Commit Graph

2965 Commits

Author SHA1 Message Date
Brooks Davis
40995998c5 Add a new rc.conf variable, cloned_interfaces, to create cloned
interfaces at boot.
2001-09-19 21:27:27 +00:00
Peter Wemm
06fec2cf89 The vfs.nfs.bufpackets sysctl is in the client, not the server. Move it
to the client section.  Turn off nfsiod, it no longer exists (now just
kthreads).  I need revisit nfsiod so that we have an argument passthrough.
2001-09-19 00:22:26 +00:00
Peter Wemm
9119623471 Userland part of nfs client/server split and cleanup. 2001-09-18 23:34:44 +00:00
Bill Fenner
febceb3e27 Handle the absence of net.inet.ip.fw.verbose_limit better, just like
brian's fix for v6 in rev 1.56.
2001-09-18 00:03:48 +00:00
Jonathan Lemon
7032f49f4d Change permissions for initial install of maillog file to 640. (from 644)
Pointed out by: rwatson
2001-09-17 02:04:20 +00:00
Jonathan Lemon
dbae8e5b46 Change maillog to have permissions of 640. Users shouldn't be able to
eavesdrop on other users' communications.
2001-09-17 01:33:15 +00:00
Brian Somers
b550f7176f Handle the absence of net.inet6.ip6.fw.verbose_limit better 2001-09-14 11:18:06 +00:00
Warner Losh
8dac8c268d Due to a bug in the ed driver, which leads to hangs when using it with
dhclient and pccard_ether, introduce the concept of a "settle time" to
pccard_ether with the new pccard_ether_delay variable.  Defaults to 5
seconds, which is enough time for the ed driver to finish its
autoconfiguration for newer Linksys based cards.  This also can
eliminate the ed0: timeout messages that happen at startup as well.

MFC: after RE says OK.
2001-09-13 06:18:07 +00:00
Ruslan Ermilov
4a31781613 Added forgotten share/zoneinfo/America/Kentucky. 2001-09-11 14:25:48 +00:00
Ruslan Ermilov
16763c30af s/password_format/passwd_format/
PR:		misc/30494
Submitted by:	"brian j. peterson" <rbw@myplace.org>
2001-09-11 07:01:47 +00:00
Warner Losh
54c5e69c3a Typo s/AirLAncer/AirLancer/g 2001-09-10 08:14:00 +00:00
Warner Losh
55b15701e3 clarify PCMLM56 status 2001-09-10 08:07:46 +00:00
Warner Losh
1e5d3cc62e The EXCard-10-PCMCIA entry was slightly bogus. 2001-09-10 08:05:29 +00:00
Warner Losh
154c742236 Add cs driver for IBM EtherJet card. Doesn't completely work yet, but
it won't work without it.
2001-09-10 04:08:28 +00:00
Warner Losh
3283cbb35f 2Mbps card from Teletronics. Looks like a generic OEM card for the
awi driver, but the MAC address isn't recognized, so maybe this is
wrong.
2001-09-10 03:30:47 +00:00
Warner Losh
99de8e9963 ELSA Air Lancer wireless card. Appears to be a Lucent OEM.
Submitted by: Eric Masson <e-masson@kisoft-services.com>
2001-09-10 03:18:21 +00:00
Warner Losh
a804e4ad3d Mihira-san says that this works for him. Linksys EtherFast 10/100 +
56k modem with the fat connector.

Submitted by: sanpei@sanpei.org (MIHIRA yoshiro)
Ignored since Jan 2001 by: imp
2001-09-09 23:58:09 +00:00
Warner Losh
f84d55e6fb Addtron AWP-100 wireless card.
Submitted by: Alfred Perlstein <bright@mu.org>
2001-09-09 23:42:26 +00:00
Warner Losh
b03d7b66b0 EZCard, not EXCard 2001-09-09 23:40:28 +00:00
Warner Losh
87c73af65e Speculatively commit fix for Surecom EP-427TX PCMCIA adapter. This
appears to be another OEM version of the Netgear FA411.  This is a
guess, since the original didn't include the flags, but this is too
similar to my netgear card...

