summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Merge remote-tracking branch 'origin/releng/10.3' into RELENG_2_3Renato Botelho2016-03-172-1/+6
|\
| * MFC 296943:ian2016-03-161-1/+1
| | | | | | | | | | | | | | | | Require firewall setup before running rc.d/netwait, otherwise the ping packets sent by netwait may not get through. PR: 207916 Approved by: re (marius)
| * MFS r296797:dchagin2016-03-151-0/+5
| | | | | | | | | | | | | | | | MFC r296542: Load linux64 module for amd64 if Linux abi enabled. Reviewed by: emaste@ Approved by: re (marius) Differential Revision: https://reviews.freebsd.org/D5567
| * - Copy stable/10@296371 to releng/10.3 in preparation for 10.3-RC1marius2016-03-041-1/+1
| | | | | | | | | | | | | | | | | | builds. - Update newvers.sh to reflect RC1. - Update __FreeBSD_version to reflect 10.3. - Update default pkg(8) configuration to use the quarterly branch. Approved by: re (implicit)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-151-4/+4
|\ \ | |/
| * MFC r295495 - Update leapsecond file in non-chroot environments.cy2016-02-141-4/+4
| | | | | | | | | | | | PR: 207095 Submitted by: madpilot Approved by: re (marius)
* | Merge remote-tracking branch 'origin/stable/10' into develLuiz Otavio O Souza2016-02-1310-1/+356
|\ \ | |/
| * MFC r289421, r293037, r294773, and r294884.cy2016-02-1010-1/+356
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ntp leap-leapseconds support. r289421: Add default leap-seconds file. This should help ntp networks get the leap second date correct Updates to the file can be obtained from ftp://time.nist.gov/pub/ or ftp://tycho.usno.navy.mil/pub/ntp/. r293037: Update leap-seconds to latest. This will satisfy the ntpd leap-second version check. r294773: Add support for automatic leap-second file updates. The working copy of leapfile resides in /var/dbntpd.leap-seconds.list. /etc/ntp/leap-seconds (periodically updated from ftp://time.nist.gov/pub/ or ftp://tycho.usno.navy.mil/pub/ntp/) contains the master copy should automatic leapfile updates be disabled (default). Automatic leapfile updates are fetched from $ntp_leapfile_sources, defaulting to https://www.ietf.org/timezones/data/leap-seconds.list, within $ntp_leapfile_expiry_days (default 30 days) from leap-seconds file expiry. Automatic updates can be enabled by setting $daily_ntpd_leapfile_enable="YES" in periodic.conf. To avoid congesting the ntp leapfile source the automatic update randomized by default but can be disabled through daily_ntpd_avoid_congestion="NO" in periodic.conf. r294884: Allow specification of fetch options for ntp leap-seconds fetch. Approved by: re (gjb)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-02-032-4/+4
|\ \ | |/
| * MFC: r295032marius2016-02-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Use '^[>+][^+]' instead of '^[>+]' with grep(1) when filtering the diff(1) output between two files in "new_only"-mode. Otherwise, with the default of using unified format a remnant of the header in the output is the result. This is especially irritating when the two files differ but the second one is empty, amounting to the vestige of the header being the only readout. Reported by: Stefan Haemmerl Approved by: re (delphij)
| * MFC r294749:jamie2016-01-281-3/+3
| | | | | | | | | | | | | | | | Allow the (old rc-style) exec_afterstart jail parameters to start numbering at 0, like exec_prestart and the others do. Make param0 optional, i.e. still look for param1. PR: 142973
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-275-6/+10
|\ \ | |/
| * MFH (r277706): allow the user to specify the location of control.confdes2016-01-261-0/+2
| |
| * MFH (r290008): load_rc_config no longer requires a service namedes2016-01-262-2/+2
| |
| * MFH (r290006): loading rc.subr and rc.conf has no effect heredes2016-01-261-3/+0
| |
| * MFH (r290743): support an exclusion regex, like security/200.chkmountsdes2016-01-261-1/+6
| |
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-253-59/+76
|\ \ | |/
| * MFC r292752:ian2016-01-243-59/+76
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Enhance rc.d/netwait script to wait for late-attaching interfaces such as USB NICs. USB network hardware may not be enumerated and available when the rc.d networking scripts run. Eventually the USB attachment completes and devd events cause the network initialization to happen, but by then other rc.d scripts have already failed, because services which depend on NETWORKING (such as mountcritremote) may end up running before the network is actually ready. There is an existing netwait script, but because it is dependent on NETWORKING it runs too late to prevent failure of some other rc scripts. This change flips the order so that NETWORKING depends on netwait, and netwait now depends on devd and routing (the former is needed to make interfaces appear, and the latter is needed to run the ping tests in netwait). The netwait script used to be oriented primarily towards "as soon as any host is reachable the network is fully functional", so you gave it a list of IPs to try and you could optionally name an interface and it would wait for carrier on that interface. That functionality still works the same, but now you can provide a list of interfaces to wait for and it waits until each one of them is available. The ping logic still completes as soon as the first IP on the list responds. These changes were submitted by Brenden Molloy <brendan+freebsd@bbqsrc.net> in PR 205186, and lightly modified by me to allow a list of interfaces instead of just one. PR: 205186 Relnotes: yes
