mode 100755 index 0000000..f8c91fd --- /dev/null +++ b/release/picobsd/custom/lang/update.en @@ -0,0 +1,23 @@ +#!/bin/sh +# $FreeBSD$ +pwd=`pwd` +echo -n "Updating /etc contents on startup floppy... " +mount /dev/fd0a /start_floppy +if [ "X$?" != "X0" ] +then + echo "" + echo "Cannot mount the floppy read-write!" + echo "Check the write-protection..." + exit 1 +fi +cd /etc +rm *.db +rm passwd +cp -Rp . /start_floppy/etc/ +pwd_mkdb master.passwd +echo " Done." +echo -n "Updating kernel parameters... " +kget /start_floppy/boot/kernel.conf +umount /dev/fd0a +cd ${pwd} +echo " Done." diff --git a/release/picobsd/custom/lang/update.pl b/release/picobsd/custom/lang/update.pl new file mode 100755 index 0000000..645f4c0 --- /dev/null +++ b/release/picobsd/custom/lang/update.pl @@ -0,0 +1,23 @@ +#!/bin/sh +# $FreeBSD$ +pwd=`pwd` +echo -n "Uaktualniam katalog /etc na dyskietce... " +mount /dev/fd0a /start_floppy +if [ "X$?" != "X0" ] +then + echo "" + echo "Blad podczas montowania read/write dyskietki!" + echo "Sprawdz, czy nie jest zabezpieczona przed zapisem..." + exit 1 +fi +cd /etc +rm *.db +rm passwd +cp -Rp . /start_floppy/etc/ +pwd_mkdb master.passwd +echo " Zrobione." +echo -n "Uaktualniam parametry jadra..." +kget /start_floppy/boot/kernel.conf +umount /dev/fd0a +cd ${pwd} +echo " Zrobione." diff --git a/release/picobsd/custom/mfs.mtree b/release/picobsd/custom/mfs.mtree new file mode 100644 index 0000000..031638f --- /dev/null +++ b/release/picobsd/custom/mfs.mtree @@ -0,0 +1,58 @@ +# +# $FreeBSD$ +# +/set type=dir uname=root gname=wheel mode=0755 +. + dev + .. + dos + .. + etc + .. + home + user + .. + .. + mnt + .. + mnt1 + .. + mnt2 + .. + proc + .. + root + .. + stand + .. + start_floppy + .. + tftpboot + .. + tmp + .. + usr + local + share + snmp + mibs + .. + .. + .. + .. + share + misc + .. + .. + .. + var + db + .. + run + .. + spool + lock + .. + .. + .. +.. diff --git a/release/picobsd/custom/mfs/etc/dhclient-script b/release/picobsd/custom/mfs/etc/dhclient-script new file mode 100755 index 0000000..c4f5320 --- /dev/null +++ b/release/picobsd/custom/mfs/etc/dhclient-script @@ -0,0 +1,220 @@ +#!/bin/sh + +if [ -x /usr/bin/logger ]; then + LOGGER="/usr/bin/logger -s -p user.notice -t dhclient" +else + LOGGER=echo +fi + +make_resolv_conf() { + echo search $new_domain_name >/etc/resolv.conf + for nameserver in $new_domain_name_servers; do + echo nameserver $nameserver >>/etc/resolv.conf + done +} + +# Must be used on exit. Invokes the local dhcp client exit hooks, if any. +exit_with_hooks() { + exit_status=$1 + if [ -x /etc/dhclient-exit-hooks ]; then + . /etc/dhclient-exit-hooks + fi +# probably should do something with exit status of the local script + exit $exit_status +} + +# Invoke the local dhcp client enter hooks, if they exist. +if [ -x /etc/dhclient-enter-hooks ]; then + exit_status=0 + . /etc/dhclient-enter-hooks + # allow the local script to abort processing of this state + # local script must set exit_status variable to nonzero. + if [ $exit_status -ne 0 ]; then + exit $exit_status + fi +fi + +if [ x$new_network_number != x ]; then + $LOGGER New Network Number: $new_network_number +fi + +if [ x$new_broadcast_address != x ]; then + $LOGGER New Broadcast Address: $new_broadcast_address + new_broadcast_arg="broadcast $new_broadcast_address" +fi +if [ x$old_broadcast_address != x ]; then + old_broadcast_arg="broadcast $old_broadcast_address" +fi +if [ x$new_subnet_mask != x ]; then + $LOGGER New Subnet Mask for $interface: $new_subnet_mask + new_netmask_arg="netmask $new_subnet_mask" +fi +if [ x$old_subnet_mask != x ]; then + old_netmask_arg="netmask $old_subnet_mask" +fi +if [ x$alias_subnet_mask != x ]; then + alias_subnet_arg="netmask $alias_subnet_mask" +fi + +if [ x$reason = xMEDIUM ]; then + ifconfig $interface $medium + ifconfig $interface inet -alias 0.0.0.0 $medium >/dev/null 2>&1 + sleep 1 + exit_with_hooks 0 +fi + +if [ x$reason = xPREINIT ]; then + if [ x$alias_ip_address != x ]; then + ifconfig $interface inet -alias $alias_ip_address > /dev/null 2>&1 + route delete $alias_ip_address 127.0.0.1 > /dev/null 2>&1 + fi + ifconfig $interface inet 0.0.0.0 netmask 0.0.0.0 \ + broadcast 255.255.255.255 up + exit_with_hooks 0 +fi + +if [ x$reason = xARPCHECK ] || [ x$reason = xARPSEND ]; then + exit_with_hooks 0; +fi + +if [ x$reason = xBOUND ] || [ x$reason = xRENEW ] || \ + [ x$reason = xREBIND ] || [ x$reason = xREBOOT ]; then + current_hostname=`/bin/hostname` + if [ x$current_hostname = x ] || \ + [ x$current_hostname = x$old_host_name ]; then + if [ x$new_host_name != x$old_host_name ]; then + $LOGGER New Hostname: $new_host_name + hostname $new_host_name + fi + fi + if [ x$old_ip_address != x ] && [ x$alias_ip_address != x ] && \ + [ x$alias_ip_address != x$old_ip_address ]; then + ifconfig $interface inet -alias $alias_ip_address > /dev/null 2>&1 + route delete $alias_ip_address 127.0.0.1 > /dev/null 2>&1 + fi + if [ x$old_ip_address != x ] && [ x$old_ip_address != x$new_ip_address ]; then + ifconfig $interface inet -alias $old_ip_address $medium + route delete $old_ip_address 127.1 >/dev/null 2>&1 + for router in $old_routers; do + route delete default $router >/dev/null 2>&1 + done + if [ "$old_static_routes" != "" ]; then + set $old_static_routes + while [ $# -gt 1 ]; do + route delete $1 $2 + shift; shift + done + fi + arp -n -a | sed -n -e 's/^.*(\(.*\)) at .*$/arp -n -d \1/p' |sh + fi + if [ x$old_ip_address = x ] || [ x$old_ip_address != x$new_ip_address ] || \ + [ x$reason = xBOUND ] || [ x$reason = xREBOOT ]; then + ifconfig $interface inet $new_ip_address $new_netmask_arg \ + $new_broadcast_arg $medium + route add $new_ip_address 127.1 >/dev/null 2>&1 + for router in $new_routers; do + route add default $router >/dev/null 2>&1 + done + if [ "$new_static_routes" != "" ]; then + $LOGGER New Static Routes: $new_static_routes + set $new_static_routes + while [ $# -gt 1 ]; do + route add $1 $2 + shift; shift + done + fi + fi + if [ x$new_ip_address != x$alias_ip_address ] && [ x$alias_ip_address != x ]; + then + ifconfig $interface inet alias $alias_ip_address $alias_subnet_arg + route add $alias_ip_address 127.0.0.1 + fi + echo search $new_domain_name >/etc/resolv.conf + for nameserver in $new_domain_name_servers; do + echo nameserver $nameserver >>/etc/resolv.conf + done + exit_with_hooks 0 +fi + +if [ x$reason = xEXPIRE ] || [ x$reason = xFAIL ]; then + if [ x$alias_ip_address != x ]; then + ifconfig $interface inet -alias $alias_ip_address > /dev/null 2>&1 + route delete $alias_ip_address 127.0.0.1 > /dev/null 2>&1 + fi + if [ x$old_ip_address != x ]; then + ifconfig $interface inet -alias $old_ip_address $medium + route delete $old_ip_address 127.1 >/dev/null 2>&1 + for router in $old_routers; do + route delete default $router >/dev/null 2>&1 + done + if [ "$old_static_routes" != "" ]; then + set $old_static_routes + while [ $# -gt 1 ]; do + route delete $1 $2 + shift; shift + done + fi + arp -n -a | sed -n -e 's/^.*(\(.*\)) at .*$/arp -n -d \1/p' \ + |sh >/dev/null 2>&1 + fi + if [ x$alias_ip_address != x ]; then + ifconfig $interface inet alias $alias_ip_address $alias_subnet_arg + route add $alias_ip_address 127.0.0.1 + fi + exit_with_hooks 0 +fi + +if [ x$reason = xTIMEOUT ]; then + if [ x$alias_ip_address != x ]; then + ifconfig $interface inet -alias $alias_ip_address > /dev/null 2>&1 + route delete $alias_ip_address 127.0.0.1 > /dev/null 2>&1 + fi + ifconfig $interface inet $new_ip_address $new_netmask_arg \ + $new_broadcast_arg $medium + sleep 1 + if [ "$new_routers" != "" ]; then + $LOGGER New Routers: $new_routers + set $new_routers + if ping -q -c 1 $1; then + if [ x$new_ip_address != x$alias_ip_address ] && \ + [ x$alias_ip_address != x ]; then + ifconfig $interface inet alias $alias_ip_address $alias_subnet_arg + route add $alias_ip_address 127.0.0.1 + fi + route add $new_ip_address 127.1 >/dev/null 2>&1 + for router in $new_routers; do + route add default $router >/dev/null 2>&1 + done + set $new_static_routes + while [ $# -gt 1 ]; do + route add $0 $1 + shift; shift + done + echo search $new_domain_name >/etc/resolv.conf.std + for nameserver in $new_domain_name_servers; do + echo nameserver $nameserver >>/etc/resolv.conf.std + done + if [ -f /etc/resolv.conf ]; then + rm -f /etc/resolv.conf + fi + mv /etc/resolv.conf.std /etc/resolv.conf + exit_with_hooks 0 + fi + fi + ifconfig $interface inet -alias $new_ip_address $medium + for router in $old_routers; do + route delete default $router >/dev/null 2>&1 + done + if [ "$old_static_routes" != "" ]; then + set $old_static_routes + while [ $# -gt 1 ]; do + route delete $1 $2 + shift; shift + done + fi + arp -n -a | sed -n -e 's/^.