4479 Commits

Author SHA1 Message Date
matteo
a7d714ca58 MFC
nfslocking: rev 1.12 [1] and 1.13 [2]
	rc.conf.5: rev 1.321 [2]
	rc.conf: 1.311 [2]

	[1] Record rc.d/nfslocking dependency on rc.d/rpcbind
	[2]Add rpc_statd_flags and rpc_lockd_flags options to allow
	options to be passed to rpc.statd and rpc.lockd

PR:		conf/105465 [1]
Approved by:	mtm [1]
2007-04-12 13:13:57 +00:00
cvs2svn
e417d4dff3 This commit was manufactured by cvs2svn to create branch 'RELENG_6'. 2007-04-10 20:03:43 +00:00
rwatson
aff7c64f54 MFC: be specific that rc.firewall relates to ipfw(4), and not to other
firewalls.
2007-04-05 10:51:10 +00:00
ume
144ec955e7 MFC 1.305: Turn default address selection on by default. Now,
when ipv6_enable="NO", an IPv4 address is preferred for a
destination address.
2007-04-02 09:23:29 +00:00
mux
3803c37343 MFC r1.20:
The code looks for all the loaded screensaver modules, tries to
  kldunload them, and only loads the new one if kldstat's output shows
  that there aren't any left.  However, the regexp looking for modules
  to unload was still searching according to the the old naming scheme,
  splash_<name>.ko, instead of <name>_saver.ko.
2007-03-29 19:06:14 +00:00
njl
3883a21f52 MFC rev 1.9: quiet down the errors when all fs are read-only 2007-03-18 05:34:47 +00:00
yar
e8e57d9b62 MFC rev. 1.71, 1.74:
Prepend ${_chroot} to pathnames where appropriate,
	and do that properly.
2007-03-16 15:34:09 +00:00
yar
f4d705916a MFC:
As suggested more than once in the lists, drop -M from flags to mfs
  for /tmp and /var.  This makes the memory discs swap-backed instead
  of malloc-backed.  A swap-backed memory disc should not be worse
  than a malloc-backed one in any scenario because it will start
  touching swap only when needed.  OTOH, a malloc-backed disc can
  starve limited kernel resources and evenually crash the system.

  Reflect the change in the rc.conf(5) manpage.  Also stop telling
  lies there about softupdates: it does not waste disc space, it
  just can delay its freeing.

	src/etc/defaults/rc.conf	1.306
	src/share/man/man5/rc.conf.5	1.317
2007-03-14 14:19:42 +00:00
yar
924f262444 MFC rev. 1.9:
Fix a typo in a warning message.
2007-03-10 14:20:34 +00:00
yar
5453f5e6ea MFC rev. 1.9-1.11:
Better handling for unset or null $hostname, which can appear
in a system just installed, or configured via DHCP.
2007-03-10 14:17:27 +00:00
yar
0add6b4616 MFC rev. 1.26:
pkill(1) and pgrep(1) have been moved to /bin so that they are
available to rc.d scripts early in the boot sequence.
2007-03-10 14:07:01 +00:00
yar
c91ac90f51 MFC rev. 1.10:
Improve rc.d conformance:
- don't play a needless trick with prestart, just use start method;
- provide no-op stop method so that we don't get bogus "abi not running" error.
2007-03-10 14:04:01 +00:00
yar
c4fecb1307 MFC rev. 1.18:
Syscons cannot be stopped, so provide a no-op stop method.
The default stop method from rc.subr isn't suited for this
case and produces a bogus warning: "syscons not running".
2007-03-10 14:00:51 +00:00
yar
eaf8db5f39 MFC rev. 1.73: Allow for interpreted scripts using env(1)
in their shebang lines.

PR:	bin/100287
2007-03-10 13:53:04 +00:00
syrinx
a1f49627af MFC:
etc/snmpd.config, Revision 1.8

Add a (disabled) configuration line to enable snmp_bridge(3) module.

Approved by:	bz (mentor)
2007-03-08 10:27:36 +00:00
remko
bd9ba3e495 MFC 800.loginfail rev 1.8
Only match on log messages containing fail,invalid,
  bad or illegal. This prevents matching on systems that
  have a name that matches the query.

  PR:             conf/107560
  Submitted by:   Christian Laursen <cfsl at pil dot dk>
  MFC after:      3 days
  Approved by:    imp (mentor)

Approved by:	imp (mentor)
2007-03-06 18:29:19 +00:00
remko
72c1fa9616 MFC 310.locate rev 1.7
Move to the preferred syntax for nice (-n) instead
  of the depricated one.

