| Commit message (Collapse) | Author | Age | Files | Lines |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
With the first part of my previous Summer of Code work, we get:
-made libalias modular:
-support for 'particular' protocols (like ftp/irc/etcetc) is no more
hardcoded inside libalias, but it's available through external
modules loadable at runtime
-modules are available both in kernel (/boot/kernel/alias_*.ko) and
user land (/lib/libalias_*)
-protocols/applications modularized are: cuseeme, ftp, irc, nbt, pptp,
skinny and smedia
-added logging support for kernel side
-cleanup
After a buildworld, do a 'mergemaster -i' to install the file libalias.conf
in /etc or manually copy it.
During startup (and after every HUP signal) user land applications running
the new libalias will try to read a file in /etc called libalias.conf:
that file contains the list of modules to load.
User land applications affected by this commit are ppp and natd:
if libalias.conf is present in /etc you won't notice any difference.
The only kernel land bit affected by this commit is ng_nat:
if you are using ng_nat, and it doesn't correctly handle
ftp/irc/etcetc sessions anymore, remember to kldload
the correspondent module (i.e. kldload alias_ftp).
General information and details about the inner working are available
in the libalias man page under the section 'MODULAR ARCHITECTURE
(AND ipfw(4) SUPPORT)'.
NOTA BENE: this commit affects _ONLY_ libalias, ipfw in-kernel nat
support will be part of the next libalias-related commit.
Approved by: glebius
Reviewed by: glebius, ru
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
chance to actually terminate the audit service and exit. Otherwise, on
an rc.d/auditd restart, the new audit daemon instance may try to start
auditing while the previous session is still running. Likewise, this
ensures a chance for auditd to terminate the audit trail at system
shutdown.
Perhaps more ideally, the script would wait synchronously for auditd to
exit rather than for an arbitrary but short period of time.
MFC after: 3 days
Obtained from: TrustedBSD Project
|
|
|
|
|
|
| |
before starting devd so they don't trip over each other.
PR: conf/103428
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
interface is an IPv6 interface.
Use this method to decide if we should attempt to configure an interface
with an IPv6 address in pccard_ether. The mechanism pccard_ether uses
to do this is unsuited to the task because it assumes the list of
interfaces it is passed is the full list of IPv6 interfaces and makes
decissions based on that. This is at least a step in the right
direction and is probably about as much as we can MFC safely.
PR: conf/103428
MFC after: 3 days
|
|
|
|
|
|
|
| |
makes no sense. Remove the undocumented removable_route_flush feature
from pccard_ether.
X-MFC after: never
|
|
|
|
|
| |
greping for UP in "ifconfig $ifn". This eliminates a dependancy on
/usr.
|
|
|
|
| |
MFC after: 1 month
|
|
|
|
| |
MFC after: 1 month
|
| |
|
|
|
|
|
|
|
|
|
| |
- Note that diskless_remount files may use ".." to support mounts above
the root path.
- Copy dot files when populating directories from /conf. [1]
PR: misc/102724 [1]
Submitted by: Attila Nagy <bra at fsn.hu> [1]
|
|
|
|
| |
Obtained from: OpenBSD
|
|
|
|
| |
login.conf resource limits and features.
|
|
|
|
|
|
| |
repository.
Sponsored by: FreeBSD security development fundraiser
|
|
|
|
|
| |
that local changes can be made more easily (without having to comment
these lines, and making the diff more readable).
|
| |
|
|
|
|
|
|
|
| |
(i.e., what it was almost certainly at before powerd was started).
Submitted by: R.B. Riddick
MFC after: 3 days
|
|
|
|
| |
Submitted by: Niclas Zeising <lothrandil@n00b.apagnu.se>
|
|
|
|
|
|
| |
is not UID/GID 0, limits will be ignored and a strange error sent to auth.log.
Head nod: ru, rwatson
|
| |
|
|
|
|
|
|
| |
/conf/base/diskless_remount -> /conf/base/etc/diskless_remount
MFC after: 3 days
|
|
|
|
|
|
|
| |
Reported by: David Thompson <dat1965@yahoo.com>
Discussed on: -rc (brooks)
Approved by: cperciva (mentor, implicit)
MFC after: 3 days
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
certain conditions. I haven't been able to find a better solution yet:
- Set a two read-only variables (${prefix} and ${etcdir}). This is
especially useful when using /etc/rc.d scripts with third-party
software installed from ports.
- Fix rc.d/sshd to work with openssh from ports using ${etcdir}
instead of hardcoded /etc.
- Reflect prefix/etcdir changes in rc.subr.8.
src/etc/rc.d/sshd: rev 1.9 -> 1.10
src/etc/rc.subr: rev 1.51 -> 1.52
src/share/man/man8/rc.subr.8: rev 1.11 -> 1.12
Approved by: cperciva (mentor)
|
|
|
|
|
|
| |
- Update ObsoleteFiles.inc.
Approved by: cperciva (mentor)
|
|
|
|
| |
Reported by: Dominique Goncalves <dominique.goncalves at gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
it limits the width of its output to the value of $COLUMNS, or
what TIOCGWINSZ reports, or 79 columns. We should specify -ww
to ps(1) so that it removes the limit and prints lines in full.
Otherwise very long command pathnames could be mishandled, e.g.,
by _find_processes().
MFC after: 1 week
|
|
|
|
|
|
|
|
| |
to specified dhclient flags.
Mention background_dhclient_iface.
Suggested by: ru
|
|
|
|
| |
Spotted by: ru
|
|
|
|
|
|
|
|
|
|
| |
despite the interface link status.
Add dhclient_flags_iface and background_dhclient_iface rc.conf options.
(where iface is a specific interface). These can be used to give
interface specific flags to dhclient.
Reviewed by: brooks@
|
|
|
|
|
|
|
|
| |
The order in _doit must be "nice su", not "su nice", for that.
In addition, don't ignore the exit status from "cd $foo_chdir".
Reviewed by: freebsd-rc (silence)
MFC after: 1 week
|
|
|
|
|
|
|
|
| |
touch interfaces that don't actually exist in the stop case. In the
process move some IPv4 specific code from ifconfig_down to ipv4_down.
This should solve problems with ifconfig: error messages on boot when
interfaces are renamed.
|
|
|
|
|
|
|
|
| |
thing to do in most (all?) cases and certainly should not be the default
now that we're running pccard_ether on all interface creates and
destroys.
MFC after: 3 days
|
|
|
|
|
|
| |
and so users get hangs until interrupts are generated another way. We'll
have to find a way to make the 2 work together before re-enabling this by
default.
|
| |
|
| |
|
| |
|
| |
|
| |
|
|
|
|
|
|
|
|
|
| |
PowerPC-based Apple's machines and small utility to do it from
userland modelled after the similar utility in Darwin/OSX.
Only tested on 1.25GHz G4 Mac Mini.
MFC after: 1 month
|
|
|
|
|
| |
surprising results. For now, at least make it safe to boot the default
kernel when /boot/kernel is already a symlink.
|
| |
|
|
|
|
|
|
|
| |
test(1) is built in sh(1) and it always evaluates
both sides of -a or -o, unlike && or || in sh(1).
Requested by: dougb
|
| |
|
|
|
|
|
| |
Skip useless work when ${natd_interface} is unset.
Double quote user-supplied vars unless there is a reason not to.
|
| |
|
| |
|
| |
|
|
|
|
|
| |
Messages should end in full stop unless
that can lead to confusion.
|
| |
|
|
|
|
| |
rc.conf(5) knobs, too: osf1_enable, unaligned_print.
|