Commit Graph

3637 Commits

Author SHA1 Message Date
rwatson
0833bc761d Don't install old LOMAC include files; do install new mac_lomac
include files.

Approved by:	re (jhb)
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-12-03 15:05:32 +00:00
imp
5993de8d7f Two fixes for devd:
1) Move devd to the start of the head of the boot process rather than the end.
2) Disable devctl if devd is disabled.
2002-11-30 00:40:53 +00:00
ru
7214929387 Removed the vestiges of modems(5).
Approved by:	re
2002-11-27 16:45:10 +00:00
rwatson
53c241c2ca Update rc scripts to load mac_lomac instead of lomac.
Approved by:	re
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-11-26 17:51:03 +00:00
ume
7f8c6531d2 compliance with RFC3152.
PR:		standards/45557
Submitted by:	Matthew Seaman <m.seaman@infracaninophile.co.uk>
Approved by:	re
2002-11-26 07:55:44 +00:00
tom
16a0962105 Clarify adjkerntz(8) note and use complete sentences in comments.
PR:		misc/45493
Approved by:	re (rwatson)
2002-11-22 16:13:39 +00:00
julian
bac58af6fd Make directory for bluetooth include files. 2002-11-21 00:36:19 +00:00
thomas
dfc9d731c3 Do not emit a message on stderr when one of the compared files
is shorter than the other.

Reviewed by:	roberto
MFC after:	3 days
2002-11-16 14:58:39 +00:00
thomas
e4fc2471bb Remove incorrect output redirection.
Reviewed by:	roberto
Committed from:	EuroBSDCon Amsterdam
MFC after:	3 days
2002-11-16 14:57:12 +00:00
ru
6fc80984d8 Backout rev. 1.263.
Approved by:	jmallett
2002-11-15 18:44:09 +00:00
ru
13f0bf4343 Fixed two typos in comments. 2002-11-15 08:26:36 +00:00
obrien
5a20d2febf [DAIVD O'BRIEN's OPINION]
Head off what I think is an abuse of the TRB, and disable lukemftpd.
2002-11-12 17:31:12 +00:00
imp
f868559af8 Turn off devd until I have a devd.conf file that I can install one
that does no harm.
2002-11-12 07:10:45 +00:00
imp
48e55d4e98 Add devd_enable
Submitted by: dougb
2002-11-10 09:13:31 +00:00
gordon
bbfee3a58a By popular demand, make the debug log to syslog.
Remove an extraneous return too.
2002-11-09 17:34:21 +00:00
imp
ce0874622d Add devd to the mix. It should run basically last at this point.
# I've tested this, but only lightly, so please email me with problems.
2002-11-09 07:45:53 +00:00
gordon
67cb5b60d2 Diff reduction to NetBSD:
Fix a minor grammer nit.
Get rid of _echo that uses logger and just call logger in the 3 routines
that need it.
Add a comment referencing rc.conf(5) in the case of an incorrectly set
variable.

This pulls rc.subr up to 1.51 of rc.subr. I skipped 1.49 (systrace support)
since I don't have systrace.

Obtained from:	NetBSD
2002-11-08 17:06:15 +00:00
dougb
70d50c6e7f Import the latest hints file from Internic. The most important change
is that J has moved, however I'm sure you'll all be very disappointed
to hear that you can no longer retrieve this file via gopher.
2002-11-06 09:21:39 +00:00
fenner
40f9bda532 Force rpcbind to start even if it wasn't enabled. This solves the ypbind
problems people were having at startup.

Approved by:    re
2002-11-04 20:51:20 +00:00
markm
dc392314fa Restore /var/games; lots of ports' games use it. 2002-11-04 07:50:48 +00:00
ume
6866e4bdca Add IPv6 setup for ipfilter. `ipv6_ipfilter_rules' was added
to specify rules definition file for ipfilter.  The default is
/etc/ipf6.rules.  If there is a file which is specified by
'ipv6_ipfilter_rules', IPv6 rule is installed.

Reviewed by:	Ronald van der Pol <Ronald.vanderPol@rvdp.org>
MFC after:	1 week
2002-11-02 08:21:26 +00:00
gordon
4b5486a5f6 Wrap test case in an if statement to avoid crunching a return value. 2002-10-31 02:06:05 +00:00
tobez
8cbd99a1e8 Remove Perl bits still lurking in BSD.local.dist. It is a
responsibility of lang/perl5 to deal with those nowadays.

Requested by:	kkenn
2002-10-29 16:48:03 +00:00
obrien
b24557e6f0 Tweak the warning language. 2002-10-29 08:41:12 +00:00
fenner
4cf64ec6bb Fix "err" usage.
PR:		44284
Submitted by:	Sergey Mokryshev <mokr@mokr.net>
2002-10-26 00:18:06 +00:00
fenner
389223166a Fix two typos. Using "-eq" instead of "=" in a [ caused an error when
an entry in /etc/sysctl.conf didn't exist.  Fixing this exposed a minor
typo "exits" vs. "exist".

However, there doesn't appear to be any provision to run this with
the "lastload" argument, meaning that the error will never appear.
2002-10-25 23:02:54 +00:00
ache
7a461db5d5 Add lt_LT.ISO8859-13 2002-10-25 22:00:34 +00:00
markm
ee81d136f6 No need for this config file; games are gone. 2002-10-25 19:11:19 +00:00
thomas
08d4d01809 Add newly-added sripts to FILES.
Reviewed by:	roberto
2002-10-25 15:23:26 +00:00
thomas
0eb26ce875 Add a new /etc/periodic/security script to check for packets
rejected by ipfilter (510.ipfdenied), and a corresponding periodic.conf
knob (daily_status_security_ipfdenied_enable).

