| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
| |
and looks like no other Unix diskless configuration I've ever seen.
Thus allow a more traditional /etc.
Note, the use of an MFS /var should also be settable.
Otherwise installing ports(packages) is just a total PITA.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
rc.conf(5) and the files' inline documentation.
- Add the "closed"-type, documented in both places, but which did not
exist in the code.
- When provided a ruleset, the system should not make any assumptions
about the sites's policy and should add no rules of its own.
- Make the "UNKNOWN" (documented in-line) actual work as advertised,
load no rules.
Prodded by: Igor M Podlesny <poige@morning.ru>
MFC after: 1 week
|
|
|
|
|
|
|
| |
as a destination address of IPv6 packets.
Submitted by: cjc
MFC after: 1 week
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
when running natd(8) out of the rc-files. It is perfectly valid for
the interface or alias address to be set in a natd(8) configuration
file, not on the command line. Also, loosen up the restrictions on
identifying an IP address argument in 'natd_interface.'
Fix the documentation, rc.conf(5), to reflect this change.
Take the bogus default for 'natd_interface' out of /etc/defaults/rc.conf.
MFC after: 3 days
|
|
|
|
|
|
|
|
| |
absolutely necessary
Requested by: peter
PR: conf/33855
MFC after: 1 week
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
at boot (sendmail_enable=NO), a localhost-only daemon may started
(sendmail_submit_enable) as it is needed to accept mail from command line
submissions. If this isn't desired, see etc/mail/README for more hints.
Optionally (sendmail_msp_queue_enable) start a queue runner for the
submission queue in case a daemon isn't available to accept command line
submitted mail at submission time.
Note that the syslog labels for all of these sendmail processes have been
uniquified for easier log parsing.
|
|
|
|
|
|
| |
works and ways to work around common problems people might have.
Include information on reverting to a set-user-ID root sendmail binary in
case anyone really needs to do this.
|
| |
|
| |
|
|
|
|
| |
include files
|
|
|
|
|
| |
set-user-ID root binary instead of the new method (set-group-ID smmsp).
Therefore, we shouldn't install /etc/mail/submit.cf if it is set.
|
|
|
|
| |
Fix access_db usage for 8.12
|
|
|
|
|
|
|
| |
Submitted by: Matt Peterson <matt@peterson.org>
PR: 35057
Also update my note for the 3crwe737A after talking to Alan Clegg at BSDcon.
|
|
|
|
|
|
|
|
|
|
|
|
| |
Checking for the existence of sendmail.cf is rather silly when someone
is using the mailwrapper(8) to run a mail daemon that is not actually
sendmail(8). It is also probably better to let sendmail(8) actually
try to start and error out if the administrator has
'sendmail_enable="YES"' but no sendmail.conf. At present, it would
fail silently.
Reviewed by: gshapiro
MFC after: 2 days
|
|
|
|
|
|
|
|
| |
the output of all goes well.
PR: 34825
Submitted by: Valentin Nechayev <netch@netch.kiev.ua>
MFC after: 3 weeks
|
|
|
|
|
|
|
| |
Spotted by: Sergey Osokin <osa@freebsd.org.ru>
Reviewed by: ru
Approved by: ru
MFC after: 1 week
|
|
|
|
|
|
| |
PR: misc/34800 (from Steven Grady)
Submitted by: phantom (patch)
MFC after: 3 days
|
|
|
|
|
|
| |
PR: 34624
Submitted by: John Nielsen <nielsenj@cs.byu.edu>,
Hiten Pandya <hiten@uk.FreeBSD.org>
|
|
|
|
|
|
| |
updated driver. The newer driver in current outputs a version string
that contains a space, so we need to eat two words in between RocketPortX
and the number of ports on the board.
|
| |
|
|
|
|
|
|
|
|
|
| |
values at all if they are not purposefully set. What if the
administrator messed with them in /etc/sysctl.conf? We don't want to
overwrite them.
If 'log_in_vain' is zero, do not force the issue. If it is non-zero,
set it.
|
|
|
|
| |
not massive, but usable.
|
|
|
|
| |
is not used.
|
|
|
|
|
| |
Reported by: Scott Allendorf <scott-allendorf@uiowa.edu>
Forgot by: me (ume)
|
|
|
|
|
|
| |
PR: conf/34535
Submitted by: Ceri <setantae@submonkey.net>
MFC after: 1 week
|
|
|
|
| |
MFC after: 3 days
|
|
|
|
|
|
|
|
| |
pam_login_access(8) and pam_securetty(8) to enforce various checks
previously done by login(1) but now handled by PAM, and pam_lastlog(8) to
record login sessions in utmp / wtmp / lastlog.