Submitted by: neal@nelsonnet.org
2001-09-09 23:28:09 +00:00
Warner Losh
15ba1376a1 SMC EZ Card 10 PCMCIA
Submitted by: Goncharov D <gda@sani.ru>
2001-09-09 23:13:59 +00:00
Warner Losh
c6450b1091 Add NE-2000 compatible card sold by addron.
Submitted by: johs@copyleft.no
2001-09-09 23:10:38 +00:00
Warner Losh
fbd6d4e098 Add NetGEAR FA411 card. This appears to be based on the AX88190 chipset
and works with those flags.
2001-09-09 20:31:26 +00:00
Kris Kennaway
77fb35234d Run the uustat command as the uucp user, not as root. 2001-09-09 05:53:01 +00:00
Brian Somers
32706fb26f Allow group network to read ppp.log & slip.log.
Suggested by: Jesper Skriver <jesper@FreeBSD.org>
2001-09-03 11:35:17 +00:00
Robert Watson
1088a254de o Add sample syslogd_flags for "-ss" which causes syslogd not to bind
an inet socket.
2001-09-02 23:34:19 +00:00
Robert Watson
78eb04b942 o Note that some sites will want to select generally more conservative
permissions on some files, and give hints as to what those permissions
  might be.  Note also that the current more liberal permissions might
  get changed in future revisions.
2001-09-01 21:00:28 +00:00
Robert Watson
585514eb2d o More conservative permissions for kerberos.log: 600 instead of 644.
Reviewed by:	peter
2001-08-31 23:44:51 +00:00
Murray Stokely
9f63e1d07a Add an entry for the Zip 250.
PR:		i386/29639
Submitted by:	David Yeske <dyeske@yahoo.com>
2001-08-31 22:49:22 +00:00
Murray Stokely
0cf9956f3f Add entries for 3wire terminals. (carrier not supplied, so we set nc).
PR:		conf/26420
Submitted by:	Jon Passki <cykyc@yahoo.com>
2001-08-31 22:18:50 +00:00
Dima Dorfman
bdb6e9217b Make the 'echo' output for blanktime and scrnmap consistent with their
variable names.  There were minor differences in both cases, which were
needlessly confusing and inconsistent.
2001-08-31 15:29:24 +00:00
Alexander Langer
d33a962d07 Move /etc/defaults/make.conf to /usr/share/examples/etc/make.conf as
discussed on the arch@ mailinglist (after repo-copy).

sys.mk will .error if it finds /etc/defaults/make.conf but include
it anyways (this is the same behaviour as with the make.conf.local
removal).

/usr/share/examples/etc/make.conf has BDEFLAGS commented out now,
since it's only an example file.

Adjust all textes that talk about make.conf or defaults/make.conf to
match the new situation.
2001-08-30 22:44:51 +00:00
Alexander Langer
466df28c52 chown syntax is user:group now. 2001-08-29 19:59:30 +00:00
Alexander Langer
2d68fd8741 RIP all ports options, as discussed on arch@. 2001-08-29 19:38:17 +00:00
David E. O'Brien
cb2fb6f378 Remove more vestages of diskcheckd, which is now in ports/sysutils. 2001-08-29 05:39:07 +00:00
Brian Somers
15ed67d861 Remove diskcheckd.conf 2001-08-29 04:03:41 +00:00
David E. O'Brien
437cd38796 Remove `diskcheckd'. It is now in ports/sysutils.
Consensus on:	freebsd-current.
2001-08-28 23:00:28 +00:00
Mark Murray
17a6c94473 Tidy, reorder and adjust to more correctly reflect FreeBSD default
policy.
2001-08-26 18:15:32 +00:00
Dima Dorfman
573722f3f0 End sentence with a period. 2001-08-26 02:37:22 +00:00
Dima Dorfman
81b83ee95d $units is the canonical name for the number of units to create; use it.
PR:		29971
Submitted by:	Joseph Mallett <jmallett@xMach.org>
2001-08-23 22:19:53 +00:00
Jun Kuriyama
6d9e09d7d0 Invoke named with privilege of bind:bind.
Change pidfile location to /var/run/named/pid.
2001-08-23 13:34:45 +00:00
Hajimu UMEMOTO
4a84918dc9 fix typo. icmptype of destination unreach is not 2 but 1.
Submitted by:	kuriyama
2001-08-21 15:05:09 +00:00
Matt Jacob
94c152b8cb move forward the ability to MAKEDEV zs devices for TurboLaser 2001-08-21 00:03:28 +00:00
Mark Murray
468a061e69 More libss removal. 2001-08-20 12:39:23 +00:00
David Malone
1139160ec0 Clear up what the line "ALL : PARANOID : RFC931 20 : deny" means
to tcp wrappers. The description is a little long, but hopefully
accurate.
2001-08-18 14:22:52 +00:00
David E. O'Brien
d549989694 Add the `WANT_FORCE_OPTIMIZATION_DOWNGRADE' knob. If set to an integer
value, it forces GCC to not optimize above this level.  For intance, GCC
made with "WANT_FORCE_OPTIMIZATION_DOWNGRADE=1" is a good setting for the
Alpha platform when building ports.
2001-08-16 06:05:18 +00:00
Mark Murray
e95927c133 Add no_warn option to the "auth" lines. Minor tidy-up as well. 2001-08-15 20:12:27 +00:00
Andrey A. Chernov
f9f1ef64d1 Reflect main termcap v1.109 2001-08-15 03:27:52 +00:00
Andrey A. Chernov
86babaf9bf Add commented out example 2001-08-14 23:51:58 +00:00
Andrey A. Chernov
e01dfc9c69 Add/install /etc/opieaccess skeleton
Approved by:	markm
2001-08-14 23:38:31 +00:00
Dima Dorfman
f20347445f Sync the code that sucks in rc.conf and friends with what's in
rc.firewall6.  Specifically, don't do anything
if [ -z ${source_rc_confs_defined} ].  Not doing this leads to a problem
with dependencies: chkdepend will set, e.g., portmap_enable to YES if
some service that needs portmap is enabled, but rc.network sources
rc.firewall, which used to source defaults/rc.conf unconditionally,
which would result in portmap_enable being set back to NO.

