Commit Graph

2307 Commits

Author SHA1 Message Date
David E. O'Brien
d8e52ef8e0 Update rev 1.29 -- 'draft-manning-dsua' is now in its 3rd version. 2000-07-30 19:28:05 +00:00
Brian Feldman
c32527f202 Keep urandom as a link to random (but a hard link). 2000-07-30 16:18:48 +00:00
Brian Feldman
ae7ccf4237 Since the driver supports both (and may have different semantics for
both soon...), create urandom instead of the link to random.  It's
also what makes sense according to the make_dev(9)'s in random(4).
2000-07-30 03:15:11 +00:00
Eivind Eklund
8e4a14a9fa Change the defaults for portmap, sendmail and inetd to be not running them.
Make sysinstall override this on install, so the effective behavioural
change for a newly installed system is null.  Overall, this makes a system
with an empty /etc/rc.conf not run any network services, and makes the
FreeBSD-provided network services that are running visible in /etc/rc.conf
(instead of making people look through /etc/defaults/rc.conf to find the
things they need to disable to secure the system.)

Reviewed by:	jhb
Discussed with:	The usual cabal
2000-07-28 22:45:36 +00:00
David E. O'Brien
cc29b3af28 Add this empty version of this file to make it easier for pre-4.0 users
to find.
2000-07-27 22:53:42 +00:00
Jeroen Ruigrok van der Werven
6c992c4b00 Remove all mention of LANG and MM_CHARSET.
Add hints towards login.conf(5), which should be the preferred way
to set this systemwide without having to worry about the shell used.

PR:		9245
Submitted by:	martin Kammerhofer <dada@sbox.tu-graz.ac.at>
2000-07-27 11:39:33 +00:00
Sheldon Hearn
0e2c115b95 Close a window of readability when creating the entropy seed file,
which must not be world-readable.
2000-07-24 15:14:47 +00:00
Sheldon Hearn
ae193fb45b If the initial attempt to write ${entropy_file} to /dev/random fails
and the randomdev.ko module is not resident, try to load the module and
perform the write again.

Reviewed by:	markm
2000-07-24 13:40:41 +00:00
Marcel Moolenaar
11017a687b Backout addition of -L switch to mtree. Using -L breaks the
build process in too many cases. Adding mtree to bootstrap-tools
to solve this breaks the upgrade path because mtree needs a
libc that has strtofflags and fflagstostr.
2000-07-23 16:33:00 +00:00
Jeroen Ruigrok van der Werven
4c27efd514 Add weak_mountd_authentication, which is examined in /etc/rc.network.
Setting this to YES instead of its default NO, causes mountd to be
passed the -n flag, which allow non-root users mount requests to be served.
2000-07-23 11:31:09 +00:00
Andrey A. Chernov
0ce76c7dd0 Sync 2000-07-21 15:14:05 +00:00
Andrey A. Chernov
e3b66023f2 dd is too verbose writting entropy, redirect its output to /dev/null
Add period at the end of sentence
2000-07-20 19:25:12 +00:00
Andrey A. Chernov
29ce1dd302 Sync with main termcap, SGR 24,27 2000-07-20 18:55:07 +00:00
Nick Sayer
a5213f145a Add the tap driver.
The tap driver is used to present a virtual Ethernet interface to the
system. Packets presented by the network stack to the interface are
made available to a character device in /dev. With tap and the bridge
code, you can make remote bridge configurations where both sides of
the bridge are separated by userland daemons.

This driver also has a special naming hack to allow it to serve a similar
purpose to the vmware port.

Submitted by:	myevmenkin@att.com, vsilyaev@mindspring.com
2000-07-20 17:01:10 +00:00
Andrey A. Chernov
c03054e957 Sync with main termcap (AX, latin2 mono) 2000-07-20 14:08:21 +00:00
Hajimu UMEMOTO
be8302343e Add some examples for IPv6 addresses.
PR:		conf/18614
Submitted by:	James Housley <jim@thehousleys.net>
2000-07-19 13:05:58 +00:00
Brian Somers
a964c82566 Add a default ident string and do some minor whitespace adjustments 2000-07-19 10:16:29 +00:00
Ruslan Ermilov
572c5e2af7 Add /dev/agpgart for AGP.
Reviewed by:	dfr
2000-07-19 09:21:14 +00:00
Warner Losh
034aee24de Apm device is now safe to be world readable, so make it so. 2000-07-19 06:35:58 +00:00
Hajimu UMEMOTO
6941031461 Fix an unmatched opening quote.
PR:		conf/20000
Submitted by:	Alex Kapranoff <alex@kapran.bitmcnit.bryansk.su>
2000-07-18 08:44:17 +00:00
Sheldon Hearn
7a414e32d7 Improve on previous commit:
Don't inhibit the trailing newline for entropy-related messages.
Try harder to save the seed file on shutdown.

