summaryrefslogtreecommitdiffstats
path: root/etc/defaults
Commit message (Collapse)AuthorAgeFilesLines
* Use new savecore(8) option and limit number of kernel dumps that willpjd2012-12-161-1/+3
| | | | | | | | | be kept around to the 10 most recent ones. Add UPDATING entry with info how to return to the previous behaviour (no limits). Obtained from: WHEEL Systems
* Merge a number of changes required to hook up OpenBSM 1.2-alpha2'srwatson2012-12-011-0/+3
| | | | | | | | | | | | | | | | | | | auditdistd (distributed audit daemon) to the build: - Manual cross references - Makefile for auditdistd - rc.d script, rc.conf entrie - New group and user for auditdistd; associated aliases, etc. The audit trail distribution daemon provides reliable, cryptographically protected (and sandboxed) delivery of audit tails from live clients to audit server hosts in order to both allow centralised analysis, and improve resilience in the event of client compromises: clients are not permitted to change trail contents after submission. Submitted by: pjd Sponsored by: The FreeBSD Foundation (auditdistd)
* Set default for ${pkg_info} like ${pkg_version}.ume2012-10-201-0/+1
| | | | MFC after: 1 week
* Use correct INDEX on 10-CURRENT.ume2012-10-201-1/+1
|
* Disconnect non-MPSAFE SMBFS from the build in preparation for droppingattilio2012-10-181-1/+1
| | | | | | | | | | | | | GIANT from VFS. In addition, disconnect also netsmb, which is a base requirement for SMBFS. In the while SMBFS regular users can use FUSE interface and smbnetfs port to work with their SMBFS partitions. Also, there are ongoing efforts by vendor to support in-kernel smbfs, so there are good chances that it will get relinked once properly locked. This is not targeted for MFC.
* Disconnect non-MPSAFE NWFS from the build in preparation for droppingattilio2012-10-171-1/+1
| | | | | | | | | | | | GIANT from VFS. In addition, disconnect also netncp, which is a base requirement for NWFS. In the possibility of a future maintenance of the code and later readd to the FreeBSD base, maybe we should think about a better location for netncp. I'm not entirely sure the / top location is actually right, however I will let network people to comment on that more specifically. This is not targeted for MFC.
* Disconnect non-MPSAFE PORTALFS from the build in preparation for droppingattilio2012-10-161-1/+1
| | | | | | GIANT from VFS. This is not targeted for MFC.
* - Allow to pass extra parameters for each jails.kuriyama2012-08-191-0/+1
| | | | | | | - To achieve above, convert jail(8) invocation to use new style command line "-c" flag. Reviewed at: freebsd-jail@
* Whitespace nitkevlo2012-07-132-2/+2
|
* Make ipfw0 logging pseudo-interface clonable. It can be created automaticallyhrs2012-07-091-0/+1
| | | | | | | by $firewall_logif rc.conf(5) variable at boot time or manually by ifconfig(8) after a boot. Discussed on: freebsd-ipfw@
* Don't attempt to delete .sujournal in /tmpeadler2012-05-301-0/+1
| | | | | | | PR: conf/163828 Submitted by: Tatsuki Makino <tatsuki_makino@hotmail.com> Approved by: cperciva MFC after: 1 week
* - Change kfd rc script to be more conformant with rcNG conventions:stas2012-05-061-2/+2
| | | | | | | | | | o change rcname to kfd; o move mandatory options to command_args; o add missing "shutdown" keyword; o fix require line. Kfd doesn't really need to be started before daemons. Suggested by: dougb
* - Add rc.d script for kfd, kerberos forwarded tickets daemon.stas2012-04-101-0/+2
|
* Unhide /dev/zfs in devfsrules_jail.mm2012-03-161-0/+1
| | | | | | | The /dev/zfs device is required for managing jailed ZFS datasets. Discussed with: pjd, jamie MFC after: 1 week
* Increase the default shutdown timer to 90 seconds. This will allowdougb2012-02-171-1/+1
| | | | | | | | | certain systems that take a long time to shut down, without adversely affecting things that shut down quickly. It's also 30 seconds less than the default hard limit of 120 seconds in kern.init_shutdown_timeout. PR: conf/109272 Submitted by: Radim Kolar SF.NET <hsn@sendmail.cz>
* Fix various issues with the NFS and RPC related scripts:dougb2012-02-141-0/+2
| | | | | | | | | | | | | | | | | | | 1. Add new functionality to the force_depend method to incorporate the tests for whether the service is enabled and/or already running. 2. Add a new option to bypass checking only that the service is enabled at boot time, and always check if it is running. 3. Use this new functionality to greatly simplify the rc.d scripts that use force_depend. 4. Add a force_depend for statd in lockd 5. Remove the check that either nfs_server or nfs_client is _enable'd from statd and lockd. This was always overkill, and prevented using the {one|force}start options, as well as stop'ing on the command line. 6. The yp* scripts had some of their arguments in various weird orders. Bring them into line with the model. 7. If mountd fails to create /var/db/mountdtab, err out. Ideas, suggestions, and/or review from delphij and jilles. Pointy hats are completely my responsibility however.
