d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
69,879 Commits 72 Branches 135 Tags 3.2 GiB
633541ac6e
Commit Graph

3132 Commits

Author SHA1 Message Date
Warner Losh
3033a4df0e Add Xircom wireless card from pir@pir.net 2001-11-18 06:01:09 +00:00
Ian Dowse
2e40803106 Add support for making the Coda /dev/cfsN devices. 
PR:		conf/22695
Submitted by:	Kenneth Ingham <ingham@i-pi.com>
 2001-11-18 00:20:08 +00:00
Gregory Neil Shapiro
ca8b9ed373 Add two new accounts/groups for sendmail: 
smmsp - sendmail 8.12 operates as a set-group-ID binary (instead of
set-user-ID).  This new user/group will be used for command line
submissions.  UID/GID 25 is suggested in the sendmail documentation and has
been adopted by other operating systems such as OpenBSD and Solaris 9.

mailnull - The default value for DefaultUser is now set to the uid and gid
of the first existing user mailnull, sendmail, or daemon that has a
non-zero uid.  If none of these exist, sendmail reverts back to the old
behavior of using uid 1 and gid 1.  Currently FreeBSD uses daemon for
DefaultUser but I would prefer not to use an account used by other
programs, hence the addition of mailnull.  UID/GID 26 has been chosen for
this user.

This was discussed on -arch on October 18-19, 2001.

MFC after:	1 week
 2001-11-17 21:24:45 +00:00
Guido van Rooij
42ea95e63e Change mode for var/db/ipf to 0700 2001-11-17 12:21:29 +00:00
Warner Losh
d1b4e2cca1 GVC 10Mbps Ethernet Card 
PR:		30329
Submitted by:	David Xu <davidx@viasoft.com.cn>
 2001-11-15 05:54:25 +00:00
Warner Losh
90626c5dd4 Add Compaq WL110 PC Card to the list. 
PR:		31023
Submitted by:	wilko
 2001-11-15 05:49:18 +00:00
Crist J. Clark
6d852b5bdb After further discussion on -CURRENT, some people (jhb) do not like 
the idea of not masking passwords on comments in case the
administrator comments out an entry without clearing the
password. Instead completely ignore comments (since they have no
security impact) when doing the diff of the old and new passwd file.

Suggested by:	rwatson
 2001-11-14 09:30:01 +00:00
Sheldon Hearn
ce76d9c108 Avoid unnecessary calls to expr(1) by using standard shell arithmetic 
expansion instead.
 2001-11-14 06:35:43 +00:00
Makoto Matsushita
3e7b2f7461 sysinstall complains about creating acd0t* devices while all dists are 
extracted and recreating device files.

Without this, you'll see following messages when 'MAKEDEV all':
	[:  : out of range
	[:  : out of range
	acd0t is invalid -- can't have more than 32 devices or 169 tracks

Reported by: David Syphers <dsyphers@uchicago.edu> (at current@FreeBSD.org)
 2001-11-13 18:07:14 +00:00
Crist J. Clark
c2f9738fda No need to hide stuff in the $FreeBSD$ tag or in other comments like, 
Backup passwd and group files:
  1c1
  < # $FreeBSD:(password):09:07 peter Exp $
  ---
  > # $FreeBSD:(password):27:16 ache Exp $

MFC after:	1 week
 2001-11-11 07:15:19 +00:00
Mark Murray
92678c2908 Make rsh(d) more secure (Hah!) by not defaulting PAM to promiscuously 
accepting connections.

Add KDE entries.

Committed From:	BSDConEU Terminal Room
 2001-11-10 14:23:07 +00:00
Garrett Wollman
e7df26079b Add share/zoneinfo/North_Dakota in preparation for tzdata update. 2001-11-09 18:58:07 +00:00
Bill Fenner
85c9d676b5 Update the nsswitch.conf -> host.conf generator to handle criteria, 
continuation lines, extra whitespace, and to use the last matching
 line in the file.  This syncs the host.conf generation with how
 the nsswitch.conf is parsed.
Only print " host.conf" instead of a multi-line message, since this
 happens on every boot.
 2001-11-07 00:33:56 +00:00
Andrey A. Chernov
4e0f37c806 Add bg_BG.CP1251 
PR:		25472
Submitted by:	Peter Pentchev <roam@ringlet.net>
 2001-11-05 06:49:44 +00:00
Crist J. Clark
7cd99d0ae0 Fix a bug I introduced yesterday. People who built world since the 
previous commit yesterday may wish to check /var/run for junk.
 2001-11-02 22:00:17 +00:00
Crist J. Clark
7558c91f77 Add a directory in /var/run to store ppp(8) command sockets. 
PR:		bin/29966
Approved by:	brian
MFC after:	4
 2001-11-01 23:44:12 +00:00
Dag-Erling Smørgrav
bd0a2a3f93 Modify the way host.conf and nsswitch.conf are treated at boot time: 
- if nsswitch.conf exists, host.conf is auto-generated for compatibility
   with legacy applications and libraries.

 - if host.conf exists but nsswitch.conf does not, nsswitch.conf is auto-
   generated as usual.
 2001-11-01 12:39:01 +00:00
Jeroen Ruigrok van der Werven
03b7b65a08 Explain that /var/log/all.log needs to be touched and chmod'd 'ere it 
can be used.

