Commit Graph

4276 Commits

Author SHA1 Message Date
maxim
caa0680e7f MFC rev. 1.10: postpone a temporary file creation until we realize
if ipfw(4) ever used.

Approved by:	re (scottl)
2005-09-13 14:34:11 +00:00
grehan
f3c7dd1f4a MFC 1.3
Comment out ofw_console 'screen' entry and zs tty entries.
   The OpenFirmware console isn't used on real systems anymore and
   I never get to multi-user mode in psim. There are problems with
   zs that need to be resolved before these lines can be enabled.

   This eliminates disconcerting warnings on boot.

Approved by:	re (Ken Smith)
2005-09-13 05:59:07 +00:00
brooks
82ed9e72d5 Sync network interface startup code with HEAD.
etc/network.subr: 1.165-1.167
 - kill removable_interfaces
 - add NOAUTO keyword
 - fix quoted entries in ifconfig_<ifn> variables
 - always up the interface
 - if ifconfig_<ifn> is defined, but empty, don't set it to
   ifconfig_DEFAULT
 - always configure lo0 first if it exists
etc/pccard_ether: 1.46
 - kill removable_interfaces
 - add NOAUTO keyword
etc/rc.d/netif: 1.15-1.17
 - block Ctrl-C in dhclient
 - minor cleanup of the interface list generation code

Approved by:	re (scottl)
Requested by:	many (death to removable_interfaces!)
2005-09-10 17:05:04 +00:00
brooks
81090ac359 MFC 1.43 and 1.44:
- Add new template sources to keep /conf more organized.

Approved by:	re (scottl)
2005-09-10 17:02:45 +00:00
dougb
c7730280f9 MFC 1.22 which removes the IP6.INT example per RFC 4159
Approved by:	re (scottl)
2005-09-10 08:27:27 +00:00
sam
7a8285331c MFC 1.28: use media type to recognize eth+802.11 network interfaces
instead of doing a regex on device names

Approved by:	re (scottl)
2005-09-03 22:49:22 +00:00
glebius
dce99e7faa MFC 1.8, 1.9:
- Correctly parse output, when logging amount is limited in the
    rule itself, not in verbose_limit sysctl. [1]
  - Do check rules, even if verbose_limit is set 0. Rules may have
    their own log limits.

  PR:		conf/77929
  Submitted by:	Andriy Gapon [1]
  Reviewed by:	matteo

Approved by:	re (scottl)
2005-09-02 14:13:16 +00:00
gshapiro
6cfeae252f MFC: Be sure to execute sendmail_precmd() to check sendmail.cf conflicts and
rebuild the aliases file if necessary.

     Revision  Changes    Path
     1.15      +1 -0      src/etc/rc.d/sendmail

Approved by:	re (scottl)
2005-09-02 03:53:10 +00:00
imp
17f752a69c MFC: Allow one to override {CAP,PWD}_MKDB_ENDIAN from the command line.
Approved by: re@ (scottl)
2005-09-01 01:24:42 +00:00
yar
e98eb9d1e5 MFC defaults/rc.conf#1.259, rc.subr#1.37:
Stop hard-coding an -M flag to mdmfs(8) in /etc/rc.subr.
  Now this flag can be set, or not set, for memory-backed
  file systems on individual basis, as illustrated by the
  rc.conf(5) variables tmpmfs_flags and varmfs_flags.  The
  flag is set for those FS'en by default, in /etc/defaults/rc.conf,
  in order to stay compatible with the old rc.subr behaviour.

Approved by:	re (scottl)
2005-08-28 09:08:05 +00:00
cperciva
c9564c8fd4 MFC: When looking for new lines in diff output, grep for '^[>+]'
instead of '^>', in order to catch both normal and unified diffs.

