| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
| |
PR: 7705
Submitted by: Johan Karlsson <k@numeri.campus.luth.se>
|
|
|
|
| |
(and list of available values) somewhat.
|
| |
|
|
|
|
|
|
| |
mechanisms ('bind' user and group) in place so the feature can be easily
turned on. There were too many complaints. The security(1) man
page will be created/updated to include the appropriate info.
|
|
|
|
| |
PR: docs/8674
|
|
|
|
|
|
| |
Commit changes to rc and rc.local, removing the remaining minimal
functionality of rc.local into rc and commenting it out of rc.local
prior to the deletion of rc.local from the CVS tree.
|
|
|
|
|
|
|
|
| |
Adjust rc.conf to run named in sandbox, adjust mtree to add /etc/namedb/s
subdirectory (user bind, group bind) to hold secondaries, adjust
comments in named.conf to reflect new secondary scheme. (Note that
core read-only zone files are left owned by root, increasing security even
more).
|
|
|
|
|
| |
off.
Submitted by: jdp
|
|
|
|
| |
the NFS client's ACCESS cache.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Disable building tickadj(8) by removing util from SUBDIR in the xntpd
Makefile. Note that the sources are still there and tickadj can still
be built and installed by doing:
# cd /usr/src/usr.sbin/xntpd/util
# make all install
There are enough references to tickadj in e.g. the xntpd documentation
(not to mention the sysctl variables it uses etc.) that I don't feel
up to implementing the final solution right now.
Kinda-approved-by: phk
|
|
|
|
|
|
|
| |
interfaces.
Reviewed by: phk
Submitted by: Mike Spengler <mks@networkcs.com>
|
|
|
|
|
| |
seem right to me.
Noticed by: jkb
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
file formats. I have added a new rc.conf variable ${ldconfig_paths_aout}
which is like ${ldconfig_paths}, but only for a.out shared libraries.
On a "standard" ELF system, the ELF ldconfig path is taken from
${ldconfig_paths}, while the a.out ldconfig path is taken from
${ldconfig_paths_aout}.
On a not-yet-converted a.out system, only the a.out ldconfig path
is set, and it is taken from ${ldconfig_paths_aout}. If that
variable is unset, /etc/rc defaults it to the value of ${ldconfig_paths},
on the assumption that the system's "/etc/rc.conf" file hasn't been
updated.
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
addresses by default.
Add a knob "icmp_bmcastecho" to "rc.network" to allow this
behaviour to be controlled from "rc.conf".
Document the controlling sysctl variable "net.inet.icmp.bmcastecho"
in sysctl(3).
Reviewed by: dg, jkh
Reminded on -hackers by: Steinar Haug <sthaug@nethelp.no>
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
use this.
Requested by: max, andreas
Note: This change just provides a convenient way to exercise existing
functionality. Whether `kern.securelevel' is effective in increasing
system security is another issue, and one that has been well thrashed
out in the lists.
|
| |
|
|
|
|
|
| |
So changed it to ntpdate_program and xntpd_program.
Backout last change, now we have again named_program, sorry.
|
|
|
|
| |
to run the binaries from the new ntp v4 port.
|
| |
|
|
|
|
| |
PR: 5635
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
against the "master map" to get the list of mount point/amd map
correspondences, and using that list as command-line arguments to start
amd.
When I tried to do this with the existing /etc/rc* scripts, I found that
I couldn't do this by modifying only /etc/rc.conf: that file gets
sourced very early by /etc/rc, well before any networking functionality
is present, let alone NIS. Further, I wasn't able to figure out a way
to use various levels & types of quoting to defer evaluation of the
string to a point subsequent to NIS initialization.
As a result, I resorted to hacking /etc/rc.network -- but I did it in a
way that ought to be reasonably general, and avoid breakage for anyone
else.
PR: 6387
Reviewed by: phk
Submitted by: David Wolfskill <dhw@whistle.com>
|
|
|
|
|
| |
PR: 6339
Submitted by: cdillon@wolves.k12.mo.us
|
| |
|
| |
|
|
|
|
| |
for all virtual screens (via for loop)
|
|
|
|
|
| |
PR: 5457
Submitted by: Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
|
|
|
|
| |
Submitted by: Kazutaka YOKOTA <yokota@zodiac.mech.utsunomiya-u.ac.jp>
|
| |
|
|
|
|
|
| |
forward_sourceroute : controls setting of existing net.inet.ip.sourceroute
accept_sourceroute : control setting of new net.inet.ip.accept_sourceroute
|
|
|
|
| |
between 4.9.6 and the port of 8.x.
|
|
|
|
|
|
|
| |
to be given to ldconfig(8).
PR: 5178
Submitted by: Evan Champion <evanc@synapse.net>
|
|
|
|
|
| |
PR: 5289
Submitted by: Studded@dal.net
|
|
|
|
|
|
|
|
| |
Enable this by setting clear_tmp_enable in rc.conf to YES. Beware
there can be serious side-effects of enabling this, so use at you own
risk.
PR: misc/4982, misc/5054
|
|
|
|
|
|
|
| |
kadmind or not; also, only run kadmind on a non-slave server. Man
page for rc.conf is also updated.
Reviewed by: Mark Murray
|
|
|
|
| |
long time.
|
| |
|
|
|
|
|
|
| |
of complaints that FreeBSD's mountd doesn't allow mounting of swap files
for OSes like SunOS, NetBSD and OpenBSD.
Submitted by: Joerg Wunsch
|
|
|
|
| |
Submitted by: "Vanill I. Shu" <vanilla@MinJe.com.TW>
|
|
|
|
| |
Reviewed by: jkh, guido, imp
|
|
|
|
|
| |
changes: drop `savecore_enable' now that our savecore obeyes the
minfree file.
|
|
|
|
| |
Cosmetic changes to the loading of firewall rules and lkm.
|
|
|
|
| |
Submitted by: bde
|
|
|
|
|
|
|
|
| |
and expose mountd_flags in its place. Still allow the usage of
weak_mountd_authentication in legacy configs to result in an implicit
mountd_flags=-n, so folks shouldn't break because of this.
Suggested by: Andre Albsmeier <Andre.Albsmeier@mchp.siemens.de>
|
| |
|
| |
|
|
|
|
|
| |
PR: kern/4181
Submitted by: Johan Larsson <johan@moon.campus.luth.se>
|