Commit Graph

3681 Commits

Author SHA1 Message Date
mux
6a7b9a7c64 Rework the wording of the comment for the security.bsd.see_other_uids
sysctl a bit.

Approved by:	jmallett
2003-03-13 18:43:50 +00:00
ru
bfe7fb29c7 Record the BOG death here too. 2003-03-12 14:29:15 +00:00
ru
26502dd8d8 No tabs here. 2003-03-11 11:14:34 +00:00
markm
ecc5f917a3 Initiate KerberosIV de-orbit burn. Disconnect the /etc configs. 2003-03-08 09:50:11 +00:00
sam
87f8be3c6a add ath to the list of Ethernet devices 2003-03-07 23:43:09 +00:00
peter
f9806b1803 Stop creating /usr/include/netns 2003-03-05 19:21:23 +00:00
ume
afad0cd7d1 Latest IPFilter requires flushing rules for IPv6 separately
from IPv4.
2003-03-05 17:16:22 +00:00
ru
b6a38ff592 Make sure the default install comes with /etc/login.conf hashed. 2003-03-03 11:19:18 +00:00
dougb
bd43cb6292 Don't try to deal with vi.recover if the directory doesn't exist
PR:		conf/24515
Submitted by:	Jeroen C. van Gelderen <jeroen@systemics.com>
2003-02-21 09:37:20 +00:00
mtm
ca2c24db40 We stopped reloading rc.conf for each script a long time ago. Things
shouldn't depend on that any more.

PR:		conf/48332
Approved by:	markm (mentor)(implicit)
2003-02-16 20:46:08 +00:00
des
2753d4cfa6 Alphabetize. 2003-02-16 13:07:20 +00:00
des
a9bd5d5fb8 Back out previous commit now that pam_opieaccess(8) has an allow_local
option.
2003-02-16 13:04:27 +00:00
des
a9b8975387 Add the allow_local option to all pam_opieaccess entries. 2003-02-16 13:02:39 +00:00
des
8c8f33d988 Add the want_agent option to the commented-out "session" pam_ssh entry. 2003-02-16 13:02:03 +00:00
des
cc216413fb Allow password logins from localhost (including the console). 2003-02-15 23:17:40 +00:00
keramida
6b0752c491 Remove {man,cat}n from /usr/share/man. They had been added for TCL,
but it's no longer a part of the base-system and buildworld works fine
here after deleting them both on disk and from the mtree spec files.

Not objected to by:	kris, silence on -audit
2003-02-15 23:05:48 +00:00
jhay
0333c90edc kenv moved from /usr/bin/ to /bin/. 2003-02-15 16:34:14 +00:00
jhay
b671096f55 Add another backslash ('\'). 2003-02-15 16:29:20 +00:00
shiba
058ff5e0df Add YIS YWL-11B. 2003-02-15 14:04:05 +00:00
mtm
4d9a4192f7 When cleaning /var/run make sure the control files are not removed
unconditionally when the script is being rerun (when it is called
with the reload argument).

PR:		conf/47517
Approved by:	markm (mentor)
2003-02-15 06:00:11 +00:00
imp
b735f32b59 Back out 1.143 and 1.144. They are no longer needed now that we start
devd later in the boot process.  This should fix all the problems
people have had with those commits.  Diskless should be working again,
and those that mount /usr with nfs should be able to do that again too.
2003-02-12 04:26:10 +00:00
imp
65ef87b1e1 Start devd after the networking stuff, but before we mount the
critical remote systems.  This lets us run commands from devd that
aren't on the / partition.  This also means we can remove some kludges
from the networking startup that I added a while ago that caused other
problems.