PR:		17022
Submitted by:	Niels Christian Bank-Pedersen <ncbp@bank-pedersen.dk>
MFC after:	1 week
 2001-10-28 13:41:30 +00:00
Robert Watson
3005fded4a o Spelling error s/suffient/sufficient/ 
PR:		31524
Submitted by:	Dan Langille <dan@freebsddiary.org>
 2001-10-27 03:14:37 +00:00
Andrey A. Chernov
bdd263de3f Remove /var/spool/uucp subtree, not needed for 'cu' 2001-10-26 09:40:28 +00:00
Andrey A. Chernov
5a5f6965ba The same unbreakage (0755 -> 0775) for /var/games and subdirs 2001-10-25 23:18:41 +00:00
Andrey A. Chernov
3ea034b005 Fix /var/mail, /var/rwho and /var/spool/lock back to 0775 
Not sure about other dirs with the same damage (0755) by recent commit.
 2001-10-25 23:13:11 +00:00
Ruslan Ermilov
6df68c6102 Style these once again. 2001-10-25 12:16:51 +00:00
Ruslan Ermilov
9261e27a5b Finish the removal of uucp scripts. 
Forgotten by:	kris
 2001-10-25 11:27:55 +00:00
Andrey A. Chernov
92277380c8 Re-commit www:www 
If anybody wants to remove them for some reason, please consider "pop"
removing first.

Approved by:	arch discussion from Oct 20
MFC after:	3 days
 2001-10-25 03:27:16 +00:00
David E. O'Brien
b1f2952a35 Chroot to /tftpboot for tftp. 
Reviewed by:	mdodd, peter
 2001-10-22 01:46:53 +00:00
Darren Reed
f645349388 Do an ipf -y after bringing up ppp to ensure rules which mention ppp get 
matched.  Moification on PR to handle ipnat not being dependant on
ipfilter_enable

PR:	22859
 2001-10-20 04:46:32 +00:00
Darren Reed
9645656d2c Allow ipnat_enable to be set to "yes" without requiring ipfiltre_enable to 
be set to "yes"

PR:		25223
 2001-10-20 04:41:47 +00:00
Darren Reed
7b60aacc90 Create /var/db/ipf 
PR:		27070
 2001-10-20 04:33:12 +00:00
Darren Reed
639e6db6e7 Put in place for using ipfs use on shutdown and startup. 
PR:		27070
 2001-10-20 04:33:02 +00:00
Darren Reed
45e22a3d1c Add the ipfilter directory in share/examples 
PR:		26763
 2001-10-20 04:18:41 +00:00
Doug Barton
74e07b9e48 Handle the lack of nfs server or client support in the kernel by 
kldload'ing the appropriate modules before enabling the service.
 2001-10-19 06:50:52 +00:00
Alfred Perlstein
a1580c53a7 Update to note that rpc.statd and rpc.lockd are now needed for 
client side NFS mounts.

Stumbled upon by: rwatson
 2001-10-18 19:37:57 +00:00
Sheldon Hearn
19aa5cdc3d Back previous revision out until it has been discussed on -arch and 
motivated.  Currently, it is under dispute.
 2001-10-18 16:53:20 +00:00
Sheldon Hearn
99225c5d10 Back previous revision out until it has been discussed on -arch and 
motivated.  Currently, it is under dispute.
 2001-10-18 16:41:58 +00:00
Brian S. Dean
cd218bbaed Ensure that /var/log/lastlog exists so that login doesn't complain. 
Submitted by:	Harti Brandt <brandt@fokus.gmd.de>
MFC after:	2 weeks
 2001-10-17 14:30:19 +00:00
Andrey A. Chernov
913b0e4e95 Add www:www (80:80) for upcoming Apache changes 2001-10-17 13:21:53 +00:00
John Baldwin
19d1491b60 Remove references to nfsiod and nfs_client_flags now that they are 
obsolete.

Submitted by:	Gordon Tetlow <gordont@gnf.org>
 2001-10-10 20:36:51 +00:00
Archie Cobbs
f3ca697239 Update reference URL. 
MFC after:	3 days
 2001-10-10 18:34:28 +00:00
David E. O'Brien
260a117141 Fix tabbing damage in last commit. 2001-10-10 17:26:27 +00:00
Doug Barton
f8bb49cd4f Follow existing style a little better 2001-10-10 04:25:44 +00:00
Dag-Erling Smørgrav
4f18601a76 Add a dumpdir variable that determines where savecore stores crash dumps. 
I've had this on my development box for ages...
 2001-10-09 18:40:00 +00:00
Gregory Neil Shapiro
741741c2ae Do not clobber users hostname.mc file if freebsd.mc changes (likely after an 
installworld).

Submitted by:	Steve Watt <steve@Watt.COM>
MFC after:	2 days
 2001-10-08 22:35:24 +00:00
Doug Rabson
c99cf22fab Add /etc files for ia64. 2001-10-06 12:55:50 +00:00
Sheldon Hearn
1e58a712d9 Quote the value of pccard_ether_delay, the only unquoted value in the 
entire file.
 2001-10-05 09:01:42 +00:00
Hajimu UMEMOTO
861defc8e9 We don't ship pim6dd/pim6sd any more. 
MFC after:	1 week
 2001-10-03 16:15:59 +00:00
Jordan K. Hubbard
803d3eb188 Add commented-out/prototype entries for samba's swat configuration tool. 
Requested by:	"William Wong" <willwong@samurai.com>
MFC after:	1 week
 2001-10-03 05:30:56 +00:00
Ruslan Ermilov
c88bd8a742 Sigh, fix the unfixed typo: s/-l/-L/. 2001-10-02 12:00:39 +00:00
Akinori MUSHA
73a9c61338 Fix a typo: s/-or/-o/. 2001-10-02 11:50:14 +00:00
David E. O'Brien
db27ecf570 Add ()'s around the warning message when skipping a startup script. 
Also don't give the whole path, just the script name.

