Commit Graph

239 Commits

Author SHA1 Message Date
Xin LI
c7d9f7f033 Make sade(8) WARNS=3 clean. 2006-08-08 13:45:46 +00:00
Alexander Leidinger
2e14ff0f41 Say welcome to 'sade', the SysAdmins Disk Editor. It's the fdisk and disklabel part
of sysinstall. So sysinstall may retire now, we have the important non-install part
of it covered.

ATM it doesn't understand GEOM stuff (like mirror, stripe, raid, ...), but patches
to change this and to clean it up internally are more than welcome.

Submitted by:	mami@nyitolap.hu
2006-08-07 23:35:49 +00:00
John Baldwin
9d4514b0fd Fix numerous warnings. Aside from menu items in system.c and menu.c
this now compiles on i386 with WARNS?= 3.  Most of the fixes included
adding missing 'static' keywords to internal functions, using fully-defined
terminators in statically defined arrays of structs, and various
signed vs unsigned mismatches.  Also G/C'd unused configSecurity()
function.
2006-02-28 21:49:33 +00:00
John Baldwin
e9582526d3 G/C some cruft. 2006-02-28 20:34:50 +00:00
John Baldwin
d30d1cdee6 - Autogenerate a menu containing a list of countries and keymaps supported
by syscons.
- If we are running as init, popup the country menu before the main menu.
  If a non-default country is chosen, then a second menu is brought up
  to let the user choose a keymap.  By default the default keymap for
  the country that was selected is highlighted.  If the user chooses the
  default country, then the default keymap is just assumed and the user
  is not presented with the keymap menu.  Currently the default country
  is set to "United States" except for PC98 which assumes "Japan".

PR:		bin/93853
Submitted by:	Seth Kingsley sethk at magnesium dot net
MFC after:	3 days
2006-02-28 20:29:43 +00:00
Peter Grehan
a0d592f606 Make sure /etc/fstab is written out for Apple-partitioned drives
reviewed by:	scottl
MFC after:	3 days
2005-07-21 03:32:29 +00:00
Simon L. B. Nielsen
8ce8e4b34f Update hardcoded postfix version number to the current postfix version
2.2.x.

PR:		i386/82030
Prodded by:	matteo
MFC after:	1 week
Approved by:	re (scottl)
2005-07-04 07:53:35 +00:00
John Baldwin
a568c78877 Explicitly install linux_base 8 to make sure the right version is
installed.

PR:		bin/74593
Submitted by:	Matteo Riondato rionda at gufi dot org
MFC after:	3 days
2005-04-12 01:05:50 +00:00
Simon L. B. Nielsen
a98d8c790a Only write the rc.conf header when a new rc.conf is written. This was
accidentally removed in v. 1.211.

Submitted by:	Olafur Osvaldsson <oli@isnic.is>
PR:		bin/73692
MFC after:	1 week
Approved by:	trhodes
2004-11-16 21:59:00 +00:00
David E. O'Brien
834fc2d5ad Fix braino where I didn't fix the file path from when the line was
copied from the test program.
2004-11-04 15:46:59 +00:00
David E. O'Brien
dc43dfcd09 Stop listening to bug reports with wrong solutions and commit a fix to the '
problem I know will work.
2004-11-04 01:28:43 +00:00
David E. O'Brien
1b0f4fd1db fix typo in generated /etc/exports: escape all ' 2004-11-01 16:32:09 +00:00
Ralf S. Engelschall
1ada9fda01 fix typo in generated /etc/exports: s/synatx/syntax/ 2004-10-04 15:13:51 +00:00
Ken Smith
83c7f6e5de Remove support for configuring the X server from sysinstall. General
concensus seems to be that is best left for doing post-install.

Discussed on:	freebsd-current@
Tested with:	make release
Approved by:	re@
MFC after:	3 days
2004-08-30 21:03:09 +00:00
Ken Smith
83e386eb06 Initial pass at shifting sysinstall(8) to install X.org instead of XFree86.
There are still a few nits to work out (graphical config non-functional).

