summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Add entry for rusiian FAQ.dt1998-12-301-1/+5
|
* Slightly clarify wording of "Example".hoek1998-12-291-2/+2
|
* Don't set a MANPATH by default for users who aren't in a login class.cwt1998-12-271-3/+2
| | | | | | | | | man(1) will utilize manpath(1) if MANPATH is unset in the environment, and with our existing manpath.config it is enough to find the X11 pages among others. PR: 8587 Submitted by: Marc Slemko <marcs@znep.com>
* Update comment for saver variable now that its changed its functionjkh1998-12-271-2/+2
| | | | (and list of available values) somewhat.
* List the warp screensaver along with the others.des1998-12-271-2/+2
|
* follow up to:phk1998-12-271-9/+1
| | | | Pre 3.0 branch cleanup casualty #4: pcvt
* Add (commented out) directive and note regarding dumpfile locationdillon1998-12-231-1/+7
| | | | | | when running in a sandbox. Submitted by: Ben Smithurst <ben@scientia.demon.co.uk>
* Add /usr/share/examples/bootforth so that world builds don't start fallingjkh1998-12-221-1/+3
| | | | | | over. Forgotten by: abial :-)
* Take bind out of sandbox and run it as root again, but leave supportdillon1998-12-191-3/+8
| | | | | | mechanisms ('bind' user and group) in place so the feature can be easily turned on. There were too many complaints. The security(1) man page will be created/updated to include the appropriate info.
* Add share/emacs/site-lisp. Too many things break without it.asami1998-12-181-1/+5
| | | | Reviewed by: ports list (a long time ago)
* Document securelevel 3.ghelmer1998-12-161-2/+2
| | | | PR: docs/8674
* Old nit lying around in a source tree: Slightly optimize the number ofpeter1998-12-161-13/+15
| | | | uname/gname overrides and /sets.
* Old nit lying around: Don't override the gname when it's the same as thepeter1998-12-161-2/+2
| | | | previous /set.
* Old stuff laying around: Don't override /tmp to the same uid/gid as thepeter1998-12-161-2/+2
| | | | previous /set defaults
* Added /usr/share/examples/portal to mtreedillon1998-12-161-1/+3
|
* Add another modem (Psion Dacom)msmith1998-12-152-2/+14
| | | | Submitted by: "Gary Palmer" <gpalmer@FreeBSD.ORG>
* More locale directory structure updates for DIS_8859-15dillon1998-12-141-1/+45
|
* Fix installworld, forgot directories for locale DIS_8859-15dillon1998-12-142-2/+8
|
* Remove rc.local (now deleted from CVS tree) from Makefile.dillon1998-12-141-2/+2
|
* Grrr. removed. backed out. sorry.dillon1998-12-131-3/+1
|
* This needs to be commited now to fix usbd for make worlddillon1998-12-131-1/+3
|
* Reviewed by: cvs-currentdillon1998-12-121-15/+0
| | | | | | Delete rc.local from CVS tree, its remaining functionality has been moved to /etc/rc. /etc/rc still supports an rc.local but it is now a 100% user-controlled file.
* Reviewed by: cvs-currentdillon1998-12-123-23/+43
| | | | | | Commit changes to rc and rc.local, removing the remaining minimal functionality of rc.local into rc and commenting it out of rc.local prior to the deletion of rc.local from the CVS tree.
* Back out revs 1.181 and 1.182 which upset a few people. I hope thosejb1998-12-121-24/+1
| | | | | | | (3?) people will make an effort to help those who would have benefitted from this change. And just telling them that they should read and understand the significance of each message posted to -current is not really good enough IMHO.
* Add directories for KLD examples.dfr1998-12-111-1/+15
|
* Should be sysctl -n. Yesterday wasn't one of my better days. Doh.jb1998-12-111-2/+2
| | | | Reported by: Ben Smithurst & Makoto Matsushita
* Change to the current directory before doing the install. I !love make.jb1998-12-111-1/+2
|
* Add a test for hw.machine == i386 before trying to run ldconfig forjb1998-12-101-12/+15
| | | | legacy aout support.
* Add logic to check if any of the BIN1 files do not already exist injb1998-12-101-1/+23
| | | | | | | ${DESTDIR}/etc and an install target to install the missing ones. This allows new files like pam.conf to be installed by the first installworld after the file is added, but avoid clobbering files that might be customized. This should save some support questions.
