Commit Graph

5048 Commits

Author SHA1 Message Date
Rebecca Cran
66e29ee3f5 MFC r204820:
Install /etc/termcap.small .

PR:	conf/78419
Submitted by:	Eygene A.Ryabinkin <rea at mbslab.kiae.ru>
Approved by:	rrs (mentor)
2010-04-20 18:46:00 +00:00
Rui Paulo
288a242625 MFC r206427, r206706, r206771:
ubthidhci rc.d script to switch an USB bluetooth dongle from HID to
  HCI mode.
2010-04-20 12:07:16 +00:00
Pawel Jakub Dawidek
a3c8a78f40 MFC r204080:
Create a directory for hast's examples.
2010-04-19 04:54:34 +00:00
Pawel Jakub Dawidek
2b98f8400d MFC r204076,r204077,r204083,r205279:
r204076:

Please welcome HAST - Highly Avalable Storage.

HAST allows to transparently store data on two physically separated machines
connected over the TCP/IP network. HAST works in Primary-Secondary
(Master-Backup, Master-Slave) configuration, which means that only one of the
cluster nodes can be active at any given time. Only Primary node is able to
handle I/O requests to HAST-managed devices. Currently HAST is limited to two
cluster nodes in total.

HAST operates on block level - it provides disk-like devices in /dev/hast/
directory for use by file systems and/or applications. Working on block level
makes it transparent for file systems and applications. There in no difference
between using HAST-provided device and raw disk, partition, etc. All of them
are just regular GEOM providers in FreeBSD.

For more information please consult hastd(8), hastctl(8) and hast.conf(5)
manual pages, as well as http://wiki.FreeBSD.org/HAST.

Sponsored by:	FreeBSD Foundation
Sponsored by:	OMCnet Internet Service GmbH
Sponsored by:	TransIP BV

r204077:

Remove some lines left over by accident.

r204083:

Add missing KEYWORD line.

Pointed out by:	dougb

r205279 sys:

Simplify loops.
2010-04-18 21:14:49 +00:00
Weongyo Jeong
6fa37bd64a MFC r202610:
adds a hardware specific configuration file for uath(4).

  Pointed by:   sam
  Reviewed by:  imp, thompsa
2010-04-17 23:14:06 +00:00
Hajimu UMEMOTO
f76f001a47 MFC r206399, r206479: Disambiguate `IPs' to a more specific term. 2010-04-14 15:03:58 +00:00
Doug Barton
6cb7b50152 MFC r206248:
Change where we nap so that if pwait(1) returns but kill -0 still sees
a zombie we don't print an endless string of the same pid number until
the zombie exits.

While I'm here, local'ize the variables that this function uses.
2010-04-13 20:36:54 +00:00
Hajimu UMEMOTO
362fb32a52 MFC r200028, r201193, r201752, r201930, r202460, r200672, r206375:
Unify rc.firewall and rc.firewall6, and obsolete rc.firewall6 and
rc.d/ip6fw.
2010-04-07 19:04:36 +00:00
Edward Tomasz Napierala
807645566b MFC r201213:
Remove examples for pppd and SLIP-related stuff.

PR:		conf/144950
2010-04-06 10:58:40 +00:00
Jilles Tjoelker
a8eb33233c MFC r200818: rc.subr: Use pwait in wait_for_pids.
This waits for the requested process(es) to terminate, rather than polling
with an interval of 2 seconds.

If pwait is not available, the old method is used.

PR:		conf/132766
2010-03-28 20:19:41 +00:00
Joerg Wunsch
828bb4f8d4 r205509:
Add .snap to daily_clean_tmps_ignore; /tmp/.snap ist not supposed to
  be auto-removed (and /tmp is a filesystem of its own now by
  default).
2010-03-26 05:13:43 +00:00
Ed Schouten
63f82f9410 MFC r205329 and r205335:
Don't add the atrun-line to the crontab when MK_AT is set.

  This prevents spurious calls to sendmail every 5 minutes.
2010-03-24 12:14:59 +00:00
Jaakko Heinonen
0ebeb8cec4 MFC r205121:
Use an unique directory name instead of hardcoded /tmp/.diskless.
A malicious user could create a file named /tmp/.diskless and cause
the script to misbehave.

PR:		conf/141258
2010-03-23 16:45:29 +00:00
Jung-uk Kim
e651ff978b MFC: r203943
Remove COMPILATIONDATE from the default section.  This string is no longer
being substituted since r162063.
2010-03-22 19:50:57 +00:00
Hajimu UMEMOTO
69b9452545 MFC 204427: Add the shutdown KEYWORD. 2010-03-02 16:25:07 +00:00
Hajimu UMEMOTO
8ff070d563 MFC r203433:
Add rc.d script for the rtsold(8) daemon.

