Commit Graph

3212 Commits

Author SHA1 Message Date
Sheldon Hearn
3e38757beb Register amd's dependency on NFS.
This change was submitted to the freebsd-audit mailing list for review
but received no feedback.  Hindsight-enabled reviews are welcome.

PR:		conf/31358
Submitted:	Thomas Quinot <thomas@cuivre.fr.eu.org>
2002-01-28 11:05:01 +00:00
Warner Losh
a5959e20bf Add ADLINK340C wireless card mentioned in nomads.
# This card has the same PCMCIA and OEM id as ELSA XI300 wireless card, which
# appears to be listed elsewhere in this file.

Submitted by: Abe Toshiaki-san <ans@sun-tec.co.jp>
MFC After: 5 days
2002-01-28 04:46:20 +00:00
Crist J. Clark
f44609fe71 Make the rc.conf(5) 'log_in_vain' knob an integer.
Try this out in -CURRENT, MFC, and then consider dropping the
'log_in_vain' knob all together. It really is something for
sysctl.conf(5).

PR:		bin/32953
Reviewed by:	-bugs discussion
MFC after:	1 week
2002-01-26 09:05:13 +00:00
Dag-Erling Smørgrav
c84317d7ad Add local/share/java/classes, local/share/sgml, local/share/xml
Approved by:	ru, silence on -ports
MFC after:	1 week
2002-01-23 13:02:16 +00:00
Hajimu UMEMOTO
fc50a44458 Do not taint ::/124 for localhost reverse table. 2002-01-22 17:22:41 +00:00
Ruslan Ermilov
322628519e Reincarnate SETUID code in man(1), not compiled in by default.
The code will be fixed for all known security vulnerabilities,
and a make.conf(5) knob (ENABLE_SUID_MAN) will be provided for
those who still want it installed setuid for whatever reasons.
2002-01-22 15:15:38 +00:00
Dag-Erling Smørgrav
ae739ec469 Enable OPIE by default, using the no_fake_prompts option to hide it from
users who don't wish to use it.  If the admin is worried about leaking
information about which users exist and which have OPIE enabled, the
no_fake_prompts option can simply be removed.

Also insert the appropriate pam_opieaccess lines after pam_opie to break
the chain in case the user is logging in from an untrusted host, or has a
.opiealways file.  The entire opieaccess / opiealways concept is slightly
unpammish, but admins familiar with OPIE will expect it to work.

Reviewed by:	ache, markm
Sponsored by:	DARPA, NAI Labs
2002-01-21 18:51:24 +00:00
Dag-Erling Smørgrav
819a142080 Really back out ache's commits. These files are now precisely as they were
twentyfour hours ago, except for RCS ids.
2002-01-19 18:29:50 +00:00
Andrey A. Chernov
0b836dfaf1 Back out recent changes 2002-01-19 18:03:11 +00:00
Andrey A. Chernov
3bfbfd1770 Turn on pam_opie by default. It should not affect non-OPIE users. 2002-01-19 10:31:32 +00:00
Andrey A. Chernov
a0fc79c334 Turn on pam_opie by default. It not affect non-OPIE users 2002-01-19 09:06:45 +00:00
Andrey A. Chernov
e04359cdac Previous commit was incomplete, use
"[default=ignore success=done cred_err=die]"
options instead of "required"
2002-01-19 08:39:35 +00:00
Warner Losh
b5bbbc47b7 Add flags 0x10000 to IO Data WN-B11/PCM's entry. Evidentally, they
changed firmware and the new cards don't work without this.

Submitted by: ume
MFC after: 3 days
2002-01-19 08:11:39 +00:00
Andrey A. Chernov
2bda025221 Remove explaining comment and pam_unix commented out, now pam_unix can be
chained with pam_opie
2002-01-19 07:32:47 +00:00
Andrey A. Chernov
a3643aa542 Change comment since fallback provided now not by ftpd but by pam_opie 2002-01-19 03:35:39 +00:00
Warner Losh
69e4f572e4 Add:
Accton airDirect WN3301
	Melco WLI-CF-S11G
	GeoWave GW-NS11S

Submitted by: Shigeru Ishida-san on bsd-nomads (16142,16143,16144)
2002-01-18 03:49:03 +00:00
Joerg Wunsch
3d7abf4c86 Re-add a call to "camcontrol rescan" after insertion of an aic pccard.
We now do it as a "camcontrol rescan all" which is something ken
promised to implement; for the time being it's not worse than the old
"camcontrol rescan $device" which ended up in something like
"camcontrol rescan aic1".  Currently, camcontrol misinterprets the
third non-numeric arg as number 0, and rescans bus 0, which is about
the best we could get at this time.