*(\(.*\)) at .*$/arp -n -d \1/p' \ + |sh >/dev/null 2>&1 + exit_with_hooks 1 +fi + +exit_with_hooks 0 diff --git a/release/picobsd/custom/mfs/etc/disktab b/release/picobsd/custom/mfs/etc/disktab new file mode 100644 index 0000000..7575ba6 --- /dev/null +++ b/release/picobsd/custom/mfs/etc/disktab @@ -0,0 +1,87 @@ +# +# Floppy formats: +# +# To make a filesystem on a floppy: +# fdformat [-f <size>] fd<drive>[.<size>] +# disklabel -B -r -w fd<drive>[.<size>] fd<size> +# newfs <opts> fd<drive>[.<size>] +# +# with <opts>: +# -t 2 - two heads +# -u 9|15|18 - sectors per track +# (using the default value of 1/4096 is not much useful for floppies) +# -l 1 - interleave 1 (for most floppies) +# -i 65536 - bytes of data per i-node +# (the default -i value will render you with a floppy wasting way +# too much space in i-node areas) +# + +fd360:\ + :ty=floppy:se#512:nt#2:rm#300:ns#9:nc#40:\ + :pa#720:oa#0:ba#4096:fa#512:\ + :pb#720:ob#0:bb#4096:fb#512:\ + :pc#720:oc#0:bc#4096:fc#512: + +fd720:\ + :ty=floppy:se#512:nt#2:rm#300:ns#9:nc#80:\ + :pa#1440:oa#0:ba#4096:fa#512:\ + :pb#1440:ob#0:bb#4096:fb#512:\ + :pc#1440:oc#0:bc#4096:fc#512: + +fd1200|floppy5|5in|5.25in High Density Floppy:\ + :ty=floppy:se#512:nt#2:rm#360:ns#15:nc#80:\ + :pa#2400:oa#0:ba#4096:fa#512:\ + :pb#2400:ob#0:bb#4096:fb#512:\ + :pc#2400:oc#0:bc#4096:fc#512: + +fd1440|floppy|floppy3|3in|3.5in High Density Floppy:\ + :ty=floppy:se#512:nt#2:rm#300:ns#18:nc#80:\ + :pa#2880:oa#0:ba#4096:fa#512:\ + :pb#2880:ob#0:bb#4096:fb#512:\ + :pc#2880:oc#0:bc#4096:fc#512: + +fd1024|floppy0|3.5in Special Density Floppy:\ + :ty=floppy:se#512:nt#2:rm#300:ns#16:nc#64:\ + :pa#2048:oa#0:ba#4096:fa#512:\ + :pb#2048:ob#0:bb#4096:fb#512:\ + :pc#2048:oc#0:bc#4096:fc#512: + +# a == root +# b == swap +# c == d == whole disk +# e == /var +# f == scratch +# h == /usr + +cp3100new|Connor Peripherals 100MB IDE, with a different configuration:\ + :dt=ST506:ty=winchester:se#512:nt#8:ns#33:nc#766: \ + :pa#15840:oa#0:ta=4.2BSD:ba#4096:fa#512: \ + :pb#24288:ob#15840:tb=swap: \ + :pc#202224:oc#0: \ + :pd#202224:od#0: \ + :pe#15840:oe#40128:te=4.2BSD:be#4096:fe#512: \ + :pg#15840:og#55968:tg=4.2BSD:bg#4096:fg#512: \ + :ph#130416:oh#71808:th=4.2BSD:bh#4096:fh#512: + +sony650|Sony 650 MB MOD|\ + :ty=removable:dt=SCSI:se#512:nt#1:ns#31:nc#18600:ts#1:rm#4800:\ + :pc#576600:oc#0:\ + :pa#576600:oa#0:ta=4.2BSD:ba#8192:fa#1024: + +mta3230|mo230|IBM MTA-3230 230 Meg 3.5inch Magneto-Optical:\ + :ty=removeable:dt=SCSI:rm#3600:\ + :se#512:nt#64:ns#32:nc#216:sc#2048:su#444384:\ + :pa#444384:oa#0:ba#4096:fa#0:ta=4.2BSD:\ + :pc#444384:oc#0: + +minimum:ty=mfs:se#512:nt#1:rm#300:\ + :ns#2880:nc#1:\ + :pa#2880:oa#0:ba#4096:fa#512:\ + :pc#2880:oc#0:bc#4096:fc#512: + +zip100|zip 100:\ + :ty=removable:se#512:nc#96:nt#64:ns#32:\ + :pa#196608:oa#0:ba#4096:fa#512:\ + :pb#196608:ob#0:bb#4096:fb#512:\ + :pc#196608:oc#0:bc#4096:fc#512: + diff --git a/release/picobsd/custom/mfs/etc/gettytab b/release/picobsd/custom/mfs/etc/gettytab new file mode 100644 index 0000000..90562ac --- /dev/null +++ b/release/picobsd/custom/mfs/etc/gettytab @@ -0,0 +1,40 @@ +# from: @(#)gettytab 5.14 (Berkeley) 3/27/91 +# +default:\ + :cb:ce:ck:lc:fd#1000:cl:im=\r\nPicoBSD (%h) (%t)\r\n\r\n:sp#1200: + +P|Pc|Pc console:\ + :ht:np:sp#115200: + +# +# Fixed speed entries +2|std.9600|9600-baud:\ + :np:sp#9600: +g|std.19200|19200-baud:\ + :np:sp#19200: +std.38400|38400-baud:\ + :np:sp#38400: +std.57600|57600-baud:\ + :np:sp#57600: +std.115200|115200-baud:\ + :np:sp#115200: + +# +# Entry specifying explicit device settings. See termios(4) and +# /usr/include/termios.h, too. The entry forces the tty into +# CLOCAL mode (so no DCD is required), and uses Xon/Xoff flow control. +# +# cflags: CLOCAL | HUPCL | CREAD | CS8 +# oflags: OPOST | ONLCR | OXTABS +# iflags: IXOFF | IXON | ICRNL | IGNPAR +# lflags: IEXTEN | ICANON | ISIG | ECHOCTL | ECHO | ECHOK | ECHOE | ECHOKE +# +# The `0' flags don't have input enabled. The `1' flags don't echo. +# (Echoing is done inside getty itself.) +# +local.9600|CLOCAL tty @ 9600 Bd:\ + :c0#0x0000c300:c1#0x0000cb00:c2#0x0000cb00:\ + :o0#0x00000007:o1#0x00000002:o2#0x00000007:\ + :i0#0x00000704:i1#0x00000000:i2#0x00000704:\ + :l0#0x000005cf:l1#0x00000000:l2#0x000005cf:\ + :sp#9600: diff --git a/release/picobsd/custom/mfs/etc/group