Commit Graph

3090 Commits

Author SHA1 Message Date
Sheldon Hearn
ba0d15f2d7 Introduce new shell functions hexdigit, hexprint and zeropad.
Use these new functions instead of printf(1), which is scheduled for
removal as a shell builtin command, and which will not be available as a
standalone utility if MAKEDEV is run prior to mounting /usr.

Requested by:	knu
2001-11-20 17:24:35 +00:00
Brian Somers
6eb9bd2d1f Handle wtmp.0 being compressed
PR:		32113
Submitted by:	Yar Tikhiy <yar@comp.chem.msu.su>
MFC after:	1 week
2001-11-20 15:01:24 +00:00
Hajimu UMEMOTO
12b3cd1783 The rtsol must be done before the alias processing.
PR:		conf/31366
Submitted by:	gshapiro
MFC after:	1 week
2001-11-20 12:51:12 +00:00
Gregory Neil Shapiro
c8e968571f Since buildworld builds cf files specified in SENDMAIL_ADDITIONAL_MC,
installworld should install them.

PR:		29928
Submitted by:	wollman
MFC after:	3 days
2001-11-20 03:41:05 +00:00
Gregory Neil Shapiro
74cc11c2df Handle the sendmail_outbound_enable knob in the start target.
PR:		32033
MFC after:	3 days
2001-11-20 03:31:54 +00:00
Sheldon Hearn
b695d548a3 Use shell functions for printing hex instead of printf(1) so that
printf(1) can be dropped from the system shell as a shell builtin.
2001-11-19 11:41:51 +00:00
Ruslan Ermilov
633621512e Apply README style guidelines (this time checked). 2001-11-19 10:10:27 +00:00
Warner Losh
84f453281c Avaya Wireless PCCARD
Submitted by: Ants Aader <ants@kernel.ee>
2001-11-19 01:51:40 +00:00
Warner Losh
3033a4df0e Add Xircom wireless card from pir@pir.net 2001-11-18 06:01:09 +00:00
Ian Dowse
2e40803106 Add support for making the Coda /dev/cfsN devices.
PR:		conf/22695
Submitted by:	Kenneth Ingham <ingham@i-pi.com>
2001-11-18 00:20:08 +00:00
Gregory Neil Shapiro
ca8b9ed373 Add two new accounts/groups for sendmail:
smmsp - sendmail 8.12 operates as a set-group-ID binary (instead of
set-user-ID).  This new user/group will be used for command line
submissions.  UID/GID 25 is suggested in the sendmail documentation and has
been adopted by other operating systems such as OpenBSD and Solaris 9.

mailnull - The default value for DefaultUser is now set to the uid and gid
of the first existing user mailnull, sendmail, or daemon that has a
non-zero uid.  If none of these exist, sendmail reverts back to the old
behavior of using uid 1 and gid 1.  Currently FreeBSD uses daemon for
DefaultUser but I would prefer not to use an account used by other
programs, hence the addition of mailnull.  UID/GID 26 has been chosen for
this user.

This was discussed on -arch on October 18-19, 2001.

MFC after:	1 week
2001-11-17 21:24:45 +00:00
Guido van Rooij
42ea95e63e Change mode for var/db/ipf to 0700 2001-11-17 12:21:29 +00:00
Warner Losh
d1b4e2cca1 GVC 10Mbps Ethernet Card
PR:		30329
Submitted by:	David Xu <davidx@viasoft.com.cn>
2001-11-15 05:54:25 +00:00
Warner Losh
90626c5dd4 Add Compaq WL110 PC Card to the list.
PR:		31023
Submitted by:	wilko
2001-11-15 05:49:18 +00:00
Crist J. Clark
6d852b5bdb After further discussion on -CURRENT, some people (jhb) do not like
the idea of not masking passwords on comments in case the
administrator comments out an entry without clearing the
password. Instead completely ignore comments (since they have no
security impact) when doing the diff of the old and new passwd file.

Suggested by:	rwatson
2001-11-14 09:30:01 +00:00
Sheldon Hearn
ce76d9c108 Avoid unnecessary calls to expr(1) by using standard shell arithmetic
expansion instead.
2001-11-14 06:35:43 +00:00
Makoto Matsushita
3e7b2f7461 sysinstall complains about creating acd0t* devices while all dists are
extracted and recreating device files.

