Commit Graph

2315 Commits

Author SHA1 Message Date
obrien
4ab606e485 Update rev 1.29 -- 'draft-manning-dsua' is now in its 3rd version. 2000-07-30 19:28:05 +00:00
green
3cd153a604 Keep urandom as a link to random (but a hard link). 2000-07-30 16:18:48 +00:00
green
4f74130532 Since the driver supports both (and may have different semantics for
both soon...), create urandom instead of the link to random.  It's
also what makes sense according to the make_dev(9)'s in random(4).
2000-07-30 03:15:11 +00:00
eivind
126215b8e1 Change the defaults for portmap, sendmail and inetd to be not running them.
Make sysinstall override this on install, so the effective behavioural
change for a newly installed system is null.  Overall, this makes a system
with an empty /etc/rc.conf not run any network services, and makes the
FreeBSD-provided network services that are running visible in /etc/rc.conf
(instead of making people look through /etc/defaults/rc.conf to find the
things they need to disable to secure the system.)

Reviewed by:	jhb
Discussed with:	The usual cabal
2000-07-28 22:45:36 +00:00
obrien
0d0e7e5154 Add this empty version of this file to make it easier for pre-4.0 users
to find.
2000-07-27 22:53:42 +00:00
asmodai
cd36f05b51 Remove all mention of LANG and MM_CHARSET.
Add hints towards login.conf(5), which should be the preferred way
to set this systemwide without having to worry about the shell used.

PR:		9245
Submitted by:	martin Kammerhofer <dada@sbox.tu-graz.ac.at>
2000-07-27 11:39:33 +00:00
sheldonh
23d54565a3 Close a window of readability when creating the entropy seed file,
which must not be world-readable.
2000-07-24 15:14:47 +00:00
sheldonh
953536aee8 If the initial attempt to write ${entropy_file} to /dev/random fails
and the randomdev.ko module is not resident, try to load the module and
perform the write again.

Reviewed by:	markm
2000-07-24 13:40:41 +00:00
marcel
510255570c Backout addition of -L switch to mtree. Using -L breaks the
build process in too many cases. Adding mtree to bootstrap-tools
to solve this breaks the upgrade path because mtree needs a
libc that has strtofflags and fflagstostr.
2000-07-23 16:33:00 +00:00
asmodai
f55c1c6732 Add weak_mountd_authentication, which is examined in /etc/rc.network.
Setting this to YES instead of its default NO, causes mountd to be
passed the -n flag, which allow non-root users mount requests to be served.
2000-07-23 11:31:09 +00:00
ache
4b5414bf83 Sync 2000-07-21 15:14:05 +00:00
ache
1948548eee dd is too verbose writting entropy, redirect its output to /dev/null
Add period at the end of sentence
2000-07-20 19:25:12 +00:00
ache
493ee2169c Sync with main termcap, SGR 24,27 2000-07-20 18:55:07 +00:00
nsayer
14503a8247 Add the tap driver.
The tap driver is used to present a virtual Ethernet interface to the
system. Packets presented by the network stack to the interface are
made available to a character device in /dev. With tap and the bridge
code, you can make remote bridge configurations where both sides of
the bridge are separated by userland daemons.

This driver also has a special naming hack to allow it to serve a similar
purpose to the vmware port.

Submitted by:	myevmenkin@att.com, vsilyaev@mindspring.com
2000-07-20 17:01:10 +00:00
ache
465793ff62 Sync with main termcap (AX, latin2 mono) 2000-07-20 14:08:21 +00:00
ume
2988979ab5 Add some examples for IPv6 addresses.
PR:		conf/18614
Submitted by:	James Housley <jim@thehousleys.net>
2000-07-19 13:05:58 +00:00
brian
e59bf23032 Add a default ident string and do some minor whitespace adjustments 2000-07-19 10:16:29 +00:00
ru
06cffe2533 Add /dev/agpgart for AGP.
Reviewed by:	dfr
2000-07-19 09:21:14 +00:00
imp
42caeca203 Apm device is now safe to be world readable, so make it so. 2000-07-19 06:35:58 +00:00
ume
55b85b467a Fix an unmatched opening quote.
PR:		conf/20000
Submitted by:	Alex Kapranoff <alex@kapran.bitmcnit.bryansk.su>
2000-07-18 08:44:17 +00:00
sheldonh
59ad463b6c Improve on previous commit:
Don't inhibit the trailing newline for entropy-related messages.
Try harder to save the seed file on shutdown.