Reviewed by:	roberto
Approved by:	re@
2002-10-25 15:16:54 +00:00
thomas
24742dd0fd Factor out code across various /etc/periodic/security scripts into a
separate file, /etc/periodic/security/security.functions.

Reviewed by:	roberto (mentor)
Approved by:	re@
2002-10-25 15:14:16 +00:00
luigi
d40d2f4e74 Fix a bug in MAKEDEV -- when creating /dev/usb, the code was using
whatever random value was already in $unit. It happened to work
because the variable is often unset, but this is not always the
case e.g. when you call "MAKEDEV sio2 usb ..."

This affects -stable as well.

Reviewed by: n_hibma
Silence from: re
MFC after: 3 days
2002-10-24 17:59:58 +00:00
rwatson
25c64c35f4 # WARNING: lukemftpd does not support PAM, MAC, per-class nologin files,
# or any login.conf resource limits or features; use it only if this is
# appropriate for your environment.  If you require these features, use
# the regular FreeBSD ftpd below.

Discourage users from using lukemftpd if they rely any of these standard
FreeBSD features that are fully supported by our native ftpd.  There
may be other features that are not yet supported that I have not yet
discovered.
2002-10-24 15:46:10 +00:00
rwatson
f6d65f6f93 Install mac_partition include files.
Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-24 15:25:37 +00:00
phk
a3930efa79 Invert the logic of the NO_MAKEDEV options to match the 5.0-R default install. 2002-10-22 15:01:50 +00:00
rwatson
d8ee04e4a3 Hook up a sample mac.conf to the install. The sample basically
tells applications to print labels for all of the TrustedBSD-
generated policies, if they are present.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-22 14:38:49 +00:00
markm
cc5521cdd1 Do not build the majority of the games. Remaining are the
"utility-like" games and everyone's favourite, fortune(6).
2002-10-20 11:18:56 +00:00
scottl
710948de69 After much delay and anticipation, welcome RAIDFrame into the FreeBSD
world.  This should be considered highly experimental.

Approved-by:	re
2002-10-20 08:17:39 +00:00
ache
42a6db1ee1 Add sr_YU locale directories
Submitted by: Toni Andjelkovic <toni@soth.at>
2002-10-19 12:56:56 +00:00
tmm
cc168019ae Install the include files in sys/dev/ofw. 2002-10-18 15:30:50 +00:00
sam
af15e52e67 install "fast ipsec" include files 2002-10-18 04:21:29 +00:00
rwatson
7185b416e6 Exempt the "wheel group requirement" by default when su'ing to root if
the wheel group has no explicit members listed in /etc/group.  This adds
the "exempt_if_empty" flag to pam_wheel in the default configuration;
in some environments, it may be appropriate to remove this flag, however,
this default is the same as pre-pam_wheel.

Reviewed by:	markm
Sponsored by:	DARPA, Network Associates Laboratories
2002-10-18 02:39:21 +00:00
sobomax
7608e05bd5 Fix silly typo: loacal --> local. 2002-10-17 23:46:32 +00:00
keramida
2b883693be Replace old, not-working URL for an online index of DNS blacklist
servers with a reference to the Google directory.

Reviewed by:	gshapiro
MFC after:	1 week
2002-10-16 22:52:56 +00:00
rwatson
ab086bb517 Remove root from the 'guest' group: missed in a previous pass.
Spotted by:	jhb
2002-10-14 20:55:49 +00:00
rwatson
e503981b22 Remove root from the kmem, sys, tty, and staff groups in the default
configuration.  Root privileges override DAC on local file systems and
therefore root does not generally need to be a member of a group to
access files owned by that group.  In the NFS case, require explicit
authorization for root to have these privileges.

Leave root in operator for dump/restore broadcast reasons; leave root
in wheel until discrepencies in the "no users in wheel means any user
can su" policy are resolved (possibly indefinitely).
2002-10-13 17:00:37 +00:00
rwatson
3f24148d9c For consistency with other entries in group, don't put the daemon or
xten users in their groups explicitly--we pick that up from the gid
field in master.passwd.
2002-10-13 16:26:26 +00:00
schweikh
3e436232c1 s/dependancy/dependency/ 2002-10-12 13:49:21 +00:00
schweikh
b7d8725365 Fix style bugs:
* Space -> tabs conversion.
* Removed blanks before semicolon in "if ... ; then".
* Proper indentation of misindented lines.
* Put a full stop after some comments.
* Removed whitespace at end of line.

Approved by:	silence from gordon
2002-10-12 10:31:31 +00:00
dd
1729d6240e Aesthetics: Output a prefix before sourcing rc.local as the old rc
script did.  Stuff in rc.local frequently has lines like
"echo -n ' service_name'" which look ugly without a prefix and a
trailing period.  Likewise for rc.shutdown.local for consistency.
2002-10-12 07:23:43 +00:00
dd
17052f13f4 Aesthetics: Most (all?) other messages output at boot time have
trailing periods, so why shouldn't this one?
2002-10-12 07:21:18 +00:00
joerg
c654638cb1 When considering temporary files for deletion, don't examine the mtime
and atime only, but also the ctime.  Otherwise, files extracted from
tar or zip archives will immediately be declared stale since they've
got their mtime reset to the original mtime.

Reviewed by:	brian
MFC after:	1 week
2002-10-06 18:48:20 +00:00
scottl
5846242df8 Remove matcd from MAKEDEV.
X-MFC after:	ASAP
2002-10-05 18:28:48 +00:00
sam
1ed00d451b add support for /dev/crypto 2002-10-04 20:44:46 +00:00
sam
80ef0853a6 install sys/opencrypto include files in /usr/include/crypto 2002-10-04 20:44:28 +00:00
schweikh
510f8bbd85 Fix all whitespace style bugs where spaces have been used
where tabs should have been. Cut & paste disease?