Without this, you'll see following messages when 'MAKEDEV all':
	[:  : out of range
	[:  : out of range
	acd0t is invalid -- can't have more than 32 devices or 169 tracks

Reported by: David Syphers <dsyphers@uchicago.edu> (at current@FreeBSD.org)
2001-11-13 18:07:14 +00:00
Crist J. Clark
c2f9738fda No need to hide stuff in the $FreeBSD$ tag or in other comments like,
Backup passwd and group files:
  1c1
  < # $FreeBSD:(password):09:07 peter Exp $
  ---
  > # $FreeBSD:(password):27:16 ache Exp $

MFC after:	1 week
2001-11-11 07:15:19 +00:00
Mark Murray
92678c2908 Make rsh(d) more secure (Hah!) by not defaulting PAM to promiscuously
accepting connections.

Add KDE entries.

Committed From:	BSDConEU Terminal Room
2001-11-10 14:23:07 +00:00
Garrett Wollman
e7df26079b Add share/zoneinfo/North_Dakota in preparation for tzdata update. 2001-11-09 18:58:07 +00:00
Bill Fenner
85c9d676b5 Update the nsswitch.conf -> host.conf generator to handle criteria,
continuation lines, extra whitespace, and to use the last matching
 line in the file.  This syncs the host.conf generation with how
 the nsswitch.conf is parsed.
Only print " host.conf" instead of a multi-line message, since this
 happens on every boot.
2001-11-07 00:33:56 +00:00
Andrey A. Chernov
4e0f37c806 Add bg_BG.CP1251
PR:		25472
Submitted by:	Peter Pentchev <roam@ringlet.net>
2001-11-05 06:49:44 +00:00
Crist J. Clark
7cd99d0ae0 Fix a bug I introduced yesterday. People who built world since the
previous commit yesterday may wish to check /var/run for junk.
2001-11-02 22:00:17 +00:00
Crist J. Clark
7558c91f77 Add a directory in /var/run to store ppp(8) command sockets.
PR:		bin/29966
Approved by:	brian
MFC after:	4
2001-11-01 23:44:12 +00:00
Dag-Erling Smørgrav
bd0a2a3f93 Modify the way host.conf and nsswitch.conf are treated at boot time:
- if nsswitch.conf exists, host.conf is auto-generated for compatibility
   with legacy applications and libraries.

 - if host.conf exists but nsswitch.conf does not, nsswitch.conf is auto-
   generated as usual.
2001-11-01 12:39:01 +00:00
Jeroen Ruigrok van der Werven
03b7b65a08 Explain that /var/log/all.log needs to be touched and chmod'd 'ere it
can be used.

PR:		17022
Submitted by:	Niels Christian Bank-Pedersen <ncbp@bank-pedersen.dk>
MFC after:	1 week
2001-10-28 13:41:30 +00:00
Robert Watson
3005fded4a o Spelling error s/suffient/sufficient/
PR:		31524
Submitted by:	Dan Langille <dan@freebsddiary.org>
2001-10-27 03:14:37 +00:00
Andrey A. Chernov
bdd263de3f Remove /var/spool/uucp subtree, not needed for 'cu' 2001-10-26 09:40:28 +00:00
Andrey A. Chernov
5a5f6965ba The same unbreakage (0755 -> 0775) for /var/games and subdirs 2001-10-25 23:18:41 +00:00
Andrey A. Chernov
3ea034b005 Fix /var/mail, /var/rwho and /var/spool/lock back to 0775
Not sure about other dirs with the same damage (0755) by recent commit.
2001-10-25 23:13:11 +00:00
Ruslan Ermilov
6df68c6102 Style these once again. 2001-10-25 12:16:51 +00:00
Ruslan Ermilov
9261e27a5b Finish the removal of uucp scripts.
Forgotten by:	kris
2001-10-25 11:27:55 +00:00
Andrey A. Chernov
92277380c8 Re-commit www:www
If anybody wants to remove them for some reason, please consider "pop"
removing first.

