Commit Graph

351 Commits

Author SHA1 Message Date
Robert Watson
7db952b8b5 Install audit_control and audit_user, both of which are likely to be
modified by the administrator, as user-writable instead of read-only.

Obtained from:	TrustedBSD Project
2006-02-12 13:01:39 +00:00
Robert Watson
28024c0c6b Install /etc/security configuration files from OpenBSM.
Obtained from:	TrustedBSD Project
2006-02-02 10:03:43 +00:00
Doug Rabson
c0b9f4fe65 Add a new extensible GSS-API layer which can support GSS-API plugins,
similar the the Solaris implementation. Repackage the krb5 GSS mechanism
as a plugin library for the new implementation. This also includes a
comprehensive set of manpages for the GSS-API functions with text mostly
taken from the RFC.

Reviewed by: Love Hörnquist Åstrand <lha@it.su.se>, ru (build system), des (openssh parts)
2005-12-29 14:40:22 +00:00
Ian Dowse
2e46a159cc Remove usbd(8) and all references to it. It is no longer necessary
since devd(8) now provides the same functionality.

Submitted by:	Anish Mistry
2005-12-15 01:04:51 +00:00
Ruslan Ermilov
ebd3cef10b Diff reduction to RELENG_6. 2005-11-16 07:24:31 +00:00
Warner Losh
652729a4d5 Allow one to override the endian flags for make distribution. This
can be useful for when you know that you are doing something that
won't work with the standard settings and different settings are more
appropriate.
	This allows 5.3 tools to build a 6.x userland when these
	values are set to null.
2005-08-26 18:54:06 +00:00
Colin Percival
6fb01948ee Add portsnap to the base system. This is a secure, easy to use,
fast, lightweight, and generally good way for users to keep their
ports trees up to date.

This is version 0.9.4 from the ports tree (sysutils/portsnap) with
the following changes:
1. The experimental pipelined http code is enabled.  No seatbelts
in -CURRENT. (^_^)
2. The working directory has moved from /usr/local/portsnap to
/var/db/portsnap (as discussed on -arch two days ago).
3. Portsnap now fetches a list of mirrors (distributed as DNS SRV
records) and selects one randomly.  This should help to avoid the
uneven loading which plagues the cvsup mirror network.
4. The license is now 2-clause BSD instead of 3-clause BSD.
5. Various incidental changes to make portsnap fit into the base
system's build mechanics.

X-MFC-After:    6.0-RELEASE
X-MFC-Before:   5.5-RELEASE
X-MFC-To:       RELENG_6, RELENG_5, ports
discussed on:   -arch and several other places
"yes please" from:      simon, remko, flz, Diane Bruce
thinks this is a great idea:    bsdimp
Hopes he didn't forget any files:       cperciva
2005-08-08 20:10:06 +00:00
Ruslan Ermilov
1ede9a7d0e Require that DESTDIR be set before running "make distribution". 2005-07-22 10:35:35 +00:00
Ruslan Ermilov
6537491231 Pass -i to pwd_mkdb(8) to ignore locking failures. This can be useful
for NFS installing world/kernel to another machine.
2005-07-15 14:52:29 +00:00
Brooks Davis
2af94c5d1d To allow /etc to be as minimal as possible in a diskless setup, we need
to run initdiskless before we run rcorder on /etc/rc.d.  To allow this,
move /etc/rc.d/initdiskless to /etc/rc.initdiskless and run it directly
from /etc/rc.

Remove /etc/rc.d/preseedrandom as it is no longer necessicary (we start
with entropy unblocked) and was only used by initdiskless when it
was needed.

Discussed on:	freebsd-rc
Repocopy by:	peter
2005-04-29 23:02:56 +00:00
Gleb Smirnoff
8d6e44f80f Add startup script and default configuration file for bsnmpd.
Reviewed by:	harti
2005-04-17 10:47:58 +00:00
Brooks Davis
04198d1800 Remove a number of entries from the distribution target that are
automaticly created at boot.  There's no need to maintain a list of
files and permissions in multiple places.  This also means binary
updates won't stomp on log files.

For the record, utmp is created in etc/rc.d/cleanvar, wtmp and lastlog
in etc/rc.d/var, and the reset via etc/rc.d/newsyslog.
2005-03-02 00:44:39 +00:00
Tom Rhodes
81e03d8868 Add rc.bsdextended. It's been tested enough. 2005-03-01 03:59:24 +00:00
Ruslan Ermilov
0c5397aa69 Bootstrap pwd_mkdb(8) and use its new feature during "make distribute". 2005-02-28 22:55:43 +00:00
Ruslan Ermilov
80f64943ba Step 1/2 of making "make distribute" work for cross-builds. 2005-02-28 14:16:53 +00:00
Ruslan Ermilov
a216173556 NOCRYPT -> NO_CRYPT 2004-12-21 10:16:04 +00:00
Ruslan Ermilov
e653b48c80 Start the dreaded NOFOO -> NO_FOO conversion.
OK'ed by:	core
2004-12-21 08:47:35 +00:00
Doug Barton
b04e39c493 1. Incorporate most of Ruslan's improvements to where and how the
/etc/namedb symlink is created.

