5489 Commits

Author SHA1 Message Date
zont
b56a027638 - Set memorylocked limit to 64Kb for default login class.
This prevents unprivileged users to lock too much memory.
- Set memorylocked limit to 64Mb for daemon login class.
  Some daemons such as amd(8) and watchdogd(8) calls mlockall(2) on
  startup, they are run from init(8) which uses daemon login class.
- Set memorylocked limit to unlimited for root login class.

Suggested by:	avg
Approved by:	kib (mentor)
MFC after:	1 week
2012-12-18 07:27:50 +00:00
pjd
cbf6823f9a Use new savecore(8) option and limit number of kernel dumps that will
be kept around to the 10 most recent ones.

Add UPDATING entry with info how to return to the previous behaviour (no
limits).

Obtained from:	WHEEL Systems
2012-12-16 23:29:56 +00:00
hselasky
8ee2f7fcb1 Regenerate usb.conf
MFC after:	1 week
2012-12-15 10:56:16 +00:00
pjd
1d3ec906ca - When checking if a dump exists on the given device there is no need to
provide dump directory. Eliminate this redundant argument. This changes
  the usage, but the only risk here is that a warning will be printed
  about directory given as device.

- Update usage of -C option.

- When clearing dump header from the given device there is also no need to
  provide dump directory, although additional arguments for -c were not
  documented.

- Document that -v can be used with -c and that list of devices can be given.

Obtained from:	WHEEL Systems
2012-12-14 15:12:08 +00:00
delphij
976943f3a9 Teach sysctl(8) about parsing a file (while I'm there also give it
capability of parsing both = and : formats).

Submitted by:	hrs (initial version, bugs are mine)
MFC after:	3 months
2012-12-13 23:32:47 +00:00
pjd
3b54c5ffbe Fix the location of auditdistd configuration file.
Reported by:	Johan Hendriks <joh.hendriks@gmail.com>
2012-12-13 09:41:32 +00:00
delphij
36123bbedb Sync pf.os with OpenBSD:
add a handful of linux signatures from p0fv2 and some other
signatures from observation.

MFC after:	2 weeks
2012-12-10 20:52:52 +00:00
adrian
51bed028d5 Add a new 900MHz GSM regulatory SKU for the Xagyl Communications XC900M.
The XC900M acts as a Ubiquiti XR9 (and I _think_ SR9) by default;
it uses the same 900MHz<->2.4GHz downconverter mapping.

However it has an alternative frequency mapping which squeezes in a couple
more half/quarter rate channels.  Since the default HAL doesn't support
fractional tuning (sub-1MHz) in 2.4GHz mode on the AR5413/AR5414, they
implement it using a jumper.

Datasheet: http://www.xagyl.com/download/XC900M_Datasheet.pdf

Thankyou to Xagyl Communications for the XC900M NICs and Edgar Martinez
for organising the donation.

Tested:

* XC900M <-> XC900M
* Ubiquiti XR9 <-> XC900M

TODO:

* Test against SR9 and GZ901 if possible (the IEEE channel<->frequency
  mapping may not match up, thanks to the slightly different channels
  involved)
2012-12-07 06:34:46 +00:00
eadler
6dd12d609d Remove hack to emulate effective uid and just use the EUID's name in the
first place.  I was unaware of this option when originally committing
this change.

Submitted by:	gcooper
Approved by:	cperciva
MFC after:	3 days
2012-12-05 13:56:39 +00:00
rwatson
991e942bf2 Merge a number of changes required to hook up OpenBSM 1.2-alpha2's
auditdistd (distributed audit daemon) to the build:

- Manual cross references
- Makefile for auditdistd
- rc.d script, rc.conf entrie
- New group and user for auditdistd; associated aliases, etc.

The audit trail distribution daemon provides reliable,
cryptographically protected (and sandboxed) delivery of audit tails
from live clients to audit server hosts in order to both allow
centralised analysis, and improve resilience in the event of client
compromises: clients are not permitted to change trail contents
after submission.

