summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* s/ntpdate_command/ntpdate_program/ to match rc.conf(5) andceri2005-01-171-1/+1
| | | | | | | | | /etc/defaults/rc.conf. PR: conf/76188 Submitted by: Arne Wörner <arne_woerner at yahoo dot com> Approved by: murray MFC After: 7 days
* The submitter of bin/75786 turned out to not have removable interfaces,ceri2005-01-171-1/+1
| | | | | | | | | | and so the fix committed in r1.42 was not quite correct for the case where there are two or more DHCP consuming removable interfaces - dhclient must be restarted so that the other interfaces continue to function correctly. Approved by: murray MFC After: 7 days
* Remove debugging that made it into the commit.obrien2005-01-161-2/+0
|
* "REQUIRE: cleanvar" for all RC's writing into /var/run.obrien2005-01-1618-18/+20
|
* Fix the pbio include file installation process and thedds2005-01-141-0/+2
| | | | | | | corresponding documentation. Noticed by: ru Reviewed by: ru
* Don't do setuid checks on file systems mounted with noexec option.glebius2005-01-131-1/+1
| | | | | Reviewed by: brian, ru MFC after: 1 week
* Create three additional X socket directories. Using X applications when anotheranholt2005-01-121-5/+6
| | | | | | | user owns these directories or the sticky bit is unset may open security holes, so simply create them at startup with the correct owner/mode. MFC after: 1 day
* Sed doesn't grok '[ \t]' -- it doesn't expand the \t :(brian2005-01-121-1/+1
| | | | | | | As there are no tabs in maillog, reduce the expression so that only spaces are used. Problem raised by: Leif Neland root at internet dot dk
* Connect SHSEC GEOM class to the build.pjd2005-01-111-0/+2
|
* Oops, the < in arg1=< is optional - treat it as such!brian2005-01-111-1/+1
|
* Adjust the mail reject output so that it gives an abreviated reason for thebrian2005-01-111-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | reject. For example: Checking for rejected mail hosts: 48 getherbalnow.info (451... resolve) 46 absorb.com (451... resolve) 4 tgmart01.codns.com (553... exist) 3 kali.com.cn (451... resolve) 2 genie.com (451... resolve) 1 zv.qy (553... exist) 1 zd.hinet.hr (553... exist) .... The bit in parenthesis is the reject code and the last word on the line - enough to give the admin a better chance of seeing real problems (hopefully!). While I'm here, remove the "<" at the start of rejects coming from "from" addresses without a name@ part. I had to rewrite the patch given by the submitter as this script has been sed'ified (used to be perl) and I think the reject code is useful.... PR: 17377 Idea from: root at ns dot internet dot dk MFC after: 7 days
* Collapse "fgrep | egrep | sed" down to a single sed.brian2005-01-111-3/+1
| | | | | | This also trims extraneous commas from domain names. MFC after: 7 days
* Another prism2 card (not sure what, if anything, is needed for >=5)imp2005-01-111-0/+6
| | | | Pr: 43805
* Unbreak the install.ru2005-01-101-2/+0
|
* Cosmetic typo in check_pidfile()keramida2005-01-091-1/+1
| | | | | PR: bin/75946 Submitted by: zero@gddn.org (Finn)
* When ukbd0 arrives, attach to /dev/ukbd0 rather then /dev/kbd1 sincebrooks2005-01-081-1/+1
| | | | kbd1 might be something else.
