summaryrefslogtreecommitdiffstats
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Interpret vnet_interface/vnet.interface as arraydteske2016-02-121-2/+17
|
* Update leapsecond file in non-chroot environments.cy2016-02-111-4/+4
| | | | | | PR: 207095 Submitted by: madpilot MFC after: 3 days
* Add new rc.conf parameter "jail_reverse_stop"feld2016-02-102-2/+9
| | | | | | | | | | | | | | | | | | | | | | When a user defines "jail_list" in rc.conf the jails are started in the order defined. Currently the jails are not are stopped in reverse order which may break dependencies between jails/services and prevent a clean shutdown. The new parameter "jail_reverse_stop" will shutdown jails in "jail_list" in reverse order when set to "YES". Please note that this does not affect manual invocation of the jail rc script. If a user runs the command # service jail stop jail1 jail2 jail3 the jails will be stopped in exactly the order specified regardless of jail_reverse_stop being defined in rc.conf. PR: 196152 Approved by: jamie MFC after: 1 week Relnotes: yes Differential Revision: https://reviews.freebsd.org/D5233
* Zero pf rule counters so daily reports make senselidl2016-02-091-1/+1
| | | | | | | | | | | Zero pf rule counters so that each daily report lists an absolute number of rejected packets, not the total since the last time the machine rebooted (or the counters were manually cleared). PR: 206467 Submitted by: Rick Adams Approved by: rpaulo (mentor) Differential Revision: https://reviews.freebsd.org/D5172
* Fix typo in a comment; s/redined/redefined/dteske2016-02-061-1/+1
| | | | Thanks to: rpokala
* Add comment to explain functionality of codedteske2016-02-061-0/+1
| | | | Thanks to: rpokala
* Allow rc_conf_files to be redefined in rc.conf(5)dteske2016-02-061-0/+12
| | | | | | | | | With this change, it's possible to redefine rc_conf_files (e.g., sysrc rc_conf_files+=/etc/rc.conf.other) and have the boot process pick up settings in extra files. The sysrc(8) tool can be used to query/enumerate/find/manage extra files configured in this manner. Relnotes: yes
* Update script for modern `zpool status` output.mav2016-02-051-1/+4
|
* Add error check to not leak logs with syntax errors in case of failedmav2016-02-051-0/+5
| | | | | | `zpool history`. MFC after: 1 month
* Fix grammar in error statementdteske2016-02-041-1/+1
| | | | s/consider to migrate to jail.conf/consider migrating to jail.conf/
* Use '^[>+][^+]' instead of '^[>+]' with grep(1) when filtering themarius2016-01-291-1/+1
| | | | | | | | | | | diff(1) output between two files in "new_only"-mode. Otherwise, with the default of using unified format a remnant of the header in the output is the result. This is especially irritating when the two files differ but the second one is empty, amounting to the vestige of the header being the only readout. Reported by: Stefan Haemmerl MFC after: 3 days
* Fix regression introduced on r293801.araujo2016-01-272-1/+2
| | | | | | | | | The UID/GID 93 is in using by jaber on PORTS, we will use UID/GID 160 for ypldap(8). Reported by: antoine Approved by: bapt (mentor) Differential Revision: https://reviews.freebsd.org/D5062
* Allow specification of fetch options for ntp leap-seconds fetch.cy2016-01-272-1/+3
| | | | | MFC after: 1 week X-MFC with: r289421, r293037, r294773
* Add support for automatic leap-second file updates.cy2016-01-266-2/+114
| | | | | | | | | | | | | | | | | | | | | The working copy of leapfile resides in /var/dbntpd.leap-seconds.list. /etc/ntp/leap-seconds (periodically updated from ftp://time.nist.gov/pub/ or ftp://tycho.usno.navy.mil/pub/ntp/) contains the master copy should automatic leapfile updates be disabled (default). Automatic leapfile updates are fetched from $ntp_leapfile_sources, defaulting to https://www.ietf.org/timezones/data/leap-seconds.list, within $ntp_leapfile_expiry_days (default 30 days) from leap-seconds file expiry. Automatic updates can be enabled by setting $daily_ntpd_leapfile_enable="YES" in periodic.conf. To avoid congesting the ntp leapfile source the automatic update randomized by default but can be disabled through daily_ntpd_avoid_congestion="NO" in periodic.conf. Suggested by: des Reviewed by: des, roberto, dwmalone, ian, cperciva, glebius, gjb MFC after: 1 week X-MFC with: r289421, r293037
