Commit Graph

2900 Commits

Author SHA1 Message Date
brian
a61345d8ba Allow group network to read ppp.log & slip.log.
Suggested by: Jesper Skriver <jesper@FreeBSD.org>
2001-09-03 11:35:17 +00:00
rwatson
6bc0d20201 o Add sample syslogd_flags for "-ss" which causes syslogd not to bind
an inet socket.
2001-09-02 23:34:19 +00:00
rwatson
ce9df2e905 o Note that some sites will want to select generally more conservative
permissions on some files, and give hints as to what those permissions
  might be.  Note also that the current more liberal permissions might
  get changed in future revisions.
2001-09-01 21:00:28 +00:00
rwatson
1d2c96389f o More conservative permissions for kerberos.log: 600 instead of 644.
Reviewed by:	peter
2001-08-31 23:44:51 +00:00
murray
600b1b8161 Add an entry for the Zip 250.
PR:		i386/29639
Submitted by:	David Yeske <dyeske@yahoo.com>
2001-08-31 22:49:22 +00:00
murray
d827149279 Add entries for 3wire terminals. (carrier not supplied, so we set nc).
PR:		conf/26420
Submitted by:	Jon Passki <cykyc@yahoo.com>
2001-08-31 22:18:50 +00:00
dd
0f26dbe467 Make the 'echo' output for blanktime and scrnmap consistent with their
variable names.  There were minor differences in both cases, which were
needlessly confusing and inconsistent.
2001-08-31 15:29:24 +00:00
alex
1b28c0b357 Move /etc/defaults/make.conf to /usr/share/examples/etc/make.conf as
discussed on the arch@ mailinglist (after repo-copy).

sys.mk will .error if it finds /etc/defaults/make.conf but include
it anyways (this is the same behaviour as with the make.conf.local
removal).

/usr/share/examples/etc/make.conf has BDEFLAGS commented out now,
since it's only an example file.

Adjust all textes that talk about make.conf or defaults/make.conf to
match the new situation.
2001-08-30 22:44:51 +00:00
alex
e0090eb646 chown syntax is user:group now. 2001-08-29 19:59:30 +00:00
alex
b34df7a25d RIP all ports options, as discussed on arch@. 2001-08-29 19:38:17 +00:00
obrien
c0a1315089 Remove more vestages of diskcheckd, which is now in ports/sysutils. 2001-08-29 05:39:07 +00:00
brian
c5e4238213 Remove diskcheckd.conf 2001-08-29 04:03:41 +00:00
obrien
d350edf744 Remove `diskcheckd'. It is now in ports/sysutils.
Consensus on:	freebsd-current.
2001-08-28 23:00:28 +00:00
markm
6aa19e79d5 Tidy, reorder and adjust to more correctly reflect FreeBSD default
policy.
2001-08-26 18:15:32 +00:00
dd
8af6c88ac6 End sentence with a period. 2001-08-26 02:37:22 +00:00
dd
3700e53927 $units is the canonical name for the number of units to create; use it.
PR:		29971
Submitted by:	Joseph Mallett <jmallett@xMach.org>
2001-08-23 22:19:53 +00:00
kuriyama
40c6311b53 Invoke named with privilege of bind:bind.
Change pidfile location to /var/run/named/pid.
2001-08-23 13:34:45 +00:00
ume
f0f29f2dc3 fix typo. icmptype of destination unreach is not 2 but 1.
Submitted by:	kuriyama
2001-08-21 15:05:09 +00:00
mjacob
e6e6a6f268 move forward the ability to MAKEDEV zs devices for TurboLaser 2001-08-21 00:03:28 +00:00
markm
540c23ed8a More libss removal. 2001-08-20 12:39:23 +00:00
dwmalone
4449dfd727 Clear up what the line "ALL : PARANOID : RFC931 20 : deny" means
to tcp wrappers. The description is a little long, but hopefully
accurate.
2001-08-18 14:22:52 +00:00
obrien
cd3f3aab8e Add the `WANT_FORCE_OPTIMIZATION_DOWNGRADE' knob. If set to an integer
value, it forces GCC to not optimize above this level.  For intance, GCC
made with "WANT_FORCE_OPTIMIZATION_DOWNGRADE=1" is a good setting for the
Alpha platform when building ports.
2001-08-16 06:05:18 +00:00
markm
93fede9c0e Add no_warn option to the "auth" lines. Minor tidy-up as well. 2001-08-15 20:12:27 +00:00
ache
d4b6d6094b Reflect main termcap v1.109 2001-08-15 03:27:52 +00:00
ache
95805d7298 Add commented out example 2001-08-14 23:51:58 +00:00
ache
21085f99c8 Add/install /etc/opieaccess skeleton
Approved by:	markm
2001-08-14 23:38:31 +00:00
dd
9b57f556f5 Sync the code that sucks in rc.conf and friends with what's in
rc.firewall6.  Specifically, don't do anything
if [ -z ${source_rc_confs_defined} ].  Not doing this leads to a problem
with dependencies: chkdepend will set, e.g., portmap_enable to YES if
some service that needs portmap is enabled, but rc.network sources
rc.firewall, which used to source defaults/rc.conf unconditionally,
which would result in portmap_enable being set back to NO.

PR:		29631
Submitted by:	OGAWA Takaya <t-ogawa@triaez.kaisei.org>
2001-08-14 05:50:19 +00:00
markm
8d004b8b0d Remove the WANT_INSECURE_OPIE option - it is now a default. This is not
nearly as ominous as it sounds, and it allows OPIE to be used over SSH
and on xterms.

