summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
...
* Instead of killing the 'watchdog' subshell and leaving a sleep forbz2009-01-251-1/+1
| | | | | | | | | | | | | rcshutdown_timeout (normally 30s) around re-parented to init, make sure both go away using pkill -P. While noone normally notices this for the system shutdown, it helps for cleanly shutting down trusted jails. Found without a killall in the base system, which in rc.d/jail normally ensures that all processes of a jail to be stopped will be killed. Reviewed by: silence on current@ MFC after: 4 weeks
* revert r187343sam2009-01-161-1/+1
|
* add FCC4 SKU to expose Public Safety Band (PSB) frequencies; this issam2009-01-162-1/+67
| | | | modeled after the Atheros SKU of the same name
* Fix typo to install 400.status-pkg, again.ume2009-01-141-1/+1
|
* The description of the various securelevels has moved to thekeramida2009-01-081-1/+1
| | | | | | security.7 manpage a while ago. MFC after: 1 week
* Put the devfs ruleset next to devfs enable, add a comment aboutbz2009-01-061-2/+3
| | | | | | | | | | the suggested ruleset[1]. While here use an IP from the 'test-net' prefix for docs. PR: kern/130102 ([1] different problem in the end) Reviewed by: simon MFC after: 2 weeks
* Move another block of ASUS events to devd/asus.conf that were missed in r186249thompsa2008-12-232-22/+22
|
* Add /etc/devd/ and move hardware specific configuration there. This makes itthompsa2008-12-175-23/+64
| | | | | | easier to maintain custom rules for non-system things like ACPI hotkeys. /etc/devd.conf is already set up to check this directory, no change needed there.
* Correct a bug where /etc/rc.d/defaultroute fails to finish by printing abrooks2008-12-171-1/+3
| | | | | | | | | newline when it fails to obtain an address via DHCP. This made the next rc script begin its output on the same line. PR: conf Submitted by: Bruce Cran <bruce at cran dot org dot uk> MFC after: 3 days
* o fix DEBUG sku definitionsam2008-12-151-1/+138
| | | | o add definitions for 900MHz radios: Ubiquiti SR9 and XR9, and ZComax GZ-901
* Remove slip.log. Slip got removed as part of the MPSAFE tty work. Ifkensmith2008-12-021-2/+0
| | | | | | | it does come back it would probably be better if users who were interested in slip added appropriate lines instead of this being here unconditionally. Reminded by: tut <at> nhamon <dot> com <dot> ua
* The slip.log file got removed along with the MPSAFE tty work. If slipkensmith2008-12-021-1/+0
| | | | | | does ever come back it's probably best if its log file be something that gets added if the user decided they want to run slip instead of having it here unconditionally.
* src/sys/dev/usb2/controller/uss820dci_pccard.calfred2008-11-191-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | src/sys/dev/usb2/core/usbdevs src/sys/dev/usb2/include/urio2_ioctl.h src/sys/dev/usb2/storage/ustorage2_fs.h These files are not used any more. src/usr.sbin/Makefile src/etc/mtree/BSD.include.dist src/include/Makefile src/lib/Makefile src/share/man/man7/hier.7 src/share/mk/bsd.libnames.mk src/etc/mtree/BSD.include.dist Make "usbconfig" and "libusb20" a part of the default build. src/sys/dev/usb/rio500_usb.h src/sys/dev/usb2/storage/urio2.c Use common include file. src/sys/dev/usb2/bluetooth/ng_ubt2.c Make USB bluetooth depend on "ng_hci" module. src/sys/dev/usb2/controller/ehci2.c src/sys/dev/usb2/controller/ehci2.h Patches for Marvell EHCI. src/sys/dev/usb2/core/usb2_busdma.c Bugfix for 64-bit platforms. Need to unload the previously loaded DMA map and some cleanup regarding some corner cases. src/sys/dev/usb2/core/usb2_core.h src/sys/dev/usb2/core/usb2_dev.c src/sys/dev/usb2/core/usb2_dev.h Bugfix for libusb filesystem interface. New feature: Add support for filtering device data at the expense of the userland process. Add some more comments. Some minor code styling. Remove unused function, usb2_fifo_get_data_next(). Fix an issue about "fifo_index" being used instead of "ep_index". src/sys/dev/usb2/core/usb2_device.c src/sys/dev/usb2/core/usb2_generic.c Bugfix for Linux USB compat layer. Do not free non-generic FIFOs when doing an alternate setting. Cleanup USB IOCTL and USB reference handling. Fix a corner case where USB-FS was left initialised after setting a new configuration or alternate setting. src/sys/dev/usb2/core/usb2_hub.c Improvement: Check all USB HUB ports by default at least one time. src/sys/dev/usb2/core/usb2_request.c Bugfix: Make sure destination ASCII string is properly zero terminated in all cases. Improvement: Skip invalid characters instead of replacing with