2101 Commits

Author SHA1 Message Date
rwatson
ce579c85fe Modify MAKEDEV to create four bpf devices instead of one when doing a
MAKEDEV all, making DHCP on multiple interfaces happier, and allowing use
of tcpdump to to debug DHCP, without creating more devices.
(we need devfs)

Modify MAKEDEV to create four tun devices in MAKEDEV all as well, since
we're being gratuitous with network pseudo-devices.
(we need devfs)

Approved by:	The Hubbard
2000-02-18 05:49:08 +00:00
asami
efc9260cda Add ${X11BASE}/lib/X11/local -- this directory is created by the X
installation, so it should be in this file too.

Approved by:	jkh
2000-02-18 01:20:12 +00:00
imp
c9b7c127b8 Fix previous commit to not use the PAO 'any' keyword.
Approved: Prior commit approved by jkh
2000-02-17 06:02:21 +00:00
jkh
9c75578bb8 The default rule in this file actually sent mail to root as its default
action when denying access to a service.  Unfortunately, this also makes
a dandy denial-of-service attack possible.  Change to just log the event
and shoot a "go away" response back down the socket.
2000-02-17 04:52:23 +00:00
shin
6768336e3b Add IPv6 loopback entry into src/etc/hosts.
Missing IPv6 loopback name record cause name resolving lock
  on INET6 enabled systems in some cases.
  So define it.

Approved by: jkh
2000-02-15 14:59:16 +00:00
phk
afc2859d9d No arguments needed for fore_dnld any longer.
Approved by:	jkh
2000-02-15 13:21:43 +00:00
imp
84f8a9f6d2 More cards from posts to -mobile. 2000-02-14 08:02:27 +00:00
kuriyama
25ea71213a Fix typo (s/Pladio/Paldio/). 2000-02-13 01:54:01 +00:00
n_hibma
0efdb1e473 Add the uhid device.
Approved by:   jhk
2000-02-12 21:16:01 +00:00
shin
58306df166 Add ftpd entries into /etc/pam.conf.
S/Key authentication for ftpd was not working due to ftp implementation and
  /etc/pam.conf missmatch.
  So add ftpd entries into /etc/pam.conf.

Reported by: "Jose M. Alcaide" <jose@we.lc.ehu.es>
Approved by: jkh

Reviewed by: markm
2000-02-12 20:22:20 +00:00
hosokawa
549644f3c2 Added Melco Airconnect wireless Ethernet.
Submitted by:	Hidetoshi Shimokawa <simokawa@sat.t.u-tokyo.ac.jp>
OK'ed by:	jkh@FreeBSD.org
2000-02-12 01:49:29 +00:00
nsayer
320ecd9d1a When running dhclient on a PC-Card insertion, specify the inserted
interface on the dhclient command line. Not doing so screws up vmware's
network interface by attempting to configure it for DHCP (which will
never work, of course). It also would impact any other interface that
may be present that, again, would likely be manually configured for
some other purpose.

Approved by: jkh
2000-02-11 14:49:42 +00:00
rwatson
a4d6222e61 Remove /dev/console from the jail /dev environment. It's probably not
strictly a security hole, but neither is it a very good idea.  Replace
it with a symlink to /dev/null to happify programs that expect it.

It is suggested that users of the jail environment modify the jail's
syslog.conf to not send stuff to /dev/console, but instead syslog
it somewhere else.  Such as a loghost, potentially even to the host
environment's syslog.

Approved by:	jkh
2000-02-09 22:08:12 +00:00
rwatson
5b76fa6882 Intoduce a new make.conf entry, NO_MAKEDEV, and modifications to
/etc/Makefile so that if it is defined, MAKEDEV all is not called
during a make distribution.  This helps clean up the messy userland
in jail(), by reducing the number of devices exposed in jail.
Modifications to jail(2) to follow.

Approved by:	jkh-arius
2000-02-09 04:08:18 +00:00
rwatson
6b5dfacc05 Add two commented out syslog.conf entries, one to demonstrate the use of
an all.log for logging all messages, and one to demonstrate use of loghosts.
Also, a matching entry in newsyslog.conf for all.log.

Per request of Garrett Wollman, also modified the maillog entry to use the
@T newsyslog time specification mechanism.  Because newsyslog doesn't
support the mod date specification machanism, couldn't change other
entries that required more than one execution a month, but less than once
a day.