Requested by:	ache
Discussed on:	-security
2001-08-12 18:47:56 +00:00
knu
b4724cab6a Chagne MASTER_SITE_FREEBSD to MASTER_SITE_FREEBSD_ORG, because
MASTER_SITE_FREEBSD is already used in bsd.port.mk for some different
purpose.
2001-08-12 17:22:41 +00:00
knu
9d3276fb16 Fix MASTER_SITE_RUBY. The listed master site is obsolete. 2001-08-12 17:09:19 +00:00
knu
d0d3a84d17 Add MASTER_SITE_FREEBSD. 2001-08-12 16:32:05 +00:00
schweikh
00e7d7eeea Add sgi_fam 391002, file alteration monitor.
PR:		25925
Submitted by:	Jeremy Norris <ishmael27@home.com>
MFC after:	5 weeks
2001-08-11 09:43:04 +00:00
obrien
95984597fc Fix minor typo. 2001-08-09 15:36:03 +00:00
nsayer
05ee1190e8 Now properly use logger's facility argument 2001-08-06 15:52:42 +00:00
nsayer
6fc2477fa2 Make the sample entries actually syntactically correct. :-/ 2001-08-05 20:26:03 +00:00
nsayer
709261dffa Add a little pizzaz to the sample entries. :-) 2001-08-05 16:00:40 +00:00
nsayer
a5eb642abc Add some sample entries to illustrate battery state monitoring. 2001-08-05 15:45:21 +00:00
dwmalone
e53e61c1f3 Remove duplicate ufsd entry. This seems to go back to the Sun's version
of the file.

PR:		29386
Submitted by:	Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
2001-08-02 12:55:37 +00:00
rwatson
4f9a35a47b Default to disabling all inetd.conf entries, in particular, telnetd
and ftpd.  This more conservative default reduces the exposure of
freshly installed machines, which is especially valuable for machines
that receive minimal further configuration before being put into
production.  Generally speaking, SSH has superseded the use of both
telnet and ftp in many environments.  In light of recent remotely
exploitable security holes in both telnetd and ftpd, this choice
retains flexibility (both telnetd and ftpd daemons remain installed
and easily enableable) while protecting users who don't need the
additional risk.  This change brings our configuration into line with
the majority of other UNIX vendors, including OpenBSD and NetBSD.

To address the concerns of those requiring remote access via telnet
from first install, changes will shortly be committed to sysinstall
to provide the ability to edit inetd.conf during the installation
process, allowing telnetd and ftp to be re-enabled during the
installation process.

While I'm at it, slightly improve commenting for inetd.conf so that
it's more clear to users how to enable and disable services.
Further commenting to indicate the functions of various columns would
probably also be useful.

Reviewed by:	imp, chris, jake, nate, -arch, -stable
2001-08-02 02:19:56 +00:00
dougb
e967b3ddc0 Scratch an itch of long standing by adding entries for the most
commonly used x11 ports
2001-08-01 20:13:49 +00:00
dougb
24d7d07293 I could have sworn I did this already, but obviously I didn't. So,
take another stab at updating the IANA web page.
2001-08-01 19:48:12 +00:00
gshapiro
46051bb094 Revert change to always include _FFR_TLS_O_T as it requires FEATURE(access_db)
Problem found by:	nsayer
2001-08-01 02:12:39 +00:00
darrenr
a1ee75086a Merge in patch to automagically decide whether or not a kldload of ipfilter
is required into rc.network.

Person failed to use a real name so both email addresses from PR included
(Sent was different to From).

PR:		22998
Submitted by:	dl@leo.org/spock@empire.trek.org
2001-07-30 23:12:02 +00:00
dougb
4b62071a69 Add an entry for the commonly used (although unofficial) kpop port.
PR:		conf/21551
Submitted by:	Luis Casillas <casillas@stanford.edu>
Reviewed by:	rwatson
2001-07-30 17:53:55 +00:00
obrien
067463e262 Document Bzip2's flag.
PR:		27901
Submitted by:	Anders Nordby <anders@fix.no> (stylistic changes by me)
2001-07-30 15:18:15 +00:00
dougb
cb4c26dec8 Add a note about port 98 commonly being used for RH linuxconf,
(unofficially of course).

PR:		misc/21775
Submitted by:	Dann Lunsford <dann@greycat.com>
2001-07-30 06:19:27 +00:00
markm
493eaebc7e Build standard directory for kerberos 5 (Heimdal) database. 2001-07-28 20:00:54 +00:00
markm
22aa258b31 Upgraded launchpad for kerberos. Noe kerberos IV OR kerberos 5
may be started at boot for kerberos servers.
2001-07-28 19:57:57 +00:00
peter
600c4d9871 Take -Wconversion out of BDECFLAGS. It is not particularly useful for
us anyway because it doesn't work right on the x86 and alpha.  On
K&R code, small ints would be promoted to int.  ANSI-C doesn't require
this and the small ints can be passed taking 8 or 16 bits of stack
space.  However, the x86 abi that we use *does* promote to 32 bit,
and the alpha ABI passes them in 64 bit registers so we dont have
that aspect of the problem here.  Losing float precision by having it
cast down to int because the funtion prototype specifies int is the
least of our problems.  -Wmissing-prototypes helps here anyway.
2001-07-27 16:23:53 +00:00
dd
220f54a23a Be consistent about how we quote commands that could be entered by the
user.
2001-07-27 12:25:55 +00:00