* As it stands right now, the default devfs rulesets are only loaded as adougb2012-02-081-0/+1
| | | | | | | | | side effect of something else using them. If they haven't been loaded already but you want to use them, say for configuring a jail, you're out of luck. So add a knob to always load the default rulesets. While I'm here document the other devfs_ knobs in rc.conf.5.
* Add an option to 404.status-zfs (enabled by default) to list allgjb2012-02-081-0/+1
| | | | | | | | | | | | | zfs pools on the system. While here, document daily_status_zfs_enable in periodic.conf(5). Discussed on: -fs [1] Reviewed by: netchild [1] Approved by: jhb MFC after: 1 week [1] - http://lists.freebsd.org/pipermail/freebsd-fs/2011-June/011869.html
* Increase default scrub threshold from 30 days to 5 weeks. Usingdelphij2011-10-271-2/+2
| | | | | | | whole weeks makes it easier to predicate when the scrub would happen. MFC after: 1 week
* Add etc/rc.d/static_ndp, analogous to etc/rc.d/static_arp.mm2011-10-231-0/+1
| | | | | | | | | | Make sure that static ARP and NDP bindings are set before NETWORKING. As static_ndp is based on static_arp, pass copyright to the project with permission of the original author (delphij@). Reviewed by: delphij@FreeBSD.org MFC after: 3 days
* Add missing default values for daily/800.scrub-zfs for documentationse2011-10-171-0/+6
| | | | | | purposes. No functional change, since all parameters are set to their default values. MFC after: 1 week
* Expose "log" in the default devfs rules. /etc/rc.d/jail creates /dev/logjh2011-09-151-0/+1
| | | | | | | | | as a symbolic link. PR: conf/160711 Submitted by: Jase Thew Approved by: re (kib) MFC after: 1 week
* Correct the RFC number for the description of IPv6 privacy addressingdougb2011-09-151-1/+1
| | | | | Reviewed by: bz Approved by: re (kib)
* Add $ipv6_cpe_wanif to enable functionality required for IPv6 CPEhrs2011-09-131-0/+3
| | | | | | | | | | | | | | | | | | | | | | | | | (r225485). When setting an interface name to it, the following configurations will be enabled: 1. "no_radr" is set to all IPv6 interfaces automatically. 2. "-no_radr accept_rtadv" will be set only for $ipv6_cpe_wanif. This is done just before evaluating $ifconfig_IF_ipv6 in the rc.d scripts (this means you can manually supersede this configuration if necessary). 3. The node will add RA-sending routers to the default router list even if net.inet6.ip6.forwarding=1. This mode is added to conform to RFC 6204 (a router which connects the end-user network to a service provider network). To enable packet forwarding, you still need to set ipv6_gateway_enable=YES. Note that accepting router entries into the default router list when packet forwarding capability and a routing daemon are enabled can result in messing up the routing table. To minimize such unexpected behaviors, "no_radr" is set on all interfaces but $ipv6_cpe_wanif. Approved by: re (bz)
* - Move bus_auto.conf back into /etc/devd/hselasky2011-06-252-4276/+1
| | | | | | | - Rename bus_auto.conf into usb.conf Requested by: imp @ MFC after: 14 days
* - Move auto-load devd config file into etc/defaults folder.hselasky2011-06-252-1/+4276
| | | | | | | - Regenerate file after bugfix in the generator. Suggested by: Jeremy Messenger MFC after: 14 days
* Add the netwait rc.d script. It waits for the specified period for thedougb2011-06-191-0/+7
| | | | | | | network to become active. PR: conf/151063 Submitted by: Jeremy Chadwick <freebsd@jdc.parodius.com>
* Add rc.d/kld to load kernel modules after local disks are up.dougb2011-06-181-0/+1
| | | | This method is many times faster than doing it in /boot/loader.conf.
* Make three one line changes to the rc scripts so thatrmacklem2011-06-111-1/+1
| | | | | | they work with the new NFS client being the default, since the new NFS client's module name is nfscl and not nfsclient.
* No logner set an IPv4 loopback address by default in defaults/rc.conf.bz2011-05-311-1/+1
| | | | | | | | | | | | | | | | | | If not specified, network.subr will add it automatically if we have INET support (1). In network.subr only call the address family up/down functions if the respective AF is available. Switch to new kern.features variables for inet and inet6 as the inet sysctl tree is also available for IPv6-only kernels leading to unexpected results. Suggested by: hrs (1) Reviewed by: hrs Sponsored by: The FreeBSD Foundation Sponsored by: iXsystems MFC after: 20 days
* Update the /etc/rc.d scripts for mountd and nfsd so theyrmacklem2011-04-261-0/+1
| | | | | | | | | | can use the "-o" option to force the old NFS server to run. Running the old NFS server is enabled by setting oldnfs_server_enable="YES". The scripts will only enable providing service for NFSv4 if nfsv4_server_enable="YES" is set. Reviewed by: dougb (rc)
* Introduce to rc.subr get_pidfile_from_conf(). It does just what it soundsdougb2011-04-231-1/+0
| | | | | | | | | like, determines the path to a pid file as it is specified in a conf file. Use the new feature for rc.d/named and rc.d/devd, the 2 services in the base that list their pid files in their conf files. Remove the now-obsolete named_pidfile, and warn users if they have it set.