Approved by:	jkh
Reviewed by:	freebsd-security
2000-02-08 21:57:28 +00:00
paul
1526ff49b0 Add a firewall_flags option that is used when ipfw processes a file. It allows
you to run a preprocessor, such as m4, so that you can use macros in your
rules file.

Approved by:	jkh
2000-02-06 19:25:00 +00:00
hm
104b16d9f8 Approved by: jkh
Reviewed by: joerg

The isdnd is able to listen on a socket for isdnmonitor to connect to
it to remotely control it (similar to ppp and pppctl). When this is
enabled in the isdnd config file, it will fail currently because isdnd
is started before the network interfaces are configured.
It is necessary to move the isdnd start after the ifconfig of the network
interfaces, then this problem will not occur.
2000-02-06 16:33:54 +00:00
nsayer
a45c89719d /dev/vn0b is a character device now.
Approved by:	jkh
2000-02-03 06:06:36 +00:00
obrien
8c8b7d18d9 Revert to rev 1.6 until post 4.0-R. As probably 98% of i386 installs
happen with a keyboard and monitor the console change was not as needed
in the i386 case as the Alpha case.  IMO >50% of Alpha installs are using
a serial console, the change matching rev 1.7 should not be backed out.
2000-01-29 12:18:03 +00:00
bde
945f3db468 Fixed chgrp lossage in rev.1.233. Most floppy devices and all slices for disk
devices because accessible by group wheel instead of group operator.

Didn't fix fishy group for rsa*.ctl.  This device should have group operator
if that is safe, or mode 600 and group wheel.

Removed ssc and uk*.

Removed bogus (redundant) chmod's to 600.
2000-01-29 10:32:49 +00:00
imp
a7825a6a4f Add three entries:
# Apollo PCMCIA Ethernet Adapter
# Olicom OC2220
# National Semiconductor InfoMover NE4100

I forgot who submitted the first two, but the third one was submitted
by Jim Bloom.
2000-01-29 02:04:16 +00:00
obrien
6a916c7514 * Use console' rather than ttyv0' so there will always be a getty on
the console reguardless of the type of console.
* Make the Alpha version match the i386 version.
2000-01-29 00:50:21 +00:00
rgrimes
286cc6ca6a Update this with the additional nets recomended by reading
draft-manning-dsua-01.txt.

Stop using public addresses as samples and use the recommended
192.0.2.0/24 netblock that has specifically been set aside for
documentation purposes.

Reviewed by:	readers of freebsd-security did not respond to a request
                for review
2000-01-28 11:30:28 +00:00
iwasaki
d6744967d0 Add 'config auto' confirmed entries.
Submitted by:	Atsushi Onoe <onoe@sm.sony.co.jp>,
		YAMAMOTO Shigeru <shigeru@iij.ad.jp>,
		Masahide -mac- NODA <mac@clave.gr.jp>
2000-01-27 23:09:13 +00:00
obrien
1731b249cc Revert to rev 1.3 since the sed'ing is wrong. Revisit this after 4.0-RELEASE. 2000-01-27 22:52:43 +00:00
sumikawa
3ae8e7e111 Remove 'USE_INET6' define. Now we check IPv6 ability by 'OSVERSION'
Suggested by:	asami
2000-01-27 19:17:33 +00:00
obrien
fffe75d935 Fix English. Also use full spelling and reorg a little while I'm here.
Submitted by:	Andy Farkas <andyf@speednet.com.au>
2000-01-25 11:25:59 +00:00
n_hibma
7d24a31cec Install the USB include files in /usr/include/dev/usb.
We should still sort out some way of avoiding the clutter. Not all files
should be there.

Prompted by:   Louis A. Mamakos <louie@TransSys.COM>
2000-01-25 09:24:23 +00:00
markm
15376e5b0c Add a (commented out) macro that will, when uncommented, cause Kerberos5
(AKA Heimdal) to be built. Suitable admonishments about the experimental
state of this code are included.

SEROUS HACKERS ONLY!!
2000-01-24 20:16:41 +00:00
asmodai
6c58068133 Bah! Give me the pointy hat. Never commit fixes when just awake.
anable -> enable

Spotted by:	Alexander Leidinger <Alexander@leidinger.net>
2000-01-24 15:21:43 +00:00
iwasaki
cc4f3d1aba Two PCCard Modem entries.
o Fix entry for Megahertz XJ4336-CC4336. Old config (sio1) seems
  conflict with IrDA port or COM port on some laptop and sometimes
  totally hang up after insertion.
o Add 'NTT DoCoMo Mobile D Card 96P1' which is used by many
  people in Japan.