PR:		29631
Submitted by:	OGAWA Takaya <t-ogawa@triaez.kaisei.org>
2001-08-14 05:50:19 +00:00
Mark Murray
37ee76af52 Remove the WANT_INSECURE_OPIE option - it is now a default. This is not
nearly as ominous as it sounds, and it allows OPIE to be used over SSH
and on xterms.

Requested by:	ache
Discussed on:	-security
2001-08-12 18:47:56 +00:00
Akinori MUSHA
f418fdfb89 Chagne MASTER_SITE_FREEBSD to MASTER_SITE_FREEBSD_ORG, because
MASTER_SITE_FREEBSD is already used in bsd.port.mk for some different
purpose.
2001-08-12 17:22:41 +00:00
Akinori MUSHA
000d8e5b75 Fix MASTER_SITE_RUBY. The listed master site is obsolete. 2001-08-12 17:09:19 +00:00
Akinori MUSHA
81030c6ed5 Add MASTER_SITE_FREEBSD. 2001-08-12 16:32:05 +00:00
Jens Schweikhardt
17720a4498 Add sgi_fam 391002, file alteration monitor.
PR:		25925
Submitted by:	Jeremy Norris <ishmael27@home.com>
MFC after:	5 weeks
2001-08-11 09:43:04 +00:00
David E. O'Brien
411c56e4bf Fix minor typo. 2001-08-09 15:36:03 +00:00
Nick Sayer
e87f98d4ff Now properly use logger's facility argument 2001-08-06 15:52:42 +00:00
Nick Sayer
1d0d467f53 Make the sample entries actually syntactically correct. :-/ 2001-08-05 20:26:03 +00:00
Nick Sayer
7759485ca3 Add a little pizzaz to the sample entries. :-) 2001-08-05 16:00:40 +00:00
Nick Sayer
a984786cdf Add some sample entries to illustrate battery state monitoring. 2001-08-05 15:45:21 +00:00
David Malone
d7f66e157e Remove duplicate ufsd entry. This seems to go back to the Sun's version
of the file.

PR:		29386
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
2001-08-02 12:55:37 +00:00
Robert Watson
f2419a7154 Default to disabling all inetd.conf entries, in particular, telnetd
and ftpd.  This more conservative default reduces the exposure of
freshly installed machines, which is especially valuable for machines
that receive minimal further configuration before being put into
production.  Generally speaking, SSH has superseded the use of both
telnet and ftp in many environments.  In light of recent remotely
exploitable security holes in both telnetd and ftpd, this choice
retains flexibility (both telnetd and ftpd daemons remain installed
and easily enableable) while protecting users who don't need the
additional risk.  This change brings our configuration into line with
the majority of other UNIX vendors, including OpenBSD and NetBSD.

To address the concerns of those requiring remote access via telnet
from first install, changes will shortly be committed to sysinstall
to provide the ability to edit inetd.conf during the installation
process, allowing telnetd and ftp to be re-enabled during the
installation process.

While I'm at it, slightly improve commenting for inetd.conf so that
it's more clear to users how to enable and disable services.
Further commenting to indicate the functions of various columns would
probably also be useful.