Spotted by:	vi(1) tabstop=4
MFC after:	2 weeks
2002-10-03 20:39:29 +00:00
dd
850da56a49 In a diskless setup, rc.d/initdiskless may overwrite parts of /etc on
a per-machine or per-cluster (with different ways of expressing what's
part of a cluster) basis.  In order for this to be effective, rc.conf
has to be reread after initdiskless is finished.  Implement this by
adding a hook to etc/rc which rereads rc.conf by request.  This can
also be implemented by renaming initdiskless to initdiskless.sh and
sourcing rc.conf there manually, but it was decided that, that would
be uglier than a hook in etc/rc.

Developed in concert with:	gordon
2002-10-02 00:59:14 +00:00
ru
ec9540417c test -h is deprecated; use -L instead.
PR:             bin/40846
2002-10-01 13:29:45 +00:00
mdodd
6e93a3d53a - Recognize 'idt' interfaces.
- The start command is 'atm_start' not 'start_cmd'.
2002-09-30 08:01:43 +00:00
mdodd
ac39eb2576 Recognize 'idt' interfaces. 2002-09-30 08:01:16 +00:00
imp
a09d91e4b8 SAMSUNG SWL-2000P PCI Card
Submitted by: Robert Dezorzo
2002-09-30 01:19:52 +00:00
imp
eaf67fef34 Psion Dacom Gold Card Ethernet
Submitted by: Rick Hoppe
2002-09-30 01:07:28 +00:00
imp
cea9fc8bb2 Generic Prism2.5 card
Submitted by: Matt Peterson
2002-09-30 00:59:05 +00:00
imp
42604f4532 Belkin F5D5020 pccard.
Submitted by: Philip Pereira
2002-09-30 00:51:49 +00:00
imp
ba5eba9a47 Entry for I-O Data PCET/100-CL
Submitted by: MATSUO Masahiko-san
2002-09-30 00:40:23 +00:00
imp
6494921c8b oops, last second botch: fix extra 'i' 2002-09-29 23:16:08 +00:00
imp
21a7284db3 o Belkin wireless card
PR: 38919
Submitted by: Tommy Johnson

o IBM IDE CDROM

PR: 39537
Submitted by: Kevin Van Maren

o T-Sunus 130 card

PR: 41802
Submitted by: Oliver Schneider
2002-09-29 23:13:08 +00:00
imp
2c322ef4ca o FreeSPirit ISDN/56K modem card
o No-name OEM Prism card
o ActionTec Prism card
o ZoomAir 11Mbps High Rate wireless networking

PR: 41929, 41928
Submitted by: Bruce M Simpson

o Dynalink L100C16

PR: 41938
Submitted by: Marco van de Voort
2002-09-29 22:51:31 +00:00
imp
cff37d047e Newer Netgear MA401RA entry.
Submitted by: Michael Ranner
2002-09-28 17:36:52 +00:00
gordon
4ee44b7b8d Fix moused so you can use the stop command
Reported by:	wa1ter@myrealbox.com
2002-09-27 16:54:21 +00:00
imp
ab28a73531 Two fixes:
1) Add new card entry for nortel eMobility wi card (from email
	   that I've lost the sender on :-(
	2) put ata devices at config 0x1 rather than auto.  This should be
	   better for nearly all cases.

MFC after: 3 days
2002-09-27 06:14:29 +00:00
jmallett
436cfa1983 Document at least one meaningful RELENG_5 feature, the ability to hide from
a user processes which run with an inequivalent class of UID credentials.

Sponsored by:	Rachel Hestilow <rachel@jerkcity.com>
2002-09-25 22:17:18 +00:00
brian
b9155304da Add a pkg_version variable so that it's possible to run portsversion instead
of pkg_version in periodic/weekly/400.status-pkg.
2002-09-25 03:01:42 +00:00
ache
ac09299ab9 Make it work with POSIX sort (POS arg).
All old sorts understand -k too.
2002-09-24 18:53:46 +00:00
phk
f9ed339e30 Use mdmfs(8) rather than rolling our own RAM-disks.
Sponsored by:	DARPA & NAI Labs.
2002-09-22 09:48:02 +00:00
markm
c54d14202f Rename the ftp log filename for compatability with OpenBSD and NetBSD.
Requested by:	ru
2002-09-21 12:07:35 +00:00
markm
731c3e5bf8 Install empty ftp.log file to start off ftp logging. 2002-09-20 22:12:27 +00:00
markm
90f120329f Log ftpd stuff in the same way that we log lpd stuff. Too many ftpd's
are attacked for us to throw away this sort of evidence.
2002-09-20 22:10:01 +00:00
ume
9469c35005 up gif during setup. 2002-09-20 18:31:55 +00:00
gordon
8fb250553b Quiet warnings on shutdown. 2002-09-19 20:14:50 +00:00
truckman
b889d88bf5 Unbreak installworld.
Apparently /usr/include/dev grew a couple of subdirectories, but nobody
informed mtree.
2002-09-19 08:35:12 +00:00
kris
b87a363d1b Add some extra directories created by recent versions of XFree86-4
Reviewed by:    anholt (XFree86-4 maintainer)
MFC after:      1 day
2002-09-19 02:05:41 +00:00
rse
3b0f5df300 Fix implementation of rc variables $amd_flags and $amd_map_program in
rcNG. The $amd_flags variable was already taken over into $rc_flags
by run_rc_command() when amd_precmd() is executed, so changing
$amd_flags there no longer effects the actual execution of amd.
Hence in amd_precmd() the $rc_flags have to be adjusted instead.
2002-09-18 08:49:50 +00:00
sam
631738b29d MFC: Elan support;
o Recognize AMD Elan SC520 hostbridge.
o Add initialization code for the AMD Elan sc520 which maps the MMCR
  into KVM and sets the i8254 frequency to the correct value.
o MAKEDEV entry for elan-mmcr device

Reviewed by:	phk, jhb
Approved by:	re(jhb)
2002-09-17 22:39:57 +00:00
peter
a51c9b6627 Initiate deorbit burn for the i386-only a.out related support. Moves are
under way to move the remnants of the a.out toolchain to ports.  As the
comment in src/Makefile said, this stuff is deprecated and one should not
expect this to remain beyond 4.0-REL.  It has already lasted WAY beyond
that.