a dot. src/sys/dev/usb2/core/usb2_util.c src/sys/dev/usb2/image/uscanner2.c Spelling. src/sys/dev/usb2/include/Makefile Share "usbdevs" with the old USB stack. src/sys/dev/usb2/include/usb2_devid.h src/sys/dev/usb2/include/usb2_devtable.h Regenerate files. Alfred: Please fix the RCS tag at the top. src/sys/dev/usb2/include/usb2_ioctl.h Fix compilation of "kdump". src/sys/dev/usb2/serial/ubsa2.c src/sys/dev/usb2/serial/ugensa2.c Remove device ID's which will end up in a new 3G driver. src/sys/dev/usb2/sound/uaudio2.c Correct a debug printout. src/sys/dev/usb2/storage/umass2.c Sync with old USB stack. src/lib/libusb20/libusb20.3 Add more documentation. src/lib/libusb20/libusb20.c Various bugfixes and improvements. src/usr.sbin/usbconfig/dump.c src/usr.sbin/usbconfig/usbconfig.c New commands for dumping strings and doing custom USB requests from the command line. Remove keyword requirements from generated files: "head/sys/dev/usb2/include/usb2_devid.h" "head/sys/dev/usb2/include/usb2_devtable.h"
* Add defaults for /etc/rc.d/gssdkeramida2008-11-051-0/+3
| | | | Approved by: dfr
* Correct a typo that prevented my laptop from startingdelphij2008-11-041-1/+1
| | | | devd.
* Add support for Asus A8Sr notebooks.rpaulo2008-11-041-0/+22
| | | | | | | PR: 128553 Submitted by: Eygene Ryabinkin <rea-fbsd at codelabs.ru> Reviewed by: philip MFC after: 2 months
* Implement support for RPCSEC_GSS authentication to both the NFS clientdfr2008-11-034-3/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | and server. This replaces the RPC implementation of the NFS client and server with the newer RPC implementation originally developed (actually ported from the userland sunrpc code) to support the NFS Lock Manager. I have tested this code extensively and I believe it is stable and that performance is at least equal to the legacy RPC implementation. The NFS code currently contains support for both the new RPC implementation and the older legacy implementation inherited from the original NFS codebase. The default is to use the new implementation - add the NFS_LEGACYRPC option to fall back to the old code. When I merge this support back to RELENG_7, I will probably change this so that users have to 'opt in' to get the new code. To use RPCSEC_GSS on either client or server, you must build a kernel which includes the KGSSAPI option and the crypto device. On the userland side, you must build at least a new libc, mountd, mount_nfs and gssd. You must install new versions of /etc/rc.d/gssd and /etc/rc.d/nfsd and add 'gssd_enable=YES' to /etc/rc.conf. As long as gssd is running, you should be able to mount an NFS filesystem from a server that requires RPCSEC_GSS authentication. The mount itself can happen without any kerberos credentials but all access to the filesystem will be denied unless the accessing user has a valid ticket file in the standard place (/tmp/krb5cc_<uid>). There is currently no support for situations where the ticket file is in a different place, such as when the user logged in via SSH and has delegated credentials from that login. This restriction is also present in Solaris and Linux. In theory, we could improve this in future, possibly using Brooks Davis' implementation of variant symlinks. Supporting RPCSEC_GSS on a server is nearly as simple. You must create service creds for the server in the form 'nfs/<fqdn>@<REALM>' and install them in /etc/krb5.keytab. The standard heimdal utility ktutil makes this fairly easy. After the service creds have been created, you can add a '-sec=krb5' option to /etc/exports and restart both mountd and nfsd. The only other difference an administrator should notice is that nfsd doesn't fork to create service threads any more. In normal operation, there will be two nfsd processes, one in userland waiting for TCP connections and one in the kernel handling requests. The latter process will create as many kthreads as required - these should be visible via 'top -H'. The code has some support for varying the number of service threads according to load but initially at least, nfsd uses a fixed number of threads according to the value supplied to its '-n' option. Sponsored by: Isilon Systems MFC after: 1 month
* ifconfig(8) can take only one interface at a time.pjd2008-10-301-1/+3
|
* Explicitly set the shell to /bin/sh when MK_TCSH == no.mp2008-10-291-1/+1
| | | | Not objected to by: sam
* Add ucomX shortcuts just like its uart sibling.thompsa2008-10-271-0/+8
|
* Make a note about the notify codes for the four special function keys above thethompsa2008-10-271-0/+1
| | | | keyboard on the EeePC.