Approved by:	arch discussion from Oct 20
MFC after:	3 days
2001-10-25 03:27:16 +00:00
David E. O'Brien
b1f2952a35 Chroot to /tftpboot for tftp.
Reviewed by:	mdodd, peter
2001-10-22 01:46:53 +00:00
Darren Reed
f645349388 Do an ipf -y after bringing up ppp to ensure rules which mention ppp get
matched.  Moification on PR to handle ipnat not being dependant on
ipfilter_enable

PR:	22859
2001-10-20 04:46:32 +00:00
Darren Reed
9645656d2c Allow ipnat_enable to be set to "yes" without requiring ipfiltre_enable to
be set to "yes"

PR:		25223
2001-10-20 04:41:47 +00:00
Darren Reed
7b60aacc90 Create /var/db/ipf
PR:		27070
2001-10-20 04:33:12 +00:00
Darren Reed
639e6db6e7 Put in place for using ipfs use on shutdown and startup.
PR:		27070
2001-10-20 04:33:02 +00:00
Darren Reed
45e22a3d1c Add the ipfilter directory in share/examples
PR:		26763
2001-10-20 04:18:41 +00:00
Doug Barton
74e07b9e48 Handle the lack of nfs server or client support in the kernel by
kldload'ing the appropriate modules before enabling the service.
2001-10-19 06:50:52 +00:00
Alfred Perlstein
a1580c53a7 Update to note that rpc.statd and rpc.lockd are now needed for
client side NFS mounts.

Stumbled upon by: rwatson
2001-10-18 19:37:57 +00:00
Sheldon Hearn
19aa5cdc3d Back previous revision out until it has been discussed on -arch and
motivated.  Currently, it is under dispute.
2001-10-18 16:53:20 +00:00
Sheldon Hearn
99225c5d10 Back previous revision out until it has been discussed on -arch and
motivated.  Currently, it is under dispute.
2001-10-18 16:41:58 +00:00
Brian S. Dean
cd218bbaed Ensure that /var/log/lastlog exists so that login doesn't complain.
Submitted by:	Harti Brandt <brandt@fokus.gmd.de>
MFC after:	2 weeks
2001-10-17 14:30:19 +00:00
Andrey A. Chernov
913b0e4e95 Add www:www (80:80) for upcoming Apache changes 2001-10-17 13:21:53 +00:00
John Baldwin
19d1491b60 Remove references to nfsiod and nfs_client_flags now that they are
obsolete.

Submitted by:	Gordon Tetlow <gordont@gnf.org>
2001-10-10 20:36:51 +00:00
Archie Cobbs
f3ca697239 Update reference URL.
MFC after:	3 days
2001-10-10 18:34:28 +00:00
David E. O'Brien
260a117141 Fix tabbing damage in last commit. 2001-10-10 17:26:27 +00:00
Doug Barton
f8bb49cd4f Follow existing style a little better 2001-10-10 04:25:44 +00:00
Dag-Erling Smørgrav
4f18601a76 Add a dumpdir variable that determines where savecore stores crash dumps.
I've had this on my development box for ages...
2001-10-09 18:40:00 +00:00
Gregory Neil Shapiro
741741c2ae Do not clobber users hostname.mc file if freebsd.mc changes (likely after an
installworld).

Submitted by:	Steve Watt <steve@Watt.COM>
MFC after:	2 days
2001-10-08 22:35:24 +00:00
Doug Rabson
c99cf22fab Add /etc files for ia64. 2001-10-06 12:55:50 +00:00
Sheldon Hearn
1e58a712d9 Quote the value of pccard_ether_delay, the only unquoted value in the
entire file.
2001-10-05 09:01:42 +00:00
Hajimu UMEMOTO
861defc8e9 We don't ship pim6dd/pim6sd any more.
MFC after:	1 week
2001-10-03 16:15:59 +00:00
Jordan K. Hubbard
803d3eb188 Add commented-out/prototype entries for samba's swat configuration tool.
Requested by:	"William Wong" <willwong@samurai.com>
MFC after:	1 week
2001-10-03 05:30:56 +00:00
Ruslan Ermilov
c88bd8a742 Sigh, fix the unfixed typo: s/-l/-L/. 2001-10-02 12:00:39 +00:00
Akinori MUSHA
73a9c61338 Fix a typo: s/-or/-o/. 2001-10-02 11:50:14 +00:00
David E. O'Brien
db27ecf570 Add ()'s around the warning message when skipping a startup script.
Also don't give the whole path, just the script name.