b/release/picobsd/custom/mfs/etc/group new file mode 100644 index 0000000..abbd733 --- /dev/null +++ b/release/picobsd/custom/mfs/etc/group @@ -0,0 +1,19 @@ +wheel:*:0:root,user +daemon:*:1:daemon +kmem:*:2:root +sys:*:3:root +tty:*:4:root +operator:*:5:root +mail:*:6: +bin:*:7: +news:*:8: +man:*:9: +games:*:13: +staff:*:20:root,user +guest:*:31:root +uucp:*:66: +xten:*:67:xten +dialer:*:68: +network:*:69: +nogroup:*:65533: +nobody:*:65534: diff --git a/release/picobsd/custom/mfs/etc/login.conf b/release/picobsd/custom/mfs/etc/login.conf new file mode 100644 index 0000000..1f2f027 --- /dev/null +++ b/release/picobsd/custom/mfs/etc/login.conf @@ -0,0 +1,120 @@ +# This file controls resource limits, accounting limits and +# default user environment settings. +# +# $FreeBSD$ +# + + +# Authentication methods + +auth-defaults:\ + :auth=passwd: + +auth-root-defaults:\ + :auth-login=passwd:\ + :auth-rlogin=passwd:\ + +auth-ftp-defaults:\ + :auth=passwd: + +# Example defaults +# These settings are used by login(1) by default for classless users +# Note that entries like "cputime" set both "cputime-cur" and "cputime-max" + +default:\ + :cputime=infinity:\ + :datasize-cur=22M:\ + :stacksize-cur=8M:\ + :memorylocked-cur=10M:\ + :memoryuse-cur=30M:\ + :filesize=infinity:\ + :coredumpsize=infinity:\ + :maxproc-cur=64:\ + :openfiles-cur=64:\ + :priority=0:\ + :requirehome@:\ + :umask=022:\ + :tc=auth-defaults: + + +# +# standard - standard user defaults +# +standard:\ + :copyright=/etc/COPYRIGHT:\ + :welcome=/etc/motd:\ + :setenv=MAIL=/var/mail/$,BLOCKSIZE=K,EDITOR=/usr/bin/ee:\ + :path=~/bin /bin /usr/bin:\ + :nologin=/var/run/nologin:\ + :cputime=1h30m:\ + :datasize=8M:\ + :stacksize=2M:\ + :memorylocked=4M:\ + :memoryuse=8M:\ + :filesize=8M:\ + :coredumpsize=8M:\ + :openfiles=24:\ + :maxproc=32:\ + :priority=0:\ + :requirehome:\ + :passwordtime=90d:\ + :umask=002:\ + :ignoretime@:\ + :tc=default: +# +# Staff users - few restrictions and allow login anytime +# +staff:\ + :ignorenologin:\ + :ignoretime:\ + :requirehome@:\ + :accounted@:\ + :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ + :umask=022:\ + :tc=standard: + + +# +# root - fallback for root logins +# +root:\ + :path=~/bin /bin /sbin /usr/bin /usr/sbin /usr/local/bin /usr/local/sbin:\ + :cputime=infinity:\ + :datasize=infinity:\ + :stacksize=infinity:\ + :memorylocked=infinity:\ + :memoryuse=infinity:\ + :filesize=infinity:\ + :coredumpsize=infinity:\ + :openfiles=infinity:\ + :maxproc=infinity:\ + :memoryuse-cur=32M:\ + :maxproc-cur=64:\ + :openfiles-cur=1024:\ + :priority=0:\ + :requirehome@:\ + :umask=022:\ + :tc=auth-root-defaults:\ +# +# Settings used by /etc/rc +# +daemon:\ + :coredumpsize@:\ + :coredumpsize-cur=0:\ + :datasize=infinity:\ + :datasize-cur@:\ + :maxproc=512:\ + :maxproc-cur@:\ + :memoryuse-cur=64M:\ + :memorylocked-cur=64M:\ + :openfiles=1024:\ + :openfiles-cur@:\ + :stacksize=16M:\ + :stacksize-cur@:\ + :tc=default: +# +# Polish Users Accounts. Setup proper environment variables. +# +polish:Polish Users Accounts:\ + :lang=pl_pl.ISO-8859-2:\ + :tc=default: diff --git a/release/picobsd/custom/mfs/etc/protocols b/release/picobsd/custom/mfs/etc/protocols new file mode 100644 index 0000000..c80be39 --- /dev/null +++ b/release/picobsd/custom/mfs/etc/protocols @@ -0,0 +1,7 @@ +# +# Internet (IP) protocols +ip 0 IP # internet protocol, pseudo protocol number +icmp 1 ICMP # internet control message protocol +igmp 2 IGMP # Internet Group Management +tcp 6 TCP # transmission control protocol +udp 17 UDP # user datagram protocol diff --git a/release/picobsd/custom/mfs/etc/rc b/release/picobsd/custom/mfs/etc/rc new file mode 100644 index 0000000..486ba84 --- /dev/null +++ b/release/picobsd/custom/mfs/etc/rc @@ -0,0 +1,34 @@ +#!