Commit Graph

2891 Commits

Author SHA1 Message Date
Brian Somers
32706fb26f Allow group network to read ppp.log & slip.log.
Suggested by: Jesper Skriver <jesper@FreeBSD.org>
2001-09-03 11:35:17 +00:00
Robert Watson
1088a254de o Add sample syslogd_flags for "-ss" which causes syslogd not to bind
an inet socket.
2001-09-02 23:34:19 +00:00
Robert Watson
78eb04b942 o Note that some sites will want to select generally more conservative
permissions on some files, and give hints as to what those permissions
  might be.  Note also that the current more liberal permissions might
  get changed in future revisions.
2001-09-01 21:00:28 +00:00
Robert Watson
585514eb2d o More conservative permissions for kerberos.log: 600 instead of 644.
Reviewed by:	peter
2001-08-31 23:44:51 +00:00
Murray Stokely
9f63e1d07a Add an entry for the Zip 250.
PR:		i386/29639
Submitted by:	David Yeske <dyeske@yahoo.com>
2001-08-31 22:49:22 +00:00
Murray Stokely
0cf9956f3f Add entries for 3wire terminals. (carrier not supplied, so we set nc).
PR:		conf/26420
Submitted by:	Jon Passki <cykyc@yahoo.com>
2001-08-31 22:18:50 +00:00
Dima Dorfman
bdb6e9217b Make the 'echo' output for blanktime and scrnmap consistent with their
variable names.  There were minor differences in both cases, which were
needlessly confusing and inconsistent.
2001-08-31 15:29:24 +00:00
Alexander Langer
d33a962d07 Move /etc/defaults/make.conf to /usr/share/examples/etc/make.conf as
discussed on the arch@ mailinglist (after repo-copy).

sys.mk will .error if it finds /etc/defaults/make.conf but include
it anyways (this is the same behaviour as with the make.conf.local
removal).

/usr/share/examples/etc/make.conf has BDEFLAGS commented out now,
since it's only an example file.

Adjust all textes that talk about make.conf or defaults/make.conf to
match the new situation.
2001-08-30 22:44:51 +00:00
Alexander Langer
466df28c52 chown syntax is user:group now. 2001-08-29 19:59:30 +00:00
Alexander Langer
2d68fd8741 RIP all ports options, as discussed on arch@. 2001-08-29 19:38:17 +00:00
David E. O'Brien
cb2fb6f378 Remove more vestages of diskcheckd, which is now in ports/sysutils. 2001-08-29 05:39:07 +00:00
Brian Somers
15ed67d861 Remove diskcheckd.conf 2001-08-29 04:03:41 +00:00
David E. O'Brien
437cd38796 Remove `diskcheckd'. It is now in ports/sysutils.
Consensus on:	freebsd-current.
2001-08-28 23:00:28 +00:00
Mark Murray
17a6c94473 Tidy, reorder and adjust to more correctly reflect FreeBSD default
policy.
2001-08-26 18:15:32 +00:00
Dima Dorfman
573722f3f0 End sentence with a period. 2001-08-26 02:37:22 +00:00
Dima Dorfman
81b83ee95d $units is the canonical name for the number of units to create; use it.
PR:		29971
Submitted by:	Joseph Mallett <jmallett@xMach.org>
2001-08-23 22:19:53 +00:00
Jun Kuriyama
6d9e09d7d0 Invoke named with privilege of bind:bind.
Change pidfile location to /var/run/named/pid.
2001-08-23 13:34:45 +00:00
Hajimu UMEMOTO
4a84918dc9 fix typo. icmptype of destination unreach is not 2 but 1.
Submitted by:	kuriyama
2001-08-21 15:05:09 +00:00
Matt Jacob
94c152b8cb move forward the ability to MAKEDEV zs devices for TurboLaser 2001-08-21 00:03:28 +00:00
Mark Murray
468a061e69 More libss removal. 2001-08-20 12:39:23 +00:00
David Malone
1139160ec0 Clear up what the line "ALL : PARANOID : RFC931 20 : deny" means
to tcp wrappers. The description is a little long, but hopefully
accurate.
2001-08-18 14:22:52 +00:00
David E. O'Brien
d549989694 Add the `WANT_FORCE_OPTIMIZATION_DOWNGRADE' knob. If set to an integer
value, it forces GCC to not optimize above this level.  For intance, GCC
made with "WANT_FORCE_OPTIMIZATION_DOWNGRADE=1" is a good setting for the
Alpha platform when building ports.
2001-08-16 06:05:18 +00:00
Mark Murray
e95927c133 Add no_warn option to the "auth" lines. Minor tidy-up as well. 2001-08-15 20:12:27 +00:00
Andrey A. Chernov
f9f1ef64d1 Reflect main termcap v1.109 2001-08-15 03:27:52 +00:00
Andrey A. Chernov
86babaf9bf Add commented out example 2001-08-14 23:51:58 +00:00
Andrey A. Chernov
e01dfc9c69 Add/install /etc/opieaccess skeleton
Approved by:	markm
2001-08-14 23:38:31 +00:00
Dima Dorfman
f20347445f Sync the code that sucks in rc.conf and friends with what's in
rc.firewall6.  Specifically, don't do anything
if [ -z ${source_rc_confs_defined} ].  Not doing this leads to a problem
with dependencies: chkdepend will set, e.g., portmap_enable to YES if
some service that needs portmap is enabled, but rc.network sources
rc.firewall, which used to source defaults/rc.conf unconditionally,
which would result in portmap_enable being set back to NO.

PR:		29631
Submitted by:	OGAWA Takaya <t-ogawa@triaez.kaisei.org>
2001-08-14 05:50:19 +00:00
Mark Murray
37ee76af52 Remove the WANT_INSECURE_OPIE option - it is now a default. This is not
nearly as ominous as it sounds, and it allows OPIE to be used over SSH
and on xterms.