Reviewed by:	imp, chris, jake, nate, -arch, -stable
2001-08-02 02:19:56 +00:00
Doug Barton
778c176942 Scratch an itch of long standing by adding entries for the most
commonly used x11 ports
2001-08-01 20:13:49 +00:00
Doug Barton
48b3cebbee I could have sworn I did this already, but obviously I didn't. So,
take another stab at updating the IANA web page.
2001-08-01 19:48:12 +00:00
Gregory Neil Shapiro
9078d242bf Revert change to always include _FFR_TLS_O_T as it requires FEATURE(access_db)
Problem found by:	nsayer
2001-08-01 02:12:39 +00:00
Darren Reed
e58f466620 Merge in patch to automagically decide whether or not a kldload of ipfilter
is required into rc.network.

Person failed to use a real name so both email addresses from PR included
(Sent was different to From).

PR:		22998
Submitted by:	dl@leo.org/spock@empire.trek.org
2001-07-30 23:12:02 +00:00
Doug Barton
f45ae64135 Add an entry for the commonly used (although unofficial) kpop port.
PR:		conf/21551
Submitted by:	Luis Casillas <casillas@stanford.edu>
Reviewed by:	rwatson
2001-07-30 17:53:55 +00:00
David E. O'Brien
8e4e3be259 Document Bzip2's flag.
PR:		27901
Submitted by:	Anders Nordby <anders@fix.no> (stylistic changes by me)
2001-07-30 15:18:15 +00:00
Doug Barton
f5b72dbe84 Add a note about port 98 commonly being used for RH linuxconf,
(unofficially of course).

PR:		misc/21775
Submitted by:	Dann Lunsford <dann@greycat.com>
2001-07-30 06:19:27 +00:00
Mark Murray
55b3d2c67f Build standard directory for kerberos 5 (Heimdal) database. 2001-07-28 20:00:54 +00:00
Mark Murray
e7f2f42f1b Upgraded launchpad for kerberos. Noe kerberos IV OR kerberos 5
may be started at boot for kerberos servers.
2001-07-28 19:57:57 +00:00
Peter Wemm
791da841a1 Take -Wconversion out of BDECFLAGS. It is not particularly useful for
us anyway because it doesn't work right on the x86 and alpha.  On
K&R code, small ints would be promoted to int.  ANSI-C doesn't require
this and the small ints can be passed taking 8 or 16 bits of stack
space.  However, the x86 abi that we use *does* promote to 32 bit,
and the alpha ABI passes them in 64 bit registers so we dont have
that aspect of the problem here.  Losing float precision by having it
cast down to int because the funtion prototype specifies int is the
least of our problems.  -Wmissing-prototypes helps here anyway.
2001-07-27 16:23:53 +00:00
Dima Dorfman
614aed8497 Be consistent about how we quote commands that could be entered by the
user.
2001-07-27 12:25:55 +00:00
Brian Somers
c5f947aa7f Remove $daily_status_named_logs and figure out which /var/log/messages*
files to look an (in the same way that /etc/security does).

Don't single-quote $start, reducing it to an empty string.

MFC after:	3 days
2001-07-26 02:37:12 +00:00
Scott Long
4aa620cdc6 Add /dev/hpn? as an alias to /dev/aac? so that the HP version of the CLI
utility will work, and document it in the manpage.

MFC after:	3 days
2001-07-25 22:36:17 +00:00
Hajimu UMEMOTO
0e9ea6e71e pass any NS/NA/toobig.
Requested by:	itojun
MFC after:	5 days
2001-07-24 13:37:06 +00:00
Doug Barton
30b0725071 Add ports for sshell, ldaps, rsync, ftps-{data|control}, ircs, and
correct some ommissions of udp ports.

Update IANA web page.

Clean up/correct some comments. I went a little further than the PR.

PR:		conf/23416
Submitted by:	Rudolf Cejka <cejkar@dcse.fee.vutbr.cz>
2001-07-24 09:28:18 +00:00
Hellmuth Michaelis
0425c069fe change the default for isdn_fsdev to NO. specifying a device here
results in a potential conflict with a getty running on that device.
PR:		26818
Submitted by:	Clement Ballabriga <clement@asso.ups-tlse.fr>
2001-07-23 14:24:31 +00:00
Gregory Neil Shapiro
f88f925efc If the user sets SENDMAIL_MC to /etc/mail/sendmail.mc, install is told to
install /etc/mail/sendmail.cf to /etc/mail/sendmail.cf and exits with an
error:

===> etc/sendmail
install -c -o root -g wheel -m 644 /etc/mail/sendmail.cf /etc/mail/sendmail.cf
install: /etc/mail/sendmail.cf and /etc/mail/sendmail.cf are the same file
*** Error code 64

Catch this in the Makefile and don't call install if the source and target
are the same file.