Patches by:	anholt@, adapted slightly
Reviewed by:	'make release'
2004-08-10 02:18:28 +00:00
Simon L. B. Nielsen
7226ecc0ce During FTP installs, when installing Postfix as an alternate MTA, the
install of Postfix fails since Postfix 1 is picked from INDEX instead
of Postfix 2.

The problem is that the package_add function matches multiple Postfix
packages and then installs a "random" version (the last one found in
INDEX).  This does not occur with a CD-ROM install since there is only
one Postfix package on the CD-ROM.

The correct solution to this would be to check the origin field from
INDEX instead of the package name, but due to the way sysinstall is
made that is not trivial, so instead work around the problem by
hard-coding the Postfix major and minor revision (for the current
stable version) to install directly into the package_add call.

PR:		misc/65426
Reported by:	Harold Kachelmyer <bugs@princessharold.net>
Approved by:	trhodes
2004-08-09 21:50:10 +00:00
Marcel Moolenaar
498609452e Move the inclusion of libdisk.h from sysinstall.h to the source files
that actually need it. This makes it easier for a platform porter to
find the files that may need tweaking to support whatever MD specific
partitioning is needed. It also helps to prevent that the libdisk API
gets exposed and/or used where it's not needed.
2004-08-02 23:18:48 +00:00
John Baldwin
1cbf549da4 Minor fixes for ia64 installs:
- Don't look for partitions inside a FreeBSD chunk on ia64 when mounting
  the filesystems just before the chroot and install.
- Write entries out to /etc/fstab for filesystems that aren't inside a
  FreeBSD chunk, but are a top-level chunk under the disk.
2004-05-07 19:15:56 +00:00
David E. O'Brien
b0d55f3fc9 I think we can stop doing 'ldconfig -aout' during the install now.
The base install doesn't have any a.out bits anymore and hasn't for years.
2004-01-02 09:33:58 +00:00
Tom Rhodes
a27f75251a Provide a way to deal with rc.conf which may already be populated in certain
cases.
2003-12-13 16:12:55 +00:00
Joe Marcus Clarke
504fbf4e1e Replace the KDE and GNOME 2 desktops with KDE (Lite Edition) and GNOME 2
(Lite Edition) respectively.  These "lite" packages are streamlined to
provide users with the core essentials for each desktop and to fit on the
release disc 1.

Approved by:	re (scottl)
2003-12-02 20:49:46 +00:00
Robert Watson
4b51d758d5 Add a Securelevel sub-menu to the Security configuration menu,
permitting the administrator to select a securelevel top operate
at.  Include a helpfile summarizing some of the information from
init(8).  This allows for explicit configuration of securelevels,
which was previously implicit in Security Profile selection.
Currently, there are no checkboxes for the active securelevel,
because sysinstall's facilities for deriving "current settings"
from rc.conf may use only one variable, not two, and I opted for
the simplest approach at this point.

Approved by:	re (scottl)
2003-11-29 21:44:51 +00:00
Robert Watson
7fba2041a7 Remove security profiles from sysinstall. Currently, security profile
selection is used to drive two configuration parameters:

(1) Default enable/disable for sshd
(2) Default enable/disable for securelevels

Replace this with an explicit choice to enable/disable sshd.  A
follow-up commit will add a configuration option to the Security
post-install configuration menu to set the securelevel in rc.conf
explicitly.  This should reduce the level of foot-shooting associated
with accidental enabling of securelevels, make the nature and
implications of the securelevel configuration options more explicit,
as well as make the choice to enable/disable sshd more explicit.

Approved by:	re (scottl)
2003-11-28 18:47:45 +00:00
Robert Watson
4880db4afd Tweak "system security profiles:
(1) Don't modify the configuration of the NFS server as a result of
    selecting a profile.  We already explicitly prompt for the NFS
    server configuration during install, and the user may not get
    much advance notice that we're turning it off again.  Instead,
    use profiles (for better or for worse) only for security tuning.

(2) Don't modify the sendmail setting as part of the security profile:
    use the default from /etc/defaults/rc.conf rather than explicitly
    specifying.  Note that the default in /etc/defaults/rc.conf is
    more conservative than the explicit rc.conf entry added by
    sysinstall during install, as it does not permit SMTP delivery.

