Commit Graph

3607 Commits

Author SHA1 Message Date
Mike Makonnen
20350cadb9 Use $ipnat_program instead of the hardcoded path, which was wron
anyways.

Approved by:	markm (mentor) (implicit)
Submitted by:	leafy <leafy@leafy.idv.tw>
2003-04-24 18:14:52 +00:00
Dag-Erling Smørgrav
b418f48cba Add nullok to the pam_unix line. 2003-04-24 12:22:42 +00:00
Mike Makonnen
f6b6e5ea40 o Add support for running /etc/rc.early
o Re-run through /etc/sysctl.conf a second time just before we set
  the securelevel.

Approved by:	markm (mentor) (implicit)
Reviewed by:	dougb
2003-04-24 08:27:29 +00:00
Mike Makonnen
8cf06adbcb Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc.
o group them together so they run one right after another
	o use the NetBSD supplied ipfs script instead of tacking
	  it on to the end of ipnat
	o Load the ipl module in ipnat and ipfilter, if it's not already
	  loaded
	o In ipmon and ipnat show a warning if neither ipfilter nor
	  ipnat is enabled or the ipl module is not loaded, and exit

Approved by:	markm (mentor) (implicit)
Tested by:	leafy <leafy@leafy.idv.tw>
2003-04-24 08:20:47 +00:00
Makoto Matsushita
7172e3d4bf Set appropriate tag "fsck" to logger(1) for background fsck messages.
PR:		51174
Submitted by:	Alex Popa <razor@ldc.ro>
2003-04-23 15:38:02 +00:00
Dag-Erling Smørgrav
5b9cb0c3eb Make sure debug.log only gets debugging messages. 2003-04-23 13:08:31 +00:00
Mike Makonnen
67b53e9721 Run interface specific scripts for dhcp interfaces too.
This is how it has always been done (before and after rc.d) but
I somehow failed to include it when I broke up network1.

Submitted by:	bmah
Approved by:	markm (mentor)(implicit)
2003-04-20 19:14:16 +00:00
Robert Watson
6408bdf60f Remove the 'te' label elements from the default configuration, since we
no longer plan on shipping a TE MAC module independent from SEBSD.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2003-04-20 03:09:35 +00:00
Mike Makonnen
cd3b264dfd Spell ${_jail} correctly
Submitted by: Shizuka Kudo <shizukakudo_99@yahoo.com>
Approved by:	markm (mentor) (implicit)
2003-04-19 07:50:32 +00:00
Mike Makonnen
23cecb19f0 The changes to rc.d/network1 will not get merged in by
mergemaster if it does not appear in the list of files to install.
2003-04-19 01:56:44 +00:00
Mike Makonnen
459e7c4314 o Hook the new files up to the build.
o Make sure all the scripts reference rc.d/netif and not rc.d/network1

Approved by:	markm (mentor)
2003-04-18 17:55:05 +00:00
Mike Makonnen
6167ee89ee Make use of the dhclient script. This will bring up/down dhcp
interfaces.

Approved by:	markm (mentor)
2003-04-18 17:53:02 +00:00
Mike Makonnen
8b3695ab45 Break out and rewrite the network setup scripts.
o /etc/network.subr contains common subroutines used for seting
	  up network interfaces
	o rc.d/hostname sets the hostname if not already set
	o rc.d/nisdomain sets the nis domain *after* rpcbind but
	  before the yp* daemons. This fixes issues with temporary
	  hangs when looking up informaion in nis before it's ready.
	o rc.d/netif brings network interfaces (minus dhcp)  up.
	o rc.d/network1 has been disabled and will be retired before
	  RELENG_5. It will be replaced by rc.d/netif

Approved by:	markm (mentor)
2003-04-18 17:51:54 +00:00
Gregory Neil Shapiro
3e59cfb104 The sendmail binary now has a reasonable default for MaxMimeHeaderLength
built in.  No need to set it here.

MFC after:	1 week
2003-04-18 01:25:41 +00:00
Mike Makonnen
61c79e443b Fix typo (and make it more explicit/self-documenting).
Noticed by:	gshapiro
2003-04-16 16:44:00 +00:00
Mike Makonnen
600b20796f Add new knobs for controlling jails in rc.d and document them.
Approved by:	makrm (mentor)
2003-04-16 16:29:51 +00:00
Mike Makonnen
676f8a41dd o Add a script to start jails on boot.
o Hook it up to the build

Approved by:	markm (mentor)
Submitted by:	Clement Laforet <sheepkiller@cultdeadsheep.org> (modified)
Prodded by:	mike
2003-04-16 16:27:23 +00:00
Takeshi Shibagaki
2ae05d4b0e Add NTT-ME SS-LAN CARD MN128. This card entry has been
committed into NEWCARD.
2003-04-10 17:16:01 +00:00
Dag-Erling Smørgrav
4845d27e63 Introduce debug.log which gets debug.* (most of this would otherwise go
to the great bit-bucket in the sky)
2003-04-08 16:14:02 +00:00
Yaroslav Tykhiy
fec51ab5fc Stop logging ``authpriv'' messages to the world-readable file
/var/log/messages.  Such messages are for the eyes of authorized
personnel only.