Approved by:	imp
MFC after:	1 week
2002-01-17 20:38:04 +00:00
Robert Watson
012ccf288b o Improve the line-wrapping of additional comments, some of which appeared
to be wrapped around 60, others around 40 columns.
2002-01-17 00:10:28 +00:00
Robert Watson
4420bc6773 o Remove a somewhat less comprehensible comment about modifying /etc/rc.
o Improve line-wrapping of another comment for consistency.
2002-01-17 00:08:44 +00:00
Bruce Evans
e9f83ca347 Added this makefile. This is not attached to the build yet. I often
install parts of /etc manually and it helps to have a makefile for
each subdir even if the main makefile doesn't invoke it.
2002-01-16 12:18:22 +00:00
Ruslan Ermilov
30843b9337 Do not install man(1) setuid ``man''.
The catpaging and setuidness features of man(1) combined make
it vulnerable to a number of security attacks.  Specifically,
it was possible to overwrite system catpages with arbitrarily
contents by either setting up a symlink to a directory holding
system catpages, or by writing custom -mdoc or -man groff(1)
macro packages and setting up GROFF_TMAC_PATH in environment
to point to them.  (See PR below for details).

This means man(1) can no longer create system catpages on a
regular user's behalf.  (It is still able to if the user has
write permissions to the directory holding catpages, e.g.,
user's own manpages, or if the running user is ``root''.)

To create and install catpages during ``make world'', please
set MANBUILDCAT=YES in /etc/make.conf.  To rebuild catpages
on a weekly basis, please set weekly_catman_enable="YES" in
/etc/periodic.conf.

PR:		bin/32791
2002-01-15 14:11:05 +00:00
Dag-Erling Smørgrav
a5f5cfdaf2 Everybody (for suitable values of "everybody") seems to think pam.conf should
be removed outright.

Sponsored by:	DARPA, NAI Labs
2002-01-14 17:15:53 +00:00
Dag-Erling Smørgrav
56ad504867 Re-add pam.conf so it will get installed so people who don't know about
pam.d will find out about it by reading pam.conf.

Sponsored by:	DARPA, NAI Labs
2002-01-14 16:30:22 +00:00
Dag-Erling Smørgrav
ddee80ac95 Point people towards /etc/pam.d/README. 2002-01-14 15:08:02 +00:00
Dag-Erling Smørgrav
4e8b159f5e Unmunge the version preservation code and obfuscate it so CVS won't munge
it all over again.
2002-01-12 23:08:59 +00:00
Dag-Erling Smørgrav
f89a116468 Back out previous commit, which erroneously removed essential comments. I
definitely need coffee.

Apologies to:	ache
2002-01-12 14:22:22 +00:00
Dag-Erling Smørgrav
ca90ed6b1c Update copyright 2002-01-12 14:17:19 +00:00
Dag-Erling Smørgrav
0703287104 Switch over to /etc/pam.d/.
Sponsored by:	DARPA / NAI Labs
2002-01-12 14:03:12 +00:00
Dag-Erling Smørgrav
84437855b4 Sync with pam.conf revision 1.25. 2002-01-12 13:50:33 +00:00
Dag-Erling Smørgrav
1c6246992a Preserve FreeBSD version strings in target files. 2002-01-12 13:50:08 +00:00
Warner Losh
8128d1f555 Correct Corega KK Wireless entry 2002-01-12 07:01:51 +00:00
Alexey Zelkin
7f751a854f Sort entries and clarify comments 2002-01-11 15:51:56 +00:00
Warner Losh
ec68b202e5 o Add T-POWER flash
Submitted by: Michael Johansson <micke@nevermind.net>

o Sony PCWA-C100 WaveLAN card
Submitted by: "Jeremiah Gowdy" <jgowdy@home.com>

o Corega KK Wireless LAN PCCA-11 (version b?)
Submitted by: Masahide *MAC* Noda <mac@clave.gr.jp>
2002-01-10 18:53:00 +00:00
Joerg Wunsch
cd85c8e853 Add a commented-out alternative for the ether line of a DIGITIAL
DEPCM-BA card, as found on my rev. C01 card.

MFC after:	1 week
2002-01-08 22:32:00 +00:00
Andrey A. Chernov
0fd0b9d205 Add forgotten alias for ru_SU.ISO8859-5 2002-01-08 19:07:03 +00:00
Alexey Zelkin
3b9da4da83 Add ru_SU locale aliases for nls area also 2002-01-08 17:23:03 +00:00
Alexey Zelkin
e223285d41 Actually make aliases for ru_SU locales. 2002-01-08 15:30:56 +00:00
Andrey A. Chernov
ac6739777e Add ro_RO
PR:		33343
Submitted by:	Adrian Penisoara <ady@warpnet.ro>
2002-01-08 15:06:42 +00:00
Andrey A. Chernov
71cf7468b2 ISO 8859-1 -> ISO 8859-5 for ru_* 2002-01-08 15:01:48 +00:00
Alexey Zelkin
688a6139bd Correctly handle cases of deprecated locales which are supposed
to have backward compatibility symbolic links.

