Commit Graph

3174 Commits

Author SHA1 Message Date
cjc
d488da1915 Remove a mention of the worm(4) device that was missed when it was
removed from MAKEDEV in 1.171.

PR:		misc/35729
MFC after:	1 day
2002-03-10 22:34:56 +00:00
rwatson
c2d83956da /var/log/security gets almost no (if not no) activity on many FreeBSD
systems due to sshd not using the security log class.  Tweak syslog.conf
so that /var/log/security also gets a useful set of
authentication-related logging.

Submitted by:	aeonflux@synapse.subneural.net
MFC after:	4 weeks
2002-03-10 15:20:36 +00:00
dd
43a9719eeb In the words of the submitter:
Kerberized CVS (kserver) listens on the same port as normal CVS
        (pserver).  In /etc/inetd.conf cvs kserver is disabled by default,
        but set to listen to the service port 'cvs' which doesn't exist.  It
        should listen to 'cvspserver'.

PR:		34317
Submitted by:	Sean Chittenden <sean@chittenden.org>
2002-03-09 04:55:35 +00:00
n_hibma
f116f7a004 Add an entry for coldsync, to facilitate synchronising a Handspring Visor
with FreeBSD.
2002-03-08 14:46:13 +00:00
obrien
b5d91caf1c fix backwards spelling 2002-03-07 07:17:15 +00:00
cjc
be470ebd23 Environmental variable was not being passed to a subshell as intended.
PR:		bin/35558
Submitted by:	Nicolas Rachinsky <list@rachinsky.de>
2002-03-05 19:13:05 +00:00
imp
42b1fbecf5 Buffalo LPC3-CLT
Submitted by: TANAKA Tomohiko <tomo@oso.to>
PR: 34954
2002-03-05 05:51:30 +00:00
imp
dfffbb2682 Fix Simple Tech STI-ATA
Submitted by: dwhite@paypal.com
PR: 34243
2002-03-05 05:48:32 +00:00
imp
dccb02841a US Robotics Wireless Card 2410
Submitted by: Jerry A! <jerry@thehutt.org>
PR: 33858
2002-03-05 05:44:28 +00:00
dd
0b2f9cb783 Redirect stdout of `ipf -y' to /dev/null. This removes a stray
"filter sync'd" in the middle of the boot output if IPFilter is
enabled, but does not hide any potential errors, which go to stderr.
2002-03-04 10:30:24 +00:00
rwatson
7ced7faebd Fix typo. '|' looks a lot like 'l' in my xterm font. 2002-03-01 15:42:27 +00:00
rwatson
cc54b5bea4 When having an expanded name for a class, use '|' instead if ':' to
seperate the short name and the long name.  This was present for most
but not all entries.  Because the parsing doesn't reject unrecognized
entries, this didn't cause failures, but it wasn't strictly correct.

Submitted by:	Martin Faxer <gmh003532@brfmasthugget.se>
MFC after:	2 weeks
2002-03-01 15:30:24 +00:00
ru
ab0f432b2d Fixed a few typos. 2002-02-27 14:43:55 +00:00
cjc
aea627e849 After getting IANA to fix a typo in their port assignments, add
some new IANA-blessed services and close some PRs. Ports for
Jabber and PostgreSQL.

PR:		conf/35219, conf/35220
Submitted by:	Sean Chittenden <sean@chittenden.org>
MFC after:	1 day
2002-02-26 02:36:49 +00:00
gshapiro
526c28fb44 Make sure we don't remove /etc/mail/sendmail.cf on make clean since this
will break a running system during a buildworld.

Noticed by:	Alexandr Listopad <laa@laa.zp.ua>
MFC after:	1 week
2002-02-24 02:38:23 +00:00
iwasaki
80535be2ba Use the regular expression form to solve the ambiguous card parameters
which have tailing spaces.
Some card entries had problem because of incorrect number of spaces.

Approved by:	imp
MFC after:	1 week
2002-02-23 16:38:45 +00:00
cjc
6baa1f255a Long overdue whitespace cleanup. To give yourself an idea of how
ugly it was,

  $ awk '/[[:space:]]$/ { sub(/$/,"\$"); print; }' /etc/services

On the previous revision. And that's only the trailing whitespace.
2002-02-23 11:59:42 +00:00
obrien
d1962c6a7d The usage of 'newaliases' needs to be after we know for sure that /usr
is mounted.

Submitted by:	rizzo
2002-02-23 01:49:20 +00:00
obrien
119bc74831 The existing bazaar and site-specific policy in rc.diskless1 is Just Wrong;
and looks like no other Unix diskless configuration I've ever seen.
Thus allow a more traditional /etc.

