summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Disable SSL renegotiation in order to protect against a seriouscperciva2009-12-031-1/+1
| | | | | | | | | | | | | | | protocol flaw. [09:15] Correctly handle failures from unsetenv resulting from a corrupt environment in rtld-elf. [09:16] Fix permissions in freebsd-update in order to prevent leakage of sensitive files. [09:17] Approved by: so (cperciva) Security: FreeBSD-SA-09:15.ssl Security: FreeBSD-SA-09:16.rtld Security: FreeBSD-SA-09:17.freebsd-udpate
* Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6ume2009-12-027-365/+175
| | | | | | | and rc.d/ip6fw. Reviewed by: dougb, jhb MFC after: 1 month
* Use cons25w on pc98.ed2009-11-131-9/+9
| | | | Discussed with: nyan
* Convert syscons on i386 to TERM=xterm.ed2009-11-131-9/+9
| | | | | TEKEN_XTERM is now gone. Because we always use xterm mode now, we only need a TEKEN_CONS25 switch to go back to cons25.
* Split up etc.i386/ttys into a PC98 version as well.ed2009-11-132-2/+314
| | | | | | This means I can now convert syscons on i386 to xterm as well. Discussed with: nyan
* Switch the default terminal emulation style to xterm for most platforms.ed2009-11-137-48/+48
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Right now syscons(4) uses a cons25-style terminal emulator. The disadvantages of that are: - Little compatibility with embedded devices with serial interfaces. - Bad bandwidth efficiency, mainly because of the lack of scrolling regions. - A very hard transition path to support for modern character sets like UTF-8. Our terminal emulation library, libteken, has been supporting xterm-style terminal emulation for months, so flip the switch and make everyone use an xterm-style console driver. I still have to enable this on i386. Right now pc98 and i386 share the same /etc/ttys file. I'm not going to switch pc98, because it uses its own Kanji-capable cons25 emulator. IMPORTANT: What to do if things go wrong (i.e. graphical artifacts): - Run the application inside script(1), try to reduce the problem and send me the log file. - In the mean time, you can run `vidcontrol -T cons25' and `export TERM=cons25' so you can run applications the same way you did before. You can also build your kernel with `options TEKEN_CONS25' to make all virtual terminals use the cons25 emulator by default. Discussed on: current@
* Execute the start/stop process of a jail in the background.remko2009-11-021-1/+1
| | | | | | | | | | | This will prevent that the script hangs during startup, which could cause annoying effects after rebooting for example. PR: kern/139422 Submitted by: Andrey Groshev <greenx at yartv dot ru> Approved by: imp (mentor, implicit) MFC after: 3 days Facilitated by: Snow B.V.
* Use double-quotation marks to fix the unexpanded variable issue.hrs2009-10-231-3/+3
| | | | Spotted by: swell.k
* Add empty watchdogd_flags.brueffer2009-10-211-0/+1
| | | | | | PR: 136620 Submitted by: amdmi3 MFC after: 3 days
* Partially revert the change to the gettytab made in r198214.ed2009-10-191-1/+1
| | | | | | | | | By misinterpreting some data, I thought that getty wouldn't apply any baud rate to the syscons devices, but it uses the default entry instead. This means that the baud rate is set to 1200. This isn't too bad, except when using canonical mode. Make it use 9600 baud by default. MFC after: 1 week
* Fix qouting in a comment, to make it look more consistented2009-10-181-1/+1
| | | | | Submitted by: Jille Timmermans <jille quis cx> MFC after: 1 week
* Allow the buffer size to be configured for pseudo-like TTY devices.ed2009-10-181-1/+1
| | | | | | | | | | | | | | | Devices that don't implement param() (which means they don't support hardware parameters such as flow control, baud rate) hardcode the baud rate to TTYDEF_SPEED. This means the buffer size cannot be configured, which is a little inconvenient when using canonical mode with big lines of input, etc. Make it adjustable, but do clamp it between B50 and B115200 to prevent awkward buffer sizes. Remove the baud rate assignment from /etc/gettytab. Trust the kernel to fill in a proper value. Reported by: Mikolaj Golub <to my trociny gmail com> MFC after: 1 month
* Remove a circular dependency on routingdougb2009-10-172-2/+2
| | | | | Submitted by: Mykola Dzham <freebsd@levsha.org.ua> Approved by: hrs
* Allow $name_program to override $command in a more robust way thatdougb2009-10-151-1/+1
| | | | will not cause the value to be null if $command is not set.
