summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* It is dangerous to use globbing like so in startup scripts:nectar2002-05-081-1/+3
| | | | | | | | | rm -f /tmp/.X11-unix/* If /tmp/.X11-unix didn't already exist, a user could symlink it to a directory with files that he wants to wipe out, and wait for next reboot. Reported by: lumpy <lumpy@the.whole.net>
* Fix typo.gshapiro2002-05-081-1/+1
| | | | | | Submitted by: Marius Strom <marius@marius.org> MFC after: 1 day and RE approval
* Use pam_lastlog(8)'s new no_fail option.des2002-05-083-3/+3
| | | | Sponsored by: DARPA, NAI Labs
* This is two new entries for Taiwanese 16bit PCMCIA cards.keichii2002-05-071-0/+11
| | | | | | | | | The Blue Concentric CF 802.11b card is a compactflash form-factored card that does 802.11b, including 128bit encryption. The Zonet modem pccard is a simple FAX/Modem card. Both are sold in Guang-Hua Market in Taipei, and functions perfectly with -current and -stable.
* Fix the output when daily_status_mailq_shorten is set to YESbrian2002-05-071-4/+4
| | | | | | PR: 23766 Mostly submitted by: lambert@ssabsd.csw.net MFC after: 3 days
* Include 'www' in the list of forbidden ftp users.maxim2002-05-071-0/+1
| | | | | Reviewed by: sheldonh MFC after: 3 days
* Remove leading whitespace from the setuid file lists.cjc2002-05-051-2/+2
| | | | | | | | | | | | | | Due to the way we run ls(1), through xargs(1), the leading whitespace can change even when the setuid files haven't. To avoid displaying these lines, we currently run diff(1) with the '-w' option. However, this is probably not the ideal way to go; there is a very, very small possibility for diff(1) to miss things is shouldn't. So, with the leading space cleaned, we can revert to the '-b' option which is "safer." PR: conf/37618 Reviewed by: brian MFC after: 3 days
* Add a PAM policy for rexecd(8).des2002-05-022-1/+17
| | | | Sponsored by: DARPA, NAI Labs
* xdm plays horrid tricks with PAM, and dumps core if it's allowed to calldes2002-05-022-0/+2
| | | | | | | | pam_lastlog, so add a dummy session chain to avoid using the one from pam.d/other. I assume gdm does something similar, so give it a dummy session chain as well. Sponsored by: DARPA, NAI Labs.
* Handle .bz2 files created by newsyslogbrian2002-04-302-0/+7
| | | | | | PR: 37529 Partially submitted by: Peter Hollaubek <fifteen@inext.hu> MFC after: 1 week
* Don't use ISO_8859 when I should use ISO8859.dwmalone2002-04-291-1/+1
|
* Add no_warn to pam_lastlog. This should prevent xdm from dumping coredes2002-04-291-1/+1
| | | | when linked with Linux-PAM.
* Add a French calendar.dwmalone2002-04-281-0/+2
| | | | | | PR: 32265 Submitted by: Thierry Thomas <thierry@pompo.net> MFC after: 1 week
* Remove reference to the TCP_RESTRICT_RST option, which was removeddougb2002-04-271-3/+3
| | | | | | over a year ago. Small ws twiddle while I'm here.
