summaryrefslogtreecommitdiffstats
path: root/usr.sbin/sade/config.c
Commit message (Collapse)AuthorAgeFilesLines
* Typo: s/seperately/separatelyschweikh2002-08-061-1/+1
| | | | | | PR: misc/41235 Submitted by: Fesskat Tudeer <freebsd-fesskat@fesskat.org> MFC after: 3 days
* Change our default XF86Config location from /etc/ to /etc/X11/,obrien2002-06-101-1/+2
| | | | | | following the lead of The XFree86 Project's default. Approved by: Murray
* Add comment to supplement my last commit.murray2002-04-071-0/+8
| | | | Requested by: obrien
* Teach sysinstall the difference between a command line, and anmurray2002-04-061-3/+8
| | | | | executable file, so that we can pass commands with arguments to configXSetup().
* o No longer mount /proc by default on newly installed systems. Almostrwatson2002-02-101-4/+0
| | | | | | | | | | all facilities that previously relied on /proc have been rewritten to use ptrace(). procfs has presented a substantial security hazard for years, with several user->root compromises in the last few years. Procfs will continue to be available but will require administrator intervention to use. Reviewed by: scottl, jedgar, mike, tmm
* Safwish package built on bento is called `sawfish-gnome', so adjust sysinstallsobomax2002-01-091-1/+1
| | | | | | | and print-cdrom-packages.sh accordingly. Revealed by: re MFC after: 1 day
* o Expand the text describing the Security options menu.rwatson2001-12-211-1/+0
| | | | | | | | | | | | | | | | o Move nfs_reserved_port_only out of security profiles (where it was set somewhat improperly) to the Security options menu directly. Previously, the variable was set to true for Moderate, but not for Extreme, which is at best inconsistent. o Update the Security Profiles help file to remove reference to the NFS reserved port. o Note that the kernel currently defaults the sysctl to '0', but sysinstall has changed it to '1' as a default as of late; however, rc.conf sets the value to NO as the default. This change brings them relatively into sync. Sponsored by: DARPA, NAI Labs
* o Add a configSecurity menu to generally configure security settings,rwatson2001-12-211-0/+11
| | | | | | | | | | and pull configSecurityProfile under that menu. Add a menu option to determine whether LOMAC is enabled at boot. Probably, eventually, many of the 'Security Profile' menu choices should be pulled out independently into the Security Menu, so as to make them individually selectable. Sponsored by: DARPA, NAI Labs
* Silence warnings on alpha :murray2001-09-221-1/+1
| | | | | Use '%p' when printing out the address of a function. sizeof(int) != sizeof(long)
* Spell SSHd as sshd to improve readability and consistency.rwatson2001-09-041-2/+2
|
* Add an additional \n before the "cautionary note" on the topic ofrwatson2001-09-041-2/+2
| | | | | admins needing to pay attention when configuring the system. This improves readability of this message.
* Removed the (possible) ambiguity in /etc/rc.conf comment.ru2001-08-171-2/+2
| | | | PR: bin/29736
* Sysinstall inserts a comment between changes to /etc/rc.conf.joe2001-08-151-1/+4
| | | | | | | | Add a timestamp to the comment so that it's possible to see when changes were made. e.g.: # -- sysinstall generated deltas -- # Wed Aug 15 18:10:20 2001
* Somewhere along the way, configSecurityModerate() lost it's "int"rwatson2001-08-111-0/+1
| | | | | | return value. Spotted by: gratuitous use of diff during MFC process
* o Reduce the number of offered security profiles, as we now have a morerwatson2001-08-101-73/+12
| | | | | | | | | | | | | | | | | conservative default, and actually prompt specifically for inetd rather than handling it as a side effect of the security profile. Update the help file to reflect this change. o Rename "Fascist" to "Extreme" in the source code, to match the names presented to the user. o Remove portmap and inetd from profile management. Portmap is now disabled by default, but automatically turned on if a feature requires it (such as NFS, etc). This is an MFC candidate for 4.4-RELEASE. Reviewed by: freebsd-arch@FreeBSD.org Approved by: re@FreeBSD.org MFC after: 2 days
* Return DITEM_SUCCESS from configInetd(), as apparently a success orrwatson2001-08-101-0/+1
| | | | | | failure value is expected. Spotted by: gcc
* Apply pending /etc/ttys changes before calling editor on itache2001-08-071-0/+1
| | | | Approved by: rwatson
* In preparation for MFC of sysinstall changes to edit /etc/ttys inrwatson2001-08-071-1/+1
| | | | | | | post-install config, reduce the potential confusion from the existence of both configTTYs and configTtys by renaming configTTYs to configEtcTtys. While this is not a C naming conflict, it was probably a poor choice of names on my part.