* o fix MK_TCSH == no: the default master.passwd sets up root to use /bin/cshsam2008-10-271-9/+20
| | | | | | | but there won't be one so root won't be able to login; edit the installed file to use /bin/sh in this case. o while here split csh-related files apart from sh and only install them when requested
* Show which rc script is running since the default ^T just shows 'sh' as thethompsa2008-10-271-0/+1
| | | | process.
* Sort `mount -p' output by name before checking for any differences.ed2008-10-251-1/+1
| | | | | | | | | | | | I noticed on a system at home that restarting named(8) causes the /var/named/dev mount to be moved to the bottom of the mount list, because it gets remounted. When I received the daily security email this morning, I was quite amazed to see that the security report listed the differences, while it was nothing out of the ordinary. If we just throw the `mount -p' output through sort(1), we'll only receive notifications about changes to mounts if something has really changed.
* Add entries for uart based serial ports. All the serial ports on mipsimp2008-10-121-4/+4
| | | | so far are uart subclasses. Also, turn uart0 on by default.
* Create separate cat directories for en.UTF-8. This, together with r183697,des2008-10-082-0/+41
| | | | | | allows users in en.UTF-8 locales to see non-ascii characters in man pages. MFC after: 1 week
* Remove compat support for vaps_<ifn> and vap_create_<ifn> variables asbrooks2008-10-011-7/+1
| | | | | | promised in r178527. These variables were never in a release version. Reminded by: sam
* Allow a jail's IP alias to be created with an arbitrary netmask.ru2008-09-241-1/+3
| | | | MFC after: 3 days
* add back regdomain.xmlsam2008-09-221-0/+4
| | | | Noticed by: jhay
* add new build knobs and jigger some existing controls to improvesam2008-09-215-36/+134
| | | | | | | | control over the result of buildworld and installworld; this especially helps packaging systems such as nanobsd Reviewed by: various (posted to arch) MFC after: 1 month
* Allow a jail to be started with a specific route fib.thompsa2008-09-162-1/+9
| | | | | Reviewed by: secteam (simon) Reviewed by: brooks, bz
* Add support to rc.initdiskless for /conf/T/M/remount_subdir.bms2008-09-091-4/+37
| | | | | | | | This allows the location of the configuration data to be relocated within the filesystem containing it. A nullfs mount is used in order to achieve this. Obtained from: XORP, Inc.
* A no-op commit to simulate the effect of a forced commit so the filegshapiro2008-08-311-1/+0
| | | | | has a new timestamp as needed for mergemaster. A more long term solution to this is needed since svn doesn't support forced commits.