/bin/sh +# $FreeBSD$ +### WARNING !!!!!! ##### +# We remove this file during execution (see EOF). +# Awful things happen if its size is > 1024B + +stty status '^T' + +trap : 2 +trap : 3 + +HOME=/; export HOME +PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin +export PATH + +trap "echo 'Reboot interrupted'; exit 1" 3 + +### Special setup for two floppy PICOBSD ### +echo "" +echo "-------------------------------------------" +echo " Please wait. The system is coming up..." +echo "-------------------------------------------" +echo "" +echo "Reading /etc from startup floppy..." +mount -o rdonly /dev/fd0a /start_floppy +cd /etc +tar zxvf /start_floppy/etc.tar.gz +cd /etc +pwd_mkdb -p ./master.passwd +umount /start_floppy +echo "Ok. (Now you can remove floppy if you like)" +echo "" +. rc +exit 0 diff --git a/release/picobsd/custom/mfs/etc/rc.firewall b/release/picobsd/custom/mfs/etc/rc.firewall new file mode 100644 index 0000000..c2860ba --- /dev/null +++ b/release/picobsd/custom/mfs/etc/rc.firewall @@ -0,0 +1,172 @@ +############ +# Setup system for firewall service. +# $FreeBSD$ + +############ +# Define the firewall type in /etc/rc.conf. Valid values are: +# open - will allow anyone in +# client - will try to protect just this machine +# simple - will try to protect a whole network +# closed - totally disables IP services except via lo0 interface +# UNKNOWN - disables the loading of firewall rules. +# filename - will load the rules in the given filename (full path required) +# +# For ``client'' and ``simple'' the entries below should be customized +# appropriately. + +############ +# +# If you don't know enough about packet filtering, we suggest that you +# take time to read this book: +# +# Building Internet Firewalls +# Brent Chapman and Elizabeth Zwicky +# +# O'Reilly & Associates, Inc +# ISBN 1-56592-124-0 +# http://www.ora.com/ +# +# For a more advanced treatment of Internet Security read: +# +# Firewalls & Internet Security +# Repelling the wily hacker +# William R. Cheswick, Steven M. Bellowin +# +# Addison-Wesley +# ISBN 0-201-6337-4 +# http://www.awl.com/ +# + +if [ "x$1" != "x" ]; then + firewall_type=$1 +fi + +############ +# Set quiet mode if requested +if [ "x$firewall_quiet" = "xYES" ]; then + fwcmd="/sbin/ipfw -q" +else + fwcmd="/sbin/ipfw" +fi + +############ +# Flush out the list before we begin. +$fwcmd -f flush + +############ +# If you just configured ipfw in the kernel as a tool to solve network +# problems or you just want to disallow some particular kinds of traffic +# they you will want to change the default policy to open. You can also +# do this as your only action by setting the firewall_type to ``open''. + +# $fwcmd add 65000 pass all from any to any + +############ +# Only in rare cases do you want to change these rules +$fwcmd add 1000 pass all from any to any via lo0 +$fwcmd add 1010 deny all from 127.0.0.0/8 to 127.0.0.0/8 + + +# Prototype setups. +if [ "${firewall_type}" = "open" -o "${firewall_type}" = "OPEN" ]; then + + $fwcmd add 65000 pass all from any to any + +elif [ "${firewall_type}" = "client" ]; then + + ############ + # This is a prototype setup that will protect your system somewhat against + # people from outside your own network. + ############ + + # set these to your network and netmask and ip + net="192.168.4.0" + mask="255.255.255.0" + ip="192.168.4.17" + + # Allow any traffic to or from my own net. + $fwcmd add pass all from ${ip} to ${net}:${mask} + $fwcmd add pass all from ${net}:${mask} to ${ip} + + # Allow TCP through if setup succeeded + $fwcmd add pass tcp from any to any established + + # Allow setup of incoming email + $fwcmd add pass tcp from any to ${ip} 25 setup + + # Allow setup of outgoing TCP connections only + $fwcmd add pass tcp from ${ip} to any setup + + # Disallow setup of all other TCP connections + $fwcmd add deny tcp from any to any setup + + # Allow DNS queries out in the world + $fwcmd add pass udp from any 53 to ${ip} + $fwcmd add pass udp from ${ip} to any 53 + + # Allow NTP queries out in the world + $fwcmd add pass udp from any 123 to ${ip} + $fwcmd add pass udp from ${ip} to any 123 + + # Everything else is denied as default. + +elif [ "${firewall_type}" = "simple" ]; then + + ############ + # This is a prototype setup for a simple firewall. Configure this machine + # as a named server and ntp server, and point all the machines on the inside + # at this machine for those services. + ############ + + # set these to your outside interface network and netmask and ip + oif="ed0" + onet="192.168.4.0" + omask="255.255.255.0" + oip="192.168.4.17" + + # set these to your inside interface network and netmask and ip + iif="ed1" + inet="192.168.3.0" + imask="255.255.255.0" + iip="192.168.3.17" + + # Stop spoofing + $fwcmd add deny all from ${inet}:${imask} to any in via ${oif} + $fwcmd add deny all from ${onet}:${omask} to any in via ${iif} + + # Stop RFC1918 nets on the outside interface + $fwcmd add deny all from 192.168.0.0:255.255.0.0 to any via ${oif} + $fwcmd add deny all from 172.16.0.0:255.240.0.0 to any via ${oif} + $fwcmd add deny all from 10.0.0.0:255.0.0.0 to any via ${oif} + + # Allow TCP through if setup succeeded + $fwcmd add pass tcp from any to any established + + # Allow setup of incoming email + $fwcmd add pass tcp from any to ${oip} 25 setup + + # Allow access to our DNS + $fwcmd add pass tcp from any to ${oip} 53 setup + + # Allow access to our WWW + $fwcmd add pass tcp from any to ${oip} 80 setup + + # Reject&Log all setup of incoming connections from the outside + $fwcmd add deny log tcp from any to any in via ${oif} setup + + # Allow setup of any other TCP connection + $fwcmd add pass tcp from any to any setup + + # Allow DNS queries out in the world + $fwcmd add pass udp from any 53 to ${oip} + $fwcmd add pass udp from ${oip} to any 53 + + # Allow NTP queries out in the world + $fwcmd add pass udp from any 123 to ${oip} + $fwcmd add pass udp from ${oip} to any 123 + + # Everything else is denied as default. + +elif [ "${firewall_type}" != "UNKNOWN" -a -r "${firewall_type}" ]; then + $fwcmd ${firewall_type} +fi diff --git a/release/picobsd/custom/mfs/etc/rc.serial b/release/picobsd/custom/mfs/etc/rc.serial new file mode 100644 index 0000000..40fbd8a --- /dev/null +++ b/release/picobsd/custom/mfs/etc/rc.serial @@ -0,0 +1,127 @@ +#!/bin/sh +# $FreeBSD$ + +# Change some defaults for serial devices. +# Standard defaults are: +# dtrwait 300 drainwait 0 +# initial cflag from <sys/ttydefaults.h> = cread cs8 hupcl +# initial iflag, lflag and oflag all 0 +# speed 9600 +# special chars from <sys/ttydefaults.h> +# nothing locked +# except for serial consoles the initial iflag, lflag and oflag are from +# <sys/ttydefaults.h> and clocal is locked on. + +default() { + # Reset everything changed by the other functions to initial defaults. + + ci=$1; shift # call in device identifier + co=$1; shift # call out device identifier + + for i in $* + do + comcontrol /dev/tty$ci$i dtrwait 300 drainwait 0 + stty </dev/ttyi$ci$i -clocal crtscts hupcl 9600 reprint ^R + stty </dev/ttyl$ci$i -clocal -crtscts -hupcl 0 + stty </dev/cuai$co$i -clocal crtscts hupcl 9600 reprint ^R + stty </dev/cual$co$i -clocal -crtscts -hupcl 0 + done +} + +maybe() { + # Special settings. + + ci=$1; shift + co=$1; shift + + for i in $* + do + # Don't use ^R; it breaks bash's ^R when typed ahead. + stty </dev/ttyi$ci$i reprint undef + stty </dev/cuai$co$i reprint undef + # Lock clocal off on dialin device for security. + stty </dev/ttyl$ci$i clocal + # Lock the speeds to use old binaries that don't support them. + # Any legal speed works to lock the initial speed. + stty </dev/ttyl$ci$i 300 + stty </dev/cual$co$i 300 + done +} + +modem() { + # Modem that supports CTS and perhaps RTS handshaking. + + ci=$1; shift + co=$1; shift + + for i in $* + do + # may depend on modem + comcontrol /dev/tty$ci$i dtrwait 100 drainwait 180 + # Lock crtscts on. + # Speed reasonable for V42bis. + stty </dev/ttyi$ci$i crtscts 57600 + stty </dev/ttyl$ci$i crtscts + stty </dev/cuai$co$i crtscts 57600 + stty </dev/cual$co$i crtscts + done +} + +mouse() { + # Mouse on either callin or callout port. + + ci=$1; shift + co=$1; shift + + for i in $* + do + # Lock clocal on, hupcl off. + # Standard speed for Microsoft mouse. + stty </dev/ttyi$ci$i clocal -hupcl 1200 + stty </dev/ttyl$ci$i clocal hupcl + stty </dev/cuai$co$i clocal -hupcl 1200 + stty </dev/cual$co$i clocal hupcl + done +} + +terminal() { + # Terminal that supports CTS and perhaps RTS handshaking + # with the cable or terminal arranged so that DCD is on + # at least while the terminal is on. + # Also works for bidirectional communications to another pc + # provided at most one side runs getty. + # Same as modem() except we want a faster speed and no dtrwait. + + ci=$1; shift + co=$1; shift + + modem $ci $co $* + for i in $* + do + comcontrol /dev/tty$ci$i dtrwait 0 + stty </dev/ttyi$ci$i 115200 + stty </dev/cuai$co$i 115200 + done +} + +# Don't use anything from this file unless you have some buggy programs +# that require it. + +# Edit the functions and the examples to suit your system. +# $1 is the call in device identifier, $2 is the call out device identifier +# and