summaryrefslogtreecommitdiffstats
path: root/etc/defaults
Commit message (Collapse)AuthorAgeFilesLines
* Add rc.d/ubthidhci. This small script calls usbconfig(1) to change a USBrpaulo2010-04-091-0/+5
| | | | | | Bluetooth controller from HID mode to HCI mode. MFC after: 1 week
* Improve the handling of IPv6 configuration in rc.d. The ipv6_enabledougb2010-04-091-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and ipv6_ifconfig_<interface> options have already been deprecated, these changes do not alter that. With these changes any value set for ipv6_enable will emit a warning. In order to avoid a POLA violation for the deprecation of the option ipv6_enable=NO will still disable configuration for all interfaces other than lo0. ipv6_enable=YES will not have any effect, but will emit an additional warning. Support and warnings for this option will be removed in FreeBSD 10.x. Consistent with the current code, in order for IPv6 to be configured on an interface (other than lo0) an ifconfig_<interface>_ipv6 option will have to be added to /etc/rc.conf[.local]. 1. Clean up and minor optimizations for the following functions: ifconfig_up (the ipv6 elements) ipv6if ipv6_autoconfif get_if_var _ifconfig_getargs The cleanups generally were to move the "easy" tests earlier in the functions, and consolidate duplicate code. 2. Stop overloading ipv6_prefer with the ability to disable IPv6 configuration. 3. Remove noafif() which was only ever called from ipv6_autoconfif. Instead, simplify and integrate the tests into that function, and convert the test to use is_wired_interface() instead of listing wireless interfaces explicitly. 4. Integrate backwards compatibility for ipv6_ifconfig_<interface> into _ifconfig_getargs. This dramatically simplifies the code in all of the callers, and avoids a lot of other code duplication. 5. In rc.d/netoptions, add code for an ipv6_privacy option to use RFC 4193 style pseudo-random addresses (this is what windows does by default, FYI). 6. Add support for the [NO]RTADV options in ifconfig_getargs() and ipv6_autoconfif(). In the latter, include support for the explicit addition of [-]accept_rtadv in ifconfig_<interface>_ipv6 as is done in the current code. 7. In rc.d/netif add a warning if $ipv6_enable is set, and remove the set_rcvar_obsolete for it. Also remove the latter from rc.d/ip6addrctl. 8. In /etc/defaults/rc.conf: Add an example for RTADV configuration. Set ipv6_network_interfaces to AUTO. Switch ipv6_prefer to YES. If ipv6_enable is not set this will have no effect. Add a default for ipv6_privacy (NO). 9. Document all of this in rc.conf.5.
* Add .snap to daily_clean_tmps_ignore; /tmp/.snap ist not supposed tojoerg2010-03-231-1/+1
| | | | | | be auto-removed (and /tmp is a filesystem of its own now by default). MFC after: 3 days
* Redirect stdin from /dev/null when starting a jail:netchild2010-03-051-0/+1
| | | | | | | | | | | | | | | | | | | | At least in RELENG_7 this fixes some start problems for some programs from the ports. It is also more correct, as a jail shall not expect input (interactivity) from the jail-host. Revert the current behavior of starting jails in the background and make it optional only for the start of jails (jail_parallell_start=YES in rc.conf): - The stop can not be done in the background, the system needs to wait until everything is stopped correctly before it can reboot or power down. - The start should not be done in parallel by default, this not only breaks POLA for people comming from RELENG_x, it may also break a dependency chain with other scripts in the jail-host, which need to do some stuff after the jails are up and running (e.g. hardlinking a mysql socket from one jail into another one). Discussed on: freebsd-jails@