* Add the ability to run /usr/sbin/crashinfo on a new core dump automaticallyjhb2008-08-292-0/+5
| | | | | | | during boot. Right now this is disabled by default, but it can be enabled by setting 'crashinfo_enable=YES' in rc.conf. MFC after: 2 weeks
* Google changed the location of the blacklists again.gshapiro2008-08-281-1/+1
| | | | Submitted by: Tim Pozar
* Make obrien happy #2des2008-08-251-1/+0
|
* Make obrien happydes2008-08-252-29/+1
|
* Restore 256 pty(4) entries.ed2008-08-247-0/+1792
| | | | | | | | | | | | As discussed with Robert Watson on the src-committers list, it is safer to keep at least some pty(4) entries in /etc/ttys, for applications that roll their own PTY allocation routine and only search for BSD-style PTY's. This means we've now just toggled the amount of entries for pts(4) and pty(4). Requested by: rwatson
* Remove old BSD-style entries from /etc/ttys and increase pts(4) to 512.ed2008-08-237-3584/+1792
| | | | | | | | | Because we now use pts(4)-style PTY's exclusively, there is no use for these entries in /etc/ttys. Right now the pts(4) entries only go from 0 to 255. Because we're going to touch these files anyway, increase the number to 511. Discussed with: philip (ex-mentor)
* Cope with the file rename by changing rc variables.rpaulo2008-08-211-4/+4
|
* Integrate the new MPSAFE TTY layer to the FreeBSD operating system.ed2008-08-202-1/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The last half year I've been working on a replacement TTY layer for the FreeBSD kernel. The new TTY layer was designed to improve the following: - Improved driver model: The old TTY layer has a driver model that is not abstract enough to make it friendly to use. A good example is the output path, where the device drivers directly access the output buffers. This means that an in-kernel PPP implementation must always convert network buffers into TTY buffers. If a PPP implementation would be built on top of the new TTY layer (still needs a hooks layer, though), it would allow the PPP implementation to directly hand the data to the TTY driver. - Improved hotplugging: With the old TTY layer, it isn't entirely safe to destroy TTY's from the system. This implementation has a two-step destructing design, where the driver first abandons the TTY. After all threads have left the TTY, the TTY layer calls a routine in the driver, which can be used to free resources (unit numbers, etc). The pts(4) driver also implements this feature, which means posix_openpt() will now return PTY's that are created on the fly. - Improved performance: One of the major improvements is the per-TTY mutex, which is expected to improve scalability when compared to the old Giant locking. Another change is the unbuffered copying to userspace, which is both used on TTY device nodes and PTY masters. Upgrading should be quite straightforward. Unlike previous versions, existing kernel configuration files do not need to be changed, except when they reference device drivers that are listed in UPDATING. Obtained from: //depot/projects/mpsafetty/... Approved by: philip (ex-mentor) Discussed: on the lists, at BSDCan, at the DevSummit Sponsored by: Snow B.V., the Netherlands dcons(4) fixed by: kan
* Rename the RCng 'kernel' script to 'kernel_symlink'.obrien2008-08-201-1/+1
|
* Rename the RCng 'kernel' script to 'kernel_symlink'.obrien2008-08-192-2/+1
| | | | Requested by: many
* Allow the network addresses and interface names for the "client" andjhb2008-08-152-6/+24
| | | | | | | | | | | | "workstation" firewall types to be set from rc.conf so that rc.firewall no longer needs local patching to be usable for those types. For now I've set the variables in /etc/defaults/rc.conf to the previous defaults in /etc/rc.firewall. PR: bin/65258 Submitted by: Valentin Nechayev netch of netch.kiev.ua Silence from: net MFC after: 2 weeks
* For the "client" and "simple" network types, collapse the separate "net"jhb2008-08-151-14/+11
| | | | | | | | and "mask" variables into a single "net" variable that contains a full network address (including either a netmask or prefix length at the user's choice). Update the example settings to match. MFC after: 2 weeks
* Use 'me' rather than explicit IP addresses for the "simple" and "client"jhb2008-08-151-12/+9
| | | | | | | | firewall configurations. PR: bin/65258 Silence on: net@ MFC after: 1 week
* For the firewall_* variables that are specific to the "workstation"jhb2008-08-151-7/+9
| | | | | | firewall type, note that property in their description. MFC after: 1 week
* Improve periodic/security/550.ipfwlimit a bit:antoine2008-08-101-6/+3
| | | | | | | | | - don't run it if net.inet.ip.fw.verbose = 0 as it is pointless - handle rules without logging limit correctly [1] (those rules show up without logamount in "ipfw -a list") PR: conf/126060 [1] MFC after: 1 month
* Only symlink booted kernel directory to /boot/kernel if user has explicitlyobrien2008-08-092-0/+2
| | | | requested it. This is too dangerous to just do behind the admin's back.
* Add /usr/share/man/whatis, /var/db/locate.database, and /var/log to thecperciva2008-08-081-0/+3
| | | | list of paths which `freebsd-update IDS` should ignore by default.
OpenPOWER on IntegriCloud