* Rename the file used to specify the nextboot to make it clear that thiswes2002-04-261-1/+1
| | | | | | | is a loader configuration file and can be used for more than just a kernel name. Submitted by: Gordon Tetlow <gordont@gnf.org>
* Milestone #1 in cross-arch make releases.ru2002-04-261-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Do not install games and profiled libraries to the ${CHROOTDIR} with the initial installworld. Eliminate the need in the second installworld. For that, make sure _everything_ is built in the "world" environment, using the right tool chain. Added SUBDIR_OVERRIDE helper stuff to Makefile.inc1. Split the buildworld process into stages, and skip some stages when SUBDIR_OVERRIDE is set (used to build crypto, krb4, and krb5 dists). Added NO_MAKEDB_RUN knob to Makefile.inc1 to avoid running makewhatis(1) at the end of installworld (used when making crypto, krb4, and krb5 dists). In release/scripts/doFS.sh, ensure that the correct boot blocks are used. Moved the creation of the "crypto" dist from release.5 to release.2. In release.3 and doMFSKERN, build kernels in the "world" environment. KERNELS now means "additional" kernels, GENERIC is always built. Ensure we build crunched binaries in the "world" environment. Obfuscate release/Makefile some more (WMAKEENV) to achieve this. Inline createBOOTMFS target. Use already built GENERIC kernel modules to augment mfsfd's /stand/modules. GC doMODULES as such. Assorted fixes: Get rid of the "afterdistribute" target by moving the single use of it from sys/Makefile to etc/Makefile's "distribute". Makefile.inc1: apparently "etc" no longer needs to be last for "distribute" to succeed. gnu/usr.bin/perl/library/Makefile.inc: do not override the "install" and "distribute" targets, do it the "canonical" way. release/scripts/{man,cat}pages-make.sh: make sure Perl manpages and catpages appear in the right dists. Note that because Perl does not respect the MANBUILDCAT (and NOMAN), this results in a loss of /usr/share/perl/man/cat* empty directories. This will be fixed soon. Turn MAKE_KERBEROS4 into a plain boolean variable (if it is set it means "make KerberosIV"), as documented in the make.conf(5) manpage. Most of the userland makefiles did not test it for "YES" anyway. XXX Should specialized kerberized libpam versions be included into the krb4 and krb5 dists? (libpam.a would be incorrect anyway if both krb4 and krb5 dists were choosen.) Make sure "games" dist is made before "catpages", otherwise games catpages settle in the wrong dist. Fast build machine provided by: Igor Kucherenko <kivvy@sunbay.com>
* Add a -k option to reboot to specify the kernel to boot next timewes2002-04-261-0/+4
| | | | | | | | | | | | | | | | around. If the kernel boots successfully, the record of this kernel is erased, it is intended to be a one-shot option for testing kernels. This could be improved by having the loader remove the record of the next kernel to boot, it is currently removed in /etc/rc immediately after disks are mounted r/w. I'd like to MFC this before the 4.6 freeze unless there is violent objection. Reviewed by: Several on IRC MFC after: 4 days
* Change the name of the 'bin' distribution to 'base'.obrien2002-04-231-2/+2
| | | | | | | This is done since it contains much more than /bin, and also gets in the way when making a combined install+fixit CD. OK'ed by: jkh
* sys.mk no longer includes bsd.own.mk so I need to include it here forgshapiro2002-04-231-0/+3
| | | | | | the definition of SHAREMODE. Submitted by: Udo Schweigert <Udo.Schweigert@siemens.com>
* Correct default value of drainwait: it should be 300 seconds, not forever.sobomax2002-04-232-2/+2
| | | | | | PR: 37370 Submitted by: Daniel O'Connor <doconnor@gsoft.com.au> MFC after: 2 weeks
* Do not use 'ps -e' for entropy gathering. It uses /proc/*/mem to rummageobrien2002-04-231-1/+1
| | | | | | | around *user* memory to extract the environment variable strings. This is problematic for us. Submitted by: peter
* Utilize dhcp information in the kernel environment if we don't haveobrien2002-04-223-3/+60
| | | | | | hostname and DNS information already. Submitted by: Danny Braniss <danny@cs.huji.ac.il>
* Bring in changes from smbfs-1.4.4.sheldonh2002-04-221-2/+3
|
* Usage style sweep: spell "usage" with a small 'u'.des2002-04-223-3/+3
| | | | | Also change one case of blatant __progname abuse (several more remain) This commit does not touch anything in src/{contrib,crypto,gnu}/.
