summaryrefslogtreecommitdiffstats
path: root/etc/defaults/rc.conf
Commit message (Collapse)AuthorAgeFilesLines
...
* Mention that basic network options now include firewall/security options asjhb2000-08-171-1/+1
| | | | well.
* Add a sample ifconfig entry for an IPX address family address, to givesheldonh2000-08-151-0/+1
| | | | | | | | | IPX folks a fighting chance of figuring this out themselves. I can't work out how to document this carefully in rc.conf(5), but this ought to close the PR. PR: 17904 Reported by: John Gelnaw <jeg@hawk.circa.ufl.edu>
* Add an rc.conf knob "ldconfig_insecure" to disable ldconfig'sjdp2000-08-111-0/+1
| | | | | | security checks. Set the default to NO, i.e., secure. Submitted by: Maxime Henrion <mhenrion@cybercable.fr>
* make sshd follow the pattern of enable, program, flags like everybillf2000-08-101-1/+1
| | | | other entry does.
* Allow a ppp_user specification to run ppp at startupbrian2000-08-101-0/+1
| | | | PR: 20258
* Change the defaults for portmap, sendmail and inetd to be not running them.eivind2000-07-281-3/+3
| | | | | | | | | | | | Make sysinstall override this on install, so the effective behavioural change for a newly installed system is null. Overall, this makes a system with an empty /etc/rc.conf not run any network services, and makes the FreeBSD-provided network services that are running visible in /etc/rc.conf (instead of making people look through /etc/defaults/rc.conf to find the things they need to disable to secure the system.) Reviewed by: jhb Discussed with: The usual cabal
* Add weak_mountd_authentication, which is examined in /etc/rc.network.asmodai2000-07-231-0/+1
| | | | | Setting this to YES instead of its default NO, causes mountd to be passed the -n flag, which allow non-root users mount requests to be served.
* Add entropy caching. With this, some entropy is cached at shutdownmarkm2000-07-171-0/+2
| | | | | | | | time, and this is used to reseed the random number generator at boot time. NOTE - this has no hope of working if you halt(); you need to execute rc.shutdown to get the entropy stash.
* Clean up all the old setup code for the old /dev/random. This will bemarkm2000-06-251-1/+0
| | | | revisited when the new /dev/random is done.
* Introduce /etc/defaults/periodic.conf, similar in concept to rc.conf.brian2000-06-231-10/+0
| | | | | | | The only change in the default functionality should be that the output reports are slightly more verbose WRT files deleted. Not objected to by: freebsd-arch
* Add ip_portrange_first and ip_portrange_last rc.conf/rc.networkdillon2000-06-221-2/+4
| | | | | | | options. This allows you to set the standard dynamic port assignment range prior to any network daemons (like named) starting up, necessary if you are also using a firewall to restrict lower ports. will be MFC'd in a few days
* Don't include /compat/linux/tmp in $clean_daily_dirs as it's usuallybrian2000-06-201-1/+1
| | | | | | a link to /tmp Pointed out by: des
* Add clear_daily_* variablesbrian2000-06-091-0/+9
|
* Add suggested comment for TCP_DROP_SYNFIN and TCP_RESTRICT_RSTwilko2000-05-271-0/+2
| | | | | PR: conf/18124 Submitted by: Matt Heckaman <matt@arpa.mail.net>
* Fix misleading comment.wollman2000-05-181-1/+1
|
* Add ipsec_enable and ipsec_file options to run IPSEC's setkey programdillon2000-05-161-0/+2
| | | | with the specified configuration file at the appropriate time.
* Add firewall_logging knob to enable/disablle events logging, disabledache2000-05-061-0/+1
| | | | | by default. Needed mainly for ipfw kernel module to enable logging disabled there.
* Add to defaults/rc.conf a new function source_rc_confs which rcsheldonh2000-04-271-12/+23
| | | | | | | | | | | | | | | | | scripts may use to source safely overrides in ${rc_conf_files} files. This protects users who insist on the bad practice of copying /etc/defaults/rc.conf to /etc/rc.conf from a recursive loop that exhausts available file descriptors. Several people have expressed interest in breaking this function out into its own shell script. Anyone who wants to embark on such an undertaking would do well to study the attributed PR. PR: 17595 Reported by: adrian Submitted by: Doug Barton <Doug@gorean.org>
* Enable etc/defaults/pccard.conf which is default configuration fileiwasaki2000-04-031-1/+1
| | | | | | | | | | for pccardd. Please install /etc/defaults/pccard.conf and update /etc/defaults/rc.conf as well. Note that old pccard.conf.sample still remains for while but no longer to be maintained. Reviewed by: imp, -mobile ML and nomads ML in Japan.
