Commit Graph

75 Commits

Author SHA1 Message Date
Colin Percival
48ffe56ac5 Add FreeBSD Update 2.0 client code. The build code is in the projects
repository.

Sponsored by:	FreeBSD security development fundraiser
2006-08-31 09:51:34 +00:00
Robert Watson
5ba29bf644 Change group for /var/audit to audit, so that audit review can be
delegated to non-administrators.

Obtained from:	TrustedBSD Project
2006-02-05 18:22:56 +00:00
Robert Watson
2d61cce037 Add /var/audit, mode 750, which will hold audit trail files.
Obtained from:	TrustedBSD Project
2006-02-02 01:19:31 +00:00
Colin Percival
6fb01948ee Add portsnap to the base system. This is a secure, easy to use,
fast, lightweight, and generally good way for users to keep their
ports trees up to date.

This is version 0.9.4 from the ports tree (sysutils/portsnap) with
the following changes:
1. The experimental pipelined http code is enabled.  No seatbelts
in -CURRENT. (^_^)
2. The working directory has moved from /usr/local/portsnap to
/var/db/portsnap (as discussed on -arch two days ago).
3. Portsnap now fetches a list of mirrors (distributed as DNS SRV
records) and selects one randomly.  This should help to avoid the
uneven loading which plagues the cvsup mirror network.
4. The license is now 2-clause BSD instead of 3-clause BSD.
5. Various incidental changes to make portsnap fit into the base
system's build mechanics.

X-MFC-After:    6.0-RELEASE
X-MFC-Before:   5.5-RELEASE
X-MFC-To:       RELENG_6, RELENG_5, ports
discussed on:   -arch and several other places
"yes please" from:      simon, remko, flz, Diane Bruce
thinks this is a great idea:    bsdimp
Hopes he didn't forget any files:       cperciva
2005-08-08 20:10:06 +00:00
Ruslan Ermilov
e3fbc9ef36 Remove a redundant "uname=root".
Forgotten by:	dougb
2004-10-15 08:57:24 +00:00
Doug Barton
8f1bb3891d Create a named chroot directory structure in /var/named, and use it
by default when named is enabled. Also, improve our default directory
layout by creating /var/named/etc/namedb/{master|slave} directories,
and use the former for the generated localhost* files.

Rather than using pax to copy device entries, mount devfs in the
chroot directory.

There may be some corner cases where things need to be adjusted,
but overall this structure has been well tested on a production
network, and should serve the needs of the vast majority of users.

UPDATING has instructions on how to do the conversion for those
with existing configurations.
2004-09-28 09:46:00 +00:00
Eivind Eklund
19c53c53f9 Add /var/db/ports/ (support directory necessary for
ports that use the new OPTIONS infrastructure)
2004-01-20 13:51:23 +00:00
Ruslan Ermilov
c0984da8ae Scheduled sweep using the README guidelines.
Approved by:	re (rwatson)
2003-11-29 18:22:01 +00:00
Mark Murray
44b308453a Restore /var/games; lots of ports' games use it. 2002-11-04 07:50:48 +00:00
Mark Murray
dc2f663b39 Do not build the majority of the games. Remaining are the
"utility-like" games and everyone's favourite, fortune(6).
2002-10-20 11:18:56 +00:00
Sheldon Hearn
d86c700817 Revert previous delta, setting the system immutable flag on /var/empty
instead of the user immutable flag, now that mergemaster handles
schg directories in its /var/tmp/temproot.
2002-06-26 17:05:48 +00:00
Sheldon Hearn
ec8b657bfd Tone down the previous delta: don't set the system immutable flag on
/var/empty, because it makes it difficult for mergemaster(8) to remove
/var/tmp/temproot/var.
2002-06-26 08:58:28 +00:00
Sheldon Hearn
9ec0ab17fd The previous delta introduced /var/empty, for use by openssh-portable,
which needs an empty directory into which to chroot(2).

Hint to the operator that this directory really _should_ be empty
by creating it with mode 0555 and the system immutable flag (schg)
set.