There's still a race in starting devd that needs to be fixed in devd
so that things present at boot will be configured by the time devd
does daemon().  That race will be fixed later.
2003-02-12 04:22:40 +00:00
imp
8412e60e53 Now that we don't have the NODEVFS case, we can just check to see if a
device node exists directly to see if OLDCARD is compiled into the
kernel.  This eliminates the scary warning that people using NEWCARD
are seeing when they have pccard_enable=YES in their /etc/rc.conf
files.
2003-02-12 04:12:23 +00:00
ache
652b5cc7e3 Apply man.alias to /usr/share/openssl/man too 2003-02-11 01:08:51 +00:00
nectar
b36647ffe0 Install the OpenSSL man pages in /usr/share/openssl/man
and remove the WANT_OPENSSL_MANPAGES knob.
2003-02-10 19:57:56 +00:00
des
d4d4a833ae Major cleanup & homogenization. 2003-02-10 00:50:03 +00:00
des
439e079c7b No idea what this is for, and it doesn't make much sense. If a port needs
it, it can install its own copy in /usr/local/etc/pam.d/.
2003-02-10 00:49:44 +00:00
des
ca9add3762 There's no reason to have two identical policies for FTP servers, so
make ftp a symlink to ftpd.
2003-02-10 00:47:46 +00:00
joerg
5428aebe8f Set the expected permissions of /dev to 0555 since this is what devfs
is using anyway.  Otherwise, "make installworld" insists on resetting
them to 0755.
2003-02-09 19:33:53 +00:00
gshapiro
da275a07b3 Allow multiple aliases files to be rebuilt
PR:		bin/40540
Submitted by:	Cyrille Lefevre <cyrille.lefevre@laposte.net>
MFC after:	3 days
2003-02-08 21:55:31 +00:00
gshapiro
d908e50a42 /etc/rc.network isn't built to handle a value of "DEFAULT" (nor should it
be).  Using that string leads rc.network to execute:

# sysctl -w vfs.nfs.bufpackets=DEFAULT
vfs.nfs.bufpackets: 4 -> 0

Which isn't what was intended.

PR:		conf/31280
MFC after:	3 days
2003-02-08 20:55:56 +00:00
gshapiro
0cb596bf64 Add a comment regarding the use of the msgs alias with sendmail to help
users who want to enable it.

PR:		misc/39951
2003-02-08 19:00:12 +00:00
phk
5f06b24786 Install geom include files. 2003-02-08 13:25:48 +00:00
keramida
be3ac9dc01 Misc grammar, typo and wording fixes of comments.
PR:		docs/41034
Submitted by:	Chris Pepper <pepper@rockefeller.edu>
2003-02-07 20:58:38 +00:00
trhodes
2791241073 Add a header: #!/bin/sh.
PR:	44363
2003-02-06 22:00:38 +00:00
des
3a6d7496df Use pam_group(8) instead of pam_wheel(8). 2003-02-06 14:33:23 +00:00
ru
58b4ceca92 NODEVFS cleanup. 2003-02-05 15:31:43 +00:00
maxim
6e5764ed08 ep(4) does not have link0 and link1 options.
PR:		conf/46651
Submitted by:	Eugene Grosbein <eugen@grosbein.pp.ru>
Reviewed by:	imp, mdodd
MFC after:	1 week
2003-02-04 14:10:55 +00:00
des
1b6009d788 Don't enable pam_krb5 by default - most people don't have it since most
people don't build with MAKE_KERBEROS5 defined.  Provide commented-out
usage examples instead, like we do everywhere else.

Pointy hat to:	des
2003-02-03 14:45:02 +00:00
des
13a23e2886 Enable pam_krb5 for sshd. I've had this in my tree for ages. 2003-02-02 18:41:26 +00:00
phk
785fe397cc NODEVFS cleanup: Goodbye, and good riddance! 2003-02-01 22:22:50 +00:00
phk
f4dd60325f NODEVFS cleanup: Don't ever install MAKEDEV anymore. 2003-02-01 22:22:06 +00:00
dbaker
c659131c45 Re-add information for applying for IP space from a registry since that
hasn't been included since the ancient rs.internic.net address was
removed.

Offer the option of the five regional registries.