Reviewed by:	imp
2000-01-24 12:12:37 +00:00
asmodai
2e57b19caa Fix my obmission of the keyword enable after apm -e.
Submitted by:	Blaz Zupan <blaz@amis.net>
2000-01-24 09:14:41 +00:00
imp
8c593e38b0 Add Billionton 10 Base-TX ETHERNET PC CARD.
This entry has a high likelyhood of conflicting with others since the CIS
identifies this as "PCMCIA" "PCMCIA-ETHERNET-CARD".
2000-01-24 05:35:32 +00:00
kuriyama
24a57da257 Whitespace/TAB cleanups only. 2000-01-23 22:02:36 +00:00
n_hibma
d391e2ce0f Add the unlpt\d+ device to MAKEDEV. It is the same as ulpt\d+, except
that it does not reset the printer when opened. This fixes the problem
of printing a document almost till the end and then resetting the
printer when the next print job is started.

Submitted by:   Christopher Masto <chris@netmonger.net>

Also, remove all but the ums0 device from the fixit target 'to save
precious i-nodes on the fixit floppy'.
2000-01-23 11:40:10 +00:00
asmodai
d5c4d0edb4 Use apm instead of apmconf.
Necessary change to due removal of apmconf which got moved into apm
by green.
2000-01-23 10:04:50 +00:00
hosokawa
8c7a346e68 Added Banksia CardModem 56.
Submitted by: Rice <benno@netizen.com.au>
2000-01-23 05:26:15 +00:00
hosokawa
9b2ca25495 Fixed name of CyQ've Ethernet Card. 2000-01-23 03:01:26 +00:00
hosokawa
afc0afa978 Added IC-CARD+ Ethernet card. 2000-01-23 03:00:04 +00:00
hosokawa
decebf3eb5 Added Planex FNW-3600-T 16bit FastEthernet. 2000-01-22 19:02:47 +00:00
hosokawa
eb811cc37f Added tag (pccard:$device) for insert/remove event log.
Submitted by:	Warner Losh <imp@village.org>
2000-01-22 17:13:20 +00:00
hosokawa
9b17cb62b4 Added Corega Ether PCC-T.
PR:		conf/14297
Submitted by:	sanpei@sanpei.org
2000-01-22 15:58:04 +00:00
imp
4198f20cbc Cleanup of the card database:
o Make sure every entry has a logger event on insert/delete
o Make sure that the order of loggers is consistant
o Add D-Link DEF-650
o use /sbin/ifconfig consistantly
o Add Elecom Laneed LD-CDE, NTT DoCoMo Paldio 321S and 341S
  (from shige@FreeBSD.org)
2000-01-21 16:55:21 +00:00
hosokawa
02fc4b04ce Fixed "NTT DoCoMo PCMCIA DATA/FAX ADAPTER 9600".
Submitted by:	Hidetoshi Shimokawa <simokawa@sat.t.u-tokyo.ac.jp>
2000-01-21 12:26:12 +00:00
n_hibma
c949fad9c4 Group of usb and usb\d+ is now operator and permissions are 0660.
Might need to be revisted to make it 0640 and limit the access to usb
and usb\d+ (in sys/dev/usb/usb.c) to 'retrieve info' only for operator.
2000-01-21 09:42:20 +00:00
hosokawa
a455fbe1d8 Added Megahertz X-Jack Ethernet Card. (sorry, Warner, please merge it!)
Obtained from:	PAO
2000-01-21 09:26:13 +00:00
hosokawa
0d26a5787c Added
Allied Telesis Ethernet Card
 Panasonic KX-PH402D

Submitted by: Hidetoshi Shimokawa <simokawa@sat.t.u-tokyo.ac.jp>
2000-01-21 06:59:19 +00:00
hosokawa
0c9a9501c2 s/echo/logger -s/ to insert/remove lines in pccard.conf.
Obtained from:	PAO
2000-01-21 06:42:49 +00:00
kuriyama
6e6fcaf129 Add $FreeBSD$. 2000-01-20 14:56:37 +00:00
obrien
fb20480840 Update the sed action to match the change to "diff -u".
Otherwise the encrypted password of any account who's information changed
was shown in the daily email to root.

Submitted by:	jhb
2000-01-20 03:12:57 +00:00