Reviewed by:	des
2002-06-24 18:31:47 +00:00
Dag-Erling Smørgrav
9b4e71b270 Add /var/empty for the OpenSSH privsep code. 2002-06-23 20:44:19 +00:00
Gregory Neil Shapiro
5b7a235bb6 In my continuing crusade to make life better for non-sendmail users, avoid
the creation of /var/spool/clientmqueue and therefore the need for the
smmsp user and group if NO_SENDMAIL is defined.  This required breaking out
the creation of the directory into a new BSD.sendmail.dist mtree file.

MFC after:	1 week
2002-04-20 19:00:11 +00:00
Gregory Neil Shapiro
ab3e277c5c Add /var/spool/clientmqueue for 8.12's non-set-user-ID root mail submission 2002-02-17 22:11:41 +00:00
Ruslan Ermilov
633621512e Apply README style guidelines (this time checked). 2001-11-19 10:10:27 +00:00
Guido van Rooij
42ea95e63e Change mode for var/db/ipf to 0700 2001-11-17 12:21:29 +00:00
Crist J. Clark
7cd99d0ae0 Fix a bug I introduced yesterday. People who built world since the
previous commit yesterday may wish to check /var/run for junk.
2001-11-02 22:00:17 +00:00
Crist J. Clark
7558c91f77 Add a directory in /var/run to store ppp(8) command sockets.
PR:		bin/29966
Approved by:	brian
MFC after:	4
2001-11-01 23:44:12 +00:00
Andrey A. Chernov
bdd263de3f Remove /var/spool/uucp subtree, not needed for 'cu' 2001-10-26 09:40:28 +00:00
Andrey A. Chernov
5a5f6965ba The same unbreakage (0755 -> 0775) for /var/games and subdirs 2001-10-25 23:18:41 +00:00
Andrey A. Chernov
3ea034b005 Fix /var/mail, /var/rwho and /var/spool/lock back to 0775
Not sure about other dirs with the same damage (0755) by recent commit.
2001-10-25 23:13:11 +00:00
Ruslan Ermilov
6df68c6102 Style these once again. 2001-10-25 12:16:51 +00:00
Darren Reed
7b60aacc90 Create /var/db/ipf
PR:		27070
2001-10-20 04:33:12 +00:00
Kris Kennaway
d7401e9771 Put back /var/spool/uucp so it can be used for serial port locking. 2001-10-01 08:54:16 +00:00
Kris Kennaway
51b3cf3c56 UUCP removal phase II. These directories are now created by the
freebsd-uucp port.
2001-10-01 06:24:50 +00:00
Jun Kuriyama
6d9e09d7d0 Invoke named with privilege of bind:bind.
Change pidfile location to /var/run/named/pid.
2001-08-23 13:34:45 +00:00
Mark Murray
55b3d2c67f Build standard directory for kerberos 5 (Heimdal) database. 2001-07-28 20:00:54 +00:00
Nik Clayton
353b398056 Mention the path to the README file in the header comment.
Submitted by:	Rich Morin <rdm@cfcl.com>
2001-06-26 13:50:33 +00:00
Ruslan Ermilov
2f397f6b6c Apparently, people do not listen for a plea to look into the
README file before making changes here.  Fix them once again.
2001-02-15 12:25:48 +00:00
Doug Barton
10fe5181ec Move the process of storing entropy from /dev/random and reseeding with
it at boot time closer to the way we want it to be in the final version.

* Move the default directory to /var/db/entropy
* Run the entropy saving cron job every 11 minutes. This seems
  to be a better default, although still bikeshed material.
* Feed /dev/random some cheesy "entropy" from various commands
  and files before the disks are mounted. This gives /dev/random
  a better chance of running without blocking early.
* Move the reseeding with previously stored entropy to the point
  immediately after the disks are mounted.
* Make the harvesting script a little safer in regards to the
  possibility of accidentally overwriting something other
  than a regular file.
2001-01-14 07:18:31 +00:00
Peter Wemm
9b7a44a60e $Id$ -> $FreeBSD$ 1999-08-27 23:37:10 +00:00
Rodney W. Grimes
928b6de37c This cleans up all the white space errors so that the next
commit is easier to understand.
1999-08-24 03:51:34 +00:00
Rodney W. Grimes
f10c8263aa Fix script in README to actually work, empty lines produce as
much a diff as lines with the wrong stuff on it.