* Please welcome HAST - Highly Avalable Storage.pjd2010-02-181-0/+3
| | | | | | | | | | | | | | | | | | | | | | HAST allows to transparently store data on two physically separated machines connected over the TCP/IP network. HAST works in Primary-Secondary (Master-Backup, Master-Slave) configuration, which means that only one of the cluster nodes can be active at any given time. Only Primary node is able to handle I/O requests to HAST-managed devices. Currently HAST is limited to two cluster nodes in total. HAST operates on block level - it provides disk-like devices in /dev/hast/ directory for use by file systems and/or applications. Working on block level makes it transparent for file systems and applications. There in no difference between using HAST-provided device and raw disk, partition, etc. All of them are just regular GEOM providers in FreeBSD. For more information please consult hastd(8), hastctl(8) and hast.conf(5) manual pages, as well as http://wiki.FreeBSD.org/HAST. Sponsored by: FreeBSD Foundation Sponsored by: OMCnet Internet Service GmbH Sponsored by: TransIP BV
* Introduce new rc.conf variable firewall_coscripts. It can be used toemax2010-02-081-0/+2
| | | | | | | | | specify list of executables and/or rc scripts that should be executed after firewall starts/stops. Submitted by: Yuri Kurenkov <y dot kurenkov at init dot ru> Reviewed by: rhodes, rc@ MFC after: 1 week
* Add rc.d script for the rtsold(8) daemon.ume2010-02-031-0/+4
| | | | | | | | | | The rtsol(8) handles just one RA then exit. So, the OtherConfig flag may not be handled well by rtsol(8) in the environment where there are multiple RA servers on the segment. In such case, rtsold(8) will be your friend. Reviewed by: hrs MFC after: 2 weeks
* Remove the rules using 'me6'. Now, 'me' matches both any IPv6 addressume2010-01-171-3/+1
| | | | | | | and any IPv4 address configured on an interface in the system. Reviewed by: David Horn <dhorn2000__at__gmail.com>, luigi, qingli MFC after: 2 weeks
* Expose the upper 256 ptys in the default devfs rules. I should have updatedjhb2010-01-041-0/+16
| | | | | | | this when expanding the old pty(4) driver to use 512 ptys by default. This is more important for 7.x. MFC after: 1 week
* With the introduction of named_conf the -c example in named_flagsdougb2010-01-011-1/+1
| | | | | is no longer necessary or desirable. Update the comment to indicate that _flags should be used for options other than -u and -c.
* Add support for configuring vlan(4) interfaces as child devices similar tojhb2009-12-291-0/+2
| | | | | | | | | | | | | | wlan(4) interfaces. vlan(4) interfaces are listed via a new 'vlans_<IF>' variable. If a vlan interface is a number, then that number is treated as the vlan tag for the interface and the interface will be named '<IF>.<tag>'. Otherwise, the vlan tag must be provided via a vlan parameter in a 'create_args_<vlan>' variable. While I'm here, fix a few nits in rc.conf(5) and mention create_args_<IF> in the description of cloned_interfaces. Reviewed by: brooks MFC after: 2 weeks
* Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6ume2009-12-021-9/+15
| | | | | | | and rc.d/ip6fw. Reviewed by: dougb, jhb MFC after: 1 month
* Add empty watchdogd_flags.brueffer2009-10-211-0/+1
| | | | | | PR: 136620 Submitted by: amdmi3 MFC after: 3 days
* By popular acclaim, enable "Starting foo:" messages by defaultdougb2009-09-291-1/+1
|
* Add a knob to show 'Starting foo:' messages when faststart is used,dougb2009-09-171-0/+1
| | | | such as at boot time.
