summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Set svn:executable to *.delphij2010-01-111-0/+0
| | | | MFC after: 1 month
* Properly make the end key work again for TERM=xterm.ed2010-01-101-2/+2
| | | | | | | | | | I've been so busy hacking on utmpx the last couple of days, out of reflex, I committed it to the wrong source tree. Note to myself: don't hack on FreeBSD while watching TV at the same time. PR: conf/142578 Submitted by: Yuri Pankov <yuri pankov gmail com> Reminded by: stefanf
* The client type rule allows DHCP, implicitly. Since DHCPv6 usesume2010-01-091-0/+2
| | | | | | | link-local address unlike with DHCP, we need one more rule to allow the DHCPv6. Reported by: David Horn <dhorn2000__at__gmail.com>
* Since the IPv4 rule allows ICMP_TIMXCEED, allowume2010-01-071-1/+4
| | | | | ICMP6_TIME_EXCEEDED as well for workstation type firewall. It makes traceroute6 work.
* Expose the upper 256 ptys in the default devfs rules. I should have updatedjhb2010-01-041-0/+16
| | | | | | | this when expanding the old pty(4) driver to use 512 ptys by default. This is more important for 7.x. MFC after: 1 week
* Forced commit, to provide correct commit message for r201440:gavin2010-01-031-1/+1
| | | | | | | | | | | | | | Don't complain when we encounter the "cache" source, it's valid. Also fix the error message to include a line feed and not include a stray comma. PR: bin/121671 Submitted by: Artis Caune artis.caune gmail.com Approved by: ed (mentor) MFC after: 2 weeks While here, change "> /dev/stderr" for more usual ">&2" Submitted by: jilles
* The default hash table size is 257 not 255. Reword the rest of the linegavin2010-01-031-2/+2
| | | | | | | | slightly while here. PR: bin/121671 Submitted by: Artis Caune artis.caune gmail.com Approved by: ed (mentor)
* s/named_confidr/named_confdir/ in the rndc.key check. The line indougb2010-01-011-2/+2
| | | | | | | the command to create it was right, but the check was wrong, so it was getting created every time. Mea culpa. Submitted by: oliver
* With the introduction of named_conf the -c example in named_flagsdougb2010-01-011-1/+1
| | | | | is no longer necessary or desirable. Update the comment to indicate that _flags should be used for options other than -u and -c.
* The script hard-coded the assumption that the "configuration directory"dougb2010-01-011-20/+21
| | | | | | | | | | | would be "/etc/namedb" in a number of places. Since the user may make a different choice, introduce a new internal variable, named_confdir that is generated relative to the location of $named_conf. While this will work for some things (especially a highly customized build from ISC source) there are still a number of places where /etc/namedb is assumed that it is not easily virtualized (E.g., mtree). If you deviate from the defaults you'd better know what you're doing. :)
* Remove a trailing reference to the obsolete vaps_<IF> variable.jhb2009-12-291-1/+1
| | | | | Reviewed by: brooks MFC after: 3 days
* Add support for configuring vlan(4) interfaces as child devices similar tojhb2009-12-292-2/+50
| | | | | | | | | | | | | | wlan(4) interfaces. vlan(4) interfaces are listed via a new 'vlans_<IF>' variable. If a vlan interface is a number, then that number is treated as the vlan tag for the interface and the interface will be named '<IF>.<tag>'. Otherwise, the vlan tag must be provided via a vlan parameter in a 'create_args_<vlan>' variable. While I'm here, fix a few nits in rc.conf(5) and mention create_args_<IF> in the description of cloned_interfaces. Reviewed by: brooks MFC after: 2 weeks
* Remove examples for pppd and SLIP-related stuff.trasz2009-12-291-8/+0
|
* Add missing me6 rules. Now, the IPv6 rules become equivalentume2009-12-291-0/+29
| | | | | | to the IPv4 rules. Reported by: David Horn <dhorn2000__at__gmail.com>
* Update the comments about files ending in .shdougb2009-12-271-4/+5
| | | | Prompted by: Alex Kozlov <spam@rm-rf.kiev.ua>
* Delete some trailing whitespacedougb2009-12-271-2/+2
|
* rc.subr: Use pwait in wait_for_pids.jilles2009-12-211-1/+1
| | | | | | | | | | This waits for the requested process(es) to terminate, rather than polling with an interval of 2 seconds. If pwait is not available, the old method is used. PR: conf/132766 Reviewed by: dougb
* The named process needs to have a "working directory" that it candougb2009-12-152-95/+97
| | | | | | | | | | | | | | | | | | | write to. This is specified in "options { directory }" in named.conf. So, create /etc/namedb/working with appropriate permissions, and update the entry in named.conf to match. In addition to specifying the working directory, file and path names in named.conf can be specified relative to the directory listed. However, since that directory is now different from /etc/namedb (where the configuration, zone, rndc.*, and other files are located) further update named.conf to specify all file names with fully qualified paths. Also update the comment about file and path names so users know this should be done for all file/path names in the file. This change will eliminate the 'working directory is not writable' messages at boot time without sacrificing security. It will also allow for features in newer versions of BIND (9.7+) to work as designed.