This code should check existence of deprecated locales and
fix them using following scheme:

. if new locale directory exisists and is a symlink -- remove it
. if old locale directory exists and not a symlink -- rename it to
  its new name

This should allow to mtree(1) and existing locale aliases make(1)
rules to setup locale dirs correctly (avoid self-referenced symlinks)

BTW, this commit brings in backward compatibility support for ru_SU
locales (aliased to appropriate ru_RU ones).
2002-01-08 13:42:52 +00:00
John Baldwin
64798412f9 Populate etc.sparc64:
- The disktab was taken from etc.alpha.
 - rc.sparc64 doesn't do anything right now.
 - The ttys file has all the vty's commented out since we don't know how
   those will work yet.  Also, an entry is added for the Openfirmware
   console device.

Submitted by:	jake (partially)
2002-01-07 23:53:34 +00:00
Sheldon Hearn
0604ab3465 Comment out an example that was missed on first import.
Reported by:	Jeroen Ruigrok <asmodai@wxs.nl>
2002-01-07 08:41:55 +00:00
Sheldon Hearn
b50e990dde Install nsmb.conf with mode 0600, since it may be modified to include
passwords for remote shares.

Reported by:	Andre Albsmeier <andre@albsmeier.net>
2002-01-04 13:02:51 +00:00
Andrey A. Chernov
283004853b Improve pam_unix/opie related ftpd comment even more 2002-01-02 09:51:33 +00:00
Andrey A. Chernov
2ac0b4865e Clarify comment about pam_unix fallback for ftpd 2002-01-01 13:38:01 +00:00
Andrey A. Chernov
e0d2c39d84 Turn on pam_opie.so for ftpd by default
It not affect non-OPIE users
2002-01-01 13:27:11 +00:00
Doug Ambrisko
0d6fcb5c0e Fix bugs in the structure for rx_frame by making gap length one byte and
a packed array so sizeof work.  This broke RFMON mode and passing
up 802.11 packets.

The Linux emulation code was derived from the open source Linux driver to
maintain compatibility.

LEAP support is added, hints from Richard Johnson.  I've verified this
locally with PC350v42510.img firmware.  More bug fixing from Marco to
fix long passwords.

Change DELAYs in flash part of driver to FLASH_DELAY which uses tsleep
so it doesn't look like your system died during a flash update.

Install header files in /usr/include/dev/an

Cleanup some ifmedia bugs add "Home" key mode to ifmedia and ancontrol.
This way you can manage 2 keys a little easier.  Map the home mode into
key 5.  Enhance ifconfig to dump the various configured SSIDs.  I use
a bunch of different ones and roam between them.  Use the syntax similar
to the WEP keys to deal with setting difference SSIDs.

Bump up up the Card capabilities RID since they added 2 bytes to it
in the latest firmware.  Thankfully we changed it from a terminal
failure so the card still worked but the driver whined.

Some cleanup patches from Marco Molteni.

Submitted by:	Richard Johnson <raj@cisco.com>
		Marco Molteni <molter@tin.it>
		and myself
Various checks: David Wolfskill <david@catwhisker.org>
Reviewed by:	Brooks Davis <brooks@freebsd.org>
		Warner Losh <imp@freebsd.org>
Approved by:	Brooks Davis <brooks@freebsd.org>
		Warner Losh <imp@freebsd.org>
Obtained from:	Linux emulation API's from Aironet driver.
2001-12-31 22:01:44 +00:00
Gregory Neil Shapiro
e3437797cc Grammar fix for comment 2001-12-30 04:40:18 +00:00
Sheldon Hearn
4a8eeedbb1 Don't require operators to override the list of network filesystem
types (networkfs_types) with a version that includes the original
list.

This increases the scope for user error and also means that systems with
networkfs_types set in /etc/rc.conf will not benefit from changes to the
list in /etc/defaults/rc.conf on upgrade.

Instead, store the default list in /etc/rc itself and allow the operator
to append to that list by specifying her own list in networkfs_types.

Rename networkfs_types to extra_netfs_types accordingly, as the new name
better describes the purpose of the variable.  Default the value to
'NO'.
2001-12-29 19:42:55 +00:00
Warner Losh
3b3ef3700a "10/100Base FastEthernet PC CARD" (LNA-100) from Billionton Systems Inc.
Submitted by: "Torfinn Ingolfsen" <torfinn.ingolfsen@oslo.online.no>
2001-12-29 02:15:46 +00:00
Warner Losh
73ad7cef4c Novac DVD/CD Station(Portable DVD/CD-ROM player
Submitted by: moment@pluto.dti.ne.jp
2001-12-28 03:42:41 +00:00
Warner Losh
90005a9c29 Xircom RealPort RE-10
Submitted by: Willem van Engen <wvengen@stack.nl>
2001-12-28 03:39:13 +00:00
Warner Losh
9b5032e906 Add Proxim Harmony card (from Bob)
Also fix a minor disordering of a wi card while I'm here.