the remainder of the line lists the device numbers. + +# Initialize assorted 8250-16550 (sio) ports. +# maybe d a 0 1 2 3 4 5 6 7 8 9 a b c d e f g h i j k l m n o p q r s t u v +# mouse d a 2 +# modem d a 1 +# terminal d a 0 + +# Initialize all ports on a Cyclades-8yo. +# modem c c 00 01 02 03 04 05 06 07 + +# Initialize all ports on a Cyclades-16ye. +# modem c c 00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f + +# Initialize all ports on a Digiboard 8. +# modem D D 00 01 02 03 04 05 06 07 diff --git a/release/picobsd/custom/mfs/etc/remote b/release/picobsd/custom/mfs/etc/remote new file mode 100644 index 0000000..6f9fcaf --- /dev/null +++ b/release/picobsd/custom/mfs/etc/remote @@ -0,0 +1,50 @@ +# @(#)remote 5.2 (Berkeley) 6/30/90 +# +# remote -- remote host description file +# see tip(1), remote(5) +# +# dv device to use for the tty +# el EOL marks (default is NULL) +# du make a call flag (dial up) +# pn phone numbers (@ =>'s search phones file; possibly taken from +# PHONES environment variable) +# at ACU type +# ie input EOF marks (default is NULL) +# oe output EOF string (default is NULL) +# cu call unit (default is dv) +# br baud rate (defaults to 300) +# fs frame size (default is BUFSIZ) -- used in buffering writes on +# receive operations +# tc to continue a capability + +# Systems definitions +netcom|Netcom Unix Access:\ + :pn=\@:tc=unix1200: +omen|Omen BBS:\ + :pn=\@:tc=dos1200: + +# UNIX system definitions +unix1200|1200 Baud dial-out to a UNIX system:\ + :el=^U^C^R^O^D^S^Q:ie=%$:oe=^D:tc=dial1200: +unix300|300 Baud dial-out to a UNIX system:\ + :el=^U^C^R^O^D^S^Q:ie=%$:oe=^D:tc=dial300: + +# DOS system definitions +dos1200|1200 Baud dial-out to a DOS system:\ + :el=^U^C^R^O^D^S^Q:ie=%$:oe=^Z:pa=none:tc=dial1200: + +# General dialer definitions used below +# +# COURIER switch settings: +# switch: 1 2 3 4 5 6 7 8 9 10 +# setting: D U D U D D U D U U +# Rackmount: U U D U D U D D U D +# +dial2400|2400 Baud Hayes attributes:\ + :dv=/dev/cuaa0:br#2400:cu=/dev/cuaa0:at=hayes:du: +dial1200|1200 Baud Hayes attributes:\ + :dv=/dev/cuaa0:br#1200:cu=/dev/cuaa0:at=hayes:du: + +# Hardwired line +cuaa0b|cua0b:dv=/dev/cuaa0:br#2400 +cuaa0c|cua0c:dv=/dev/cuaa0:br#9600 diff --git a/release/picobsd/custom/mfs/etc/snmpd.conf b/release/picobsd/custom/mfs/etc/snmpd.conf new file mode 100644 index 0000000..29400df --- /dev/null +++ b/release/picobsd/custom/mfs/etc/snmpd.conf @@ -0,0 +1,58 @@ +# load average checks + +# load [1MAX=DEFMAXLOADAVE] [5MAX=DEFMAXLOADAVE] [15MAX=DEFMAXLOADAVE] +# +# 1MAX: If the 1 minute load average is above this limit at query +# time, the errorFlag will be set. +# 5MAX: Similar, but for 5 min average. +# 15MAX: Similar, but for 15 min average. + +# Check for loads: +load 12 14 14 + +# % snmpwalk -v 1 localhost public .1.3.6.1.4.1.2021.10 + +# snmp agent errors + +# % snmpwalk -v 1 localhost public .1.3.6.1.4.1.2021.101 + +# snmp version mib + +# % snmpwalk -v 1 localhost public .1.3.6.1.4.1.2021.100 + +# System contact information + +syslocation PicoBSD +syscontact root <root@pico> + +# Setting up the access control lists to the agent + +# sec.name source community +com2sec local localhost private +com2sec public default public + +# sec.model sec.name +group local any local +group public any public + +# incl/excl subtree mask +view all included .1 80 +view system included system fe +view mib2 included .iso.org.dod.internet.mgmt.mib-2 fc + +# context sec.model sec.level prefix read write not +access public "" any noauth 0 system none none +access local "" any noauth 0 all all all + +# If you want to get back to the functionality of previous versions, +# where the public community could read anything from anywhere and the +# private community could write anything from anywhere, use these +# lines instead: +# +# com2sec public default public +# com2sec private default private +# group public any public +# group private any private +# view all included .1 80 +# access public "" any noauth 0 all none none +# access private "" any noauth 0 all all none diff --git a/release/picobsd/custom/mfs/etc/termcap b/release/picobsd/custom/mfs/etc/termcap new file mode 100644 index 0000000..0c17360 --- /dev/null +++ b/release/picobsd/custom/mfs/etc/termcap @@ -0,0 +1,133 @@ +# Copyright (c) 1980, 1985, 1989 The Regents of the University