Reviewed by:	markm
2000-07-17 13:39:48 +00:00
ume
c633746aa6 If ipv6_enable is set to yes, do IPv6 setup for PCCARD ethernet
card.  This is still at staring point and end node case only.
2000-07-17 12:33:57 +00:00
markm
968e0bbd12 Add entropy caching. With this, some entropy is cached at shutdown
time, and this is used to reseed the random number generator at
boot time.

NOTE - this has no hope of working if you halt(); you need to
execute rc.shutdown to get the entropy stash.
2000-07-17 12:28:58 +00:00
iwasaki
974e0b381e PCCard entry cleanup:
- Remove unit numbers in config lines.
 - Remove all of logger lines and add logstr lines for some cards.  This
   changes reduced file size from 84k to 45k.
 - Use '/sbin/ifconfig $device delete' instead of /etc/pccard_ether_remove
   which haven't merge from PAO yet.
 - Cosmetic changes.
2000-07-16 17:33:54 +00:00
sanpei
d9cd8828ab [Merge from PAO]
add about 67 entry and rewrite 18 entry
	change Xircom CompactCard Ethernet 10 entry
		config 0x20 -> auto

Reviewed by:	iwasaki
Obtained from:	PAO3
2000-07-16 14:33:47 +00:00
ache
735f682c24 Add -L to mtree calls since defaults changed back 2000-07-16 07:58:25 +00:00
abial
ba6bef6211 *** empty log message *** 2000-07-15 10:18:46 +00:00
rwatson
adb3b8c68a o Display only a short fortune at the root login prompt, as large ones
scroll of our pretty /etc/motd that helps the user know what to do.
o Change reflects similar setting in /share/skel
2000-07-15 03:25:14 +00:00
nbm
863dc9acc4 Add to, don't overwrite, user-settable mountd_flags.
PR:		conf/15745
Submitted by:	Vivek Khera <khera@kciLink.com>
2000-07-14 13:03:36 +00:00
peter
b9b09beff7 Be consistant about WITH_ vs MAKE_ flags. We have a precedent of using
MAKE_foo for things like MAKE_KERBEROS etc.  Use that.  I managed to
confuse myself last time and made make.conf different to the code. ;-(

Reported by:  Jun Kuriyama <kuriyama@FreeBSD.org>
2000-07-14 09:18:21 +00:00
peter
d7ee90746c Change various log file modes from mode 664 to 644. Allowing group
wheel to trash logfiles is not exactly good security policy.  There have
been several gid wheel holes in ports.  Various other files were changed
as well (eg: the locate database were set to more restrictive modes (444)
by their generation scripts) so this should be safe for them.  utmp and
wtmp are mode 644 already on all the systems we checked.

Submitted by:  jkb
Reviewed by:   kris
2000-07-14 01:12:50 +00:00
imp
052e7cee04 Add Xircom CompactCard Ethernet CFE-10 1.00.
Seems to work great in the type II cf<->pccard adapter that came with
the card.  Others have reported with different chipsets for the pccard
bridge that additional support is needed to make this card work with
the 3.3 volts it needs.
2000-07-12 01:20:55 +00:00
imp
c32f6e1e5d Remove irq 13 from the list of valid IRQs. It is used by the math co and
is therefore unavailable.  Also, IRQ13 isn't connected to the pcic chip
on most laptops.
2000-07-11 17:57:01 +00:00
imp
a8eb6ea109 Merge latest cards from my laptop:
o The Shining PMIDE-ASC card is also used in Road Warrior's Bullet Drive, so
  add that to the comments.
o Eiger Lab's fujitsu based ethernet card: EPX-10BT (thanks to Ryan Losh for
  donating the card to the cause).
o Add place holder entry for the 3Com Megahertz 3CXEM556.  It doesn't work
  yet, but that will change in time.
2000-07-11 17:52:41 +00:00
dwmalone
ec7724d85b Get the security script to list the indoe numbers of the suid files.
I've seen some script kiddie tools out there that fake the timestamps
but don't preserve the inode number.