MFC after:	3 days
2003-01-28 21:29:23 +00:00
jake
a658a1d508 Change ofwcons to use the output-device property from the firmware for the
name of the device that it creates.  Update /etc/ttys accordingly.

An alias is created for the old name so that old /etc/ttys will continue to
work, but due to aliases being implemented as symlinks in devfs you cannot
login as root when using the alias device.

Discussed with:	grehan
2003-01-27 04:42:17 +00:00
mtm
4185214610 NETWORKING should also mean routing daemons are up.
Approved by:	markm (mentor)
2003-01-25 23:14:08 +00:00
mtm
df94d591fe Start isdnd before ppp for those folks who use ppp-over-isdn.
Approved by: markm (mentor)
2003-01-25 23:03:48 +00:00
mtm
30ac5984d1 Read /etc/rc.subr.
Approved by: markm (mentor)(implicit)
Noticed by: kris
2003-01-25 20:02:35 +00:00
mtm
8a55a31618 Cleanup as many instances of rc.conf variable use before
calling load_rc_config().

Approved by:	markm (mentor) dougb
2003-01-24 00:37:52 +00:00
mtm
c4b9ff8c51 Missing '$'
Approved by: markm (mentor)(implicit)
2003-01-23 04:31:55 +00:00
mtm
83c819b8ca Write out the debug messages (from the previous commit) only if
the evaluated command exists.

Approved by: markm (mentor)(implicit)
2003-01-20 19:30:15 +00:00
mtm
63b49e34b0 Add a missing OR.
Approved by: markm (mentor)(implicit)
2003-01-20 18:57:16 +00:00
mtm
93839ecd46 Make the debug messages, for when a script rolls its own start routine,
more usefull. Currently it just says 'xxx_cmd'; whereas with this
change it will name the routine that's being run.

Approved by: markm (mentor)
2003-01-18 05:25:59 +00:00
shiba
f5d96fabf6 Add BUFFALO LPC-CF-CLT(10Base-T Compact Flash Ether Card). 2003-01-18 02:14:23 +00:00
shiba
20a5b92a1d Add Allied Telesis WR211PCM. 2003-01-17 18:50:00 +00:00
ache
e9b9f5d7a7 Add missing ca_ES, lt_LT, sr_YU aliases 2003-01-17 00:56:34 +00:00
mtm
5481f18dda Purely cosmetic change.
The # PROVIDE line should precede the # REQUIRE line.

Approved by: markm (mentor)
2003-01-16 02:27:52 +00:00
anholt
af4f99d7e4 Add missing lib/X11/xedit/lisp directory. 2003-01-16 02:17:28 +00:00
mtm
b5975780a0 Add rc_debug knob to rc.conf. The code for it has been in rc.subr for
some time now.
Document all knobs introduced by rc.d

Approved by: markm (mentor)
Reviewd by: gordon (earlier revision)
2003-01-14 15:50:17 +00:00
mtm
5b562bb909 Finish merging in rev. 1.124 of rc.network, so that natd can be used
withough the $natd_interface having to be explicitly specified on the
command line.

Approved by: markm (mentor)
Submitted by: Aaron D. Gifford <agifford@infowest.com>
PR: conf/47024

MFC: upon re approval
2003-01-14 15:43:02 +00:00
trhodes
de8d990d61 Add an entry for the Dlink Air 660 Wireless PC Card.
PR:		46977
Submitted by:	gioria
Approved by:	imp
2003-01-14 00:50:30 +00:00
mtm
6b09937795 Fix the named script to find the correct pid file for the
named(8) daemon by providing a new rc.conf knob: named_pidfile
that defaults to the path specified in the system-installed named.conf(5).

Approved by: markm (mentor)
Reviewed by: dougb
Noticed by : Galen Sampson <galen_sampson@yahoo.com>
	     Dan Pelleg <daniel+bsd@pelleg.org>
PR: conf/46402
MFC:	2 weeks (with re@ approval)
2003-01-12 04:53:54 +00:00
imp
48b15bd431 Either compaq has two variants of the WL200, or the old entry is
wrong.  Go ahead and include a second entry for the WL200 until I can
sort this out.