PR:		conf/48170
Discussed in:	freebsd-security
MFC after:	2 weeks
2003-04-03 18:37:49 +00:00
Ruslan Ermilov
70861b840c Drop the silly notion that fd* entries have both a' and b'
partitions; this does nothing except upsetting disklabel(8).
2003-04-02 20:16:02 +00:00
Ruslan Ermilov
cc76558ad4 Make disktab(5) MI (repo-copied from etc.i386/disktab). 2003-04-02 20:13:59 +00:00
John Baldwin
711c2e1de2 Remove 220.backup-distfile since it has been deleted.
Reported by:	mdodd
Pointy hat to:	jhb
2003-04-01 20:32:01 +00:00
John Baldwin
3165d2ea56 Complete removal of 320.rdist by removing its entry from periodic.conf and
removing the related 220.backup-distfile script and associatd periodic.conf
entry.

Discussed with:	obrien
2003-04-01 17:45:27 +00:00
Mike Makonnen
1d89dde13e Make the 'restart' command work. Otherwise, it would successfully
stop ipfw, but not enable it again.

Aesthetic changes
	o Use positve logic (instead of negative)
	o create a 'stop' function, rather than putting the
	  commands in the stop_cmd variable.

Submitted by:	des
Approved by:	markm (mentor) (implicit)
2003-03-30 15:52:18 +00:00
David E. O'Brien
1b79399c2b 320.rdist is OBE as we don't have rdist in the base system any more. 2003-03-29 03:28:28 +00:00
David E. O'Brien
d19c3acb44 This is OBE as we don't have rdist in the base system any longer. 2003-03-29 03:27:49 +00:00
Maxim Sobolev
5edf954aad Add pc-card from ARCHOS CD-224E cdrom.
MFC after:	1 week
2003-03-28 11:12:52 +00:00
Tom Rhodes
bb5de30ab4 Update the handbook printing section URL so that it points to the
correct location.
2003-03-25 18:03:11 +00:00
Gregory Neil Shapiro
436a3d96d7 Fix formatting (spaces -> tab)
MFC after:	1 week
2003-03-25 00:54:05 +00:00
Ruslan Ermilov
5efb531d6c Directories for Russian manpages. 2003-03-24 09:39:09 +00:00
Hajimu UMEMOTO
667b217aa3 add missing `ipf -s'.
Submitted by:	Mark Huizer <xaa+freebsd@timewasters.nl>
2003-03-22 14:53:23 +00:00
Crist J. Clark
abb4bd6cde Attach the kldxref script to the build/install. 2003-03-17 23:20:48 +00:00
Crist J. Clark
5d75ba3db9 A new rc-ng script to build linker.hints files with kldxref(8)
automatically at boot time. Associated rc.conf(5) knobs and
documentation are included.
2003-03-17 23:15:53 +00:00
Doug Barton
52bf43dc11 Make it more clear how to disable keybell, and where its options are found.
PR:		conf/41772
2003-03-15 08:14:42 +00:00
Ruslan Ermilov
14ab92b024 Use the canonical form of installing links.
Also, make "ftp" and "ftpd" hard links.

Not objected to by:	des
2003-03-14 09:01:22 +00:00
Maxime Henrion
36aca8d5b7 Rework the wording of the comment for the security.bsd.see_other_uids
sysctl a bit.

Approved by:	jmallett
2003-03-13 18:43:50 +00:00
Ruslan Ermilov
4d31f60ec3 Record the BOG death here too. 2003-03-12 14:29:15 +00:00
Ruslan Ermilov
57c190a31f No tabs here. 2003-03-11 11:14:34 +00:00
Mark Murray
38b1858b1b Initiate KerberosIV de-orbit burn. Disconnect the /etc configs. 2003-03-08 09:50:11 +00:00
Sam Leffler
58251a8dc0 add ath to the list of Ethernet devices 2003-03-07 23:43:09 +00:00
Peter Wemm
f3634ced5c Stop creating /usr/include/netns 2003-03-05 19:21:23 +00:00
Hajimu UMEMOTO
b209d7e493 Latest IPFilter requires flushing rules for IPv6 separately
from IPv4.
2003-03-05 17:16:22 +00:00
Ruslan Ermilov
6192b1dff1 Make sure the default install comes with /etc/login.conf hashed. 2003-03-03 11:19:18 +00:00
Doug Barton
f2883df60d Don't try to deal with vi.recover if the directory doesn't exist
PR:		conf/24515
Submitted by:	Jeroen C. van Gelderen <jeroen@systemics.com>
2003-02-21 09:37:20 +00:00
Mike Makonnen
f8a5334bb6 We stopped reloading rc.conf for each script a long time ago. Things
shouldn't depend on that any more.

PR:		conf/48332
Approved by:	markm (mentor)(implicit)
2003-02-16 20:46:08 +00:00
Dag-Erling Smørgrav
6bbe71f3b8 Alphabetize. 2003-02-16 13:07:20 +00:00
Dag-Erling Smørgrav
36e3e2871d Back out previous commit now that pam_opieaccess(8) has an allow_local
option.
2003-02-16 13:04:27 +00:00
Dag-Erling Smørgrav
1995e9db8a Add the allow_local option to all pam_opieaccess entries. 2003-02-16 13:02:39 +00:00
Dag-Erling Smørgrav
aaf7fddd4f Add the want_agent option to the commented-out "session" pam_ssh entry. 2003-02-16 13:02:03 +00:00