summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Add "ether" and "link" to ifconfig_alias{es,N}.hrs2013-06-301-2/+15
|
* Don't attempt to do DHCP on certain interfaces, similar to what's done fordelphij2013-06-281-1/+10
| | | | | | ipv6_autoconfif() in r212577. MFC after: 1 week
* - Trim an unused and bogus Makefile for mount_smbfs.davide2013-06-283-1/+7
| | | | | | - Reconnect with some minor modifications, in particular now selsocket() internals are adapted to use sbintime units after recent'ish calloutng switch.
* - Add vnode-backed swap space specification support. This is enabled whenhrs2013-06-278-120/+30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | device names "md" or "md[0-9]*" and a "file" option are specified in /etc/fstab like this: md none swap sw,file=/swap.bin 0 0 - Add GBDE/GELI encrypted swap space specification support, which rc.d/encswap supported. The /etc/fstab lines are like the following: /dev/ada1p1.bde none swap sw 0 0 /dev/ada1p2.eli none swap sw 0 0 .eli devices accepts aalgo, ealgo, keylen, and sectorsize as options. swapctl(8) can understand an encrypted device in the command line like this: # swapctl -a /dev/ada2p1.bde - "-L" flag is added to support "late" option to defer swapon until rc.d/mountlate runs. - rc.d script change: rc.d/encswap -> removed rc.d/addswap -> just display a warning message if $swapfile is defined rc.d/swap1 -> renamed to rc.d/swap rc.d/swaplate -> newly added to support "late" option These changes alleviate a race condition between device creation/removal and swapon/swapoff. MFC after: 1 week Reviewed by: wblock (manual page)
* Implement ifconfig_wlanX="HOSTAP".rpaulo2013-06-262-3/+35
| | | | | | | | | Not only this is a bit cleaner, it allows multiple instances of hostapd to be running on the system host, useful for simultaneous dual-band WiFi. This is similar to ifconfig_wlanX="WPA" but it uses /etc/hostapd-wlanX.conf. Compatibility with hostapd_enable=YES/NO was kept. Reviewed by: adrian
* If daily_status_security_inline is set, the rc value needs to bejhb2013-06-251-12/+12
| | | | | | | | | | | | | forced to 3 so that the output of this script is always displayed. In fact, setting this flag is identical to setting daily_status_security_output to an empty string. To make the logic less confusing, change the behavior of daily_status_security_inline such that it just forces daily_status_security_output to an empty string and then applies the normal logic. PR: conf/178611 Submitted by: Jason Unovitch <jason.unovitch@gmail.com> MFC after: 3 days
* Regenerate usb.conf after r252196.kevlo2013-06-251-2/+2
| | | | Spotted by: rpaulo
* Call sshd_precmd instead of sshd_configtest when the operatordelphij2013-06-211-2/+2
| | | | | | | | | | requests reload or restart, which, in addition of testing the configuration, will also generate host keys when they are not present (previous behavior). Obtained from: FreeNAS Ok'ed by: bdrewery, des MFC after: 1 week
* - Add CIDR notation support like 192.168.1-2.10-16/24 to $ifconfig_IF_aliasN.hrs2013-06-201-235/+372
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is an extended version of ipv4_addr_IF which supports both IPv4 and IPv6, and multiple range specifications. To avoid to generate too many addresses, the maximum number of the generated addresses is currently limited to 31. - Add $ifconfig_IF_aliases, which accepts multiple IP aliases in a variable. - ipv6_prefix_IF now supports !/64 prefix length. In addition to the old 64-bit format (2001:db8:1:1), a full 128-bit format like 2001:db8:1:1::/64 is supported. - Replace ifconfig command with $IFCONFIG_CMD variable to support a dry-run mode in the future. - Remove IP aliases before removing all of IPv4 addresses when doing "rc.d/netif down". - Add a DAD wait to network6_getladdr() because it is possible to fail to configure an EUI64 address when ipv6_prefix_IF is specified. A summary of the supported ifconfig_* variables is as follows: # IPv4 configuration. ifconfig_em0="inet 192.168.0.1" # IPv6 configuration. ifconfig_em0_ipv6="inet6 2001:db8::1/64" # IPv4 address range spec. Now deprecated. ipv4_addr_em0="10.2.1.1-10" # IPv6 alias. ifconfig_em0_alias0="inet6 2001:db8:5::1 prefixlen 70" # IPv4 alias. ifconfig_em0_alias1="inet 10.2.2.1/24" # IPv4 alias with range spec w/o AF keyword (backward compat). ifconfig_em0_alias2="10.3.1.1-10/32" # IPv6 alias with range spec. ifconfig_em0_alias3="inet6 2001:db8:20-2f::1/64" # ifconfig_IF_aliases is just like ifconfig_IF_aliasN. ifconfig_em0_aliases="inet 10.3.3.201-204/24 inet6 2001:db8:210-213::1/64 inet 10.1.1.1/24" # IPv6 alias (backward compat) ipv6_ifconfig_em0_alias0="inet6 2001:db8:f::1/64" # IPv6 alias w/o AF keyword (backward compat) ipv6_ifconfig_em0_alias1="2001:db8:f:1::1/64" # IPv6 prefix. ipv6_prefix_em0="2001:db8::/64" Tested by: Kimmo Paasiala
* Allow $ntpdate_config to be NULL. Due to a lack of surrounding quotes, whendteske2013-06-181-2/+2
| | | | | | | ntpdate_config was set to NULL the conditional would (counter to prevailing logic) succeed -- leading to awk attempting to redirect from a NULL pathname standard-in. While we're here, make the script consistant with itself by removing the {curlies} around ntpdate_config (they are unnecessary).
