summaryrefslogtreecommitdiffstats
path: root/etc/defaults
Commit message (Collapse)AuthorAgeFilesLines
* Enable the check for negative permissions (the group on a file can't dobrooks2011-02-241-1/+1
| | | | | | something "everyone" can) by default. X-MFC after: never
* Replace nfs4 with newnfs in netfs_types. nfs4 was removed in r192578 andjh2011-01-091-1/+1
| | | | | | | | mount(8) has supported newnfs since r192930. PR: conf/153655 Submitted by: Anonymous <swell.k@gmail.com> MFC after: 3 weeks
* Add gptboot_enable rc variable, which allows to turn gptboot reporting off inpjd2010-11-241-0/+2
| | | | | | | | case user wants to implement his own actions and doesn't want the attributes to vanish. Obtained from: Wheel Systems Sp. z o.o. http://www.wheelsystems.com MFC after: 3 days
* Add an (off by default) check for negative permissions (where thebrooks2010-11-131-0/+3
| | | | | | | | group on a object has less permissions that everyone). These permissions will not work reliably over NFS if you have more than 14 supplemental groups and are usually not what you mean. MFC after: 1 week
* Commit the rest of r213270.emaste2010-09-291-0/+1
| | | | Thanks to Anonymous <swell dot k at gmail.com> for spotting this.
* Split $ipv6_prefer into $ip6addrctl_policy and $ipv6_activate_all_interfaces.hrs2010-09-131-1/+6
| | | | | | | | | | | | | | | | | | | The $ip6addrctl_policy is a variable to choose a pre-defined address selection policy set by ip6addrctl(8). The keyword "ipv4_prefer" sets IPv4-preferred one described in Section 10.3, the keyword "ipv6_prefer" sets IPv6-preferred one in Section 2.1 in RFC 3484, respectively. When "AUTO" is specified, it attempts to read /etc/ip6addrctl.conf first. If it is found, it reads and installs it as a policy table. If not, either of the two pre-defined policy tables is chosen automatically according to $ipv6_activate_all_interfaces. When $ipv6_activate_all_interfaces=NO, interfaces which have no corresponding $ifconfig_IF_ipv6 is marked as IFDISABLED for security reason. The default values are ip6addrctl_policy=AUTO and ipv6_activate_all_interfaces=NO. Discussed with: ume and bz
* Add $ipv6_privacy to support net.inet6.ip6.use_tempaddr. Note that thishrs2010-09-131-0/+2
| | | | | | will be replaced with a per-IF version later. Based on: changes in r206408 by dougb
* Fix $ipv6_network_interfaces and set it as AUTO by default.hrs2010-09-131-1/+1
| | | | Based on: changes in r206408 by dougb
* Revert changes in r206408.hrs2010-09-131-5/+3
| | | | Discussed with: dougb, core.5, and core.6
* o Correct typo.maxim2010-08-251-1/+1
| | | | | Submitted by: Bojidara Marinchovska via -stable MFC after: 1 week
* Add a daily script to the periodic framework that reportsolli2010-08-051-0/+3
| | | | | | | | | | | | | | | | | | changes to the package database, i.e. any packages that have been added, updated or deleted in the past 24 hours. The format is intentionally simple and concise. That information is particularly useful on servers that are maintained by multiple administrators. When someone adds, updates or deletes a package, the others will see it in the daily periodic output. This script is disabled by default. PR: conf/113913 Submitted by: olli Approved by: des (mentor) MFC after: 3 weeks
* - Add a periodic script, which can be used to find installed ports' files withgabor2010-07-191-0/+3
| | | | | | | | mismatched checksum PR: conf/124641 Submitted by: Alex Kozlov <spam@rm-rf.kiev.ua> Approved by: delphij (mentor)
* Remove trailing white space. No functional changes.dougb2010-05-141-3/+3
|
* Better handling of ipv6_default_interface usingume2010-04-261-2/+2
| | | | | | | net.inet6.ip6.use_defaultzone=1. Now, it works IPv6 link-local unicast addresses as well as IPv6 link-local multicast addresses. MFC after: 1 week
* Use ubthidhci_enable="NO" to avoid the bootup warning.rpaulo2010-04-171-1/+1
| | | | | Submitted by: Jilles Tjoelker <jilles@stack.nl> MFC after: 3 days
* In case a user wants to configure only an IPv6 link-local addressdougb2010-04-171-0/+1
| | | | add an example that shows how to do it.