Submitted by:	des
Requested by:	jhb
 2001-10-01 22:52:32 +00:00
David E. O'Brien
488289d40d Tweak the Skipping ${script} logic to also handle symlinks. 
Also echo with "-n".
 2001-10-01 21:30:27 +00:00
Mark Murray
9858c058b9 Remove (commented out) use of pam_ssh where it won't work. 2001-10-01 17:05:32 +00:00
Kris Kennaway
a06da08de5 Move the uucpd entry down a bit to live with other optional services 
and correct the path to /usr/local as an example.

Submitted by:	ru
 2001-10-01 09:16:42 +00:00
Kris Kennaway
d7401e9771 Put back /var/spool/uucp so it can be used for serial port locking. 2001-10-01 08:54:16 +00:00
Kris Kennaway
7080a34335 UUCP removal Phase III. 2001-10-01 06:27:44 +00:00
Kris Kennaway
51b3cf3c56 UUCP removal phase II. These directories are now created by the 
freebsd-uucp port.
 2001-10-01 06:24:50 +00:00
David E. O'Brien
d26e2413e0 Fix the problem that the startup directory is printed out if it 
is empty.

Submitted by:	Udo Schweigert <udo.schweigert@siemens.com>
 2001-09-30 22:07:19 +00:00
Dima Dorfman
59542375f9 Add missing word in comment. 2001-09-30 12:48:17 +00:00
David E. O'Brien
6ca537e725 Add `dict' per http://www.iana.org/assignments/port-numbers and RFC 2229. 2001-09-29 18:51:49 +00:00
Ruslan Ermilov
8afccfa91e Backout revision 1.9 that added `myname.my.domain' as another alias for 
`localhost'.  If your /etc/nsswitch.conf has ``hosts: files dns'', and
you changed `myname.my.domain' in /etc/hosts to match hostname(1), and
you run inetd(8) with the -l option, any connect to `myname' using its
real IP address through inetd(8), e.g. `ftp -a myname', will spam your
/var/log/messages with:

inetd[PID]: warning: /etc/hosts.allow, line 23: host name/name mismatch: myname.my.domain != localhost

This is especially bad for -STABLE, where /etc/host.conf defaults to
"files first then DNS" resolution order.

Noticed by:	Igor Kucherenko <kivvy@sunbay.com>
MFC after:	1 week
 2001-09-29 12:20:08 +00:00
Brooks Davis
bf25ced157 Add an apparently working entry for the BayStack 660, 2mbps direct 
sequence wireless card.

Approved by:	imp (in principle)
 2001-09-27 21:38:02 +00:00
Matthew Dillon
46cad5761c Enable vmiodirenable by default. Remove incorrect comment from sysctl.conf. 
MFC after:	1 week
 2001-09-26 19:35:04 +00:00
Poul-Henning Kamp
c36b0a4edb Give people a chance to do things before fsck is run. 
MFC after:	2 weeks
 2001-09-26 06:17:25 +00:00
David E. O'Brien
364f9ab989 Run rc.devfs a little bit earlier. 
Many people like to use generic devices in rc.syscons, etc..
So rc.devfs needs to run before those rc files.

Requested by:	Jos Backus <josb@cncdsl.com>
 2001-09-26 06:01:40 +00:00
David E. O'Brien
2e78f3945a Let people know when a startup script is skipped because it is not 
executable.

Suggested by:	gad
 2001-09-25 01:55:21 +00:00
David E. O'Brien
16f5727417 Back out rev 1.274. The previous behavior was documented in rc.8 and 
the original commit of local_startup depended on the scripts being
executable; so there is too much precedence to change it now.  About all
anyone could agree on is that rev 1.274 broke POLA and before rev 1.274
also broke POLA.
 2001-09-24 18:17:11 +00:00
David E. O'Brien
1e60617bfd + explicitly use the shell to run ${local_startup} so one does not have to 
ensure the executable bit is set on the scripts.
+ Fix VCS ID's
 2001-09-24 03:03:51 +00:00
Brooks Davis
40995998c5 Add a new rc.conf variable, cloned_interfaces, to create cloned 
interfaces at boot.
 2001-09-19 21:27:27 +00:00
Peter Wemm
06fec2cf89 The vfs.nfs.bufpackets sysctl is in the client, not the server. Move it 
to the client section.  Turn off nfsiod, it no longer exists (now just
kthreads).  I need revisit nfsiod so that we have an argument passthrough.
 2001-09-19 00:22:26 +00:00
Peter Wemm
9119623471 Userland part of nfs client/server split and cleanup. 2001-09-18 23:34:44 +00:00
Bill Fenner
febceb3e27 Handle the absence of net.inet.ip.fw.verbose_limit better, just like 
brian's fix for v6 in rev 1.56.
 2001-09-18 00:03:48 +00:00
Jonathan Lemon
7032f49f4d Change permissions for initial install of maillog file to 640. (from 644) 
Pointed out by: rwatson
 2001-09-17 02:04:20 +00:00
Jonathan Lemon
dbae8e5b46 Change maillog to have permissions of 640. Users shouldn't be able to 
eavesdrop on other users' communications.
 2001-09-17 01:33:15 +00:00
Brian Somers
b550f7176f Handle the absence of net.inet6.ip6.fw.verbose_limit better 2001-09-14 11:18:06 +00:00
Warner Losh
8dac8c268d Due to a bug in the ed driver, which leads to hangs when using it with 
dhclient and pccard_ether, introduce the concept of a "settle time" to
pccard_ether with the new pccard_ether_delay variable.  Defaults to 5
seconds, which is enough time for the ed driver to finish its
autoconfiguration for newer Linksys based cards.  This also can
eliminate the ed0: timeout messages that happen at startup as well.