Submitted by:	des
Requested by:	jhb
2001-10-01 22:52:32 +00:00
David E. O'Brien
488289d40d Tweak the Skipping ${script} logic to also handle symlinks.
Also echo with "-n".
2001-10-01 21:30:27 +00:00
Mark Murray
9858c058b9 Remove (commented out) use of pam_ssh where it won't work. 2001-10-01 17:05:32 +00:00
Kris Kennaway
a06da08de5 Move the uucpd entry down a bit to live with other optional services
and correct the path to /usr/local as an example.

Submitted by:	ru
2001-10-01 09:16:42 +00:00
Kris Kennaway
d7401e9771 Put back /var/spool/uucp so it can be used for serial port locking. 2001-10-01 08:54:16 +00:00
Kris Kennaway
7080a34335 UUCP removal Phase III. 2001-10-01 06:27:44 +00:00
Kris Kennaway
51b3cf3c56 UUCP removal phase II. These directories are now created by the
freebsd-uucp port.
2001-10-01 06:24:50 +00:00
David E. O'Brien
d26e2413e0 Fix the problem that the startup directory is printed out if it
is empty.

Submitted by:	Udo Schweigert <udo.schweigert@siemens.com>
2001-09-30 22:07:19 +00:00
Dima Dorfman
59542375f9 Add missing word in comment. 2001-09-30 12:48:17 +00:00
David E. O'Brien
6ca537e725 Add `dict' per http://www.iana.org/assignments/port-numbers and RFC 2229. 2001-09-29 18:51:49 +00:00
Ruslan Ermilov
8afccfa91e Backout revision 1.9 that added `myname.my.domain' as another alias for
`localhost'.  If your /etc/nsswitch.conf has ``hosts: files dns'', and
you changed `myname.my.domain' in /etc/hosts to match hostname(1), and
you run inetd(8) with the -l option, any connect to `myname' using its
real IP address through inetd(8), e.g. `ftp -a myname', will spam your
/var/log/messages with:

inetd[PID]: warning: /etc/hosts.allow, line 23: host name/name mismatch: myname.my.domain != localhost

This is especially bad for -STABLE, where /etc/host.conf defaults to
"files first then DNS" resolution order.

Noticed by:	Igor Kucherenko <kivvy@sunbay.com>
MFC after:	1 week
2001-09-29 12:20:08 +00:00
Brooks Davis
bf25ced157 Add an apparently working entry for the BayStack 660, 2mbps direct
sequence wireless card.

Approved by:	imp (in principle)
2001-09-27 21:38:02 +00:00
Matthew Dillon
46cad5761c Enable vmiodirenable by default. Remove incorrect comment from sysctl.conf.
MFC after:	1 week
2001-09-26 19:35:04 +00:00
Poul-Henning Kamp
c36b0a4edb Give people a chance to do things before fsck is run.
MFC after:	2 weeks
2001-09-26 06:17:25 +00:00
David E. O'Brien
364f9ab989 Run rc.devfs a little bit earlier.
Many people like to use generic devices in rc.syscons, etc..
So rc.devfs needs to run before those rc files.

Requested by:	Jos Backus <josb@cncdsl.com>
2001-09-26 06:01:40 +00:00
David E. O'Brien
2e78f3945a Let people know when a startup script is skipped because it is not
executable.

