| Age | Commit message (Collapse) | Author | |
|---|---|---|---|
| 2017-02-02 | Use a single chown user:group instead of separate chown and chgrp. | Robert Peichaer | |
| OK tb@ | |||
| 2017-01-25 | +arm64 | Patrick Wildt | |
| 2017-01-23 | Interpolate a 'make cleandir' if KEEPKERNELS is set to a non-empty string, | Theo Buehler | |
| right before building kernels. This should unbreak 'make release' for people having this setting. ok deraadt | |||
| 2016-11-20 | Fix up some permissions in RELEASEDIR and /var/sysmerge. | Theo Buehler | |
| help, testing & ok rpe | |||
| 2016-11-19 | Enable builds with a dedicated user that cannot elevate privileges or write | Theo Buehler | |
| to /usr/src or /usr/xenocara. Change /usr/{,x}obj to owner build:wobj with mode 770 and install the systemwide makefiles before starting a build. The root of the noperm fs containing DESTDIR should also be owned by build:wobj. Developers will need to add their users to group wobj to be able to write to /usr/{,x}obj/. "push forward" deraadt; testing, input & ok rpe | |||
| 2016-11-05 | Remove the obj, xobj and src directories from the base set. | Robert Peichaer | |
| The installer will create these directories during install. So local setups will not get overwritten during upgrades. idea from and OK deraadt@ with help from and OK tb@ feedback from and no objections halex@ | |||
| 2016-10-14 | Build the bundle of GENERIC* kernels in using the new compile metods, | Theo de Raadt | |
| and de-escalate to $BUILDUSER. Much help from natano and tb. | |||
| 2016-10-09 | Remove check for RELEASEDIR permissions, there are usecases where other | Martin Natano | |
| filesystem permissions are required. requested by deraadt | |||
| 2016-10-09 | Check that DESTDIR is on a noperm filesystem that's properly locked | Martin Natano | |
| down and enforce reasonable permissions for RELEASEDIR. prodded by and ok deraadt ok tb | |||
| 2016-10-06 | Add switchd | Reyk Floeter | |
| OK deraadt@ | |||
| 2016-10-06 | Print the root check error message to stderr. While there add the name | Martin Natano | |
| of the target to the message to be more descriptive. ok deraadt tb | |||
| 2016-10-06 | Build kernels as root for now. Otherwise we run into permission issues | Martin Natano | |
| when the source tree is not owned by ${BUILDUSER}. ok deraadt | |||
| 2016-10-05 | conditionally create obj & xobj same way that src is handled | Theo de Raadt | |
| ok natano | |||
| 2016-10-05 | De-escalate to an unprivileged users during 'make build' and 'make release'. | Martin Natano | |
| - If you start make build as root, everything will be run as root. Nothing new here. New is, that you can set BUILDUSER=somebody and the unprived parts will be run as somebody. - If you start make build with sudo, the unprived parts will be run as the real user (meaning YOU). You can still set BUILDUSER=somebody and the uprived parts will run as somebody. - If you start make build as a normal user it will error out. "I'm sorry Dave." Note that DESTDIR must be on partition with the noperm flag set for make release to work correctly as an unprivileged user. idea and ok deraadt input and ok tb ratchov millert rpe, halex and probably others where part of the conversation to make this happen, thanks! | |||
| 2016-10-04 | stop supporting SUDO builds. Something better is coming, so let's | Theo de Raadt | |
| align everyone who is using SUDO builds towards the new strategy. ok natano | |||
| 2016-09-18 | fix build | Theo de Raadt | |
| 2016-09-18 | add a config file parser to acme-client (unused at the moment, so that | Sebastian Benoit | |
| it can be worked on in the tree). ok florian@ deraadt@ | |||
| 2016-09-11 | Set owner for /etc/{passwd,pwd.db,spwd.db} and /var/sysmerge/etcsum. | Martin Natano | |
| from rpe | |||
| 2016-09-11 | The /etc/{localtime,rmt}, /var/tmp and /sys symlinks and the etc tarball | Martin Natano | |
| should be owned by root. ok deraadt | |||
| 2016-09-03 | Retire zaurus, as it hasn't made the EABI jump and will be permanently broken | Philip Guenther | |
| shortly when we use the hardware thread register in userland | |||
| 2016-09-03 | Add doas.conf example configuration file. | Paul Irofti | |
| Discussed with and loved by many. OK tedu@, tom@, deraadt@. | |||
| 2016-09-01 | remove sparc pieces | Theo de Raadt | |
| 2016-08-10 | armish handled some early-gen arm machines, which required tons of | Theo de Raadt | |
| workarounds. Some of them will soon stand in the way of armv7. Off to the attic you go. | |||