Notable exceptions:
gcc - I have not touched the a.out generation stuff there.
ldd/ldconfig - still have some code to interface with a.out rtld.
old as/ld/etc - I have not removed these yet, pending their move to ports.
some includes - necessary for ldd/ldconfig for now.

Tested on: i386 (extensively), alpha
2002-09-17 01:49:00 +00:00
gordon
1d629df142 Fix sendmail to use checkyesno since rc.conf is no longer re'sourced from the
debug statement.
2002-09-12 17:31:09 +00:00
obrien
2a2bc463a7 Use bzip2 instead of gzip for those logs we compress.
Basic idea agreed to by:	rwatson
2002-09-12 17:28:07 +00:00
gordon
c18dda8955 Remove the sourceing of rc.conf from the debug subroutine. This caused
problems when you try to override variables locally.
2002-09-12 17:27:36 +00:00
jhb
dc10f00554 Cosmetic cleanup to a message. 2002-09-11 19:49:43 +00:00
gordon
82394dd4ea Quiet warnings about non-existent scripts. My own fault for not testing my
own patches as well as I should.
2002-09-11 01:00:57 +00:00
gordon
271b8a3ed5 Fix syscons so it actually does start.
Reported by:	keramida, ume
Submitted by:	keramida
2002-09-09 22:40:34 +00:00
iwasaki
8775a5b27a Add an entry for corega WL PCCL-11.
PR:		conf/42481
Submitted by:	NINOMIYA Hideyuki <nin@jp.FreeBSD.org>
Approved by:	imp
MFC after:	1 week
2002-09-06 17:45:36 +00:00
gordon
a7f04bb2b7 Convert from ${CMD_OSTYPE} to ${OSTYPE}. This saves a shell invocation on
OS-dependent case switches.
2002-09-06 16:18:05 +00:00
gordon
390d72be15 Add a support for a ${OSTYPE} which is set once in /etc/rc.subr. Also convert
all instances of `${CMD_OSTYPE}` to just using ${OSTYPE}. This saves us a
shell invocation on anything that is OS-dependent. I seriously doubt that we
will be spontaneously changing OS types during bootup.
2002-09-06 16:15:29 +00:00
peter
a6cef6d872 rev 1.6 claimed to add 'bootparams', but in fact added 'bootparamd' which
does not exist.
2002-09-06 01:23:31 +00:00
fenner
62292673aa Only try to initialize syscons if /dev/ttyv0 exists and it's not a pcvt. 2002-09-05 23:51:28 +00:00
fenner
472042a2cb Only try to run /usr/sbin/ispcvt if it exists and is executable. 2002-09-05 23:50:34 +00:00
gordon
b0ff5bb69d Add an archdep script and hook it up to the build.
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-09-05 20:29:18 +00:00
gordon
d98c8d93bc Hook bootparams up to the world 2002-09-05 20:15:08 +00:00
gordon
190ae3a6ce Introduce bootparamd into the boot scripts. Add a bootparamd_enable and
_flags to rc.conf

Submitted by:	John Hay <jhay@zibbi.icomtek.csir.co.za>
2002-09-05 20:14:46 +00:00
gshapiro
de510133e2 Deprecate the use of sendmail_enable="NONE" as it adversely affects the
new rcNG effort.

Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-09-03 22:15:57 +00:00
gordon
98e21cf6b7 nfsd doesn't die on SIGTERM but on SIGUSR1, correct script to kill nfsd with
the right signal.
2002-09-03 16:02:57 +00:00
gordon
6068c024d6 We don't use single_mountd_enable anymore. It's just mountd_enable. I must
have missed this in my earlier sweep.
2002-09-02 21:20:58 +00:00
gordon
24c38d2a02 Only install the scripts that actually used on FreeBSD. 2002-09-02 20:49:26 +00:00
gordon
53b139eb5a Commit a revised sendmail script that works the same way as rc.sendmail.
This should also quell warnings when sendmail_enable="NONE"
2002-09-02 20:37:03 +00:00
gordon
9b019eb1eb Turn rc_ng on by default now, it's time has come. While we are at it, I'd
like to thank Mike Makonnen for all his work on rcNG. Without him, none
of this would have been possible.
2002-09-02 16:35:01 +00:00
hm
aa0a56823e establish default values for /etc/rc.d/pcvt script 2002-08-30 13:01:42 +00:00
hm
bb3cc65f1f integrate pcvt configuration into the new /etc/rc.d startup system
PR:           i386/7100
Reviewed by:  Gordon Tetlow <gordon@FreeBSD.org>
2002-08-30 12:43:23 +00:00
cjc
1bdbc52de7 Only create a temporary file if we are actually going to do something
in the script. Eliminates a bug where we create a temp file, but don't
delete it since the rm(1) is only done if the check is enabled.

PR:		bin/40960
Submitted by:	frf <frf@xocolatl.com>
MFC after:	3 days
2002-08-25 04:09:17 +00:00
gordon
a9dd424f2f Print out a carriage return to make the screen output make more sense
Submitted by:	mike@
2002-08-20 00:14:11 +00:00
gordon
1ae011b749 I missed the single_mountd_enable in rc.network.
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-08-15 03:29:19 +00:00
gordon
af5c72f277 Remove an accidental double chkdepend that snuck in during the last commit.
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-08-15 03:24:47 +00:00
gordon
7776e3081f Don't export variables from /etc/rc when doing rc_ng because the scripts
are sourced in a subshell.

Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-08-14 05:58:44 +00:00
gordon
008b9b25ad Clean up the scripts to use the new variables:
xntpd_* -> ntpd_*
portmap_* -> rpcbind_*

Also change single_mountd_enable -> mountd_enable
Changing the mountd flags brings us closer to NetBSD.

All of the old variable names are shimmed so you can continue to use the
old variable name.

Finally make /etc/rc.d/mountd no longer dependent on nfs as there are
(apparently) other consumers of mountd.

Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-08-14 05:44:32 +00:00
gordon
2f904c0a96 Clean up some variables that should have been done before:
xntpd_* -> ntpd_*
portmap_* -> rpcbind_*

Also change single_mountd_enable to mountd_enable.

We also include shims for all the old variable names.

Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-08-14 05:37:15 +00:00
schweikh
859c765d64 o Test and change to the correct directory, /var/spool/.hoststat
o Bring if/then style in sync with /etc/rc scripts

PR:		conf/41570
Submitted by:	Konstantin M Volevatch <cox@rosnet.ru>
MFC after:	1 week
2002-08-12 11:09:01 +00:00
schweikh
5eefae432e Fix typos (s/seperat/separat/ et al); add FreeBSD ID.
Suggested by:	bde
MFC after:	3 days
2002-08-12 10:04:32 +00:00
iedowse
3e2d19afb9 Remove some unnecessary sanity checks that break "sh MAKEDEV cd"
and others, because test(1) does not do shortcut evaluation.

Fix the same off-by-one error for acd*t* that revision 1.326 fixed
for other *cd devices.

Suggested by:	bde
Reviewed by:	bde
2002-08-10 22:03:58 +00:00
iedowse
29e0235aba Permit the creation of just cd0 if desired. Previously it always
created cd1 as well due to an off-by-one error left over from
revision 1.249.

PR:		conf/20436
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
MFC after:	1 week
2002-08-10 00:20:32 +00:00
fanf
37ea1698f6 Remove trailing whitespace. 2002-08-09 20:58:54 +00:00
gordon
338f3e58ec Make the othermta script DTRT when an mta startup script is not specified.
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-08-09 17:45:04 +00:00
gordon
07b40589c7 Correct comment. We use rpcbind now, not portmap
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-08-09 17:34:13 +00:00
gordon
4d33b6e56f Correct comment
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-08-09 17:33:07 +00:00
ru
3b1b4edbda We no longer have a COPY. 2002-08-07 16:01:06 +00:00
jake
8325f04853 Add example entries for ttya and ttyb (sab). 2002-08-04 19:16:13 +00:00
gshapiro
8cc0839b13 If all file systems are marked nosuid, the line:
MP=`mount -t ufs | grep -v " nosuid" | awk '{ print $3 }' | sort`

sets ${MP} to an empty string so the next line:

	set ${MP}

actually just dumps all of the shells variables to stdout (and therefore
the security report).  Fixed by surrounding the code which goes through the
mounts with a test for an empty string before using ${MP}.

Reviewed by:	brian
MFC after:	3 days
2002-08-03 22:33:34 +00:00
rwatson
5ca8a85ebe Introduce support for Mandatory Access Control and extensible
kernel access control.

Create directories for per-policy include files.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, NAI Labs
2002-08-01 22:37:08 +00:00
ume
ec26b61ae7 FreeBSD has setkey in different location from NetBSD.
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-07-31 16:39:19 +00:00
blackend
5b8d2d8de6 Correct URL to the Handbook
MFC after:	1 week
2002-07-31 10:05:37 +00:00
ru
a8adf98c82 Drop support for COPY, -c has been the default mode of install(1)
for a long time now.

Approved by:	bde
2002-07-29 09:40:17 +00:00
dd
67306baf36 Stock -current has more than 300 files in /etc, so 255 inodes for the
/etc filesystem isn't enough; consequently, add "-i 4096" to the newfs
command for /etc.  This results in 1022 inodes, which should be enough
for the forseeable future (although I don't know why we would ever
have more than 1000 files in a default /etc).

Silence by:	-current
2002-07-28 03:41:53 +00:00
dd
6f27324be2 Add a period to the end of the "starting" message to be consistent
with the rest of the output during a boot.
2002-07-28 03:38:10 +00:00
imp
def36fc897 Add a generic NANOSPEED wi card.
Submitted by: matt peterson

While I'm here, kill the flags 0x10000 on all the prism based cards.
Both stable and current figure this out on their own and we've had at
least one releases where this is the case.
2002-07-26 06:12:14 +00:00
ume
afcf651cf8 Change the default setting of an IPv4-mapped IPv6 address to off.
Requested by:	many people
2002-07-25 15:44:01 +00:00
ume
ae5301d38f be able to configure to run an IPv6 routing daemon even on
an end node (sync with rc.network6 1.30).

Approved by:	gordon
2002-07-21 19:12:21 +00:00
ru
f2824cbad3 sys.mk no longer includes bsd.own.mk. 2002-07-20 10:56:00 +00:00
ru
ed13465e59 Install scripts via FILES (purposedly not via SCRIPTS that would
strip the suffixes).
2002-07-18 12:33:01 +00:00
ru
cd7c90d38f s/${INSTALL} -c/${INSTALL} ${COPY}/ 2002-07-18 12:07:49 +00:00
imp
ebb07e7ff8 The Compaq WL200 is a CL-PD6729 based pci card with a prism 2 pcmcia
card behind it (without the pcmcia form factor).  This entry gets to
the point of attaching, but there's something wrong with the '29
support, so it doesn't quite work yet.
2002-07-18 06:01:35 +00:00
dd
6197784f1d Remove spurious "echo '.'". 2002-07-18 05:00:23 +00:00
bsd
e3e0f48306 Apply same fix as Rev 1.19 of /etc/rc.diskless2: create sendmail
required directories if sendmail_enable is not set to "none".

