summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Don't start any sendmail process in the back ground.obrien2002-03-261-3/+3
| | | | Requested by: gshapiro
* Don't background the sendmail-clientmqueue process -- can give:obrien2002-03-251-1/+1
| | | | sm-queue[181]: NOQUEUE: SYSERR(root): fill_fd: before readcf: fd 1 not open: Bad file descriptor
* Sendmail can be slow to startup.obrien2002-03-221-4/+4
| | | | So start it in the background to speed up booting.
* Instead of dealing with the endless requests to provide more DNS basedgshapiro2002-03-221-11/+7
| | | | | | | | | black lists in the default config, give a pointer to a non-static list. I was convinced this was the right thing to do after getting a PR asking to add ORBZ the day before ORBZ went off the air. PR: conf/35884 MFC after: 4 days
* Install moduli instead of primesdes2002-03-212-72/+1
|
* This commit was generated by cvs2svn to compensate for changes in r92894,des2002-03-211-0/+158
|\ | | | | | | which included commits to RCS files with non-trunk default branches.
| * Import OpenBSD's moduli file.des2002-03-211-0/+158
|
* Use the proper terminology.gshapiro2002-03-211-2/+2
|
* Don't try to generate ssh keys if ssh isn't installed.des2002-03-197-49/+77
|
* IPFilter may need to be re-sync'ed even if we are not filtering, butcjc2002-03-197-7/+21
| | | | | | | | only doing ipnat(8). Go back to using $ipfilter_active, but turn off $ipfilter_active when loading ipl.ko has failed. Submitted by: devet@devet.org (Arjan de Vet) MFC after: 3 days
* Home Wireless Network Airway wireless cardimp2002-03-181-0/+6
|
* Make sure that rc.syctl gets its own version of positional parametersdougb2002-03-181-2/+2
| | | | Submitted by: cjc
* Distinguish between first and last passes of rc.sysctl, and only setdougb2002-03-173-5/+36
| | | | mibs whose values are not already what is specified in sysctl.conf.
* Add a late rc.sysctl pass to catch sysctl's for things that weredougb2002-03-171-1/+8
| | | | | | | not loaded yet on the first pass. PR: conf/19629 Submitted by: Stephen J. Roznowski <sjr@home.com>
* Answer the question posed in 1.126. amd won't start without either adougb2002-03-177-14/+77
| | | | | | | | conf file, or command line options. I brought this up in PR 12432, which (ironically) obrien assigned to me after I became a committer. :) PR: conf/12432 Submitted by: Me
* Update for Perl 5.6.1markm2002-03-163-4/+4
|
* Correct a comment; FreeBSD-4 --> FreeBSD-5.markm2002-03-161-1/+1
|
* Only put standard FreeBSD directories in the PATH. If thecjc2002-03-161-1/+1
| | | | | | | | administrator wishes to run commands outside of the PATH, he should use a full pathname for the executable or set the PATH as appropriate in any local startup scripts. PR: misc/35770
* Allow LOMAC to be loaded as part of the boot scripts using "lomac_enable"rwatson2002-03-122-0/+8
| | | | | | | setting in rc.conf. Extracted from the still clammy hands of: green Sponsored by: DARPA, NAI Labs
* No need to explicitly check for both cases when using grep -i.rwatson2002-03-121-1/+1
|
* Run dumpon(8) early so crashes during startup can be caught. Incjc2002-03-121-14/+17
| | | | | | | | addition, take out the checks on the $dumpdev. dumpon(8) behaves well if given a non-existent filename. It gives a nice error message which is better rather than the current silent failure. Reviewed by: des
* The reload of ipf(8) rules should depend on $ipfilter_enable, notcjc2002-03-127-14/+7
| | | | | | | $ipfilter_active. $ipfilter_enable is set to "NO" if modules fail to load, and $ipfilter_active can be "YES" when we are not using ipf(8). MFC after: 3 days
* Background the startup of `Amd', it often blocks on startup.obrien2002-03-127-14/+14
|
* Why shouldn't amd always write its PID to a file?obrien2002-03-127-42/+14
| | | | Since I cannot answer that question, make it.
* Update login failure checking to check auth.log instead of messages,rwatson2002-03-111-3/+3
| | | | | | and teach it to look for more general classes of failures, including SSH login failures. This is similar but not identical to a patch submitted by aeonflux@synapse.subneural.net.
* Turns out everyone is a lot lazier than I thought. Spellrwatson2002-03-113-3/+3
| | | | | | | | | | 'authentication.log' as 'auth.log'. This is also more consistent with syslog facility names. Sigh. :-) Submitted by: asmodai, aeonflux, green, ....
* Clean up logging of security information a bit:rwatson2002-03-113-1/+5
| | | | | | | | | | | | | o Introduce /var/log/authentication.log, which will be the target for auth.info and authpriv.info by default. Rotate on the same schedule as most other logs. Create at installation. o Remove logging of auth.info from /var/log/security.log, which will return to being only for security feature subsystems (such as ipfw, and so on). This creates a special authentication log, which can now be searched by scripts for authentication events.