Note, the use of an MFS /var should also be settable.
Otherwise installing ports(packages) is just a total PITA.
2002-02-22 19:05:22 +00:00
cjc
f864694415 Bring rc.firewall{,6} more in line with the word and spirit of
rc.conf(5) and the files' inline documentation.

  - Add the "closed"-type, documented in both places, but which did not
    exist in the code.

  - When provided a ruleset, the system should not make any assumptions
    about the sites's policy and should add no rules of its own.

  - Make the "UNKNOWN" (documented in-line) actual work as advertised,
    load no rules.

Prodded by:	Igor M Podlesny <poige@morning.ru>
MFC after:	1 week
2002-02-21 13:14:19 +00:00
ume
c7a3f8f136 Delete a needless rule for DAD. An unspecified address is never used
as a destination address of IPv6 packets.

Submitted by:	cjc
MFC after:	1 week
2002-02-20 18:05:44 +00:00
cjc
5eebfcea9b There is no reason to demand the administrator set 'natd_interface'
when running natd(8) out of the rc-files. It is perfectly valid for
the interface or alias address to be set in a natd(8) configuration
file, not on the command line. Also, loosen up the restrictions on
identifying an IP address argument in 'natd_interface.'

Fix the documentation, rc.conf(5), to reflect this change.

Take the bogus default for 'natd_interface' out of /etc/defaults/rc.conf.

MFC after:	3 days
2002-02-20 10:31:01 +00:00
gshapiro
e26790e916 Turn FEATURE(relay_based_on_MX) off by default. It should not be used unless
absolutely necessary

Requested by:	peter
PR:		conf/33855
MFC after:	1 week
2002-02-17 23:38:16 +00:00
gshapiro
f9b416a6c3 Add infrastructure for sendmail 8.12. If users are not starting a daemon
at boot (sendmail_enable=NO), a localhost-only daemon may started
(sendmail_submit_enable) as it is needed to accept mail from command line
submissions.  If this isn't desired, see etc/mail/README for more hints.

Optionally (sendmail_msp_queue_enable) start a queue runner for the
submission queue in case a daemon isn't available to accept command line
submitted mail at submission time.

Note that the syslog labels for all of these sendmail processes have been
uniquified for easier log parsing.
2002-02-17 22:19:14 +00:00
gshapiro
0db14425f9 Add information about how the new sendmail set-group-ID mail submission
works and ways to work around common problems people might have.
Include information on reverting to a set-user-ID root sendmail binary in
case anyone really needs to do this.
2002-02-17 22:14:29 +00:00
gshapiro
be0f0b6ad9 Don't build a submit.cf file if SENDMAIL_SET_USER_ID is set 2002-02-17 22:12:57 +00:00
gshapiro
72b2a94378 Add /var/spool/clientmqueue for 8.12's non-set-user-ID root mail submission 2002-02-17 22:11:41 +00:00
gshapiro
b61da01763 Add new include/libmilter directory for libmilter (sendmail mail filter API)
include files
2002-02-17 22:10:56 +00:00
gshapiro
9ca121f5b3 Add new build knob, SENDMAIL_SET_USER_ID, which installs sendmail as a
set-user-ID root binary instead of the new method (set-group-ID smmsp).
Therefore, we shouldn't install /etc/mail/submit.cf if it is set.
2002-02-17 22:09:15 +00:00
gshapiro
bf8692f3b6 Update for sendmail 8.12 which has a new OSTYPE(freebsd5)
Fix access_db usage for 8.12
2002-02-17 22:08:18 +00:00
imp
6e86074098 Add Proxim RangeLAN-DS.
Submitted by: Matt Peterson <matt@peterson.org>
PR:	35057

Also update my note for the 3crwe737A after talking to Alan Clegg at BSDcon.
2002-02-17 20:05:39 +00:00
cjc
3985693d09 Remove check for sendmail.conf before even trying to start sendmail.
Checking for the existence of sendmail.cf is rather silly when someone
is using the mailwrapper(8) to run a mail daemon that is not actually
sendmail(8). It is also probably better to let sendmail(8) actually
try to start and error out if the administrator has
'sendmail_enable="YES"' but no sendmail.conf. At present, it would
fail silently.

Reviewed by:	gshapiro
MFC after:	2 days
2002-02-17 02:01:15 +00:00
brian
1e17be1181 Set rc=1 rather than 0 so that setting daily_show_success=YES masks
the output of all goes well.