Suggested by:   gordon
2002-07-18 05:00:22 +00:00
dougb
ebec404eb6 Anonymize the "portmap" program to get better compatibility with
rpcbind in -current.

Submitted by:   Alexander Kabaev <ak03@gte.com>
2002-07-18 05:00:21 +00:00
dougb
0564223a48 Make nisdomainname=NO DTRT
Submitted by:   des, via Mike Makonnen <makonnen@pacbell.net>
2002-07-18 05:00:20 +00:00
dougb
30dfb601b9 Cleanup some pollution from the NetBSD sync, and add gif setup.
Submitted by:   Mike Makonnen <makonnen@pacbell.net>
2002-07-18 05:00:19 +00:00
gordon
e141e08d6b Fix a typo that caused dhclient not to work.
Submitted by:   Dennis Kristensen <snicki@snicki.dk>
Reviewed by:    Mike Makonnen <makonnen@pacbell.net>
2002-07-18 05:00:18 +00:00
gordon
259601fa05 Merge in all the changes that Mike Makonnen has been maintaining for a
while. This is only the script pieces, the glue for the build comes next.

Submitted by:   Mike Makonnen <makonnen@pacbell.net>
Reviewed by:    silence on -current and -hackers
Prodded by:     rwatson
2002-07-18 05:00:17 +00:00
ume
c8703a911a be able to configure to run an IPv6 routing daemon even on
an end node.

Requested by:	Masachika ISHIZUKA <ishizuka@ish.org>
MFC after:	1 week
2002-07-18 05:00:16 +00:00
ru
8280e04b3b Removed no longer used share/examples/diskless/* dirs (forgotten
by luigi@) and never used share/examples/kld/dyn_sysctl/module.
2002-07-11 07:15:36 +00:00
joe
ddb988fd9f Rename 'usio' to 'ucom'.
Spotted by:	akiyama
2002-07-10 16:07:33 +00:00
gordon
a4cf039ac6 Remove debugging nit
Submitted by:	bmah
2002-07-08 21:04:16 +00:00
peter
a01296978c GRRR! rc.* cannot do an "exit 0" or it aborts the entire /etc/rc process.
We do a '. /etc/rc.syscons' - not run it in a seperate shell.
2002-07-08 04:03:21 +00:00
gordon
6a6fb8b86a nfsd and mountd now live in /usr/sbin not /sbin. Correct the command args.
This also reduces the diff to NetBSD (very marginally).

Reviewed by:	jake (mentor)
2002-07-07 22:19:08 +00:00
des
5c93810aed Silence pam_lastlog for now. 2002-07-07 10:00:43 +00:00
dougb
93b3f4508c Another update from Mike Makonnen.
Missed by: Me
2002-07-07 08:00:31 +00:00
dougb
9b623ad295 Latest improvements from Mike Makonnen. Better kerberos and apm handling. 2002-07-07 04:16:53 +00:00
ru
13ade03a10 There is apparently no reason for the existence of the `etc' target. 2002-07-05 13:47:29 +00:00
ru
294d4cf00f Whitespace and indentation (style) fixes. 2002-07-05 13:39:38 +00:00
ru
0bcd5c6bf3 Added DEFAULTS, to denote the contents of etc/defaults/.
Once upon a time (in rev. 1.81), COPYRIGHT and FREEBSD
were multi-value.

Moved installation of /var/log/cron to where it belongs
(this finishes the change in rev. 1.205).

Removed (with extreme prejudice) a bunch of parentheses
that unnecessarily obfuscated this makefile.

Run pwd_mkdb(8) right after master.passwd is installed.

Install nsmb.conf to /usr/share/examples/etc/.
2002-07-05 13:17:24 +00:00
maxim
954ff8bf68 Trim EOL spaces.
Reviewed by:	gshapiro
2002-06-30 12:08:36 +00:00
maxim
d0a28864e1 Add an alias for sshd. 2002-06-30 12:04:41 +00:00
maxim
638246b4b9 Include 'sshd' to the lists of forbidden users.
Reviewed by:	cvs-committers
2002-06-28 15:46:29 +00:00
brian
c4dd2bd45f Mention that we're checking kernel log messages, even if there's
no output.

PR:		39618
MFC after:	1 week
2002-06-28 10:32:18 +00:00
sheldonh
0148f2db27 Revert previous delta, setting the system immutable flag on /var/empty
instead of the user immutable flag, now that mergemaster handles
schg directories in its /var/tmp/temproot.
2002-06-26 17:05:48 +00:00
sheldonh
70a58092b5 Tone down the previous delta: don't set the system immutable flag on
/var/empty, because it makes it difficult for mergemaster(8) to remove
/var/tmp/temproot/var.
2002-06-26 08:58:28 +00:00
dillon
5a2f3bd0ed add default vmemoryuse (unlimited), and samples 2002-06-26 04:04:37 +00:00
ken
0d3a835f3f At long last, commit the zero copy sockets code.
MAKEDEV:	Add MAKEDEV glue for the ti(4) device nodes.

ti.4:		Update the ti(4) man page to include information on the
		TI_JUMBO_HDRSPLIT and TI_PRIVATE_JUMBOS kernel options,
		and also include information about the new character
		device interface and the associated ioctls.

man9/Makefile:	Add jumbo.9 and zero_copy.9 man pages and associated
		links.

jumbo.9:	New man page describing the jumbo buffer allocator
		interface and operation.

zero_copy.9:	New man page describing the general characteristics of
		the zero copy send and receive code, and what an
		application author should do to take advantage of the
		zero copy functionality.

