freebsd-dev/usr.sbin/sysinstall
Robert Watson 4880db4afd Tweak "system security profiles:
(1) Don't modify the configuration of the NFS server as a result of
    selecting a profile.  We already explicitly prompt for the NFS
    server configuration during install, and the user may not get
    much advance notice that we're turning it off again.  Instead,
    use profiles (for better or for worse) only for security tuning.

(2) Don't modify the sendmail setting as part of the security profile:
    use the default from /etc/defaults/rc.conf rather than explicitly
    specifying.  Note that the default in /etc/defaults/rc.conf is
    more conservative than the explicit rc.conf entry added by
    sysinstall during install, as it does not permit SMTP delivery.

(3) Update "congratulations on your profile" text to reflect these
    changes.

Note that security profiles now affect only the securelevel and sshd
settings.  My leaning would be to make sshd an explicit configuration
option, move securelevels to the security menu, and drop security
profiles entirely.  However, that requires more plumbing of sendmail
than I'm currently willing to invest.

We may want to add a "permit SMTP delivery" question to the install
process.
2003-09-28 05:21:23 +00:00
..
help Don't use UFS2 by default during the install process on PC98, as the 2003-04-21 20:57:20 +00:00
anonFTP.c Typo: s/seperately/separately 2002-08-06 20:36:02 +00:00
cdrom.c Check correct machine name. 2002-10-14 13:02:30 +00:00
command.c debugMsg() should end with "\n". 2002-11-01 02:05:05 +00:00
config.c Tweak "system security profiles: 2003-09-28 05:21:23 +00:00
devices.c Add a device driver for the Broadcom BCM4401 ethernet controller, 2003-09-09 18:17:23 +00:00
dhcp.c
disks.c Expand the fdisk size display toggling to include GB. 2003-08-19 17:51:49 +00:00
dispatch.c Remove the vestiges of the old pre-"X_AS_PKG" way we used to handled the 2003-08-19 23:23:27 +00:00
dist.c Remove the vestiges of the old pre-"X_AS_PKG" way we used to handled the 2003-08-19 23:23:27 +00:00
dist.h Remove the vestiges of the old pre-"X_AS_PKG" way we used to handled the 2003-08-19 23:23:27 +00:00
dmenu.c Fix 3 'cast to pointer from integer of different size' warnings. 2003-09-17 03:45:30 +00:00
doc.c Fix links to the FAQ and the Handbook 2002-08-01 10:20:59 +00:00
dos.c
floppy.c Use snprintf() instead of sprintf(). 2002-10-14 13:04:21 +00:00
ftp.c The MACHINE variable on pc98 is "i386". So, use "pc98" directly in PC98 case. 2002-10-14 13:06:13 +00:00
globals.c
http.c debugMsg() should end with "\n". 2002-11-01 02:05:05 +00:00
index.c Increase size of the static buffer used to hold runtime dependency list 2003-02-27 20:43:52 +00:00
install.c Add a new variable 'skipPCCARD'. This variable will cause sysinstall 2003-08-20 06:24:12 +00:00
install.cfg
installUpgrade.c KerberosIV deorbit sequence: Un-teach sysinstall about KerberosIV. I'm 2003-03-08 12:07:13 +00:00
keymap.c
label.c Add __amd64__ ifdefs to enable the bootblock handling code, slices, etc. 2003-05-24 21:12:14 +00:00
list.h
main.c The PCMCIA Standard dictates that those funny cards you insert into 2003-08-20 06:27:21 +00:00
Makefile Remove the vestiges of the old pre-"X_AS_PKG" way we used to handled the 2003-08-19 23:23:27 +00:00
media.c - Increase the maximum device name length. 2003-02-27 03:57:17 +00:00
menus.c - Another update to list of FTP sites 2003-09-28 03:34:49 +00:00
misc.c save_realloc() should use reallocf() to close memory leaks. 2003-01-06 17:11:46 +00:00
modules.c Add a new variable 'skipPCCARD'. This variable will cause sysinstall 2003-08-20 06:24:12 +00:00
mouse.c
msg.c
network.c debugMsg() should end with "\n". 2002-11-01 02:05:05 +00:00
nfs.c debugMsg() should end with "\n". 2002-11-01 02:05:05 +00:00
options.c The PCMCIA Standard dictates that those funny cards you insert into 2003-08-20 06:27:21 +00:00
package.c Add the ability to use Bzip'ed packages. 2002-04-30 22:40:06 +00:00
pccard.c The PCMCIA Standard dictates that those funny cards you insert into 2003-08-20 06:27:21 +00:00
rtermcap.c
sysinstall.8 The "krb5" distribution was merged with "crypto", record the death. 2003-05-22 18:41:16 +00:00
sysinstall.h Add a new variable 'skipPCCARD'. This variable will cause sysinstall 2003-08-20 06:24:12 +00:00
system.c * Negative #if's are harder to read as they don't tell exactly what arch 2002-10-11 22:30:09 +00:00
tape.c debugMsg() should end with "\n". 2002-11-01 02:05:05 +00:00
tcpip.c Add a new variable `noInet6', which if set disables IPv6 configuration 2003-02-27 21:04:34 +00:00
termcap.c
ttys.c
ufs.c
usb.c
user.c
variable.c Give users the ability to select an alternative MTA during the installation. 2003-07-12 15:33:09 +00:00
wizard.c Fix the wizardmodes 'write' command to not explode: Don't reference 2002-10-28 22:40:49 +00:00