summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Add portsnap to the base system. This is a secure, easy to use,cperciva2005-08-083-1/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | fast, lightweight, and generally good way for users to keep their ports trees up to date. This is version 0.9.4 from the ports tree (sysutils/portsnap) with the following changes: 1. The experimental pipelined http code is enabled. No seatbelts in -CURRENT. (^_^) 2. The working directory has moved from /usr/local/portsnap to /var/db/portsnap (as discussed on -arch two days ago). 3. Portsnap now fetches a list of mirrors (distributed as DNS SRV records) and selects one randomly. This should help to avoid the uneven loading which plagues the cvsup mirror network. 4. The license is now 2-clause BSD instead of 3-clause BSD. 5. Various incidental changes to make portsnap fit into the base system's build mechanics. X-MFC-After: 6.0-RELEASE X-MFC-Before: 5.5-RELEASE X-MFC-To: RELENG_6, RELENG_5, ports discussed on: -arch and several other places "yes please" from: simon, remko, flz, Diane Bruce thinks this is a great idea: bsdimp Hopes he didn't forget any files: cperciva
* Back-out previous commit - we need to skip logging socket when we start apjd2005-08-081-0/+3
| | | | | | | | jail and external syslogd is listening in jail's chroot. Pointed out by: csjp While here, skip also "logpriv" socket.
* Skip jails which are already running and inform why.pjd2005-08-071-0/+4
| | | | | | | | | | | We're checking for /var/run/jail_<name>.id file and if it exists, we don't start the jail. It should be also safe in case of reboot(8), because rc.d/cleanvar script is going to remove /var/run/jail_* files. It helps to avoid potential mess when the same jail is started twice, because of an administrator mistake (been there, done that). MFC after: 1 week
* We don't need to skip /var/run/log socket, as syslogd is always startedpjd2005-08-071-2/+0
| | | | | after rc.d/cleanvar. And if we wanted to skip /var/run/log we still needed to skip /var/run/logpriv, which wasn't implemented.
* Allow to give more than one jail's name, eg.:pjd2005-08-071-2/+6
| | | | | | # /etc/rc.d/jail start www mail MFC after: 3 days
* Teach rc.d/encswap script how to use geli(8) for swap encryption.pjd2005-08-052-15/+19
| | | | MFC after: 3 days
* gbde_swap has been repo-copied to encswap.pjd2005-08-052-57/+2
| | | | Repo-copy made by: markm
* Remove gbde_swap_enable option which doesn't work and doesn't really have topjd2005-08-041-2/+0
| | | | work, as one still needs to put <device>.bde into /etc/fstab.
* eliminate the regex used to match ethernet and 802.11 devices;sam2005-08-021-9/+23
| | | | | | | instead use the interface's media-type Reviewed by: imp MFC after: 1 week
* Add a couple of missing nic interfaces that have been added: iwi, ipw,imp2005-07-281-4/+7
| | | | | | ral and ural. Add a comment about this regexp being lame, which should shock no-one. Add a comment about why rescans are disabled on scsi cards.
* Forgot to add this change when commiting geli.pjd2005-07-281-0/+2
| | | | Reported by: cperciva
* Silence the de-bouncing of dhclient start up. The previous outputbrooks2005-07-261-1/+0
| | | | | caused significant mental anguish for some portions of the user population. :)
* Require that DESTDIR be set before running "make distribution".ru2005-07-221-0/+4
|
* This depends on syslogd due to logger(1).obrien2005-07-221-1/+1
|
* Embellish the dependency lists - this script depends having awk(1),obrien2005-07-221-0/+2
| | | | | and it needs syslogd due to using logger(1). Have it run as early as possible to save battery power for laptop users.
* Minor comment re-alignment.obrien2005-07-221-4/+4
|
* - Mention special behaviour of init(8) when kern_securelevel="0"pav2005-07-211-0/+3
| | | | | Suggested by: Miroslav Lachman <000.fbsd@quip.cz> Approved by: cperciva (src hat)
* Pass -i to pwd_mkdb(8) to ignore locking failures. This can be usefulru2005-07-151-1/+1
| | | | for NFS installing world/kernel to another machine.