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
Sponsored by: DARPA, NAI Labs
|
|
|
|
|
| |
install parts of /etc manually and it helps to have a makefile for
each subdir even if the main makefile doesn't invoke it.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
10 in -STABLE), pccardd's string comparison between
pccard.conf's entry and PC card's CIS tupple became strict
matching.
As influences of this commit, some PC cards don't work since
some /etc/default/pccard.conf's card identifiers entries are
incorrectly described.
- Lexar Media compact flash
- IO DATA CBIDE2 in 16 bit mode
- TOSHIBA Portable 24X Speed CD-ROM Drive PA2673UJ
- Hewlett Packard M820e (CD-writer)
Update these card configs.
PR: 33815
Obtained from: [bsd-nomads:16128]
|
| |
|
|
|
|
|
|
|
|
| |
conflicts.
PR: conf/34316
Submitted by: Sean Chittenden <sean@chittenden.org>
MFC after: 2 weeks
|
|
|
|
| |
Submitted by: eliedtke@apogeetelecom.com
|
|
|
|
|
|
|
|
|
|
| |
/usr/share/examples/pppd.
Remove the out-of-place pppd(8) configuration files in etc/ppp,
ppp.shells.sample and ppp.deny.
Make the appropriate changes to the build process, etc/Makefile and
etc/mtree/BSD.usr.mtree, so it all works.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
/usr/share/examples/pppd.
Update pppd(8) documentation to reflect this, usr.sbin/pppd/pppd.8.
Remove the out-of-place pppd(8) configuration files in etc/ppp,
ppp.shells.sample and ppp.deny.
Make the appropriate changes to the build process, etc/Makefile and
etc/mtree/BSD.usr.mtree, so it all works.
The files from etc/ppp, ppp.shells.sample and ppp.deny, were moved
with a repo copy. Note it in the logs with a forced commit to these
two.
Submitted by: Maxim Konovalov <maxim@macomnet.ru> provided the new samples.
|
|
|
|
|
|
|
|
| |
This change was submitted to the freebsd-audit mailing list for review
but received no feedback. Hindsight-enabled reviews are welcome.
PR: conf/31358
Submitted: Thomas Quinot <thomas@cuivre.fr.eu.org>
|
|
|
|
|
|
|
|
| |
# This card has the same PCMCIA and OEM id as ELSA XI300 wireless card, which
# appears to be listed elsewhere in this file.
Submitted by: Abe Toshiaki-san <ans@sun-tec.co.jp>
MFC After: 5 days
|
|
|
|
|
|
|
|
|
|
| |
Try this out in -CURRENT, MFC, and then consider dropping the
'log_in_vain' knob all together. It really is something for
sysctl.conf(5).
PR: bin/32953
Reviewed by: -bugs discussion
MFC after: 1 week
|
|
|
|
|
| |
Approved by: ru, silence on -ports
MFC after: 1 week
|
| |
|
|
|
|
|
|
| |
The code will be fixed for all known security vulnerabilities,
and a make.conf(5) knob (ENABLE_SUID_MAN) will be provided for
those who still want it installed setuid for whatever reasons.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
users who don't wish to use it. If the admin is worried about leaking
information about which users exist and which have OPIE enabled, the
no_fake_prompts option can simply be removed.
Also insert the appropriate pam_opieaccess lines after pam_opie to break
the chain in case the user is logging in from an untrusted host, or has a
.opiealways file. The entire opieaccess / opiealways concept is slightly
unpammish, but admins familiar with OPIE will expect it to work.
Reviewed by: ache, markm
Sponsored by: DARPA, NAI Labs
|
|
|
|
| |
twentyfour hours ago, except for RCS ids.
|
| |
|
| |
|
| |
|
|
|
|
|
| |
"[default=ignore success=done cred_err=die]"
options instead of "required"
|
|
|
|
|
|
|
| |
changed firmware and the new cards don't work without this.
Submitted by: ume
MFC after: 3 days
|
|
|
|
| |
chained with pam_opie
|
| |
|