summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* rc.d/sysctl: Fix error messages about unknown OIDs.jilles2013-03-221-3/+3
| | | | | | | | | | | | | There are three situations where the sysctl script is called: 1. "start", very early 2. "lastload", near the end of rc 3. "reload", at admin request while the system is booted Ignore unknown OIDs in situation 1 because kernel modules may not be loaded yet and complain about them in situations 2 and 3. PR: conf/174595 Submitted by: Olivier Smedts
* Fix typo in previous commit: Exit if */dev/dumpdev* does not exist, not ifcperciva2013-03-191-1/+1
| | | | | | | */bin/realpath* does not exist... Submitted by: markj Pointy hat to: cperciva
* If dumpdev is AUTO but no dump device has been set -- i.e., there is no swapcperciva2013-03-191-0/+3
| | | | | | | | | | | | | | | space configured for rc.d/dumpon to designate for dumping -- then exit silently rather than with a > realpath: /dev/dumpdev: No such file or directory error message. An argument could be made that we should print a (more informative) warning message; but given that under the same conditions the rc.d/dumpon script will already print a > No suitable dump device was found warning, it seems that printing an additional > Dump device does not exist. Savecore not run. warning would be superfluous.
* Add bhyve to examples.neel2013-03-181-0/+2
| | | | | Requested by: alfred, julian Obtained from: NetApp
* Finish portalfs removal.antoine2013-03-101-2/+0
|
* Now that stable/7 is EOL, stop building INDEX-7.cperciva2013-03-071-1/+0
| | | | MFC after: 1 week
* Comment cosmetics: capitalize SCSIschweikh2013-03-021-8/+8
| | | | | | Fix some hard tabs in the wrong place. MFC after: 2 weeks
* If rtadvd_interfaces is set to "none", start rtadvd without listingdes2013-02-251-0/+2
| | | | | | any interfaces on the command line. MFC after: 1 week
* Back out prev. change preventing /sys/sys symlink. It appears my installache2013-02-221-1/+1
| | | | was not very recent and not acts like 'ln -h'
* In 'make hierarchy' don't install /sys/sys pointing to usr/src/sysache2013-02-171-1/+1
| | | | but just /sys pointing there
* Revert r227528 and r227787. This hack is no longer necessary since r233580.jkim2013-02-151-4/+0
|
* Install <dev/agp/agpreg.h> and <dev/pci/pcireg.h> as userland headersjhb2013-02-051-0/+4
| | | | | | in /usr/include. MFC after: 2 weeks
* Load the pfsync module if necessary.des2013-02-051-0/+1
| | | | | Reviewed by: glebius@ MFC after: 1 week
* Use the default policy table of RFC 6724.ume2013-02-021-10/+18
| | | | MFC after: 1 weeks
* When adding the directory ownership to the METALOG do it by name ratherbrooks2013-01-301-3/+4
| | | | | | | | than number as is done in install so as to differ binding of names to ids. Remove the -W flag from the mtree command so that the correct user and group is recorded rather than the default.
* Log the addition of login.conf.db, passwd, pwd.db, and spwd.db via cat -l.brooks2013-01-291-3/+15
| | | | Make cat a bootstrap tool to facilitate this.
