summaryrefslogtreecommitdiffstats
path: root/etc/Makefile
Commit message (Collapse)AuthorAgeFilesLines
* MFC r289421, r293037, r294773, and r294884.cy2016-02-101-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ntp leap-leapseconds support. r289421: Add default leap-seconds file. This should help ntp networks get the leap second date correct Updates to the file can be obtained from ftp://time.nist.gov/pub/ or ftp://tycho.usno.navy.mil/pub/ntp/. r293037: Update leap-seconds to latest. This will satisfy the ntpd leap-second version check. r294773: Add support for automatic leap-second file updates. The working copy of leapfile resides in /var/dbntpd.leap-seconds.list. /etc/ntp/leap-seconds (periodically updated from ftp://time.nist.gov/pub/ or ftp://tycho.usno.navy.mil/pub/ntp/) contains the master copy should automatic leapfile updates be disabled (default). Automatic leapfile updates are fetched from $ntp_leapfile_sources, defaulting to https://www.ietf.org/timezones/data/leap-seconds.list, within $ntp_leapfile_expiry_days (default 30 days) from leap-seconds file expiry. Automatic updates can be enabled by setting $daily_ntpd_leapfile_enable="YES" in periodic.conf. To avoid congesting the ntp leapfile source the automatic update randomized by default but can be disabled through daily_ntpd_avoid_congestion="NO" in periodic.conf. r294884: Allow specification of fetch options for ntp leap-seconds fetch. Approved by: re (gjb)
* o Fix SCTP ICMPv6 error message vulnerability. [SA-16:01.sctp]glebius2016-01-141-4/+5
| | | | | | | | | | | | | o Fix Linux compatibility layer incorrect futex handling. [SA-16:03.linux] o Fix Linux compatibility layer setgroups(2) system call. [SA-16:04.linux] o Fix TCP MD5 signature denial of service. [SA-16:05.tcp] o Fix insecure default bsnmpd.conf permissions. [SA-16:06.bsnmpd] Security: FreeBSD-SA-16:01.sctp, CVE-2016-1879 Security: FreeBSD-SA-16:03.linux, CVE-2016-1880 Security: FreeBSD-SA-16:04.linux, CVE-2016-1881 Security: FreeBSD-SA-16:05.tcp, CVE-2016-1882 Security: FreeBSD-SA-16:06.bsnmpd, CVE-2015-5677
* MFC r290083:bdrewery2015-12-041-10/+10
| | | | Use more appropriate ${SHAREDIR} rather than /usr/share.
* MFC r279248: Unconditionally install debug directory hierarchyemaste2015-09-241-8/+3
| | | | | | | | | This avoids various failure modes (e.g., when building and installing a single binary with debug data on a system that otherwise does not have it enabled). It is also consistent with the way other directory hierarchies are handled (e.g. share/man).
