d/freebsd-skq
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
b3470f8c82
freebsd-skq/etc
History
Yaroslav Tykhiy b3470f8c82 Record dependency on the newly introduced pfsync. 
Start before routing for better system protection.
(pf used to start late during system boot, after
many a network daemon have started already, which
sucked from security POV.)

Remark: For maximum security, pf should start before
netif, but it would create a dependency loop because
pfsync has to start after netif, yet before pf.

Discussed with: mlaier on -pf
MFC after:	5 days
2005-10-02 19:12:42 +00:00
..
bluetooth Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
defaults Add an rc.d script to start pfsync at the right moment of the 2005-10-02 18:59:02 +00:00
etc.alpha Add dumb console driver and related bits. 2003-10-24 15:44:10 +00:00
etc.amd64 Add dumb console driver and related bits. 2003-10-24 15:44:10 +00:00
etc.arm Add ttyu0 as a serial console, as we're using the uart(4) driver on arm. 2004-09-24 12:51:15 +00:00
etc.i386 Add dumb console driver and related bits. 2003-10-24 15:44:10 +00:00
etc.ia64 turn off getty(8) on ttyv[0-7]. We don't support syscons on ia64 and 2004-10-17 22:20:39 +00:00
etc.powerpc Comment out ofw_console 'screen' entry and zs tty entries. 2005-09-10 22:46:03 +00:00
etc.sparc64 - In preparation to turning syscons(4) etc. on by default in the sparc64 2005-06-10 23:06:14 +00:00
isdn Start the dreaded NOFOO -> NO_FOO conversion. 2004-12-21 08:47:35 +00:00
mail Finish adding _dhcp user. 2005-06-07 03:41:20 +00:00
mtree Add portsnap to the base system. This is a secure, easy to use, 2005-08-08 20:10:06 +00:00
namedb In accordance with my intentions announced (and not objected to) 2005-09-05 13:42:22 +00:00
pam.d Remove rexecd(8), a server that implements a particularly insecure 2005-06-10 20:52:36 +00:00
periodic A new version of rev. 1.4: postpone a temporary file creation 2005-09-11 14:29:58 +00:00
ppp Catch up with PHK's sio(4) cuaa->cuad rework [sys/dev/sio/sio.c rev. 1.456]. 2004-11-19 17:12:56 +00:00
rc.d Record dependency on the newly introduced pfsync. 2005-10-02 19:12:42 +00:00
root - Use absolute path for hostname(1) 2004-04-01 19:28:00 +00:00
sendmail Use new OSTYPE(freebsd6). 2005-06-14 02:25:17 +00:00
amd.map
apmd.conf Use separate events for resume from standby and suspend in the apm(4) 2003-12-30 17:40:28 +00:00
auth.conf auth.conf seems to be being gradually subsumed by user classes 2003-07-28 02:28:51 +00:00
crontab Clarify adjkerntz(8) note and use complete sentences in comments. 2002-11-22 16:13:39 +00:00
csh.cshrc
csh.login Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
csh.logout
devd.conf eliminate the regex used to match ethernet and 802.11 devices; 2005-08-02 18:28:31 +00:00
devfs.conf Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
dhclient.conf
disktab Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
fbtab
ftpusers Finish adding _dhcp user. 2005-06-07 03:41:20 +00:00
gettytab Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
group Add _dhcp user/group as required by the OpenBSD dhclient. 2005-06-06 20:19:56 +00:00
hosts Re-add information for applying for IP space from a registry since that 2003-01-28 21:29:23 +00:00
hosts.allow Use RFC 3849 address for examples. 2004-08-03 08:58:34 +00:00
hosts.equiv
hosts.lpd
inetd.conf Remove rexecd(8), a server that implements a particularly insecure 2005-06-10 20:52:36 +00:00
login.access Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