* Correct syntactical weirdness in a call to /etc/rc.d/dhclient. Fixes:ceri2005-01-041-1/+1
| | | | | | | PR: bin/75786 Reported by: Radko Keves <rado at daemon dot sk> Approved by: murray MFC After: 5 days ( to RELENG_5 )
* Ports index file is now INDEX-6paul2005-01-041-1/+1
|
* Changes in comments:brueffer2004-12-251-4/+4
| | | | | | | | - correct a sentence so it actually has some meaning [1] - sprinkle some full stops Spotted by: markus [1] MFC after: 3 days
* NOCRYPT -> NO_CRYPTru2004-12-211-1/+1
|
* Start the dreaded NOFOO -> NO_FOO conversion.ru2004-12-217-7/+7
| | | | OK'ed by: core
* Use "KEYWORD: shutdown" so shutdown commands will actually be executed.peadar2004-12-201-0/+1
| | | | Approved by: dougb@
* When stopping a chrooted named, unmount the devfs filesystem frompeadar2004-12-201-0/+8
| | | | | | | the chroot area. This stops "umount -a" failing when dropping to single user. Reviewed by: dougb@
* In the ethernet-nic-regex:brueffer2004-12-191-5/+6
| | | | | | | | | | | | | - add udav(4) In the scsi-controller-regex: - correct an entry - move another one to the right place - add a bunch of missing drivers Glanced at by: trhodes (scsi-controller-regex part) MFC after: 3 days
* If /etc/named is a symlink, try to make sure it points the right place.phk2004-12-181-0/+4
|
* Remove autofs entry from here.pjd2004-12-151-2/+0
|
* Use rc.subrbrian2004-12-153-20/+21
| | | | | PR: 72505 Submitted by: Amir Shalem <amir@active.ath.cx>
* Improve the RC framework for the clean booting/shutdown of Jails:rse2004-12-143-5/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | 1. Feature: for flexibility reasons and as a prerequisite to clean shutdowns, allow the configuration of a stop/shutdown command via rc.conf variable "jail_<name>_exec_stop" in addition to the start/boot command (rc.conf variable "jail_<name>_exec_start"). For backward compatibility reasons, rc.conf variable "jail_<name>_exec" is still supported, too. 2. Debug: Add the used boot/shutdown commands to the debug output of the /etc/rc.d/jail script, too. 3. Security: Run the Jail start/boot command in a cleaned environment to not leak information from the host to the Jail during startup. 4. Feature: Run the Jail stop/shutdown command "jail_<name>_exec_stop" on "/etc/rc.d/jail stop <name>" to allow a graceful shutdown of the Jail before its processes are just killed. 5. Bugfix: When killing the remaining Jail processes give the processes time to actually perform their termination sequence. Without this the subsequent umount(8) operations usually fail because the resources are still in use. Additionally, if after trying to TERM-inate the processes there are still processes hanging around, finally just KILL them. 6. Bugfix: In rc.shutdown, if running inside a Jail, skip the /etc/rc.d/* scripts which are flagged with the KEYWORD "nojail" to allow the correct operation of rc.shutdown under jail_<name>_exec_stop="/bin/sh /etc/rc.shutdown". This is analogous to what /etc/rc does inside a Jail. Now the following typical host-configuration for two Jails works as expected and correctly boots and shutdowns the Jails: ----------------------------------------------------------- # /etc/rc.conf: jail_enable="YES" jail_list="foo bar" jail_foo_rootdir="/j/foo" jail_foo_hostname="foo.example.com" jail_foo_ip="192.168.0.1" jail_foo_devfs_enable="YES" jail_foo_mount_enable="YES" jail_foo_exec_start="/bin/sh /etc/rc" jail_foo_exec_stop="/bin/sh /etc/rc.shutdown" jail_bar_rootdir="/j/bar" jail_bar_hostname="bar.example.com" jail_bar_ip="192.168.0.2" jail_bar_devfs_enable="YES" jail_bar_mount_enable="YES" jail_bar_exec_start="/path/to/kjailer -v" jail_bar_exec_stop="/bin/sh -c 'killall kjailer && sleep 60'" ----------------------------------------------------------- # /etc/fstab.foo /v/foo /j/foo/v/foo nullfs rw 0 0 ----------------------------------------------------------- # /etc/fstab.bar /v/bar /j/bar/v/bar nullfs rw 0 0 ----------------------------------------------------------- Reviewed by: freebsd-hackers MFC after: 2 weeks
* Use utils from /rescue vs. /stand. Also use pax rather than cpio & gzip.obrien2004-12-122-2/+2
|
* Add Ethernet part of Intel EtherExpress PRO/100 LAN/Modem card. This is arsm2004-12-091-1/+8
| | | | | | | | | | rebadged Xircom REM56 RealPort card. Short MFC timeout to beat the 4.11 code freeze. PR: 53027 Submitted by: John Merryweather Cooper <coop9211 at uidaho dot edu> Approved by: imp (mentor) MFC after: 2 days
* 'all' argument for list_net_interfaces() is now unused, remove it.pjd2004-12-051-4/+0
|
* Use "ifconfig -l" instead of "list_network_interfaces all" inrse2004-12-051-1/+1
| | | | | | | | | | | | ifnet_rename() to support situations where rc.conf's $network_interfaces variable is set to an explicit list of network interfaces (instead of the default "auto"). Using "list_network_interfaces all" resulted in using $network_interfaces for both interface _renaming_ and interface _configuration_ which obviously cannot work either before (if the new name is in $network_interfaces) or after (if the old name is in $network_interfaces) renaming the interface.
