summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Disable IPv6 configuration for interfaces in pccard_ether_start().hrs2006-12-081-8/+1
| | | | | | | | | | | | | | | | | | | After a change of devd.conf, devd(8) handles NIC attach/detach event by using /etc/pccard_ether with the interface name as the argument. This model does not work properly with IPv6 configuration because the implementation of IPv6 stateless auto-configuration in the FreeBSD rc.d scripts depends on whether there are any explicit configurations for interfaces or not. It works this way: if no manual configuration, it will perform auto-configuration, but otherwise no auto-configuration will be performed. So, this behavior can only be determined by all of the interfaces on a system, not a single one. For this reason, the network6_interface_setup() function called from the pccard_ether_start() does not work with a single interface name. And what is worse, this combination of devd.conf and pccard_ether_start() caused a bad side-effect that when ipv6_enable=YES, all of interfaces marked as DOWN would be UP unconditionally (and router solicitation was sent) just after devd(8) was invoked. This should be fixed in a more sophisticated way.
* Add a link-local address to the lo0 even when ipv6_enable="NO".hrs2006-12-081-0/+5
| | | | | | | | A kernel with INET6 always has ::1 on lo0, so in the case of ipv6_enable="NO" the lo0 can have ::1 with no link-local address. This is a violation of the IPv6 specification. As a workaround for this situation, fe80::1 is added in rc.d/auto_linklocal when lo0 has no link-local address. This should not be harmful for IPv4-only users.
* Move npe.4 to a machine specific manpage subdirectory.ru2006-12-051-0/+6
|
* - put some common code in a function handle_remount();luigi2006-12-031-38/+43
| | | | | | | | | | | | | | | | - add better checks on non-existing directories to prevent error messages at run time; - introduce a function log() to help debugging diskless booting when things don't work; - modify the parsing of diskless_remount so you can add mount_nfs options after the pathname. You could use 'remount' to do something similar, but this way is more convenient because you don't have to hardwire the server name in the command. - document the above. I have been running the above in a diskless lab since february on RELENG_6. MFC after: 1 week
* Teach find_processes() to use ${name}_chroot.flz2006-11-261-2/+2
| | | | | Obtained from: NetBSD X-MFC after: 6.2-RELEASE
* Remove leading dollar sign in rcvar command output.flz2006-11-261-2/+2
| | | | | | | | There's no dollar use in variable assignment in sh. Assuming this is can be expected behavior for some people, this change won't be MFC'ed to RELENG_6. Discussed with: yar on -rc
* Back out 1.120, it was premature.ache2006-11-121-2/+0
|
* Back out 1.122, it was poorly thought out.des2006-11-111-2/+0
|
* Back out 1.121, it was premature.des2006-11-111-12/+0
|
* Ensure that the load of rules into the alternate ruleset worked beforeceri2006-11-111-0/+6
| | | | | | | | | | loading them into the live one too. PR: conf/97311 Submitted by: David Bushong Reviewed by: silence on rc@ Approved by: ru (mentor) MFC after: 10 days
* Add share/xsl.des2006-11-101-0/+2
| | | | MFC after: 1 week
* Add locales for nb_NO and nn_NO.des2006-11-092-0/+24
| | | | Reviewed by: philip
* Add auditd_program variable to defaults, in order to make it more clearrwatson2006-11-061-0/+1
| | | | | | | | how to change the auditd instance. When using a port/package-based OpenBSM, changing the auditd pointer may be desirable. Obtained from: TrustedBSD Project MFC after: 3 weeks
* Switch default proto to TCP.obrien2006-11-061-1/+1
|
* Hook up gjournal bits to the build.pjd2006-10-311-0/+2
