3038 Commits

Author SHA1 Message Date
cjc
ba1e7b8577 Long ago, there was just /etc/daily. Then /etc/security was split out
of /etc/daily. Some time later, /etc/daily became a set of periodic(8)
scripts. Now, this evolution continues, and /etc/security has been
broken into periodic(8) scripts to make local customization easier and
more maintainable.

Reviewed by:	ru
Approved by:	ru
2001-12-07 23:57:39 +00:00
rwatson
892dcf7c92 o Update rc.network to reflect the recent change of default in the
kernel TCP timer code: rather than checking for tcp_keepalive being
  set to "YES", check for "NO" and turn off keepalives if the variable
  is set in that manner.

o Note: eventually, it would make sense to remove this variable from
  rc.conf management, and instead rely on sysctl.conf.  In fact, this
  is probably true of a number of rc.conf variables whose sole aim
  is to drive the setting of sysctls at boot time.
2001-12-07 17:03:14 +00:00
des
8e7db8a91b Install pam.d files with mode 0644, not 0755. 2001-12-06 23:28:12 +00:00
nsayer
4bb45dbc2f Add a commented-out defaultrouter entry for 6to4 users. See RFC-3068 2001-12-06 20:44:14 +00:00
des
3de059d621 Introduce the variable USE_PAM_D, which, if set, will cause pam.d to be
installed instead of pam.conf.  This is for testing; the conditionals will
be removed once we are confident that pam.d works as intended.

Sponsored by:	DARPA, NAI Labs
2001-12-06 13:18:32 +00:00
des
d546e6cd08 Makefile for pam.d configuration files.
Sponsored by:	DARPA, NAI Labs
2001-12-06 13:16:47 +00:00
cjc
a57107b602 Protect the '*' in pppoed_provider (the default) from metacharacter
expansion in the rc-scripts.

PR:		32552
Submitted by:	Gleb Smirnoff <glebius@rinet.ru>
Approved by:	ru
Obtained from:	ru
MFC after:	1 day
2001-12-06 09:34:44 +00:00
des
341beea7b9 Awright, egg on my face. I should have taken more time with this. The
conversion script generated the wrong format, so the configuration files
didn't actually work.  Good thing I hadn't thrown the switch yet...

Sponsored by:	DARPA, NAI Labs (but the f***ups are all mine)
2001-12-05 21:26:00 +00:00
des
54d858ac55 Oops! Previous commit used tabs instead of spaces. 2001-12-05 21:11:24 +00:00
des
31ddf87424 Add /etc/pam.d.
Sponsored by:	DARPA, NAI Labs
2001-12-05 21:10:01 +00:00
des
9fc2ed638e pam.d-style configuration, auto-generated from pam.conf.
Sponsored by:	DARPA, NAI Labs
2001-12-05 21:06:21 +00:00
des
07f27091df Short README for /etc/pam.d, mostly extracted from the comments in pam.conf. 2001-12-05 20:59:38 +00:00
des
4366dec8fb Perl script that splits pam.conf into separate files suitable for pam.d.
Sponsored by:	DARPA, NAI Labs
2001-12-05 20:58:39 +00:00
des
ac8ed77cfa Bruce says the links are not needed. 2001-12-05 08:50:51 +00:00
des
ecc2670185 Call the ATAPI tape devices "ast" and "nast", not "rast" and "nrast". Add
backward compatibility symlinks for good measure.
DEVFS already gets this right (except for the symlinks).

PR:		24781
Submitted by:	Christian Weisgerber <naddy@mips.inka.de>
MFC after:	3 days
2001-12-04 00:48:21 +00:00
des
d3e87ede47 Create {ad,da,...}s1[a-h].
PR:		19849
Submitted by:	Udo Erdelhoff <ue@nathan.ruhr.de>
MFC after:	3 days
2001-12-04 00:40:38 +00:00
cjc
765a22d46d The named.conf file should refer to named.conf(5) in addition to
named(8) in the comments.

PR:		32459
Submitted by:	"Gary W. Swearingen" <swear@blarg.net>
MFC after:	2 days
2001-12-03 08:05:52 +00:00
obrien
dd4a3faea4 Use tabs where possible. 2001-12-01 17:14:34 +00:00
ru
1ab3b39503 GC cvs-1.8.1 import left-overs. 2001-11-28 09:31:56 +00:00
ru
3f4f880250 Whitespace police.
Submitted by:	cjc, ru
2001-11-28 08:52:35 +00:00
silby
d03f718884 Make sure the security check output includes a To: line in the
same way the daily run output does.
2001-11-28 04:07:03 +00:00
ache
d1f6a55d62 Add hi_IN.ISCII-DEV 2001-11-27 23:24:41 +00:00
msmith
e614b0ad04 Support the 'ciss' device node.
MFC after:	1 week
2001-11-27 23:12:00 +00:00
rwatson
47ff42dab2 Remeber to set the permissions on an md-backed /tmp to 01777, rather than
using the default of 0755.
2001-11-27 22:12:27 +00:00
sheldonh
776532304a Catch two extraneous calls to expr(1) that slipped past rev 1.311. 2001-11-27 11:57:47 +00:00
silby
7f6c9afbd1 Have security add a To: root@host line; the lack of a To: line is causing
spambouncer to think my security logs are spam.
2001-11-27 01:06:57 +00:00
sobomax
1e01215fef Add entries for GDM (GNOME Display Manager).
MFC after:	3 days
2001-11-26 16:55:40 +00:00
sheldonh
4a36d47b42 Style clean-up.
Submitted by:	bde
2001-11-25 12:49:32 +00:00
dd
5dd8a71701 Spelling police: sucessful -> successful. 2001-11-24 23:41:32 +00:00
darrenr
94889bc82b second part of the patches to complete ipf changes to rc
PR:		multiple
Submitted by:	Arjan de Vet <devet@devet.org>
2001-11-24 15:36:30 +00:00
darrenr
6524b81033 Resolve all the ipfilter startup issues in rc.network with one big patch
to get it all right, allowing ipnat to be enabled independantly of ipfilter
in rc.conf (among other things).

