summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* stop RFC 4193 address on the outside interface.ume2005-10-051-0/+4
| | | | MFC after: 1 day
* Use more rc.subr bits to clean up pccard_ether and implement newbrooks2005-10-031-28/+42
| | | | | | | | features. Both the presence of a NOAUTO keyword and an interface being up can be ignored is the forcestart option is used. Additionally, a restart option has been added. Reviewed by: ume
* Add the lmcconfig tool for controlling the lmc driver. Add man pages andscottl2005-10-031-0/+2
| | | | | | glue. Submitted by: David Boggs
* Use available rc.subr features.yar2005-10-021-27/+16
| | | | | Reduce code duplication. Follow the current style of rc.d scripting.
* Record dependency on the newly introduced pfsync.yar2005-10-021-2/+2
| | | | | | | | | | | | | | Start before routing for better system protection. (pf used to start late during system boot, after many a network daemon have started already, which sucked from security POV.) Remark: For maximum security, pf should start before netif, but it would create a dependency loop because pfsync has to start after netif, yet before pf. Discussed with: mlaier on -pf MFC after: 5 days
* Add an rc.d script to start pfsync at the right moment of theyar2005-10-023-1/+57
| | | | | | | | | | | | | system boot, and hook it up in the system. The separate script is needed because in the presence of various interface lists in rc.conf ($network_interfaces, $cloned_interfaces, $sppp_interfaces, $gif_interfaces, more to come) it is hard to start them orderly, so that pfsync is brought up after its syncdev, which is required for the proper startup of pfsync. Discussed with: mlaier on -pf MFC after: 5 days
* Use rc.subr(8) appropriately:yar2005-10-021-44/+23
| | | | | | | | - utilize default methods instead of rolling local ones; - avoid to specify BEFORE conditions we don't really need (pflog will be REQUIRE'd by pf); - omit extra decoration from warning messages, warn() will decorate them sufficiently.
* o Remove unfinished code and make it possible to overridemaxim2005-10-021-14/+5
| | | | | | bsdextended_script from rc.conf(5): Not objected by: trhodes
* Fix the usage of rc_usage. The rc_usage function takesyar2005-10-011-3/+3
| | | | | | a list of possible keywords, not all them in a single argument. This also fixes the issue of extra delimiter characters appearing on the help line from rc.d scripts not setting $extra_commands.
* Use hw.machine_arch instead of hw.machine.nyan2005-09-301-1/+1
|
* Be less IPv4 centric. When checking if the interface is alreadybrooks2005-09-281-1/+1
| | | | | configured, check if the UP flag is set instead of checking for the netmask keyword.
* Make it a good-mannered rcNG script respectful to the command line.yar2005-09-281-16/+23
|
* Don't print anything if we can't do any localpkg shutdown (start alreadybrooks2005-09-271-2/+1
| | | | | | | does this). Submitted by: Andre Albsmeier <Andre dot Albsmeier at siemens dot com> PR: conf/86606
* Simplify the code by making use of 'kldstat -q -m <mod>'.pjd2005-09-242-7/+4
| | | | No objections from: mlaier
* Simplify the code a bit by using newly added (to kldstat(8) '-q') option.pjd2005-09-231-4/+1
|
* If we're not installing OpenSSH in the base, don't install its startupwollman2005-09-231-1/+6
| | | | | file either. This clears the way for third-party SSH ports to install an RCng startup script.