(3) Update "congratulations on your profile" text to reflect these
    changes.

Note that security profiles now affect only the securelevel and sshd
settings.  My leaning would be to make sshd an explicit configuration
option, move securelevels to the security menu, and drop security
profiles entirely.  However, that requires more plumbing of sendmail
than I'm currently willing to invest.

We may want to add a "permit SMTP delivery" question to the install
process.
2003-09-28 05:21:23 +00:00
Tom Rhodes
208cece4f0 Fix a cut n paste typo I introduced in rev 1.211.
PR:				57012
Submitted by:			Nobuyuki Koganemaru <n-kogane@syd.odn.ne.jp> (original version)
Friendly prod provided by:	murray
MFC:				after re approval
2003-09-27 13:58:16 +00:00
Tom Rhodes
332a31b21e Remove the unrequired -bi from the newaliases line. Note in the commit log
that the last change should have read: exim_enable="YES" in the changes listing.

Discussed with:	ceri
2003-09-11 16:27:16 +00:00
Tom Rhodes
28e0a3843a With the exim port upgrade, modify sysinstall(8):
- Add 'enable_exim="YES"' to rc.conf(5)
- Use the default exim configuration file from the port
- When using sendmail, disable some more scripts that use sendmail specific
  parameters
- Have sysinstall tweak mailer.conf(5) substitution
- Use 'N' flag for newsyslog(8)

Submitted by:	Oliver Eikemeier <eikemeier@fillmore-labs.com>
Reviewed by:	sheldonh, simon
Tested by:	myself (trhodes) and submitter
2003-09-10 20:55:09 +00:00
Hajimu UMEMOTO
571ecd7ab4 Always put an entry for ::1. It may avoid useless DNS lookup
for localhost.

MFC after:	3 days
2003-08-03 05:55:21 +00:00
Tom Rhodes
b9c3c3fc77 Give users the ability to select an alternative MTA during the installation.
This option adds Postfix and Exim to the list, however, qmail is not added
due to license restrictions.

Collaborated with:	Simon L. Nielsen <simon@nitro.dk>
Reviewed by:		jhb, re@, -audit.
2003-07-12 15:33:09 +00:00
Scott Long
acb9e0f3f6 Teach sysinstall to recognize if acpi was turned off from the bootloader,
and then ask the user if this should be made permanent.

Approved by:	re
2003-05-31 11:28:28 +00:00
Robert Watson
c2f10e2de4 Relocate a call to enable inetd so that it is set regardless of
whether the user chooses to edit inetd.conf.

PR:	39311
Reported by:	Martin Faxer <gmh003532@brfmasthugget.se>
2003-02-06 01:55:40 +00:00
Scott Long
9335d6884c Teach sysinstall about rpcbind, rpc.lockd, and rpc.statd. As an added
bonus, rpcbind will be enabled automatically if rpc.lockd, rpc.statd, amd,
NFS Server, or NIS is enabled.
2003-01-07 07:46:50 +00:00
John Baldwin
cab2a4d2b9 Only try to setup moused(8) before setting up the X server if WITH_MICE is
defined.

Approved by:	re
2002-11-27 19:39:26 +00:00
John Baldwin
8e5bc72116 - Add a configOSF1() function (#ifdef __alpha__) that creates /compat/osf1
in addition to setting osf1_enable to YES.
- Only define configLinux() #ifdef WITH_LINUX.

Approved by:	re
2002-11-27 19:37:00 +00:00
Bruce A. Mah
0108d59df2 Add GNOME 2 to the sysinstall desktop configuration menu, remove
the two GNOME 1-based alternatives.

While here, note that a majority of the items in this menu are not
sentences, and remove trailing dots to make the remainder consistent.