The rtsol(8) handles just one RA then exit.  So, the OtherConfig flag
may not be handled well by rtsol(8) in the environment where there are
multiple RA servers on the segment.  In such case, rtsold(8) will be
your friend.
2010-02-27 18:19:13 +00:00
Maksim Yevmenkin
da9808aa29 MFC: r203676
Introduce new rc.conf variable firewall_coscripts. It can be used to
specify list of executables and/or rc scripts that should be executed
after firewall starts/stops.

Submitted by:	Yuri Kurenkov <y dot kurenkov at init dot ru>
Reviewed by:	rhodes, rc@
2010-02-16 19:00:47 +00:00
Xin LI
f2176d8ce1 MFC r202130:
Set svn:executable to *.
2010-02-13 00:39:46 +00:00
Bruce M Simpson
1bb0287cb9 MFC Revision: 203574
Add sane-port (Scanner Access Now Easy) as port 6566.

Obtained from:  http://www.iana.org/assignments/port-numbers
2010-02-09 18:43:50 +00:00
Hajimu UMEMOTO
1cddf840fb MFC r203200; Allow use of -6 option to "server" and "peer" in ntp.conf. 2010-02-06 15:32:42 +00:00
Hajimu UMEMOTO
653c9e47e5 MFC r203342: ManageSieve has been added as port 4190:
http://www.iana.org/assignments/port-numbers
2010-02-04 16:59:36 +00:00
Gregory Neil Shapiro
33978ef79d MFC: Minor changes to force commit these files so new freebsd*.cf files are
built to use the new sendmail-8.14.4/cf tree.
2010-01-31 19:04:52 +00:00
Konstantin Belousov
d751048048 MFC r202880:
Do not check for existence of symlink source for the link action.
2010-01-29 20:42:03 +00:00
Edwin Groothuis
83858bcb89 MFC of 203066, 203067
Git has been added as port 9418:
http://www.iana.org/assignments/port-numbers

The Erlang Port Mapper Daemon (from ports/lang/erlang) has been
assigned official port number 4369 by IANA.

PR:		conf/143259 conf/113265
Submitted by:	Denny Lin <dennylin93@cnmc32.hs.ntnu.edu.tw> Jimmy Olgeni <olgeni@freebsd.org>
2010-01-29 11:30:40 +00:00
Doug Barton
8374d905b6 MFC r202582:
Update named.conf for documentation IP addresses and domains
2010-01-22 17:30:36 +00:00
Gavin Atkinson
f0bbc77504 Merge r201440, r201445 from head:
Don't complain when we encounter the "cache" source, it's valid.  Also fix
  the error message to include a line feed and not include a stray comma.

  Submitted by: Artis Caune  artis.caune gmail.com

  While here, change "> /dev/stderr" for more usual ">&2"

  Submitted by: jilles

PR:		bin/121671
Approved by:	ed (mentor, implicit)
2010-01-17 11:10:24 +00:00
Antoine Brodin
158c24fd61 MFC r200440 to stable/8:
Install firmware(9) examples.
2010-01-15 14:24:32 +00:00
Doug Barton
bda5bb9d4d MFC r201368:
Update named_flags comment regarding not using it for -u and -c
2010-01-15 03:04:43 +00:00
Doug Barton
06ee3ef09d MFC r201367, r201370:
Virtualize the location of "the configuration directory" instead of
hard-coding it to be /etc/namedb
2010-01-15 03:03:02 +00:00
John Baldwin
d46150d432 MFC 201215:
Add support for configuring vlan(4) interfaces as child devices similar to
wlan(4) interfaces.  vlan(4) interfaces are listed via a new 'vlans_<IF>'
variable.  If a vlan interface is a number, then that number is treated as
the vlan tag for the interface and the interface will be named '<IF>.<tag>'.
Otherwise, the vlan tag must be provided via a vlan parameter in a
'create_args_<vlan>' variable.

While I'm here, fix a few nits in rc.conf(5) and mention create_args_<IF> in
the description of cloned_interfaces.
2010-01-12 19:55:07 +00:00
John Baldwin
5e3b84c3d2 MFC 201522:
Expose the upper 256 ptys in the default devfs rules.  I should have updated
this when expanding the old pty(4) driver to use 512 ptys by default.  This
is more important for 7.x.
2010-01-11 18:42:29 +00:00
John Baldwin
618a79fc2b MFC 201216:
Remove a trailing reference to the obsolete vaps_<IF> variable.
2010-01-04 19:27:17 +00:00
Doug Barton
1950852fcf MFC r201036:
Delete some trailing whitespace
2009-12-30 19:25:40 +00:00
Doug Barton
79a07a2e0c MFC r200448:
Since the change to rc.subr in r198162 it's not necessary to specify
command in the rc.d script if we have a corresponding ${name}_program
entry, which we do for named.