* Revert r284516, which broke the build in a way I do not fullygjb2015-06-171-2/+0
| | | | | | understand yet. I'll redo this MFC after investigation. Sponsored by: The FreeBSD Foundation
* MFC r283989:gjb2015-06-171-0/+2
| | | | | | | Implement endian-aware services_mkdb(8) in the 'distribute' target. Sponsored by: The FreeBSD Foundation
* MFC r277627,r277650,r282059,r283056,r283840,r283845:ngie2015-05-311-4/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r277627 (by will): Add routing_test:static_ipv6_loopback_route_for_each_fib. It tests that all FIBs get a static IPv6 loopback route. Submitted by: asomers Sponsored by: Spectra Logic MFSpectraBSD: 1048456 on 2014/03/13 1114523 on 2015/01/23 r277650 (by will): Add tests/etc/rc.d to mtree. Submitted by: stefanf MFC with: 277627 r282059: Move etc/tests/rc.d to etc/rc.d/tests to match the directory layout jmmv@ documented and implemented in other areas of the FreeBSD tree r283056: Move all test integration pieces for etc/ from etc/ to tests/ This is being done to fix breakage with make distribution with read-only source trees as make distribution doesn't use make obj like building tests/ does in all cases Reported by: Wolfgang Zenker <wolfgang@lyxys.ka.sub.org> Suggested by: jhb r283840: Remove empty tests directory r283845: Append to SUBDIR, not set it Pointyhat to: ngie
* Forced commit to note that the previous commit to this file included thengie2015-03-241-1/+1
| | | | | | | | | | | | | | | | | | | | | | | following MFC as well: MFC 278251: Honor the following flags for items that can be conditionalized out of the build/install without disrupting other dependent services (see r278249, et al): - MK_LOCATE - MK_MAN - MK_NLS - MK_OPENSSL - MK_PKGBOOTSTRAP - MK_SENDMAIL Additional flags need to be handled in etc/Makefile, but it requires refactoring the relevant scripts in etc/rc.d/* MFC after: 3 weeks Sponsored by: EMC / Isilon Storage Division
* MFC r278135,r278202:ngie2015-03-241-3/+18
| | | | | | | | | | | | | | | | | r278135 (by amdmi3): - Remove more files when MK_USB == no Reviewed by: ngie Approved by: ngie Differential Revision: D1600 r278202: Clean up more usb related files when MK_USB == no when dealing with manpages, libraries, and binaries Sponsored by: EMC / Isilon Storage Division
* MFC r278192:ngie2015-03-011-2/+8
| | | | | | | | | | | | | | | | Add the following options to enable/disable several features in the base system WITHOUT_BOOTPARAMD - bootparamd WITHOUT_BOOTPD - bootpd WITHOUT_FINGER - finger, fingerd WITHOUT_FTP - ftp, ftpd WITHOUT_INETD - inetd WITHOUT_RBOOTD - rbootd WITHOUT_TCP_WRAPPERS - tcpd, et al WITHOUT_TFTP - tftp, tftp-server WITHOUT_TIMED - timed Sponsored by: EMC / Isilon Storage Division
* MFC r277728:ngie2015-02-111-2/+7
| | | | | | | | r277728: Add MK_AUTOFS knob for building and installing autofs(4), et al Sponsored by: EMC / Isilon Storage Division
* MFC r277541:ngie2015-02-021-1/+4
| | | | | | | | | | | | | r277541: Add sample log rotation support for opensm Up to 7 archives of the log will be kept (just for consistency with the other log rotation rules) PR: 196788 Reviewed by: hselasky Sponsored by: EMC / Isilon Storage Division
* MFC r275907:ngie2015-01-201-1/+3
| | | | | | | | | | | | | | | | | | | | r275907 (by ngie): Fix building/installing tests when TESTSBASE != /usr/tests The work in r258233 hardcoded the assumption that tests was the last component of the tests tree by pushing tests as an explicit prefix for the paths in BSD.tests.dist and /usr was the prefix for all tests, per BSD.usr.dist and all of the mtree calls used in Makefile.inc1. This assumption breaks if/when one provides a custom TESTSBASE "prefix", e.g. TESTSBASE=/mytests . One thing that r258233 did properly though was remove "/usr/tests" creation from BSD.usr.dist -- that should have not been there in the first place. That was an "oops" on my part for the work that was originally committed in r241823 Phabric: D1301 Reviewed by: imp Sponsored by: EMC / Isilon Storage Division
