freebsd with flexible iflib nic queues
Go to file
Robert Watson 4880db4afd Tweak "system security profiles:
(1) Don't modify the configuration of the NFS server as a result of
    selecting a profile.  We already explicitly prompt for the NFS
    server configuration during install, and the user may not get
    much advance notice that we're turning it off again.  Instead,
    use profiles (for better or for worse) only for security tuning.

(2) Don't modify the sendmail setting as part of the security profile:
    use the default from /etc/defaults/rc.conf rather than explicitly
    specifying.  Note that the default in /etc/defaults/rc.conf is
    more conservative than the explicit rc.conf entry added by
    sysinstall during install, as it does not permit SMTP delivery.

(3) Update "congratulations on your profile" text to reflect these
    changes.

Note that security profiles now affect only the securelevel and sshd
settings.  My leaning would be to make sshd an explicit configuration
option, move securelevels to the security menu, and drop security
profiles entirely.  However, that requires more plumbing of sendmail
than I'm currently willing to invest.

We may want to add a "permit SMTP delivery" question to the install
process.
2003-09-28 05:21:23 +00:00
bin Be a little bit more correct WRT counting numbers vs. integer numbers. 2003-09-13 20:46:58 +00:00
contrib The ports freeze may take longer than anticipated. Instead of 2003-09-21 07:59:16 +00:00
crypto This commit was generated by cvs2svn to compensate for changes in r120489, 2003-09-26 19:15:53 +00:00
etc Don't install etc/printcap in the NO_LPR case; ports like 'cups' 2003-09-27 17:33:03 +00:00
games Fix spelling/grammar errors and remove a duplicate 2003-09-13 15:46:35 +00:00
gnu - Support for multibyte charsets in LIBICONV. 2003-09-26 20:26:25 +00:00
include Add code to support pthread spin lock. 2003-09-09 06:57:51 +00:00
kerberos5 Try a lot harder to get dependancies right. This involves some ugly 2003-07-27 16:49:10 +00:00
lib Relink libc_r.a, libc_r.so and libc_r_p.so from libthr to libkse. 2003-09-27 23:27:19 +00:00
libexec Don't depend on IPv4-mapped IPv6 address to bind to both IPv4 2003-09-14 16:42:46 +00:00
release - Support for multibyte charsets in LIBICONV. 2003-09-26 20:26:25 +00:00
rescue No need to check for the directory, fols are assumed to have all the 2003-09-27 17:27:02 +00:00
sbin - Support for multibyte charsets in LIBICONV. 2003-09-26 20:26:25 +00:00
secure Explicitly add libz and libcrypto to LDADD for any ssh utilities missing 2003-08-19 07:45:03 +00:00
share Having had to spend several hours today figuring out just what it is that 2003-09-28 03:15:21 +00:00
sys In vm_page_remove(), assert that the vm object is locked, unless an Alpha. 2003-09-28 04:50:48 +00:00
tools o the kernel sysctl uses 'avg' for a key; change to suit 2003-09-19 21:52:29 +00:00
usr.bin Use the 3-component version of the KERN_PROC_PROC sysctl. 2003-09-27 08:14:37 +00:00
usr.sbin Tweak "system security profiles: 2003-09-28 05:21:23 +00:00
COPYRIGHT
MAINTAINERS I'll maintain dhclient from now on. 2003-08-01 17:54:11 +00:00
Makefile Cosmetics: folded BITGTS into TGTS. 2003-08-30 13:33:41 +00:00
Makefile.inc1 Help those attempting to upgrade from static to dynamic root. 2003-09-16 12:53:18 +00:00
README KerberosIV de-orbit burn continues. Disconnect from "make world". 2003-03-08 10:01:26 +00:00
UPDATING Add a note about kiconv(3). 2003-09-27 14:12:39 +00:00

This is the top level of the FreeBSD source directory.  This file
was last revised on:
$FreeBSD$

For copyright information, please see the file COPYRIGHT in this
directory (additional copyright information also exists for some
sources in this tree - please see the specific source directories for
more information).

The Makefile in this directory supports a number of targets for
building components (or all) of the FreeBSD source tree, the most
commonly used one being ``world'', which rebuilds and installs
everything in the FreeBSD system from the source tree except the
kernel, the kernel-modules and the contents of /etc.  The
``buildkernel'' and ``installkernel'' targets build and install
the kernel and the modules (see below).  Please see the top of
the Makefile in this directory for more information on the
standard build targets and compile-time flags.

Building a kernel is a somewhat more involved process, documentation
for which can be found at:
   http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/kernelconfig.html
And in the config(8) man page.
Note: If you want to build and install the kernel with the
``buildkernel'' and ``installkernel'' targets, you might need to build
world before.  More information is available in the handbook.

The sample kernel configuration files reside in the sys/<arch>/conf
sub-directory (assuming that you've installed the kernel sources), the
file named GENERIC being the one used to build your initial installation
kernel.  The file NOTES contains entries and documentation for all possible
devices, not just those commonly used.  It is the successor of the ancient
LINT file, but in contrast to LINT, it is not buildable as a kernel but a
pure reference and documentation file.


Source Roadmap:
---------------
bin		System/user commands.

contrib		Packages contributed by 3rd parties.

crypto		Cryptography stuff (see crypto/README).

etc		Template files for /etc.

games		Amusements.

gnu		Various commands and libraries under the GNU Public License.
		Please see gnu/COPYING* for more information.

include		System include files.

kerberos5	Kerberos5 (Heimdal) package.

lib		System libraries.

libexec		System daemons.

release		Release building Makefile & associated tools.

sbin		System commands.

secure		Cryptographic libraries and commands.

share		Shared resources.

sys		Kernel sources.

tools		Utilities for regression testing and miscellaneous tasks.

usr.bin		User commands.

usr.sbin	System administration commands.


For information on synchronizing your source tree with one or more of
the FreeBSD Project's development branches, please see:

  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/synching.html