Submitted by: bob bobing <this_is_my_act@yahoo.com>
2001-12-28 03:34:05 +00:00
Crist J. Clark
726acc787d Fix some leftover stray characters from expr(1)-to-$(()) sweeps.
PR:		bin/33158
Submitted by:	Adrian Filipi-Martin <adrian@ubergeeks.com>
MFC after:	1 day
2001-12-27 22:41:35 +00:00
Joerg Wunsch
9e62ce2036 Remove nonstandard floppy device nodes. Only keep the base device node,
plus the symbolic links to the fake BSD partitions.

Also remove the rfd* devices, they are neither necessary nor documented
anymore.
2001-12-27 15:03:25 +00:00
Sheldon Hearn
d7fb353a43 Re-introduce the fix that delays mounting of network filesystems until
the network is initialized.  This was first implemented in rev 1.268
of src/etc/rc, but was backed out at wollman's request.

The objection was that the right place for the fix is in mount(8).
Having looked at that problem, I find it hard to believe that
the hoops one would have to jump through can be justified by the
desire for purity alone.

Note that there are reported issues surrounding nfsclient kernel
support and mount_nfs(8), which currently make NFS an ugly exception
to the general case.

With this change, systems with non-NFS network filesystems configured
for mounting on startup in /etc/fstab are no longer guaranteed to
fail on startup.
2001-12-27 13:41:27 +00:00
Luigi Rizzo
8029d085df Remove a stale entry related to passing ARP with bridging and ipfw.
This feature has been removed since 4.1 times and it is only a source
of confusion.

Same needs to be done on -stable.

MFC after: 1 day
2001-12-27 05:40:09 +00:00
Warner Losh
76751379cc Longshire LCS-8634TB
Submitted by: "Frank W. Josellis" <josellis@dynamics.claranet.de>
2001-12-27 03:59:21 +00:00
Warner Losh
68b54634bd Some new cards:
o uncommnent joy stuff (me)
	o Add BONDWELL B236 joystick card (me)
	o Add Buffalo WLI-CF-S11G wi card (me)
	o CNF CD-m (submitted by gda)

Submitted by: Dmitry A Goncharov <gda@sani.ru>
2001-12-27 02:12:32 +00:00
Robert Watson
22e5e135e1 o Add a comment indicating that if /tmp==/var/tmp in rc.diskless2, the
md device and file system creation occurs *after* mtree is run, and
  as such an /var/tmp/* or /tmp/* entries will be under the mountpoint
  (or fail) rather than appearing in the md filesystems.  This prevents
  the creation of vi.recover, and might affect other localizations that
  rely on the mtree calls affecting these directories.
2001-12-26 17:18:39 +00:00
Robert Watson
6bbc26ef9f Remove incorrect comments about the population of /etc: no attempt is
made to copy the NFS-mounted on to /tmp/etc, instead, it is populated
entirely from /conf/default, then overriden from /conf/IP.
2001-12-26 17:00:55 +00:00
Sheldon Hearn
0e2b10ac7f Now that smbfs is fully integrated into the base system, create
/dev/nsmb* device nodes, which used to be done by the port installation.

PR:		33068
Submitted by:	Dimitry Andric <dim@xs4all.nl>
2001-12-26 15:44:06 +00:00
Alexey Zelkin
0388ec7cac Back out recent replacement of LC_MESSAGES file with directory.
Requested by:   ache
2001-12-24 11:49:49 +00:00
Alexey Zelkin
be9546c713 add LC_MESSAGES directory for uk_UA.ISO8859-5 locale 2001-12-22 06:56:12 +00:00
Alexey Zelkin
709eed76bd Slightly re-work locale messages storage scheme. Before this commit
LC_MESSAGES related data was installed to <locale>/LC_MESSAGES file.
Now it go to <locale>/LC_MESSAGES/SYS_LC_MESSAGES file. LC_MESSAGES
directory is supposed to be storage of message catalogs of userland tools.
This should allow us to avoid many potential problems with future
libintl related functionality introduction.

Thanks for useful suggestions about correct way how to replace plain
files with directories at installworld stage to: Ruslan Ermilov <ru>
2001-12-21 13:14:02 +00:00
Andrey A. Chernov
bf908a83ba Add uk_UA.ISO8859-5 locale
PR:		32450
Submitted by:	partially by Alexey Klimov <kao@wiuu.kiev.ua>
2001-12-20 20:48:31 +00:00
Sheldon Hearn
cb02e3a880 Correct the given path to nsmb.conf in the comments, now that it's
corrected in libsmb.
2001-12-20 16:23:12 +00:00
Brian Somers
ca4513237b Don't assume that /var/run and /var/spool/lock are on the same
partition.

