94 Commits

Author SHA1 Message Date
Alan Somers
7a0c41d5d7 zfsd(8), the ZFS fault management daemon
Add zfsd, which deals with hard drive faults in ZFS pools. It manages
hotspares and replements in drive slots that publish physical paths.

cddl/usr.sbin/zfsd
	Add zfsd(8) and its unit tests

cddl/usr.sbin/Makefile
	Add zfsd to the build

lib/libdevdctl
	A C++ library that helps devd clients process events

lib/Makefile
share/mk/bsd.libnames.mk
share/mk/src.libnames.mk
	Add libdevdctl to the build. It's a private library, unusable by
	out-of-tree software.

etc/defaults/rc.conf
	By default, set zfsd_enable to NO

etc/mtree/BSD.include.dist
	Add a directory for libdevdctl's include files

etc/mtree/BSD.tests.dist
	Add a directory for zfsd's unit tests

etc/mtree/BSD.var.dist
	Add /var/db/zfsd/cases, where zfsd stores case files while it's shut
	down.

etc/rc.d/Makefile
etc/rc.d/zfsd
	Add zfsd's rc script

sys/cddl/contrib/opensolaris/uts/common/fs/zfs/vdev.c
	Fix the resource.fs.zfs.statechange message. It had a number of
	problems:

	It was only being emitted on a transition to the HEALTHY state.
	That made it impossible for zfsd to take actions based on drives
	getting sicker.

	It compared the new state to vdev_prevstate, which is the state that
	the vdev had the last time it was opened.  That doesn't make sense,
	because a vdev can change state multiple times without being
	reopened.

	vdev_set_state contains logic that will change the device's new
	state based on various conditions.  However, the statechange event
	was being posted _before_ that logic took effect.  Now it's being
	posted after.

Submitted by:	gibbs, asomers, mav, allanjude
Reviewed by:	mav, delphij
Relnotes:	yes
Sponsored by:	Spectra Logic Corp, iX Systems
Differential Revision:	https://reviews.freebsd.org/D6564
2016-05-28 17:43:40 +00:00
Glen Barber
b626f5a73a MFH r289384-r293170
Sponsored by:	The FreeBSD Foundation
2016-01-04 19:19:48 +00:00
Cy Schubert
6f422073d1 Add default leap-seconds file. This should help ntp networks get the
leap second date correct

Updates to the file can be obtained from ftp://time.nist.gov/pub/ or
ftp://tycho.usno.navy.mil/pub/ntp/.

Suggested by:	dwmalone
Reviewed by:	roberto, dwmalone, delphij
Approved by:	roberto
MFC after:	1 week
2015-10-16 14:04:16 +00:00
Baptiste Daroussin
cc413bc01f Add the at(1) directories into the at package 2015-03-05 17:01:30 +00:00
Baptiste Daroussin
219c72ef13 Make unbound an individual package
Ensure we keep all tags from mtrees when creating the METALOG
2015-03-05 12:40:59 +00:00
Xin LI
e72055b7fe Import HyperV Key-Value Pair (KVP) driver and daemon code by Microsoft,
many thanks for their continued support of FreeBSD.

While I'm there, also implement a new build knob, WITHOUT_HYPERV to
disable building and installing of the HyperV utilities when necessary.

The HyperV utilities are only built for i386 and amd64 targets.

This is a stable/10 candidate for inclusion with 10.1-RELEASE.

Submitted by:	Wei Hu <weh microsoft com>
MFC after:	1 week
2014-09-13 02:15:31 +00:00
Dag-Erling Smørgrav
9b17fa8f3c Create /var/unbound/conf.d for additional configuration files.
Ensure that it is used if present.

MFH:	3 weeks
2014-05-29 22:34:04 +00:00
Baptiste Daroussin
63aed9d0c7 Fix typo 2014-02-21 10:34:59 +00:00
Baptiste Daroussin
a9e8641da9 Import Dragonfly Mail Agent into base system
It is a small and lightweight Mail Transport Agent.
It accepts mails from locally installed Mail User Agents (MUA) and delivers the
mails either locally or to a remote destination. Remote delivery includes
several features like TLS/SSL support, SMTP authentication and NULLCLIENT.

Make dma conditional to new WITHOUT_DMA option and make it respect WITHOUT_MAIL

Reviewed by:	peter
Discussed with:	emaste, bz, peter
2014-02-21 07:26:49 +00:00
Xin LI
45475f1761 Create /var/cache with mode 0755 instead of 0750.
This directory is used by many third party applications and having
permission 0750 makes it impossible to drop group privileges.