* Add the ability to modify /etc/ttys before first reboot during therwatson2001-08-021-0/+25
| | | | | | | | | | | | | system installation process. This allows users installing via serial console to enable serial console login during the installation process using an un-customized install. The user is not prompted to modify /etc/ttys during a normal install, but is offered the opportunity during post-install configuration. - Introduce configTTYs(), which describes the benefits of editing /etc/ttys, and asks for confirmation before spawning the editor. - add configTTYs to the post-install configuration, as well as to the global configuration index.
* Compensate for default disabling of network services in inetd.conf(5)rwatson2001-08-021-0/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | by providing the opportunity to edit inetd.conf during the system installation process. The following modifications were made: (1) Expand the Anonymous FTP description dialog to indicate that inetd and ftpd must be enabled before it can be used. (2) Introduce a new configInetd() pair of dialogs, the first describing inetd, giving a couple of examples of services that require it, and hinting at potential risk, then asking the user if they wish to enable it. The second indicates that inetd.conf must be configured to enabled specific services, and asks if the user would like to load inetd.conf into the editor to modify it. Add this configuration action to the index. There are some further improvements that might be considered: (1) Provide a more inetd.conf-specific configuration tool that speaks inetd.conf(5). However, this is made difficult by the "yet another configuration format" nature of inetd.conf, as well as its use of commenting to disable services, rather than an in-syntax way to disable a service without commenting it out. Submissions here would probably be welcome. (2) There's some overlap between settings in the somewhat obtuse Security Profile mechanism and other settings, including the inetd setting, and NFS server configuration. As features become individually tunable, they should probably be removed from the security profile mechanism. Otherwise, somewhat counter-intuitively, sysinstall (in practice) queries multiple times whether inetd, nfsd, etc, should be enabled/disabled. A possible future direction might be to drive profiles not by degree of paranoia, rather, the set of services desired. Or simply to remove the Security Profile mechanism and resort to feature-driven configuration. Reviewed by: imp, chris, jake, nate, -arch, -stable
* Add ability to configure console terminal type in /etc/ttysache2001-07-171-0/+1
| | | | Reviewed by: audit, jkh's silence
* msdos -> msdosfs.ru2001-06-011-1/+1
|
* Our exports(5) syntax is rather "host-centric", while people comming fromobrien2001-04-221-0/+1
| | | | | a Sun background think in a more FS-centric mind set. Add a note to help the Sun backgrounded ones to not make invalid assumptions.
* Add an example borrowed from the FAQ showing a very commonly desiredobrien2001-04-221-2/+4
| | | | export in FreeBSD'ville for `make installworld' elsewhere.
* Give a little more variety in the /etc/exports example.obrien2001-04-011-2/+2
|
* afterstep doesn't need an explicit xterm started for it either.jkh2001-03-241-1/+1
|
* Very small cosmetic tweak - avoid starting an extra xterm for the fvwmjkh2001-03-161-1/+1
| | | | desktop case.
* Argh! Why can't I stop breaking the fvwm desktop option? *I* usejkh2001-03-141-1/+1
| | | | | fvwm as my desktop, yet I've broken this damn thing 3 times in a row now while all the desktops I don't actually use continue to work fine! :)
* OK, *now* we only sort the file once (red face).jkh2001-03-141-1/+1
|
* Be a better rc.conf citizen and create an initial file which:jkh2001-03-131-0/+9
| | | | | | | | | | | 1. Has a time-stamp to show when it was created 2. Sorts and uniq's the output to only contain single instances of a given setting. This doesn't mean you still can't have settings which override one another, that's still possible since it's too much trouble to do the redundancy checking here. Requested by: lots of people
* Properly deal with the fvwm desktop - this should restore that optionjkh2001-03-121-3/+3
| | | | to functionality.
