summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* crdup(9) is not a protocol.dd2002-02-101-1/+1
| | | | | | PR: 34624 Submitted by: John Nielsen <nielsenj@cs.byu.edu>, Hiten Pandya <hiten@uk.FreeBSD.org>
* Fix MAKEDEV for RocketPort (rp(4)) cuaR* and ttyR* to work with thejhb2002-02-091-2/+2
| | | | | | updated driver. The newer driver in current outputs a version string that contains a space, so we need to eat two words in between RocketPortX and the number of ports on the board.
* Add missing "nullok" option to pam_unix.des2002-02-081-1/+1
|
* peter points out that we probably should not mess with the sysctl(8)cjc2002-02-087-28/+35
| | | | | | | | | values at all if they are not purposefully set. What if the administrator messed with them in /etc/sysctl.conf? We don't want to overwrite them. If 'log_in_vain' is zero, do not force the issue. If it is non-zero, set it.
* Enable TCP_WRAPPERs for the NIS server. The protection afforded ismarkm2002-02-061-0/+6
| | | | not massive, but usable.
* Install PROTO.localhost-v6.rev. Umm, it seems namedb/Makefileume2002-02-061-1/+2
| | | | is not used.
* Install PROTO.localhost-v6.rev.ume2002-02-061-1/+2
| | | | | Reported by: Scott Allendorf <scott-allendorf@uiowa.edu> Forgot by: me (ume)
* Add the MTA users 'mailnull' and 'smmp'.sheldonh2002-02-041-0/+2
| | | | | | PR: conf/34535 Submitted by: Ceri <setantae@submonkey.net> MFC after: 1 week
* Use MACHINE_ARCH instead of MACHINE to check i386 arch.nyan2002-02-041-2/+2
| | | | MFC after: 3 days
* Add pam_self(8) so users can login(1) as themselves without authentication,des2002-01-301-0/+4
| | | | | | | | pam_login_access(8) and pam_securetty(8) to enforce various checks previously done by login(1) but now handled by PAM, and pam_lastlog(8) to record login sessions in utmp / wtmp / lastlog. Sponsored by: DARPA, NAI Labs
* Use pam_self(8) to allow users to su(1) to themselves without authentication.des2002-01-301-0/+1
| | | | Sponsored by: DARPA, NAI Labs
* Added this makefile. This is not attached to the build yet. I oftenbde2002-01-302-0/+16
| | | | | install parts of /etc manually and it helps to have a makefile for each subdir even if the main makefile doesn't invoke it.
* By commit of usr.sbin/pccard/pccardd/cardd.c at Nov 29 (Decsanpei2002-01-291-4/+4
| | | | | | | | | | | | | | | | | | | | 10 in -STABLE), pccardd's string comparison between pccard.conf's entry and PC card's CIS tupple became strict matching. As influences of this commit, some PC cards don't work since some /etc/default/pccard.conf's card identifiers entries are incorrectly described. - Lexar Media compact flash - IO DATA CBIDE2 in 16 bit mode - TOSHIBA Portable 24X Speed CD-ROM Drive PA2673UJ - Hewlett Packard M820e (CD-writer) Update these card configs. PR: 33815 Obtained from: [bsd-nomads:16128]
* Tidy up gecos field for `bin'.ru2002-01-291-1/+1
|
* Uncomment kserver-adm, which is IANA-sanctioned and has no apparentsheldonh2002-01-291-2/+2
| | | | | | | | conflicts. PR: conf/34316 Submitted by: Sean Chittenden <sean@chittenden.org> MFC after: 2 weeks
* Add Linksys Instant Wireless WPC11 v2.5imp2002-01-291-0/+6
| | | | Submitted by: eliedtke@apogeetelecom.com
* Put a complete set of pppd(8) sample configuration files incjc2002-01-293-36/+2
| | | | | | | | | | /usr/share/examples/pppd. Remove the out-of-place pppd(8) configuration files in etc/ppp, ppp.shells.sample and ppp.deny. Make the appropriate changes to the build process, etc/Makefile and etc/mtree/BSD.usr.mtree, so it all works.
* Put a complete set of pppd(8) sample configuration files incjc2002-01-291-5/+2
| | | | | | | | | | | | | | | | | | /usr/share/examples/pppd. Update pppd(8) documentation to reflect this, usr.sbin/pppd/pppd.8. Remove the out-of-place pppd(8) configuration files in etc/ppp, ppp.shells.sample and ppp.deny. Make the appropriate changes to the build process, etc/Makefile and etc/mtree/BSD.usr.mtree, so it all works. The files from etc/ppp, ppp.shells.sample and ppp.deny, were moved with a repo copy. Note it in the logs with a forced commit to these two. Submitted by: Maxim Konovalov <maxim@macomnet.ru> provided the new samples.
* Register amd's dependency on NFS.sheldonh2002-01-288-252/+358
| | | | | | | | This change was submitted to the freebsd-audit mailing list for review but received no feedback. Hindsight-enabled reviews are welcome. PR: conf/31358 Submitted: Thomas Quinot <thomas@cuivre.fr.eu.org>
* Add ADLINK340C wireless card mentioned in nomads.imp2002-01-281-0/+6
| | | | | | | | # This card has the same PCMCIA and OEM id as ELSA XI300 wireless card, which # appears to be listed elsewhere in this file. Submitted by: Abe Toshiaki-san <ans@sun-tec.co.jp> MFC After: 5 days
* Make the rc.conf(5) 'log_in_vain' knob an integer.cjc2002-01-268-22/+85
| | | | | | | | | | Try this out in -CURRENT, MFC, and then consider dropping the 'log_in_vain' knob all together. It really is something for sysctl.conf(5). PR: bin/32953 Reviewed by: -bugs discussion MFC after: 1 week
* Add local/share/java/classes, local/share/sgml, local/share/xmldes2002-01-231-0/+8
| | | | | Approved by: ru, silence on -ports MFC after: 1 week
* Do not taint ::/124 for localhost reverse table.ume2002-01-223-2/+26
|
* Reincarnate SETUID code in man(1), not compiled in by default.ru2002-01-224-7/+17
| | | | | | The code will be fixed for all known security vulnerabilities, and a make.conf(5) knob (ENABLE_SUID_MAN) will be provided for those who still want it installed setuid for whatever reasons.