MFC after:	3 days
2013-11-26 20:03:25 +00:00
Dag-Erling Smørgrav
56b72efe82 Remove BIND.
Approved by:	re (gjb)
2013-09-30 17:23:45 +00:00
Dag-Erling Smørgrav
ce1a9486a2 Fix indentation.
Approved by:	re (blanket)
2013-09-22 18:31:49 +00:00
Dag-Erling Smørgrav
8f8790cdf4 Build and install the Unbound caching DNS resolver daemon.
Approved by:	re (blanket)
2013-09-15 14:51:23 +00:00
Dag-Erling Smørgrav
187a8d4b7a authpf needs /var/authpf to exist and be writable by group authpf. 2013-09-05 12:35:23 +00:00
Hajimu UMEMOTO
1e2c3a2917 Fix location of /var/audit/dist and /var/audit/remote.
Note that those who did installworld after r243752 should
remove wrongly created /var/dist and /var/remote.

Reviewed by:	pjd
2012-12-28 10:42:01 +00:00
Robert Watson
16648b4fff Merge a number of changes required to hook up OpenBSM 1.2-alpha2's
auditdistd (distributed audit daemon) to the build:

- Manual cross references
- Makefile for auditdistd
- rc.d script, rc.conf entrie
- New group and user for auditdistd; associated aliases, etc.

The audit trail distribution daemon provides reliable,
cryptographically protected (and sandboxed) delivery of audit tails
from live clients to audit server hosts in order to both allow
centralised analysis, and improve resilience in the event of client
compromises: clients are not permitted to change trail contents
after submission.

Submitted by:	pjd
Sponsored by:	The FreeBSD Foundation (auditdistd)
2012-12-01 15:11:46 +00:00
Jeff Roberson
aa0a1e58f0 - Merge in OFED 1.5.3 from projects/ofed/head 2011-03-21 09:58:24 +00:00
Bernhard Schmidt
b6c44f6440 Create the var/run/wpa_supplicant directory where the wpa_supplicant
RC script wants to save a pidfile for each interface.

MFC after:	2 weeks
2010-09-10 08:27:02 +00:00
Colin Percival
a235643007 Disable SSL renegotiation in order to protect against a serious
protocol flaw. [09:15]

Correctly handle failures from unsetenv resulting from a corrupt
environment in rtld-elf. [09:16]

Fix permissions in freebsd-update in order to prevent leakage of
sensitive files. [09:17]

Approved by:	so (cperciva)
Security:	FreeBSD-SA-09:15.ssl
Security:	FreeBSD-SA-09:16.rtld
Security:	FreeBSD-SA-09:17.freebsd-udpate
2009-12-03 09:18:40 +00:00
Colin Percival
48ffe56ac5 Add FreeBSD Update 2.0 client code. The build code is in the projects
repository.

Sponsored by:	FreeBSD security development fundraiser
2006-08-31 09:51:34 +00:00
Robert Watson
5ba29bf644 Change group for /var/audit to audit, so that audit review can be
delegated to non-administrators.

Obtained from:	TrustedBSD Project
2006-02-05 18:22:56 +00:00
Robert Watson
2d61cce037 Add /var/audit, mode 750, which will hold audit trail files.
Obtained from:	TrustedBSD Project
2006-02-02 01:19:31 +00:00
Colin Percival
6fb01948ee Add portsnap to the base system. This is a secure, easy to use,
fast, lightweight, and generally good way for users to keep their
ports trees up to date.

This is version 0.9.4 from the ports tree (sysutils/portsnap) with
the following changes:
1. The experimental pipelined http code is enabled.  No seatbelts
in -CURRENT. (^_^)
2. The working directory has moved from /usr/local/portsnap to
/var/db/portsnap (as discussed on -arch two days ago).
3. Portsnap now fetches a list of mirrors (distributed as DNS SRV
records) and selects one randomly.  This should help to avoid the
uneven loading which plagues the cvsup mirror network.
4. The license is now 2-clause BSD instead of 3-clause BSD.
5. Various incidental changes to make portsnap fit into the base
system's build mechanics.

X-MFC-After:    6.0-RELEASE
X-MFC-Before:   5.5-RELEASE
X-MFC-To:       RELENG_6, RELENG_5, ports
discussed on:   -arch and several other places
"yes please" from:      simon, remko, flz, Diane Bruce
thinks this is a great idea:    bsdimp
Hopes he didn't forget any files:       cperciva
2005-08-08 20:10:06 +00:00
Ruslan Ermilov
e3fbc9ef36 Remove a redundant "uname=root".
Forgotten by:	dougb
2004-10-15 08:57:24 +00:00
Doug Barton
8f1bb3891d Create a named chroot directory structure in /var/named, and use it
by default when named is enabled. Also, improve our default directory
layout by creating /var/named/etc/namedb/{master|slave} directories,
and use the former for the generated localhost* files.

Rather than using pax to copy device entries, mount devfs in the
chroot directory.

There may be some corner cases where things need to be adjusted,
but overall this structure has been well tested on a production
network, and should serve the needs of the vast majority of users.