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-141-4/+5
|\ \ | |/
| * o Fix SCTP ICMPv6 error message vulnerability. [SA-16:01.sctp]glebius2016-01-141-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | o Fix Linux compatibility layer incorrect futex handling. [SA-16:03.linux] o Fix Linux compatibility layer setgroups(2) system call. [SA-16:04.linux] o Fix TCP MD5 signature denial of service. [SA-16:05.tcp] o Fix insecure default bsnmpd.conf permissions. [SA-16:06.bsnmpd] Security: FreeBSD-SA-16:01.sctp, CVE-2016-1879 Security: FreeBSD-SA-16:03.linux, CVE-2016-1880 Security: FreeBSD-SA-16:04.linux, CVE-2016-1881 Security: FreeBSD-SA-16:05.tcp, CVE-2016-1882 Security: FreeBSD-SA-16:06.bsnmpd, CVE-2015-5677
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2016-01-072-61/+75
|\ \ | |/
| * MFC r292570:ngie2016-01-061-0/+6
| | | | | | | | | | | | Integrate tools/regression/mac/mac_bsdextended and tools/regression/mac/mac_portacl into the FreeBSD test suite as tests/sys/mac/bsdextended and tests/sys/mac/portacl, respectively
| * Add `..` after sys/kern/pipe entry accidentally missed in r291183ngie2016-01-051-0/+1
| | | | | | | | | | | | | | | | This is a direct commit to stable/10 Pointyhat to: ngie Reported by: rodrigc Sponsored by: EMC / Isilon Storage Division
| * MFC nv(3) and part of nv(9) to stable/10ngie2015-12-311-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This includes the following revisions from head: r258065,r258594,r259430,r260222,r261407,r261408,r263479,r264021,r266351, r269603,r271026,r271027,r271028,r271241,r271578,r271579,r271847,r272102, r272843,r273752,r277920,r277921,r277925,r277926,r277927,r279421,r279422, r279423,r279424,r279425,r279426,r279427,r279428,r279429,r279430,r279431, r279432,r279434,r279435,r279436,r279438,r279439,r279440,r279760,r282122, r282254,r282257,r282304,r282312,r285339,r288340 This change reverts stable/10@r282122 and stable/10@r288340, and re-MFCs the series again (r282122, r285339, and r288340). More changes are pending to nv(9)/pci(4) after further review/work. Please see the Phabricator review for more details (both https://reviews.freebsd.org/D4232 and https://reviews.freebsd.org/D4249 ). - Tested with: -- Booting VMware Fusion 8.1.0 running on a Haswell Apple Macbook Pro -- Booting a Haswell machine with zfs and running some stress workloads with VirtualBox guests -- make tinderbox -- kyua test -k /usr/tests/lib/libnv Differential Revision: https://reviews.freebsd.org/D4249 (part of a larger diff) Relnotes: yes Reviewed by: oshogbo (implicit), sbruno (implicit) Submitted by: Kevin Bowling <kevin.bowling@kev009.com> Sponsored by: EMC / Isilon Storage Division
| * MFC r287220:jamie2015-12-311-1/+1
| | | | | | | | Fix a conversion error in rc.d/jail
| * MFC r292759:jamie2015-12-311-60/+66
| | | | | | | | | | | | | | | | | | | | | | | | | | Let old-style (shell-based) jail configuration handle jail names that contain characters not allowed in a shell variable (such as "-"). These will be replaced by an underscore in jail config variables, e.g. for jail "foo-bar" you would set "jail_foo_bar_hostname". This is separate from the current code that changes the jail names if they contain "." or "/". It also doesn't apply to jails defined in a jail.conf file. PR: 191181
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2015-12-302-2/+6
|\ \ | |/
| * MFC r292317,r292318,r292323,r292324,r292665:ngie2015-12-281-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r292317: Integrate tools/regression/lib/libc/resolv into the FreeBSD test suite as lib/libc/tests/resolv Convert the testcases to ATF Sponsored by: EMC / Isilon Storage Division r292318: Add Makefile accidentally missed in r292317 Sponsored by: EMC / Isilon Storage Division r292323: Integrate tools/regression/lib/libc/nss into the FreeBSD test suite as lib/libc/tests/nss - Convert the testcases to ATF - Do some style(9) cleanups: -- Sort headers -- Apply indentation fixes -- Remove superfluous parentheses - Explicitly print out debug printfs for use with `kyua {debug,report}`; for items that were overly noisy, they've been put behind #ifdef DEBUG conditionals - Fix some format strings Sponsored by: EMC / Isilon Storage Division r292324: Iterate down lib/libc/tests/nss... Sponsored by: EMC / Isilon Storage Division r292665: Increase the timeout for resolv_test from the default (300 seconds) to 450 seconds This is required on slower network connections, and on older releases (stable/10 seems to be slower as far as name resolution goes.. not sure why yet). Remove an outdated comment in the Makefile from when I was working on this code over a year ago on github Sponsored by: EMC / Isilon Storage Division
| * MFC r290515: periodic: Fix backwards compatibility forjilles2015-12-281-2/+2
| | | | | | | | | | | | | | | | | | | | | | daily_status_security_* vars. Most daily_status_security_* variables in periodic.conf were changed to security_status_* in SVN r254974. The compatibility code for the old names did not work. PR: 204331 Submitted by: martin at lispworks.com
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2015-12-283-139/+144
|\ \ | |/
| * MFC r292564:jlh2015-12-241-138/+139
| | | | | | | | | | | | | | | | | | | | | | Add port for IRC over TLS/SSL, as noted in RFC 7194. PR: 192505 Submitted by: loic.blot@unix-experience.fr MFC r292694: Replace all whitespaces between port name and number with tabs.