of California. +# All rights reserved. +# @(#)termcap.src 5.88 (Berkeley) 4/30/91 +# +# +# for syscons +# common entry without semigraphics +cons25w|ansiw|ansi80x25-raw:\ + :al=\E[L:am:bs:NP:cd=\E[J:ce=\E[K:cl=\E[H\E[J:cm=\E[%i%d;%dH:co#80:\ + :dc=\E[P:dl=\E[M:do=\E[B:bt=\E[Z:ho=\E[H:ic=\E[@:li#25:cb=\E[1K:\ + :ms:nd=\E[C:pt:rs=\E[x\E[m\Ec:so=\E[7m:se=\E[m:up=\E[A:\ + :pa#64:Co#8:Sf=\E[3%dm:Sb=\E[4%dm:op=\E[37;40m:\ + :k1=\E[M:k2=\E[N:k3=\E[O:k4=\E[P:k5=\E[Q:k6=\E[R:k7=\E[S:k8=\E[T:\ + :k9=\E[U:k;=\E[V:F1=\E[W:F2=\E[X:K2=\E[E:nw=\E[E:ec=\E[%dX:\ + :kb=^H:kh=\E[H:ku=\E[A:kd=\E[B:kl=\E[D:kr=\E[C:le=^H:eo:sf=\E[S:sr=\E[T:\ + :kN=\E[G:kP=\E[I:@7=\E[F:kI=\E[L:kD=\E[K:kB=\E[Z:\ + :IC=\E[%d@:DC=\E[%dP:SF=\E[%dS:SR=\E[%dT:AL=\E[%dL:DL=\E[%dM:\ + :DO=\E[%dB:LE=\E[%dD:RI=\E[%dC:UP=\E[%dA:cv=\E[%i%dd:ch=\E[%i%d`:bw:\ + :mb=\E[5m:md=\E[1m:mh=\E[30;1m:mr=\E[7m:me=\E[m:bl=^G:ut:it#8: +cons25|ansis|ansi80x25:\ + :ac=l\332m\300k\277j\331u\264t\303v\301w\302q\304x\263n\305`^Da\260f\370g\361~\371.^Y-^Xh\261I^U0\333y\363z\362:\ + :tc=cons25w: +cons25-m|ansis-mono|ansi80x25-mono:\ + :pa@:Co@:Sf@:Sb@:op@:us=\E[4m:ue=\E[m:md@:mh@:tc=cons25: +cons50|ansil|ansi80x50:\ + :li#50:tc=cons25: +cons50-m|ansil-mono|ansi80x50-mono:\ + :li#50:tc=cons25-m: +# 80x25 ISO 8859-1 FreeBSD console +cons25l1|cons25-iso8859-1:\ + :ac=l\215m\216k\214j\213u\226t\225v\227w\230q\222x\231n\217o\220s\224p\221r\223`\201a\202f\207g\210~\237.^Y-^X+\253,\273I\247y\232z\233:\ + :tc=cons25w: +cons25l1-m|cons25-iso8859-1-mono:\ + :pa@:Co@:Sf@:Sb@:op@:us=\E[4m:ue=\E[m:md@:mh@:tc=cons25l1: +# 80x50 ISO 8859-1 FreeBSD console +cons50l1|cons50-iso8859-1:\ + :li#50:tc=cons25l1: +cons50l1-m|cons50-iso8859-1-mono:\ + :li#50:tc=cons25l1-m: +dosansi|ANSI.SYS standard crt|ansi:\ + :am:bs:ce=\E[K:cl=\E[2J:cm=\E[%i%d;%dH:co#80:\ + :do=\E[B:li#25:mi:nd=\E[C:\ + :se=\E[m:so=\E[7m:up=\E[A:us=\E[4m:ue=\E[m:\ + :md=\E[1m:mh=\E[m:mb=\E[5m:me=\E[m:\ + :kh=\EG:kb=^h:ku=\EH:kd=\EP:kl=\EK:kr=\EM:\ + :k1=\E;:k2=\E<:k3=\E=:k4=\E>:k5=\E?:\ + :k6=\E@:k7=\EA:k8=\EB:k9=\EC:k0=\ED: + +# Note: this entry describes the "native" +# capabilities of the PC monochrome display, without ANY emulation; most +# communications packages (but NOT PC/IX connect) do some kind of emulation. +pc|ibmpc|ibm pc PC/IX:\ + :li#24:co#80:am:bs:bw:eo:\ + :cd=\E[J:ce=\E[K:cl=\Ec:cm=\E[%i%2;%2H:do=\E[B:ho=\E[;H:\ + :nd=\E[C:up=\E[A:so=\E[7m:se=\E[0m:us=\E[4m:ue=\E[0m: +pc3mono|IBM PC 386BSD Console with monochrome monitor:\ + :so=\E[0;1r\E[m:tc=pc3: +pc3|ibmpc3|IBM PC 386BSD Console:\ + :Co#8:\ + :DO=\E[%dB:\ + :F1=\E[W:\ + :F2=\E[X:\ + :K1=\E[H:\ + :K2=\E[I:\ + :K3=\E[E:\ + :K4=\E[F:\ + :K5=\E[G:\ + :LE=\E[%dD:\ + :RI=\E[%dC:\ + :Sb=\E[1;%dx:\ + :Sf=\E[2;%dx:\ + :UP=\E[%dA:\ + :ac=l\332m\300k\277j\331u\264t\303v\301w\302q\304x\263n\305`^Da\260f\370g\361~\371.^Y-^Xh\261I^U0\333y\363z\362:\ + :am:\ + :bl=^G:\ + :bs:\ + :cb=\E[1K:\ + :cd=\E[J:\ + :ce=\E[K:\ + :cl=\E[H\E[J:\ + :cm=\E[%i%d;%dH:\ + :co#80:\ + :cr=^M:\ + :do=\E[B:\ + :ho=\E[H:\ + :is=\E[m:\ + :it#8:\ + :k;=\E[V:\ + :k1=\E[M:\ + :k2=\E[N:\ + :k3=\E[O:\ + :k4=\E[P:\ + :k5=\E[Q:\ + :k6=\E[R:\ + :k7=\E[S:\ + :k8=\E[T:\ + :k9=\E[U:\ + :kD=\177:\ + :@7=\E[F:\ + :kN=\E[G:\ + :kP=\E[I:\ + :kb=\177:\ + :kd=\E[B:\ + :kh=\E[H:\ + :kl=\E[D:\ + :kr=\E[C:\ + :ku=\E[A:\ + :le=^H:\ + :li#25:\ + :ms:\ + :nd=\E[C:\ + :op=\E[x:\ + :pa#64:\ + :rs=\E[m:\ + :se=\E[m:\ + :sf=\E[S:\ + :so=\E[7;1r\E[7m:\ + :sr=\E[T:\ + :ta=^I:\ + :te=\E[m:\ + :ti=\E[m:\ + :up=\E[A:\ + :ut: +xterm|vs100|xterm terminal emulator (X window system):\ + :li#65:\ + :kh=\EOH:@7=\EOF:kb=^H:kD=^?:\ + :k1=\EOP:k2=\EOQ:k3=\EOR:k4=\EOS:km:\ + :is=\E>\E[?1;3;4;5l\E[?7;8h\E[1;65r\E[65;1H:\ + :rs=\E>\E[?1;3;4;5l\E[?7;8h:\ + :tc=vt220: +xterms|vs100s|xterm terminal emulator (small)(X window system):\ + :is=\E>\E[?1;3;4;5l\E[?7;8h\E[1;24r\E[24;1H:\ + :li#24:tc=xterm: diff --git a/release/picobsd/custom/mfsinfo b/release/picobsd/custom/mfsinfo new file mode 100644 index 0000000..e53f171 --- /dev/null +++ b/release/picobsd/custom/mfsinfo @@ -0,0 +1,17 @@ +# Information about mfs parameters +# Size of mfs in kilobytes +MFS_SIZE = 3500 + +# Name of init program +INIT = init + +# Number of bytes per inode in mfs +MFS_INODES = 4096 + +# Number of bytes per inode in floppy image +FLOPPY_INODES = 32768 + +# Suffix to tack on somewhere +suffix = -C + +PASSWD = YES |