Submitted by:	ru
2001-12-19 16:10:25 +00:00
Ruslan Ermilov
56ada921d8 Whitespace police. 2001-12-18 18:21:51 +00:00
Brian Feldman
125c50cdeb Install devfs includes. 2001-12-17 13:38:58 +00:00
John Hay
c9c98e9936 Add a missing .. to get out of smbfs/print. 2001-12-15 08:31:13 +00:00
Hajimu UMEMOTO
91b70c33dd automatic creation of faith0 and stf0 for backward compatibility.
MFC after:	2 days
2001-12-15 03:59:47 +00:00
Sheldon Hearn
7e081cffc0 Add share/examples/smbfs/print for userland smbfs import.
The addition of the smbfs examples should have included this delta.
Failure to include this delta broken world.

Reported by:	jhay
2001-12-14 22:56:12 +00:00
Crist J. Clark
d15413fe2f Fix a stray character that found its way into a filename. 2001-12-14 22:25:04 +00:00
Mike Heffner
6257f96122 ftp(1) was not the only user of FTP_PASSIVE_MODE, libfetch uses it
too, so add it back
2001-12-14 15:48:55 +00:00
Sheldon Hearn
85519b003a Add bmake glue for src/contrib/smbfs and connect userland smbfs
support to the build.

The MFC reminder below is subject to <re@FreeBSD.org> approval
prior to 4.5-RELEASE.

Reviewed by:	bp, fjoe
MFC:	1 week
2001-12-14 11:41:22 +00:00
Ruslan Ermilov
ac47c95eea Work around the bugfeature of test(1).
PR:		bin/32822
2001-12-14 08:58:21 +00:00
Mike Heffner
f6efcf6413 ftp(1) uses passive mode by default now, therefore remove
FTP_PASSIVE_MODE=YES.

Pointed out by:	billf
2001-12-14 02:08:23 +00:00
Alfred Perlstein
bcb733d069 rpc.lockd needs rpc.statd to be running for it to start up properly.
so swap the order.

Also allow rpc.lockd and rpc.statd to be turned on if nfsclient is
enabled.  They are needed to provide client side locking support.

PR: conf/27811
2001-12-13 04:21:18 +00:00
Peter Pentchev
1e106575d2 Set the script_name_sep variable to a safe value if it is not
already set (e.g. a failed/skipped mergemaster run during an upgrade).
Without this, if script_name_sep was not set in the rc.conf files,
local scripts will not be executed on startup or shutdown.

PR:		misc/32687
Submitted by:	Nicholas Paufler <echofox@discordia.ca> (the problem)
		Sheldon Hearn (the idea behind the fix)
Reviewed by:	sheldonh
MFC after:	1 week
2001-12-12 10:12:20 +00:00
Robert Watson
fcc1eaf46d - Improve line-wrapping and spacing so as to improve readability.
- Add instructions regarding replacing 'my.domain', as this has come up
  on freebsd-questions.
- Remove reference to rs.internic.net/templates, as that directory no
  longer exists.  Instead, encourage them gently to talk to their network
  provider.

MFC after:	1 week
2001-12-11 22:36:10 +00:00
Gregory Neil Shapiro
5a3ecbf1d2 Add aliases pointing to postmaster for the two new mail related accounts.
Reminded by:	sheldonh
MFC after:	3 days
2001-12-11 17:29:57 +00:00
Ruslan Ermilov
d4d2e898a1 s/sysctl -w/sysctl/ 2001-12-11 08:21:46 +00:00
Crist J. Clark
2204f3ce42 Long ago, there was just /etc/daily. Then /etc/security was split out
of /etc/daily. Some time later, /etc/daily became a set of periodic(8)
scripts. Now, this evolution continues, and /etc/security has been
broken into periodic(8) scripts to make local customization easier and
more maintainable.

Reviewed by:	ru
Approved by:	ru
2001-12-07 23:57:39 +00:00
Robert Watson
67b86547da o Update rc.network to reflect the recent change of default in the
kernel TCP timer code: rather than checking for tcp_keepalive being
  set to "YES", check for "NO" and turn off keepalives if the variable
  is set in that manner.

o Note: eventually, it would make sense to remove this variable from
  rc.conf management, and instead rely on sysctl.conf.  In fact, this
  is probably true of a number of rc.conf variables whose sole aim
  is to drive the setting of sysctls at boot time.
2001-12-07 17:03:14 +00:00
Dag-Erling Smørgrav
9446518a9a Install pam.d files with mode 0644, not 0755. 2001-12-06 23:28:12 +00:00
Nick Sayer
284d8fda4d Add a commented-out defaultrouter entry for 6to4 users. See RFC-3068 2001-12-06 20:44:14 +00:00
Dag-Erling Smørgrav
c26c7886d1 Introduce the variable USE_PAM_D, which, if set, will cause pam.d to be
installed instead of pam.conf.  This is for testing; the conditionals will
be removed once we are confident that pam.d works as intended.