2. Incorporate Brian's suggestion to make the link relative. This
is necessary to handle situations (such as mergemaster) where the
user is building a tree in a seperate environment. This will also
fix the problem with the way DESTDIR is set in 'make release'.

3. Add a new knob, NO_BIND_MTREE, as suggested by the folks who
already have stuff in /var/named that they don't want me to mess with.

4. Update make.conf(5) with the new stuff, and correct a few paths
that have changed since I last updated it.
2004-10-08 00:14:28 +00:00
Ruslan Ermilov
46c63c1d76 Fixed symlinking of /etc/namedb.
Reported by:	Jeremy Chadwick
2004-10-05 13:03:08 +00:00
Doug Barton
bb3b2b373a Install namedb stuff to ${DESTDIR}/var/named/etc/namedb instead
of relying on the symlink in ${DESTDIR}/etc/namedb.

This is functionally equivalent, but doesn't rely on the symlink to work.

Requested by:	ru
2004-09-30 10:24:24 +00:00
Ruslan Ermilov
587ca40507 Fixed symlinking /var/named/etc/namedb to /etc/namedb.
A second "make distrib-dirs" createed a symlink in /var/namedb/etc/namedb.
A third "make distrib-dirs" failed.
2004-09-29 06:54:18 +00:00
Doug Barton
8f1bb3891d Create a named chroot directory structure in /var/named, and use it
by default when named is enabled. Also, improve our default directory
layout by creating /var/named/etc/namedb/{master|slave} directories,
and use the former for the generated localhost* files.

Rather than using pax to copy device entries, mount devfs in the
chroot directory.

There may be some corner cases where things need to be adjusted,
but overall this structure has been well tested on a production
network, and should serve the needs of the vast majority of users.

UPDATING has instructions on how to do the conversion for those
with existing configurations.
2004-09-28 09:46:00 +00:00
Doug Barton
2a61444749 1. Add much finer granularity to the NO_BIND knobs with the addition of:
NO_BIND_DNSSEC, NO_BIND_ETC, NO_BIND_NAMED, and NO_BIND_UTILS.

2. Make creation of directories in /usr/include that are only needed
in the WITH_BIND_LIBS case conditional.

Reviewed by:	ru, des
2004-09-27 08:23:43 +00:00
Dag-Erling Smørgrav
8dee269791 Reconnect namedb. While it may not be optimal, our old named.conf from
BIND 8 is quite usable for BIND 9.
2004-09-24 16:13:55 +00:00
Dag-Erling Smørgrav
cd3ee173f9 Switch from BIND 8 to BIND 9.
Submitted by:	(in part) dougb@, trhodes@
Reviewed by:	dougb@, trhodes@, re@
MFC after:	5 days
2004-09-21 19:01:48 +00:00
Dag-Erling Smørgrav
dde5634ff5 Drop the -d argument to mtree since some of the spec files now list
symlinks.
2004-03-23 22:17:34 +00:00
Ruslan Ermilov
920fa8dcbd I believe most of /boot/device.hints out there are based (if not
identical) on GENERIC.hints, hence the following change:

Moved the creation of /boot/device.hints where it belongs.  This
should aid in merging GENERIC.hints changes to /boot/device.hints,
using mergemaster(8) or a similar approach.
2004-03-14 17:18:39 +00:00
Max Laier
8d69c48be5 Link pf to the build and install:
This adds the former ports registered groups: proxy and authpf as well as
the proxy user. Make sure to run mergemaster -p in oder to complete make
installworld without errors.

This also provides the passive OS fingerprints from OpenBSD (pf.os) and an
example pf.conf.

For those who want to go without pf; it provides a NO_PF knob to make.conf.

__FreeBSD_version will be bumped soon to reflect this and to be able to
change ports accordingly.

Approved by:	bms(mentor)
2004-03-08 22:03:29 +00:00
Ruslan Ermilov
bbe8270c50 - Run makewhatis(1) in etc/Makefile at the end of "install".
- Removed redundant and undocumented NO_MAKEDB_RUN knob.
2004-01-22 08:18:37 +00:00
Dag-Erling Smørgrav
6e14bc788d Get moduli from the OpenSSH sources instead of keeping a local copy. 2004-01-07 11:55:44 +00:00
Mark Murray
d7a606482c Use a better way to take NO_LPR into account, and correctly check the
NOCRYPT macro when looking at crypto.