Note - this will cause a lot of output the first time it is run!

PR:		18947
Reviewed by:	Sheldon Hearn <sheldonh@uunet.co.za>
2000-07-11 14:24:53 +00:00
sanpei
4f4365618d add Planex FNW-3600-TX 16bit FastEthernet DirectDock
Obtained from:	[bsd-nomads:13991] reported by Akihiro IIJIMA <aki@jp.FreeBSD.org>
2000-07-11 14:22:19 +00:00
tanimura
7716c5370a Finally merge newmidi.
(I had been busy for my own research activity until the last weekend)

Supported devices:

SB Midi Port			(sbc + midi)
SB OPL3				(sbc + midi)
16550 UART			(midi, needs a trick in your hint)
CS461x Midi Port		(csa + midi)

OSS-compatible sequencer	(seq)

Supported playing software:

playmidi			(We definitely need more)

Notes:

/dev/midistat now reports installed midi drivers. /dev/sndstat reports
only pcm drivers. We need the new name(pcmstat?).

EMU8000(SB AWE) does not sound yet but does get probed so that the OPL3
synth on an AWE card works.

TODO:

MSS/PCI bridge drivers
Midi-tty interface to support general serial devices
Modules
2000-07-11 11:49:33 +00:00
sanpei
6503cc5b27 add Billionton 56Kbps Fax Modem
PR:		18866
2000-07-10 08:31:14 +00:00
sanpei
d466979158 add Ericsson DC23 GSM modem card
PR:		18962
2000-07-10 08:21:54 +00:00
sanpei
0e6461b97a add Compaq Netelligent 10/100 PC Card
PR:		19007
2000-07-10 08:05:47 +00:00
ume
20c9966da8 - Remove use of programs in /usr like sed as possible. In this
time, I have no idea if there is equivalence of printf.  So, stf
setup still depends on /usr.  In addition, prefix(8) and gifconfig(8)
are in /usr/sbin.  Should we move these into /sbin?

- Sync with latest stf behavior.  Latest stf doesn't have link-local
address.  And, latest stf is not gif but stf.
2000-07-09 20:12:50 +00:00
sanpei
9ca0f51b02 add Shining PMIDE-ASC CDROM
PR:	19236
2000-07-09 12:51:05 +00:00
ume
a74d1b19ed Add reverse lookup entry for ::1
Suggested by:	itojun
2000-07-07 17:20:23 +00:00
brian
9934efd0dd Add various system usernames (even though I try to avoid pppd!!!)
PR:		19717
Submitted by:	Tony Finch <dot@dotat.at>
2000-07-06 19:05:43 +00:00
sheldonh
1c1407feaf The previous commit changed the df(1) units flag from -k to -h, which
produced human-readable output.  I like this, but it's certainly not
something to change willy-nilly without discussion.  Revert to -k.

Anyway, the new variable allows folks to pick any units flag that
fits their fancy.
2000-07-05 17:48:23 +00:00
tg
7f9b6cda1d Now that the scripts in our ports support this, call the scripts
in ${local_startup} with the `stop' option on shutdown.
2000-07-05 12:40:26 +00:00
sheldonh
b896bc0c05 Introduce a new option, daily_status_disks_df_flags, which specifies
the command-line arguments to be used for the call to df(1) when
daily_status_disks_enable is set to YES.

The name of the new variable was chosen by the maintainer of our
periodic hierarchy, Brian Somers.

PR:		19631
2000-07-05 10:47:01 +00:00
sheldonh
d27de9de37 Fix typo: "managment" -> "management".
PR:		19689
Submitted by:	SUGIMURA Takashi <sugimura@jp.FreeBSD.org>
2000-07-05 10:07:30 +00:00
ache
8d5454b61a Fix site_perl hierarchy 2000-07-04 18:11:41 +00:00
peter
4f5fa991c0 Delete the RSAREF=YES example from make.conf - it is not used at all.
Add knobs for the optional crypto parts with some notes.
2000-07-03 20:52:01 +00:00