Rename named_precmd to named_prestart to make it more clear and match
convention.

Move the command_args definition related to -u up into _prestart().
It (and the associated $named_uid value) are only used there, and
unlike required_* and pidfile don't need to be used until this stage.

Fix a silly bug that would only have affected people who were using
the new named_wait or named_auto_forward features, AND had set up an
rndc.conf file instead of using the automatically generated rndc.key.

For named_conf:
	Add "-c $named_conf" to command_args if it's not set to the
	default. If it is set to the default and we're using the base
	BIND it's not necessary. If we're using BIND from the ports
	the user is likely to have included it in _flags (due to long
	necessity for doing so) so don't duplicate that if it's set.

	Add $named_conf to required_files

MFC r200563:

The named process needs to have a "working directory" that it can
write to. This is specified in "options { directory }" in named.conf.
So, create /etc/namedb/working with appropriate permissions, and
update the entry in named.conf to match.

In addition to specifying the working directory, file and path names
in named.conf can be specified relative to the directory listed.
However, since that directory is now different from /etc/namedb
(where the configuration, zone, rndc.*, and other files are located)
further update named.conf to specify all file names with fully
qualified paths. Also update the comment about file and path names
so users know this should be done for all file/path names in the file.

This change will eliminate the 'working directory is not writable'
messages at boot time without sacrificing security. It will also
allow for features in newer versions of BIND (9.7+) to work as
designed.
2009-12-29 07:08:48 +00:00
Doug Barton
c08a53d0ad Re-apply the fix from r199029 (MFC from r198162) to allow
$name_program to override $command.

PR:		conf//141642
Submitted by:	Petr Lampa <lampa@fit.vutbr.cz>
2009-12-15 23:05:16 +00:00
Doug Barton
cd6eecd4c7 MFC r200377:
Update to the December 12, 2008 version of this file. The one
substantive change is to add the IPv6 address of L. The other
changes are all CAPS LOCK related.
2009-12-13 23:56:46 +00:00
Xin LI
a1b9e5fa76 MFC revisions 196550 and 196552:
Add a new rc.d script, static_arp, which enables the administrator to
statically bind IPv4 <-> MAC address at boot time.

In order to use this, the administrator needs to configure the following
rc.conf(5) variable:

 - static_arp_pairs: A list of names for static bind pairs, and,
 - a series of static_arp_(name): the arguments that is being passed to
   ``arp -S'' operation.

Example:
  static_arp_pairs="gw"
  static_arp_gw="192.168.1.1 00:01:02:03:04:05"

See the rc.conf(5) manual page for more details.
2009-12-08 18:23:51 +00:00
Hiroki Sato
3cec660ea4 MFC:
r197139
- Add afexists() to check if the specified address family exists
  on the system or not.

r197697
- Add AF_IPX and AF_NATM to afexists().
2009-12-07 07:41:29 +00:00
Hiroki Sato
a1c3a99ce5 MFC:
r197144:
- Add an extension of set_rcvar(), a new function set_rcvar_obsolete(),
  and $desc.

  The set_rcvar_obsolete() is to mark a variable as obsolete and define
  the new one.  More specifically, a warning is displayed when
  a variable is removed or changed in the source tree and the user
  still defines the old one.
2009-12-07 06:25:19 +00:00
Colin Percival
0cd4e30efa Disable SSL renegotiation in order to protect against a serious
protocol flaw. [09:15]

Correctly handle failures from unsetenv resulting from a corrupt
environment in rtld-elf. [09:16]

Fix permissions in freebsd-update in order to prevent leakage of
sensitive files. [09:17]

Approved by:	so (cperciva)
Security:	FreeBSD-SA-09:15.ssl
Security:	FreeBSD-SA-09:16.rtld
Security:	FreeBSD-SA-09:17.freebsd-udpate
2009-12-03 09:18:40 +00:00
Doug Barton
715542d57f MFC r198162:
Allow $name_program to override $command in a more robust way that
will not cause the value to be null if $command is not set.
2009-11-07 22:59:04 +00:00
Ed Schouten
f36e7051c7 MFC various commits back to stable/8:
SVN r197174:
  Make sure we never place the cursor outside the screen.

  For some vague reason, it may be possible that scp->cursor_pos exceeds
  scp->ysize * scp->xsize. This means that teken_set_cursor() may get
  called with an invalid position. Just ignore the old cursor position in
  this case.

  Reported by:  Paul B. Mahol <onemda gmail com>

SVN r198213:
  Make lock devices work properly.

  It turned out I did add the code to use the init state devices to set
  the termios structure when opening the device, but it seems I totally
  forgot to add the bits required to force the actual locking of flags
  through the lock state devices.