* Define NO_TESTS instead of WITHOUT_TESTS for the etc/gjb2014-09-141-1/+1
| | | | | | | | | | 'distribute' target to fix the WITH_TESTS=1 build. This is a direct commit to stable/10. Submitted by: ngie Approved by: re (rodrigc) Sponsored by: The FreeBSD Foundation
* MFC r270096:trasz2014-08-311-1/+3
| | | | | | | | | | | | | Bring in the new automounter, similar to what's provided in most other UNIX systems, eg. MacOS X and Solaris. It uses Sun-compatible map format, has proper kernel support, and LDAP integration. There are still a few outstanding problems; they will be fixed shortly. Reviewed by: allanjude@, emaste@, kib@, wblock@ (earlier versions) Phabric: D523 Relnotes: yes Sponsored by: The FreeBSD Foundation
* Use 'WITHOUT_TESTS=1' instead of 'MK_TESTS=no' in thegjb2014-08-221-1/+1
| | | | | | | | | | 'distribute' target of etc/Makefile, because we do not allow command-line use of 'make MK_TESTS=no' in stable/10. This fixes a regression introduced in r270187 that causes the release build to fail, and a direct commit to stable/10. Sponsored by: The FreeBSD Foundation
* MFC r266473,267331,267511:ian2014-08-191-1/+4
| | | | | | | | | | | | | | | | Use an intermediate target to associate with _SUBDIR which is marked .MAKE this allows make -n to do tree walks as expected without doing anything else (as intended). Use prefix _sub. to help avoid conflict with any real target. Put the test suite in its own tests.txz distribution file. Force all the contents of /usr/tests to go into a separate distribution file so that users of binary releases can easily choose to not install Create a mechanism for providing fine-grained build order dependencies during SUBDIR_PARALLEL builds. This augments the coarse .WAIT mechanism, which is still useful if you've got a situation such as "almost everything depends on A and B".
* Merge r267482,r267483,r267486,r267577,r267671,r267672 from head:gavin2014-06-221-1/+0
| | | | | Remove send-pr and fix up all references to it. Replace it with a stub send-pr directing people towards the web site.
* MFC r264741: Add placeholder Kyuafiles for various top-level hierarchies.jmmv2014-04-281-0/+4
| | | | This is "make tinderbox" clean.
* MFC r264420:bdrewery2014-04-151-2/+0
| | | | Always install pkg.conf. Don't depend on MK_PKGBOOTSTRAP.
* Plug the ATF tests into the build.jmmv2013-12-281-1/+1
| | | | | | | | | | | | This is a MFC into stable/10 of: - r257849 Add libatf-c++ to the prebuild libs. - r257853 Build and install the atf tests. - r258233 Move all atf directories to the tests mtree. - r258285 Fix the build of some ATF tests. This change is "make tinderbox" clean on ref10-amd64 with the default settings of WITHOUT_TESTS. It is likely for the WITH_TESTS build to still be broken because not all relevant changes have been merged yet.
* Set up the /usr/tests hierarchy.jmmv2013-12-281-0/+6
| | | | | | | | | | | | | | | | | This is a MFC of the following into stable/10: - r257097 Set up the /usr/tests hierarchy. - r257098 Add missing WITHOUTTESTS file. - r257100 Add a tests(7) manual page. - r257105 Disable WITHTESTS= for now. - r257848 Fix buildworld when WITHTESTS is enabled. - r257850 Subsume the functionality of MKATF into MKTESTS. - r257851 Handle the removal of the test suite when WITHOUTTESTS=yes. - r257852 Install category Kyuafiles from their category directories. - r258232 Install BSD.tests.mtree when MKTESTS is yes. Note that building with WITH_TESTS is still broken at this point (and hence why WITHOUT_TESTS is the set as the default). Subsequent pullups will fix the remaining issues.