| 2016-08-09 | remove pointless csh placeholder files from /etc | Alexander Hall | |
| ok jung@ (some time ago) phessler@ | |||
| 2016-05-26 | whitespace found during review | Theo de Raadt | |
| 2016-05-14 | Remove handling of /etc/examples/ files by sysmerge(8). Getting regular messages | Antoine Jacoutot | |
| about pkg.conf isn't really that helpful and if a big syntax change comes along well we have current.html. it was disabled during p2k16 and no one complained so far discussed with and ok deraadt@ | |||
| 2016-05-11 | remove hppa64 port, which we never got going beyond broken single users. | Theo de Raadt | |
| hppa reverse-stack gives us a valuable test case, but most developers don't have a 2nd one to proceed further with this. ok kettenis | |||
| 2016-04-25 | burn down the systrace | Ted Unangst | |
| 2016-03-09 | We are done providing support for the vax. | Theo de Raadt | |
| lots of agreement. | |||
| 2016-02-15 | When the default mode on /var/log/maillog was changed to 640 the | Todd C. Miller | |
| creation of maillog as part of the distribution-etc-root-var target was missed. From Nathanael Rensen | |||
| 2016-01-27 | Add /etc/examples/pkg.conf, generated from mirrors.dat over in www/. | Stuart Henderson | |
| Positive feedback and/or OKs from benno millert jcs aja jasper | |||
| 2015-12-07 | Add initial vm.conf(5) example. But please note that the grammar is | Reyk Floeter | |
| not fixed yet. | |||
| 2015-12-05 | add rcscript for vmd | Jasper Lievisse Adriaanse | |
| ok mlarkin@ prompted by deraadt@ | |||
| 2015-12-01 | Send Aviion to same place as Nova II | Theo de Raadt | |
| discussed with jsg | |||
| 2015-11-30 | Add rebound rc.d script. | James Turner | |
| ok benno@ requested by tedu@ | |||
| 2015-11-27 | yppasswd went away | Theo de Raadt | |
| 2015-11-10 | With ikectl now requiring ca specific sections not present in the | Jonathan Gray | |
| general openssl cnf files install the ikeca.cnf file. ok sthen@ requested by reyk@ | |||
| 2015-10-23 | add BUILDINFO file. currently contains a timestamp. ok deraadt | Ted Unangst | |
| 2015-10-19 | Delete the empty example file "ftpchroot"; no example is needed. | Ingo Schwarze | |
| Move the one useful bit of information contained in the file ("one user name per line") to the ftpd(8) manual page where it belongs. OK deraadt@ sthen@ | |||
| 2015-10-16 | The hosts.lpd examples file does not contain a single example. | Ingo Schwarze | |
| The file format is so simple that no example is needed. All relevant documentation is already available from the proper place, which is the lpd(8) manual. Consequently, delete the empty file. OK millert@ dcoppa@ beck@ deraadt@ | |||
| 2015-10-03 | Enable eigrpd(8) and eigrpctl(8) in the builds | Renato Westphal | |
| ok deraadt@ | |||
| 2015-09-12 | Provide an ftpproxy6 rc script. ftp-proxy can only open one listening socket | Stuart Henderson | |
| at a time, so a second instance of the daemon is required. OK mikeb stsp ajacoutot | |||
| 2015-08-24 | /usr/share/sysmerge -> /var/sysmerge | Antoine Jacoutot | |
| requested by several discussed with deraadt@ | |||
| 2015-08-04 | install the radiusd rc.d file | Jonathan Gray | |
| ok deraadt@ | |||
| 2015-08-03 | Place etc/defaults/radiusd.conf and etc/rc.d/radiusd. Modify etc/rc | YASUOKA Masahiko | |
| to hook the rc script and modify etc/rc.conf to make it disable by default. Also add an entry for /etc/radiusd.conf to etc/changelist and etc/mtree/special. ok deraadt | |||
| 2015-07-03 | Remove sudoers | Todd C. Miller | |
| 2015-05-18 | Put ntpd.conf in MUTABLE so it's installed with 0644 mode. | Antoine Jacoutot | |
| discussed by deraadt@ | |||
| 2015-05-18 | enable ntpd by default at install time. We use pools and a reliable | Theo de Raadt | |
| constraint to keep them in check. in the worst case of being on a dark net, nothing changes. this is being enabled by default to allow gathering of more operational information from users. and if the operational heuristics in ntpd can be suitable refined, this may stay the default into the future. if not, ntpd will become even more awesome along the way. with reyk rpe | |||
| 2015-03-27 | Move man.conf from /etc to /etc/examples, deleting what's no longer supported. | Ingo Schwarze | |
| Discussed with many and OK ajacoutot@. | |||
| 2014-12-03 | Unhook rtsol(8) and rtsold(8) from the build. | Florian Obser | |
| OK deraadt@ | |||
 |
index : src | |
| OpenBSD base system |
| summaryrefslogtreecommitdiff |