Submitted by: Matt Pearce
2003-01-10 18:35:20 +00:00
imp
eeb45a6b22 Move devd.conf here and install it by default (didn't do a repo copy
because there's so little history to save).

MFC After: 10 millifortnights
2003-01-09 04:05:06 +00:00
wollman
17be46c0fd Tighten wording of comment.
Suggested by:	gshapiro
2003-01-08 18:52:32 +00:00
wollman
62de1738a4 Do not do manually what sendmail(8) can do better automatically.
Tell sendmail to clean up its own host status cache.
The error condition handling could probably be done better.
2003-01-08 18:51:45 +00:00
se
6f580108ee Add support for bzip2ed log files. 2003-01-05 21:32:50 +00:00
schweikh
12edf4cf84 Comment out imap3@220 and imap4-ssl@585 which are not used.
PR:		conf/46294
Submitted by:	Larry Rosenman <ler@lerctr.org>
MFC after:	2 weeks
2003-01-04 16:03:56 +00:00
schweikh
1ac502d86b Add 1701/l2tp, layer 2 tunnelling protocol, as per IANA services.
PR:		conf/35240
Submitted by:	Annihilator <annihilator.c@usa.net>
MFC after:	2 weeks
2003-01-04 15:46:22 +00:00
schweikh
d3367c5f5d Correct typos, mostly s/ a / an / where appropriate. Some whitespace cleanup,
especially in troff files.
2003-01-01 18:49:04 +00:00
rwatson
3a7029ba89 Further sync to kernel make_dev(): since we don't provide group access
to /dev/raidctl, don't set the group to operator.  (This isn't a
storage device, it's a control device).

Also, since umask here is already restrictive, we don't need to
explicitly set the mode.

Submitted by:	bde
2002-12-31 16:45:47 +00:00
simokawa
3ebf3b00f0 add fwmem* and fw*. 2002-12-31 06:38:35 +00:00
rwatson
aec7208153 Set the mode on the raidctl device to 0600.
Reviewed by:	scottl
2002-12-31 06:14:59 +00:00
simokawa
02d98a35b2 Install /sys/dev/firewire/*.h under /usr/include/dev/firewire
for userland utilities.
2002-12-30 09:45:03 +00:00
ache
1a6e942ead Add directories for upcoming ca_ES locale 2002-12-30 08:52:05 +00:00
dillon
7622b6cacb Synchronize old rc.diskless scripts from new rc.d/ scripts 2002-12-28 18:47:53 +00:00
dillon
42849ff806 Redo the initial rc_ng check to avoid rc.conf pollution occuring too early,
initdiskless may retarget /etc and various rc.conf files.  The initial check
is now done in a subshell.
Reviewed by:	Mike Makonnen <mtm@identd.net>
2002-12-23 07:09:44 +00:00
dillon
c7acde574f Forgot to add rcconf.sh to the Makefile, and forgot to rename rcconf to
rcconf.sh in the last commit.
2002-12-22 22:25:53 +00:00
dillon
59db35bde2 Do not unconditionally load the configuration files for the RCNG case.
Instead, load them as part of the rc.d system.  This allows us to prioritize
the initidiskless script so it runs before the configuration files are loaded
and allows us to get rid of the exit 2 hack in /etc/rc.  The exit 2 never
worked anyway since it did not unset the prior configuration, causing the
diskless code to not operate properly.

Do a major cleanup and revamping of the diskless code for RCNG.  This will
be backported to the non-RCNG scripts as well as -stable.

With suggestions from: Mike Makonnen <mtm@identd.net>
MFC after:	7 days
2002-12-22 22:18:41 +00:00
dillon
093dfa7f7d Revamp the way rc.diskless1 creates and populates memory filesystems. Make
the whole thing generic.  That is, /conf/base, /conf/default,
/conf/${ipba}, and /conf/${ip} are all handled the same way.