* Remove CVS from the base system.eadler2013-06-152-8/+2
| | | | | | Discussed with: many Reviewed by: peter, zi Approved by: core
* Clean up swapfile memory disk on shutdowncrees2013-06-122-4/+40
| | | | | | | | Make the md unit number configurable so that it can be predicted PR: bin/168544 Submitted by: wblock (based on) Approved by: kevlo
* Regen.rpaulo2013-06-101-2/+229
|
* Add :ifname modifier to specify interface-specific routes intohrs2013-06-092-82/+132
| | | | | | | | | | | | | | | | | {,ipv6_}static_routes and rc.d/routing. For example: static_routes="foo bar:em0" route_foo="-net 10.0.0.0/24 -gateway 192.168.2.1" route_bar="-net 192.168.1.0/24 -gateway 192.168.0.2" At boot time, all of the static routes are installed as before. The differences are: - "/etc/rc.d/netif start/stop <if>" now configures static routes with :<if> if any. - "/etc/rc.d/routing start/stop <af> <if>" works as well. <af> cannot be omitted when <if> is specified, but a keyword "any" or "all" can be used for <af> and <if>.
* Add a new knob WITH_DEBUG_FILES to control the building of standaloneemaste2013-06-073-0/+58
| | | | | | | | | | | | | | | | debug files for userland programs and libraries. The "-g" debug flag is automatically applied when WITH_DEBUG_FILES is set. The debug files are now named ${prog}.debug and ${shlib}.debug for consistency with other systems and documentation. In addition they are installed under /usr/lib/debug, to simplify the process of installing them if needed after a crash. Users of bsd.{prog,lib}.mk outside of the base system place the standalone debug files in a .debug subdirectory. GDB automatically searches both of these directories for standalone debug files. Thanks to everyone who contributed changes, review, and testing during development.
* Refine the "nojail" rc keyword, adding "nojailvnet" for files that don'tjamie2013-05-195-4/+12
| | | | | | | | | apply to most jails but do apply to vnet jails. This includes adding a new sysctl "security.jail.vnet" to identify vnet jails. PR: conf/149050 Submitted by: mdodd MFC after: 3 days
* etc/rc.d/syslogdasomers2013-05-131-1/+3
| | | | | | | | | | Add netif as a requirement of syslogd to get lo0 up. Currently, this doesn't affect the rc order, because mountcritremote already depends on netif. Reviewed by: eadler Approved by: kenm (mentor) MFC after: 2 weeks
* Revert r250565 which causes issues for older CPUseadler2013-05-121-18/+18
| | | | | PR: conf/178504 Requested by: many
* Make newsyslog compress logs with xz instead of bzip2 to save space.eadler2013-05-121-18/+18
| | | | | | PR: conf/178504 Submitted by: ak Reviewed by: smh
* Unconditionally install 210.backup-aliases as many MTAs other thaneadler2013-05-111-1/+1
| | | | | | | | sendmail support the use of /etc/aliases. PR: conf/176098 Submitted by: ak MFC after: 2 weeks
* Bring /etc/protocols up to date.eadler2013-05-101-0/+7
| | | | | PR: conf/175397 Submitted by: ak
* - Fix exit status when ip6addrctl_verbose=yes [*]hrs2013-05-041-26/+34
| | | | | | | | | - Use the absolute pathname for ip6addrctl. - Use "install" instead of "add" to reduce the number of invocations. Reported by: Tatsuki Makino [*] PR: conf/175006 [*] MFC after: 1 week
* Introduce and use new flag -L to mount for mounting only late filesystems.crees2013-05-041-13/+4
| | | | | | | | | | Previously, rc.d/mountlate mounted *all* filesystems, causing problems with background NFS mounts being mounted twice. PR: conf/137629 Submitted by: eadler (original concept) Reviewed by: mjg Approved by: hrs
* Make an attempt to detect missing MTREE files in distrib-dirs. Notbrooks2013-04-301-1/+1
| | | | | | | | perfect, but this is just a developer seatbelt. PR: conf/176897 Submitted by: Garrett Cooper <yaneurabeya@gmail.com> MFC after: 1 week
* Minor changes to force commit these files so new freebsd*.cf files aregshapiro2013-04-212-2/+1
| | | | | | built to use the new sendmail-8.14.6/cf tree. MFC after: 4 days
* Also call configtest before reload to ensure working config.bdrewery2013-04-161-0/+1
| | | | | | Approved by: jhb MFC after: 1 week X-MFC-With: r249489
* Run configtest before restarting so that the system is notbdrewery2013-04-141-0/+1
| | | | | | | left without a running sshd. Approved by: des MFC after: 1 week
* Upgrade our copy of llvm/clang to trunk r178860, in preparation of thedim2013-04-121-1/+1
| | | | | | | | | upcoming 3.3 release (branching and freezing expected in a few weeks). Preliminary release notes can be found at the usual location: <http://llvm.org/docs/ReleaseNotes.html> An MFC is planned once the actual 3.3 release is finished.