Reviewed by:	marcus
Approved by:	re (bmah)
2002-11-26 22:14:34 +00:00
Marcel Moolenaar
df81b3e662 Also test for type efi everywhere we currently test for type fat.
With this change there's no a priori difference between EFI and
FAT partitions. With this change and the corresponding change to
libdisk, we can create EFI partitions, just like regular FAT
partitions.
2002-11-13 05:39:59 +00:00
Jens Schweikhardt
5333b7726b Typo: s/seperately/separately
PR:		misc/41235
Submitted by:	Fesskat Tudeer <freebsd-fesskat@fesskat.org>
MFC after:	3 days
2002-08-06 20:36:02 +00:00
David E. O'Brien
8777223029 Change our default XF86Config location from /etc/ to /etc/X11/,
following the lead of The XFree86 Project's default.

Approved by:	Murray
2002-06-10 04:47:26 +00:00
Murray Stokely
8c44723416 Add comment to supplement my last commit.
Requested by:  obrien
2002-04-07 10:40:31 +00:00
Murray Stokely
7e25871d19 Teach sysinstall the difference between a command line, and an
executable file, so that we can pass commands with arguments to
configXSetup().
2002-04-06 02:39:27 +00:00
Robert Watson
71e8420535 o No longer mount /proc by default on newly installed systems. Almost
all facilities that previously relied on /proc have been rewritten
  to use ptrace().  procfs has presented a substantial security
  hazard for years, with several user->root compromises in the last
  few years.  Procfs will continue to be available but will require
  administrator intervention to use.

Reviewed by:	scottl, jedgar, mike, tmm
2002-02-10 01:34:04 +00:00
Maxim Sobolev
ef9cff0bec Safwish package built on bento is called `sawfish-gnome', so adjust sysinstall
and print-cdrom-packages.sh accordingly.

Revealed by:	re
MFC after:	1 day
2002-01-09 20:10:02 +00:00
Robert Watson
4d0032bde9 o Expand the text describing the Security options menu.
o Move nfs_reserved_port_only out of security profiles (where it was
  set somewhat improperly) to the Security options menu directly.
  Previously, the variable was set to true for Moderate, but not for
  Extreme, which is at best inconsistent.
o Update the Security Profiles help file to remove reference to the
  NFS reserved port.

o Note that the kernel currently defaults the sysctl to '0', but
  sysinstall has changed it to '1' as a default as of late; however,
  rc.conf sets the value to NO as the default.  This change brings
  them relatively into sync.

Sponsored by:	DARPA, NAI Labs
2001-12-21 19:51:44 +00:00
Robert Watson
86f2d72fd8 o Add a configSecurity menu to generally configure security settings,
and pull configSecurityProfile under that menu.  Add a menu option
  to determine whether LOMAC is enabled at boot.  Probably, eventually,
  many of the 'Security Profile' menu choices should be pulled out
  independently into the Security Menu, so as to make them individually
  selectable.

Sponsored by:	DARPA, NAI Labs
2001-12-21 18:30:50 +00:00
Murray Stokely
d47aa91c6a Silence warnings on alpha :
Use '%p' when printing out the address of a function.
  sizeof(int) != sizeof(long)
2001-09-22 22:34:14 +00:00
Robert Watson
dd5360b44c Spell SSHd as sshd to improve readability and consistency. 2001-09-04 20:22:14 +00:00
Robert Watson
0d0f76632d Add an additional \n before the "cautionary note" on the topic of
admins needing to pay attention when configuring the system.  This
improves readability of this message.
2001-09-04 20:21:12 +00:00
Ruslan Ermilov
1c86a7d9c7 Removed the (possible) ambiguity in /etc/rc.conf comment.
PR:		bin/29736
2001-08-17 16:05:54 +00:00
Josef Karthauser
67923e665b Sysinstall inserts a comment between changes to /etc/rc.conf.
Add a timestamp to the comment so that it's possible to see when
changes were made.

e.g.:
# -- sysinstall generated deltas -- # Wed Aug 15 18:10:20 2001
2001-08-15 17:10:49 +00:00
Robert Watson
86a02c1326 Somewhere along the way, configSecurityModerate() lost it's "int"
return value.

Spotted by:	gratuitous use of diff during MFC process
2001-08-11 03:26:52 +00:00