Sponsored by:	DARPA, NAI Labs
2001-12-06 13:18:32 +00:00
Dag-Erling Smørgrav
c5a332f021 Makefile for pam.d configuration files.
Sponsored by:	DARPA, NAI Labs
2001-12-06 13:16:47 +00:00
Crist J. Clark
68f1d5a354 Protect the '*' in pppoed_provider (the default) from metacharacter
expansion in the rc-scripts.

PR:		32552
Submitted by:	Gleb Smirnoff <glebius@rinet.ru>
Approved by:	ru
Obtained from:	ru
MFC after:	1 day
2001-12-06 09:34:44 +00:00
Dag-Erling Smørgrav
426ae370f4 Awright, egg on my face. I should have taken more time with this. The
conversion script generated the wrong format, so the configuration files
didn't actually work.  Good thing I hadn't thrown the switch yet...

Sponsored by:	DARPA, NAI Labs (but the f***ups are all mine)
2001-12-05 21:26:00 +00:00
Dag-Erling Smørgrav
722b228aba Oops! Previous commit used tabs instead of spaces. 2001-12-05 21:11:24 +00:00
Dag-Erling Smørgrav
e878ebd0ce Add /etc/pam.d.
Sponsored by:	DARPA, NAI Labs
2001-12-05 21:10:01 +00:00
Dag-Erling Smørgrav
23c103b894 pam.d-style configuration, auto-generated from pam.conf.
Sponsored by:	DARPA, NAI Labs
2001-12-05 21:06:21 +00:00
Dag-Erling Smørgrav
2191f95faf Short README for /etc/pam.d, mostly extracted from the comments in pam.conf. 2001-12-05 20:59:38 +00:00
Dag-Erling Smørgrav
179281f9bf Perl script that splits pam.conf into separate files suitable for pam.d.
Sponsored by:	DARPA, NAI Labs
2001-12-05 20:58:39 +00:00
Dag-Erling Smørgrav
023fe50302 Bruce says the links are not needed. 2001-12-05 08:50:51 +00:00
Dag-Erling Smørgrav
738859d47e Call the ATAPI tape devices "ast" and "nast", not "rast" and "nrast". Add
backward compatibility symlinks for good measure.
DEVFS already gets this right (except for the symlinks).

PR:		24781
Submitted by:	Christian Weisgerber <naddy@mips.inka.de>
MFC after:	3 days
2001-12-04 00:48:21 +00:00
Dag-Erling Smørgrav
b29a303db7 Create {ad,da,...}s1[a-h].
PR:		19849
Submitted by:	Udo Erdelhoff <ue@nathan.ruhr.de>
MFC after:	3 days
2001-12-04 00:40:38 +00:00
Crist J. Clark
cb46a4618b The named.conf file should refer to named.conf(5) in addition to
named(8) in the comments.

PR:		32459
Submitted by:	"Gary W. Swearingen" <swear@blarg.net>
MFC after:	2 days
2001-12-03 08:05:52 +00:00
David E. O'Brien
ec0f8380d3 Use tabs where possible. 2001-12-01 17:14:34 +00:00
Ruslan Ermilov
fa55add21e GC cvs-1.8.1 import left-overs. 2001-11-28 09:31:56 +00:00
Ruslan Ermilov
9e5b5675b4 Whitespace police.
Submitted by:	cjc, ru
2001-11-28 08:52:35 +00:00
Mike Silbersack
b5c013b6b9 Make sure the security check output includes a To: line in the
same way the daily run output does.
2001-11-28 04:07:03 +00:00
Andrey A. Chernov
414f6d3373 Add hi_IN.ISCII-DEV 2001-11-27 23:24:41 +00:00
Mike Smith
0c8e9b248f Support the 'ciss' device node.
MFC after:	1 week
2001-11-27 23:12:00 +00:00
Robert Watson
0a79e75e5f Remeber to set the permissions on an md-backed /tmp to 01777, rather than
using the default of 0755.
2001-11-27 22:12:27 +00:00
Sheldon Hearn
a86d84351b Catch two extraneous calls to expr(1) that slipped past rev 1.311. 2001-11-27 11:57:47 +00:00
Mike Silbersack
4aa8b109d5 Have security add a To: root@host line; the lack of a To: line is causing
spambouncer to think my security logs are spam.
2001-11-27 01:06:57 +00:00
Maxim Sobolev
0102b6496c Add entries for GDM (GNOME Display Manager).
MFC after:	3 days
2001-11-26 16:55:40 +00:00
Sheldon Hearn
1699365d1a Style clean-up.
Submitted by:	bde
2001-11-25 12:49:32 +00:00
Dima Dorfman
a48060a2f7 Spelling police: sucessful -> successful. 2001-11-24 23:41:32 +00:00
Darren Reed
2129325c09 second part of the patches to complete ipf changes to rc
PR:		multiple
Submitted by:	Arjan de Vet <devet@devet.org>
2001-11-24 15:36:30 +00:00
Darren Reed
c05c122c97 Resolve all the ipfilter startup issues in rc.network with one big patch
to get it all right, allowing ipnat to be enabled independantly of ipfilter
in rc.conf (among other things).