Suggested by:	gad
2001-09-25 01:55:21 +00:00
David E. O'Brien
16f5727417 Back out rev 1.274. The previous behavior was documented in rc.8 and
the original commit of local_startup depended on the scripts being
executable; so there is too much precedence to change it now.  About all
anyone could agree on is that rev 1.274 broke POLA and before rev 1.274
also broke POLA.
2001-09-24 18:17:11 +00:00
David E. O'Brien
1e60617bfd + explicitly use the shell to run ${local_startup} so one does not have to
ensure the executable bit is set on the scripts.
+ Fix VCS ID's
2001-09-24 03:03:51 +00:00
Brooks Davis
40995998c5 Add a new rc.conf variable, cloned_interfaces, to create cloned
interfaces at boot.
2001-09-19 21:27:27 +00:00
Peter Wemm
06fec2cf89 The vfs.nfs.bufpackets sysctl is in the client, not the server. Move it
to the client section.  Turn off nfsiod, it no longer exists (now just
kthreads).  I need revisit nfsiod so that we have an argument passthrough.
2001-09-19 00:22:26 +00:00
Peter Wemm
9119623471 Userland part of nfs client/server split and cleanup. 2001-09-18 23:34:44 +00:00
Bill Fenner
febceb3e27 Handle the absence of net.inet.ip.fw.verbose_limit better, just like
brian's fix for v6 in rev 1.56.
2001-09-18 00:03:48 +00:00
Jonathan Lemon
7032f49f4d Change permissions for initial install of maillog file to 640. (from 644)
Pointed out by: rwatson
2001-09-17 02:04:20 +00:00
Jonathan Lemon
dbae8e5b46 Change maillog to have permissions of 640. Users shouldn't be able to
eavesdrop on other users' communications.
2001-09-17 01:33:15 +00:00
Brian Somers
b550f7176f Handle the absence of net.inet6.ip6.fw.verbose_limit better 2001-09-14 11:18:06 +00:00
Warner Losh
8dac8c268d Due to a bug in the ed driver, which leads to hangs when using it with
dhclient and pccard_ether, introduce the concept of a "settle time" to
pccard_ether with the new pccard_ether_delay variable.  Defaults to 5
seconds, which is enough time for the ed driver to finish its
autoconfiguration for newer Linksys based cards.  This also can
eliminate the ed0: timeout messages that happen at startup as well.

MFC: after RE says OK.
2001-09-13 06:18:07 +00:00
Ruslan Ermilov
4a31781613 Added forgotten share/zoneinfo/America/Kentucky. 2001-09-11 14:25:48 +00:00
Ruslan Ermilov
16763c30af s/password_format/passwd_format/
PR:		misc/30494
Submitted by:	"brian j. peterson" <rbw@myplace.org>
2001-09-11 07:01:47 +00:00
Warner Losh
54c5e69c3a Typo s/AirLAncer/AirLancer/g 2001-09-10 08:14:00 +00:00
Warner Losh
55b15701e3 clarify PCMLM56 status 2001-09-10 08:07:46 +00:00
Warner Losh
1e5d3cc62e The EXCard-10-PCMCIA entry was slightly bogus. 2001-09-10 08:05:29 +00:00
Warner Losh
154c742236 Add cs driver for IBM EtherJet card. Doesn't completely work yet, but
it won't work without it.
2001-09-10 04:08:28 +00:00
Warner Losh
3283cbb35f 2Mbps card from Teletronics. Looks like a generic OEM card for the
awi driver, but the MAC address isn't recognized, so maybe this is
wrong.
2001-09-10 03:30:47 +00:00
Warner Losh
99de8e9963 ELSA Air Lancer wireless card. Appears to be a Lucent OEM.
Submitted by: Eric Masson <e-masson@kisoft-services.com>
2001-09-10 03:18:21 +00:00
Warner Losh
a804e4ad3d Mihira-san says that this works for him. Linksys EtherFast 10/100 +
56k modem with the fat connector.

Submitted by: sanpei@sanpei.org (MIHIRA yoshiro)
Ignored since Jan 2001 by: imp
2001-09-09 23:58:09 +00:00
Warner Losh
f84d55e6fb Addtron AWP-100 wireless card.
Submitted by: Alfred Perlstein <bright@mu.org>
2001-09-09 23:42:26 +00:00
Warner Losh
b03d7b66b0 EZCard, not EXCard 2001-09-09 23:40:28 +00:00
Warner Losh
87c73af65e Speculatively commit fix for Surecom EP-427TX PCMCIA adapter. This
appears to be another OEM version of the Netgear FA411.  This is a
guess, since the original didn't include the flags, but this is too
similar to my netgear card...