Reported by:	Alexandr Listopad <laa@reis.zp.ua>
MFC after:	1 week
2001-07-23 02:19:02 +00:00
Gregory Neil Shapiro
f4843be999 New make knob, SENDMAIL_M4_FLAGS, modifies the flags passed to m4 when
building a .cf file from a .mc file.

Include -D_FFR_TLS_O_T to enable tls policy control since the sendmail binary
build enables that FFR as well.

PR:		conf/28361
MFC after:	1 week
2001-07-23 01:33:54 +00:00
Warner Losh
b554a656b3 Add entry for SMC 2632W card.
Submitted by: lots of people, most recently by Mike Buchanon

Also, Tried to clean up the comments about IRQs to match the new world
order.
2001-07-22 18:13:19 +00:00
Hellmuth Michaelis
f22083caeb add directory i4brunppp.
Pointed out by: David H. Wolfskill david@catwhisker.org and
                Crist J. Clark <cristjc@earthlink.net>
2001-07-22 09:40:58 +00:00
Nick Sayer
e4feb76c8b The MA401 is a Prism II
Approved by:	imp
2001-07-21 23:11:13 +00:00
Hajimu UMEMOTO
d35e2ab4ce - Allow link-local multicast traffic for client.
- Allow ICMPv6 destination unreach, packet too big and NS/NA.
- RIPng also uses link-local to link-local.

MFC after:	1 week
2001-07-21 19:59:35 +00:00
Hajimu UMEMOTO
bd089fdbc0 Do more strict checking for an interface.
Suggested by:	matusita@jp.FreeBSD.org
MFC after:	1 week
2001-07-20 18:08:17 +00:00
Hajimu UMEMOTO
bb697a7fcb - Avoid to select an interface which is not good for RA/RS.
Submitted by:	sakane@kame.net
- Avoid to select lo0 or faith for a default interface.
2001-07-19 12:37:22 +00:00
Brian Somers
cce7f73d72 Don't try to remove directories unless we've emptied them first
Submitted by:	NIIMI Satoshi <sa2c@and.or.jp>
PR:		28355
MFC after:	1 week
2001-07-19 12:08:24 +00:00
John Baldwin
7bbf2ac162 sysctl(8) doesn't need '-w' to write to sysctl variables anymore. 2001-07-17 22:03:19 +00:00
Peter Pentchev
1d17292c23 Add a script_name_sep rc.conf knob to specify the IFS character
for separating the startup scripts' list into individual filenames.

Run the shutdown scripts in reverse alphabetical order, so dependent
services are stopped before the services they depend upon.

Reviewed by:	-arch, -audit
MFC after:	3 weeks
2001-07-17 14:33:52 +00:00
Mark Murray
caa78f33ed Add OPIE examples.
Tidy up columns.

Fix pam_wheel options.
2001-07-14 08:46:56 +00:00
Gregory Neil Shapiro
eac481ece9 MAPS is becoming a subscription (fee based) service, warn users
ORBS is gone

MFC after:	1 day
2001-07-13 21:51:28 +00:00
Mark Murray
b4248e7919 Provide a hint for the OPIE 'insecure' mode. 2001-07-10 17:11:02 +00:00
Nick Sayer
dada46cb22 The Netgear card works for me under 'wi'. 2001-07-07 20:38:44 +00:00
Ben Smithurst
f5b106aeb5 Add older CD types, matcd, mcd, scd.
Submitted by:	imp
2001-07-04 18:33:01 +00:00
Ben Smithurst
8173aec16a Exclude acd*, cd*, and md* from being checked by default. 2001-07-04 17:47:23 +00:00
Hajimu UMEMOTO
cefe8a2051 Show IPv6 denied packets.
MFC after:	1 week
2001-07-04 12:49:17 +00:00
Brooks Davis
cdb5d37b3e Create gif devices in the "gifconfig" stage while configuring them.
Reviewed by:	ru, ume
Obtained from:	NetBSD
MFC after:	1 week
2001-07-02 21:08:48 +00:00
Assar Westerlund
80631942e5 add MR-AFS port numbers 2001-07-02 16:03:50 +00:00
Hajimu UMEMOTO
cfb687fab8 Change default of ipv6_default_interface to NO. This is meaningless
in most cases and rather harmful.

Reported by:	Kevin Oberman <oberman@es.net>
MFC after:	1 week
2001-06-28 21:45:47 +00:00