NOTES:		Add entries for ZERO_COPY_SOCKETS, TI_PRIVATE_JUMBOS,
		TI_JUMBO_HDRSPLIT, MSIZE, and MCLSHIFT.

conf/files:	Add uipc_jumbo.c and uipc_cow.c.

conf/options:	Add the 5 options mentioned above.

kern_subr.c:	Receive side zero copy implementation.  This takes
		"disposable" pages attached to an mbuf, gives them to
		a user process, and then recycles the user's page.
		This is only active when ZERO_COPY_SOCKETS is turned on
		and the kern.ipc.zero_copy.receive sysctl variable is
		set to 1.

uipc_cow.c:	Send side zero copy functions.  Takes a page written
		by the user and maps it copy on write and assigns it
		kernel virtual address space.  Removes copy on write
		mapping once the buffer has been freed by the network
		stack.

uipc_jumbo.c:	Jumbo disposable page allocator code.  This allocates
		(optionally) disposable pages for network drivers that
		want to give the user the option of doing zero copy
		receive.

uipc_socket.c:	Add kern.ipc.zero_copy.{send,receive} sysctls that are
		enabled if ZERO_COPY_SOCKETS is turned on.

		Add zero copy send support to sosend() -- pages get
		mapped into the kernel instead of getting copied if
		they meet size and alignment restrictions.

uipc_syscalls.c:Un-staticize some of the sf* functions so that they
		can be used elsewhere.  (uipc_cow.c)

if_media.c:	In the SIOCGIFMEDIA ioctl in ifmedia_ioctl(), avoid
		calling malloc() with M_WAITOK.  Return an error if
		the M_NOWAIT malloc fails.

		The ti(4) driver and the wi(4) driver, at least, call
		this with a mutex held.  This causes witness warnings
		for 'ifconfig -a' with a wi(4) or ti(4) board in the
		system.  (I've only verified for ti(4)).

ip_output.c:	Fragment large datagrams so that each segment contains
		a multiple of PAGE_SIZE amount of data plus headers.
		This allows the receiver to potentially do page
		flipping on receives.

if_ti.c:	Add zero copy receive support to the ti(4) driver.  If
		TI_PRIVATE_JUMBOS is not defined, it now uses the
		jumbo(9) buffer allocator for jumbo receive buffers.

		Add a new character device interface for the ti(4)
		driver for the new debugging interface.  This allows
		(a patched version of) gdb to talk to the Tigon board
		and debug the firmware.  There are also a few additional
		debugging ioctls available through this interface.

		Add header splitting support to the ti(4) driver.

		Tweak some of the default interrupt coalescing
		parameters to more useful defaults.

		Add hooks for supporting transmit flow control, but
		leave it turned off with a comment describing why it
		is turned off.

if_tireg.h:	Change the firmware rev to 12.4.11, since we're really
		at 12.4.11 plus fixes from 12.4.13.

		Add defines needed for debugging.

		Remove the ti_stats structure, it is now defined in
		sys/tiio.h.

ti_fw.h:	12.4.11 firmware.

ti_fw2.h:	12.4.11 firmware, plus selected fixes from 12.4.13,
		and my header splitting patches.  Revision 12.4.13
		doesn't handle 10/100 negotiation properly.  (This
		firmware is the same as what was in the tree previously,
		with the addition of header splitting support.)

sys/jumbo.h:	Jumbo buffer allocator interface.

sys/mbuf.h:	Add a new external mbuf type, EXT_DISPOSABLE, to
		indicate that the payload buffer can be thrown away /
		flipped to a userland process.

socketvar.h:	Add prototype for socow_setup.

tiio.h:		ioctl interface to the character portion of the ti(4)
		driver, plus associated structure/type definitions.

uio.h:		Change prototype for uiomoveco() so that we'll know
		whether the source page is disposable.

ufs_readwrite.c:Update for new prototype of uiomoveco().

vm_fault.c:	In vm_fault(), check to see whether we need to do a page
		based copy on write fault.

vm_object.c:	Add a new function, vm_object_allocate_wait().  This
		does the same thing that vm_object allocate does, except
		that it gives the caller the opportunity to specify whether
		it should wait on the uma_zalloc() of the object structre.

		This allows vm objects to be allocated while holding a
		mutex.  (Without generating WITNESS warnings.)

		vm_object_allocate() is implemented as a call to
		vm_object_allocate_wait() with the malloc flag set to
		M_WAITOK.

vm_object.h:	Add prototype for vm_object_allocate_wait().

vm_page.c:	Add page-based copy on write setup, clear and fault
		routines.

vm_page.h:	Add page based COW function prototypes and variable in
		the vm_page structure.

Many thanks to Drew Gallatin, who wrote the zero copy send and receive
code, and to all the other folks who have tested and reviewed this code
over the years.
2002-06-26 03:37:47 +00:00
jdp
8b97544268 Fix the amd invocation to honor the amd_flags setting.
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-06-24 19:50:56 +00:00
sheldonh
68469a22f1 The previous delta introduced /var/empty, for use by openssh-portable,
which needs an empty directory into which to chroot(2).

Hint to the operator that this directory really _should_ be empty
by creating it with mode 0555 and the system immutable flag (schg)
set.