| * MFC r292313:lidl2015-12-231-0/+4
| | | | | | | | | | | | Skip unavailable pools when running zfs pool scrubs Approved by: rpaulo (mentor)
| * MFC r290405:lidl2015-12-231-1/+1
| | | | | | | | | | | | | | | | | | Restrict 520.pfdenied to only list rules that blocked traffic. Before this change, the 520.pfdenied script listed all rules that matched /^block/ in the rule. Restrict the printed output to only those rules that result in packets being dropped. Approved by: rpaulo (mentor)
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2015-12-221-8/+8
|\ \ | |/
| * MFC r291770: rc.subr: Check for running daemons before a custom start_cmdjilles2015-12-181-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | is executed. Currently rc scripts implementing their own start_cmd do not enjoy the benefits of rc.subr's own check for rc_pid. This leads to around a third of ports with such a start_cmd not to check for the process at all and two thirds of ports to re-implement this check (sometimes wrongly). This patch moves the check for rc_pid to before ${rc_arg}_cmd is executed. Submitted by: Dirk Engling Reviewed by: feld Relnotes: yes
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2015-12-174-1/+17
|\ \ | |/
| * MFC r276669,r276723:ngie2015-12-151-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | r276669: Integrate bin/cat/tests from NetBSD into atf/kyua Sponsored by: EMC / Isilon Storage Division r276723: Install d_align.{in,out} for the :align test Pointyhat to: me
| * MFC: r291536rmacklem2015-12-143-1/+15
| | | | | | | | | | | | | | | | Add support for the new "-manage-gids" option for the nfsuserd daemon to the rc scripts. With these changes, setting nfs_server_managegids="YES" in /etc/rc.conf will enable this capability. Relnotes: yes
* | pfSense: Add al.Pc entry to /etc/gettytabRenato Botelho2015-12-151-0/+3
| |
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2015-12-141-19/+268
|\ \ | |/
| * MFC r291703:hselasky2015-12-141-19/+268
| | | | | | | | Regenerate usb.conf .
* | Use quarterly repo, pfSense FreeBSD-ports is based on itRenato Botelho2015-12-101-1/+1
| |
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2015-12-103-13/+35
|\ \ | |/
| * MFC r290083:bdrewery2015-12-041-10/+10
| | | | | | | | Use more appropriate ${SHAREDIR} rather than /usr/share.
| * MFC r289393:bdrewery2015-12-041-0/+1
| | | | | | | | Add more SUBDIR_PARALLEL.
| * MFH (r287917, r287918, r289063): upgrade to latest Unbounddes2015-12-041-3/+24
| | | | | | | | | | | | | | | | MFH (r283301, r289592, r291582): rc script improvements MFH (r287880): respect manually configured forwarders when using DHCP MFH (r289321): deconfuse man page PR: 184047 203580 204931
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2015-11-231-0/+4
|\ \ | |/
| * MFC r290914:ngie2015-11-231-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Integrate tools/regression/pipe in to the FreeBSD test suite as tests/sys/kern/pipe - Fix style(9) bugs - Fix compiler warnings - Use `nitems(x)` instead of `sizeof(x) / sizeof(*x)` pattern The testcases will be converted over to ATF eventually, but for now will be integrated in as plain C tests Sponsored by: EMC / Isilon Storage Division
| * MFC r290905,r290922:ngie2015-11-231-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | r290905: Integrate acct(2) testcase in as tests/sys/kern/acct/acct_test The :encode_tv_random_million testcase fails the epsilon tests a few thousand times out of one million, so expect the testcase to fail Submitted by: keramida Sponsored by: EMC / Isilon Storage Division r290922: Remove directory made obsolete by r290905 X-MFC note: stable/10 only Sponsored by: EMC / Isilon Storage Division
* | Merge remote-tracking branch 'origin/stable/10' into develRenato Botelho2015-11-161-0/+10
|\ \ | |/
OpenPOWER on IntegriCloud