Submitted by: neal@nelsonnet.org
2001-09-09 23:28:09 +00:00
Warner Losh
15ba1376a1 SMC EZ Card 10 PCMCIA
Submitted by: Goncharov D <gda@sani.ru>
2001-09-09 23:13:59 +00:00
Warner Losh
c6450b1091 Add NE-2000 compatible card sold by addron.
Submitted by: johs@copyleft.no
2001-09-09 23:10:38 +00:00
Warner Losh
fbd6d4e098 Add NetGEAR FA411 card. This appears to be based on the AX88190 chipset
and works with those flags.
2001-09-09 20:31:26 +00:00
Kris Kennaway
77fb35234d Run the uustat command as the uucp user, not as root. 2001-09-09 05:53:01 +00:00
Brian Somers
32706fb26f Allow group network to read ppp.log & slip.log.
Suggested by: Jesper Skriver <jesper@FreeBSD.org>
2001-09-03 11:35:17 +00:00
Robert Watson
1088a254de o Add sample syslogd_flags for "-ss" which causes syslogd not to bind
an inet socket.
2001-09-02 23:34:19 +00:00
Robert Watson
78eb04b942 o Note that some sites will want to select generally more conservative
permissions on some files, and give hints as to what those permissions
  might be.  Note also that the current more liberal permissions might
  get changed in future revisions.
2001-09-01 21:00:28 +00:00
Robert Watson
585514eb2d o More conservative permissions for kerberos.log: 600 instead of 644.
Reviewed by:	peter
2001-08-31 23:44:51 +00:00
Murray Stokely
9f63e1d07a Add an entry for the Zip 250.
PR:		i386/29639
Submitted by:	David Yeske <dyeske@yahoo.com>
2001-08-31 22:49:22 +00:00
Murray Stokely
0cf9956f3f Add entries for 3wire terminals. (carrier not supplied, so we set nc).
PR:		conf/26420
Submitted by:	Jon Passki <cykyc@yahoo.com>
2001-08-31 22:18:50 +00:00
Dima Dorfman
bdb6e9217b Make the 'echo' output for blanktime and scrnmap consistent with their
variable names.  There were minor differences in both cases, which were
needlessly confusing and inconsistent.
2001-08-31 15:29:24 +00:00
Alexander Langer
d33a962d07 Move /etc/defaults/make.conf to /usr/share/examples/etc/make.conf as
discussed on the arch@ mailinglist (after repo-copy).

sys.mk will .error if it finds /etc/defaults/make.conf but include
it anyways (this is the same behaviour as with the make.conf.local
removal).

/usr/share/examples/etc/make.conf has BDEFLAGS commented out now,
since it's only an example file.