| | | | Sponsored by: home.pl
* Bind to INADDR_ANY in the default configuration. This makes bsnmpd(1)harti2006-10-311-3/+1
| | | | | | | automatically work on multi-homed hosts and without explicite specification of the hostname in the config file. Submitted by: jmg
* Do not try to rtsol on pflog or pfsync devices.mlaier2006-10-291-1/+1
|
* Give rc.firewall a polish and a new method.phk2006-10-282-16/+117
| | | | | | | | | | | | Factor out the loopback setup Use "me" instead of hardcoded $ip where possible. Add "workstation" which protects just this machine with stateful firewalling. Put the variables for this in rc.conf. Submitted by: Flemming Jacobsen <fj@batmule.dk> Reviewed by: cperciva
* Re-sync'ing pf rules in post command as we already did for ipfilter.avatar2006-10-261-1/+2
| | | | | | | | With this patch, pf rules with dynamically created devices such like tun0 works without further intervention. Reviewed by: mlaier MFC after: 3 days
* Synchronize pf.os with OpenBSD.delphij2006-10-231-27/+71
| | | | | | Obtained from: OpenBSD MFC After: 3 days Approved by: mlaier (maintainer)
* Suppress a spurious warning message when a kernel without INET6 ishrs2006-10-221-1/+1
| | | | | | | | used. Spotted by: ru Reviewed by: ume MFC after: 3 days
* Add 'reload' to the list of available commands for the amd rc.d script.flz2006-10-181-0/+1
| | | | | | PR: conf/104507 Submitted by: Douglas K. Rand <rand@meridian-enviro.com> MFC after: 3 days
* Improve cleartmp in a number of aspects:yar2006-10-161-36/+37
| | | | | | | | | | | | | | | + Use rc.subr(8) features properly. + Do the whole job of obliterating /tmp contents in find(1). + Leave lost+found and quota.{user,group} in /tmp only if root-owned. + Make the overall structure clearer by first removing the X dirs (perhaps along with the rest of /tmp) and then re-creating them. + Use "find -exec rm -rf {} +" for efficiency: each rm instance gets a chance to kill as much files in /tmp as ARG_MAX permits. PR: bin/104044 Submitted by: Andrey Simonenko <see PR for email> Hacked by: yar MFC after: 1 month
* Add idmapd_flags to defaults/rc.conf.ceri2006-10-151-0/+1
| | | | Document it and idmapd_enable.
* RC script for idmapd(8), defaulting to off.ceri2006-10-153-1/+20
|
* Replace duplicate and not quite accurate capabilitiesru2006-10-141-27/+1
| | | | | | description with a reference to the disktab(5) manpage. PR: doc/48105
* Revert the default value of net.inet6.ip6.auto_linklocal to 1.ume2006-10-131-2/+8
| | | | | | | | If ipv6_enable is not set to "YES", net.inet6.ip6.auto_linklocal is turned to 0 at boot. Discussed with: re@, gnn@ MFC after: 3 days
* Fix a regression: let natd load libalias modules before /usr is mountedpiso2006-10-081-7/+7
| | | | | | | renaming /lib/libalias_*.so.4 to /lib/libalias_*.so. Approved by: glebius Reviewed by: glebius, ru
* Restore the behavior that net.inet6.ip6.auto_linklocal=0 couldume2006-10-073-5/+19
| | | | | | be coexist with ipv6_enable="YES". MFC after: 3 days
* Introduce mixer_enable (default: YES).flz2006-10-062-0/+2
| | | | | | | | PR: conf/101268 Submitted by: Eugene Grosbein <eugen@grosbein.pp.ru> Approved by: cperciva (mentor) X-MFC after: 6.2-RELEASE Sponsored by: FreeBSD Test-Bugathon
* A GEOM cache can speed up read performance by sending fixed sizeru2006-10-061-0/+2
| | | | | | | | | | read requests to its consumer. It has been developed to address the problem of a horrible read performance of a 64k blocksize FS residing on a RAID3 array with 8 data components, where a single disk component would only get 8k read requests, thus effectively killing disk performance under high load. Documentation will be provided later. I'd like to thank Vsevolod Lobko for his bright ideas, and Pawel Jakub Dawidek for helping me fix the nasty bug.
