Xin LI b2c730e011 Tighten default restrictions for ntpd(8) server and provide a link ...

to NTP access restriction documentation.

The new default restrictions would allow only time queries from a
remote system and will KoD all other requests, but still allow
localhost to do make all requests.

These restrictions are also recommended for all Internet-facing
public NTP servers.

This changeset is intended for an instant MFC to stable/10 and
releng/10.0.

2013-12-27 23:06:15 +00:00

..

bluetooth

…

casper

Please welcome casperd daemon. It (and its services) will be responsible for

2013-12-02 08:21:28 +00:00

defaults

Make the world a bit more secure place (hopefully) and turn the casperd on

2013-12-19 00:53:11 +00:00

devd

Regen.

2013-12-27 08:06:23 +00:00

etc.amd64

Remove unneeded mappings from libmap32.conf. Move it up one level and

2013-09-09 06:02:30 +00:00

etc.arm

…

etc.i386

…

etc.ia64

…

etc.mips

…

etc.pc98

…

etc.powerpc

…

etc.sparc64

…

gss

…

mail

…

mtree

Migrate tools/regression/bin/ tests to the new layout.

2013-12-11 04:09:17 +00:00

pam.d

…

periodic

Remove remnants of BIND from /etc, since there is no BIND in base now.

2013-11-05 09:30:06 +00:00

pkg

Enabled should be a boolean, not a string

2013-11-16 15:54:46 +00:00

ppp

…

rc.d

Honor WITHOUT_CASPER.

2013-12-21 15:02:47 +00:00

root

…

sendmail

Enable the automatic creation of a certificate (if one does not exists)

2013-10-19 18:51:06 +00:00

amd.map

…

apmd.conf

…

crontab

…

csh.cshrc

…

csh.login

…

csh.logout

…

ddb.conf

…

devd.conf

…

devfs.conf

…

dhclient.conf

…

disktab

…

fbtab

…

freebsd-update.conf

Remove remnants of BIND from /etc, since there is no BIND in base now.

2013-11-05 09:30:06 +00:00

ftpusers

Remove most of the ATF tools and the _atf user.

2013-10-12 06:06:53 +00:00

gettytab

Add an autologin entry for the console.

2013-12-03 04:13:55 +00:00

group

Remove most of the ATF tools and the _atf user.

2013-10-12 06:06:53 +00:00

hosts

…

hosts.allow

…

hosts.equiv

…

hosts.lpd

…

inetd.conf

…

libalias.conf

…

libmap32.conf

Remove unneeded mappings from libmap32.conf. Move it up one level and

2013-09-09 06:02:30 +00:00

libmap.conf

…

login.access

…

login.conf

Add a resource limit for the total number of kqueues available to the

2013-10-21 16:46:12 +00:00

mac.conf

…

Makefile

Please welcome casperd daemon. It (and its services) will be responsible for

2013-12-02 08:21:28 +00:00

man.alias

…

master.passwd

Remove most of the ATF tools and the _atf user.

2013-10-12 06:06:53 +00:00

minfree

…

motd

…

netconfig

…

netstart

Start rtsold if necessary.

2013-10-22 06:53:01 +00:00

network.subr

Revert r257715. This breaks the case where devd isn't running. The

2013-11-12 18:59:23 +00:00

networks

…

newsyslog.conf

…

nls.alias

…

nscd.conf

…

nsmb.conf

…

nsswitch.conf

…

ntp.conf

Tighten default restrictions for ntpd(8) server and provide a link

2013-12-27 23:06:15 +00:00

opieaccess

…

pccard_ether

…

pf.os

Add DragonFly BSD fingerprints to pf.os

2013-12-03 04:32:02 +00:00

phones

…

portsnap.conf

Now that the portsnap buildbox is generating the raw bits for INDEX-10,

2013-09-26 10:33:15 +00:00

printcap

…

profile

…

protocols

…

rc

The rc system aggressively caches the contents of /etc/rc.conf in order to

2013-12-03 21:55:57 +00:00

rc.bsdextended

…

rc.firewall

…

rc.initdiskless

…

rc.resume

…

rc.sendmail

…

rc.shutdown

…

rc.subr

- Update rc.d/jail to use a jail(8) configuration file instead of

2013-10-10 09:32:27 +00:00

rc.suspend

…

regdomain.xml

…

remote

…

rpc

…

services

Add Veritas NetBackup

2013-12-03 04:03:19 +00:00

shells

…

snmpd.config

…

sysctl.conf

…

syslog.conf

sbin/devd/devd.cc

2013-12-13 22:58:57 +00:00

termcap.small

…