Approved by:	re (scottl)
2005-08-25 19:07:28 +00:00
pjd
c46b3075d6 MFC: share/man/man5/rc.conf.5 1.258,1.259,1.260
etc/defaults/rc.conf		1.255,1.256,1.257

- Remove gbde_swap_enable variable (it has no effect).
- Add geli_swap_flags variable which holds flags used by geli(8) when
  configuring GELI-encrypted swap partitions.
- Add variables used by rc.d/geli and rc.d/geli2 scripts.

Approved by:	re (kensmith)
2005-08-16 09:30:13 +00:00
pjd
df87555c46 MFC: etc/rc.d/Makefile 1.54,1.55
- Disconnect gbde_swap from the build.
- Connect encswap, geli and geli2 to the build.

Approved by:	re (kensmith)
2005-08-16 09:23:45 +00:00
pjd
65039f9b63 MFC: etc/rc.subr 1.36
Add a function which creates list of devices for GELI-encryption.

Approved by:	re (kensmith)
2005-08-16 09:06:42 +00:00
pjd
e2d3543699 MFC: Remove gbde_swap script and introduce encswap script, which knows how to
encrypt swap partitions using both: gbde and geli.

Approved by:	re (kensmith)
2005-08-16 09:04:55 +00:00
pjd
0bd357e9d3 MFC: etc/rc.d/jail 1.25
Skip jails which are already running and inform why.
We're checking for /var/run/jail_<name>.id file and if it exists, we don't
start the jail. It should be also safe in case of reboot(8), because
rc.d/cleanvar script is going to remove /var/run/jail_* files.

It helps to avoid potential mess when the same jail is started twice,
because of an administrator mistake (been there, done that).

Approved by:	re (kensmith)
2005-08-16 08:43:06 +00:00
pjd
773b4d816d MFC: rc.d/cleanvar 1.10
Skip 'logpriv' socket when cleaning /var/.

Approved by:	re (kensmith)
2005-08-16 08:41:30 +00:00
pjd
d2afcc9cb9 MFC: rc.d/gbde 1.13
rc.subr		1.35

Move 'local_tr' function to rc.subr and change its name to 'ltr'.

Approved by:	re (kensmith)
2005-08-16 08:39:36 +00:00
cperciva
963a18e0a9 MFC addition of portsnap to the base system plus subsequent enhancements
and bug fixes.

Approved by:	re (kensmith)
2005-08-15 20:24:08 +00:00
cvs2svn
aa9ad453cc This commit was manufactured by cvs2svn to create branch 'RELENG_6'. 2005-08-15 17:07:38 +00:00
pjd
a996384698 MFC: rc.d/jail 1.24
Allow to give more than one jail's name, eg.:

	# /etc/rc.d/jail start www mail

Approved by:	re (kensmith)
2005-08-10 14:30:05 +00:00
pjd
ce534181e2 MFC: Connect GEOM_ELI class to the build.
Sponsored by:	Wheel Sp. z o.o.
		http://www.wheel.pl
Approved by:	re (kensmith)
2005-08-05 20:02:46 +00:00
brooks
7b1f88bc8a Sync dhclient with HEAD:
- Don't complain when debouncing dhclient startup.
 - Fix buffer handling in reveive_packet().  This fixes infinite cpu
   eating loops and probably some crashes.
 - Spell if_defaultroute route correctly in dhclient-script so we
   are allowed to change the default route.
 - Document dhclient -b.
 - Treat reassociation like association.
 - Do not force server-name to be a valid domain name.
 - Handle servers that send NUL-terminated host-name options.

Approved by:	re (scottl)
2005-07-29 23:36:28 +00:00
grehan
d1f6ac895f MFC: r1.22
Remove obsolete ttya/ttyb entries and replace with ttyy0/1.
Mark origin of ofw_console(4) and zs(4) devices.

Approved by:	re (Ken Smith)
2005-07-18 12:06:38 +00:00
cvs2svn
dd2adf2c10 This commit was manufactured by cvs2svn to create branch 'RELENG_6'. 2005-07-11 04:14:43 +00:00
jkim
08e6ec1ce1 `net.inet.ipf.fr_running' can be a negative value, which was introduced by
recent ipfilter import.