Reviewed by:	des
2002-06-24 18:31:47 +00:00
des
049fabb373 Previous commit was just a tad too hasty, the sshd peudo-user's home
directory should be /var/empty.
2002-06-23 20:46:44 +00:00
des
6c4dd41fe3 Add /var/empty for the OpenSSH privsep code. 2002-06-23 20:44:19 +00:00
des
9ffcd90b2f Add an sshd user and group for the OpenSSH privilege separation code. 2002-06-23 20:41:06 +00:00
bsd
4dd39b52f9 Create sendmail required directories if sendmail is enabled. 2002-06-22 19:44:25 +00:00
dougb
a27bc1f2cf Hone the rpcbind dependency checking.
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
2002-06-21 19:50:01 +00:00
obrien
f91ef96f2f This commit was generated by cvs2svn to compensate for changes in r98576,
which included commits to RCS files with non-trunk default branches.
2002-06-21 19:07:21 +00:00
obrien
ee31175803 Sync with NetBSD's mainline. 2002-06-21 19:07:21 +00:00
ru
25fe20626e Make NO_OPENSSL actually imply NO_OPENSSH, as documented in make.conf(5). 2002-06-21 08:54:03 +00:00
dougb
74d7d809a7 Anonymize the "portmap" program to get better compatibility with
rpcbind in -current.

Submitted by:	Alexander Kabaev <ak03@gte.com>
2002-06-20 08:49:44 +00:00
des
3dfd2c1e9b We don't use this any more.
Sponsored by:	DARPA, NAI Labs
2002-06-19 20:01:25 +00:00
des
2645a88fb1 Enable OPIE for sshd and telnetd. I thought I'd done this a long time
ago...

Sponsored by:	DARPA, NAI Labs
2002-06-19 20:00:43 +00:00
dougb
4b8cabb04a Another good suggestion from Bruce, only create links if the
file doesn't exist already.
2002-06-19 05:35:16 +00:00
gordon
881107f895 Fix a typo in the named startup options
Submitted by:	sheldonh@
2002-06-18 19:42:37 +00:00
dougb
293e16b82f Do vidcontrol -m on after starting moused for a usb mouse.
PR:		conf/39125
Submitted by:	Mike Makonnen <makonnen@pacbell.net>
Not objected to by: -current and -hackers
2002-06-18 07:50:16 +00:00
dougb
f54b57d488 Should have paid more attention to the PR. Update (improve?) the examples
by doing them in /dev/, and provide more than just the one example.

Submitted by:	bde (for the ideas, blame for mistakes is mine)
2002-06-18 07:33:56 +00:00
dougb
695434d319 Only create symlink if /dev/ttyv0 exists.
PR:		misc/39381
Submitted by:	Dirk-Willem van Gulik <dirkx@covalent.net>
2002-06-18 07:14:43 +00:00
dougb
9acb83325d Try handling lack of syscons (for diskless boot, or other) by
testing for the presence of /dev/ttyv0.

PR:		misc/39351
Submitted by:	Dirk-Willem van Gulik <dirkx@covalent.net>
2002-06-16 20:59:16 +00:00
gordon
3f27304ae2 Make sendmail really not start when sendmail_enable="NONE"
Submitted by:	Dennis Kristensen <snicki@snicki.dk>
Reviewed by:	Mike Makonnen <makonnen@pacbell.net>
2002-06-15 18:39:05 +00:00
gordon
71e9fd7b1a Add the final bits that allow the use of rc.d. Note that you can toggle
between rc.d and the classic boot scripts based on the rcng variable in
your rc.conf. Defaults to classic boot scripts.

Submitted by:	Mike Makonnen
2002-06-13 22:30:02 +00:00
gordon
c61b4c2e3d Add a couple of variables for rc.d
Submitted by:	Mike Makonnen
2002-06-13 22:27:31 +00:00
gordon
0af5b0e962 Hook rcorder and rc.d into the build.
Submitted by:	Mike Makonnen
2002-06-13 22:26:15 +00:00
gordon
c06ac7c4ff Bring this up to date with the latest NetBSD bits. Also add some bits of
our own.

Submitted by:	Mike Makonnen
Reviewed by:	silence on -current and -hackers
2002-06-13 22:19:42 +00:00
cvs2svn
bf98eb7293 This commit was manufactured by cvs2svn to create branch 'NETBSD'. 2002-06-13 22:14:38 +00:00
gordon
9c5433cb22 Merge in all the changes that Mike Makonnen has been maintaining for a
while. This is only the script pieces, the glue for the build comes next.

Submitted by:	Mike Makonnen <makonnen@pacbell.net>
Reviewed by:	silence on -current and -hackers
Prodded by:	rwatson
2002-06-13 22:14:37 +00:00
obrien
5d096a1b5c Change our default XF86Config location from /etc/ to /etc/X11/,
following the lead of The XFree86 Project's default.

Approved by:	Murray
2002-06-10 04:47:26 +00:00
obrien
656c10dac5 We want to play osterage and stick our heads in the sand and ignore things.
Requested by:	jhb
2002-06-04 22:26:11 +00:00
obrien
d3c26c96f0 ntpdate(1) is depreciated. 2002-06-04 21:25:41 +00:00
shiba
61082730c6 Add new entry PLANEX GW-NS11H(PRISM3.0).
Submitted by [bsd-nomads:16322] Yasufumi Susuki <yasu@triaez.kaisei.org>
2002-05-29 21:16:51 +00:00
peter
f19553daeb Update g++ include subdirs 2002-05-29 00:46:33 +00:00
imp
5d0d03b327 Correct US Robotics Wireless Card 2410 entry 2002-05-24 15:28:38 +00:00
gshapiro
f6c55bbe1c Add a new make.conf knob, SENDMAIL_MAP_PERMS, which specifies the
permissions to use for alias and map database files built by
/etc/mail/Makefile.  The default is 0640 to assist users in avoiding
a file locking local denial of service.

MFC after:	1 day
		pending RE approval
2002-05-24 01:46:39 +00:00
gshapiro
d71c35a87e Change the default permissions for the sendmail statistics file to 0640
instead of 0644 to help protect users against a file locking local
denial of service.

MFC after:	1 day
		pending RE approval
2002-05-24 01:44:53 +00:00