* Revert the xterm terminal behavior to NOT clear the screen afterdougb2009-12-141-1/+6
| | | | | | | | | exiting a pager, vi, etc. Add some example xterm*-clear entries to the termcap files to make it easier for people to enable that behavior. Document the examples in the man page to make them easier to find.
* Since the change to rc.subr in r198162 it's not necessary to specifydougb2009-12-121-7/+16
| | | | | | | | | | | | | | | | | | | | | | | | | command in the rc.d script if we have a corresponding ${name}_program entry, which we do for named. Rename named_precmd to named_prestart to make it more clear and match convention. Move the command_args definition related to -u up into _prestart(). It (and the associated $named_uid value) are only used there, and unlike required_* and pidfile don't need to be used until this stage. Fix a silly bug that would only have affected people who were using the new named_wait or named_auto_forward features, AND had set up an rndc.conf file instead of using the automatically generated rndc.key. For named_conf: Add "-c $named_conf" to command_args if it's not set to the default. If it is set to the default and we're using the base BIND it's not necessary. If we're using BIND from the ports the user is likely to have included it in _flags (due to long necessity for doing so) so don't duplicate that if it's set. Add $named_conf to required_files
* Install firmware(9) examples.antoine2009-12-121-0/+6
| | | | MFC after: 1 month
* Update to the December 12, 2008 version of this file. The onedougb2009-12-111-18/+19
| | | | | substantive change is to add the IPv6 address of L. The other changes are all CAPS LOCK related.
* Update termcap entries for xterm.ed2009-12-101-22/+22
| | | | | | | | | | It turns out these entries do make Terminal.app behave a little better. According to Thomas Dickey, Terminal.app should use TERM=nsterm anyway, but we don't support this yet. Already having an improved termcap entry helps, so I am going to MFC this change after all. Suggested by: Leonidas Tsampros <ltsampros upnet gr> MFC after: 1 month
* Disable SSL renegotiation in order to protect against a seriouscperciva2009-12-031-1/+1
| | | | | | | | | | | | | | | protocol flaw. [09:15] Correctly handle failures from unsetenv resulting from a corrupt environment in rtld-elf. [09:16] Fix permissions in freebsd-update in order to prevent leakage of sensitive files. [09:17] Approved by: so (cperciva) Security: FreeBSD-SA-09:15.ssl Security: FreeBSD-SA-09:16.rtld Security: FreeBSD-SA-09:17.freebsd-udpate
* Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6ume2009-12-027-365/+175
| | | | | | | and rc.d/ip6fw. Reviewed by: dougb, jhb MFC after: 1 month
* Use cons25w on pc98.ed2009-11-131-9/+9
| | | | Discussed with: nyan
* Convert syscons on i386 to TERM=xterm.ed2009-11-131-9/+9
| | | | | TEKEN_XTERM is now gone. Because we always use xterm mode now, we only need a TEKEN_CONS25 switch to go back to cons25.
* Split up etc.i386/ttys into a PC98 version as well.ed2009-11-132-2/+314
| | | | | | This means I can now convert syscons on i386 to xterm as well. Discussed with: nyan
* Switch the default terminal emulation style to xterm for most platforms.ed2009-11-137-48/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Right now syscons(4) uses a cons25-style terminal emulator. The disadvantages of that are: - Little compatibility with embedded devices with serial interfaces. - Bad bandwidth efficiency, mainly because of the lack of scrolling regions. - A very hard transition path to support for modern character sets like UTF-8. Our terminal emulation library, libteken, has been supporting xterm-style terminal emulation for months, so flip the switch and make everyone use an xterm-style console driver. I still have to enable this on i386. Right now pc98 and i386 share the same /etc/ttys file. I'm not going to switch pc98, because it uses its own Kanji-capable cons25 emulator. IMPORTANT: What to do if things go wrong (i.e. graphical artifacts): - Run the application inside script(1), try to reduce the problem and send me the log file. - In the mean time, you can run `vidcontrol -T cons25' and `export TERM=cons25' so you can run applications the same way you did before. You can also build your kernel with `options TEKEN_CONS25' to make all virtual terminals use the cons25 emulator by default. Discussed on: current@
* Execute the start/stop process of a jail in the background.remko2009-11-021-1/+1
| | | | | | | | | | | This will prevent that the script hangs during startup, which could cause annoying effects after rebooting for example. PR: kern/139422 Submitted by: Andrey Groshev <greenx at yartv dot ru> Approved by: imp (mentor, implicit) MFC after: 3 days Facilitated by: Snow B.V.