Introduce an NFS remounting feature via the /conf/base/<dir>/diskless_remount
so you can avoid dup'ing system directories in /conf (described in rc file).

Introduce a memory filesystem sizing feature via the /conf/base/<dir>/md_size
file that allows you to override the default memory filesystem size.

Introduce a file containing relative paths to remove for each memory filesystem
directory as /conf/base/<dirname>.remove.

Make the cpio feature more generic (applies to any filesystem) (aka
/conf/base/<dirname>.cpio.gz).

Allow any root directories to be created as a memory filesystem via the
/conf/*/* mechanism.

Replace the copyright notice with a reference to the COPYRIGHT file and
do other cleanups.

(documentation and man page updates to follow).

MFC after:	3 days
2002-12-21 00:30:08 +00:00
mckusick
18817ccf44 Delay an optional amount of time after booting before starting a
background fsck. The delay defaults to sixty seconds to allow
large applications such as the X server to start before disk I/O
bandwidth is monopolized by fsck.

Submitted by:	Brooks Davis <brooks@one-eyed-alien.net>
Sponsored by:   DARPA & NAI Labs.
2002-12-18 07:21:31 +00:00
eric
027582d5b7 Add Web Objects.
Obtained from:	IANA
Sponsored by:	Apple
2002-12-17 23:59:10 +00:00
green
25073c9645 Back out the previous commit, since there could be dire consequences if
/etc/rc were accidentally executed (as requested by other committeers).
2002-12-17 21:23:36 +00:00
green
29351ad491 /home/green/tmp/cvsSFosXg 2002-12-17 20:39:38 +00:00
eric
cebd669474 Add IPP (Internet Printing Protocol) and remove blank lines.
Obtained from:	IANA
Sponsored by:	Apple
2002-12-17 19:42:07 +00:00
mbr
d975ae88c1 Change the name for the local unix-socket based protocol
from "unix" back to "local".  Add some compat stuff so both
ways work for some time.

Reviewed by:    phk
Approved by:    imp (UPDATING)
Requested by:   iedowse, lukem@netbsd.org
2002-12-16 22:24:26 +00:00
dougb
f09a89b5d0 Bring in the settings from /etc/rc.devfs, which include the vga symlink
that's being replaced here. This is what /etc/rc does now.

There is no NetBSD devfs, so there is no compatibility issue.

Not objected to by:	FreeBSD-rc@yahoogroups.com
Approved by:		re (murray)
2002-12-15 21:56:53 +00:00
imp
c0586fbb4f o Don't consider LOOPBACK devices as configured... 2002-12-13 23:36:31 +00:00
fenner
33cac8d368 Renumber divert.
Forgotten by:	fenner
Approved by:	re (murray)
2002-12-13 09:18:09 +00:00
imp
bcca72ef4d o redirect the grep to /dev/null
o use ifn rather than interface in rc.network
o merge into rc.d/network1

Approved by: (re blanket)
2002-12-12 09:31:10 +00:00
eric
20084b3a37 Add Remote AppleEvents/PPC Toolbox.
Approved by:	rwatson
Obtained from:	IANA
Sponsored by:	Apple
2002-12-12 03:05:56 +00:00
imp
1faabd6cbc o Don't do anything if the interface is already up.
o Only delay in pccard_ether when we're doing dhcp and starting the interface.

Approved: (re blanket for devd)
2002-12-11 23:30:34 +00:00
keramida
f973c892f0 Avoid using perl in the periodic & security scripts. This brings the
base system one step closer to being totally perl-free.

Approved by:	re (jhb)
2002-12-07 23:37:44 +00:00
imp
d02589493f Make pccardd have -z by default. This fixes a few startup problems
where people want to have the cards configured.  Lack of -z is a speed
optimization.