* Remove obsolete ttya/ttyb entries and replace with ttyy0/1.grehan2005-07-141-2/+4
| | | | | | Mark origin of ofw_console(4) and zs(4) devices. MFC after: 3 days
* `net.inet.ipf.fr_running' can be a negative value, which was introduced byjkim2005-07-071-1/+1
| | | | | | recent ipfilter import. Approved by: re (scottl), anholt (mentor)
* Remove REQUIRE and BEFORE lines since this script is not run by rcorderbrooks2005-06-301-2/+0
| | | | | | at startup. Instead it is called by other scripts. Approved by: re (network interface startup blanket)
* - Remove the pccard_ifconfig variable in favor of a newbrooks2005-06-301-34/+7
| | | | | | | | | | | | | ifconfig_DEFAULT variable. Unlike pccard_ifconfig, ifconfig_DEFAULT applies to all interfaces that do not specify an ifconfig_<ifn> variable rather than just those listed in removable_interfaces. - Correct the list of interfaces when network_interfaces and removable_interfaces are both set by including removable_interfaces in the list of canidates. - When listing dhcp interfaces, include those with other ifconfig options so nat works. Approved by: re (network interface startup blanket)
* Add support for starting wpa_supplicant by adding the WPA keyword to anbrooks2005-06-303-3/+32
| | | | | | interface's ifconfig_<ifn> entry in /etc/rc.conf. Approved by: re (network interface startup blanket)
* When interfaces are given on the command line, don't attempt to filterbrooks2005-06-301-7/+4
| | | | | | | | them. Just try to run the given command on them. We need to be able to run stop functions on interfaces that have been deleted to stop wpa_supplicant. Approved by: re (interface startup blanket)
* Introduce new per-jail variable jail_<name>_flags, which allows to specifypjd2005-06-262-1/+5
| | | | | | | | | jail(8) flags (before the change we had hardcoded "-l -U root"). Submitted by: Frank Behrens <frank@pinky.sax.de> PR: conf/80244 Approved by: re (scottl) MFC after: 1 week
* Unbreak the ipfilter_loaded function. There doesn't seem to be a waydd2005-06-211-1/+1
| | | | | | | | | | for kldstat to ever print "IP Filter" (the module is called "ipfilter" and modules don't have anything like a description), so this function would always return false. That would cause prestart to attempt to load the module even if it's already loaded, which would fail and prevent the rules from being loaded. Approved by: re (dwhite)
* Make sure we actually read the config files before testing values frombrooks2005-06-161-12/+12
| | | | | | | | them. Reported by: Darren Pilgrim <dmp at bitfreak dot org> PR: conf/82313 Approved by: re (network interface startup blanket)
* Move couple of directories out of mtree and into their respectivelesi2005-06-151-320/+2
| | | | | | | | ports. This mtree now specifies basic structure of X11BASE, similarly to BSD.local.dist. No objections on: freebsd-x11@ Approved by: re (dwhite), portmgr
* Use new OSTYPE(freebsd6).gshapiro2005-06-142-2/+2
| | | | | Approved by: re (scottl) Requested by: keramida
* - In preparation to turning syscons(4) etc. on by default in the sparc64marius2005-06-101-13/+14
| | | | | | | | | | | | GENERIC comment in ttyN. - Add the name of the device driver creating the device nodes above the respectives blocks so it's easier for user to find the right entry to shut up warnings from getty(8). Replace 'Requires device 'uart' be enabled.' with just 'uart(4)' as the former referred to a sparc64 GENERIC back when uart(4) wasn't enabled by default, yet. - Turn off the getty(8) on screen as screen is created by ofw_console(4) which is no longer enabled in the sparc64 GENERIC (and also only is a last resort) to shut up warnings from getty(8) with the current GENERIC.
* Remove rexecd(8), a server that implements a particularly insecurenectar2005-06-103-21/+1
| | | | | | | method of executing commands remotely. There are no rexec clients in the FreeBSD tree, and the client function rexec(3) is present only in libcompat. It has been documented as "obsolete" since 4.3BSD, and its use has been discouraged in the man page for over 10 years.