MFC: after RE says OK.
 2001-09-13 06:18:07 +00:00
Ruslan Ermilov
4a31781613 Added forgotten share/zoneinfo/America/Kentucky. 2001-09-11 14:25:48 +00:00
Ruslan Ermilov
16763c30af s/password_format/passwd_format/ 
PR:		misc/30494
Submitted by:	"brian j. peterson" <rbw@myplace.org>
 2001-09-11 07:01:47 +00:00
Warner Losh
54c5e69c3a Typo s/AirLAncer/AirLancer/g 2001-09-10 08:14:00 +00:00
Warner Losh
55b15701e3 clarify PCMLM56 status 2001-09-10 08:07:46 +00:00
Warner Losh
1e5d3cc62e The EXCard-10-PCMCIA entry was slightly bogus. 2001-09-10 08:05:29 +00:00
Warner Losh
154c742236 Add cs driver for IBM EtherJet card. Doesn't completely work yet, but 
it won't work without it.
 2001-09-10 04:08:28 +00:00
Warner Losh
3283cbb35f 2Mbps card from Teletronics. Looks like a generic OEM card for the 
awi driver, but the MAC address isn't recognized, so maybe this is
wrong.
 2001-09-10 03:30:47 +00:00
Warner Losh
99de8e9963 ELSA Air Lancer wireless card. Appears to be a Lucent OEM. 
Submitted by: Eric Masson <e-masson@kisoft-services.com>
 2001-09-10 03:18:21 +00:00
Warner Losh
a804e4ad3d Mihira-san says that this works for him. Linksys EtherFast 10/100 + 
56k modem with the fat connector.

Submitted by: sanpei@sanpei.org (MIHIRA yoshiro)
Ignored since Jan 2001 by: imp
 2001-09-09 23:58:09 +00:00
Warner Losh
f84d55e6fb Addtron AWP-100 wireless card. 
Submitted by: Alfred Perlstein <bright@mu.org>
 2001-09-09 23:42:26 +00:00
Warner Losh
b03d7b66b0 EZCard, not EXCard 2001-09-09 23:40:28 +00:00
Warner Losh
87c73af65e Speculatively commit fix for Surecom EP-427TX PCMCIA adapter. This 
appears to be another OEM version of the Netgear FA411.  This is a
guess, since the original didn't include the flags, but this is too
similar to my netgear card...

Submitted by: neal@nelsonnet.org
 2001-09-09 23:28:09 +00:00
Warner Losh
15ba1376a1 SMC EZ Card 10 PCMCIA 
Submitted by: Goncharov D <gda@sani.ru>
 2001-09-09 23:13:59 +00:00
Warner Losh
c6450b1091 Add NE-2000 compatible card sold by addron. 
Submitted by: johs@copyleft.no
 2001-09-09 23:10:38 +00:00
Warner Losh
fbd6d4e098 Add NetGEAR FA411 card. This appears to be based on the AX88190 chipset 
and works with those flags.
 2001-09-09 20:31:26 +00:00
Kris Kennaway
77fb35234d Run the uustat command as the uucp user, not as root. 2001-09-09 05:53:01 +00:00
Brian Somers
32706fb26f Allow group network to read ppp.log & slip.log. 
Suggested by: Jesper Skriver <jesper@FreeBSD.org>
 2001-09-03 11:35:17 +00:00
Robert Watson
1088a254de o Add sample syslogd_flags for "-ss" which causes syslogd not to bind 
an inet socket.
 2001-09-02 23:34:19 +00:00
Robert Watson
78eb04b942 o Note that some sites will want to select generally more conservative 
permissions on some files, and give hints as to what those permissions
  might be.  Note also that the current more liberal permissions might
  get changed in future revisions.
 2001-09-01 21:00:28 +00:00
Robert Watson
585514eb2d o More conservative permissions for kerberos.log: 600 instead of 644. 
Reviewed by:	peter
 2001-08-31 23:44:51 +00:00
Murray Stokely
9f63e1d07a Add an entry for the Zip 250. 
PR:		i386/29639
Submitted by:	David Yeske <dyeske@yahoo.com>
 2001-08-31 22:49:22 +00:00
Murray Stokely
0cf9956f3f Add entries for 3wire terminals. (carrier not supplied, so we set nc). 
PR:		conf/26420
Submitted by:	Jon Passki <cykyc@yahoo.com>
 2001-08-31 22:18:50 +00:00
Dima Dorfman
bdb6e9217b Make the 'echo' output for blanktime and scrnmap consistent with their 
variable names.  There were minor differences in both cases, which were
needlessly confusing and inconsistent.
 2001-08-31 15:29:24 +00:00
Alexander Langer
d33a962d07 Move /etc/defaults/make.conf to /usr/share/examples/etc/make.conf as 
discussed on the arch@ mailinglist (after repo-copy).

sys.mk will .error if it finds /etc/defaults/make.conf but include
it anyways (this is the same behaviour as with the make.conf.local
removal).

/usr/share/examples/etc/make.conf has BDEFLAGS commented out now,
since it's only an example file.