Add references in mtree data files to the README.
1999-08-23 05:12:43 +00:00
Satoshi Asami
6e11369b91 Explicitly specify mode 755 for /var/db/pkg -- it will be mode 700 otherwise. 1999-03-31 13:38:37 +00:00
Satoshi Asami
39f499e999 Add /var/db/pkg.
Submitted by:	John Hay <jhay@mikom.csir.co.za>
1999-03-31 07:06:39 +00:00
Peter Wemm
c399ed564c Old nit lying around in a source tree: Slightly optimize the number of
uname/gname overrides and /sets.
1998-12-16 05:50:25 +00:00
David E. O'Brien
fe840f95a8 Simplify these now that default owner is root.wheel.
Partially reviewed by: bde
1998-09-19 18:50:27 +00:00
David E. O'Brien
5ecaf9a866 Change file ownership from bin.bin to root.wheel. 1998-09-14 08:34:45 +00:00
Andrey A. Chernov
6d80f5b075 /etc/opielocks -> /var/spool/opielocks 1997-10-01 13:06:31 +00:00
Andrey A. Chernov
f4174904a8 Disallow o+rwx for /var/games/hackdir hierarchy, it helps to make hack
non-setuid back
1997-09-24 17:40:11 +00:00
Andrey A. Chernov
b0237bd3a2 Create missing /var/games/hackdir/save 1997-09-24 08:14:51 +00:00
Eivind Eklund
34a13bf4cb Change games from setuid games to setgid games.
Reviewed by:	maybe@yes.no
Obtained from:	OpenBSD (mostly deraadt@openbsd.org)
1997-09-01 00:34:51 +00:00
Andrey A. Chernov
8194222b83 Change /var/run owner to root - sendmail can't write sendmail.pid
otherwise due to safeopen
1997-07-29 11:23:14 +00:00
Jordan K. Hubbard
ab98cf58c4 Change group ownership of /var/mail to mail and permission
to 0775.

This does *not* instantly make any program which "ensures"
mail spool consistency by creating lock files safe in any way
since other tools, like mail.local, will be using flock() semantics
and any such lock file will simply be ignored.  It does, however,
allow a lot of things which are currently suid root in order to create
such bogus lockfiles to, at least, be bogus at a much lower level of
privilege (and this is good).  Ultimately, of course, everybody should
just use flock.
1997-05-03 20:15:15 +00:00
Mike Pritchard
bcc8ee65e8 Larn needs /var/games/larn to exist so that it can create its scorefile.
Closes PR# 1944.
1997-02-26 01:17:49 +00:00
Peter Wemm
79403fe300 Revert $FreeBSD$ to $Id$ 1997-02-23 09:21:14 +00:00
Jordan K. Hubbard
1130b656e5 Make the long-awaited change from $Id$ to $FreeBSD$
This will make a number of things easier in the future, as well as (finally!)
avoiding the Id-smashing problem which has plagued developers for so long.

Boy, I'm glad we're not using sup anymore.  This update would have been
insane otherwise.
1997-01-14 07:20:47 +00:00
Joerg Wunsch
f738f84d69 Uncomment the "raw" lp entry in /etc/printcap. We start lpd by
default, so there's no use in running it without any printer
definition in printcap.  Also added a bunch of hints about the printer
setup, to guide the admin about the printer setup (handbook,
"apsfilter"), and a commented-out sample setup for a remote printer.

In the same line, add /var/spool/lpd/output to BSD.var.dist since it
is referred to by the "lp" entry in printcap.
1996-10-13 16:52:40 +00:00