* In regards to the "Starting foo:" type messages at boot time, create anddougb2009-10-1017-36/+45
| | | | | | | | | | | | | | | | | | | | | | | employ a more generic solution, and use it in the individual rc.d scripts that also have an $rc_quiet test: 1. Add check_startmsgs() to rc.subr. 2. In the rc.d scripts that use rc_quiet (and rc.subr) substitute variations of [ -z "$rc_quiet" ] with check_startmsgs 3. In savecore add a trailing '.' to the end of the message to make it more consistent with other scripts. 4. In newsyslog remove a : before the terminal '.' since we do not expect there to be anything printed out in between to make it more consistent. 5. In the following scripts change "quotes" to 'quotes' where no variables exist in the message: savecore pf newsyslog 6. In the following scripts substitute if/then/fi for the simpler (and more consistent) check_startmsgs &&: faith stf 7. In the following scripts separate the "Starting foo:" from the terminal '.' to make them more consistent: moused hostname pf 8. In nfsclient move the message to its own line to avoid a style bug 9. In pf rc_quiet does not apply to the _stop method, so remove the test there. 10. In motd add 'quotes' around the terminal '.' for consistency
* Fix a case when both ${name}_program and ${command} are defined.hrs2009-10-051-1/+1
| | | | Spotted by: Michio "Karl" Jinbo
* tabifydes2009-10-057-14/+14
| | | | MFC after: 3 weeks
* Change the pam_ssh examples: if you use it, you probably want want_agent.des2009-10-055-5/+5
| | | | MFC after: 3 weeks
* Add OpenVPN IANA assigned port number.rpaulo2009-10-031-0/+2
|
* - Enable an afexists() check only when no AF argument is specified.hrs2009-10-021-55/+76
| | | | | | - Simplify helper functions. Discussed with: ume
* The net.inet.tcp.log_in_vain accepts 0, 1 or 2, not Y/N.hrs2009-10-021-5/+8
|
* Revert the previous afexists() change. Knobs configured explicitly byhrs2009-10-023-12/+0
| | | | | | | the user should not be ignored if possible even if the kernel does not support the prerequisite feature. Discussed with: ume
* - Split routing_*() and option_*() to *_AF() and add afexists() checkhrs2009-10-021-55/+85
| | | | | | | | for each address family. Replace AF_static() with static_AF() for consistency. - Display a message only if the user sets a non-default value, and set a sysctl explicitly even if it is the default value.
* - Fix logic inversion bug of net.inet.tcp.rfc1323[*].hrs2009-10-021-15/+34
| | | | | | | | | | - Split netoptions_start() to netoptions_AF() and add afexists() check for each address family. - Display a message only if the user sets a non-default value, and set a sysctl explicitly even if it is the default value. Spotted by: Pegasus Mc Cleaft[*]
* - Add AF_IPX and AF_NATM to afexists().hrs2009-10-026-16/+43
| | | | | | - Add afexists() check to address family specific rc.d scripts. A script for an AF will be silently ignored if the kernel has no support for the AF.