Adjust all textes that talk about make.conf or defaults/make.conf to
match the new situation.
 2001-08-30 22:44:51 +00:00
Alexander Langer
466df28c52 chown syntax is user:group now. 2001-08-29 19:59:30 +00:00
Alexander Langer
2d68fd8741 RIP all ports options, as discussed on arch@. 2001-08-29 19:38:17 +00:00
David E. O'Brien
cb2fb6f378 Remove more vestages of diskcheckd, which is now in ports/sysutils. 2001-08-29 05:39:07 +00:00
Brian Somers
15ed67d861 Remove diskcheckd.conf 2001-08-29 04:03:41 +00:00
David E. O'Brien
437cd38796 Remove `diskcheckd'. It is now in ports/sysutils. 
Consensus on:	freebsd-current.
 2001-08-28 23:00:28 +00:00
Mark Murray
17a6c94473 Tidy, reorder and adjust to more correctly reflect FreeBSD default 
policy.
 2001-08-26 18:15:32 +00:00
Dima Dorfman
573722f3f0 End sentence with a period. 2001-08-26 02:37:22 +00:00
Dima Dorfman
81b83ee95d $units is the canonical name for the number of units to create; use it. 
PR:		29971
Submitted by:	Joseph Mallett <jmallett@xMach.org>
 2001-08-23 22:19:53 +00:00
Jun Kuriyama
6d9e09d7d0 Invoke named with privilege of bind:bind. 
Change pidfile location to /var/run/named/pid.
 2001-08-23 13:34:45 +00:00
Hajimu UMEMOTO
4a84918dc9 fix typo. icmptype of destination unreach is not 2 but 1. 
Submitted by:	kuriyama
 2001-08-21 15:05:09 +00:00
Matt Jacob
94c152b8cb move forward the ability to MAKEDEV zs devices for TurboLaser 2001-08-21 00:03:28 +00:00
Mark Murray
468a061e69 More libss removal. 2001-08-20 12:39:23 +00:00
David Malone
1139160ec0 Clear up what the line "ALL : PARANOID : RFC931 20 : deny" means 
to tcp wrappers. The description is a little long, but hopefully
accurate.
 2001-08-18 14:22:52 +00:00
David E. O'Brien
d549989694 Add the `WANT_FORCE_OPTIMIZATION_DOWNGRADE' knob. If set to an integer 
value, it forces GCC to not optimize above this level.  For intance, GCC
made with "WANT_FORCE_OPTIMIZATION_DOWNGRADE=1" is a good setting for the
Alpha platform when building ports.
 2001-08-16 06:05:18 +00:00
Mark Murray
e95927c133 Add no_warn option to the "auth" lines. Minor tidy-up as well. 2001-08-15 20:12:27 +00:00
Andrey A. Chernov
f9f1ef64d1 Reflect main termcap v1.109 2001-08-15 03:27:52 +00:00
Andrey A. Chernov
86babaf9bf Add commented out example 2001-08-14 23:51:58 +00:00
Andrey A. Chernov
e01dfc9c69 Add/install /etc/opieaccess skeleton 
Approved by:	markm
 2001-08-14 23:38:31 +00:00
Dima Dorfman
f20347445f Sync the code that sucks in rc.conf and friends with what's in 
rc.firewall6.  Specifically, don't do anything
if [ -z ${source_rc_confs_defined} ].  Not doing this leads to a problem
with dependencies: chkdepend will set, e.g., portmap_enable to YES if
some service that needs portmap is enabled, but rc.network sources
rc.firewall, which used to source defaults/rc.conf unconditionally,
which would result in portmap_enable being set back to NO.

PR:		29631
Submitted by:	OGAWA Takaya <t-ogawa@triaez.kaisei.org>
 2001-08-14 05:50:19 +00:00
Mark Murray
37ee76af52 Remove the WANT_INSECURE_OPIE option - it is now a default. This is not 
nearly as ominous as it sounds, and it allows OPIE to be used over SSH
and on xterms.

Requested by:	ache
Discussed on:	-security
 2001-08-12 18:47:56 +00:00
Akinori MUSHA
f418fdfb89 Chagne MASTER_SITE_FREEBSD to MASTER_SITE_FREEBSD_ORG, because 
MASTER_SITE_FREEBSD is already used in bsd.port.mk for some different
purpose.
 2001-08-12 17:22:41 +00:00
Akinori MUSHA
000d8e5b75 Fix MASTER_SITE_RUBY. The listed master site is obsolete. 2001-08-12 17:09:19 +00:00
Akinori MUSHA
81030c6ed5 Add MASTER_SITE_FREEBSD. 2001-08-12 16:32:05 +00:00
Jens Schweikhardt
17720a4498 Add sgi_fam 391002, file alteration monitor. 
PR:		25925
Submitted by:	Jeremy Norris <ishmael27@home.com>
MFC after:	5 weeks
 2001-08-11 09:43:04 +00:00
David E. O'Brien
411c56e4bf Fix minor typo. 2001-08-09 15:36:03 +00:00
Nick Sayer
e87f98d4ff Now properly use logger's facility argument 2001-08-06 15:52:42 +00:00
Nick Sayer
1d0d467f53 Make the sample entries actually syntactically correct. :-/ 2001-08-05 20:26:03 +00:00
Nick Sayer
7759485ca3 Add a little pizzaz to the sample entries. :-) 2001-08-05 16:00:40 +00:00
Nick Sayer
a984786cdf Add some sample entries to illustrate battery state monitoring. 2001-08-05 15:45:21 +00:00
David Malone
d7f66e157e Remove duplicate ufsd entry. This seems to go back to the Sun's version 
of the file.

PR:		29386
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
 2001-08-02 12:55:37 +00:00
Robert Watson
f2419a7154 Default to disabling all inetd.conf entries, in particular, telnetd 
and ftpd.  This more conservative default reduces the exposure of
freshly installed machines, which is especially valuable for machines
that receive minimal further configuration before being put into
production.  Generally speaking, SSH has superseded the use of both
telnet and ftp in many environments.  In light of recent remotely
exploitable security holes in both telnetd and ftpd, this choice
retains flexibility (both telnetd and ftpd daemons remain installed
and easily enableable) while protecting users who don't need the
additional risk.  This change brings our configuration into line with
the majority of other UNIX vendors, including OpenBSD and NetBSD.

To address the concerns of those requiring remote access via telnet
from first install, changes will shortly be committed to sysinstall
to provide the ability to edit inetd.conf during the installation
process, allowing telnetd and ftp to be re-enabled during the
installation process.

