Commit Graph

3617 Commits

Author SHA1 Message Date
mtm
b41f46abfe Use $ipnat_program instead of the hardcoded path, which was wron
anyways.

Approved by:	markm (mentor) (implicit)
Submitted by:	leafy <leafy@leafy.idv.tw>
2003-04-24 18:14:52 +00:00
des
85e31bc1f4 Add nullok to the pam_unix line. 2003-04-24 12:22:42 +00:00
mtm
e4ea8b6549 o Add support for running /etc/rc.early
o Re-run through /etc/sysctl.conf a second time just before we set
  the securelevel.

Approved by:	markm (mentor) (implicit)
Reviewed by:	dougb
2003-04-24 08:27:29 +00:00
mtm
a6c5ee3cc4 Make ipfilter, ipnat, ipmon, and ipfs behave more like the old rc.
o group them together so they run one right after another
	o use the NetBSD supplied ipfs script instead of tacking
	  it on to the end of ipnat
	o Load the ipl module in ipnat and ipfilter, if it's not already
	  loaded
	o In ipmon and ipnat show a warning if neither ipfilter nor
	  ipnat is enabled or the ipl module is not loaded, and exit

Approved by:	markm (mentor) (implicit)
Tested by:	leafy <leafy@leafy.idv.tw>
2003-04-24 08:20:47 +00:00
matusita
b9c860330d Set appropriate tag "fsck" to logger(1) for background fsck messages.
PR:		51174
Submitted by:	Alex Popa <razor@ldc.ro>
2003-04-23 15:38:02 +00:00
des
1e06682f7e Make sure debug.log only gets debugging messages. 2003-04-23 13:08:31 +00:00
mtm
ac7a615c70 Run interface specific scripts for dhcp interfaces too.
This is how it has always been done (before and after rc.d) but
I somehow failed to include it when I broke up network1.

Submitted by:	bmah
Approved by:	markm (mentor)(implicit)
2003-04-20 19:14:16 +00:00
rwatson
594a41d213 Remove the 'te' label elements from the default configuration, since we
no longer plan on shipping a TE MAC module independent from SEBSD.

Obtained from:	TrustedBSD Project
Sponsored by:	DARPA, Network Associates Laboratories
2003-04-20 03:09:35 +00:00
mtm
f6cc6047c7 Spell ${_jail} correctly
Submitted by: Shizuka Kudo <shizukakudo_99@yahoo.com>
Approved by:	markm (mentor) (implicit)
2003-04-19 07:50:32 +00:00
mtm
f01ceae333 The changes to rc.d/network1 will not get merged in by
mergemaster if it does not appear in the list of files to install.
2003-04-19 01:56:44 +00:00
mtm
65d4bf1aff o Hook the new files up to the build.
o Make sure all the scripts reference rc.d/netif and not rc.d/network1

Approved by:	markm (mentor)
2003-04-18 17:55:05 +00:00
mtm
0c05e74326 Make use of the dhclient script. This will bring up/down dhcp
interfaces.

Approved by:	markm (mentor)
2003-04-18 17:53:02 +00:00
mtm
70cccaca83 Break out and rewrite the network setup scripts.
o /etc/network.subr contains common subroutines used for seting
	  up network interfaces
	o rc.d/hostname sets the hostname if not already set
	o rc.d/nisdomain sets the nis domain *after* rpcbind but
	  before the yp* daemons. This fixes issues with temporary
	  hangs when looking up informaion in nis before it's ready.
	o rc.d/netif brings network interfaces (minus dhcp)  up.
	o rc.d/network1 has been disabled and will be retired before
	  RELENG_5. It will be replaced by rc.d/netif

Approved by:	markm (mentor)
2003-04-18 17:51:54 +00:00
gshapiro
2c5f033673 The sendmail binary now has a reasonable default for MaxMimeHeaderLength
built in.  No need to set it here.

MFC after:	1 week
2003-04-18 01:25:41 +00:00
mtm
cdd9ff99e3 Fix typo (and make it more explicit/self-documenting).
Noticed by:	gshapiro
2003-04-16 16:44:00 +00:00
mtm
875fc4643f Add new knobs for controlling jails in rc.d and document them.
Approved by:	makrm (mentor)
2003-04-16 16:29:51 +00:00
mtm
21aff7c292 o Add a script to start jails on boot.
o Hook it up to the build

Approved by:	markm (mentor)
Submitted by:	Clement Laforet <sheepkiller@cultdeadsheep.org> (modified)
Prodded by:	mike
2003-04-16 16:27:23 +00:00
shiba
b1aaabebc1 Add NTT-ME SS-LAN CARD MN128. This card entry has been
committed into NEWCARD.
2003-04-10 17:16:01 +00:00
des
03a987e08d Introduce debug.log which gets debug.* (most of this would otherwise go
to the great bit-bucket in the sky)
2003-04-08 16:14:02 +00:00
yar
6dd591ce7c Stop logging ``authpriv'' messages to the world-readable file
/var/log/messages.  Such messages are for the eyes of authorized
personnel only.

