FreeBSD src
Go to file
rwatson 94944fe1ac Default to disabling all inetd.conf entries, in particular, telnetd
and ftpd.  This more conservative default reduces the exposure of
freshly installed machines, which is especially valuable for machines
that receive minimal further configuration before being put into
production.  Generally speaking, SSH has superseded the use of both
telnet and ftp in many environments.  In light of recent remotely
exploitable security holes in both telnetd and ftpd, this choice
retains flexibility (both telnetd and ftpd daemons remain installed
and easily enableable) while protecting users who don't need the
additional risk.  This change brings our configuration into line with
the majority of other UNIX vendors, including OpenBSD and NetBSD.

To address the concerns of those requiring remote access via telnet
from first install, changes will shortly be committed to sysinstall
to provide the ability to edit inetd.conf during the installation
process, allowing telnetd and ftp to be re-enabled during the
installation process.

While I'm at it, slightly improve commenting for inetd.conf so that
it's more clear to users how to enable and disable services.
Further commenting to indicate the functions of various columns would
probably also be useful.

Reviewed by:	imp, chris, jake, nate, -arch, -stable
2001-08-02 02:19:56 +00:00
bin style(9) 2001-08-01 05:12:39 +00:00
contrib Correct the version number. 2001-08-01 18:35:54 +00:00
crypto output_data(), output_datalen() and netflush() didn't actually guarantee 2001-07-23 21:52:26 +00:00
etc Default to disabling all inetd.conf entries, in particular, telnetd 2001-08-02 02:19:56 +00:00
games A good sysadmin always carries around a few feet of fiber. If he ever 2001-08-01 22:51:09 +00:00
gnu Update man page to actually match the source. 2001-08-01 06:23:00 +00:00
include Rename the GLOB_MAXPATH flag of glob(3) to GLOB_LIMIT to be compatible 2001-07-29 00:52:37 +00:00
kerberos5 add dependency for lex.o on roken.h (from "Alexander N. Kabaev" 2001-07-12 08:36:01 +00:00
kerberosIV generate ksrvtgt 2001-06-16 06:51:35 +00:00
lib mdoc(7) police: remove hard sentence breaks. 2001-08-01 16:07:50 +00:00
libexec Don't use SA_RESETHAND here. We gain nothing. 2001-07-31 15:29:50 +00:00
release Oops, note MFC of UFS_DIRHASH. 2001-08-01 20:08:37 +00:00
sbin MFS: in HISTORY section, fix release number of first appearance 2001-08-01 12:15:21 +00:00
secure Fixed world breakage when NOSHARED=yes. libmp now depends on libcrypto, 2001-07-30 14:36:19 +00:00
share MFS: in HISTORY section, fix release number of first appearance 2001-08-01 12:15:21 +00:00
sys Oops- don't set 'goal' twice when you mean to set 'nvrm' as well. 2001-08-02 00:34:56 +00:00
tools ISO_ -> ISO 2001-06-11 01:29:40 +00:00
usr.bin MFS: in HISTORY section, fix release number of first appearance 2001-08-01 12:15:21 +00:00
usr.sbin Add "use Fcntl" to resolve O_RDWR|O_CREAT|O_EXCL macros used in 2001-08-01 16:32:36 +00:00
COPYRIGHT Update to add the July 22, 1999 addendum. 1999-09-05 21:33:47 +00:00
Makefile Make it possible to build manpages for the entire source tree. 2001-03-27 08:43:28 +00:00
Makefile.inc1 Enable the new libmp in the build, and disable libgmp and its 2001-07-29 08:58:22 +00:00
Makefile.upgrade $Id$ -> $FreeBSD$ 1999-08-28 01:35:59 +00:00
README Slightly improve the description of "crypto". "DES" is a subset of 2000-08-31 17:59:01 +00:00
UPDATING Add, belated, entry for ed driver needing mii 2001-07-25 22:53:11 +00:00

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree, the most
commonly used one being ``world'', which rebuilds and installs
everything in the FreeBSD system from the source tree except the
kernel, the kernel-modules and the contents of /etc.  The
``buildkernel'' and ``installkernel'' targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process, documentation
for which can be found at:
   http://www.freebsd.org/handbook/kernelconfig.html
And in the config(8) man page.
Note: If you want to build and install the kernel with the
``buildkernel'' and ``installkernel'' targets, you have to build
world before.  More information is available in the handbook.

The sample kernel configuration files reside in the sys/i386/conf
sub-directory (assuming that you've installed the kernel sources), the
file named GENERIC being the one used to build your initial installation
kernel.  The file NOTES contains entries and documentation for all possible
devices, not just those commonly used.  It is the successor of the ancient
LINT file, but in contrast to LINT, it is not buildable as a kernel but a
pure reference and documentation file.


Source Roadmap:
---------------
bin		System/User commands.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc

games		Amusements.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberosIV	Kerberos package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

sys		Kernel sources.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  http://www.freebsd.org/handbook/synching.html