While I'm at it, slightly improve commenting for inetd.conf so that
it's more clear to users how to enable and disable services.
Further commenting to indicate the functions of various columns would
probably also be useful.

Reviewed by:	imp, chris, jake, nate, -arch, -stable
 2001-08-02 02:19:56 +00:00
Doug Barton
778c176942 Scratch an itch of long standing by adding entries for the most 
commonly used x11 ports
 2001-08-01 20:13:49 +00:00
Doug Barton
48b3cebbee I could have sworn I did this already, but obviously I didn't. So, 
take another stab at updating the IANA web page.
 2001-08-01 19:48:12 +00:00
Gregory Neil Shapiro
9078d242bf Revert change to always include _FFR_TLS_O_T as it requires FEATURE(access_db) 
Problem found by:	nsayer
 2001-08-01 02:12:39 +00:00
Darren Reed
e58f466620 Merge in patch to automagically decide whether or not a kldload of ipfilter 
is required into rc.network.

Person failed to use a real name so both email addresses from PR included
(Sent was different to From).

PR:		22998
Submitted by:	dl@leo.org/spock@empire.trek.org
 2001-07-30 23:12:02 +00:00
Doug Barton
f45ae64135 Add an entry for the commonly used (although unofficial) kpop port. 
PR:		conf/21551
Submitted by:	Luis Casillas <casillas@stanford.edu>
Reviewed by:	rwatson
 2001-07-30 17:53:55 +00:00
David E. O'Brien
8e4e3be259 Document Bzip2's flag. 
PR:		27901
Submitted by:	Anders Nordby <anders@fix.no> (stylistic changes by me)
 2001-07-30 15:18:15 +00:00
Doug Barton
f5b72dbe84 Add a note about port 98 commonly being used for RH linuxconf, 
(unofficially of course).

PR:		misc/21775
Submitted by:	Dann Lunsford <dann@greycat.com>
 2001-07-30 06:19:27 +00:00
Mark Murray
55b3d2c67f Build standard directory for kerberos 5 (Heimdal) database. 2001-07-28 20:00:54 +00:00
Mark Murray
e7f2f42f1b Upgraded launchpad for kerberos. Noe kerberos IV OR kerberos 5 
may be started at boot for kerberos servers.
 2001-07-28 19:57:57 +00:00
Peter Wemm
791da841a1 Take -Wconversion out of BDECFLAGS. It is not particularly useful for 
us anyway because it doesn't work right on the x86 and alpha.  On
K&R code, small ints would be promoted to int.  ANSI-C doesn't require
this and the small ints can be passed taking 8 or 16 bits of stack
space.  However, the x86 abi that we use *does* promote to 32 bit,
and the alpha ABI passes them in 64 bit registers so we dont have
that aspect of the problem here.  Losing float precision by having it
cast down to int because the funtion prototype specifies int is the
least of our problems.  -Wmissing-prototypes helps here anyway.
 2001-07-27 16:23:53 +00:00
Dima Dorfman
614aed8497 Be consistent about how we quote commands that could be entered by the 
user.
 2001-07-27 12:25:55 +00:00
Brian Somers
c5f947aa7f Remove $daily_status_named_logs and figure out which /var/log/messages* 
files to look an (in the same way that /etc/security does).

Don't single-quote $start, reducing it to an empty string.

MFC after:	3 days
 2001-07-26 02:37:12 +00:00
Scott Long
4aa620cdc6 Add /dev/hpn? as an alias to /dev/aac? so that the HP version of the CLI 
utility will work, and document it in the manpage.

MFC after:	3 days
 2001-07-25 22:36:17 +00:00
Hajimu UMEMOTO
0e9ea6e71e pass any NS/NA/toobig. 
Requested by:	itojun
MFC after:	5 days
 2001-07-24 13:37:06 +00:00
Doug Barton
30b0725071 Add ports for sshell, ldaps, rsync, ftps-{data|control}, ircs, and 
correct some ommissions of udp ports.

Update IANA web page.

Clean up/correct some comments. I went a little further than the PR.

PR:		conf/23416
Submitted by:	Rudolf Cejka <cejkar@dcse.fee.vutbr.cz>
 2001-07-24 09:28:18 +00:00
Hellmuth Michaelis
0425c069fe change the default for isdn_fsdev to NO. specifying a device here 
results in a potential conflict with a getty running on that device.
PR:		26818
Submitted by:	Clement Ballabriga <clement@asso.ups-tlse.fr>
 2001-07-23 14:24:31 +00:00
Gregory Neil Shapiro
f88f925efc If the user sets SENDMAIL_MC to /etc/mail/sendmail.mc, install is told to 
install /etc/mail/sendmail.cf to /etc/mail/sendmail.cf and exits with an
error:

===> etc/sendmail
install -c -o root -g wheel -m 644 /etc/mail/sendmail.cf /etc/mail/sendmail.cf
install: /etc/mail/sendmail.cf and /etc/mail/sendmail.cf are the same file
*** Error code 64

Catch this in the Makefile and don't call install if the source and target
are the same file.

Reported by:	Alexandr Listopad <laa@reis.zp.ua>
MFC after:	1 week
 2001-07-23 02:19:02 +00:00
Gregory Neil Shapiro
f4843be999 New make knob, SENDMAIL_M4_FLAGS, modifies the flags passed to m4 when 
building a .cf file from a .mc file.

Include -D_FFR_TLS_O_T to enable tls policy control since the sendmail binary
build enables that FFR as well.