* Enable OPIE by default, using the no_fake_prompts option to hide it fromdes2002-01-219-23/+40
| | | | | | | | | | | | | | users who don't wish to use it. If the admin is worried about leaking information about which users exist and which have OPIE enabled, the no_fake_prompts option can simply be removed. Also insert the appropriate pam_opieaccess lines after pam_opie to break the chain in case the user is logging in from an untrusted host, or has a .opiealways file. The entire opieaccess / opiealways concept is slightly unpammish, but admins familiar with OPIE will expect it to work. Reviewed by: ache, markm Sponsored by: DARPA, NAI Labs
* Really back out ache's commits. These files are now precisely as they weredes2002-01-193-4/+7
| | | | twentyfour hours ago, except for RCS ids.
* Back out recent changesache2002-01-193-3/+3
|
* Turn on pam_opie by default. It should not affect non-OPIE users.ache2002-01-191-1/+1
|
* Turn on pam_opie by default. It not affect non-OPIE usersache2002-01-191-2/+1
|
* Previous commit was incomplete, useache2002-01-191-1/+1
| | | | | "[default=ignore success=done cred_err=die]" options instead of "required"
* Add flags 0x10000 to IO Data WN-B11/PCM's entry. Evidentally, theyimp2002-01-191-1/+1
| | | | | | | changed firmware and the new cards don't work without this. Submitted by: ume MFC after: 3 days
* Remove explaining comment and pam_unix commented out, now pam_unix can beache2002-01-191-4/+1
| | | | chained with pam_opie
* Change comment since fallback provided now not by ftpd but by pam_opieache2002-01-191-1/+2
|
* Add:imp2002-01-181-1/+19
| | | | | | | | Accton airDirect WN3301 Melco WLI-CF-S11G GeoWave GW-NS11S Submitted by: Shigeru Ishida-san on bsd-nomads (16142,16143,16144)
* Re-add a call to "camcontrol rescan" after insertion of an aic pccard.joerg2002-01-171-0/+2
| | | | | | | | | | | | We now do it as a "camcontrol rescan all" which is something ken promised to implement; for the time being it's not worse than the old "camcontrol rescan $device" which ended up in something like "camcontrol rescan aic1". Currently, camcontrol misinterprets the third non-numeric arg as number 0, and rescans bus 0, which is about the best we could get at this time. Approved by: imp MFC after: 1 week
* o Improve the line-wrapping of additional comments, some of which appearedrwatson2002-01-173-48/+33
| | | | to be wrapped around 60, others around 40 columns.
* o Remove a somewhat less comprehensible comment about modifying /etc/rc.rwatson2002-01-173-15/+6
| | | | o Improve line-wrapping of another comment for consistency.
* Added this makefile. This is not attached to the build yet. I oftenbde2002-01-161-0/+8
| | | | | install parts of /etc manually and it helps to have a makefile for each subdir even if the main makefile doesn't invoke it.
* Do not install man(1) setuid ``man''.ru2002-01-154-17/+7
| | | | | | | | | | | | | | | | | | | | | | The catpaging and setuidness features of man(1) combined make it vulnerable to a number of security attacks. Specifically, it was possible to overwrite system catpages with arbitrarily contents by either setting up a symlink to a directory holding system catpages, or by writing custom -mdoc or -man groff(1) macro packages and setting up GROFF_TMAC_PATH in environment to point to them. (See PR below for details). This means man(1) can no longer create system catpages on a regular user's behalf. (It is still able to if the user has write permissions to the directory holding catpages, e.g., user's own manpages, or if the running user is ``root''.) To create and install catpages during ``make world'', please set MANBUILDCAT=YES in /etc/make.conf. To rebuild catpages on a weekly basis, please set weekly_catman_enable="YES" in /etc/periodic.conf. PR: bin/32791
* Everybody (for suitable values of "everybody") seems to think pam.conf shoulddes2002-01-142-7/+1
| | | | | | be removed outright. Sponsored by: DARPA, NAI Labs
* Re-add pam.conf so it will get installed so people who don't know aboutdes2002-01-141-1/+1
| | | | | | pam.d will find out about it by reading pam.conf. Sponsored by: DARPA, NAI Labs
* Point people towards /etc/pam.d/README.des2002-01-141-201/+2
|
* Unmunge the version preservation code and obfuscate it so CVS won't mungedes2002-01-121-2/+2
| | | | it all over again.
* Back out previous commit, which erroneously removed essential comments. Ides2002-01-121-1/+3
| | | | | | definitely need coffee. Apologies to: ache
* Update copyrightdes2002-01-121-1/+1
|
* Switch over to /etc/pam.d/.des2002-01-121-6/+0
| | | | Sponsored by: DARPA / NAI Labs
* Sync with pam.conf revision 1.25.des2002-01-121-3/+1
|
* Preserve FreeBSD version strings in target files.des2002-01-121-1/+11
|
* Correct Corega KK Wireless entryimp2002-01-121-1/+1
|
* Sort entries and clarify commentsphantom2002-01-111-2/+5
|
OpenPOWER on IntegriCloud