* Add rc.d/ubthidhci. This small script calls usbconfig(1) to change a USBrpaulo2010-04-091-0/+5
| | | | | | Bluetooth controller from HID mode to HCI mode. MFC after: 1 week
* Improve the handling of IPv6 configuration in rc.d. The ipv6_enabledougb2010-04-091-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and ipv6_ifconfig_<interface> options have already been deprecated, these changes do not alter that. With these changes any value set for ipv6_enable will emit a warning. In order to avoid a POLA violation for the deprecation of the option ipv6_enable=NO will still disable configuration for all interfaces other than lo0. ipv6_enable=YES will not have any effect, but will emit an additional warning. Support and warnings for this option will be removed in FreeBSD 10.x. Consistent with the current code, in order for IPv6 to be configured on an interface (other than lo0) an ifconfig_<interface>_ipv6 option will have to be added to /etc/rc.conf[.local]. 1. Clean up and minor optimizations for the following functions: ifconfig_up (the ipv6 elements) ipv6if ipv6_autoconfif get_if_var _ifconfig_getargs The cleanups generally were to move the "easy" tests earlier in the functions, and consolidate duplicate code. 2. Stop overloading ipv6_prefer with the ability to disable IPv6 configuration. 3. Remove noafif() which was only ever called from ipv6_autoconfif. Instead, simplify and integrate the tests into that function, and convert the test to use is_wired_interface() instead of listing wireless interfaces explicitly. 4. Integrate backwards compatibility for ipv6_ifconfig_<interface> into _ifconfig_getargs. This dramatically simplifies the code in all of the callers, and avoids a lot of other code duplication. 5. In rc.d/netoptions, add code for an ipv6_privacy option to use RFC 4193 style pseudo-random addresses (this is what windows does by default, FYI). 6. Add support for the [NO]RTADV options in ifconfig_getargs() and ipv6_autoconfif(). In the latter, include support for the explicit addition of [-]accept_rtadv in ifconfig_<interface>_ipv6 as is done in the current code. 7. In rc.d/netif add a warning if $ipv6_enable is set, and remove the set_rcvar_obsolete for it. Also remove the latter from rc.d/ip6addrctl. 8. In /etc/defaults/rc.conf: Add an example for RTADV configuration. Set ipv6_network_interfaces to AUTO. Switch ipv6_prefer to YES. If ipv6_enable is not set this will have no effect. Add a default for ipv6_privacy (NO). 9. Document all of this in rc.conf.5.
* Add .snap to daily_clean_tmps_ignore; /tmp/.snap ist not supposed tojoerg2010-03-231-1/+1
| | | | | | be auto-removed (and /tmp is a filesystem of its own now by default). MFC after: 3 days
* Redirect stdin from /dev/null when starting a jail:netchild2010-03-051-0/+1
| | | | | | | | | | | | | | | | | | | | At least in RELENG_7 this fixes some start problems for some programs from the ports. It is also more correct, as a jail shall not expect input (interactivity) from the jail-host. Revert the current behavior of starting jails in the background and make it optional only for the start of jails (jail_parallell_start=YES in rc.conf): - The stop can not be done in the background, the system needs to wait until everything is stopped correctly before it can reboot or power down. - The start should not be done in parallel by default, this not only breaks POLA for people comming from RELENG_x, it may also break a dependency chain with other scripts in the jail-host, which need to do some stuff after the jails are up and running (e.g. hardlinking a mysql socket from one jail into another one). Discussed on: freebsd-jails@
* Please welcome HAST - Highly Avalable Storage.pjd2010-02-181-0/+3
| | | | | | | | | | | | | | | | | | | | | | HAST allows to transparently store data on two physically separated machines connected over the TCP/IP network. HAST works in Primary-Secondary (Master-Backup, Master-Slave) configuration, which means that only one of the cluster nodes can be active at any given time. Only Primary node is able to handle I/O requests to HAST-managed devices. Currently HAST is limited to two cluster nodes in total. HAST operates on block level - it provides disk-like devices in /dev/hast/ directory for use by file systems and/or applications. Working on block level makes it transparent for file systems and applications. There in no difference between using HAST-provided device and raw disk, partition, etc. All of them are just regular GEOM providers in FreeBSD. For more information please consult hastd(8), hastctl(8) and hast.conf(5) manual pages, as well as http://wiki.FreeBSD.org/HAST. Sponsored by: FreeBSD Foundation Sponsored by: OMCnet Internet Service GmbH Sponsored by: TransIP BV
* Introduce new rc.conf variable firewall_coscripts. It can be used toemax2010-02-081-0/+2
| | | | | | | | | specify list of executables and/or rc scripts that should be executed after firewall starts/stops. Submitted by: Yuri Kurenkov <y dot kurenkov at init dot ru> Reviewed by: rhodes, rc@ MFC after: 1 week
* Add rc.d script for the rtsold(8) daemon.ume2010-02-031-0/+4
| | | | | | | | | | The rtsol(8) handles just one RA then exit. So, the OtherConfig flag may not be handled well by rtsol(8) in the environment where there are multiple RA servers on the segment. In such case, rtsold(8) will be your friend. Reviewed by: hrs MFC after: 2 weeks
* Remove the rules using 'me6'. Now, 'me' matches both any IPv6 addressume2010-01-171-3/+1
| | | | | | | and any IPv4 address configured on an interface in the system. Reviewed by: David Horn <dhorn2000__at__gmail.com>, luigi, qingli MFC after: 2 weeks
* Expose the upper 256 ptys in the default devfs rules. I should have updatedjhb2010-01-041-0/+16
| | | | | | | this when expanding the old pty(4) driver to use 512 ptys by default. This is more important for 7.x. MFC after: 1 week
* With the introduction of named_conf the -c example in named_flagsdougb2010-01-011-1/+1
| | | | | is no longer necessary or desirable. Update the comment to indicate that _flags should be used for options other than -u and -c.