Submitted by: many voices on mobile@
Approved by: re@ (rwatson)
MFC after: 3 days
2002-12-06 05:23:37 +00:00
des
81fe169630 Since OpenSSH drops privileges before calling pam_open_session(3),
pam_lastlog(8) can't possibly work, so let OpenSSH handle lastlog.

Approved by:	re (rwatson)
2002-12-03 15:48:11 +00:00
rwatson
0833bc761d Don't install old LOMAC include files; do install new mac_lomac
include files.

Approved by:	re (jhb)
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-12-03 15:05:32 +00:00
imp
5993de8d7f Two fixes for devd:
1) Move devd to the start of the head of the boot process rather than the end.
2) Disable devctl if devd is disabled.
2002-11-30 00:40:53 +00:00
ru
7214929387 Removed the vestiges of modems(5).
Approved by:	re
2002-11-27 16:45:10 +00:00
rwatson
53c241c2ca Update rc scripts to load mac_lomac instead of lomac.
Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:51:03 +00:00
ume
7f8c6531d2 compliance with RFC3152.
PR:		standards/45557
Submitted by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
Approved by:	re
2002-11-26 07:55:44 +00:00
tom
16a0962105 Clarify adjkerntz(8) note and use complete sentences in comments.
PR:		misc/45493
Approved by:	re (rwatson)
2002-11-22 16:13:39 +00:00
julian
bac58af6fd Make directory for bluetooth include files. 2002-11-21 00:36:19 +00:00
thomas
dfc9d731c3 Do not emit a message on stderr when one of the compared files
is shorter than the other.

Reviewed by:	roberto
MFC after:	3 days
2002-11-16 14:58:39 +00:00
thomas
e4fc2471bb Remove incorrect output redirection.
Reviewed by:	roberto
Committed from:	EuroBSDCon Amsterdam
MFC after:	3 days
2002-11-16 14:57:12 +00:00
ru
6fc80984d8 Backout rev. 1.263.
Approved by:	jmallett
2002-11-15 18:44:09 +00:00
ru
13f0bf4343 Fixed two typos in comments. 2002-11-15 08:26:36 +00:00
obrien
5a20d2febf [DAIVD O'BRIEN's OPINION]
Head off what I think is an abuse of the TRB, and disable lukemftpd.
2002-11-12 17:31:12 +00:00
imp
f868559af8 Turn off devd until I have a devd.conf file that I can install one
that does no harm.
2002-11-12 07:10:45 +00:00
imp
48e55d4e98 Add devd_enable
Submitted by: dougb
2002-11-10 09:13:31 +00:00
gordon
bbfee3a58a By popular demand, make the debug log to syslog.
Remove an extraneous return too.
2002-11-09 17:34:21 +00:00
imp
ce0874622d Add devd to the mix. It should run basically last at this point.
# I've tested this, but only lightly, so please email me with problems.
2002-11-09 07:45:53 +00:00
gordon
67cb5b60d2 Diff reduction to NetBSD:
Fix a minor grammer nit.
Get rid of _echo that uses logger and just call logger in the 3 routines
that need it.
Add a comment referencing rc.conf(5) in the case of an incorrectly set
variable.

This pulls rc.subr up to 1.51 of rc.subr. I skipped 1.49 (systrace support)
since I don't have systrace.

Obtained from:	NetBSD
2002-11-08 17:06:15 +00:00
dougb
70d50c6e7f Import the latest hints file from Internic. The most important change
is that J has moved, however I'm sure you'll all be very disappointed
to hear that you can no longer retrieve this file via gopher.
2002-11-06 09:21:39 +00:00
fenner
40f9bda532 Force rpcbind to start even if it wasn't enabled. This solves the ypbind
problems people were having at startup.

Approved by:    re
2002-11-04 20:51:20 +00:00
markm
dc392314fa Restore /var/games; lots of ports' games use it. 2002-11-04 07:50:48 +00:00
ume
6866e4bdca Add IPv6 setup for ipfilter. `ipv6_ipfilter_rules' was added
to specify rules definition file for ipfilter.  The default is
/etc/ipf6.rules.  If there is a file which is specified by
'ipv6_ipfilter_rules', IPv6 rule is installed.