Approved by:	re (scottl), anholt (mentor)
2005-07-07 05:59:44 +00:00
brooks
680c0ca6d1 Remove REQUIRE and BEFORE lines since this script is not run by rcorder
at startup.  Instead it is called by other scripts.

Approved by:	re (network interface startup blanket)
2005-06-30 17:50:34 +00:00
brooks
c724d1075b - Remove the pccard_ifconfig variable in favor of a new
ifconfig_DEFAULT variable.  Unlike pccard_ifconfig, ifconfig_DEFAULT
   applies to all interfaces that do not specify an ifconfig_<ifn>
   variable rather than just those listed in removable_interfaces.
 - Correct the list of interfaces when network_interfaces and
   removable_interfaces are both set by including removable_interfaces
   in the list of canidates.
 - When listing dhcp interfaces, include those with other ifconfig
   options so nat works.

Approved by:	re (network interface startup blanket)
2005-06-30 05:02:34 +00:00
brooks
17407ba288 Add support for starting wpa_supplicant by adding the WPA keyword to an
interface's ifconfig_<ifn> entry in /etc/rc.conf.

Approved by:	re (network interface startup blanket)
2005-06-30 04:52:47 +00:00
brooks
da81e8c0fc When interfaces are given on the command line, don't attempt to filter
them.  Just try to run the given command on them.  We need to be able to
run stop functions on interfaces that have been deleted to stop
wpa_supplicant.

Approved by:	re (interface startup blanket)
2005-06-30 04:46:21 +00:00
pjd
573c1a1020 Introduce new per-jail variable jail_<name>_flags, which allows to specify
jail(8) flags (before the change we had hardcoded "-l -U root").

Submitted by:	Frank Behrens <frank@pinky.sax.de>
PR:		conf/80244
Approved by:	re (scottl)
MFC after:	1 week
2005-06-26 16:30:20 +00:00
dd
570bbf677f Unbreak the ipfilter_loaded function. There doesn't seem to be a way
for kldstat to ever print "IP Filter" (the module is called "ipfilter"
and modules don't have anything like a description), so this function
would always return false. That would cause prestart to attempt to
load the module even if it's already loaded, which would fail and
prevent the rules from being loaded.

Approved by:	re (dwhite)
2005-06-21 09:39:09 +00:00
brooks
b4f8c168e5 Make sure we actually read the config files before testing values from
them.

Reported by:	Darren Pilgrim <dmp at bitfreak dot org>
PR:		conf/82313
Approved by:	re (network interface startup blanket)
2005-06-16 18:08:04 +00:00
lesi
dd07f0a552 Move couple of directories out of mtree and into their respective
ports. This mtree now specifies basic structure of X11BASE, similarly
to BSD.local.dist.

No objections on: freebsd-x11@
Approved by:	re (dwhite), portmgr
2005-06-15 02:27:41 +00:00
gshapiro
c1f0877e6f Use new OSTYPE(freebsd6).
Approved by:	re (scottl)
Requested by:	keramida
2005-06-14 02:25:17 +00:00
marius
843acabcc3 - In preparation to turning syscons(4) etc. on by default in the sparc64
GENERIC comment in ttyN.
- Add the name of the device driver creating the device nodes above the
  respectives blocks so it's easier for user to find the right entry to
  shut up warnings from getty(8). Replace 'Requires device 'uart' be
  enabled.' with just 'uart(4)' as the former referred to a sparc64
  GENERIC back when uart(4) wasn't enabled by default, yet.
- Turn off the getty(8) on screen as screen is created by ofw_console(4)
  which is no longer enabled in the sparc64 GENERIC (and also only is a
  last resort) to shut up warnings from getty(8) with the current GENERIC.
2005-06-10 23:06:14 +00:00
nectar
a23214e059 Remove rexecd(8), a server that implements a particularly insecure
method of executing commands remotely.  There are no rexec clients in
the FreeBSD tree, and the client function rexec(3) is present only in
libcompat.  It has been documented as "obsolete" since 4.3BSD, and its
use has been discouraged in the man page for over 10 years.
2005-06-10 20:52:36 +00:00
ache
d2308ab790 Back out "rw" locale addition for reason unknown to me (forced by portmgr) 2005-06-10 20:14:38 +00:00
ache
957be7650c Add locale/rw 2005-06-10 11:24:30 +00:00
jkoshy
1d3209ab83 MFP4:
- Implement sampling modes and logging support in hwpmc(4).