* Add support for configuring vlan(4) interfaces as child devices similar tojhb2009-12-291-0/+2
| | | | | | | | | | | | | | wlan(4) interfaces. vlan(4) interfaces are listed via a new 'vlans_<IF>' variable. If a vlan interface is a number, then that number is treated as the vlan tag for the interface and the interface will be named '<IF>.<tag>'. Otherwise, the vlan tag must be provided via a vlan parameter in a 'create_args_<vlan>' variable. While I'm here, fix a few nits in rc.conf(5) and mention create_args_<IF> in the description of cloned_interfaces. Reviewed by: brooks MFC after: 2 weeks
* Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6ume2009-12-021-9/+15
| | | | | | | and rc.d/ip6fw. Reviewed by: dougb, jhb MFC after: 1 month
* Add empty watchdogd_flags.brueffer2009-10-211-0/+1
| | | | | | PR: 136620 Submitted by: amdmi3 MFC after: 3 days
* By popular acclaim, enable "Starting foo:" messages by defaultdougb2009-09-291-1/+1
|
* Add a knob to show 'Starting foo:' messages when faststart is used,dougb2009-09-171-0/+1
| | | | such as at boot time.
* The following changes are added because ofhrs2009-09-121-12/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | network_ipv6->rc.d/netif integration: - $ipv6_enable is now obsolete. Instead, IPv6 is enabled by default if the kernel supports it, and $ipv6_network_interfaces is "none" by default. If you want to use IPv6, define $ipv6_network_interfaces and $ifconfig_xxx_ipv6. An interface which is in $network_interfaces and not in $ipv6_network_interfaces will be marked as "inet6 -auto_linklocal ifdisabled" (see ifconfig(8)). - $ipv6_ifconfig_xxx is renamed to ifconfig_xxx_ipv6 for consistency with other address families. The old variables still work but can be removed in the future. Note that ipv6_ifconfig_xxx="..." should be replaced with ifconfig_xxx_ipv6="inet6 ...". - Receiving ICMPv6 Router Advertisement is not automatically enabled even if there is no manual configuration of IPv6 in rc.conf. If you want it, define ifconfig_xxx_ipv6="inet6 ... accept_rtadv". - The rc.d/ip6addrctl now chooses address selection policy based on $ipv6_prefer, not $ipv6_enable. The default is ipv6_prefer=NO. - $router* and $ipv6_router* are replaced with $routed_* and $route6d_* for consistency. The old variables still work but can be removed in the future. MFC after: 3 days
* Add a new rc.d script, static_arp, which enables the administrator todelphij2009-08-251-0/+1
| | | | | | | | | | | | | | | | | | | | statically bind IPv4 <-> MAC address at boot time. In order to use this, the administrator needs to configure the following rc.conf(5) variable: - static_arp_pairs: A list of names for static bind pairs, and, - a series of static_arp_(name): the arguments that is being passed to ``arp -S'' operation. Example: static_arp_pairs="gw" static_arp_gw="192.168.1.1 00:01:02:03:04:05" See the rc.conf(5) manual page for more details. Reviewed by: -rc@ MFC after: 2 weeks
* Update name of INDEX file as part of 8.0 -> 9.0 transition.kensmith2009-08-231-1/+1
|
* rc.d/fsck: allow additional options for fsck_y_enable via fsck_y_flagsavg2009-06-101-0/+1
| | | | | | | | | | Primary intention is to allow to pass -C option to avoid (re-)checking clean filesystems when preening fails and fsck -y kicks in. Submitted by: marck Reviewed by: current@ Approved by: jhb (mentor) MFC after: 1 week
* Add support for the experimental nfs subsystem to the scripts inrmacklem2009-06-021-0/+5
| | | | | | | | | | | | | | /etc/rc.d. They use the following new rc variables: nfsv4_server_enable - set to "YES" to run the experimental server nfsuserd_enable - set to "YES" to run nfsuserd for NFSv4 client and server nfsuserd_flags - command line flags for nfsuserd nfscbd_enable - set to "YES" to run the experimental nfs client's NFSv4 callback daemon nfscbd_flags - command line flags for nfscbd Reviewed by: dougb Approved by: kib (mentor)
* Further idmapd garbage collection -- remove rc.d Makefile reference andrwatson2009-05-221-2/+0
| | | | | | default settings. Submitted by: Pawel Worach <pawel.worach at gmail.com>
* 1. New feature; option to have the script loop until a specified hostnamedougb2009-05-161-0/+5
| | | | | | | | | | | | (localhost by default) can be successfully looked up. Off by default. 2. New feature: option to create a forwarder configuration file based on the contents of /etc/resolv.conf. This allows you to utilize a local resolver for better performance, less network traffic, custom zones, etc. while still relying on the benefits of your local network resolver. Off by default. 3. Add named-checkconf into the startup routine. This will prevent named from trying to start in a situation where it would not be possible to do so.