PR:		multiple
Submitted by:	Arjan de Vet <devet@devet.org>
Reviewed by:	Giorgos Keramidas <keramida@FreeBSD.org>
2001-11-24 13:48:30 +00:00
ache
9adece6dee Sync with main 2001-11-22 21:43:43 +00:00
ache
a4b0ee2641 Copy from main termcap 2001-11-22 21:05:57 +00:00
ache
5e151785f2 Merge with main variant 2001-11-22 19:39:36 +00:00
imp
aaff9c5767 Add Toshiba wireless LAN card
Submitted by: "Mark Sergeant" <msergeant@snsonline.net>
2001-11-21 06:24:44 +00:00
obrien
0c304be14e 'ircd' is a better service name. Also note '6667' is unoffical
Submitted by:	knu (name change)
2001-11-20 19:52:28 +00:00
obrien
9bd1852fac There is already an 'irc' service at port 194. However my experience is that
1667 is what is really used.  So name port 1667 'irc-client'.
2001-11-20 19:00:12 +00:00
obrien
20e994e2d1 Add IRC 2001-11-20 18:01:10 +00:00
sheldonh
915800e911 Avoid unnecessary calls to expr(1) by using standard shell arithmetic
expansion instead.

MFC after:	1 week
2001-11-20 17:56:34 +00:00
sheldonh
aaeaa0d93a Introduce new shell functions hexdigit, hexprint and zeropad.
Use these new functions instead of printf(1), which is scheduled for
removal as a shell builtin command, and which will not be available as a
standalone utility if MAKEDEV is run prior to mounting /usr.

Requested by:	knu
2001-11-20 17:24:35 +00:00
brian
f0503f1783 Handle wtmp.0 being compressed
PR:		32113
Submitted by:	Yar Tikhiy <yar@comp.chem.msu.su>
MFC after:	1 week
2001-11-20 15:01:24 +00:00
ume
78d7a09422 The rtsol must be done before the alias processing.
PR:		conf/31366
Submitted by:	gshapiro
MFC after:	1 week
2001-11-20 12:51:12 +00:00
gshapiro
96bd9ad269 Since buildworld builds cf files specified in SENDMAIL_ADDITIONAL_MC,
installworld should install them.

PR:		29928
Submitted by:	wollman
MFC after:	3 days
2001-11-20 03:41:05 +00:00
gshapiro
823ad9f7c7 Handle the sendmail_outbound_enable knob in the start target.
PR:		32033
MFC after:	3 days
2001-11-20 03:31:54 +00:00
sheldonh
229073ca49 Use shell functions for printing hex instead of printf(1) so that
printf(1) can be dropped from the system shell as a shell builtin.
2001-11-19 11:41:51 +00:00
ru
b7f75f85b5 Apply README style guidelines (this time checked). 2001-11-19 10:10:27 +00:00
imp
704847dbeb Avaya Wireless PCCARD
Submitted by: Ants Aader <ants@kernel.ee>
2001-11-19 01:51:40 +00:00
imp
8d3576085a Add Xircom wireless card from pir@pir.net 2001-11-18 06:01:09 +00:00
iedowse
2332b7be9a Add support for making the Coda /dev/cfsN devices.
PR:		conf/22695
Submitted by:	Kenneth Ingham <ingham@i-pi.com>
2001-11-18 00:20:08 +00:00
gshapiro
4e03d04c96 Add two new accounts/groups for sendmail:
smmsp - sendmail 8.12 operates as a set-group-ID binary (instead of
set-user-ID).  This new user/group will be used for command line
submissions.  UID/GID 25 is suggested in the sendmail documentation and has
been adopted by other operating systems such as OpenBSD and Solaris 9.

mailnull - The default value for DefaultUser is now set to the uid and gid
of the first existing user mailnull, sendmail, or daemon that has a
non-zero uid.  If none of these exist, sendmail reverts back to the old
behavior of using uid 1 and gid 1.  Currently FreeBSD uses daemon for
DefaultUser but I would prefer not to use an account used by other
programs, hence the addition of mailnull.  UID/GID 26 has been chosen for
this user.

This was discussed on -arch on October 18-19, 2001.

MFC after:	1 week
2001-11-17 21:24:45 +00:00