PR:		multiple
Submitted by:	Arjan de Vet <devet@devet.org>
Reviewed by:	Giorgos Keramidas <keramida@FreeBSD.org>
2001-11-24 13:48:30 +00:00
Andrey A. Chernov
7ae1b94443 Sync with main 2001-11-22 21:43:43 +00:00
Andrey A. Chernov
56769e5c9b Copy from main termcap 2001-11-22 21:05:57 +00:00
Andrey A. Chernov
6fd6331408 Merge with main variant 2001-11-22 19:39:36 +00:00
Warner Losh
2548a00710 Add Toshiba wireless LAN card
Submitted by: "Mark Sergeant" <msergeant@snsonline.net>
2001-11-21 06:24:44 +00:00
David E. O'Brien
52abff170d 'ircd' is a better service name. Also note '6667' is unoffical
Submitted by:	knu (name change)
2001-11-20 19:52:28 +00:00
David E. O'Brien
8d8c22c7ed There is already an 'irc' service at port 194. However my experience is that
1667 is what is really used.  So name port 1667 'irc-client'.
2001-11-20 19:00:12 +00:00
David E. O'Brien
a0595b2a5c Add IRC 2001-11-20 18:01:10 +00:00
Sheldon Hearn
52055837ae Avoid unnecessary calls to expr(1) by using standard shell arithmetic
expansion instead.

MFC after:	1 week
2001-11-20 17:56:34 +00:00
Sheldon Hearn
ba0d15f2d7 Introduce new shell functions hexdigit, hexprint and zeropad.
Use these new functions instead of printf(1), which is scheduled for
removal as a shell builtin command, and which will not be available as a
standalone utility if MAKEDEV is run prior to mounting /usr.

Requested by:	knu
2001-11-20 17:24:35 +00:00
Brian Somers
6eb9bd2d1f Handle wtmp.0 being compressed
PR:		32113
Submitted by:	Yar Tikhiy <yar@comp.chem.msu.su>
MFC after:	1 week
2001-11-20 15:01:24 +00:00
Hajimu UMEMOTO
12b3cd1783 The rtsol must be done before the alias processing.
PR:		conf/31366
Submitted by:	gshapiro
MFC after:	1 week
2001-11-20 12:51:12 +00:00
Gregory Neil Shapiro
c8e968571f Since buildworld builds cf files specified in SENDMAIL_ADDITIONAL_MC,
installworld should install them.

PR:		29928
Submitted by:	wollman
MFC after:	3 days
2001-11-20 03:41:05 +00:00
Gregory Neil Shapiro
74cc11c2df Handle the sendmail_outbound_enable knob in the start target.
PR:		32033
MFC after:	3 days
2001-11-20 03:31:54 +00:00
Sheldon Hearn
b695d548a3 Use shell functions for printing hex instead of printf(1) so that
printf(1) can be dropped from the system shell as a shell builtin.
2001-11-19 11:41:51 +00:00
Ruslan Ermilov
633621512e Apply README style guidelines (this time checked). 2001-11-19 10:10:27 +00:00
Warner Losh
84f453281c Avaya Wireless PCCARD
Submitted by: Ants Aader <ants@kernel.ee>
2001-11-19 01:51:40 +00:00
Warner Losh
3033a4df0e Add Xircom wireless card from pir@pir.net 2001-11-18 06:01:09 +00:00
Ian Dowse
2e40803106 Add support for making the Coda /dev/cfsN devices.
PR:		conf/22695
Submitted by:	Kenneth Ingham <ingham@i-pi.com>
2001-11-18 00:20:08 +00:00
Gregory Neil Shapiro
ca8b9ed373 Add two new accounts/groups for sendmail:
smmsp - sendmail 8.12 operates as a set-group-ID binary (instead of
set-user-ID).  This new user/group will be used for command line
submissions.  UID/GID 25 is suggested in the sendmail documentation and has
been adopted by other operating systems such as OpenBSD and Solaris 9.

mailnull - The default value for DefaultUser is now set to the uid and gid
of the first existing user mailnull, sendmail, or daemon that has a
non-zero uid.  If none of these exist, sendmail reverts back to the old
behavior of using uid 1 and gid 1.  Currently FreeBSD uses daemon for
DefaultUser but I would prefer not to use an account used by other
programs, hence the addition of mailnull.  UID/GID 26 has been chosen for
this user.