* The following changes are added because ofhrs2009-09-121-12/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | network_ipv6->rc.d/netif integration: - $ipv6_enable is now obsolete. Instead, IPv6 is enabled by default if the kernel supports it, and $ipv6_network_interfaces is "none" by default. If you want to use IPv6, define $ipv6_network_interfaces and $ifconfig_xxx_ipv6. An interface which is in $network_interfaces and not in $ipv6_network_interfaces will be marked as "inet6 -auto_linklocal ifdisabled" (see ifconfig(8)). - $ipv6_ifconfig_xxx is renamed to ifconfig_xxx_ipv6 for consistency with other address families. The old variables still work but can be removed in the future. Note that ipv6_ifconfig_xxx="..." should be replaced with ifconfig_xxx_ipv6="inet6 ...". - Receiving ICMPv6 Router Advertisement is not automatically enabled even if there is no manual configuration of IPv6 in rc.conf. If you want it, define ifconfig_xxx_ipv6="inet6 ... accept_rtadv". - The rc.d/ip6addrctl now chooses address selection policy based on $ipv6_prefer, not $ipv6_enable. The default is ipv6_prefer=NO. - $router* and $ipv6_router* are replaced with $routed_* and $route6d_* for consistency. The old variables still work but can be removed in the future. MFC after: 3 days
* Add a new rc.d script, static_arp, which enables the administrator todelphij2009-08-251-0/+1
| | | | | | | | | | | | | | | | | | | | statically bind IPv4 <-> MAC address at boot time. In order to use this, the administrator needs to configure the following rc.conf(5) variable: - static_arp_pairs: A list of names for static bind pairs, and, - a series of static_arp_(name): the arguments that is being passed to ``arp -S'' operation. Example: static_arp_pairs="gw" static_arp_gw="192.168.1.1 00:01:02:03:04:05" See the rc.conf(5) manual page for more details. Reviewed by: -rc@ MFC after: 2 weeks
* Update name of INDEX file as part of 8.0 -> 9.0 transition.kensmith2009-08-231-1/+1
|
* rc.d/fsck: allow additional options for fsck_y_enable via fsck_y_flagsavg2009-06-101-0/+1
| | | | | | | | | | Primary intention is to allow to pass -C option to avoid (re-)checking clean filesystems when preening fails and fsck -y kicks in. Submitted by: marck Reviewed by: current@ Approved by: jhb (mentor) MFC after: 1 week
* Add support for the experimental nfs subsystem to the scripts inrmacklem2009-06-021-0/+5
| | | | | | | | | | | | | | /etc/rc.d. They use the following new rc variables: nfsv4_server_enable - set to "YES" to run the experimental server nfsuserd_enable - set to "YES" to run nfsuserd for NFSv4 client and server nfsuserd_flags - command line flags for nfsuserd nfscbd_enable - set to "YES" to run the experimental nfs client's NFSv4 callback daemon nfscbd_flags - command line flags for nfscbd Reviewed by: dougb Approved by: kib (mentor)
* Further idmapd garbage collection -- remove rc.d Makefile reference andrwatson2009-05-221-2/+0
| | | | | | default settings. Submitted by: Pawel Worach <pawel.worach at gmail.com>
* 1. New feature; option to have the script loop until a specified hostnamedougb2009-05-161-0/+5
| | | | | | | | | | | | (localhost by default) can be successfully looked up. Off by default. 2. New feature: option to create a forwarder configuration file based on the contents of /etc/resolv.conf. This allows you to utilize a local resolver for better performance, less network traffic, custom zones, etc. while still relying on the benefits of your local network resolver. Off by default. 3. Add named-checkconf into the startup routine. This will prevent named from trying to start in a situation where it would not be possible to do so.
* Set crashinfo_enable to "YES" by default.rodrigc2009-05-141-1/+1
| | | | | | | | | | | During bootup, if /etc/rc.d/savecore detects a core dump file on the dump device, the core file will be saved, and the crashinfo script will be run to generate a human-readable report. This will make it easier for end-users to provide feedback to developers about kernel crashes. Reviewed by: jhb
* Revert r188010. When dhclient is backgrounded, services such as ntpdate,des2009-03-191-1/+1
| | | | | | | | | | | | sendmail / postfix etc. may fail to start because DNS is unavailable and / or the server is unreachable. In the worst case, the machine may become unusable. Debugging this issue was far more difficult than it should have been, due to earlier changes to the rc framework to hide almost all useful information about the boot process. Approved by: silence
* Add support for setting the debug flags on wlan interfaces after the arebrooks2009-03-131-0/+1
| | | | created using wlandebug_<ifn> variables.