UPDATING has instructions on how to do the conversion for those
with existing configurations.
2004-09-28 09:46:00 +00:00
Eivind Eklund
19c53c53f9 Add /var/db/ports/ (support directory necessary for
ports that use the new OPTIONS infrastructure)
2004-01-20 13:51:23 +00:00
Ruslan Ermilov
c0984da8ae Scheduled sweep using the README guidelines.
Approved by:	re (rwatson)
2003-11-29 18:22:01 +00:00
Mark Murray
44b308453a Restore /var/games; lots of ports' games use it. 2002-11-04 07:50:48 +00:00
Mark Murray
dc2f663b39 Do not build the majority of the games. Remaining are the
"utility-like" games and everyone's favourite, fortune(6).
2002-10-20 11:18:56 +00:00
Sheldon Hearn
d86c700817 Revert previous delta, setting the system immutable flag on /var/empty
instead of the user immutable flag, now that mergemaster handles
schg directories in its /var/tmp/temproot.
2002-06-26 17:05:48 +00:00
Sheldon Hearn
ec8b657bfd Tone down the previous delta: don't set the system immutable flag on
/var/empty, because it makes it difficult for mergemaster(8) to remove
/var/tmp/temproot/var.
2002-06-26 08:58:28 +00:00
Sheldon Hearn
9ec0ab17fd The previous delta introduced /var/empty, for use by openssh-portable,
which needs an empty directory into which to chroot(2).

Hint to the operator that this directory really _should_ be empty
by creating it with mode 0555 and the system immutable flag (schg)
set.

Reviewed by:	des
2002-06-24 18:31:47 +00:00
Dag-Erling Smørgrav
9b4e71b270 Add /var/empty for the OpenSSH privsep code. 2002-06-23 20:44:19 +00:00
Gregory Neil Shapiro
5b7a235bb6 In my continuing crusade to make life better for non-sendmail users, avoid
the creation of /var/spool/clientmqueue and therefore the need for the
smmsp user and group if NO_SENDMAIL is defined.  This required breaking out
the creation of the directory into a new BSD.sendmail.dist mtree file.

MFC after:	1 week
2002-04-20 19:00:11 +00:00
Gregory Neil Shapiro
ab3e277c5c Add /var/spool/clientmqueue for 8.12's non-set-user-ID root mail submission 2002-02-17 22:11:41 +00:00
Ruslan Ermilov
633621512e Apply README style guidelines (this time checked). 2001-11-19 10:10:27 +00:00
Guido van Rooij
42ea95e63e Change mode for var/db/ipf to 0700 2001-11-17 12:21:29 +00:00
Crist J. Clark
7cd99d0ae0 Fix a bug I introduced yesterday. People who built world since the
previous commit yesterday may wish to check /var/run for junk.
2001-11-02 22:00:17 +00:00
Crist J. Clark
7558c91f77 Add a directory in /var/run to store ppp(8) command sockets.
PR:		bin/29966
Approved by:	brian
MFC after:	4
2001-11-01 23:44:12 +00:00
Andrey A. Chernov
bdd263de3f Remove /var/spool/uucp subtree, not needed for 'cu' 2001-10-26 09:40:28 +00:00
Andrey A. Chernov
5a5f6965ba The same unbreakage (0755 -> 0775) for /var/games and subdirs 2001-10-25 23:18:41 +00:00
Andrey A. Chernov
3ea034b005 Fix /var/mail, /var/rwho and /var/spool/lock back to 0775
Not sure about other dirs with the same damage (0755) by recent commit.
2001-10-25 23:13:11 +00:00
Ruslan Ermilov
6df68c6102 Style these once again. 2001-10-25 12:16:51 +00:00
Darren Reed
7b60aacc90 Create /var/db/ipf
PR:		27070
2001-10-20 04:33:12 +00:00
Kris Kennaway
d7401e9771 Put back /var/spool/uucp so it can be used for serial port locking. 2001-10-01 08:54:16 +00:00
Kris Kennaway
51b3cf3c56 UUCP removal phase II. These directories are now created by the
freebsd-uucp port.
2001-10-01 06:24:50 +00:00
Jun Kuriyama
6d9e09d7d0 Invoke named with privilege of bind:bind.
Change pidfile location to /var/run/named/pid.
2001-08-23 13:34:45 +00:00
Mark Murray
55b3d2c67f Build standard directory for kerberos 5 (Heimdal) database. 2001-07-28 20:00:54 +00:00
Nik Clayton
353b398056 Mention the path to the README file in the header comment.
Submitted by:	Rich Morin <rdm@cfcl.com>
2001-06-26 13:50:33 +00:00
Ruslan Ermilov
2f397f6b6c Apparently, people do not listen for a plea to look into the
README file before making changes here.  Fix them once again.
2001-02-15 12:25:48 +00:00