* Don't do an IPv6 operation when the kernel doesn't haveume2009-09-302-7/+14
| | | | | | | | an IPv6 support. Reported by: Alexander Best <alexbestms__at__math.uni-muenster.de> Confirmed by: Paul B. Mahol <onemda__at__gmail.com>, Alexander Best <alexbestms__at__math.uni-muenster.de>
* By popular acclaim, enable "Starting foo:" messages by defaultdougb2009-09-291-1/+1
|
* Silence warning printed by getfsspec(3) when /etc/fstab does not existcperciva2009-09-282-0/+6
| | | | | | | | | | | fstab: /etc/fstab:0: No such file or directory and from dump(8) when setfsent(3) fails due to /etc/fstab not existing: DUMP: Can't open /etc/fstab for dump table information: No such... This makes daily and security periodic runs somewhat cleaner in jails which lack /etc/fstab files. MFC after: 1 month
* - Add share/nls/gl_ES.ISO8859-1, which I forgot in my last commitgabor2009-09-271-0/+2
| | | | Submitted by: Andrzej Tobola <ato@iem.pw.edu.pl> (via private mail)
* Use ipv6if() when $rtadvd_interfaces="AUTO".hrs2009-09-261-1/+4
|
* Move rc.d/{stf,faith} to just before rc.d/routing.hrs2009-09-262-2/+2
| | | | Pointed out by: tegge
* Fix several logic bugs in the previous IPv6 variable change andhrs2009-09-263-13/+61
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | re-add $ipv6_enable support for backward compatibility. From UPDATING: 1. To use IPv6, simply define $ifconfig_IF_ipv6 like $ifconfig_IF for IPv4. For aliases, $ifconfig_IF_aliasN should be used. Note that both variables need the "inet6" keyword at the head. Do not set $ipv6_network_interfaces manually if you do not understand what you are doing. It is not needed in most cases. $ipv6_ifconfig_IF and $ipv6_ifconfig_IF_aliasN still work, but they are obsolete. 2. $ipv6_enable is obsolete. Use $ipv6_prefer and/or "inet6 accept_rtadv" keyword in ifconfig(8) instead. If you define $ipv6_enable=YES, it means $ipv6_prefer=YES and all configured interfaces have "inet6 accept_rtadv" in the $ifconfig_IF_ipv6. These are for backward compatibility. 3. A new variable $ipv6_prefer has been added. If NO, IPv6 functionality of interfaces with no corresponding $ifconfig_IF_ipv6 is disabled by using "inet6 ifdisabled" flag, and the default address selection policy of ip6addrctl(8) is the IPv4-preferred one (see rc.d/ip6addrctl for more details). Note that if you want to configure IPv6 functionality on the disabled interfaces after boot, first you need to clear the flag by using ifconfig(8) like: ifconfig em0 inet6 -ifdisabled If YES, the default address selection policy is set as IPv6-preferred. The default value of $ipv6_prefer is NO. 4. If your system need to receive Router Advertisement messages, define "inet6 accept_rtadv" in $ifconfig_IF_ipv6. The rc(8) scripts automatically invoke rtsol(8) when the interface becomes UP. The Router Advertisement messages are used for SLAAC (State-Less Address AutoConfiguration).
* Add a knob to show 'Starting foo:' messages when faststart is used,dougb2009-09-172-1/+8
| | | | such as at boot time.
* Protect cross-script invocation by checking that the target script exists.emaste2009-09-141-2/+6
| | | | | | | This allows pruning of rc.d scripts without getting too many ugly boottime error messages. Inspired by phk's r128714 change to netif.
* Correct a copy and paste error using the variable name from thebz2009-09-131-1/+1
| | | | | | | | | legacy IP handling rather than the IPv6 version. Reported by: Pegasus Mc Cleaft (ken mthelicon.com) Tested by: Pegasus Mc Cleaft (ken mthelicon.com) MFC after: 2 days X-MFX with: r197139
* Add missing comments and whitespace clean-ups.hrs2009-09-121-42/+64
|
* Use is_wired_interface() instead of hard-coded interface devicehrs2009-09-121-22/+3
| | | | | | names. Pointed out by: sam