Reviewed by:	markm
2000-07-17 13:39:48 +00:00
Hajimu UMEMOTO
feeff03591 If ipv6_enable is set to yes, do IPv6 setup for PCCARD ethernet
card.  This is still at staring point and end node case only.
2000-07-17 12:33:57 +00:00
Mark Murray
b74aa5644c Add entropy caching. With this, some entropy is cached at shutdown
time, and this is used to reseed the random number generator at
boot time.

NOTE - this has no hope of working if you halt(); you need to
execute rc.shutdown to get the entropy stash.
2000-07-17 12:28:58 +00:00
Mitsuru IWASAKI
575c57687f PCCard entry cleanup:
- Remove unit numbers in config lines.
 - Remove all of logger lines and add logstr lines for some cards.  This
   changes reduced file size from 84k to 45k.
 - Use '/sbin/ifconfig $device delete' instead of /etc/pccard_ether_remove
   which haven't merge from PAO yet.
 - Cosmetic changes.
2000-07-16 17:33:54 +00:00
MIHIRA Sanpei Yoshiro
f20f83ab5f [Merge from PAO]
add about 67 entry and rewrite 18 entry
	change Xircom CompactCard Ethernet 10 entry
		config 0x20 -> auto

Reviewed by:	iwasaki
Obtained from:	PAO3
2000-07-16 14:33:47 +00:00
Andrey A. Chernov
106beffea3 Add -L to mtree calls since defaults changed back 2000-07-16 07:58:25 +00:00
Andrzej Bialecki
65594d9e65 *** empty log message *** 2000-07-15 10:18:46 +00:00
Robert Watson
a85978584c o Display only a short fortune at the root login prompt, as large ones
scroll of our pretty /etc/motd that helps the user know what to do.
o Change reflects similar setting in /share/skel
2000-07-15 03:25:14 +00:00
Neil Blakey-Milner
e3186dd555 Add to, don't overwrite, user-settable mountd_flags.
PR:		conf/15745
Submitted by:	Vivek Khera <khera@kciLink.com>
2000-07-14 13:03:36 +00:00
Peter Wemm
97e8e70bd1 Be consistant about WITH_ vs MAKE_ flags. We have a precedent of using
MAKE_foo for things like MAKE_KERBEROS etc.  Use that.  I managed to
confuse myself last time and made make.conf different to the code. ;-(

Reported by:  Jun Kuriyama <kuriyama@FreeBSD.org>
2000-07-14 09:18:21 +00:00
Peter Wemm
4944b91311 Change various log file modes from mode 664 to 644. Allowing group
wheel to trash logfiles is not exactly good security policy.  There have
been several gid wheel holes in ports.  Various other files were changed
as well (eg: the locate database were set to more restrictive modes (444)
by their generation scripts) so this should be safe for them.  utmp and
wtmp are mode 644 already on all the systems we checked.

Submitted by:  jkb
Reviewed by:   kris
2000-07-14 01:12:50 +00:00
Warner Losh
53318022a2 Add Xircom CompactCard Ethernet CFE-10 1.00.
Seems to work great in the type II cf<->pccard adapter that came with
the card.  Others have reported with different chipsets for the pccard
bridge that additional support is needed to make this card work with
the 3.3 volts it needs.
2000-07-12 01:20:55 +00:00
Warner Losh
33d70f97bf Remove irq 13 from the list of valid IRQs. It is used by the math co and
is therefore unavailable.  Also, IRQ13 isn't connected to the pcic chip
on most laptops.
2000-07-11 17:57:01 +00:00
Warner Losh
aae7f33e58 Merge latest cards from my laptop:
o The Shining PMIDE-ASC card is also used in Road Warrior's Bullet Drive, so
  add that to the comments.
o Eiger Lab's fujitsu based ethernet card: EPX-10BT (thanks to Ryan Losh for
  donating the card to the cause).
o Add place holder entry for the 3Com Megahertz 3CXEM556.  It doesn't work
  yet, but that will change in time.
2000-07-11 17:52:41 +00:00
David Malone
7c76474a64 Get the security script to list the indoe numbers of the suid files.
I've seen some script kiddie tools out there that fake the timestamps
but don't preserve the inode number.