This was discussed on -arch on October 18-19, 2001.

MFC after:	1 week
2001-11-17 21:24:45 +00:00
Guido van Rooij
42ea95e63e Change mode for var/db/ipf to 0700 2001-11-17 12:21:29 +00:00
Warner Losh
d1b4e2cca1 GVC 10Mbps Ethernet Card
PR:		30329
Submitted by:	David Xu <davidx@viasoft.com.cn>
2001-11-15 05:54:25 +00:00
Warner Losh
90626c5dd4 Add Compaq WL110 PC Card to the list.
PR:		31023
Submitted by:	wilko
2001-11-15 05:49:18 +00:00
Crist J. Clark
6d852b5bdb After further discussion on -CURRENT, some people (jhb) do not like
the idea of not masking passwords on comments in case the
administrator comments out an entry without clearing the
password. Instead completely ignore comments (since they have no
security impact) when doing the diff of the old and new passwd file.

Suggested by:	rwatson
2001-11-14 09:30:01 +00:00
Sheldon Hearn
ce76d9c108 Avoid unnecessary calls to expr(1) by using standard shell arithmetic
expansion instead.
2001-11-14 06:35:43 +00:00
Makoto Matsushita
3e7b2f7461 sysinstall complains about creating acd0t* devices while all dists are
extracted and recreating device files.

Without this, you'll see following messages when 'MAKEDEV all':
	[:  : out of range
	[:  : out of range
	acd0t is invalid -- can't have more than 32 devices or 169 tracks

Reported by: David Syphers <dsyphers@uchicago.edu> (at current@FreeBSD.org)
2001-11-13 18:07:14 +00:00
Crist J. Clark
c2f9738fda No need to hide stuff in the $FreeBSD$ tag or in other comments like,
Backup passwd and group files:
  1c1
  < # $FreeBSD:(password):09:07 peter Exp $
  ---
  > # $FreeBSD:(password):27:16 ache Exp $

MFC after:	1 week
2001-11-11 07:15:19 +00:00
Mark Murray
92678c2908 Make rsh(d) more secure (Hah!) by not defaulting PAM to promiscuously
accepting connections.

Add KDE entries.

Committed From:	BSDConEU Terminal Room
2001-11-10 14:23:07 +00:00
Garrett Wollman
e7df26079b Add share/zoneinfo/North_Dakota in preparation for tzdata update. 2001-11-09 18:58:07 +00:00
Bill Fenner
85c9d676b5 Update the nsswitch.conf -> host.conf generator to handle criteria,
continuation lines, extra whitespace, and to use the last matching
 line in the file.  This syncs the host.conf generation with how
 the nsswitch.conf is parsed.
Only print " host.conf" instead of a multi-line message, since this
 happens on every boot.
2001-11-07 00:33:56 +00:00
Andrey A. Chernov
4e0f37c806 Add bg_BG.CP1251
PR:		25472
Submitted by:	Peter Pentchev <roam@ringlet.net>
2001-11-05 06:49:44 +00:00
Crist J. Clark
7cd99d0ae0 Fix a bug I introduced yesterday. People who built world since the
previous commit yesterday may wish to check /var/run for junk.
2001-11-02 22:00:17 +00:00
Crist J. Clark
7558c91f77 Add a directory in /var/run to store ppp(8) command sockets.
PR:		bin/29966
Approved by:	brian
MFC after:	4
2001-11-01 23:44:12 +00:00
Dag-Erling Smørgrav
bd0a2a3f93 Modify the way host.conf and nsswitch.conf are treated at boot time:
- if nsswitch.conf exists, host.conf is auto-generated for compatibility
   with legacy applications and libraries.

 - if host.conf exists but nsswitch.conf does not, nsswitch.conf is auto-
   generated as usual.
2001-11-01 12:39:01 +00:00
Jeroen Ruigrok van der Werven
03b7b65a08 Explain that /var/log/all.log needs to be touched and chmod'd 'ere it
can be used.

PR:		17022
Submitted by:	Niels Christian Bank-Pedersen <ncbp@bank-pedersen.dk>
MFC after:	1 week
2001-10-28 13:41:30 +00:00
Robert Watson
3005fded4a o Spelling error s/suffient/sufficient/
PR:		31524
Submitted by:	Dan Langille <dan@freebsddiary.org>
2001-10-27 03:14:37 +00:00
Andrey A. Chernov
bdd263de3f Remove /var/spool/uucp subtree, not needed for 'cu' 2001-10-26 09:40:28 +00:00