Commit Graph

3477 Commits

Author SHA1 Message Date
Robert Watson
dbd8d5b2dd Don't install old LOMAC include files; do install new mac_lomac
include files.

Approved by:	re (jhb)
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-12-03 15:05:32 +00:00
Warner Losh
406259c133 Two fixes for devd:
1) Move devd to the start of the head of the boot process rather than the end.
2) Disable devctl if devd is disabled.
2002-11-30 00:40:53 +00:00
Ruslan Ermilov
cd96609654 Removed the vestiges of modems(5).
Approved by:	re
2002-11-27 16:45:10 +00:00
Robert Watson
881a0ee9b5 Update rc scripts to load mac_lomac instead of lomac.
Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:51:03 +00:00
Hajimu UMEMOTO
3cea219898 compliance with RFC3152.
PR:		standards/45557
Submitted by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
Approved by:	re
2002-11-26 07:55:44 +00:00
Tom Hukins
44e7a90898 Clarify adjkerntz(8) note and use complete sentences in comments.
PR:		misc/45493
Approved by:	re (rwatson)
2002-11-22 16:13:39 +00:00
Julian Elischer
aa0382fd00 Make directory for bluetooth include files. 2002-11-21 00:36:19 +00:00
Thomas Quinot
da509dd293 Do not emit a message on stderr when one of the compared files
is shorter than the other.

Reviewed by:	roberto
MFC after:	3 days
2002-11-16 14:58:39 +00:00
Thomas Quinot
68c2bacd8d Remove incorrect output redirection.
Reviewed by:	roberto
Committed from:	EuroBSDCon Amsterdam
MFC after:	3 days
2002-11-16 14:57:12 +00:00
Ruslan Ermilov
1696b51df2 Backout rev. 1.263.
Approved by:	jmallett
2002-11-15 18:44:09 +00:00
Ruslan Ermilov
11aa179923 Fixed two typos in comments. 2002-11-15 08:26:36 +00:00
David E. O'Brien
a6f8d995f3 [DAIVD O'BRIEN's OPINION]
Head off what I think is an abuse of the TRB, and disable lukemftpd.
2002-11-12 17:31:12 +00:00
Warner Losh
91618540a1 Turn off devd until I have a devd.conf file that I can install one
that does no harm.
2002-11-12 07:10:45 +00:00
Warner Losh
4cb1a7dfa3 Add devd_enable
Submitted by: dougb
2002-11-10 09:13:31 +00:00
Gordon Tetlow
59de601c12 By popular demand, make the debug log to syslog.
Remove an extraneous return too.
2002-11-09 17:34:21 +00:00
Warner Losh
7b13078b41 Add devd to the mix. It should run basically last at this point.
# I've tested this, but only lightly, so please email me with problems.
2002-11-09 07:45:53 +00:00
Gordon Tetlow
fd750dbd4c Diff reduction to NetBSD:
Fix a minor grammer nit.
Get rid of _echo that uses logger and just call logger in the 3 routines
that need it.
Add a comment referencing rc.conf(5) in the case of an incorrectly set
variable.

This pulls rc.subr up to 1.51 of rc.subr. I skipped 1.49 (systrace support)
since I don't have systrace.

Obtained from:	NetBSD
2002-11-08 17:06:15 +00:00
Doug Barton
a0c161c4e4 Import the latest hints file from Internic. The most important change
is that J has moved, however I'm sure you'll all be very disappointed
to hear that you can no longer retrieve this file via gopher.
2002-11-06 09:21:39 +00:00
Bill Fenner
04b3b6443c Force rpcbind to start even if it wasn't enabled. This solves the ypbind
problems people were having at startup.

Approved by:    re
2002-11-04 20:51:20 +00:00
Mark Murray
44b308453a Restore /var/games; lots of ports' games use it. 2002-11-04 07:50:48 +00:00
Hajimu UMEMOTO
7b988fe73c Add IPv6 setup for ipfilter. `ipv6_ipfilter_rules' was added
to specify rules definition file for ipfilter.  The default is
/etc/ipf6.rules.  If there is a file which is specified by
'ipv6_ipfilter_rules', IPv6 rule is installed.

Reviewed by:	Ronald van der Pol <Ronald.vanderPol@rvdp.org>
MFC after:	1 week
2002-11-02 08:21:26 +00:00
Gordon Tetlow
cbde04a9b7 Wrap test case in an if statement to avoid crunching a return value. 2002-10-31 02:06:05 +00:00
Anton Berezin
d8011e5791 Remove Perl bits still lurking in BSD.local.dist. It is a
responsibility of lang/perl5 to deal with those nowadays.

Requested by:	kkenn
2002-10-29 16:48:03 +00:00
David E. O'Brien
a029577b46 Tweak the warning language. 2002-10-29 08:41:12 +00:00
Bill Fenner
be9faa3290 Fix "err" usage.
PR:		44284
Submitted by:	Sergey Mokryshev <mokr@mokr.net>
2002-10-26 00:18:06 +00:00
Bill Fenner
dab1b45261 Fix two typos. Using "-eq" instead of "=" in a [ caused an error when
an entry in /etc/sysctl.conf didn't exist.  Fixing this exposed a minor
typo "exits" vs. "exist".