* Allow the (old rc-style) exec_afterstart jail parameters to start numberingjamie2016-01-251-3/+3
| | | | | | | | at 0, like exec_prestart and the others do. Make param0 optional, i.e. still look for param1. PR: 142973 MFC after: 3 days
* Do not generate RSA1 or DSA keys by default.des2016-01-221-2/+2
|
* Provide new socket option TCP_CCALGOOPT, which stands for TCP congestionglebius2016-01-221-0/+2
| | | | | | | | | | | | | | | control algorithm options. The argument is variable length and is opaque to TCP, forwarded directly to the algorithm's ctl_output method. Provide new includes directory netinet/cc, where algorithm specific headers can be installed. The new API doesn't yet have any in tree consumers. The original code written by lstewart. Reviewed by: rrs, emax Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D711
* Add ldconfig -soft to process the soft float abi libraries and put itimp2016-01-182-0/+28
| | | | into startup scripts for armv6. It acts much like ldconfig -32 does.
* Update mandoc to 20160116bapt2016-01-151-2/+0
|
* Wrap overlong comment lines.trasz2016-01-141-6/+6
| | | | | MFC after: 1 month Sponsored by: The FreeBSD Foundation
* Fix the code to retry mount attempt in mountcritlocal if there aretrasz2016-01-141-1/+1
| | | | | | | | | any root mount holds. The previous one used a wrong conditional - the "err=$?" assignment resets "$?" to 0. Submitted by: jilles@ MFC after: 1 month Sponsored by: The FreeBSD Foundation
* Install /etc/snmpd.config with 0600 permissions.glebius2016-01-141-4/+5
| | | | | | Noticed by: Pierre Kim Security: SA-16:06.snmpd Pointy hat to: glebius in 2005
* Integratengie2016-01-131-0/+26
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tools/regression/geom_{concat,eli,gate,mirror,nop,raid3,shsec,stripe,uzip} in to the FreeBSD test suite as tests/sys/geom/class/{concat,eli,gate,mirror,nop,raid3,shsec,stripe,uzip} The tools/regression/geom and tools/regression/geom_part testcases are being left alone because both test sets are both currently broken. The majority of this work was done on ^/user/ngie/more-tests2 . The differences are as follows: - tests/sys/geom/class/Makefile.inc is not present; it was inlined into the class's Makefiles for explicitness. - The testcases officially require root via kyua - The geom_gate(4) tests don't use the pidfile changes proposed in https://reviews.freebsd.org/D4836 . MFC after: 1 month Sponsored by: EMC / Isilon Storage Division
| * MFhead @ r293815ngie2016-01-137-118/+257
| |\ | |/ |/|
| * Move sbin/geom/class/tests to tests/sys/geom/class and remove sbin/geom/testsngie2016-01-011-24/+26
| | | | | | | | | | | | This is inspired by parallel efforts being done on projects/zfsd (and makes more sense because these are functional tests of the subsystems, not the geom(8) commands
| * MFhead @ r292618ngie2015-12-298-263/+293
| |\
| * \ MFhead @ r292396ngie2015-12-172-0/+8
| |\ \
| * \ \ MFhead @ r292177ngie2015-12-141-0/+51
| |\ \ \
| * \ \ \ MFhead@r291879ngie2015-12-0612-26/+282
| |\ \ \ \
| * \ \ \ \ MFhead @ r291038ngie2015-11-182-1/+15
| |\ \ \ \ \
| * | | | | | Integrate tools/regression/geom* into the FreeBSD test suite under sbin/geom/...ngie2015-11-161-0/+36
| | | | | | | | | | | | | | | | | | | | | | | | | | | | XXX: test
* | | | | | | ypldap(8) is a feature ready to be used to translate nis(8) database to ldap(3).araujo2016-01-131-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This commit, fix a core dump on ypldap(8) related with memory allocation. Also an example of how to set the ypldap.conf(5) properly is added to examples files. A new user _ypldap is required to be able to run ypldap(8) as well as in a chroot mode. Reviewed by: rodrigc (mentor), bjk Approved by: bapt (mentor) Relnotes: Yes Sponsored by: gandi.net Differential Revision: https://reviews.freebsd.org/D4744
* | | | | | | Try a little harder to remove firstboot and firstboot-reboot files inimp2016-01-061-2/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | case they accidentally get created as directories or with flags that prevent their removal. While I wouldn't normally go the extra mile here and let the normal unix rules prevail, the effects of failure are large enough that extra care is warranted.