* Fix some of the security profile messages to be more explanatoryjkh2001-03-081-5/+5
| | | | | | | and also obey most of the rules of english in their construction. Add a help screen for the security menu which gives the user a rough idea just what the various security profiles do.
* Sawfish is invoked by the gnome stuff automatically if it exists -jkh2001-03-061-1/+1
| | | | | | we don't need to start it explicitly. Noted by: "Jose M. Alcaide" <jose@we.lc.ehu.es>
* Replace GNOME + Afterstep choice with GNOME + sawfish. This is a morejkh2000-11-141-3/+3
| | | | popular configuration now.
* For High security profile, set securelevel to 1 to protect /dev/*memjkh2000-11-071-0/+2
| | | | | | and mounted disks, among other things. Requested by: kirk
* Add another security configuration profile, call it "high" andjkh2000-10-141-0/+25
| | | | | | | rename the previous one to indicate that it's not just high, it's extreme (everything off, secure level raised). Submitted mostly by: Tony Finch <dot@dotat.at>
* PR: 21729murray2000-10-051-0/+2
| | | | | | | | | Approved by: jkh Write kern_securelevel_enable variable to rc.conf if user selects medium or low security in sysinstall. This overrides the case where a user selects fascist security and then tries to go back to a lower setting.
* One small tweak on the security profile code; don't be verbose ifjkh2000-09-241-24/+27
| | | | | setting up default values for an express/custom install. It would be confusing to see the informational popup completely out of context.
* One whack at the idea of having "security profiles" which select thejkh2000-09-221-4/+89
| | | | | | | | appropriate(?) defaults for "low", "medium" and "high" security environments. Medium is basically what we currently have with a little seat-belt tightening where it made sense. Low is the same as medium but without the tightening. High is positively fascist with nothing turned on by default and an automatic call to 911 if it can find a modem.
* enable sshd by default. This only effects *new* installs, sojkh2000-09-041-0/+1
| | | | upgraders will not receive any unpleasant surprises.
* Remove a stray backspace character.jwd2000-08-271-1/+1
| | | | Reviewed by: Eivind Eklund <eivind@FreeBSD.org>
* Change the defaults for portmap, sendmail and inetd to be not running them.eivind2000-07-281-0/+4
| | | | | | | | | | | | Make sysinstall override this on install, so the effective behavioural change for a newly installed system is null. Overall, this makes a system with an empty /etc/rc.conf not run any network services, and makes the FreeBSD-provided network services that are running visible in /etc/rc.conf (instead of making people look through /etc/defaults/rc.conf to find the things they need to disable to secure the system.) Reviewed by: jhb Discussed with: The usual cabal
* Fix an annoying bogon in the form of a missing tab when generating CD-ROMjhb2000-07-271-1/+1
| | | | | | mount points in /etc/fstab. Requested by: obrien
* Terminate, with extreme prejudice, the USAResident hack whichjkh2000-07-241-35/+0
| | | | | | does bad things to /etc/make.conf in certain situations. Also soften the "don't install crypto from the USA!" messages since, except for RSA (which is still noted), that's not so true anymore.
* IPv6 support.ume2000-07-141-4/+17
| | | | | | | | | | | IPv6 configuration is only done by rtsol. Does someone really need manual configuration? :-) You can specify IPv6 DNS server as well. We have only one server ftp7.jp.freebsd.org that speaks IPv6 in this time. ftp7.jp speaks IPv4 as well and also listed as Japan #7. Approved by: jkh
* Refresh the aout ldconfig info so things like compat22 when installed canbillf2000-03-311-0/+5
| | | | | | | | | | | be detected by netscape and such. PR: bin/17659 Submitted by: Murray Stokelay <murray@cdrom.com> Approved by: jkh jkh made updates that conflict with the submitters patch, so I updated accordingly, any mistakes are mine, not the submitters.
* Search for the proper hints file in an ELF world.jkh2000-03-301-1/+1
|
* Really fix the USA_RESIDENT botch.jkh2000-03-031-1/+1
| | | | Submitted by: Dmitry Valdov <dv@dv.ru>
* Do USA_RESIDENT properly.jkh2000-02-241-1/+1
|
* If user says they're in the USA, record that fact in /etc/make.confjkh2000-02-191-0/+35
|
OpenPOWER on IntegriCloud