freebsd with flexible iflib nic queues
Go to file
Robert Watson 0c09bcb0e8 Compensate for default disabling of network services in inetd.conf(5)
by providing the opportunity to edit inetd.conf during the system
installation process.  The following modifications were made:

(1) Expand the Anonymous FTP description dialog to indicate that inetd
    and ftpd must be enabled before it can be used.

(2) Introduce a new configInetd() pair of dialogs, the first describing
    inetd, giving a couple of examples of services that require it, and
    hinting at potential risk, then asking the user if they wish to
    enable it.  The second indicates that inetd.conf must be configured
    to enabled specific services, and asks if the user would like to
    load inetd.conf into the editor to modify it.  Add this
    configuration action to the index.

There are some further improvements that might be considered:

(1) Provide a more inetd.conf-specific configuration tool that speaks
    inetd.conf(5).  However, this is made difficult by the "yet another
    configuration format" nature of inetd.conf, as well as its use of
    commenting to disable services, rather than an in-syntax way to
    disable a service without commenting it out.  Submissions here
    would probably be welcome.

(2) There's some overlap between settings in the somewhat obtuse
    Security Profile mechanism and other settings, including the inetd
    setting, and NFS server configuration.  As features become
    individually tunable, they should probably be removed from the
    security profile mechanism.  Otherwise, somewhat counter-intuitively,
    sysinstall (in practice) queries multiple times whether inetd, nfsd,
    etc, should be enabled/disabled.  A possible future direction might
    be to drive profiles not by degree of paranoia, rather, the set
    of services desired.  Or simply to remove the Security Profile
    mechanism and resort to feature-driven configuration.

Reviewed by:	imp, chris, jake, nate, -arch, -stable
2001-08-02 03:25:16 +00:00
bin style(9) 2001-08-01 05:12:39 +00:00
contrib Correct the version number. 2001-08-01 18:35:54 +00:00
crypto output_data(), output_datalen() and netflush() didn't actually guarantee 2001-07-23 21:52:26 +00:00
etc Default to disabling all inetd.conf entries, in particular, telnetd 2001-08-02 02:19:56 +00:00
games A good sysadmin always carries around a few feet of fiber. If he ever 2001-08-01 22:51:09 +00:00
gnu Update man page to actually match the source. 2001-08-01 06:23:00 +00:00
include Rename the GLOB_MAXPATH flag of glob(3) to GLOB_LIMIT to be compatible 2001-07-29 00:52:37 +00:00
kerberos5 add dependency for lex.o on roken.h (from "Alexander N. Kabaev" 2001-07-12 08:36:01 +00:00
kerberosIV generate ksrvtgt 2001-06-16 06:51:35 +00:00
lib mdoc(7) police: remove hard sentence breaks. 2001-08-01 16:07:50 +00:00
libexec Don't use SA_RESETHAND here. We gain nothing. 2001-07-31 15:29:50 +00:00
release Oops, note MFC of UFS_DIRHASH. 2001-08-01 20:08:37 +00:00
sbin MFS: in HISTORY section, fix release number of first appearance 2001-08-01 12:15:21 +00:00
secure Fixed world breakage when NOSHARED=yes. libmp now depends on libcrypto, 2001-07-30 14:36:19 +00:00
share MFS: in HISTORY section, fix release number of first appearance 2001-08-01 12:15:21 +00:00
sys Oops- don't set 'goal' twice when you mean to set 'nvrm' as well. 2001-08-02 00:34:56 +00:00
tools ISO_ -> ISO 2001-06-11 01:29:40 +00:00
usr.bin MFS: in HISTORY section, fix release number of first appearance 2001-08-01 12:15:21 +00:00
usr.sbin Compensate for default disabling of network services in inetd.conf(5) 2001-08-02 03:25:16 +00:00
COPYRIGHT
Makefile Make it possible to build manpages for the entire source tree. 2001-03-27 08:43:28 +00:00
Makefile.inc1 Enable the new libmp in the build, and disable libgmp and its 2001-07-29 08:58:22 +00:00
Makefile.upgrade
README Slightly improve the description of "crypto". "DES" is a subset of 2000-08-31 17:59:01 +00:00
UPDATING Add, belated, entry for ed driver needing mii 2001-07-25 22:53:11 +00:00

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree, the most
commonly used one being ``world'', which rebuilds and installs
everything in the FreeBSD system from the source tree except the
kernel, the kernel-modules and the contents of /etc.  The
``buildkernel'' and ``installkernel'' targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process, documentation
for which can be found at:
   http://www.freebsd.org/handbook/kernelconfig.html
And in the config(8) man page.
Note: If you want to build and install the kernel with the
``buildkernel'' and ``installkernel'' targets, you have to build
world before.  More information is available in the handbook.

The sample kernel configuration files reside in the sys/i386/conf
sub-directory (assuming that you've installed the kernel sources), the
file named GENERIC being the one used to build your initial installation
kernel.  The file NOTES contains entries and documentation for all possible
devices, not just those commonly used.  It is the successor of the ancient
LINT file, but in contrast to LINT, it is not buildable as a kernel but a
pure reference and documentation file.


Source Roadmap:
---------------
bin		System/User commands.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc

games		Amusements.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberosIV	Kerberos package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

sys		Kernel sources.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  http://www.freebsd.org/handbook/synching.html