* The following changes are added because ofhrs2009-09-121-12/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | network_ipv6->rc.d/netif integration: - $ipv6_enable is now obsolete. Instead, IPv6 is enabled by default if the kernel supports it, and $ipv6_network_interfaces is "none" by default. If you want to use IPv6, define $ipv6_network_interfaces and $ifconfig_xxx_ipv6. An interface which is in $network_interfaces and not in $ipv6_network_interfaces will be marked as "inet6 -auto_linklocal ifdisabled" (see ifconfig(8)). - $ipv6_ifconfig_xxx is renamed to ifconfig_xxx_ipv6 for consistency with other address families. The old variables still work but can be removed in the future. Note that ipv6_ifconfig_xxx="..." should be replaced with ifconfig_xxx_ipv6="inet6 ...". - Receiving ICMPv6 Router Advertisement is not automatically enabled even if there is no manual configuration of IPv6 in rc.conf. If you want it, define ifconfig_xxx_ipv6="inet6 ... accept_rtadv". - The rc.d/ip6addrctl now chooses address selection policy based on $ipv6_prefer, not $ipv6_enable. The default is ipv6_prefer=NO. - $router* and $ipv6_router* are replaced with $routed_* and $route6d_* for consistency. The old variables still work but can be removed in the future. MFC after: 3 days
* Add an extension of set_rcvar(), a new function set_rcvar_obsolete(),hrs2009-09-123-47/+155
| | | | | | | | | | | | | | | and $desc. The set_rcvar_obsolete() is for displaying an obsolete variable and the new one. More specifically, a warning is displayed when a variable is removed or changed in the source tree and the user still defines the old one. $router* and $ipv6_router* are replaced with $routed_* and $route6d_* for consistency. The old variables still work but can be removed in the future. MFC after: 3 days
* Use RCng coding convention.hrs2009-09-121-64/+52
| | | | MFC after: 3 days
* - Add "AUTO" keyword support in $rtadvd_interfaces.hrs2009-09-121-2/+17
| | | | | | - Wrap a long line. MFC after: 3 days
* Integrate rc.d/network_ipv6 into rc.d/netif:hrs2009-09-1215-544/+902
| | | | | | | | | | - Add rc.d/stf and rc.d/faith for stf(4) and faith(4). - Remove rc.d/auto_linklocal and rc.d/network_ipv6. - Move rc.d/sysctl to just before FILESYSTEMS because rc.d/netif depends on some sysctl variables. Reviewed by: brooks MFC after: 3 days
* Update etc/mtree/Makefile:antoine2009-09-061-4/+5
| | | | | There is no longer BSD.{local,x11-4,x11}.dist mtree files. There is a BSD.sendmail.dist mtree file.
* Do the first step in removing lukemftpd from the base system. Disconnectremko2009-09-031-2/+0
| | | | | | | | | | | | | | | it from the build. If you are using the FTP daemon, please consider using the port ftp/tnftpd which is the same FTP server, but newer and might have more/better functionality. This results in us providing only one ftp daemon by default. Reviewed by: bz Approved by: imp (mentor, implicit) MFC after: 3 days Silence from: obrien
* Add la_LN.ISO8859-13 and lv_LVache2009-09-031-0/+12
|
* - Remove BSD.{x11,x11-4}.dist as we merged prefixes a while ago and thoseflz2009-09-024-1646/+1
| | | | | | files aren't used anymore. - Remove BSD.local.dist as the file moved to ports/Templates when we merged prefixes.
* In the loop through the list of interfaces in network6_interface_setup()dougb2009-08-271-2/+2
| | | | | | | | | | | rtsol_interface gets reset to "yes" each time through the loop, but rtsol_available does not. If a user has lo0 first in their list of interfaces rtsol_available will get set to "no" the first time through the loop and subsequent interfaces will not get rtsol'ed when they should. Therefore change the conditional for the is_wired() test to _interface. Noticed by: Dimitry Andric <dimitry@andric.com>
* Localize 'e'.delphij2009-08-251-2/+4
| | | | Submitted by: dougb
* Add a new rc.d script, static_arp, which enables the administrator todelphij2009-08-253-1/+73
| | | | | | | | | | | | | | | | | | | | statically bind IPv4 <-> MAC address at boot time. In order to use this, the administrator needs to configure the following rc.conf(5) variable: - static_arp_pairs: A list of names for static bind pairs, and, - a series of static_arp_(name): the arguments that is being passed to ``arp -S'' operation. Example: static_arp_pairs="gw" static_arp_gw="192.168.1.1 00:01:02:03:04:05" See the rc.conf(5) manual page for more details. Reviewed by: -rc@ MFC after: 2 weeks
* Improve the case test to detect the presence of lo0 in the list ofdougb2009-08-241-1/+1
| | | | | | network_interfaces. Submitted by: Christoph Mallon <christoph.mallon@gmx.de>
OpenPOWER on IntegriCloud