* Set crashinfo_enable to "YES" by default.rodrigc2009-05-141-1/+1
| | | | | | | | | | | During bootup, if /etc/rc.d/savecore detects a core dump file on the dump device, the core file will be saved, and the crashinfo script will be run to generate a human-readable report. This will make it easier for end-users to provide feedback to developers about kernel crashes. Reviewed by: jhb
* Revert r188010. When dhclient is backgrounded, services such as ntpdate,des2009-03-191-1/+1
| | | | | | | | | | | | sendmail / postfix etc. may fail to start because DNS is unavailable and / or the server is unreachable. In the worst case, the machine may become unusable. Debugging this issue was far more difficult than it should have been, due to earlier changes to the rc framework to hide almost all useful information about the boot process. Approved by: silence
* Add support for setting the debug flags on wlan interfaces after the arebrooks2009-03-131-0/+1
| | | | created using wlandebug_<ifn> variables.
* Rename the rc.conf(5) knob if_up_delay to defaultroute_delay to bettermtm2009-02-171-1/+1
| | | | reflect its purpose.
* Since, rc.d/defaultroute has the ability to wait for amtm2009-02-021-1/+1
| | | | | | default route to show up we can turn this knob back on without screwing subsequent daemons that expect to be able to talk to the outside world.
* Update jail startup script for multi-IPv4/v6/no-IP jails.bz2009-01-261-5/+7
| | | | | | | | | | | | | | | | | | | | | | | Note: this is only really necessary because of the ifconfig logic to add/remove the jail IPs upon start/stop. Consensus among simon and I is that the logic should really be factored out from the startup script and put into a proper management solution. - We now support starting of no-IP jails. - Remove the global jail_<jname>_netmask option as it is only helpful to set netmasks/prefixes for the right address family and per address. - Implement jail_<jname>_ip options to support both address familes with regard to ifconfig logic. - Implement _multi<n> support suffix to the jail_<jname>_ip option to configure additional addresses to avoid overlong, unreadbale jail_<jname>_ip lines with lots of addresses. Submitted by: initial work from Ruben van Staveren Discussed on: freebsd-jail in Nov 2008. Reviewed by: simon, ru (partial, older version) MFC after: 1 week
* The description of the various securelevels has moved to thekeramida2009-01-081-1/+1
| | | | | | security.7 manpage a while ago. MFC after: 1 week
* Put the devfs ruleset next to devfs enable, add a comment aboutbz2009-01-061-2/+3
| | | | | | | | | | the suggested ruleset[1]. While here use an IP from the 'test-net' prefix for docs. PR: kern/130102 ([1] different problem in the end) Reviewed by: simon MFC after: 2 weeks
* Add defaults for /etc/rc.d/gssdkeramida2008-11-051-0/+3
| | | | Approved by: dfr
* Allow a jail to be started with a specific route fib.thompsa2008-09-161-0/+1
| | | | | Reviewed by: secteam (simon) Reviewed by: brooks, bz
* Add the ability to run /usr/sbin/crashinfo on a new core dump automaticallyjhb2008-08-291-0/+2
| | | | | | | during boot. Right now this is disabled by default, but it can be enabled by setting 'crashinfo_enable=YES' in rc.conf. MFC after: 2 weeks
* Make obrien happy #2des2008-08-251-1/+0
|
OpenPOWER on IntegriCloud