* Increase the "memorylocked" limit for the "daemon" class.neel2013-01-271-1/+1
| | | | | | | | amd(8) requires more than the 64MB that is currently available to it so bump it up to 128MB. Reviewed by: kib Discussed with: avg, kib, zont
* Introduce a new option -DNO_ROOT that allows install and distributionbrooks2013-01-221-0/+17
| | | | | | | | | | | | | | | targets to be run without root privilege. Information about ownership, group, flags, and suid bits are stored in the file specified by METALOG which defaults to ${DESTDIR}/METALOG. This file can be used in conjunction with bsdtar or makefs to generate archives or file system images with correct permissions. The packageworld target has been altered to use this metadata allowing non-root releases (subject to further changes in release/Makefile.) Sponsored by: DARPA, AFRL Reviewed by: ian, ray
* Replace all known uses of ln in the build process with appropriatebrooks2013-01-211-7/+10
| | | | | | | | install -l invocations via new INSTALL_LINK and INSTALL_SYMLINK variables. Sponsored by: DARPA, AFRL Reviewed by: ian, ray, rpaulo
* In r245571, "rm -rf <foo>; ln -s <bar> <foo>" needed to be replaced withbrooks2013-01-171-7/+7
| | | | | | | | | "ln -sfh <bar> <foo>" or the links would fail when a valid link to a directly was in place at <foo>. Reported by: peter Tested by: peter Pointy hat to: brooks
* In preparation for logging metadata about each filesystem objectbrooks2013-01-171-19/+13
| | | | | | | | | | | | refactor the link section of distrib-dirs to alwasy install to a full path (the link contents remain relative as they should). Eliminate the use of the "rm -r[f] <foo>; ln -s <bar> <foo>" pattern in favor of "ln -sf <bar> <foo>". None of these links could be directories on a system installed in the last decade. Sponsored by: DARPA, AFRL Reviewed by: mtree
* Rework the mtree portion of etc/Makefile's distrib-dirs target to runbrooks2013-01-171-12/+23
| | | | | | | | mtree in a shell loop so there is only one mtree commandline. Move the implementation of LOCAL_MTREE into etc/Makefile. Sponsored by: DARPA, AFRL Reviewed by: mtree :)
* Add a conditional sleep 1 in case we add any IPv6 addresses to interfaces.bz2013-01-171-1/+8
| | | | | | | | | Do this per jail started, not per address. This will allow DAD to complete and services to properly start. Before we have seen problems with services trying to start before the IPv6 address was available to use and thus erroring and failing to start. MFC after: 3 days
* According to the notes in ObsoleteFiles.inc we last installed sectionbrooks2013-01-161-8/+0
| | | | 1aout manpages in 2002. Stop making the directories and links to them.
* Add an option DB_FROM_SRC to use src/etc's user/group databases whenbrooks2013-01-151-8/+10
| | | | | | | | | | | | | installing. This allows things like running installworld for 10-CURRENT on a 9.0-RELEASE system without adding extra users and groups to the passwd and group files. To prevent potentially risky uid/gid mismatches on systems with non-standard local values, require that DESTDIR be set if DB_FROM_SRC is set. Sponsored by: DARPA, AFRL Reviewed by: peter
* Revert r245316. Systems with non-standard uids/gids are more prevalentbrooks2013-01-111-10/+8
| | | | | that I'd feared. Discussion is ongoing about the scope of a safer solution.
* Use the -N option to install and nmtree to eliminate the need for thebrooks2013-01-111-8/+10
| | | | | | checks for missing users and groups. Sponsored by: DARPA, AFRL
* Allow perl scripts to be used in rc.d scriptssmh2013-01-101-1/+1
| | | | | | | PR: conf/117027 Reviewed by: pjd (mentor) Approved by: hrs MFC after: 2 weeks
* Not using the full domain was a really bad idea.peter2013-01-061-1/+1
|
* Update with new IPv4 address for D root.erwin2013-01-041-5/+5
| | | | Approved by: delphij (mentor)
* Minor changes to force commit these files so new freebsd*.cf files aregshapiro2012-12-292-2/+3
| | | | | | | | built to use the new sendmail-8.14.6/cf tree. While here, update DNSBL link once again. MFC after: 4 days
* Add missing closing quote on commented out examplegshapiro2012-12-291-1/+1
| | | | | | PR: bin/174108 Obtained from: Julian H. Stacey MFC after: 1 day
* Fix location of /var/audit/dist and /var/audit/remote.ume2012-12-281-1/+1
| | | | | | | Note that those who did installworld after r243752 should remove wrongly created /var/dist and /var/remote. Reviewed by: pjd
* Don't reload syslogd after rotating sendmail.st, as this file isn'tmarkj2012-12-201-1/+1
| | | | | | | | managed by syslogd. PR: conf/169973 Approved by: rstone (co-mentor) MFC after: 1 week
