d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
51,260 Commits 4 Branches 49 Tags
Commit Graph

2342 Commits

Author SHA1 Message Date
jhb
9c5a24968b Mention that basic network options now include firewall/security options as 
well.
 2000-08-17 06:04:13 +00:00
jhb
ea3449bbd2 Fix a whitespace bogon. 2000-08-16 23:08:28 +00:00
brian
2c225e0679 Add unit2minor() and use it where appropriate so that we handle 
units > 255 properly.

Fix usio while I'm there
 2000-08-16 16:42:50 +00:00
obrien
b4ef1cd578 Move the running of the Linux and SVR4 compat bits to the arch independent 
location.

Sponsored by:   LinuxWorld frustration
 2000-08-15 18:02:49 +00:00
sheldonh
f28db623c4 Add a sample ifconfig entry for an IPX address family address, to give 
IPX folks a fighting chance of figuring this out themselves.  I can't
work out how to document this carefully in rc.conf(5), but this ought
to close the PR.

PR:		17904
Reported by:	John Gelnaw <jeg@hawk.circa.ufl.edu>
 2000-08-15 15:09:34 +00:00
kris
371757663a Install /var/crash/minfree mode 644 instead of 664 - group wheel shouldn't 
have special write permissions to things.
 2000-08-15 09:42:12 +00:00
itojun
acbf201b3b reorder "localhost" entry, to prefer ::1 than 127.0.0.1. 2000-08-15 09:38:19 +00:00
gshapiro
040074adf6 Upon installation, create a symbolic link for /etc/aliases pointing to 
/etc/mail/aliases.  This should both help users as well as other MTAs which
still use a default aliases path of /etc/aliases.
 2000-08-14 02:49:39 +00:00
gshapiro
dd3d88fc34 Do not require a local-host-names file as this configuration file is the 
default /etc/mail/sendmail.cf installed on a fresh install.
Problem noted by: Hajimu UMEMOTO <ume@mahoroba.org>
 2000-08-13 18:53:58 +00:00
gshapiro
2424c7393a Complete migration of aliases file to /etc/mail/aliases. 
The maintainers of share/examples/diskless/README.TEMPLATING and mergemaster
have been contacted so those may be updated as well.
 2000-08-13 18:38:58 +00:00
joe
e7eabf2bfc Define SUPHOST. If this is set a '-h ${SUPHOST}' is added to the 
SUPFLAGS when a 'make update' is run.  This means that the supfile
doesn't need to be edited because the -h will override the
CHANGE_THIS.FreeBSD.org host.
 2000-08-13 12:36:40 +00:00
gshapiro
985942e1cb Add alaises as another file to install into /etc/mail/. 
Rename the variable from NOSPAM to ETCMAIL as the list of files actually
only contains one antispam related file.
 2000-08-13 09:01:12 +00:00
imp
c8d462a744 Change BUILD_SUIDPERL to ENABLE_SUIDPERL, with changed note as to what 
it does.
 2000-08-13 01:41:35 +00:00
gshapiro
002ef51d6e The rest of the changes needed to support the new version of sendmail (8.11.0). 
Beyond changes to the build system, this includes fixing up the sample
freebsd.mc configuration for changes in defaults and syntax, removing
outdated documentation, and updating the release notes.
 2000-08-12 22:39:25 +00:00
sos
140ba3a556 Add the acdNt# devices to the acd entry, for individual track access. 2000-08-11 09:22:34 +00:00
jdp
42f709b552 Add an rc.conf knob "ldconfig_insecure" to disable ldconfig's 
security checks.  Set the default to NO, i.e., secure.

Submitted by:	Maxime Henrion <mhenrion@cybercable.fr>
 2000-08-11 03:26:30 +00:00
imp
133f7e3683 Change NOSUIDPERL to BUILD_SUIDPERL. One must now explicitly enable 
building suidperl.
 2000-08-10 22:55:58 +00:00
billf
6e74136b0a make sshd follow the pattern of enable, program, flags like every 
other entry does.
 2000-08-10 19:52:06 +00:00
sanpei
be1552534d add Nokia Card Phone 2.0 (gsm900/dcs1800 HSCSD terminal) 
PR:		conf/20037
 2000-08-10 13:43:17 +00:00
sanpei
7955ab865a I tested Toshiba Modem/LAN card IPC5001B (as Modem) and enable it. 
This card has `Network/LAN adapter' function ID(06 00),
not Serial port/modem.
 2000-08-10 13:24:12 +00:00
brian
20b74ed074 Correct dodgy wild card expansion 
PR:	20514
 2000-08-10 10:58:44 +00:00
brian
21c4f73753 Allow a ppp_user specification to run ppp at startup 
PR:		20258
 2000-08-10 00:13:02 +00:00
brian
f67f88e239 Improve purgedir(): 
Fix leading & trailing space handling

  Suggested by: ben

  Handle files beginning with - correctly
  Don't follow symlinks (cd /var/spool/lock; ln -s /. horror)
 2000-08-09 09:23:30 +00:00
chris
ecf1cd2d1c Use shell matching instead of sed(1) to strip comments and blank lines. 
Since it doesn't depend on anything in /usr, it should work with a NFS-mounted
/usr partition.

Thanks to Bruce Evans to bringing this to my attention.
 2000-08-09 02:03:30 +00:00
brian
a4feacb3a7 Don't use find(1) before nfs filesystems have been mounted as 
it lives in /usr/bin.  Instead, locate files manually.