* Add a new rc.conf entry, kerberos5_server_flags, which allows therwatson2005-09-202-1/+2
| | | | | | | administrator to specify additional start-up flags to the Kerberos 5 Authentication Server. MFC after: 3 days
* In mountd_precmd(), use rc_args, not mountd_args torodrigc2005-09-181-2/+2
| | | | | | | | | | override the value of mountd_args. This fixes the problem where mountd_args was not properly being set if weak_mountd_authentifcation="YES" was set in rc.conf. PR: conf/86260 Submitted by: Thierry Herbelot <thierry at herbelot dot com> MFC after: 3 days
* Use sysctl -q when querying for kern.bootp_cookie in order to avoidrwatson2005-09-151-1/+1
| | | | | | printing boot-time errors that don't reflect true error conditions. MFC after: 1 week
* Use kenv -q to extract dumpdev rather than kenv, in order to avoidrwatson2005-09-131-1/+1
| | | | | | | spamming the console in the event that a loader tunable 'dumpdev' isn't defined, which is not a relevant failure to report. MFC after: 1 week
* A new version of rev. 1.4: postpone a temporary file creationmaxim2005-09-111-1/+1
| | | | | | | | until we realize if ipfw(4) ever used. PR: bin/85970 Submitted by: Andre Albsmeier MFC after: 3 days
* Comment out ofw_console 'screen' entry and zs tty entries.grehan2005-09-101-3/+3
| | | | | | | | | | The OpenFirmware console isn't used on real systems anymore and I never get to multi-user mode in psim. There are problems with zs that need to be resolved before these lines can be enabled. This eliminates disconcerting warnings on boot. MFC after: 2 days
* Teach portsnap how to ignore unwanted parts of the ports tree. A linecperciva2005-09-061-0/+6
| | | | | | | | | | | | | | | of the form "REFUSE foo" in portsnap.conf will result in parts of the tree matching "^foo" being (a) not extracted by "portsnap extract", (b) not updated by "portsnap update", and (c) not having any patches or new ports downloaded by "portsnap fetch" or "portsnap cron". The example shown in portsnap.conf demonstrates ignoring all the language categories. As mentioned in portsnap.conf.5, the use of an imcomplete ports tree is not officially supported; but this is something which many users have requested, so I'm adding it anyway. PR: bin/85619 (but not the patch provided therein) MFC after: 1 month
* In accordance with my intentions announced (and not objected to)dougb2005-09-051-6/+0
| | | | | | on -arch, and RFC 4159 (http://www.rfc-editor.org/rfc/rfc4159.txt) which officially deprecates all usage of IP6.INT, remove the reference to that zone from the example named.conf file.
* Remove duplicate "at" from comment.keramida2005-09-041-1/+1
|
* Actually block Ctrl-C (SIGINT=2).brooks2005-09-021-2/+2
| | | | | Reported by: sam Pointy hat to: brooks
* - Alwasy explicitly bring the interface up before configuring it.brooks2005-09-021-7/+17
| | | | | | | | - If an interface's ifconfig_<ifn> is set, but empty, don't set it to ifconfig_DEFAULT. This way interfaces can be disabled even in the presence of ifconfig_DEFAULT. - When listing interfaces and network_interfaces=auto, place lo0 first if it's around.
* Block SIGQUIT (Ctrl-C) while running in startup mode. This should allowbrooks2005-09-021-4/+4
| | | | | | dhclient's to be killed without stopping all boot progress. Minor cleanup of the interface list generation code.
* Add a short description of how a literal colon ':' can be inlined in thekeramida2005-08-311-0/+5
| | | | | | | value of capability databases, since it's not really obvious how a colon can be escaped, and a pointer to the getcap(3) manpage for more details. Triggered by: a question by Ceri on -questions
* Fix braino in last commit. Print nothing if ipfw(4) is not present.glebius2005-08-311-2/+2
|
* Be sure to execute sendmail_precmd() to check sendmail.cf conflicts andgshapiro2005-08-301-0/+1
| | | | | | | | rebuild the aliases file if necessary. PR: conf/72910 Submitted by: matteo@ MFC after: 3 days
* Fix minor typo in a comment.bmah2005-08-281-1/+1
|
* Allow one to override the endian flags for make distribution. Thisimp2005-08-261-5/+6
| | | | | | | | can be useful for when you know that you are doing something that won't work with the standard settings and different settings are more appropriate. This allows 5.3 tools to build a 6.x userland when these values are set to null.