* Since we do not pre-create /etc/namedb/s, add additional documentationdillon1998-12-021-2/+6
| | | | | | to the comments in named.conf to describe to the user how to create it. (named.conf does not use /etc/namedb/s by default anyway so us not pre-created it in the mtree does not hurt us terribly).
* Remove mtree creation of /etc/namedb/s until we find a good waydillon1998-12-021-3/+5
| | | | to handle new user id's in buildworld/installworld.
* Use /sbin/nologin as shell for operatorache1998-12-021-1/+1
| | | | | | Replace non-existent directory for operator with / Supply by default operator with non-existent but can be created directory and /bin/csh is kinda security risk
* comsat sandbox prevents biff/comsat from being able to print partialdillon1998-12-011-1/+3
| | | | | | mailbox contents. comsat instead simply prints that new mail is available. Add appropriate comment to inetd.conf but leave comsat in sandbox.
* Reviewed by: freebsd-current, freebsd-securitydillon1998-12-013-6/+12
| | | | | | | | Adjust rc.conf to run named in sandbox, adjust mtree to add /etc/namedb/s subdirectory (user bind, group bind) to hold secondaries, adjust comments in named.conf to reflect new secondary scheme. (Note that core read-only zone files are left owned by root, increasing security even more).
* Added group bind(53), added sandbox users tty(4), kmem(5), and bind(53),dillon1998-12-013-5/+9
| | | | | | | | | | adjustd inetd.conf to run comsat and ntalk from tty sandbox, and the (commented out) ident from the kmem sandbox. Note that it is necessary to give each group access it's own uid to prevent programs running under a single uid from being able to gdb or otherwise mess with other programs (with different group perms) running under the same uid.
* Direct std{err,out} to /dev/null when invoking sysctl(8) for settingjkoshy1998-11-277-21/+28
| | | | | | `nfs_access_cache_timeout'. Submitted by: Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
* Don't suggest that NO is allowed here; you use "0" or "" to turn the cachemsmith1998-11-251-2/+2
| | | | | off. Submitted by: jdp
* Add a sample "/etc/pam.conf" file that configures the authenticationjdp1998-11-202-2/+26
| | | | | | | | | | | | | | | | | | methods used by login. Changes to "/usr/bin/login" to use it will be committed later today. The format of the file is described in pam(8). This sample file makes login behave in the traditional way. To wit, it enables authentication via S/Key and passwd/NIS lookups. KerberosIV authentication is present in the sample file but commented out. As a safety net and a transition aid, login will fall back on built-in passwd/NIS authentication if this configuration file is missing or if some other fatal PAM error occurs. This file will eventually replace "/etc/auth.conf", but not until I've finished converting the other utilities, such as passwd and su.
* Bad default value of ${fs} for type:=host in /etc/amd.map.obrien1998-11-201-1/+1
| | | | | PR: conf/7054 Submitted by: Amakawa Shuhei <amakawa@sf.t.u-tokyo.ac.jp>
* Add the directory "/usr/include/security", which is where the PAMjdp1998-11-181-1/+3
| | | | | | header files go. I am not too happy about the name. But if we are to have any hope of being able to use 3rd party PAM modules, we'll have to live with it.
* put hosts before bind.jkh1998-11-161-4/+4
|
* Implement the nfs_access_cache variable, allowing us to set the timeout formsmith1998-11-158-8/+30
| | | | the NFS client's ACCESS cache.
* Arrg, ppi*) correctednsouch1998-11-122-4/+4
|
* Add ppi*) iic*) and smb*)nsouch1998-11-122-6/+52
|
* kldload the screen saverspeter1998-11-112-6/+4
|
* kldload ipfw, it's installed always and works on both kernel formatspeter1998-11-117-14/+14
|
* Suggest using ``iface clear'' under certain circumstancesbrian1998-11-051-1/+9
| | | | in ppp.linkdown.
* Add example for the internal "ident server".phk1998-11-041-1/+5
|
* Move the "root" entry up so people can see it.phk1998-11-032-4/+12
|
* Write temp files with a uniq name into /var/runwosch1998-11-012-4/+4
| | | | | instead the public writable directory /tmp PR: conf/8330
OpenPOWER on IntegriCloud