Note, only *files* under /var/spool/lock are now deleted rather
than everything that's not a directory.  I think this is more
correct, but if anyone disagrees please feel free to change it.

Problem pointed out by: bde
 2000-08-08 13:30:27 +00:00
brian
f4389ea9b3 Use ``diff -w'' for setuid.{to,yester}day comparisons 
rather than ``diff -b''.
 2000-08-07 09:08:35 +00:00
ru
b19e603dc8 Make natd(8) "compatible" with firewall_type="simple". 
PR:		conf/13769, conf/20197
 2000-08-04 14:02:11 +00:00
obrien
4ab606e485 Update rev 1.29 -- 'draft-manning-dsua' is now in its 3rd version. 2000-07-30 19:28:05 +00:00
green
3cd153a604 Keep urandom as a link to random (but a hard link). 2000-07-30 16:18:48 +00:00
green
4f74130532 Since the driver supports both (and may have different semantics for 
both soon...), create urandom instead of the link to random.  It's
also what makes sense according to the make_dev(9)'s in random(4).
 2000-07-30 03:15:11 +00:00
eivind
126215b8e1 Change the defaults for portmap, sendmail and inetd to be not running them. 
Make sysinstall override this on install, so the effective behavioural
change for a newly installed system is null.  Overall, this makes a system
with an empty /etc/rc.conf not run any network services, and makes the
FreeBSD-provided network services that are running visible in /etc/rc.conf
(instead of making people look through /etc/defaults/rc.conf to find the
things they need to disable to secure the system.)

Reviewed by:	jhb
Discussed with:	The usual cabal
 2000-07-28 22:45:36 +00:00
obrien
0d0e7e5154 Add this empty version of this file to make it easier for pre-4.0 users 
to find.
 2000-07-27 22:53:42 +00:00
asmodai
cd36f05b51 Remove all mention of LANG and MM_CHARSET. 
Add hints towards login.conf(5), which should be the preferred way
to set this systemwide without having to worry about the shell used.

PR:		9245
Submitted by:	martin Kammerhofer <dada@sbox.tu-graz.ac.at>
 2000-07-27 11:39:33 +00:00
sheldonh
23d54565a3 Close a window of readability when creating the entropy seed file, 
which must not be world-readable.
 2000-07-24 15:14:47 +00:00
sheldonh
953536aee8 If the initial attempt to write ${entropy_file} to /dev/random fails 
and the randomdev.ko module is not resident, try to load the module and
perform the write again.

Reviewed by:	markm
 2000-07-24 13:40:41 +00:00
marcel
510255570c Backout addition of -L switch to mtree. Using -L breaks the 
build process in too many cases. Adding mtree to bootstrap-tools
to solve this breaks the upgrade path because mtree needs a
libc that has strtofflags and fflagstostr.
 2000-07-23 16:33:00 +00:00
asmodai
f55c1c6732 Add weak_mountd_authentication, which is examined in /etc/rc.network. 
Setting this to YES instead of its default NO, causes mountd to be
passed the -n flag, which allow non-root users mount requests to be served.
 2000-07-23 11:31:09 +00:00
ache
4b5414bf83 Sync 2000-07-21 15:14:05 +00:00
ache
1948548eee dd is too verbose writting entropy, redirect its output to /dev/null 
Add period at the end of sentence
 2000-07-20 19:25:12 +00:00
ache
493ee2169c Sync with main termcap, SGR 24,27 2000-07-20 18:55:07 +00:00
nsayer
14503a8247 Add the tap driver. 
The tap driver is used to present a virtual Ethernet interface to the
system. Packets presented by the network stack to the interface are
made available to a character device in /dev. With tap and the bridge
code, you can make remote bridge configurations where both sides of
the bridge are separated by userland daemons.

This driver also has a special naming hack to allow it to serve a similar
purpose to the vmware port.

Submitted by:	myevmenkin@att.com, vsilyaev@mindspring.com
 2000-07-20 17:01:10 +00:00
ache
465793ff62 Sync with main termcap (AX, latin2 mono) 2000-07-20 14:08:21 +00:00
ume
2988979ab5 Add some examples for IPv6 addresses. 
PR:		conf/18614
Submitted by:	James Housley <jim@thehousleys.net>
 2000-07-19 13:05:58 +00:00
brian
e59bf23032 Add a default ident string and do some minor whitespace adjustments 2000-07-19 10:16:29 +00:00
ru
06cffe2533 Add /dev/agpgart for AGP. 
Reviewed by:	dfr
 2000-07-19 09:21:14 +00:00
imp
42caeca203 Apm device is now safe to be world readable, so make it so. 2000-07-19 06:35:58 +00:00
ume
55b85b467a Fix an unmatched opening quote. 
PR:		conf/20000
Submitted by:	Alex Kapranoff <alex@kapran.bitmcnit.bryansk.su>
 2000-07-18 08:44:17 +00:00
sheldonh
59ad463b6c Improve on previous commit: 
Don't inhibit the trailing newline for entropy-related messages.
Try harder to save the seed file on shutdown.

Reviewed by:	markm
 2000-07-17 13:39:48 +00:00
ume
c633746aa6 If ipv6_enable is set to yes, do IPv6 setup for PCCARD ethernet 
card.  This is still at staring point and end node case only.
 2000-07-17 12:33:57 +00:00
markm
968e0bbd12 Add entropy caching. With this, some entropy is cached at shutdown 
time, and this is used to reseed the random number generator at
boot time.

NOTE - this has no hope of working if you halt(); you need to
execute rc.shutdown to get the entropy stash.
 2000-07-17 12:28:58 +00:00