* Regenerate usb.confhselasky2013-04-061-10/+124
| | | | MFC after: 1 week
* Remove periodic script for ataraid(4) and add instead script for graid(8).mav2013-04-044-37/+38
|
* Format per etc/mtree/READMEemaste2013-04-011-91/+91
| | | | | - Spaces instead of tabs - Sort some i18n entries
* rc.subr: disabling globbing while processing devfs rulesavg2013-03-281-1/+7
| | | | | | | | The rules themselves typically have shell-like patterns and it is incorrect when they get replaced with matching filesystem entries. Shell magic by: jilles MFC after: 2 weeks
* rc.d/sysctl: Fix error messages about unknown OIDs.jilles2013-03-221-3/+3
| | | | | | | | | | | | | There are three situations where the sysctl script is called: 1. "start", very early 2. "lastload", near the end of rc 3. "reload", at admin request while the system is booted Ignore unknown OIDs in situation 1 because kernel modules may not be loaded yet and complain about them in situations 2 and 3. PR: conf/174595 Submitted by: Olivier Smedts
* Fix typo in previous commit: Exit if */dev/dumpdev* does not exist, not ifcperciva2013-03-191-1/+1
| | | | | | | */bin/realpath* does not exist... Submitted by: markj Pointy hat to: cperciva
* If dumpdev is AUTO but no dump device has been set -- i.e., there is no swapcperciva2013-03-191-0/+3
| | | | | | | | | | | | | | | space configured for rc.d/dumpon to designate for dumping -- then exit silently rather than with a > realpath: /dev/dumpdev: No such file or directory error message. An argument could be made that we should print a (more informative) warning message; but given that under the same conditions the rc.d/dumpon script will already print a > No suitable dump device was found warning, it seems that printing an additional > Dump device does not exist. Savecore not run. warning would be superfluous.
* Add bhyve to examples.neel2013-03-181-0/+2
| | | | | Requested by: alfred, julian Obtained from: NetApp
* Finish portalfs removal.antoine2013-03-101-2/+0
|
* Now that stable/7 is EOL, stop building INDEX-7.cperciva2013-03-071-1/+0
| | | | MFC after: 1 week
* Comment cosmetics: capitalize SCSIschweikh2013-03-021-8/+8
| | | | | | Fix some hard tabs in the wrong place. MFC after: 2 weeks
* If rtadvd_interfaces is set to "none", start rtadvd without listingdes2013-02-251-0/+2
| | | | | | any interfaces on the command line. MFC after: 1 week
* Back out prev. change preventing /sys/sys symlink. It appears my installache2013-02-221-1/+1
| | | | was not very recent and not acts like 'ln -h'
* In 'make hierarchy' don't install /sys/sys pointing to usr/src/sysache2013-02-171-1/+1
| | | | but just /sys pointing there
* Revert r227528 and r227787. This hack is no longer necessary since r233580.jkim2013-02-151-4/+0
|
* Install <dev/agp/agpreg.h> and <dev/pci/pcireg.h> as userland headersjhb2013-02-051-0/+4
| | | | | | in /usr/include. MFC after: 2 weeks
* Load the pfsync module if necessary.des2013-02-051-0/+1
| | | | | Reviewed by: glebius@ MFC after: 1 week
* Use the default policy table of RFC 6724.ume2013-02-021-10/+18
| | | | MFC after: 1 weeks
* When adding the directory ownership to the METALOG do it by name ratherbrooks2013-01-301-3/+4
| | | | | | | | than number as is done in install so as to differ binding of names to ids. Remove the -W flag from the mtree command so that the correct user and group is recorded rather than the default.
* Log the addition of login.conf.db, passwd, pwd.db, and spwd.db via cat -l.brooks2013-01-291-3/+15
| | | | Make cat a bootstrap tool to facilitate this.
* Increase the "memorylocked" limit for the "daemon" class.neel2013-01-271-1/+1
| | | | | | | | amd(8) requires more than the 64MB that is currently available to it so bump it up to 128MB. Reviewed by: kib Discussed with: avg, kib, zont
* Introduce a new option -DNO_ROOT that allows install and distributionbrooks2013-01-221-0/+17
| | | | | | | | | | | | | | | targets to be run without root privilege. Information about ownership, group, flags, and suid bits are stored in the file specified by METALOG which defaults to ${DESTDIR}/METALOG. This file can be used in conjunction with bsdtar or makefs to generate archives or file system images with correct permissions. The packageworld target has been altered to use this metadata allowing non-root releases (subject to further changes in release/Makefile.) Sponsored by: DARPA, AFRL Reviewed by: ian, ray
OpenPOWER on IntegriCloud