  PR:             conf/108611
  Submitted by:   TAOKA Fumiyoshi <fmysh at iijmio-mail dot jp>
  Approved by:    imp (mentor)

Approved by:	imp (mentor)
2007-03-06 18:27:24 +00:00
brooks
e906ee70e9 Sync dhclient and supporting code with CURRENT. In particular:
- Introduce per-interface dhclient_flags_<ifn> and
   background_dhclient_<ifn> rc.conf variables.
 - Default to sending a client identifer.
 - When an invalid host name option is sent, delete it and accept the
   lease.
 - Fix usage, the call to getopt, and a typo in rc.d/dhclient.
2007-02-09 03:11:32 +00:00
marcel
5e1625b7be MFC rev 1.4: remove screen and ttyy#; replace ttyd# with ttyu#. 2007-02-02 04:28:24 +00:00
njl
46f5331e05 MFC: support for separate CPU Cx idle states 2007-01-23 07:21:23 +00:00
flz
2e12d17b90 MFC: Introduce mixer_enable (default: YES).
src/etc/rc.d/mixer: rev 1.6 -> 1.7
      src/share/man/man5/rc.conf.5: rev 1.307 -> 1.308
      src/etc/defaults/rc.conf: rev 1.297 -> 1.298

PR:		conf/101268
Submitted by:	Eugene Grosbein <eugen@grosbein.pp.ru>
2007-01-22 17:51:17 +00:00
csjp
48903cc22a MFC hosts.allow revision 1.22
Since NIS is an RPC based service, add a note that when adjusting access
controls in NIS, similar access controls should be considered for the
rpcbind as well.
2007-01-20 02:19:57 +00:00
simon
4b3c464b3e Fix jail rc.d script privilege escalation via symlink attack against
/var/log/console.log and mount points.

Security:	FreeBSD-SA-07:01.jail
2007-01-11 18:18:57 +00:00
brooks
0ae379a240 MFC rev 1.25:
Pull in /etc/rc.conf.d/network so that ifconfig_<if> variables can be
set there. This is required for consistency with /etc/rc.d/netif.

PR:		conf/103893
Submitted by:	Nick Hibma <nick at anywi.com>
2007-01-09 03:29:49 +00:00
flz
4dfbf1f9e3 Jail_ip and jail_interface local variables were renamed to _ip and _interface
in a previous commit to avoid namespace collisions, unfortunately I missed two
of them. This leads to the ip alias being incorrectly removed in some cases
when using the stop command.

Reported by:	Philipp Wuensche <cryx-freebsd@h3q.com>
2007-01-02 11:14:07 +00:00
ceri
357209deae MFC revision 1.25:
Ensure that the load of rules into the alternate ruleset worked before
  loading them into the live one too.

PR:		conf/97311
Approved by:	ru
2006-12-31 17:49:38 +00:00
hrs
1b3befd07d MFC: Add "nojail" keyword to prevent a spurious error message.
Spotted by:	Keve Nagy
PR:		conf/107083
2006-12-29 16:01:12 +00:00
yar
c1568d06c3 MFC rev. 1.18:
Improve cleartmp in a number of aspects:

  + Use rc.subr(8) features properly.
  + Do the whole job of obliterating /tmp contents in find(1).
  + Leave lost+found and quota.{user,group} in /tmp only if root-owned.
  + Make the overall structure clearer by first removing the X dirs
    (perhaps along with the rest of /tmp) and then re-creating them.
  + Use "find -exec rm -rf {} +" for efficiency: each rm instance gets
    a chance to kill as much files in /tmp as ARG_MAX permits.
2006-12-20 12:29:40 +00:00
yar
8e5e27bc4f MFC rev. 1.13:
De-uglify messages from the ipfw script.
2006-12-20 12:24:32 +00:00
yar
e86f847195 MFC rev. 1.4:
Use more rc.subr(8) features.
  Skip useless work when ${natd_interface} is unset.
  Double quote user-supplied vars unless there is a reason not to.
2006-12-20 12:23:57 +00:00
yar
38df636573 MFC fixes to comments and messages to reduce diff against HEAD. 2006-12-20 12:04:00 +00:00
yar
5673a6c06f MFC rev. 1.65, 1.66:
- Avoid ps(1) output truncation to 80 columns.
- Eliminate header line(s) from ps(1) output instead of skipping over them.
2006-12-20 11:55:16 +00:00
yar
878113263b MFC rev. 1.9: Use load_kld(). 2006-12-20 11:45:40 +00:00
yar
b23f545bec MFC load_kld().
Prodded by:	delphij, emax
2006-12-20 11:43:04 +00:00
luigi
8bd8b24f59 MFC: sync with the version in -current, in detail:
- put some common code in a function handle_remount();
  - add better checks on non-existing directories to prevent error
    messages at run time;
  - introduce a function log() to help debugging diskless booting
    when things don't work;
  - modify the parsing of diskless_remount so you can add mount_nfs
    options after the pathname. You could use 'remount' to do something
    similar, but this way is more convenient because you don't have to
    hardwire the server name in the command.
  - document the above.
2006-12-13 10:19:37 +00:00
hrs
075f36af3a MFC: Disable IPv6 configuration for interfaces in pccard_ether_start().
After a change of devd.conf, devd(8) handles NIC attach/detach event
 by using /etc/pccard_ether with the interface name as the argument.
 This model does not work properly with IPv6 configuration because the
 implementation of IPv6 stateless auto-configuration in the FreeBSD
 rc.d scripts depends on whether there are any explicit configurations
 for interfaces or not.  It works this way: if no manual configuration,
 it will perform auto-configuration, but otherwise no
 auto-configuration will be performed.  So, this behavior can only be
 determined by all of the interfaces on a system, not a single one.
 For this reason, the network6_interface_setup() function called from
 the pccard_ether_start() does not work with a single interface name.
 And what is worse, this combination of devd.conf and
 pccard_ether_start() caused a bad side-effect that when
 ipv6_enable=YES, all of interfaces marked as DOWN would be UP
 unconditionally (and router solicitation was sent) just after devd(8)
 was invoked.  This should be fixed in a more sophisticated way.
2006-12-08 15:52:25 +00:00
hrs
3a43af3195 MFC:
Add a link-local address to the lo0 even when ipv6_enable="NO".