* Back out "rw" locale addition for reason unknown to me (forced by portmgr)ache2005-06-101-4/+0
|
* Add locale/rwache2005-06-101-0/+4
|
* MFP4:jkoshy2005-06-091-0/+2
| | | | | | | | | | | | | | | | - Implement sampling modes and logging support in hwpmc(4). - Separate MI and MD parts of hwpmc(4) and allow sharing of PMC implementations across different architectures. Add support for P4 (EMT64) style PMCs to the amd64 code. - New pmcstat(8) options: -E (exit time counts) -W (counts every context switch), -R (print log file). - pmc(3) API changes, improve our ability to keep ABI compatibility in the future. Add more 'alias' names for commonly used events. - bug fixes & documentation.
* Remove default and documenation for pccard_ether_delay since I removedbrooks2005-06-081-1/+0
| | | | | | it from /etc/pccard_ether. Submitted by: Jeremie Le Hen <jeremie at le-hen dot org>
* Fix return values of ifconfig_up/down.brooks2005-06-071-4/+5
| | | | Reported by: Andrea Campi
* Change the default for dumpdev to "AUTO". It should be reverted to "NO"des2005-06-071-1/+1
| | | | on RELENG_* branches.
* Honor the "dumpdev" kenv variable if it is set and the "dumpdev" rcdes2005-06-071-6/+17
| | | | | | variable is set to "AUTO". MFC after: 2 weeks
* Support code for the OpenBSD dhclient. This significantly changes thebrooks2005-06-076-312/+213
| | | | | | | | | | | | | | | | | | way interfaces are configured. Some key points: - At startup, all interfaces are configured through /etc/rc.d/netif. - ifconfig_<if> variables my now mix real ifconfig commands the with DHCP and WPA directives. For example, this allows media configuration prior to running dhclient. - /etc/rc.d/dhclient is not run at startup except by netif to start dhclient on specific interfaces. - /etc/pccard_ether calls "/etc/rc.d/netif start <if>" to do most of it's work. - /etc/pccard_ether no longer takes additional arguments to pass to ifconfig. Instead, ifconfig_<if> variables are now honored in favor of pccard_ifconfig when available. - /etc/pccard_ether will only run on interfaces specified in removable_interfaces, even if pccard_ifconfig is set.
* Finish adding _dhcp user.maxim2005-06-072-0/+2
|
* Add _dhcp user/group as required by the OpenBSD dhclient.brooks2005-06-062-0/+2
|
* Remove RCng files that were brought in from NetBSD, but we ended up notobrien2005-06-0627-1188/+0
| | | | using them (or did and no longer do).
* Add esp(4) to scsi-controller-regex.marius2005-06-041-1/+1
| | | | MFC after: 1 month
* Add /etc/security, into which the BSM audit configuration files will berwatson2005-05-301-0/+2
| | | | | | | | | | | installed. This is the same directory as found on Solaris. NB: In FreeBSD 4.x and earlier, a script (file) named /etc/security exists. Does mergemaster need to be taught how to replace a file with a directory? Submitted by: wsalamon Obtained from: TrustedBSD Project
* Add /usr/include/bsm to mtree creation set.rwatson2005-05-291-0/+2
| | | | | Submitted by: wsalamon Obtained from: TrustedBSD Project
* Add cdce(4) into the list of ethernet interfaces.sobomax2005-05-231-1/+1
|
* We need to use 'applyset' command for devfs, 'apply hide' is not enough,pjd2005-05-231-6/+2
| | | | | | | because new devfs entries can show up later and one can access such entires from inside named chroot. In rc.d scripts we can use devfs_domount() function with devfsrules_hide_all policy and unhide 'null' and 'random' manually.
* Style: mostly tabs vs blanks, and semicolon placement.schweikh2005-05-221-26/+26
|
* Add libdata/pkgconfig. It is used under ${LOCALBASE} as much (if not more)marcus2005-05-131-0/+2
| | | | | | | than under ${X11BASE}. Discussed with: portmgr MFC after: 1 day
* Run /etc/rc.d/syscons restart when a usb keyboard is attached so that thebrian2005-05-111-1/+1
| | | | keymap and other settings are correct.
OpenPOWER on IntegriCloud