* Add a daily period script to back up /var/db/pkgdougb2011-03-261-0/+4
| | | | | | | | | | The final product contains work from the originator, and Florent Thoumie <florent.thoumie@gmail.com>. The final product contains considerable re-working by me, so all responsibility for bugs rests under my pointy hat. PR: ports/145957 Submitted by: Eitan Adler <EitanAdlerList@gmail.com>
* - Merge in OFED 1.5.3 from projects/ofed/headjeff2011-03-211-0/+1
|
* Enable the check for negative permissions (the group on a file can't dobrooks2011-02-241-1/+1
| | | | | | something "everyone" can) by default. X-MFC after: never
* Replace nfs4 with newnfs in netfs_types. nfs4 was removed in r192578 andjh2011-01-091-1/+1
| | | | | | | | mount(8) has supported newnfs since r192930. PR: conf/153655 Submitted by: Anonymous <swell.k@gmail.com> MFC after: 3 weeks
* Add gptboot_enable rc variable, which allows to turn gptboot reporting off inpjd2010-11-241-0/+2
| | | | | | | | case user wants to implement his own actions and doesn't want the attributes to vanish. Obtained from: Wheel Systems Sp. z o.o. http://www.wheelsystems.com MFC after: 3 days
* Add an (off by default) check for negative permissions (where thebrooks2010-11-131-0/+3
| | | | | | | | group on a object has less permissions that everyone). These permissions will not work reliably over NFS if you have more than 14 supplemental groups and are usually not what you mean. MFC after: 1 week
* Commit the rest of r213270.emaste2010-09-291-0/+1
| | | | Thanks to Anonymous <swell dot k at gmail.com> for spotting this.
* Split $ipv6_prefer into $ip6addrctl_policy and $ipv6_activate_all_interfaces.hrs2010-09-131-1/+6
| | | | | | | | | | | | | | | | | | | The $ip6addrctl_policy is a variable to choose a pre-defined address selection policy set by ip6addrctl(8). The keyword "ipv4_prefer" sets IPv4-preferred one described in Section 10.3, the keyword "ipv6_prefer" sets IPv6-preferred one in Section 2.1 in RFC 3484, respectively. When "AUTO" is specified, it attempts to read /etc/ip6addrctl.conf first. If it is found, it reads and installs it as a policy table. If not, either of the two pre-defined policy tables is chosen automatically according to $ipv6_activate_all_interfaces. When $ipv6_activate_all_interfaces=NO, interfaces which have no corresponding $ifconfig_IF_ipv6 is marked as IFDISABLED for security reason. The default values are ip6addrctl_policy=AUTO and ipv6_activate_all_interfaces=NO. Discussed with: ume and bz
* Add $ipv6_privacy to support net.inet6.ip6.use_tempaddr. Note that thishrs2010-09-131-0/+2
| | | | | | will be replaced with a per-IF version later. Based on: changes in r206408 by dougb
* Fix $ipv6_network_interfaces and set it as AUTO by default.hrs2010-09-131-1/+1
| | | | Based on: changes in r206408 by dougb
* Revert changes in r206408.hrs2010-09-131-5/+3
| | | | Discussed with: dougb, core.5, and core.6
* o Correct typo.maxim2010-08-251-1/+1
| | | | | Submitted by: Bojidara Marinchovska via -stable MFC after: 1 week
* Add a daily script to the periodic framework that reportsolli2010-08-051-0/+3
| | | | | | | | | | | | | | | | | | changes to the package database, i.e. any packages that have been added, updated or deleted in the past 24 hours. The format is intentionally simple and concise. That information is particularly useful on servers that are maintained by multiple administrators. When someone adds, updates or deletes a package, the others will see it in the daily periodic output. This script is disabled by default. PR: conf/113913 Submitted by: olli Approved by: des (mentor) MFC after: 3 weeks
* - Add a periodic script, which can be used to find installed ports' files withgabor2010-07-191-0/+3
| | | | | | | | mismatched checksum PR: conf/124641 Submitted by: Alex Kozlov <spam@rm-rf.kiev.ua> Approved by: delphij (mentor)
* Remove trailing white space. No functional changes.dougb2010-05-141-3/+3
|
* Better handling of ipv6_default_interface usingume2010-04-261-2/+2
| | | | | | | net.inet6.ip6.use_defaultzone=1. Now, it works IPv6 link-local unicast addresses as well as IPv6 link-local multicast addresses. MFC after: 1 week
* Use ubthidhci_enable="NO" to avoid the bootup warning.rpaulo2010-04-171-1/+1
| | | | | Submitted by: Jilles Tjoelker <jilles@stack.nl> MFC after: 3 days
* In case a user wants to configure only an IPv6 link-local addressdougb2010-04-171-0/+1
| | | | add an example that shows how to do it.
OpenPOWER on IntegriCloud