Adjust all textes that talk about make.conf or defaults/make.conf to
match the new situation.
2001-08-30 22:44:51 +00:00
Alexander Langer
466df28c52 chown syntax is user:group now. 2001-08-29 19:59:30 +00:00
Alexander Langer
2d68fd8741 RIP all ports options, as discussed on arch@. 2001-08-29 19:38:17 +00:00
David E. O'Brien
cb2fb6f378 Remove more vestages of diskcheckd, which is now in ports/sysutils. 2001-08-29 05:39:07 +00:00
Brian Somers
15ed67d861 Remove diskcheckd.conf 2001-08-29 04:03:41 +00:00
David E. O'Brien
437cd38796 Remove `diskcheckd'. It is now in ports/sysutils.
Consensus on:	freebsd-current.
2001-08-28 23:00:28 +00:00
Mark Murray
17a6c94473 Tidy, reorder and adjust to more correctly reflect FreeBSD default
policy.
2001-08-26 18:15:32 +00:00
Dima Dorfman
573722f3f0 End sentence with a period. 2001-08-26 02:37:22 +00:00
Dima Dorfman
81b83ee95d $units is the canonical name for the number of units to create; use it.
PR:		29971
Submitted by:	Joseph Mallett <jmallett@xMach.org>
2001-08-23 22:19:53 +00:00
Jun Kuriyama
6d9e09d7d0 Invoke named with privilege of bind:bind.
Change pidfile location to /var/run/named/pid.
2001-08-23 13:34:45 +00:00
Hajimu UMEMOTO
4a84918dc9 fix typo. icmptype of destination unreach is not 2 but 1.
Submitted by:	kuriyama
2001-08-21 15:05:09 +00:00
Matt Jacob
94c152b8cb move forward the ability to MAKEDEV zs devices for TurboLaser 2001-08-21 00:03:28 +00:00
Mark Murray
468a061e69 More libss removal. 2001-08-20 12:39:23 +00:00
David Malone
1139160ec0 Clear up what the line "ALL : PARANOID : RFC931 20 : deny" means
to tcp wrappers. The description is a little long, but hopefully
accurate.
2001-08-18 14:22:52 +00:00
David E. O'Brien
d549989694 Add the `WANT_FORCE_OPTIMIZATION_DOWNGRADE' knob. If set to an integer
value, it forces GCC to not optimize above this level.  For intance, GCC
made with "WANT_FORCE_OPTIMIZATION_DOWNGRADE=1" is a good setting for the
Alpha platform when building ports.
2001-08-16 06:05:18 +00:00
Mark Murray
e95927c133 Add no_warn option to the "auth" lines. Minor tidy-up as well. 2001-08-15 20:12:27 +00:00
Andrey A. Chernov
f9f1ef64d1 Reflect main termcap v1.109 2001-08-15 03:27:52 +00:00
Andrey A. Chernov
86babaf9bf Add commented out example 2001-08-14 23:51:58 +00:00
Andrey A. Chernov
e01dfc9c69 Add/install /etc/opieaccess skeleton
Approved by:	markm
2001-08-14 23:38:31 +00:00
Dima Dorfman
f20347445f Sync the code that sucks in rc.conf and friends with what's in
rc.firewall6.  Specifically, don't do anything
if [ -z ${source_rc_confs_defined} ].  Not doing this leads to a problem
with dependencies: chkdepend will set, e.g., portmap_enable to YES if
some service that needs portmap is enabled, but rc.network sources
rc.firewall, which used to source defaults/rc.conf unconditionally,
which would result in portmap_enable being set back to NO.

PR:		29631
Submitted by:	OGAWA Takaya <t-ogawa@triaez.kaisei.org>
2001-08-14 05:50:19 +00:00
Mark Murray
37ee76af52 Remove the WANT_INSECURE_OPIE option - it is now a default. This is not
nearly as ominous as it sounds, and it allows OPIE to be used over SSH
and on xterms.

Requested by:	ache
Discussed on:	-security
2001-08-12 18:47:56 +00:00
Akinori MUSHA
f418fdfb89 Chagne MASTER_SITE_FREEBSD to MASTER_SITE_FREEBSD_ORG, because
MASTER_SITE_FREEBSD is already used in bsd.port.mk for some different
purpose.
2001-08-12 17:22:41 +00:00
Akinori MUSHA
000d8e5b75 Fix MASTER_SITE_RUBY. The listed master site is obsolete. 2001-08-12 17:09:19 +00:00
Akinori MUSHA
81030c6ed5 Add MASTER_SITE_FREEBSD. 2001-08-12 16:32:05 +00:00
Jens Schweikhardt
17720a4498 Add sgi_fam 391002, file alteration monitor.
PR:		25925
Submitted by:	Jeremy Norris <ishmael27@home.com>
MFC after:	5 weeks
2001-08-11 09:43:04 +00:00
David E. O'Brien
411c56e4bf Fix minor typo. 2001-08-09 15:36:03 +00:00
Nick Sayer
e87f98d4ff Now properly use logger's facility argument 2001-08-06 15:52:42 +00:00
Nick Sayer
1d0d467f53 Make the sample entries actually syntactically correct. :-/ 2001-08-05 20:26:03 +00:00
Nick Sayer
7759485ca3 Add a little pizzaz to the sample entries. :-) 2001-08-05 16:00:40 +00:00
Nick Sayer
a984786cdf Add some sample entries to illustrate battery state monitoring. 2001-08-05 15:45:21 +00:00
David Malone
d7f66e157e Remove duplicate ufsd entry. This seems to go back to the Sun's version
of the file.