* MFC r257344,r257403:bdrewery2013-11-031-1/+0
| | | | | | | Move /etc/keys to /usr/share/keys where users are less likely to modify them. Approved by: bapt Approved by: re (gjb)
* MFC: r256770,r257142,r257145,r257146,r257147,r257148,bdrewery2013-10-291-0/+4
| | | | | | | | | | | | | | | | | | | | | r257149,r257150,r257158,r257159,r257164,r257168, r257193 - Support checking signature for pkg bootstrap from remote and for 'pkg add ./pkg.txz' - Be verbose on where pkg is being bootstrapped from. - Add support for reading configuration files from /etc/pkg. For now only /etc/pkg/FreeBSD.conf is supported. - Add test package signing key fingerprint into /etc/keys/pkg/trusted. - Disable fingerprint checking by default for now as the official packages are not yet signed. Approved by: bapt Approved by: re (glebius)
* MFC 256365rpaulo2013-10-121-3/+0
| | | | | | Remove most of the ATF tools and the _atf user. Approved by: re
* Remove BIND.des2013-09-301-20/+0
| | | | Approved by: re (gjb)
* Replace the unused /etc/unbound directory with a symlink to /var/unbound.des2013-09-241-0/+5
| | | | Approved by: re (blanket)
* The correct variable is apparently MACHINE_ARCH, not TARGET_ARCH.des2013-09-091-1/+1
| | | | Approved by: re (blanket)
* Remove unneeded mappings from libmap32.conf. Move it up one level anddes2013-09-091-2/+2
| | | | | | | install it on powerpc64 in addition to amd64. Reviewed by: kib Approved by: re (blanket)
* Add a stock libmap32.conf for amd64. The first two lines have no effectdes2013-09-081-0/+4
| | | | | | | | | | | except to document the hardcoded standard library search path for 32-bit binaries. The third line performs the equivalent substitution for the private library directory. Ironically, these entries rely on functionality which is only available in the COMPAT_32BIT version of rtld-elf. Approved by: re (blanket)
* Include /usr/local/etc/libmap.d/ by default.jlh2013-08-011-0/+1
| | | | | | | PR: 180568 Reviewed by: bapt Obtained from: kib MFC after: 3 days
* Add a new knob WITH_DEBUG_FILES to control the building of standaloneemaste2013-06-071-0/+6
| | | | | | | | | | | | | | | | debug files for userland programs and libraries. The "-g" debug flag is automatically applied when WITH_DEBUG_FILES is set. The debug files are now named ${prog}.debug and ${shlib}.debug for consistency with other systems and documentation. In addition they are installed under /usr/lib/debug, to simplify the process of installing them if needed after a crash. Users of bsd.{prog,lib}.mk outside of the base system place the standalone debug files in a .debug subdirectory. GDB automatically searches both of these directories for standalone debug files. Thanks to everyone who contributed changes, review, and testing during development.
* Make an attempt to detect missing MTREE files in distrib-dirs. Notbrooks2013-04-301-1/+1
| | | | | | | | perfect, but this is just a developer seatbelt. PR: conf/176897 Submitted by: Garrett Cooper <yaneurabeya@gmail.com> MFC after: 1 week
* Back out prev. change preventing /sys/sys symlink. It appears my installache2013-02-221-1/+1
| | | | was not very recent and not acts like 'ln -h'
* In 'make hierarchy' don't install /sys/sys pointing to usr/src/sysache2013-02-171-1/+1
| | | | but just /sys pointing there
* When adding the directory ownership to the METALOG do it by name ratherbrooks2013-01-301-3/+4
| | | | | | | | than number as is done in install so as to differ binding of names to ids. Remove the -W flag from the mtree command so that the correct user and group is recorded rather than the default.
* Log the addition of login.conf.db, passwd, pwd.db, and spwd.db via cat -l.brooks2013-01-291-3/+15
| | | | Make cat a bootstrap tool to facilitate this.