* Non-sendmail users use the FreeBSD sendmail startup functionality to startgshapiro2002-04-213-197/+1
| | | | | | | | | | | | alternative MTAs. Therefore, always install rc.sendmail, regardless of NO_SENDMAIL make.conf setting. Users can still set mta_start_script to a different script. This commit is after a repo-copy of src/etc/sendmail/rc.sendmail to src/etc/rc.sendmail. Noticed by: Calvin NG <calvinng@brel.com> MFC after: 3 days
* Consistently use full pathnames for files, especially executables.cjc2002-04-211-4/+4
| | | | | | PR: conf/37292 Submitted by: Helge Oldach <send-pr@oldach.net> MFC after: 3 days
* In my continuing crusade to make life better for non-sendmail users, avoidgshapiro2002-04-203-2/+20
| | | | | | | | the creation of /var/spool/clientmqueue and therefore the need for the smmsp user and group if NO_SENDMAIL is defined. This required breaking out the creation of the directory into a new BSD.sendmail.dist mtree file. MFC after: 1 week
* Don't list pam_unix in the session chain, since it does not provide anydes2002-04-189-11/+1
| | | | | | session management services. Sponsored by: DARPA, NAI Labs
* Fixed bugs in previous revision:ru2002-04-181-20/+6
| | | | | | | | | | | | | Added NOOBJ if anyone even attempts to "make obj" here. Revert to installing files with mode 644 except README. Make this overall look like a BSD-style Makefile rather than roll-your-own (this is not a bug). For the record. Previous revision also fixed the breakage introduced by the sys.mk,v 1.60 commit: bsd.own.mk is no longer automatically included from sys.mk. Reported by: jhay
* Use ${FILES} and <bsd.prog.mk> rather than roll-your-own.des2002-04-181-22/+21
|
* Mention that terminal type vt220 will work better if one needsgerald2002-04-175-10/+20
| | | | | | | interoperability with other systems like Solaris or GNU/Linux. PR: 33810 Approved by: obrien
* Really sort entries.ru2002-04-161-1/+1
|
* Add PAM policy for the "passwd" service, including a sample config linedes2002-04-152-0/+12
| | | | | | for pam_passwdqc. Sponsored by: DARPA, NAI Labs
* Add pam_lastlog(8) here since I removed lastlog support from sshd.des2002-04-151-0/+1
| | | | Sponsored by: DARPA, NAI Labs
* Remove ws at EOLdougb2002-04-141-1/+1
|
* Fix up submit.cf alternation instructions in light of new SENDMAIL_SUBMIT_MCgshapiro2002-04-141-4/+6
| | | | | | make.conf knob. MFC after: 1 week
* Provide a new make.conf knob, SENDMAIL_SUBMIT_MC to allow users to pickgshapiro2002-04-142-17/+69
| | | | | | | | | the .mc file used for /etc/mail/submit.cf. By default, /etc/mail/freebsd.submit.mc is installed and used. Requested by: fenner Submitted by: ume MFC after: 1 week
* update german national holidays file for 2002, 2003 and 2004hm2002-04-131-9/+26
|
* Use pam_rhosts(8).des2002-04-121-1/+1
|
* Add my Copyright on this file so I can allow others to use itgshapiro2002-04-122-0/+2
|
* Add etc/pam.d.des2002-04-121-0/+2
|
* Cosmetic changes to the previous commit, bringing it closer to what Ides2002-04-117-49/+49
| | | | already had in my tree but didn't want to commit.
* Add an IPv6 sample line for tftpd.ume2002-04-111-0/+1
| | | | MFC after: 2 weeks
* Back out /etc/rc.d addition. I'd like to see something come of what haspeter2002-04-111-1/+1
| | | | | already been imported. It would have been nice to get it out there in DP1, but that is too late now.
* <peril sensitive sunglasses on>peter2002-04-101-1/+1
| | | | | | | Add /etc/rc.d to the startup dirs list. It is a convenient place to put custom startup scripts instead of hacking a shared rc.local. eg: ftpd in listener mode, or maybe even sendmail or another mailer, etc. <peril sensitive sunglasses off>
* Since sshd expects /etc/ssh/ssh_host_rsa_key to exist, we had betterpeter2002-04-107-28/+63
| | | | | create it. Also specify protocol v1/v2 in case people wonder why we generate two RSA keys.
* Update mail queue related periodic scripts to account for sendmail 8.12'sgshapiro2002-04-103-11/+32
| | | | | | | | | | | | | | | | | | | | clientmqueue (submit mail queue). The new mailq display is only active if both the old daily_status_mailq_enable is set to "YES" and the new daily_status_include_submit_mailq is set to "YES" so people who disabled 440.status-mailq won't have any surprises. Likewise, the new queue run is only active if both the old daily_queuerun_enable is set to "YES" and the new daily_submit_queuerun is set to "YES" so people who disabled 500.queuerun won't have any surprises. While I am here, remove the [ ! -d /var/spool/mqueue ] checks from both scripts as the queue directory isn't always /var/spool/mqueue for the main daemon -- it can be set to anything in the sendmail.cf file. MFC after: 1 week
* If used, pam_ssh should be marked "sufficient", not "required".des2002-04-081-1/+1
| | | | Sponsored by: DARPA, NAI Labs
* Correct path for saver to reflect reality.asmodai2002-04-061-1/+1
| | | | Submitted by: Martin Faxer <gmh003532@brfmasthugget.se>
* Now, you can specify "" or "NONE" for ipv6_network_interfaces toume2002-04-062-12/+24
| | | | | | | | | prevent the interfaces from being initialized by /etc/rc.network6 wrongly. So, you can explicitly initialize the interfaces by /etc/pccard_ether. With previous rc.network6, if you specify pccardd_flags="-z", net.inet6.ip6.accept_rtadv was wronly set to 0, then RA was not accepted.
OpenPOWER on IntegriCloud