* | | | | | | "source routing" in rpcbindasomers2016-01-061-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix a bug in rpcbind for multihomed hosts. If the server had interfaces on two separate subnets, and a client on the first subnet contacted rpcbind at the address on the second subnet, rpcbind would advertise addresses on the first subnet. This is a bug, because it should prefer to advertise the address where it was contacted. The requested service might be firewalled off from the address on the first subnet, for example. usr.sbin/rpcbind/check_bound.c If the address on which a request was received is known, pass that to addrmerge as the clnt_uaddr parameter. That is what addrmerge's comment indicates the parameter is supposed to mean. The previous behavior is that clnt_uaddr would contain the address from which the client sent the request. usr.sbin/rpcbind/util.c Modify addrmerge to prefer to use an IP that is equal to clnt_uaddr, if one is found. Refactor the relevant portion of the function for clarity, and to reduce the number of ifdefs. etc/mtree/BSD.tests.dist usr.sbin/rpcbind/tests/Makefile usr.sbin/rpcbind/tests/addrmerge_test.c Add unit tests for usr.sbin/rpcbind/util.c:addrmerge. usr.sbin/rpcbind/check_bound.c usr.sbin/rpcbind/rpcbind.h usr.sbin/rpcbind/util.c Constify some function arguments Reviewed by: imp MFC after: 4 weeks Sponsored by: Spectra Logic Corp Differential Revision: https://reviews.freebsd.org/D4690
* | | | | | | Use the more proper -f. Leave /bin/rm in place since that's whatimp2016-01-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | other rc scripts have, though it isn't strictly necessary.
* | | | | | | Use /bin/rm to remove /firstboot*. Otherwise rm -i alias is pickedimp2016-01-031-2/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | up and can cause issues on boot with the prompts. Fix the read-only root case with horrible kludge of mounting rw removing the files, then mounting ro. But since that's no more horrible than the kludge of using marker files in /. With this change, NanoBSD configs can safely use /firstboot + growfs to produce minimal images that grow to the size of the card.
* | | | | | | Add libsoft to the tree, just like lib32.imp2016-01-033-0/+25
| | | | | | |
* | | | | | | Update leap-seconds to latest. This will satisfy the ntpd leap-secondcy2016-01-011-116/+218
| |_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | version check. Obtained from: ftp://tycho.usno.navy.mil/pub/ntp/. See also: http://www.iers.org/SharedDocs/News/EN/BulletinC.html
* | | | | | Let old-style (shell-based) jail configuration handle jail names thatjamie2015-12-261-62/+68
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | contain characters not allowed in a shell variable (such as "-"). These will be replaced by an underscore in jail config variables, e.g. for jail "foo-bar" you would set "jail_foo_bar_hostname". This is separate from the current code that changes the jail names if they contain "." or "/". It also doesn't apply to jails defined in a jail.conf file. PR: 191181 MFC after: 5 days
* | | | | | Enhance rc.d/netwait script to wait for late-attaching interfaces such asian2015-12-263-59/+76
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | USB NICs. USB network hardware may not be enumerated and available when the rc.d networking scripts run. Eventually the USB attachment completes and devd events cause the network initialization to happen, but by then other rc.d scripts have already failed, because services which depend on NETWORKING (such as mountcritremote) may end up running before the network is actually ready. There is an existing netwait script, but because it is dependent on NETWORKING it runs too late to prevent failure of some other rc scripts. This change flips the order so that NETWORKING depends on netwait, and netwait now depends on devd and routing (the former is needed to make interfaces appear, and the latter is needed to run the ping tests in netwait). The netwait script used to be oriented primarily towards "as soon as any host is reachable the network is fully functional", so you gave it a list of IPs to try and you could optionally name an interface and it would wait for carrier on that interface. That functionality still works the same, but now you can provide a list of interfaces to wait for and it waits until each one of them is available. The ping logic still completes as soon as the first IP on the list responds. These changes were submitted by Brenden Molloy <brendan+freebsd@bbqsrc.net> in PR 205186, and lightly modified by me to allow a list of interfaces instead of just one. PR: 205186 Differential Revision: https://reviews.freebsd.org/D4608 (timeout w/o review)
* | | | | | Upgrade our copies of clang and llvm to 3.7.1 release. This is adim2015-12-252-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | bugfix-only release, with no new features. Please note that from 3.5.0 onwards, clang and llvm require C++11 support to build; see UPDATING for more information.