* Introduce a new option -DNO_ROOT that allows install and distributionbrooks2013-01-221-0/+17
| | | | | | | | | | | | | | | targets to be run without root privilege. Information about ownership, group, flags, and suid bits are stored in the file specified by METALOG which defaults to ${DESTDIR}/METALOG. This file can be used in conjunction with bsdtar or makefs to generate archives or file system images with correct permissions. The packageworld target has been altered to use this metadata allowing non-root releases (subject to further changes in release/Makefile.) Sponsored by: DARPA, AFRL Reviewed by: ian, ray
* Replace all known uses of ln in the build process with appropriatebrooks2013-01-211-7/+10
| | | | | | | | install -l invocations via new INSTALL_LINK and INSTALL_SYMLINK variables. Sponsored by: DARPA, AFRL Reviewed by: ian, ray, rpaulo
* In r245571, "rm -rf <foo>; ln -s <bar> <foo>" needed to be replaced withbrooks2013-01-171-7/+7
| | | | | | | | | "ln -sfh <bar> <foo>" or the links would fail when a valid link to a directly was in place at <foo>. Reported by: peter Tested by: peter Pointy hat to: brooks
* In preparation for logging metadata about each filesystem objectbrooks2013-01-171-19/+13
| | | | | | | | | | | | refactor the link section of distrib-dirs to alwasy install to a full path (the link contents remain relative as they should). Eliminate the use of the "rm -r[f] <foo>; ln -s <bar> <foo>" pattern in favor of "ln -sf <bar> <foo>". None of these links could be directories on a system installed in the last decade. Sponsored by: DARPA, AFRL Reviewed by: mtree
* Rework the mtree portion of etc/Makefile's distrib-dirs target to runbrooks2013-01-171-12/+23
| | | | | | | | mtree in a shell loop so there is only one mtree commandline. Move the implementation of LOCAL_MTREE into etc/Makefile. Sponsored by: DARPA, AFRL Reviewed by: mtree :)
* Add an option DB_FROM_SRC to use src/etc's user/group databases whenbrooks2013-01-151-8/+10
| | | | | | | | | | | | | installing. This allows things like running installworld for 10-CURRENT on a 9.0-RELEASE system without adding extra users and groups to the passwd and group files. To prevent potentially risky uid/gid mismatches on systems with non-standard local values, require that DESTDIR be set if DB_FROM_SRC is set. Sponsored by: DARPA, AFRL Reviewed by: peter
* Revert r245316. Systems with non-standard uids/gids are more prevalentbrooks2013-01-111-10/+8
| | | | | that I'd feared. Discussion is ongoing about the scope of a safer solution.
* Use the -N option to install and nmtree to eliminate the need for thebrooks2013-01-111-8/+10
| | | | | | checks for missing users and groups. Sponsored by: DARPA, AFRL
* Using set -x produces output on stderr instead of stdout.eadler2012-11-151-4/+2
| | | | | | | | | | | It also doesn't work with make -s. Prefer the use of builtin make features. PR: misc/126312 Reported by: Nejc Skoberne <nejc@skoberne.net> Submitted by: bdrewery Approved by: cperciva MFC after: 1 week
* Add ATF to the build. This is may be a bit rought around the egdes,marcel2012-10-221-0/+3
| | | | | | | | | | | | | | | | | but committing it helps to get everyone on the same page and makes sure we make progress. Tinderbox breakages that are the result of this commit are entirely the committer's fault -- in other words: buildworld testing on amd64 only. Credits follow: Submitted by: Garrett Cooper <yanegomi@gmail.com> Sponsored by: Isilon Systems Based on work by: keramida@ Thanks to: gnn@, mdf@, mlaier@, sjg@ Special thanks to: keramida@
* Finally nuke auth.conf, nine years after it was deprecated. The onlydes2012-06-121-2/+1
| | | | | | | | | | | | | | | | | | thing it was still used for was to set the "global default" password hash. Since the stock auth.conf contained nothing but comments, the global default was actually the first algorithm in crypt(3)'s list, which happens to be DES; I take the fact that nobody noticed as proof that it was not used outside of crypt(3). The only other use in our tree was in the Kerberos support code in in tinyware's passwd(1). I removed that code in an earlier commit; it would not have compiled anyway, as it only supported Kerberos IV. The auth_getval() function is now a stub that always returns NULL, which has the same effect as a functional auth_getval() with an empty auth.conf. MFC after: 3 weeks
* Style: prefer the use of line continuations to +=eadler2012-02-171-42/+42
| | | | | | Requested by: marcel, dougb, bde Approved by: cperciva MFC after: 3 days
* Make etc/Makefile more conflict resistanteadler2012-02-091-12/+42
| | | | | | | PR: conf/163789 Submitted by: gcooper (iXsystems) Approved by: cperciva MFC after: 3 days
OpenPOWER on IntegriCloud