* make installation of the 220.backup-pkgdb periodic script depend on PKGTOOLSbapt2012-12-201-2/+2
| | | | knob
* - Set memorylocked limit to 64Kb for default login class.zont2012-12-181-1/+3
| | | | | | | | | | | | This prevents unprivileged users to lock too much memory. - Set memorylocked limit to 64Mb for daemon login class. Some daemons such as amd(8) and watchdogd(8) calls mlockall(2) on startup, they are run from init(8) which uses daemon login class. - Set memorylocked limit to unlimited for root login class. Suggested by: avg Approved by: kib (mentor) MFC after: 1 week
* Use new savecore(8) option and limit number of kernel dumps that willpjd2012-12-161-1/+3
| | | | | | | | | be kept around to the 10 most recent ones. Add UPDATING entry with info how to return to the previous behaviour (no limits). Obtained from: WHEEL Systems
* Regenerate usb.confhselasky2012-12-151-1/+25
| | | | MFC after: 1 week
* - When checking if a dump exists on the given device there is no need topjd2012-12-141-1/+1
| | | | | | | | | | | | | | | | provide dump directory. Eliminate this redundant argument. This changes the usage, but the only risk here is that a warning will be printed about directory given as device. - Update usage of -C option. - When clearing dump header from the given device there is also no need to provide dump directory, although additional arguments for -c were not documented. - Document that -v can be used with -c and that list of devices can be given. Obtained from: WHEEL Systems
* Teach sysctl(8) about parsing a file (while I'm there also give itdelphij2012-12-131-37/+13
| | | | | | | capability of parsing both = and : formats). Submitted by: hrs (initial version, bugs are mine) MFC after: 3 months
* Fix the location of auditdistd configuration file.pjd2012-12-131-1/+1
| | | | Reported by: Johan Hendriks <joh.hendriks@gmail.com>
* Sync pf.os with OpenBSD:delphij2012-12-101-2/+10
| | | | | | | add a handful of linux signatures from p0fv2 and some other signatures from observation. MFC after: 2 weeks
* Add a new 900MHz GSM regulatory SKU for the Xagyl Communications XC900M.adrian2012-12-071-0/+42
| | | | | | | | | | | | | | | | | | | | | | | | | | The XC900M acts as a Ubiquiti XR9 (and I _think_ SR9) by default; it uses the same 900MHz<->2.4GHz downconverter mapping. However it has an alternative frequency mapping which squeezes in a couple more half/quarter rate channels. Since the default HAL doesn't support fractional tuning (sub-1MHz) in 2.4GHz mode on the AR5413/AR5414, they implement it using a jumper. Datasheet: http://www.xagyl.com/download/XC900M_Datasheet.pdf Thankyou to Xagyl Communications for the XC900M NICs and Edgar Martinez for organising the donation. Tested: * XC900M <-> XC900M * Ubiquiti XR9 <-> XC900M TODO: * Test against SR9 and GZ901 if possible (the IEEE channel<->frequency mapping may not match up, thanks to the slightly different channels involved)
* Remove hack to emulate effective uid and just use the EUID's name in theeadler2012-12-051-4/+1
| | | | | | | | | first place. I was unaware of this option when originally committing this change. Submitted by: gcooper Approved by: cperciva MFC after: 3 days
* Merge a number of changes required to hook up OpenBSM 1.2-alpha2'srwatson2012-12-017-0/+32
| | | | | | | | | | | | | | | | | | | auditdistd (distributed audit daemon) to the build: - Manual cross references - Makefile for auditdistd - rc.d script, rc.conf entrie - New group and user for auditdistd; associated aliases, etc. The audit trail distribution daemon provides reliable, cryptographically protected (and sandboxed) delivery of audit tails from live clients to audit server hosts in order to both allow centralised analysis, and improve resilience in the event of client compromises: clients are not permitted to change trail contents after submission. Submitted by: pjd Sponsored by: The FreeBSD Foundation (auditdistd)
* Regenerate usb.confhselasky2012-11-281-2/+13
| | | | MFC after: 1 week
* Fix typo in weekly line which made it to rotated after reaching > 1 Kb.glebius2012-11-261-1/+1
| | | | | PR: conf/173857 Submitted by: Matt Smith <matt xtaz.co.uk>
* Revert r243228. This commit appears to cause more trouble thancrees2012-11-211-1/+1
| | | | | it was designed to avoid; the issue described in the PR was no longer an issue anyway.
* Do not put "already running" message when rc_quiet=yes.hrs2012-11-201-1/+4
| | | | PR: bin/165477
* cp -R misses out dotfiles; use pax instead to copy file hierarchiescrees2012-11-181-1/+1
| | | | | | | PR: conf/99721 (based on) Submitted by: Florian Zavatzki <f_zavatzki@blue-network.org> Approved by: hrs MFC after: 1 month
OpenPOWER on IntegriCloud