PR:		conf/48170
Discussed in:	freebsd-security
MFC after:	2 weeks
2003-04-03 18:37:49 +00:00
ru
7d92e4785f Drop the silly notion that fd* entries have both a' and b'
partitions; this does nothing except upsetting disklabel(8).
2003-04-02 20:16:02 +00:00
ru
b6e2a1dccd Make disktab(5) MI (repo-copied from etc.i386/disktab). 2003-04-02 20:13:59 +00:00
jhb
699d82d7fc Remove 220.backup-distfile since it has been deleted.
Reported by:	mdodd
Pointy hat to:	jhb
2003-04-01 20:32:01 +00:00
jhb
4f51bb11c1 Complete removal of 320.rdist by removing its entry from periodic.conf and
removing the related 220.backup-distfile script and associatd periodic.conf
entry.

Discussed with:	obrien
2003-04-01 17:45:27 +00:00
mtm
c5a4cda504 Make the 'restart' command work. Otherwise, it would successfully
stop ipfw, but not enable it again.

Aesthetic changes
	o Use positve logic (instead of negative)
	o create a 'stop' function, rather than putting the
	  commands in the stop_cmd variable.

Submitted by:	des
Approved by:	markm (mentor) (implicit)
2003-03-30 15:52:18 +00:00
obrien
0c8ca48d87 320.rdist is OBE as we don't have rdist in the base system any more. 2003-03-29 03:28:28 +00:00
obrien
1a1209f873 This is OBE as we don't have rdist in the base system any longer. 2003-03-29 03:27:49 +00:00
sobomax
09dfc903cd Add pc-card from ARCHOS CD-224E cdrom.
MFC after:	1 week
2003-03-28 11:12:52 +00:00
trhodes
5ef2a20ee5 Update the handbook printing section URL so that it points to the
correct location.
2003-03-25 18:03:11 +00:00
gshapiro
a1a4db3471 Fix formatting (spaces -> tab)
MFC after:	1 week
2003-03-25 00:54:05 +00:00
ru
97be9a96e6 Directories for Russian manpages. 2003-03-24 09:39:09 +00:00
ume
7928fbf09d add missing `ipf -s'.
Submitted by:	Mark Huizer <xaa+freebsd@timewasters.nl>
2003-03-22 14:53:23 +00:00
cjc
95811eed28 Attach the kldxref script to the build/install. 2003-03-17 23:20:48 +00:00
cjc
c5ea907b7e A new rc-ng script to build linker.hints files with kldxref(8)
automatically at boot time. Associated rc.conf(5) knobs and
documentation are included.
2003-03-17 23:15:53 +00:00
dougb
ec4ba6b3ab Make it more clear how to disable keybell, and where its options are found.
PR:		conf/41772
2003-03-15 08:14:42 +00:00
ru
183c65a97c Use the canonical form of installing links.
Also, make "ftp" and "ftpd" hard links.

Not objected to by:	des
2003-03-14 09:01:22 +00:00
mux
6a7b9a7c64 Rework the wording of the comment for the security.bsd.see_other_uids
sysctl a bit.

Approved by:	jmallett
2003-03-13 18:43:50 +00:00
ru
bfe7fb29c7 Record the BOG death here too. 2003-03-12 14:29:15 +00:00
ru
26502dd8d8 No tabs here. 2003-03-11 11:14:34 +00:00
markm
ecc5f917a3 Initiate KerberosIV de-orbit burn. Disconnect the /etc configs. 2003-03-08 09:50:11 +00:00
sam
87f8be3c6a add ath to the list of Ethernet devices 2003-03-07 23:43:09 +00:00
peter
f9806b1803 Stop creating /usr/include/netns 2003-03-05 19:21:23 +00:00
ume
afad0cd7d1 Latest IPFilter requires flushing rules for IPv6 separately
from IPv4.
2003-03-05 17:16:22 +00:00
ru
b6a38ff592 Make sure the default install comes with /etc/login.conf hashed. 2003-03-03 11:19:18 +00:00
dougb
bd43cb6292 Don't try to deal with vi.recover if the directory doesn't exist
PR:		conf/24515
Submitted by:	Jeroen C. van Gelderen <jeroen@systemics.com>
2003-02-21 09:37:20 +00:00
mtm
ca2c24db40 We stopped reloading rc.conf for each script a long time ago. Things
shouldn't depend on that any more.

PR:		conf/48332
Approved by:	markm (mentor)(implicit)
2003-02-16 20:46:08 +00:00
des
2753d4cfa6 Alphabetize. 2003-02-16 13:07:20 +00:00
des
a9bd5d5fb8 Back out previous commit now that pam_opieaccess(8) has an allow_local
option.
2003-02-16 13:04:27 +00:00
des
a9b8975387 Add the allow_local option to all pam_opieaccess entries. 2003-02-16 13:02:39 +00:00
des
8c8f33d988 Add the want_agent option to the commented-out "session" pam_ssh entry. 2003-02-16 13:02:03 +00:00