login.conf Add a short description of how a literal colon ':' can be inlined in the 2005-08-31 15:02:11 +00:00
mac.conf Add "socket" type to the list of default object types, and by 2003-11-15 02:08:01 +00:00
Makefile Allow one to override the endian flags for make distribution. This 2005-08-26 18:54:06 +00:00
man.alias
master.passwd Add _dhcp user/group as required by the OpenBSD dhclient. 2005-06-06 20:19:56 +00:00
minfree
motd s/man page/manual page/, to make the default announcement 2003-07-03 06:06:09 +00:00
netconfig Change the name for the local unix-socket based protocol 2002-12-16 22:24:26 +00:00
netstart netstart is now obsoleted by /etc/rc.d/*, not by /etc/rc.network. 2005-03-26 20:10:24 +00:00
network.subr - Alwasy explicitly bring the interface up before configuring it. 2005-09-02 17:11:13 +00:00
networks
newsyslog.conf - Update etc/rc.d/newsyslog to FreeBSD standards and install it. 2005-03-02 00:40:55 +00:00
nls.alias Old-promised removing of deprecated locale names 2003-06-10 01:22:30 +00:00
nsmb.conf
opieaccess Back out previous commit now that pam_opieaccess(8) has an allow_local 2003-02-16 13:04:27 +00:00
pccard_ether Be less IPv4 centric. When checking if the interface is already 2005-09-28 19:59:18 +00:00
pf.conf Bring in some examples (and create space for future work here): 2004-09-14 01:07:19 +00:00
pf.os Update the passive OS fingerprint database from OpenBSD. 2004-09-14 00:30:14 +00:00
phones
portsnap.conf Teach portsnap how to ignore unwanted parts of the ports tree. A line 2005-09-06 19:28:37 +00:00
printcap Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
profile Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
protocols Add CARP (Common Address Redundancy Protocol), which allows multiple 2005-02-22 13:04:05 +00:00
rc To allow /etc to be as minimal as possible in a diskless setup, we need 2005-04-29 23:02:56 +00:00
rc.bsdextended Give users the ability to load a mac_bsdextended(4) ruleset on boot (defaults 2004-09-29 00:12:28 +00:00
rc.firewall DNS should not necessarily be named(8), tweak the comment a bit. 2003-11-02 07:31:44 +00:00
rc.firewall6 Use RFC 3849 address for examples. 2004-08-03 08:58:34 +00:00
rc.initdiskless Use sysctl -q when querying for kern.bootp_cookie in order to avoid 2005-09-15 16:09:28 +00:00
rc.resume Fix a usage message. 2003-12-30 17:30:39 +00:00
rc.sendmail Before trying to restart/stop the MTA or MSP queue runner, make sure 2003-10-19 00:31:50 +00:00
rc.shutdown Improve the RC framework for the clean booting/shutdown of Jails: 2004-12-14 14:36:35 +00:00
rc.subr Fix the usage of rc_usage. The rc_usage function takes 2005-10-01 20:58:03 +00:00
rc.suspend Make sure pid file creation doesn't complain if it can't create the file. 2004-01-21 03:03:40 +00:00
remote Reflect sio driver device name change cuaa -> cuad 2004-10-13 08:32:34 +00:00
rpc Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
services Add 3653/tcp and 3653/udp, since they were specifically requested. 2004-08-16 11:52:22 +00:00
shells
snmpd.config Add startup script and default configuration file for bsnmpd. 2005-04-17 10:47:58 +00:00
sysctl.conf Rework the wording of the comment for the security.bsd.see_other_uids 2003-03-13 18:43:50 +00:00
syslog.conf Fix a terrible braino in last commit. Put kern.debug back to /var/log/messages 2005-03-12 12:31:16 +00:00
termcap.small Removed whitespace at BOF, EOL & EOF. 2004-06-06 11:46:29 +00:00
usbd.conf Move the purely device-name based entries for mice and ethernet 2004-11-28 23:16:00 +00:00