- Separate MI and MD parts of hwpmc(4) and allow sharing of
  PMC implementations across different architectures.
  Add support for P4 (EMT64) style PMCs to the amd64 code.

- New pmcstat(8) options: -E (exit time counts) -W (counts
  every context switch), -R (print log file).

- pmc(3) API changes, improve our ability to keep ABI compatibility
  in the future.  Add more 'alias' names for commonly used events.

- bug fixes & documentation.
2005-06-09 19:45:09 +00:00
brooks
70938bdd39 Remove default and documenation for pccard_ether_delay since I removed
it from /etc/pccard_ether.

Submitted by:	Jeremie Le Hen <jeremie at le-hen dot org>
2005-06-08 00:05:58 +00:00
brooks
dc7f878d88 Fix return values of ifconfig_up/down.
Reported by:	Andrea Campi
2005-06-07 23:59:45 +00:00
des
5f1929e7d4 Change the default for dumpdev to "AUTO". It should be reverted to "NO"
on RELENG_* branches.
2005-06-07 15:22:08 +00:00
des
f7c1b7b972 Honor the "dumpdev" kenv variable if it is set and the "dumpdev" rc
variable is set to "AUTO".

MFC after:	2 weeks
2005-06-07 15:20:10 +00:00
brooks
5a3d620fb1 Support code for the OpenBSD dhclient. This significantly changes the
way interfaces are configured.  Some key points:

  - At startup, all interfaces are configured through /etc/rc.d/netif.
  - ifconfig_<if> variables my now mix real ifconfig commands the with
    DHCP and WPA directives.  For example, this allows media
    configuration prior to running dhclient.
  - /etc/rc.d/dhclient is not run at startup except by netif to start
    dhclient on specific interfaces.
  - /etc/pccard_ether calls "/etc/rc.d/netif start <if>" to do most of
    it's work.
  - /etc/pccard_ether no longer takes additional arguments to pass to
    ifconfig.  Instead, ifconfig_<if> variables are now honored in favor
    of pccard_ifconfig when available.
  - /etc/pccard_ether will only run on interfaces specified in
    removable_interfaces, even if pccard_ifconfig is set.
2005-06-07 04:49:12 +00:00
maxim
d1e4c87cf9 Finish adding _dhcp user. 2005-06-07 03:41:20 +00:00
brooks
c05aa0dd93 Add _dhcp user/group as required by the OpenBSD dhclient. 2005-06-06 20:19:56 +00:00
obrien
3747899cae Remove RCng files that were brought in from NetBSD, but we ended up not
using them (or did and no longer do).
2005-06-06 02:51:26 +00:00
marius
a5dfc9120a Add esp(4) to scsi-controller-regex.
MFC after:	1 month
2005-06-04 21:05:37 +00:00
rwatson
06d01f1fcd Add /etc/security, into which the BSM audit configuration files will be
installed.  This is the same directory as found on Solaris.

NB: In FreeBSD 4.x and earlier, a script (file) named /etc/security
exists.  Does mergemaster need to be taught how to replace a file with
a directory?

Submitted by:	wsalamon
Obtained from:	TrustedBSD Project
2005-05-30 20:51:13 +00:00