* | | | | | Replace all whitespaces between port name and number with tabs,jlh2015-12-241-139/+139
| | | | | |
* | | | | | Integrate tools/regression/mac/mac_bsdextended andngie2015-12-211-0/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tools/regression/mac/mac_portacl into the FreeBSD test suite as tests/sys/mac/bsdextended and tests/sys/mac/portacl, respectively MFC after: 1 month Sponsored by: EMC / Isilon Storage Division
* | | | | | Add port for IRC over TLS/SSL, as noted in RFC 7194.jlh2015-12-211-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PR: 192505 Submitted by: loic.blot@unix-experience.fr MFC after: 3 days
* | | | | | Fix whitespace issues in BSD.usr.dist introduced in r291455ngie2015-12-191-2/+2
| |_|_|_|/ |/| | | | | | | | | | | | | | Sponsored by: EMC / Isilon Storage Division
* | | | | Integrate tools/regression/lib/libc/nss into the FreeBSD test suite asngie2015-12-161-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | lib/libc/tests/nss - Convert the testcases to ATF - Do some style(9) cleanups: -- Sort headers -- Apply indentation fixes -- Remove superfluous parentheses - Explicitly print out debug printfs for use with `kyua {debug,report}`; for items that were overly noisy, they've been put behind #ifdef DEBUG conditionals - Fix some format strings MFC after: 1 week Sponsored by: EMC / Isilon Storage Division
* | | | | Integrate tools/regression/lib/libc/resolv into the FreeBSD test suite asngie2015-12-161-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | lib/libc/tests/resolv Convert the testcases to ATF MFC after: 1 week Sponsored by: EMC / Isilon Storage Division
* | | | | Skip unavailable pools when running zfs pool scrubslidl2015-12-161-0/+4
| |_|_|/ |/| | | | | | | | | | | | | | | Approved by: rpaulo (mentor) Differential Revision: https://reviews.freebsd.org/D4588
* | | | Start support for the RISC-V 64-bit architecture developed by UC Berkeley.br2015-12-111-0/+51
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | RISC-V is a new ISA designed to support computer research and education, and is now become a standard open architecture for industry implementations. This is a minimal set of changes required to run 'make kernel-toolchain' using external (GNU) toolchain. The FreeBSD/RISC-V project home: https://wiki.freebsd.org/riscv. Reviewed by: andrew, bdrewery, emaste, imp Sponsored by: DARPA, AFRL Sponsored by: HEIF5 Differential Revision: https://reviews.freebsd.org/D4445
* | | rc.subr: Check for running daemons before a custom start_cmd is executed.jilles2015-12-041-8/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently rc scripts implementing their own start_cmd do not enjoy the benefits of rc.subr's own check for rc_pid. This leads to around a third of ports with such a start_cmd not to check for the process at all and two thirds of ports to re-implement this check (sometimes wrongly). This patch moves the check for rc_pid to before ${rc_arg}_cmd is executed. Submitted by: Dirk Engling Reviewed by: feld MFC after: 1 week Relnotes: yes Differential Revision: https://reviews.freebsd.org/D4156
OpenPOWER on IntegriCloud