Submitted by:	pjd
Sponsored by:	The FreeBSD Foundation (auditdistd)
2012-12-01 15:11:46 +00:00
hselasky
9cb06d4917 Regenerate usb.conf
MFC after:	1 week
2012-11-28 18:37:20 +00:00
glebius
8f5310865e Fix typo in weekly line which made it to rotated after reaching > 1 Kb.
PR:		conf/173857
Submitted by:	Matt Smith <matt xtaz.co.uk>
2012-11-26 19:42:38 +00:00
crees
133206e35a Revert r243228. This commit appears to cause more trouble than
it was designed to avoid; the issue described in the PR was no
longer an issue anyway.
2012-11-21 18:12:28 +00:00
hrs
f5a468d92e Do not put "already running" message when rc_quiet=yes.
PR:	bin/165477
2012-11-20 04:45:04 +00:00
crees
88807e15b4 cp -R misses out dotfiles; use pax instead to copy file hierarchies
PR:		conf/99721 (based on)
Submitted by:	Florian Zavatzki <f_zavatzki@blue-network.org>
Approved by:	hrs
MFC after:	1 month
2012-11-18 14:21:05 +00:00
hrs
a65c6ba8dc Fix condition to check if the maximum number of FIBs is greater than 0 or not.
Spotted by:	zont
2012-11-18 11:22:15 +00:00
hrs
0f95bf629a Use -fib N modifier to add/delete a route to/from multiple FIBs. 2012-11-17 21:44:02 +00:00
hrs
c8437905c2 Add check_namevarlist() to check if ${name}_var is reserved in rc.subr or not. 2012-11-17 18:11:10 +00:00
eadler
fa82348722 last commit was a mistake
Pointyhat to: me (for real)
Approved by: cperciva (implicit)
2012-11-16 14:25:13 +00:00
eadler
8d33709c9b dot.login is supposed to be for bourne shell, not csh
Pointyhat to: me
Approved by: cperciva (implicit)
2012-11-16 04:25:35 +00:00
eadler
2a4f469096 Using set -x produces output on stderr instead of stdout.
It also doesn't work with make -s.
Prefer the use of builtin make features.

PR:		misc/126312
Reported by:	Nejc Skoberne <nejc@skoberne.net>
Submitted by:	bdrewery
Approved by:	cperciva
MFC after:	1 week
2012-11-15 20:37:38 +00:00
eadler
413379c5a8 Only pass ip[46].addr when _addrl contains a value
Submitted by:	crees
Reviewed by:	Mike Jakubik <mike.jakubik@intertainservices.com>
Approved by:	cperciva
MFC after:	2 weeks
2012-11-15 15:06:15 +00:00
n_hibma
203d15d523 Not only load pccard_ether settings, also load network settings. This
is only a problem when a /etc/rc.conf.d/network file is being used.

PR:		conf/160373
Submitted by:	n_hibma
MFC after:	1 week
2012-11-08 20:34:12 +00:00
marcel
16d8c8419d The first line must contain "Content-Type:". Move the $FreeBSD$
keyword line to the comment block underneath.

Submitted by:	Garrett Cooper <yanegomi@gmail.com>
2012-11-07 00:19:30 +00:00
bapt
71eb24f36a Change default prompt to show ~ again for the home directory
Submitted by:	flo
Approved by:	eadler
2012-11-04 01:00:35 +00:00
eadler
3d05bb3fd0 Revert the change that makes less default.
Since I've committed this I've receieved roughly an equal
amount of email thanking me for making this change
and asking me to revert it.

I've resisted making this change because
new users tend to prefer less over more
and these users are the least likely to know
how to change the PAGER on their own.

Requested by:	many
Objected to:	just as many
Decision made by:	core
Approved by:	cperciva
MFC after:	3 days
2012-11-03 14:46:15 +00:00
eadler
99cf02c7fd 10 years too late add support for "2.88MB 3.5in Extra High Density"
floppies.

Its unlikely that anyone actually uses these or cares about these
anymore, since we support other floppy types and this change doesn't
hurt - just add it.

PR:		conf/40777
Submitted by:	Antti Kantee <pooka@cubical.fi>
Arrival-Date:	Fri Jul 19 08:50:02 PDT 2002
Approved by:	cperciva (implicit)
MFC after:	1 week
2012-11-02 00:17:30 +00:00
eadler
fe1e7b62c1 The test fails with "exit 1" if /usr/games/fortune doesn't actually
exist.  Fix that.

PR:		conf/71994
Submitted by:	Mikael Eklund <rma@ludd.ltu.se>
Reviewed by:	crees
Reviewed by:	jilles
Approved by:	cperciva (implicit)
MFC after:	3 days
2012-11-01 19:38:03 +00:00
hrs
b2713d8866 Load ipdivert.ko when natd_enable=YES.
PR:	conf/167566
2012-10-29 06:31:51 +00:00
hrs
5f66363588 Add setfib(1) support for services as <name>_fib in rc.conf. 2012-10-27 19:09:09 +00:00
crees
ae492a84ba Allow spaces in _chroot
Noticed by:	adj (IRC/#bsdports)
Approved by:	hrs
MFC after:	1 month
2012-10-27 17:43:30 +00:00
hrs
94b3ca6d00 Fix an issue when ipv6_enable=YES && ipv6_gateway_enable=YES which could
prevent rtadvd(8) from working as intended.

Spotted by:	brian
Discussed with:	brian
2012-10-27 17:06:26 +00:00
brian
4bbccef318 Enable "accept_rtadvd" on interfaces running rtadvd.
Without this, rtadvd runs but never advertises a default (IPv6) route.

MFC after:	1 week
2012-10-25 08:37:08 +00:00
marcel
8412efbea8 Add ATF to the build. This is may be a bit rought around the egdes,
but committing it helps to get everyone on the same page and makes
sure we make progress.

Tinderbox breakages that are the result of this commit are entirely
the committer's fault -- in other words: buildworld testing on amd64
only.