  Reported by:	ru

SVN r198215, r198217:
  Fix a typo in the jail(8) manpage.

  Submitted by: Jille Timmermans <jille quis cx>

SVN r198216:
  Fix qouting in a comment, to make it look more consistent

  Submitted by: Jille Timmermans <jille quis cx>

SVN r198223:
  Properly set the low watermarks when reducing the baud rate.

  Now that buffers are deallocated lazily, we should not use
  tty*q_getsize() to obtain the buffer size to calculate the low
  watermarks. Doing this may cause the watermark to be placed outside the
  typical buffer size.

  This caused some regressions after my previous commit to the TTY code,
  which allows pseudo-devices to resize the buffers as well.

  Reported by:  yongari, dougb
2009-11-01 10:30:30 +00:00
Christian Brueffer
51b79b08b8 MFC: r198314
Add empty watchdogd_flags.
2009-10-29 16:30:48 +00:00
Doug Barton
888d94cf9b MFC r197947:
In regards to the "Starting foo:" type messages at boot time, create
and employ a more generic solution, and use it in the individual rc.d
scripts that also have an $rc_quiet test:

1. Add check_startmsgs() to rc.subr.
2. In the rc.d scripts that use rc_quiet (and rc.subr) substitute
variations of [ -z "$rc_quiet" ] with check_startmsgs
3. In savecore add a trailing '.' to the end of the message to make it
more consistent with other scripts.
4. In newsyslog remove a : before the terminal '.' since we do not
expect there to be anything printed out in between to make it more
consistent.
5. In the following scripts change "quotes" to 'quotes' where no
variables exist in the message: savecore pf newsyslog
6. [Does not apply in RELENG_8]
7. In the following scripts separate the "Starting foo:" from the
terminal '.' to make them more consistent: moused hostname pf
8. In nfsclient move the message to its own line to avoid a style bug
9. In pf rc_quiet does not apply to the _stop method, so remove the
test there.
10. In motd add 'quotes' around the terminal '.' for consistency

Approved by:	re (kib)
2009-10-16 00:17:09 +00:00
Doug Barton
505c00fa5b MFC r196439:
Fix the typo mentioned in the PR, and one additional.
Fix caps while I'm here.

PR:		conf/138087
Submitted by:	Chris Petrik <c.petrik.sosa@gmail.com>
Approved by:	re (kib)
2009-10-14 03:31:37 +00:00
Doug Barton
d89eb6fc62 MFC r197297
Add a knob to show 'Starting foo:' messages when faststart is used,
such as at boot time.

MFC 197619

By popular acclaim, enable "Starting foo:" messages by default

Approved by:	re (bz)
2009-09-29 18:44:34 +00:00
Ken Smith
ac7d4c93c6 Remove extra debugging support that is turned on for head but turned off
for stable branches:

	- shift to MALLOC_PRODUCTION
	- turn off automatic crash dumps
	- Remove kernel debuggers, INVARIANTS*[1], WITNESS* from
	  GENERIC kernel config files[2]

[1] INVARIANTS* left on for ia64 by request marcel
[2] sun4v was left as-is

Reviewed by:	marcel, kib
Approved by:	re (implicit)
2009-09-10 14:04:00 +00:00
Remko Lodder
07c141a646 MFC r196787
Do the first step in removing lukemftpd from the base system. Disconnect
  it from the build.

  If you are using the FTP daemon, please consider using the port ftp/tnftpd
  which is the same FTP server, but newer and might have more/better
  functionality.

  This results in us providing only one ftp daemon by default.

  Reviewed by:        bz
  Approved by:        imp (mentor, implicit)
  MFC after:        3 days
  Silence from:        obrien

Approved by:	re (kib), imp (mentor, implicit)
2009-09-07 14:10:55 +00:00
Doug Barton
72d5a535fa MFC 196478:
Prior to the dire warning about values of network_interfaces other than
AUTO the biggest mistake users made was leaving lo0 off the list. Since
lo0 is effectively mandatory, check for it and add it to the list if
it's not there.

MFC 196523:
Improve the case test to detect the presence of lo0 in the list of
network_interfaces.
Submitted by:	Christoph Mallon <christoph.mallon@gmx.de>

Approved by:	re (kib)
2009-08-29 19:45:03 +00:00
Doug Barton
4bff593a8c MFC 196589:
In the loop through the list of interfaces in network6_interface_setup()
rtsol_interface gets reset to "yes" each time through the loop, but
rtsol_available does not. If a user has lo0 first in their list of
interfaces rtsol_available will get set to "no" the first time through
the loop and subsequent interfaces will not get rtsol'ed when they should.

Therefore change the conditional for the is_wired() test to _interface.

Approved by:	re (kib)
2009-08-27 17:53:25 +00:00