Note - this will cause a lot of output the first time it is run!

PR:		18947
Reviewed by:	Sheldon Hearn <sheldonh@uunet.co.za>
2000-07-11 14:24:53 +00:00
MIHIRA Sanpei Yoshiro
c18552ea87 add Planex FNW-3600-TX 16bit FastEthernet DirectDock
Obtained from:	[bsd-nomads:13991] reported by Akihiro IIJIMA <aki@jp.FreeBSD.org>
2000-07-11 14:22:19 +00:00
Seigo Tanimura
fb0ef52838 Finally merge newmidi.
(I had been busy for my own research activity until the last weekend)

Supported devices:

SB Midi Port			(sbc + midi)
SB OPL3				(sbc + midi)
16550 UART			(midi, needs a trick in your hint)
CS461x Midi Port		(csa + midi)

OSS-compatible sequencer	(seq)

Supported playing software:

playmidi			(We definitely need more)

Notes:

/dev/midistat now reports installed midi drivers. /dev/sndstat reports
only pcm drivers. We need the new name(pcmstat?).

EMU8000(SB AWE) does not sound yet but does get probed so that the OPL3
synth on an AWE card works.

TODO:

MSS/PCI bridge drivers
Midi-tty interface to support general serial devices
Modules
2000-07-11 11:49:33 +00:00
MIHIRA Sanpei Yoshiro
3ce4a84317 add Billionton 56Kbps Fax Modem
PR:		18866
2000-07-10 08:31:14 +00:00
MIHIRA Sanpei Yoshiro
0074080b44 add Ericsson DC23 GSM modem card
PR:		18962
2000-07-10 08:21:54 +00:00
MIHIRA Sanpei Yoshiro
982fa16bd2 add Compaq Netelligent 10/100 PC Card
PR:		19007
2000-07-10 08:05:47 +00:00
Hajimu UMEMOTO
b0f768ec1d - Remove use of programs in /usr like sed as possible. In this
time, I have no idea if there is equivalence of printf.  So, stf
setup still depends on /usr.  In addition, prefix(8) and gifconfig(8)
are in /usr/sbin.  Should we move these into /sbin?

- Sync with latest stf behavior.  Latest stf doesn't have link-local
address.  And, latest stf is not gif but stf.
2000-07-09 20:12:50 +00:00
MIHIRA Sanpei Yoshiro
e63b255aa6 add Shining PMIDE-ASC CDROM
PR:	19236
2000-07-09 12:51:05 +00:00
Hajimu UMEMOTO
2150dfdae0 Add reverse lookup entry for ::1
Suggested by:	itojun
2000-07-07 17:20:23 +00:00
Brian Somers
15ed7d0b16 Add various system usernames (even though I try to avoid pppd!!!)
PR:		19717
Submitted by:	Tony Finch <dot@dotat.at>
2000-07-06 19:05:43 +00:00
Sheldon Hearn
57a2836fed The previous commit changed the df(1) units flag from -k to -h, which
produced human-readable output.  I like this, but it's certainly not
something to change willy-nilly without discussion.  Revert to -k.

Anyway, the new variable allows folks to pick any units flag that
fits their fancy.
2000-07-05 17:48:23 +00:00
Thomas Gellekum
f873f0c768 Now that the scripts in our ports support this, call the scripts
in ${local_startup} with the `stop' option on shutdown.
2000-07-05 12:40:26 +00:00
Sheldon Hearn
afc3b53891 Introduce a new option, daily_status_disks_df_flags, which specifies
the command-line arguments to be used for the call to df(1) when
daily_status_disks_enable is set to YES.

The name of the new variable was chosen by the maintainer of our
periodic hierarchy, Brian Somers.

PR:		19631
2000-07-05 10:47:01 +00:00
Sheldon Hearn
6aec4e0c37 Fix typo: "managment" -> "management".
PR:		19689
Submitted by:	SUGIMURA Takashi <sugimura@jp.FreeBSD.org>
2000-07-05 10:07:30 +00:00
Andrey A. Chernov
2881f702c7 Fix site_perl hierarchy 2000-07-04 18:11:41 +00:00
Peter Wemm
85a0c81531 Delete the RSAREF=YES example from make.conf - it is not used at all.
Add knobs for the optional crypto parts with some notes.
2000-07-03 20:52:01 +00:00