* Fix english.shin2000-03-291-1/+1
| | | | Specified by: sheldonh
* Add a configuration options which enable/disable IPv4 mapped IPv6 addrshin2000-03-281-0/+2
| | | | | | support. Suggested and Reviewed by: ume
* Add a sysctl to specify the amount of UDP receive space NFS shoulddillon2000-03-271-0/+1
| | | | | | | | | | | reserve, in maximal NFS packets. Originally only 2 packets worth of space was reserved. The default is now 4, which appears to greatly improve performance for slow to mid-speed machines on gigabit networks. Add documentation and correct some prior documentation. Problem Researched by: Andrew Gallatin <gallatin@cs.duke.edu> Approved by: jkh
* Make syslogd boot -s by default, which prevents Bad People from filling upbillf2000-03-201-1/+1
| | | | | | | | your diskspace. PR: conf/15737 Submitted by: Kevin Day <toasty@dragondata.com> (PR) Nick Johnson <freebsd@spatula.net> (on -current)
* IPv6 related configuration updates.shin2000-03-121-1/+16
| | | | | | | | | | | | | | | - 6to4(stf) interface configuration. - Static route configuration. - Comment additions. - Replaced a still existed '@' to '%' in IPv6 scoped addr format. (This became necessary as previous IPv6 scoped addr format change.) Much thanks to ume, who helped me reviewing, testing, and finding problems with these changes. Approved by: jkh Reviewed by: ume
* Change default of rtadvd to "YES".shin2000-03-091-1/+2
| | | | | | Also add IPv6 example for "ifconfig_ifname_alias". Suggested by: bmah@CA.Sandia.GOV
* Add userland tweakables for OpenSSH and OpenSSL.markm2000-02-241-0/+3
|
* Add IPv6 configuration scripts.shin2000-02-231-0/+28
| | | | | | | | | | | Initial version created by, and kindly much tested by: bmah@CA.Sandia.GOV (Bruce A. Mah) Approved by: jkh Reviewed by: bmah@CA.Sandia.GOV (Bruce A. Mah), Ollivier Robert <roberto@keltia.freenix.fr> Obtained from: KAME project
* PS/2 mice are a lot more common than serial mice now; use /dev/psm0jkh2000-02-191-1/+1
| | | | as default rather than /dev/cuaa0
* Add a firewall_flags option that is used when ipfw processes a file. It allowspaul2000-02-061-0/+1
| | | | | | | you to run a preprocessor, such as m4, so that you can use macros in your rules file. Approved by: jkh
* Add an explicit warning against copying this file into /etc/, sincesheldonh1999-12-211-0/+5
| | | | | work-arounds for the ".: Out of file descriptors" problem (see PR 13724) are taking longer than expected to come to fruition.
* Bye bye xntpd, enter ntp.roberto1999-12-161-3/+3
| | | | The variable names haven't changed for compapatibility reasons.
* Add an enable_osf1 knob to the alpha startup codegallatin1999-12-151-0/+1
|
* Now that pccardc beep actually works, add knob for it in rc.conf/rc.pccardimp1999-12-021-0/+1
| | | | Submitted by: sanpei@sanpei.org (MIHIRA-san Yoshiro)
* we all like to 'Use' ppp, but this should be 'User'alfred1999-11-241-1/+1
| | | | Pointed out by: dcs
* Remove man_locales - goes to manpath.configache1999-11-231-1/+0
|
* Add pppoed startup optionsbrian1999-11-231-0/+4
|
* Add single_mountd_enable hook to run mountd but not NFS serverache1999-11-141-0/+1
| | | | Needed for machine with CFS but without real NFS
* Remove "-k" (kernel-arch) as "i386" is not appropriate on the Alpha.obrien1999-10-161-1/+1
| | | | | Also remove the "-d" domain option, as if someone is savey enough to want this, they are savey enought to make a custom amd_flags in /etc/rc.conf.
* If dumpdev exists, it's automatically enabled. Change comment to reflect.billf1999-10-011-1/+1
|
* Remove the "vinum_drives" rc.conf knob. According to Greg <grog@lemis.com>jkoshy1999-09-221-2/+0
| | | | | | this is no longer the right way to start Vinum unless you are doing some kind of maintenance, and that's not the sort of thing that would go into rc.conf.
* /emulation/binary compatibility/obrien1999-09-151-1/+1
|
* Fix disordering introduced in my previous commit.des1999-09-131-1/+1
| | | | Pointed out by: bde
* Add the net.inet.tcp.restrict_rst and net.inet.tcp.drop_synfin sysctldes1999-09-121-0/+3
| | | | | variables, conditional on the TCP_RESTRICT_RST and TCP_DROP_SYNFIN kernel options, respectively. See the comments in LINT for details.
* Add man_locales knob to specify localized man subdirs for makewhatis andache1999-09-111-0/+1
| | | | catman
* set check_quotas="YES" as the default.cpiazza1999-09-061-1/+1
| | | | | | PR: 13603 Submitted by: Alex Perel <veers@distributed.net> Reviewed by: billf
* $Id$ -> $FreeBSD$peter1999-08-271-1/+1
|
* ppp_alias -> ppp_natbrian1999-08-221-2/+2
| | | | Submitted by: Josef L. Karthauser <joe@FreeBSD.org.uk>
* s/Yes/YES/g. `tcp_extensions''s comment implied "Yes" was a valid valueobrien1999-08-141-2/+2
| | | | | | for turning on the feature. Which is wrong. Submitted by: bde
* Hopefully clarify "log_in_vain" knob's comment.obrien1999-08-141-2/+2
| | | | Reviewed by: bde, sheldonh, andreas
* Use proper capitalization.obrien1999-08-141-2/+2
|
OpenPOWER on IntegriCloud