Requested by:	ache
Discussed on:	-security
2001-08-12 18:47:56 +00:00
Akinori MUSHA
f418fdfb89 Chagne MASTER_SITE_FREEBSD to MASTER_SITE_FREEBSD_ORG, because
MASTER_SITE_FREEBSD is already used in bsd.port.mk for some different
purpose.
2001-08-12 17:22:41 +00:00
Akinori MUSHA
000d8e5b75 Fix MASTER_SITE_RUBY. The listed master site is obsolete. 2001-08-12 17:09:19 +00:00
Akinori MUSHA
81030c6ed5 Add MASTER_SITE_FREEBSD. 2001-08-12 16:32:05 +00:00
Jens Schweikhardt
17720a4498 Add sgi_fam 391002, file alteration monitor.
PR:		25925
Submitted by:	Jeremy Norris <ishmael27@home.com>
MFC after:	5 weeks
2001-08-11 09:43:04 +00:00
David E. O'Brien
411c56e4bf Fix minor typo. 2001-08-09 15:36:03 +00:00
Nick Sayer
e87f98d4ff Now properly use logger's facility argument 2001-08-06 15:52:42 +00:00
Nick Sayer
1d0d467f53 Make the sample entries actually syntactically correct. :-/ 2001-08-05 20:26:03 +00:00
Nick Sayer
7759485ca3 Add a little pizzaz to the sample entries. :-) 2001-08-05 16:00:40 +00:00
Nick Sayer
a984786cdf Add some sample entries to illustrate battery state monitoring. 2001-08-05 15:45:21 +00:00
David Malone
d7f66e157e Remove duplicate ufsd entry. This seems to go back to the Sun's version
of the file.

PR:		29386
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
2001-08-02 12:55:37 +00:00
Robert Watson
f2419a7154 Default to disabling all inetd.conf entries, in particular, telnetd
and ftpd.  This more conservative default reduces the exposure of
freshly installed machines, which is especially valuable for machines
that receive minimal further configuration before being put into
production.  Generally speaking, SSH has superseded the use of both
telnet and ftp in many environments.  In light of recent remotely
exploitable security holes in both telnetd and ftpd, this choice
retains flexibility (both telnetd and ftpd daemons remain installed
and easily enableable) while protecting users who don't need the
additional risk.  This change brings our configuration into line with
the majority of other UNIX vendors, including OpenBSD and NetBSD.

To address the concerns of those requiring remote access via telnet
from first install, changes will shortly be committed to sysinstall
to provide the ability to edit inetd.conf during the installation
process, allowing telnetd and ftp to be re-enabled during the
installation process.

While I'm at it, slightly improve commenting for inetd.conf so that
it's more clear to users how to enable and disable services.
Further commenting to indicate the functions of various columns would
probably also be useful.

Reviewed by:	imp, chris, jake, nate, -arch, -stable
2001-08-02 02:19:56 +00:00
Doug Barton
778c176942 Scratch an itch of long standing by adding entries for the most
commonly used x11 ports
2001-08-01 20:13:49 +00:00
Doug Barton
48b3cebbee I could have sworn I did this already, but obviously I didn't. So,
take another stab at updating the IANA web page.
2001-08-01 19:48:12 +00:00
Gregory Neil Shapiro
9078d242bf Revert change to always include _FFR_TLS_O_T as it requires FEATURE(access_db)
Problem found by:	nsayer
2001-08-01 02:12:39 +00:00
Darren Reed
e58f466620 Merge in patch to automagically decide whether or not a kldload of ipfilter
is required into rc.network.

Person failed to use a real name so both email addresses from PR included
(Sent was different to From).

PR:		22998
Submitted by:	dl@leo.org/spock@empire.trek.org
2001-07-30 23:12:02 +00:00
Doug Barton
f45ae64135 Add an entry for the commonly used (although unofficial) kpop port.
PR:		conf/21551
Submitted by:	Luis Casillas <casillas@stanford.edu>
Reviewed by:	rwatson
2001-07-30 17:53:55 +00:00
David E. O'Brien
8e4e3be259 Document Bzip2's flag.
PR:		27901
Submitted by:	Anders Nordby <anders@fix.no> (stylistic changes by me)
2001-07-30 15:18:15 +00:00
Doug Barton
f5b72dbe84 Add a note about port 98 commonly being used for RH linuxconf,
(unofficially of course).

PR:		misc/21775
Submitted by:	Dann Lunsford <dann@greycat.com>
2001-07-30 06:19:27 +00:00
Mark Murray
55b3d2c67f Build standard directory for kerberos 5 (Heimdal) database. 2001-07-28 20:00:54 +00:00
Mark Murray
e7f2f42f1b Upgraded launchpad for kerberos. Noe kerberos IV OR kerberos 5
may be started at boot for kerberos servers.
2001-07-28 19:57:57 +00:00
Peter Wemm
791da841a1 Take -Wconversion out of BDECFLAGS. It is not particularly useful for
us anyway because it doesn't work right on the x86 and alpha.  On
K&R code, small ints would be promoted to int.  ANSI-C doesn't require
this and the small ints can be passed taking 8 or 16 bits of stack
space.  However, the x86 abi that we use *does* promote to 32 bit,
and the alpha ABI passes them in 64 bit registers so we dont have
that aspect of the problem here.  Losing float precision by having it
cast down to int because the funtion prototype specifies int is the
least of our problems.  -Wmissing-prototypes helps here anyway.
2001-07-27 16:23:53 +00:00
Dima Dorfman
614aed8497 Be consistent about how we quote commands that could be entered by the
user.
2001-07-27 12:25:55 +00:00