Reminded by:	ru
2003-11-02 22:13:36 +00:00
Maksim Yevmenkin
e6ef35a90b Connect /etc/bluetooth and /usr/share/examples/netgraph/bluetooth to the build.
Reviewed by: imp, simon
Approved by: imp (mentor)
2003-10-26 19:09:12 +00:00
Poul-Henning Kamp
99d38d6c23 Only install .k5login if people have not set NO_KERBEROS. 2003-10-03 19:38:21 +00:00
Mark Murray
6db574266b Don't install etc/printcap in the NO_LPR case; ports like 'cups'
make their own etc/printcap if they need it.
2003-09-27 17:33:03 +00:00
Mark Murray
9e9c5a9dc1 Remove excess paranoia. There is no need to chech for the crypto/ dir
any more, and this check has been removed elsewhere.
2003-09-18 16:35:43 +00:00
Mike Makonnen
c732f30398 o Do not keep a separate list of src/etc/defaults files in
the src/etc makefile. This list was used to manually
  install the files from src/etc. Instead, simply change
  directory and 'make install'.
o There is no reason for the files in src/etc/defaults to
  be installed as writeable.

Reviewed by:	ru
2003-08-24 03:24:54 +00:00
David E. O'Brien
a37fe9e7cd Don't hardcode owner 'root' and group 'wheel'.
Submitted by:	Ulrich Spoerlein <q@uni.de>
2003-08-18 00:36:31 +00:00
Gregory Neil Shapiro
6e82f17aa8 Do not install sendmail example/infrastructure files if NO_SENDMAIL is
defined.  The only two files installed in this case are aliases (which
I believe other MTAs may use) and mailer.conf (which isn't sendmail,
it belongs to mailwrapper).

PR:		50477
MFC after:	5 days
2003-07-06 19:23:31 +00:00
Andrey A. Chernov
d5a6e6e7aa Old-promised removing of deprecated locale names 2003-06-10 01:22:30 +00:00
Doug Barton
367ff02101 Hook devfs.conf up to the build.
Approved by:	re (scottl)
2003-05-06 07:25:17 +00:00
Doug Barton
0477e337c2 Hook rc.sendmail back up, it was removed prematurely 2003-05-02 22:27:31 +00:00
Doug Barton
4b065e2ce1 Per previous announcement, remove the old version of the rc system.
All functionality from the previous system has been preserved, and
users should still customize their system boot with the familiar
methods, rc.conf, rc.conf.local, rc.firewall, sysctl.conf, etc.

Users who have customized versions of scripts that have been removed
should take great care when upgrading, since the compatibility code
that used those old scripts has also been removed.
2003-05-02 05:27:35 +00:00
Mark Murray
20a83c49ba Make the defaults for Kerberos 5 a little more up-to-date. 2003-04-30 20:58:49 +00:00
Mike Makonnen
8b3695ab45 Break out and rewrite the network setup scripts.
o /etc/network.subr contains common subroutines used for seting
	  up network interfaces
	o rc.d/hostname sets the hostname if not already set
	o rc.d/nisdomain sets the nis domain *after* rpcbind but
	  before the yp* daemons. This fixes issues with temporary
	  hangs when looking up informaion in nis before it's ready.
	o rc.d/netif brings network interfaces (minus dhcp)  up.
	o rc.d/network1 has been disabled and will be retired before
	  RELENG_5. It will be replaced by rc.d/netif

Approved by:	markm (mentor)
2003-04-18 17:51:54 +00:00
Dag-Erling Smørgrav
4845d27e63 Introduce debug.log which gets debug.* (most of this would otherwise go
to the great bit-bucket in the sky)
2003-04-08 16:14:02 +00:00
Ruslan Ermilov
cc76558ad4 Make disktab(5) MI (repo-copied from etc.i386/disktab). 2003-04-02 20:13:59 +00:00
Ruslan Ermilov
6192b1dff1 Make sure the default install comes with /etc/login.conf hashed. 2003-03-03 11:19:18 +00:00
Andrey A. Chernov
367f4d9eb0 Apply man.alias to /usr/share/openssl/man too 2003-02-11 01:08:51 +00:00
Jacques Vidrine
6042ca2e01 Install the OpenSSL man pages in /usr/share/openssl/man
and remove the WANT_OPENSSL_MANPAGES knob.
2003-02-10 19:57:56 +00:00
Poul-Henning Kamp
3347cc5e11 NODEVFS cleanup: Don't ever install MAKEDEV anymore. 2003-02-01 22:22:06 +00:00