PR:		29386
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
2001-08-02 12:55:37 +00:00
Robert Watson
f2419a7154 Default to disabling all inetd.conf entries, in particular, telnetd
and ftpd.  This more conservative default reduces the exposure of
freshly installed machines, which is especially valuable for machines
that receive minimal further configuration before being put into
production.  Generally speaking, SSH has superseded the use of both
telnet and ftp in many environments.  In light of recent remotely
exploitable security holes in both telnetd and ftpd, this choice
retains flexibility (both telnetd and ftpd daemons remain installed
and easily enableable) while protecting users who don't need the
additional risk.  This change brings our configuration into line with
the majority of other UNIX vendors, including OpenBSD and NetBSD.

To address the concerns of those requiring remote access via telnet
from first install, changes will shortly be committed to sysinstall
to provide the ability to edit inetd.conf during the installation
process, allowing telnetd and ftp to be re-enabled during the
installation process.

While I'm at it, slightly improve commenting for inetd.conf so that
it's more clear to users how to enable and disable services.
Further commenting to indicate the functions of various columns would
probably also be useful.

Reviewed by:	imp, chris, jake, nate, -arch, -stable
2001-08-02 02:19:56 +00:00
Doug Barton
778c176942 Scratch an itch of long standing by adding entries for the most
commonly used x11 ports
2001-08-01 20:13:49 +00:00
Doug Barton
48b3cebbee I could have sworn I did this already, but obviously I didn't. So,
take another stab at updating the IANA web page.
2001-08-01 19:48:12 +00:00
Gregory Neil Shapiro
9078d242bf Revert change to always include _FFR_TLS_O_T as it requires FEATURE(access_db)
Problem found by:	nsayer
2001-08-01 02:12:39 +00:00
Darren Reed
e58f466620 Merge in patch to automagically decide whether or not a kldload of ipfilter
is required into rc.network.

Person failed to use a real name so both email addresses from PR included
(Sent was different to From).

PR:		22998
Submitted by:	dl@leo.org/spock@empire.trek.org
2001-07-30 23:12:02 +00:00
Doug Barton
f45ae64135 Add an entry for the commonly used (although unofficial) kpop port.
PR:		conf/21551
Submitted by:	Luis Casillas <casillas@stanford.edu>
Reviewed by:	rwatson
2001-07-30 17:53:55 +00:00
David E. O'Brien
8e4e3be259 Document Bzip2's flag.
PR:		27901
Submitted by:	Anders Nordby <anders@fix.no> (stylistic changes by me)
2001-07-30 15:18:15 +00:00
Doug Barton
f5b72dbe84 Add a note about port 98 commonly being used for RH linuxconf,
(unofficially of course).

PR:		misc/21775
Submitted by:	Dann Lunsford <dann@greycat.com>
2001-07-30 06:19:27 +00:00
Mark Murray
55b3d2c67f Build standard directory for kerberos 5 (Heimdal) database. 2001-07-28 20:00:54 +00:00
Mark Murray
e7f2f42f1b Upgraded launchpad for kerberos. Noe kerberos IV OR kerberos 5
may be started at boot for kerberos servers.
2001-07-28 19:57:57 +00:00
Peter Wemm
791da841a1 Take -Wconversion out of BDECFLAGS. It is not particularly useful for
us anyway because it doesn't work right on the x86 and alpha.  On
K&R code, small ints would be promoted to int.  ANSI-C doesn't require
this and the small ints can be passed taking 8 or 16 bits of stack
space.  However, the x86 abi that we use *does* promote to 32 bit,
and the alpha ABI passes them in 64 bit registers so we dont have
that aspect of the problem here.  Losing float precision by having it
cast down to int because the funtion prototype specifies int is the
least of our problems.  -Wmissing-prototypes helps here anyway.
2001-07-27 16:23:53 +00:00
Dima Dorfman
614aed8497 Be consistent about how we quote commands that could be entered by the
user.
2001-07-27 12:25:55 +00:00
Brian Somers
c5f947aa7f Remove $daily_status_named_logs and figure out which /var/log/messages*
files to look an (in the same way that /etc/security does).

Don't single-quote $start, reducing it to an empty string.

MFC after:	3 days
2001-07-26 02:37:12 +00:00