Reviewed by:	Ronald van der Pol <Ronald.vanderPol@rvdp.org>
MFC after:	1 week
2002-11-02 08:21:26 +00:00
gordon
4b5486a5f6 Wrap test case in an if statement to avoid crunching a return value. 2002-10-31 02:06:05 +00:00
tobez
8cbd99a1e8 Remove Perl bits still lurking in BSD.local.dist. It is a
responsibility of lang/perl5 to deal with those nowadays.

Requested by:	kkenn
2002-10-29 16:48:03 +00:00
obrien
b24557e6f0 Tweak the warning language. 2002-10-29 08:41:12 +00:00
fenner
4cf64ec6bb Fix "err" usage.
PR:		44284
Submitted by:	Sergey Mokryshev <mokr@mokr.net>
2002-10-26 00:18:06 +00:00
fenner
389223166a Fix two typos. Using "-eq" instead of "=" in a [ caused an error when
an entry in /etc/sysctl.conf didn't exist.  Fixing this exposed a minor
typo "exits" vs. "exist".

However, there doesn't appear to be any provision to run this with
the "lastload" argument, meaning that the error will never appear.
2002-10-25 23:02:54 +00:00
ache
7a461db5d5 Add lt_LT.ISO8859-13 2002-10-25 22:00:34 +00:00
markm
ee81d136f6 No need for this config file; games are gone. 2002-10-25 19:11:19 +00:00
thomas
08d4d01809 Add newly-added sripts to FILES.
Reviewed by:	roberto
2002-10-25 15:23:26 +00:00
thomas
0eb26ce875 Add a new /etc/periodic/security script to check for packets
rejected by ipfilter (510.ipfdenied), and a corresponding periodic.conf
knob (daily_status_security_ipfdenied_enable).

Reviewed by:	roberto
Approved by:	re@
2002-10-25 15:16:54 +00:00
thomas
24742dd0fd Factor out code across various /etc/periodic/security scripts into a
separate file, /etc/periodic/security/security.functions.

Reviewed by:	roberto (mentor)
Approved by:	re@
2002-10-25 15:14:16 +00:00
luigi
d40d2f4e74 Fix a bug in MAKEDEV -- when creating /dev/usb, the code was using
whatever random value was already in $unit. It happened to work
because the variable is often unset, but this is not always the
case e.g. when you call "MAKEDEV sio2 usb ..."

This affects -stable as well.

Reviewed by: n_hibma
Silence from: re
MFC after: 3 days
2002-10-24 17:59:58 +00:00
rwatson
25c64c35f4 # WARNING: lukemftpd does not support PAM, MAC, per-class nologin files,
# or any login.conf resource limits or features; use it only if this is
# appropriate for your environment.  If you require these features, use
# the regular FreeBSD ftpd below.

Discourage users from using lukemftpd if they rely any of these standard
FreeBSD features that are fully supported by our native ftpd.  There
may be other features that are not yet supported that I have not yet
discovered.
2002-10-24 15:46:10 +00:00
rwatson
f6d65f6f93 Install mac_partition include files.
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-24 15:25:37 +00:00
phk
a3930efa79 Invert the logic of the NO_MAKEDEV options to match the 5.0-R default install. 2002-10-22 15:01:50 +00:00
rwatson
d8ee04e4a3 Hook up a sample mac.conf to the install. The sample basically
tells applications to print labels for all of the TrustedBSD-
generated policies, if they are present.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-22 14:38:49 +00:00
markm
cc5521cdd1 Do not build the majority of the games. Remaining are the
"utility-like" games and everyone's favourite, fortune(6).
2002-10-20 11:18:56 +00:00
scottl
710948de69 After much delay and anticipation, welcome RAIDFrame into the FreeBSD
world.  This should be considered highly experimental.