Credits follow:

Submitted by:	Garrett Cooper <yanegomi@gmail.com>
Sponsored by:	Isilon Systems
Based on work by:	keramida@
Thanks to:	gnn@, mdf@, mlaier@, sjg@
Special thanks to:	keramida@
2012-10-22 01:18:41 +00:00
ume
0502723d98 Set default for ${pkg_info} like ${pkg_version}.
MFC after:	1 week
2012-10-20 18:13:20 +00:00
ume
ab5beaff4d Use correct INDEX on 10-CURRENT. 2012-10-20 18:05:27 +00:00
bapt
6f657c35c9 pkg_add is no more the default tool, make motd recommand using pkg install instead of pkg_add 2012-10-20 14:54:49 +00:00
uqs
bdec3cb5a7 Merge mandoc from vendor into contrib and provide the necessary Makefile glue.
It's not yet connected to the build.
2012-10-19 22:21:01 +00:00
peterj
1d83f0f2d2 Explicitly specify 'np' so that getty(8) does not simulate even parity on
local.9600.  Whilst the actual binary termios(4) definitions and preceeding
comments for local.9600 indicate that parity is disabled, getty(8)
internally simulates parity based on the presence or absence of the 'np'
flag.

PR:		conf/76226
Submitted by:	peter
Approved by:	grog (co-mentor)
MFC after:	1 month
2012-10-18 22:20:02 +00:00
attilio
65d8b7120d Disconnect non-MPSAFE SMBFS from the build in preparation for dropping
GIANT from VFS. In addition, disconnect also netsmb, which is a base
requirement for SMBFS.

In the while SMBFS regular users can use FUSE interface and smbnetfs
port to work with their SMBFS partitions.

Also, there are ongoing efforts by vendor to support in-kernel smbfs,
so there are good chances that it will get relinked once properly locked.

This is not targeted for MFC.
2012-10-18 12:04:56 +00:00
attilio
85c1a64cec Disconnect non-MPSAFE NTFS from the build in preparation for dropping
GIANT from VFS. This code is particulary broken and fragile and other
in-kernel implementations around, found in other operating systems,
don't really seem clean and solid enough to be imported at all.
If someone wants to reconsider in-kernel NTFS implementation for
inclusion again, a fair effort for completely fixing and cleaning it
up is expected.

In the while NTFS regular users can use FUSE interface and ntfs-3g
port to work with their NTFS partitions.

This is not targeted for MFC.
2012-10-17 11:30:00 +00:00
attilio
3f4806915e Disconnect non-MPSAFE NWFS from the build in preparation for dropping
GIANT from VFS. In addition, disconnect also netncp, which is a base
requirement for NWFS.

In the possibility of a future maintenance of the code and later
readd to the FreeBSD base, maybe we should think about a better location
for netncp. I'm not entirely sure the / top location is actually right,
however I will let network people to comment on that more specifically.

This is not targeted for MFC.
2012-10-17 11:16:17 +00:00
attilio
efcca33ac5 Disconnect non-MPSAFE PORTALFS from the build in preparation for dropping
GIANT from VFS.

This is not targeted for MFC.
2012-10-16 09:59:10 +00:00
peter
a5f5f5cf3f mx1 -> smarthost.ysv 2012-10-15 14:14:21 +00:00
ume
e2e55abec2 Make a command for pkg_info changeable like pkg_version in
/etc/periodic/weekly/400.status-pkg to be friendly with pkgng.

MFC after:	1 week
2012-10-13 14:45:42 +00:00
peter
bd5be964da Point freebsd.org cluster machines to mx1 for their smarthost. 2012-10-11 20:46:04 +00:00
hselasky
12849bcc7c Regenerate usb.conf
MFC after:	1 week
2012-10-01 06:48:59 +00:00
hselasky
2eed5d6e94 Make sure moused is exiting as quick as possible after that the
umsX character device returns a read error. Update devd.conf rules
to use "DEVFS" events which are generated after that the umsX
character device node has been created/destroyed, and then there
should be no need for moused to wait up to 10 seconds for umsX to
be ready. Opening umsX should not fail except if the kernel is low
on memory. In that case the user can replug the USB mouse or use
"usbconfig" to reset the device. In case of USB mouse devices,
moused should neither retry to open its character device,
once the first read error has happened. This is an indication
of device detach.

MFC after:	1 week
2012-09-24 17:13:33 +00:00
jimharris
35d5f1b457 Integrate nvmecontrol(8) into the amd64 and i386 builds.
This includes adding NVMe header files to /usr/include/dev/nvme.

Sponsored by:  Intel
2012-09-17 21:41:38 +00:00
avg
291fc901e4 rc.d/power_profile: use recently added Cmax for cx_lowest
Trying to determine current lowest C-state after an AC event is racy
with C-states actually being changed by ACPI platform and kernel driver.

MFC after:	3 weeks
2012-09-11 06:25:10 +00:00