PR:		conf/28361
MFC after:	1 week
 2001-07-23 01:33:54 +00:00
Warner Losh
b554a656b3 Add entry for SMC 2632W card. 
Submitted by: lots of people, most recently by Mike Buchanon

Also, Tried to clean up the comments about IRQs to match the new world
order.
 2001-07-22 18:13:19 +00:00
Hellmuth Michaelis
f22083caeb add directory i4brunppp. 
Pointed out by: David H. Wolfskill david@catwhisker.org and
                Crist J. Clark <cristjc@earthlink.net>
 2001-07-22 09:40:58 +00:00
Nick Sayer
e4feb76c8b The MA401 is a Prism II 
Approved by:	imp
 2001-07-21 23:11:13 +00:00
Hajimu UMEMOTO
d35e2ab4ce - Allow link-local multicast traffic for client. 
- Allow ICMPv6 destination unreach, packet too big and NS/NA.
- RIPng also uses link-local to link-local.

MFC after:	1 week
 2001-07-21 19:59:35 +00:00
Hajimu UMEMOTO
bd089fdbc0 Do more strict checking for an interface. 
Suggested by:	matusita@jp.FreeBSD.org
MFC after:	1 week
 2001-07-20 18:08:17 +00:00
Hajimu UMEMOTO
bb697a7fcb - Avoid to select an interface which is not good for RA/RS. 
Submitted by:	sakane@kame.net
- Avoid to select lo0 or faith for a default interface.
 2001-07-19 12:37:22 +00:00
Brian Somers
cce7f73d72 Don't try to remove directories unless we've emptied them first 
Submitted by:	NIIMI Satoshi <sa2c@and.or.jp>
PR:		28355
MFC after:	1 week
 2001-07-19 12:08:24 +00:00
John Baldwin
7bbf2ac162 sysctl(8) doesn't need '-w' to write to sysctl variables anymore. 2001-07-17 22:03:19 +00:00
Peter Pentchev
1d17292c23 Add a script_name_sep rc.conf knob to specify the IFS character 
for separating the startup scripts' list into individual filenames.

Run the shutdown scripts in reverse alphabetical order, so dependent
services are stopped before the services they depend upon.

Reviewed by:	-arch, -audit
MFC after:	3 weeks
 2001-07-17 14:33:52 +00:00
Mark Murray
caa78f33ed Add OPIE examples. 
Tidy up columns.

Fix pam_wheel options.
 2001-07-14 08:46:56 +00:00
Gregory Neil Shapiro
eac481ece9 MAPS is becoming a subscription (fee based) service, warn users 
ORBS is gone

MFC after:	1 day
 2001-07-13 21:51:28 +00:00
Mark Murray
b4248e7919 Provide a hint for the OPIE 'insecure' mode. 2001-07-10 17:11:02 +00:00
Nick Sayer
dada46cb22 The Netgear card works for me under 'wi'. 2001-07-07 20:38:44 +00:00
Ben Smithurst
f5b106aeb5 Add older CD types, matcd, mcd, scd. 
Submitted by:	imp
 2001-07-04 18:33:01 +00:00
Ben Smithurst
8173aec16a Exclude acd*, cd*, and md* from being checked by default. 2001-07-04 17:47:23 +00:00
Hajimu UMEMOTO
cefe8a2051 Show IPv6 denied packets. 
MFC after:	1 week
 2001-07-04 12:49:17 +00:00
Brooks Davis
cdb5d37b3e Create gif devices in the "gifconfig" stage while configuring them. 
Reviewed by:	ru, ume
Obtained from:	NetBSD
MFC after:	1 week
 2001-07-02 21:08:48 +00:00
Assar Westerlund
80631942e5 add MR-AFS port numbers 2001-07-02 16:03:50 +00:00
Hajimu UMEMOTO
cfb687fab8 Change default of ipv6_default_interface to NO. This is meaningless 
in most cases and rather harmful.

Reported by:	Kevin Oberman <oberman@es.net>
MFC after:	1 week
 2001-06-28 21:45:47 +00:00
Dima Dorfman
2ce07d27e5 Don't insist on creating rocketport devices in /dev. 
PR:		21394
Submitted by:	Craig Leres <leres@ee.lbl.gov>
 2001-06-28 07:07:12 +00:00
Robert Watson
0b725700c2 Reduce chattiness of entropy file mechanism with extreme prejudice. 
Reviewed by:	USENIX Cabal (peter, jhb, wpaul, et al)
 2001-06-28 06:43:47 +00:00
Dima Dorfman
df4afc8b95 Introduce syslogd_program and inetd_program variables in case somebody 
wants to replace one of those programs.

PR:		13609
Submitted by:	Goran Lowkrantz <goran.lowkrantz@infologigruppen.se>
 2001-06-28 03:32:10 +00:00
Gregory Neil Shapiro
f87b85b2f0 Typo fix (modifes -> modifies) 2001-06-27 01:48:02 +00:00
Dan Moschuk
4357df37b6 stpo --> stop (typo). 2001-06-26 23:19:45 +00:00
Warner Losh
a30e186209 Use tabs where tabs are supposed to go! 2001-06-26 20:50:34 +00:00
Warner Losh
4524182d66 Add dell wireless card 
Submitted by: keichi
 2001-06-26 20:44:27 +00:00
Dan Moschuk
7644eb97f1 Add support for linksys instant wireless. 
Approved by: imp
 2001-06-26 18:22:12 +00:00
Nik Clayton
353b398056 Mention the path to the README file in the header comment. 
Submitted by:	Rich Morin <rdm@cfcl.com>
 2001-06-26 13:50:33 +00:00
Andrey A. Chernov
3969b65004 Fix name for de manpages dir 2001-06-26 00:43:28 +00:00
Andrey A. Chernov
5e8fed8e82 Remove aliases not needed for new man version 2001-06-26 00:41:07 +00:00
Brooks Davis
6ad3e220f2 Add support for the Cisco Aironet 350 Series of adaptors. Also, make 
a minor ocrrection to the Aironet 340 Series comment.