* Rename the rc.conf(5) knob if_up_delay to defaultroute_delay to bettermtm2009-02-171-1/+1
| | | | reflect its purpose.
* Since, rc.d/defaultroute has the ability to wait for amtm2009-02-021-1/+1
| | | | | | default route to show up we can turn this knob back on without screwing subsequent daemons that expect to be able to talk to the outside world.
* Update jail startup script for multi-IPv4/v6/no-IP jails.bz2009-01-261-5/+7
| | | | | | | | | | | | | | | | | | | | | | | Note: this is only really necessary because of the ifconfig logic to add/remove the jail IPs upon start/stop. Consensus among simon and I is that the logic should really be factored out from the startup script and put into a proper management solution. - We now support starting of no-IP jails. - Remove the global jail_<jname>_netmask option as it is only helpful to set netmasks/prefixes for the right address family and per address. - Implement jail_<jname>_ip options to support both address familes with regard to ifconfig logic. - Implement _multi<n> support suffix to the jail_<jname>_ip option to configure additional addresses to avoid overlong, unreadbale jail_<jname>_ip lines with lots of addresses. Submitted by: initial work from Ruben van Staveren Discussed on: freebsd-jail in Nov 2008. Reviewed by: simon, ru (partial, older version) MFC after: 1 week
* The description of the various securelevels has moved to thekeramida2009-01-081-1/+1
| | | | | | security.7 manpage a while ago. MFC after: 1 week
* Put the devfs ruleset next to devfs enable, add a comment aboutbz2009-01-061-2/+3
| | | | | | | | | | the suggested ruleset[1]. While here use an IP from the 'test-net' prefix for docs. PR: kern/130102 ([1] different problem in the end) Reviewed by: simon MFC after: 2 weeks
* Add defaults for /etc/rc.d/gssdkeramida2008-11-051-0/+3
| | | | Approved by: dfr
* Allow a jail to be started with a specific route fib.thompsa2008-09-161-0/+1
| | | | | Reviewed by: secteam (simon) Reviewed by: brooks, bz
* Add the ability to run /usr/sbin/crashinfo on a new core dump automaticallyjhb2008-08-291-0/+2
| | | | | | | during boot. Right now this is disabled by default, but it can be enabled by setting 'crashinfo_enable=YES' in rc.conf. MFC after: 2 weeks
* Make obrien happy #2des2008-08-251-1/+0
|
* Integrate the new MPSAFE TTY layer to the FreeBSD operating system.ed2008-08-201-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The last half year I've been working on a replacement TTY layer for the FreeBSD kernel. The new TTY layer was designed to improve the following: - Improved driver model: The old TTY layer has a driver model that is not abstract enough to make it friendly to use. A good example is the output path, where the device drivers directly access the output buffers. This means that an in-kernel PPP implementation must always convert network buffers into TTY buffers. If a PPP implementation would be built on top of the new TTY layer (still needs a hooks layer, though), it would allow the PPP implementation to directly hand the data to the TTY driver. - Improved hotplugging: With the old TTY layer, it isn't entirely safe to destroy TTY's from the system. This implementation has a two-step destructing design, where the driver first abandons the TTY. After all threads have left the TTY, the TTY layer calls a routine in the driver, which can be used to free resources (unit numbers, etc). The pts(4) driver also implements this feature, which means posix_openpt() will now return PTY's that are created on the fly. - Improved performance: One of the major improvements is the per-TTY mutex, which is expected to improve scalability when compared to the old Giant locking. Another change is the unbuffered copying to userspace, which is both used on TTY device nodes and PTY masters. Upgrading should be quite straightforward. Unlike previous versions, existing kernel configuration files do not need to be changed, except when they reference device drivers that are listed in UPDATING. Obtained from: //depot/projects/mpsafetty/... Approved by: philip (ex-mentor) Discussed: on the lists, at BSDCan, at the DevSummit Sponsored by: Snow B.V., the Netherlands dcons(4) fixed by: kan