* Use double-quotation marks to fix the unexpanded variable issue.hrs2009-10-231-3/+3
| | | | Spotted by: swell.k
* Add empty watchdogd_flags.brueffer2009-10-211-0/+1
| | | | | | PR: 136620 Submitted by: amdmi3 MFC after: 3 days
* Partially revert the change to the gettytab made in r198214.ed2009-10-191-1/+1
| | | | | | | | | By misinterpreting some data, I thought that getty wouldn't apply any baud rate to the syscons devices, but it uses the default entry instead. This means that the baud rate is set to 1200. This isn't too bad, except when using canonical mode. Make it use 9600 baud by default. MFC after: 1 week
* Fix qouting in a comment, to make it look more consistented2009-10-181-1/+1
| | | | | Submitted by: Jille Timmermans <jille quis cx> MFC after: 1 week
* Allow the buffer size to be configured for pseudo-like TTY devices.ed2009-10-181-1/+1
| | | | | | | | | | | | | | | Devices that don't implement param() (which means they don't support hardware parameters such as flow control, baud rate) hardcode the baud rate to TTYDEF_SPEED. This means the buffer size cannot be configured, which is a little inconvenient when using canonical mode with big lines of input, etc. Make it adjustable, but do clamp it between B50 and B115200 to prevent awkward buffer sizes. Remove the baud rate assignment from /etc/gettytab. Trust the kernel to fill in a proper value. Reported by: Mikolaj Golub <to my trociny gmail com> MFC after: 1 month
* Remove a circular dependency on routingdougb2009-10-172-2/+2
| | | | | Submitted by: Mykola Dzham <freebsd@levsha.org.ua> Approved by: hrs
* Allow $name_program to override $command in a more robust way thatdougb2009-10-151-1/+1
| | | | will not cause the value to be null if $command is not set.
* In regards to the "Starting foo:" type messages at boot time, create anddougb2009-10-1017-36/+45
| | | | | | | | | | | | | | | | | | | | | | | employ a more generic solution, and use it in the individual rc.d scripts that also have an $rc_quiet test: 1. Add check_startmsgs() to rc.subr. 2. In the rc.d scripts that use rc_quiet (and rc.subr) substitute variations of [ -z "$rc_quiet" ] with check_startmsgs 3. In savecore add a trailing '.' to the end of the message to make it more consistent with other scripts. 4. In newsyslog remove a : before the terminal '.' since we do not expect there to be anything printed out in between to make it more consistent. 5. In the following scripts change "quotes" to 'quotes' where no variables exist in the message: savecore pf newsyslog 6. In the following scripts substitute if/then/fi for the simpler (and more consistent) check_startmsgs &&: faith stf 7. In the following scripts separate the "Starting foo:" from the terminal '.' to make them more consistent: moused hostname pf 8. In nfsclient move the message to its own line to avoid a style bug 9. In pf rc_quiet does not apply to the _stop method, so remove the test there. 10. In motd add 'quotes' around the terminal '.' for consistency
* Fix a case when both ${name}_program and ${command} are defined.hrs2009-10-051-1/+1
| | | | Spotted by: Michio "Karl" Jinbo
* tabifydes2009-10-057-14/+14
| | | | MFC after: 3 weeks
* Change the pam_ssh examples: if you use it, you probably want want_agent.des2009-10-055-5/+5
| | | | MFC after: 3 weeks
* Add OpenVPN IANA assigned port number.rpaulo2009-10-031-0/+2
|
* - Enable an afexists() check only when no AF argument is specified.hrs2009-10-021-55/+76
| | | | | | - Simplify helper functions. Discussed with: ume
* The net.inet.tcp.log_in_vain accepts 0, 1 or 2, not Y/N.hrs2009-10-021-5/+8
|
* Revert the previous afexists() change. Knobs configured explicitly byhrs2009-10-023-12/+0
| | | | | | | the user should not be ignored if possible even if the kernel does not support the prerequisite feature. Discussed with: ume
* - Split routing_*() and option_*() to *_AF() and add afexists() checkhrs2009-10-021-55/+85
| | | | | | | | for each address family. Replace AF_static() with static_AF() for consistency. - Display a message only if the user sets a non-default value, and set a sysctl explicitly even if it is the default value.
* - Fix logic inversion bug of net.inet.tcp.rfc1323[*].hrs2009-10-021-15/+34
| | | | | | | | | | - Split netoptions_start() to netoptions_AF() and add afexists() check for each address family. - Display a message only if the user sets a non-default value, and set a sysctl explicitly even if it is the default value. Spotted by: Pegasus Mc Cleaft[*]
* - Add AF_IPX and AF_NATM to afexists().hrs2009-10-026-16/+43
| | | | | | - Add afexists() check to address family specific rc.d scripts. A script for an AF will be silently ignored if the kernel has no support for the AF.
* Don't do an IPv6 operation when the kernel doesn't haveume2009-09-302-7/+14
| | | | | | | | an IPv6 support. Reported by: Alexander Best <alexbestms__at__math.uni-muenster.de> Confirmed by: Paul B. Mahol <onemda__at__gmail.com>, Alexander Best <alexbestms__at__math.uni-muenster.de>
* By popular acclaim, enable "Starting foo:" messages by defaultdougb2009-09-291-1/+1
|
OpenPOWER on IntegriCloud