However, there doesn't appear to be any provision to run this with
the "lastload" argument, meaning that the error will never appear.
2002-10-25 23:02:54 +00:00
Andrey A. Chernov
8f47eb5b3a Add lt_LT.ISO8859-13 2002-10-25 22:00:34 +00:00
Mark Murray
0dfb60ca82 No need for this config file; games are gone. 2002-10-25 19:11:19 +00:00
Thomas Quinot
77ee1b9798 Add newly-added sripts to FILES.
Reviewed by:	roberto
2002-10-25 15:23:26 +00:00
Thomas Quinot
7644e396f3 Add a new /etc/periodic/security script to check for packets
rejected by ipfilter (510.ipfdenied), and a corresponding periodic.conf
knob (daily_status_security_ipfdenied_enable).

Reviewed by:	roberto
Approved by:	re@
2002-10-25 15:16:54 +00:00
Thomas Quinot
cb9eff8a9e Factor out code across various /etc/periodic/security scripts into a
separate file, /etc/periodic/security/security.functions.

Reviewed by:	roberto (mentor)
Approved by:	re@
2002-10-25 15:14:16 +00:00
Luigi Rizzo
65b8577640 Fix a bug in MAKEDEV -- when creating /dev/usb, the code was using
whatever random value was already in $unit. It happened to work
because the variable is often unset, but this is not always the
case e.g. when you call "MAKEDEV sio2 usb ..."

This affects -stable as well.

Reviewed by: n_hibma
Silence from: re
MFC after: 3 days
2002-10-24 17:59:58 +00:00
Robert Watson
93af0c0187 # WARNING: lukemftpd does not support PAM, MAC, per-class nologin files,
# or any login.conf resource limits or features; use it only if this is
# appropriate for your environment.  If you require these features, use
# the regular FreeBSD ftpd below.

Discourage users from using lukemftpd if they rely any of these standard
FreeBSD features that are fully supported by our native ftpd.  There
may be other features that are not yet supported that I have not yet
discovered.
2002-10-24 15:46:10 +00:00
Robert Watson
bac8e8742b Install mac_partition include files.
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-24 15:25:37 +00:00
Poul-Henning Kamp
4d1ad8751d Invert the logic of the NO_MAKEDEV options to match the 5.0-R default install. 2002-10-22 15:01:50 +00:00
Robert Watson
26c0d98697 Hook up a sample mac.conf to the install. The sample basically
tells applications to print labels for all of the TrustedBSD-
generated policies, if they are present.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-22 14:38:49 +00:00
Mark Murray
dc2f663b39 Do not build the majority of the games. Remaining are the
"utility-like" games and everyone's favourite, fortune(6).
2002-10-20 11:18:56 +00:00
Scott Long
f9d186edc8 After much delay and anticipation, welcome RAIDFrame into the FreeBSD
world.  This should be considered highly experimental.

Approved-by:	re
2002-10-20 08:17:39 +00:00
Andrey A. Chernov
cb599ce2c1 Add sr_YU locale directories
Submitted by: Toni Andjelkovic <toni@soth.at>
2002-10-19 12:56:56 +00:00
Thomas Moestl
9f29ec17e0 Install the include files in sys/dev/ofw. 2002-10-18 15:30:50 +00:00
Sam Leffler
4b70617d04 install "fast ipsec" include files 2002-10-18 04:21:29 +00:00
Robert Watson
64ac587b8a Exempt the "wheel group requirement" by default when su'ing to root if
the wheel group has no explicit members listed in /etc/group.  This adds
the "exempt_if_empty" flag to pam_wheel in the default configuration;
in some environments, it may be appropriate to remove this flag, however,
this default is the same as pre-pam_wheel.

Reviewed by:	markm
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-18 02:39:21 +00:00
Maxim Sobolev
119b9f09e9 Fix silly typo: loacal --> local. 2002-10-17 23:46:32 +00:00
Giorgos Keramidas
cc5ce63097 Replace old, not-working URL for an online index of DNS blacklist
servers with a reference to the Google directory.

Reviewed by:	gshapiro
MFC after:	1 week
2002-10-16 22:52:56 +00:00
Robert Watson
190a0059cf Remove root from the 'guest' group: missed in a previous pass.
Spotted by:	jhb
2002-10-14 20:55:49 +00:00
Robert Watson
975819b705 Remove root from the kmem, sys, tty, and staff groups in the default
configuration.  Root privileges override DAC on local file systems and
therefore root does not generally need to be a member of a group to
access files owned by that group.  In the NFS case, require explicit
authorization for root to have these privileges.

Leave root in operator for dump/restore broadcast reasons; leave root
in wheel until discrepencies in the "no users in wheel means any user
can su" policy are resolved (possibly indefinitely).
2002-10-13 17:00:37 +00:00
Robert Watson
7b2c73b73d For consistency with other entries in group, don't put the daemon or
xten users in their groups explicitly--we pick that up from the gid
field in master.passwd.
2002-10-13 16:26:26 +00:00
Jens Schweikhardt
0de35d0351 s/dependancy/dependency/ 2002-10-12 13:49:21 +00:00
Jens Schweikhardt
143085107b Fix style bugs:
* Space -> tabs conversion.
* Removed blanks before semicolon in "if ... ; then".
* Proper indentation of misindented lines.
* Put a full stop after some comments.
* Removed whitespace at end of line.

Approved by:	silence from gordon
2002-10-12 10:31:31 +00:00
Dima Dorfman
2dbe6947fa Aesthetics: Output a prefix before sourcing rc.local as the old rc
script did.  Stuff in rc.local frequently has lines like
"echo -n ' service_name'" which look ugly without a prefix and a
trailing period.  Likewise for rc.shutdown.local for consistency.
2002-10-12 07:23:43 +00:00