* Rename the RCng 'kernel' script to 'kernel_symlink'.obrien2008-08-191-2/+1
| | | | Requested by: many
* Allow the network addresses and interface names for the "client" andjhb2008-08-151-0/+9
| | | | | | | | | | | | "workstation" firewall types to be set from rc.conf so that rc.firewall no longer needs local patching to be usable for those types. For now I've set the variables in /etc/defaults/rc.conf to the previous defaults in /etc/rc.firewall. PR: bin/65258 Submitted by: Valentin Nechayev netch of netch.kiev.ua Silence from: net MFC after: 2 weeks
* For the firewall_* variables that are specific to the "workstation"jhb2008-08-151-7/+9
| | | | | | firewall type, note that property in their description. MFC after: 1 week
* Only symlink booted kernel directory to /boot/kernel if user has explicitlyobrien2008-08-091-0/+1
| | | | requested it. This is too dangerous to just do behind the admin's back.
* Add the -c option for named_flags (still commented out) that isdougb2008-08-011-2/+2
| | | | | | relevant for ports users, and change the comment to match. While I'm here fix the capitalization of the named_program comment.
* Make quota knob conform to other rc(8) knobs. Keep older knob formtm2008-06-191-1/+1
| | | | | | compatibility. Requested by: Volker <volker@vwsoft.com>
* Bluetooth SIG is being difficult and keep moving specificationemax2008-05-271-3/+2
| | | | | | | | documents away from being public accessible. Replace link to the Bluetooth specification document with the document name. Pointed out by: SoftLover < slserg at uic dot tula dot ru > MFC after: 3 days
* Remove ISDN4BSD (I4B) from HEAD as it is not MPSAFE andbz2008-05-261-11/+2
| | | | | | | | | | | | | | | | | | parts relied on the now removed NET_NEEDS_GIANT. Most of I4B has been disconnected from the build since July 2007 in HEAD/RELENG_7. This is what was removed: - configuration in /etc/isdn - examples - man pages - kernel configuration - sys/i4b (drivers, layers, include files) - user space tools - i4b support from ppp - further documentation Discussed with: rwatson, re
* Change the default value of synchronous_dhclient to NO.brooks2008-05-151-1/+2
| | | | | | | | | To preserve the existing behavior of etc/rc.d/netif, add code to wait up to if_up_delay seconds (30 seconds by default) for a default route to be configured if there are any dhcp interfaces. This should be extended to test that the interface is actually up. X-MFC after:
* Replace a couple mentions of the soon to be removed vaps_<ifn>brooks2008-05-031-1/+1
| | | | variable form with wlans_<ifn>.
* Revert rev 1.332 and keep ddb scripts off by default for now. Minidumpsbrooks2008-04-231-1/+1
| | | | | are more flexable and much text-dump like output can be produced from them so there's a good argument they are a better default.
* Change the default of ddb_enable to YES so we default to generating textdumpsbrooks2008-04-211-1/+1
| | | | | | | on panic. This means you get a potentially useful dump even if your system is running X when you panic. X-MFC after: never
* rc support for vapssam2008-04-201-0/+1
|
* Set defaults for the rfcomm_pppd_server rc scriptemax2008-04-081-0/+13
| | | | MFC after: 1 week
* o add rc.conf knobs to set the wpa_supplicant program, logging flags,sam2008-04-081-0/+4
| | | | | | | | | and config file o change default logging options from -q to -s (log to syslog); this is currently broken for boot-time startup as syslogd is started too late but that'll be dealt with separately MFC after: 2 weeks
OpenPOWER on IntegriCloud