* Support ifconfig_<ifn> variables containing quoted variables with spacesbrooks2005-08-261-1/+1
| | | | | | | | in them by wrapping the ifconfig command with eval "...". For example, this allows: ifconfig_iwi0="DHCP ssid 'foo bar baz'"
* Stop hard-coding an -M flag to mdmfs(8) in /etc/rc.subr.yar2005-08-242-3/+3
| | | | | | | | | | | Now this flag can be set, or not set, for memory-backed file systems on individual basis, as illustrated by the rc.conf(5) variables tmpmfs_flags and varmfs_flags. The flag is set for those FS'en by default, in /etc/defaults/rc.conf, in order to stay compatible with the old rc.subr behaviour. Submitted by: marck MFC after: 3 days
* - Remove the removable_interfaces variable. /etc/pccard_ether willbrooks2005-08-243-5/+29
| | | | | | | | | | | | now run on any interface. - Add a new ifconfig_<ifn> keyword, NOAUTO which prevents configuration of an interface at boot or via /etc/pccard_ether. This allows /etc/rc.d/netif to be used to start and stop an interface on a purely manual basis. The decision to affect pccard_ether may be revisited at a later date. Requested by: imp, gallatin (removable_interfaces) Discussed with: sam, Randy Bush (NOAUTO)
* When looking for new lines in diff output, grep for '^[>+]' instead ofcperciva2005-08-221-1/+1
| | | | | | | '^>', in order to catch both normal and unified diffs. Problem reported by: volker at vwsoft dot com via -stable MFC after: 3 days
* - Correctly parse output, when logging amount is limited in theglebius2005-08-201-7/+15
| | | | | | | | | | rule itself, not in verbose_limit sysctl. [1] - Do check rules, even if verbose_limit is set 0. Rules may have their own log limits. PR: conf/77929 Submitted by: Andriy Gapon [1] Reviewed by: matteo
* Add two new template sources, /conf/bcast/${ipbca} and /conf/ip/${ip}.brooks2005-08-171-7/+18
| | | | | | | These allow large installations to keep their /conf directory down to a managable number of entries. Clean up the handling of dhcp_cookie.
* Fix (/usr could not be mounted yet, so there is no grep(1) available) andpjd2005-08-141-1/+1
| | | | | | simplify checking for g_eli module. MFC after: 3 days
* Connect geli and geli2 ro the build.pjd2005-08-141-1/+1
| | | | MFC after: 3 days
* Add scripts for GELI device configuration on boot.pjd2005-08-144-1/+207
| | | | | | | | | | rc.d/geli - configures encryption (ask for passphrases, etc.); rc.d/geli2 - is called after file systems are mounted and mark devices for detach on last close. Sponsored by: Wheel Sp. z o.o. http://www.wheel.pl MFC after: 3 days
* Move 'local_tr' function to rc.subr and change its name to 'ltr'.pjd2005-08-142-22/+24
| | | | MFC after: 3 days
* Add portsnap to the base system. This is a secure, easy to use,cperciva2005-08-083-1/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | fast, lightweight, and generally good way for users to keep their ports trees up to date. This is version 0.9.4 from the ports tree (sysutils/portsnap) with the following changes: 1. The experimental pipelined http code is enabled. No seatbelts in -CURRENT. (^_^) 2. The working directory has moved from /usr/local/portsnap to /var/db/portsnap (as discussed on -arch two days ago). 3. Portsnap now fetches a list of mirrors (distributed as DNS SRV records) and selects one randomly. This should help to avoid the uneven loading which plagues the cvsup mirror network. 4. The license is now 2-clause BSD instead of 3-clause BSD. 5. Various incidental changes to make portsnap fit into the base system's build mechanics. X-MFC-After: 6.0-RELEASE X-MFC-Before: 5.5-RELEASE X-MFC-To: RELENG_6, RELENG_5, ports discussed on: -arch and several other places "yes please" from: simon, remko, flz, Diane Bruce thinks this is a great idea: bsdimp Hopes he didn't forget any files: cperciva
* Back-out previous commit - we need to skip logging socket when we start apjd2005-08-081-0/+3
| | | | | | | | jail and external syslogd is listening in jail's chroot. Pointed out by: csjp While here, skip also "logpriv" socket.
* Skip jails which are already running and inform why.pjd2005-08-071-0/+4
| | | | | | | | | | | We're checking for /var/run/jail_<name>.id file and if it exists, we don't start the jail. It should be also safe in case of reboot(8), because rc.d/cleanvar script is going to remove /var/run/jail_* files. It helps to avoid potential mess when the same jail is started twice, because of an administrator mistake (been there, done that). MFC after: 1 week
* We don't need to skip /var/run/log socket, as syslogd is always startedpjd2005-08-071-2/+0
| | | | | after rc.d/cleanvar. And if we wanted to skip /var/run/log we still needed to skip /var/run/logpriv, which wasn't implemented.
* Allow to give more than one jail's name, eg.:pjd2005-08-071-2/+6
| | | | | | # /etc/rc.d/jail start www mail MFC after: 3 days
* Teach rc.d/encswap script how to use geli(8) for swap encryption.pjd2005-08-052-15/+19
| | | | MFC after: 3 days
* gbde_swap has been repo-copied to encswap.pjd2005-08-052-57/+2
| | | | Repo-copy made by: markm
OpenPOWER on IntegriCloud