 A kernel with INET6 always has ::1 on lo0, so in the case of
 ipv6_enable="NO" the lo0 can have ::1 with no link-local address.
 This is a violation of the IPv6 specification.  As a workaround
 for this situation, fe80::1 is added in rc.d/auto_linklocal when
 lo0 has no link-local address.
2006-12-08 06:40:34 +00:00
harti
bcfce3783b MFC Rev. 1.2. Add a (commented out) line that loads the snmp_hostres(3)
module.

Approved by:	re (bmah)
Suggested by:	Ulrich Spoerlein
2006-11-14 08:09:24 +00:00
delphij
9c148db7a2 MFC 1.4: sync pf.os with OpenBSD.
Approved by:	re (bmah)
2006-11-12 18:20:29 +00:00
mlaier
466514f7fc MFC network.subr, 1.176:
Do not try to rtsol on pflog or pfsync devices.

Approved by:	re (bmah)
2006-11-06 16:46:06 +00:00
hrs
6a3903a9e4 MFC rev.1.3: Suppress a spurious warning message when a kernel without
INET6 is used.

Spotted by:     ru
Reviewed by:    ume
Approved by:	re (kensmith)
2006-11-03 17:35:23 +00:00
avatar
087a0c03db MFC (1.12): Re-sync'ing pf rules in post command as we already did for
ipfilter.

Approved by:	re (kensmith)
2006-10-31 03:29:27 +00:00
flz
32754fad06 MFC: Add 'reload' to the list of available commands for the amd rc.d script.
src/etc/rc.d/amd: rev 1.17 -> 1.18

PR:		conf/104507
Submitted by:	Douglas K. Rand <rand@meridian-enviro.com>
Approved by:	re (bmah)
2006-10-22 20:33:10 +00:00
des
c62d469074 Don't forget to install mountlate.
Approved by:	re (bmah)
2006-10-20 08:58:03 +00:00
ume
ff7b8bd02c MFC: Revert the default value of net.inet6.ip6.auto_linklocal to 1.
If ipv6_enable is not set to "YES", net.inet6.ip6.auto_linklocal
is turned to 0 at boot.

	etc/rc.d/auto_linklocal:	1.2
	sys/netinet6/in6_ifattach.c:	1.35

Approved by:	re (hrs)
2006-10-16 15:09:24 +00:00
kris
ac65b60af3 MFC: Correct nfs_access_cache default from 2 to the default kernel value
of 60

Approved by:	re (hrs)
2006-10-15 18:22:17 +00:00
ume
873bd04a53 MFC: Restore the behavior that net.inet6.ip6.auto_linklocal=0 could
be coexist with ipv6_enable="YES".

	etc/network.subr:		1.175
	etc/rc.d/Makefile:		1.77
	etc/rc.d/auto_linklocal:	1.1

Approved by:	re (hrs)
2006-10-10 12:41:05 +00:00
emax
3361db4c05 MFC:
Install vkbd(4) header into dev/vkbd.

Update bthidd(8) code and hook it up to the build. bthidd(8) now was integrated
with vkbd(4) and supports multiple keyboards via vkbd(4)/kbdmux(4).

The code was tested with Apple Bluetooth keyboard and SE k700i cell phone
(remote control feature).

Add bthidd(8) rc(8) script.

Approved by:	re (kensmith)
2006-10-09 21:00:17 +00:00
cvs2svn
5ece2c04f3 This commit was manufactured by cvs2svn to create branch 'RELENG_6'. 2006-10-09 12:50:17 +00:00
gnn
5b2bd42c10 MFC
Only automatically assign link local addresses if ipv6_enable is set to YES
in rc.conf

Reviewed by:	KAME core team, cperciva
Approved by:	re
2006-10-05 14:59:52 +00:00