PR:		34825
Submitted by:	Valentin Nechayev <netch@netch.kiev.ua>
MFC after:	3 weeks
2002-02-13 19:10:07 +00:00
maxim
314e99cda2 Fix a typo in swat example.
Spotted by:	Sergey Osokin <osa@freebsd.org.ru>
Reviewed by:	ru
Approved by:	ru
MFC after:	1 week
2002-02-13 08:21:45 +00:00
mp
5d2ae7a01f Install complete.tcsh and csh-mode.el into ${SHAREDIR}/examples/tcsh.
PR:		misc/34800 (from Steven Grady)
Submitted by:	phantom (patch)
MFC after:	3 days
2002-02-12 04:50:12 +00:00
dd
074087bf75 crdup(9) is not a protocol.
PR:		34624
Submitted by:	John Nielsen <nielsenj@cs.byu.edu>,
		Hiten Pandya <hiten@uk.FreeBSD.org>
2002-02-10 08:19:58 +00:00
jhb
1fd7d64d57 Fix MAKEDEV for RocketPort (rp(4)) cuaR* and ttyR* to work with the
updated driver.  The newer driver in current outputs a version string
that contains a space, so we need to eat two words in between RocketPortX
and the number of ports on the board.
2002-02-09 21:16:54 +00:00
des
3d4000737f Add missing "nullok" option to pam_unix. 2002-02-08 23:27:22 +00:00
cjc
27ee79e565 peter points out that we probably should not mess with the sysctl(8)
values at all if they are not purposefully set. What if the
administrator messed with them in /etc/sysctl.conf? We don't want to
overwrite them.

If 'log_in_vain' is zero, do not force the issue. If it is non-zero,
set it.
2002-02-08 13:25:33 +00:00
markm
5351d0d669 Enable TCP_WRAPPERs for the NIS server. The protection afforded is
not massive, but usable.
2002-02-06 20:39:36 +00:00
ume
26e5ea876a Install PROTO.localhost-v6.rev. Umm, it seems namedb/Makefile
is not used.
2002-02-06 04:57:25 +00:00
ume
e3ed4352e4 Install PROTO.localhost-v6.rev.
Reported by:	Scott Allendorf <scott-allendorf@uiowa.edu>
Forgot by:	me (ume)
2002-02-06 04:46:07 +00:00
sheldonh
3dc989f884 Add the MTA users 'mailnull' and 'smmp'.
PR:		conf/34535
Submitted by:	Ceri <setantae@submonkey.net>
MFC after:	1 week
2002-02-04 15:12:06 +00:00
nyan
342b39a018 Use MACHINE_ARCH instead of MACHINE to check i386 arch.
MFC after:	3 days
2002-02-04 12:50:52 +00:00
des
8b7b73f838 Add pam_self(8) so users can login(1) as themselves without authentication,
pam_login_access(8) and pam_securetty(8) to enforce various checks
previously done by login(1) but now handled by PAM, and pam_lastlog(8) to
record login sessions in utmp / wtmp / lastlog.

Sponsored by:	DARPA, NAI Labs
2002-01-30 19:13:23 +00:00
des
be6e4b351f Use pam_self(8) to allow users to su(1) to themselves without authentication.
Sponsored by:	DARPA, NAI Labs
2002-01-30 19:04:39 +00:00
bde
acdb1166c1 Added this makefile. This is not attached to the build yet. I often
install parts of /etc manually and it helps to have a makefile for
each subdir even if the main makefile doesn't invoke it.
2002-01-30 09:27:03 +00:00
sanpei
7ef8eab2e2 By commit of usr.sbin/pccard/pccardd/cardd.c at Nov 29 (Dec
10 in -STABLE), pccardd's string comparison between
pccard.conf's entry and PC card's CIS tupple became strict
matching.

As influences of this commit, some PC cards don't work since
some /etc/default/pccard.conf's card identifiers entries are
incorrectly described.

  - Lexar Media compact flash
  - IO DATA CBIDE2 in 16 bit mode
  - TOSHIBA Portable 24X Speed CD-ROM Drive PA2673UJ
  - Hewlett Packard M820e (CD-writer)

Update these card configs.

PR:		33815
Obtained from:	[bsd-nomads:16128]
2002-01-29 21:17:05 +00:00
ru
546c385a00 Tidy up gecos field for `bin'. 2002-01-29 14:00:03 +00:00
sheldonh
bbc1f62b3f Uncomment kserver-adm, which is IANA-sanctioned and has no apparent
conflicts.

PR:		conf/34316
Submitted by:	Sean Chittenden <sean@chittenden.org>
MFC after:	2 weeks
2002-01-29 12:28:51 +00:00