Approved-by:	re
2002-10-20 08:17:39 +00:00
ache
42a6db1ee1 Add sr_YU locale directories
Submitted by: Toni Andjelkovic <toni@soth.at>
2002-10-19 12:56:56 +00:00
tmm
cc168019ae Install the include files in sys/dev/ofw. 2002-10-18 15:30:50 +00:00
sam
af15e52e67 install "fast ipsec" include files 2002-10-18 04:21:29 +00:00
rwatson
7185b416e6 Exempt the "wheel group requirement" by default when su'ing to root if
the wheel group has no explicit members listed in /etc/group.  This adds
the "exempt_if_empty" flag to pam_wheel in the default configuration;
in some environments, it may be appropriate to remove this flag, however,
this default is the same as pre-pam_wheel.

Reviewed by:	markm
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-18 02:39:21 +00:00
sobomax
7608e05bd5 Fix silly typo: loacal --> local. 2002-10-17 23:46:32 +00:00
keramida
2b883693be Replace old, not-working URL for an online index of DNS blacklist
servers with a reference to the Google directory.

Reviewed by:	gshapiro
MFC after:	1 week
2002-10-16 22:52:56 +00:00
rwatson
ab086bb517 Remove root from the 'guest' group: missed in a previous pass.
Spotted by:	jhb
2002-10-14 20:55:49 +00:00
rwatson
e503981b22 Remove root from the kmem, sys, tty, and staff groups in the default
configuration.  Root privileges override DAC on local file systems and
therefore root does not generally need to be a member of a group to
access files owned by that group.  In the NFS case, require explicit
authorization for root to have these privileges.

Leave root in operator for dump/restore broadcast reasons; leave root
in wheel until discrepencies in the "no users in wheel means any user
can su" policy are resolved (possibly indefinitely).
2002-10-13 17:00:37 +00:00
rwatson
3f24148d9c For consistency with other entries in group, don't put the daemon or
xten users in their groups explicitly--we pick that up from the gid
field in master.passwd.
2002-10-13 16:26:26 +00:00
schweikh
3e436232c1 s/dependancy/dependency/ 2002-10-12 13:49:21 +00:00
schweikh
b7d8725365 Fix style bugs:
* Space -> tabs conversion.
* Removed blanks before semicolon in "if ... ; then".
* Proper indentation of misindented lines.
* Put a full stop after some comments.
* Removed whitespace at end of line.

Approved by:	silence from gordon
2002-10-12 10:31:31 +00:00
dd
1729d6240e Aesthetics: Output a prefix before sourcing rc.local as the old rc
script did.  Stuff in rc.local frequently has lines like
"echo -n ' service_name'" which look ugly without a prefix and a
trailing period.  Likewise for rc.shutdown.local for consistency.
2002-10-12 07:23:43 +00:00
dd
17052f13f4 Aesthetics: Most (all?) other messages output at boot time have
trailing periods, so why shouldn't this one?
2002-10-12 07:21:18 +00:00
joerg
c654638cb1 When considering temporary files for deletion, don't examine the mtime
and atime only, but also the ctime.  Otherwise, files extracted from
tar or zip archives will immediately be declared stale since they've
got their mtime reset to the original mtime.

Reviewed by:	brian
MFC after:	1 week
2002-10-06 18:48:20 +00:00
scottl
5846242df8 Remove matcd from MAKEDEV.
X-MFC after:	ASAP
2002-10-05 18:28:48 +00:00
sam
1ed00d451b add support for /dev/crypto 2002-10-04 20:44:46 +00:00
sam
80ef0853a6 install sys/opencrypto include files in /usr/include/crypto 2002-10-04 20:44:28 +00:00
schweikh
510f8bbd85 Fix all whitespace style bugs where spaces have been used
where tabs should have been. Cut & paste disease?

Spotted by:	vi(1) tabstop=4
MFC after:	2 weeks
2002-10-03 20:39:29 +00:00