* Don't protect savecore(8) from being run with a bad dumpdircjc2002-03-111-3/+8
| | | | | | | | | | argument. Don't fail silently, but let savecore(8) make noise. It won't behave badly, it doesn't need protection. At the same time, allow the administrator to have dumpdev enabled while dumpdir (savecore(8)) is disabled and document how to do it. PR: conf/35725
* Remove a mention of the worm(4) device that was missed when it wascjc2002-03-101-1/+0
| | | | | | | removed from MAKEDEV in 1.171. PR: misc/35729 MFC after: 1 day
* /var/log/security gets almost no (if not no) activity on many FreeBSDrwatson2002-03-101-1/+1
| | | | | | | | | systems due to sshd not using the security log class. Tweak syslog.conf so that /var/log/security also gets a useful set of authentication-related logging. Submitted by: aeonflux@synapse.subneural.net MFC after: 4 weeks
* In the words of the submitter:dd2002-03-091-1/+1
| | | | | | | | | | Kerberized CVS (kserver) listens on the same port as normal CVS (pserver). In /etc/inetd.conf cvs kserver is disabled by default, but set to listen to the service port 'cvs' which doesn't exist. It should listen to 'cvspserver'. PR: 34317 Submitted by: Sean Chittenden <sean@chittenden.org>
* Add an entry for coldsync, to facilitate synchronising a Handspring Visorn_hibma2002-03-081-0/+10
| | | | with FreeBSD.
* fix backwards spellingobrien2002-03-075-5/+5
|
* Environmental variable was not being passed to a subshell as intended.cjc2002-03-051-2/+2
| | | | | PR: bin/35558 Submitted by: Nicolas Rachinsky <list@rachinsky.de>
* Buffalo LPC3-CLTimp2002-03-051-0/+6
| | | | | Submitted by: TANAKA Tomohiko <tomo@oso.to> PR: 34954
* Fix Simple Tech STI-ATAimp2002-03-051-1/+1
| | | | | Submitted by: dwhite@paypal.com PR: 34243
* US Robotics Wireless Card 2410imp2002-03-051-0/+6
| | | | | Submitted by: Jerry A! <jerry@thehutt.org> PR: 33858
* Redirect stdout of `ipf -y' to /dev/null. This removes a straydd2002-03-047-7/+7
| | | | | "filter sync'd" in the middle of the boot output if IPFilter is enabled, but does not hide any potential errors, which go to stderr.
* Fix typo. '|' looks a lot like 'l' in my xterm font.rwatson2002-03-011-1/+1
|
* When having an expanded name for a class, use '|' instead if ':' torwatson2002-03-011-2/+2
| | | | | | | | | seperate the short name and the long name. This was present for most but not all entries. Because the parsing doesn't reject unrecognized entries, this didn't cause failures, but it wasn't strictly correct. Submitted by: Martin Faxer <gmh003532@brfmasthugget.se> MFC after: 2 weeks
* Fixed a few typos.ru2002-02-271-4/+4
|
* After getting IANA to fix a typo in their port assignments, addcjc2002-02-261-0/+6
| | | | | | | | | some new IANA-blessed services and close some PRs. Ports for Jabber and PostgreSQL. PR: conf/35219, conf/35220 Submitted by: Sean Chittenden <sean@chittenden.org> MFC after: 1 day
* Make sure we don't remove /etc/mail/sendmail.cf on make clean since thisgshapiro2002-02-241-3/+11
| | | | | | | will break a running system during a buildworld. Noticed by: Alexandr Listopad <laa@laa.zp.ua> MFC after: 1 week
* Use the regular expression form to solve the ambiguous card parametersiwasaki2002-02-231-19/+19
| | | | | | | | which have tailing spaces. Some card entries had problem because of incorrect number of spaces. Approved by: imp MFC after: 1 week
* Long overdue whitespace cleanup. To give yourself an idea of howcjc2002-02-231-311/+311
| | | | | | | | ugly it was, $ awk '/[[:space:]]$/ { sub(/$/,"\$"); print; }' /etc/services On the previous revision. And that's only the trailing whitespace.
* The usage of 'newaliases' needs to be after we know for sure that /usrobrien2002-02-238-15/+25
| | | | | | is mounted. Submitted by: rizzo
* The existing bazaar and site-specific policy in rc.diskless1 is Just Wrong;obrien2002-02-228-28/+46
| | | | | | | | and looks like no other Unix diskless configuration I've ever seen. Thus allow a more traditional /etc. Note, the use of an MFS /var should also be settable. Otherwise installing ports(packages) is just a total PITA.
* Bring rc.firewall{,6} more in line with the word and spirit ofcjc2002-02-212-20/+41
| | | | | | | | | | | | | | | | rc.conf(5) and the files' inline documentation. - Add the "closed"-type, documented in both places, but which did not exist in the code. - When provided a ruleset, the system should not make any assumptions about the sites's policy and should add no rules of its own. - Make the "UNKNOWN" (documented in-line) actual work as advertised, load no rules. Prodded by: Igor M Podlesny <poige@morning.ru> MFC after: 1 week
* Delete a needless rule for DAD. An unspecified address is never usedume2002-02-201-1/+0
| | | | | | | as a destination address of IPv6 packets. Submitted by: cjc MFC after: 1 week
* There is no reason to demand the administrator set 'natd_interface'cjc2002-02-208-36/+29
| | | | | | | | | | | | | when running natd(8) out of the rc-files. It is perfectly valid for the interface or alias address to be set in a natd(8) configuration file, not on the command line. Also, loosen up the restrictions on identifying an IP address argument in 'natd_interface.' Fix the documentation, rc.conf(5), to reflect this change. Take the bogus default for 'natd_interface' out of /etc/defaults/rc.conf. MFC after: 3 days
OpenPOWER on IntegriCloud