Approved by:	imp (in principle)
 2001-06-25 22:07:19 +00:00
Hajimu UMEMOTO
66096b9f78 Correct typo. It should be site-local address prefix. 
Submitted by:	kuriyama
MFC after:	3 days
 2001-06-22 13:49:15 +00:00
David E. O'Brien
3d67411316 Got my r's and t's mixed up. Fix sorting. 2001-06-22 07:26:08 +00:00
Jun Kuriyama
a080f2d84f Fix typos in comment. 
(s/IPFIREWALL_DEFAULT_TO_ACCEPT/IPV6FIREWALL_DEFAULT_TO_ACCEPT/)

MFC after:	1 week
 2001-06-22 06:25:54 +00:00
Warner Losh
a83ad5b62c Add BreezeNET PC-DS.11. It is yet another wireless card. 
Submitted by: Danny Braniss <danny@cs.huji.ac.il>
 2001-06-22 03:17:25 +00:00
Crist J. Clark
ab26031ac2 Fixing a bug reported on freebsd-security. It is possible for 
non-printable characters to sneak into /var/log/messages (e.g.
someone aims a Solaris/Linux RCP exploit at your FreeBSD box and
you end up with his shellcode as part of a log entry). You might
get something like,

  host.mydom.org login failures:
  Binary file (standard input) matches

In the daily security script as a result. Allowing attackers to
mess with your security script's ability to accurately report
is a Bad Thing. Tell grep(1) to treat /var/log/messages like a
text file even if it has non-printable characters.

Submitted by:	Tim Zingelman <zingelman@fnal.gov> on freebsd-security
Approved by:	ru
MFC after:	1 week
 2001-06-21 19:17:15 +00:00
Brian Somers
b720900890 Move the interface address setting and default route setting out of 
the default section and into the papchap section.

It's really irritating when you run ppp with no arguments and end up
blowing away your default route !
 2001-06-21 15:42:26 +00:00
David E. O'Brien
3445e8ca81 Add etc/rc.d (looking to the future) 2001-06-21 01:10:30 +00:00
Hajimu UMEMOTO
d6a0444fff Change default value of rtadvd_enable to NO to be compatible with 
the following description in RFC2461:

    AdvSendAdvertisements
	    A flag indicating whether or not the router sends
	    periodic Router Advertisements and responds to
	    Router Solicitations.

	    Default: FALSE

	    Note that AdvSendAdvertisements MUST be FALSE by
	    default so that a node will not accidentally start
	    acting as a router unless it is explicitly
	    configured by system management to send Router
	    Advertisements.

Submitted by:	JINMEI Tatuya <jinmei@isl.rdc.toshiba.co.jp>
MFC after:	1 week
 2001-06-20 13:17:07 +00:00
Hajimu UMEMOTO
18379cf918 Add configuration for a FAITH IPv6-to-IPv4 TCP translator. 
To use a FAITH actually, you also need faithd(8) setup.
Please consult faithd(8) manpage.
 2001-06-19 19:27:51 +00:00
Greg Lehey
291f07e7f1 Add IBM "High Rate Wireless LAN PC Card", a rebadged Lucent WaveLAN/IEEE. 
MFC after: 2 weeks
 2001-06-19 01:21:22 +00:00
Daniel Baker
fd3a67762c add ircs, per IANA 
MFC after:	3 days
 2001-06-18 23:33:09 +00:00
Jens Schweikhardt
03f80507e5 Fix misindented esac. 
MFC after:	1 week
 2001-06-16 15:48:43 +00:00
David E. O'Brien
20d42fa8eb This commit was generated by cvs2svn to compensate for changes in r78344, 
which included commits to RCS files with non-trunk default branches.
 2001-06-16 07:16:14 +00:00
David E. O'Brien
e8b30e1e4c Import the NetBSD 1.5 RC system. 
Note that `rc' and `rc.shutdown' could not be imported because we already
have files with those names.
 2001-06-16 07:16:14 +00:00
David E. O'Brien
9d62501fd8 Import the NetBSD 1.5 RC system. 
Note that `rc' and `rc.shutdown' could not be imported because we already
have files with those names.
 2001-06-16 07:16:14 +00:00
Dima Dorfman
d997ca82d0 Explicitly set arpproxy_all and start_vinum to "NO" for consistency. 
PR:		28185
Submitted by:	Gordon Tetlow <gordont@bluemtn.net>
 2001-06-16 00:27:31 +00:00
Nik Clayton
4ed950ad98 Include a mention of WRKDIRPREFIX, useful when mounting /usr/ports readonly 
from another host.
 2001-06-15 08:35:57 +00:00
Dima Dorfman
84d86fba8d Pass -a to dmesg(8). 
PR:		26870
Submitted by:	Tomonobu AKIMOTO <akimoto@xephion.ne.jp>
 2001-06-14 04:30:46 +00:00
Poul-Henning Kamp
88627d6b19 Remember to install diskcheckd.conf 2001-06-13 16:39:23 +00:00
Anton Berezin
33ea028f0f Recognize and support new output which pkg_version(1) might produce. 
PR:             27707
Approved by:    bmah, markm
 2001-06-11 21:31:50 +00:00
Hajimu UMEMOTO
449eb73569 prefixcmd_enable was obsoleted by syncing recent KAME. New prefix(8) 
is just a shell script for backward compatibility.  Now, we always use
ifconfig(8) instead of prefix(8).

MFC after:	3 weeks
 2001-06-11 13:28:05 +00:00