* fix typo: s/intefraces/interfaces/rse2004-12-051-1/+1
|
* Add more frequently-used locale directories. This is in preparationkris2004-12-042-0/+406
| | | | | | | for cleanup of pkg-plist files with respect to handling of the share/locale subdirectories. MFC after: 3 days
* Catch up with the new device name of sab(4). The entries for tty[a,b]marius2004-12-041-0/+2
| | | | | | can't be removed as ofw_console(4) and zs(4) use them so one has to live with some complaints about non-existent devices at boot time and remove the respective entries locally for now.
* Add nfs4 to list of net filesystems.rees2004-12-011-1/+1
| | | | Approved by: alfred
* Move the purely device-name based entries for mice and ethernetiedowse2004-11-282-16/+7
| | | | | | | | adapters from usbd.conf to devd.conf. USB ethernet devices were already handled in devd.conf so this just removes their usbd.conf entry. PR: conf/73799
* Add axe(4) devices to the USB ethernet regular expression.iedowse2004-11-281-1/+1
| | | | | | MFC after: 1 week PR: conf/73239 Submitted by: Daan Vreeken
* Teach periodic(8) security output to display information about blockedmlaier2004-11-243-0/+57
| | | | | | | | | | | | | | | | | | packet counts by pf(4). This adds a ``daily_status_security_pfdenied_enable'' variable to periodic.conf, which defaults to ``YES'' as the matching IPF(W) versions. The output will look like this (line wrapped): pf denied packets: > block drop log on rl0 proto tcp all [ Evaluations: 504986 Packets: 0 Bytes: 0 States: 0 ] > block drop log on rl0 all [ Evaluations: 18559 Packets: 427 Bytes: 140578 States: 0 ] Submitted by: clive (thanks a lot!) MFC after: 2 weeks
* Fix a typo in an error message.mux2004-11-241-1/+1
| | | | Spotted by: ceri
* Implement per-jail fstab(5) files. Here's a rc.conf sample usingmux2004-11-232-0/+21
| | | | | | | | | | | | | this feature for a jail named foo : jail_foo_mount_enable="YES" jail_foo_fstab="/etc/fstab.foo" The second line is actually useless, since the code defaults to using "/etc/fstab.$jailname" as the fstab file if none is specified. MFC after: 3 days Submitted by: Jeremie Le Hen <jeremie@le-hen.org>
* Catch up with PHK's sio(4) cuaa->cuad rework [sys/dev/sio/sio.c rev. 1.456].obrien2004-11-191-1/+1
|
* Catch up with PHK's sio(4) cuaa->cuad rework [sys/dev/sio/sio.c rev. 1.456].obrien2004-11-191-1/+1
|
* Convince mergemaster to maintain/merge ramdisk scripts too.wes2004-11-161-1/+1
| | | | | Submitted by: Ben Kelly <ben.kelly@ieee.org> PR: bin/64079
* Shutup debugging output.wes2004-11-161-1/+0
|
* Unify the ci/co variables now that the the tty drivers now use the sameobrien2004-11-141-40/+35
| | | | character for both.
* Catch up with PHK's sio(4) rework [sys/dev/sio/sio.c rev. 1.456].obrien2004-11-141-23/+23
|
* Revert the noexec,nosuid,nodev options for md /tmp file systems, sincekeramida2004-11-091-1/+1
| | | | | | the change in the default behavior may break existing, working setups. Requested by: brooks
* Add two new rc.conf options: tmpmfs_flags and varmfs_flags.keramida2004-11-094-7/+9
| | | | | | | | | | | | | | These can be used to pass extra options to the mdmfs(8) utility, to customize the finer details of the md file system creation (i.e. to turn on/off softupdates, to specify a default owner for md filesystem, etc). Use these two new flags to mount tmpmfs and varmfs without softupdates, since it doesn't make much sense to use SU on malloc-backed file systems. Reviewed by: mtm Inspired by: J. D. Bronson, jbronson at wixb dot com
* Removed the remnants of gx(4).ru2004-11-081-1/+1
|
OpenPOWER on IntegriCloud