* Pull in /etc/rc.conf.d/network so that ifconfig_<if> variables can bebrooks2006-10-021-0/+1
| | | | | | | | set there. This is required for consistency with /etc/rc.d/netif. PR: conf/103893 Submitted by: Nick Hibma <nick at anywi.com> MFC after: 3 days
* Turn off automatic link local address if ipv6_enable is not set to YESgnn2006-10-021-0/+4
| | | | | | | in rc.conf Reviewed by: KAME core team, cperciva MFC after: 3 days
* debug() shouldn't misidentify itself to logger(1).yar2006-10-021-1/+1
| | | | Noticed by: David Thompson <dat1965 yahoo com>
* Add mn_MN.UTF-8ache2006-10-022-0/+6
|
* Create section 8 man subdirectories for PowerPC.ru2006-09-301-0/+6
|
* Push removal of mrouted down to the rest of the tree.bms2006-09-292-2/+6
|
* Summer of Code 2005: improve libalias - part 1 of 2piso2006-09-262-1/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the first part of my previous Summer of Code work, we get: -made libalias modular: -support for 'particular' protocols (like ftp/irc/etcetc) is no more hardcoded inside libalias, but it's available through external modules loadable at runtime -modules are available both in kernel (/boot/kernel/alias_*.ko) and user land (/lib/libalias_*) -protocols/applications modularized are: cuseeme, ftp, irc, nbt, pptp, skinny and smedia -added logging support for kernel side -cleanup After a buildworld, do a 'mergemaster -i' to install the file libalias.conf in /etc or manually copy it. During startup (and after every HUP signal) user land applications running the new libalias will try to read a file in /etc called libalias.conf: that file contains the list of modules to load. User land applications affected by this commit are ppp and natd: if libalias.conf is present in /etc you won't notice any difference. The only kernel land bit affected by this commit is ng_nat: if you are using ng_nat, and it doesn't correctly handle ftp/irc/etcetc sessions anymore, remember to kldload the correspondent module (i.e. kldload alias_ftp). General information and details about the inner working are available in the libalias man page under the section 'MODULAR ARCHITECTURE (AND ipfw(4) SUPPORT)'. NOTA BENE: this commit affects _ONLY_ libalias, ipfw in-kernel nat support will be part of the next libalias-related commit. Approved by: glebius Reviewed by: glebius, ru
* Sleep for one second after calling audit -t to give the audit daemon arwatson2006-09-241-0/+1
| | | | | | | | | | | | | | chance to actually terminate the audit service and exit. Otherwise, on an rc.d/auditd restart, the new audit daemon instance may try to start auditing while the previous session is still running. Likewise, this ensures a chance for auditd to terminate the audit trail at system shutdown. Perhaps more ideally, the script would wait synchronously for auditd to exit rather than for an arbitrary but short period of time. MFC after: 3 days Obtained from: TrustedBSD Project
* network_ipv6 also does some interface configuration so require it to runbrooks2006-09-211-1/+1
| | | | | | before starting devd so they don't trip over each other. PR: conf/103428
* Introduce a new method ipv6if which attemptes to figure out if anbrooks2006-09-212-1/+29
| | | | | | | | | | | | | | interface is an IPv6 interface. Use this method to decide if we should attempt to configure an interface with an IPv6 address in pccard_ether. The mechanism pccard_ether uses to do this is unsuited to the task because it assumes the list of interfaces it is passed is the full list of IPv6 interfaces and makes decissions based on that. This is at least a step in the right direction and is probably about as much as we can MFC safely. PR: conf/103428 MFC after: 3 days
* Flushing all IPv4 routes when an interface is removed or unconfiguredbrooks2006-09-202-6/+0
| | | | | | | makes no sense. Remove the undocumented removable_route_flush feature from pccard_ether. X-MFC after: never
* Search the list of up interfaces provided by "ifconfig -ul" instead ofbrooks2006-09-201-5/+7
| | | | | greping for UP in "ifconfig $ifn". This eliminates a dependancy on /usr.
* Add bthidd(8) rc(8) scriptemax2006-09-073-1/+38
| | | | MFC after: 1 month
* Prepare for upcoming bthidd(8) update. Install vkbd(4) header into dev/vkbd.emax2006-09-071-0/+2
| | | | MFC after: 1 month
* Unbreak PowerPC build after addition of powermac_nvram(4powerpc).marcel2006-09-021-0/+6
|
* - Document /conf/diskless_remount in the list of special files.brooks2006-09-011-3/+11
| | | | | | | | | - Note that diskless_remount files may use ".." to support mounts above the root path. - Copy dot files when populating directories from /conf. [1] PR: misc/102724 [1] Submitted by: Attila Nagy <bra at fsn.hu> [1]
* Kill the default phone numbers.ru2006-08-311-6/+3
| | | | Obtained from: OpenBSD
* Re-add lukemftpd. It has: PAM, MAC, per-class nologin files,obrien2006-08-311-0/+2
| | | | login.conf resource limits and features.
* Add FreeBSD Update 2.0 client code. The build code is in the projectscperciva2006-08-313-1/+52
| | | | | | repository. Sponsored by: FreeBSD security development fundraiser
OpenPOWER on IntegriCloud