summaryrefslogtreecommitdiff
path: root/etc/Makefile
AgeCommit message (Collapse)Author
2016-11-20Fix up some permissions in RELEASEDIR and /var/sysmerge.Theo Buehler
help, testing & ok rpe
2016-11-19Enable builds with a dedicated user that cannot elevate privileges or writeTheo Buehler
to /usr/src or /usr/xenocara. Change /usr/{,x}obj to owner build:wobj with mode 770 and install the systemwide makefiles before starting a build. The root of the noperm fs containing DESTDIR should also be owned by build:wobj. Developers will need to add their users to group wobj to be able to write to /usr/{,x}obj/. "push forward" deraadt; testing, input & ok rpe
2016-11-05Remove the obj, xobj and src directories from the base set.Robert Peichaer
The installer will create these directories during install. So local setups will not get overwritten during upgrades. idea from and OK deraadt@ with help from and OK tb@ feedback from and no objections halex@
2016-10-14Build the bundle of GENERIC* kernels in using the new compile metods,Theo de Raadt
and de-escalate to $BUILDUSER. Much help from natano and tb.
2016-10-09Remove check for RELEASEDIR permissions, there are usecases where otherMartin Natano
filesystem permissions are required. requested by deraadt
2016-10-09Check that DESTDIR is on a noperm filesystem that's properly lockedMartin Natano
down and enforce reasonable permissions for RELEASEDIR. prodded by and ok deraadt ok tb
2016-10-06Add switchdReyk Floeter
OK deraadt@
2016-10-06Print the root check error message to stderr. While there add the nameMartin Natano
of the target to the message to be more descriptive. ok deraadt tb
2016-10-06Build kernels as root for now. Otherwise we run into permission issuesMartin Natano
when the source tree is not owned by ${BUILDUSER}. ok deraadt
2016-10-05conditionally create obj & xobj same way that src is handledTheo de Raadt
ok natano
2016-10-05De-escalate to an unprivileged users during 'make build' and 'make release'.Martin Natano
- If you start make build as root, everything will be run as root. Nothing new here. New is, that you can set BUILDUSER=somebody and the unprived parts will be run as somebody. - If you start make build with sudo, the unprived parts will be run as the real user (meaning YOU). You can still set BUILDUSER=somebody and the uprived parts will run as somebody. - If you start make build as a normal user it will error out. "I'm sorry Dave." Note that DESTDIR must be on partition with the noperm flag set for make release to work correctly as an unprivileged user. idea and ok deraadt input and ok tb ratchov millert rpe, halex and probably others where part of the conversation to make this happen, thanks!
2016-10-04stop supporting SUDO builds. Something better is coming, so let'sTheo de Raadt
align everyone who is using SUDO builds towards the new strategy. ok natano
2016-09-18fix buildTheo de Raadt
2016-09-18add a config file parser to acme-client (unused at the moment, so thatSebastian Benoit
it can be worked on in the tree). ok florian@ deraadt@
2016-09-11Set owner for /etc/{passwd,pwd.db,spwd.db} and /var/sysmerge/etcsum.Martin Natano
from rpe
2016-09-11The /etc/{localtime,rmt}, /var/tmp and /sys symlinks and the etc tarballMartin Natano
should be owned by root. ok deraadt
2016-09-03Retire zaurus, as it hasn't made the EABI jump and will be permanently brokenPhilip Guenther
shortly when we use the hardware thread register in userland
2016-09-03Add doas.conf example configuration file.Paul Irofti
Discussed with and loved by many. OK tedu@, tom@, deraadt@.
2016-09-01remove sparc piecesTheo de Raadt
2016-08-10armish handled some early-gen arm machines, which required tons ofTheo de Raadt
workarounds. Some of them will soon stand in the way of armv7. Off to the attic you go.
2016-08-09remove pointless csh placeholder files from /etcAlexander Hall
ok jung@ (some time ago) phessler@
2016-05-26whitespace found during reviewTheo de Raadt
2016-05-14Remove handling of /etc/examples/ files by sysmerge(8). Getting regular messagesAntoine Jacoutot
about pkg.conf isn't really that helpful and if a big syntax change comes along well we have current.html. it was disabled during p2k16 and no one complained so far discussed with and ok deraadt@
2016-05-11remove hppa64 port, which we never got going beyond broken single users.Theo de Raadt
hppa reverse-stack gives us a valuable test case, but most developers don't have a 2nd one to proceed further with this. ok kettenis
2016-04-25burn down the systraceTed Unangst
2016-03-09We are done providing support for the vax.Theo de Raadt
lots of agreement.
2016-02-15When the default mode on /var/log/maillog was changed to 640 theTodd C. Miller
creation of maillog as part of the distribution-etc-root-var target was missed. From Nathanael Rensen
2016-01-27Add /etc/examples/pkg.conf, generated from mirrors.dat over in www/.Stuart Henderson
Positive feedback and/or OKs from benno millert jcs aja jasper
2015-12-07Add initial vm.conf(5) example. But please note that the grammar isReyk Floeter
not fixed yet.
2015-12-05add rcscript for vmdJasper Lievisse Adriaanse
ok mlarkin@ prompted by deraadt@
2015-12-01Send Aviion to same place as Nova IITheo de Raadt
discussed with jsg
2015-11-30Add rebound rc.d script.James Turner
ok benno@ requested by tedu@
2015-11-27yppasswd went awayTheo de Raadt
2015-11-10With ikectl now requiring ca specific sections not present in theJonathan Gray
general openssl cnf files install the ikeca.cnf file. ok sthen@ requested by reyk@
2015-10-23add BUILDINFO file. currently contains a timestamp. ok deraadtTed Unangst
2015-10-19Delete the empty example file "ftpchroot"; no example is needed.Ingo Schwarze
Move the one useful bit of information contained in the file ("one user name per line") to the ftpd(8) manual page where it belongs. OK deraadt@ sthen@
2015-10-16The hosts.lpd examples file does not contain a single example.Ingo Schwarze
The file format is so simple that no example is needed. All relevant documentation is already available from the proper place, which is the lpd(8) manual. Consequently, delete the empty file. OK millert@ dcoppa@ beck@ deraadt@
2015-10-03Enable eigrpd(8) and eigrpctl(8) in the buildsRenato Westphal
ok deraadt@
2015-09-12Provide an ftpproxy6 rc script. ftp-proxy can only open one listening socketStuart Henderson
at a time, so a second instance of the daemon is required. OK mikeb stsp ajacoutot
2015-08-24/usr/share/sysmerge -> /var/sysmergeAntoine Jacoutot
requested by several discussed with deraadt@
2015-08-04install the radiusd rc.d fileJonathan Gray
ok deraadt@
2015-08-03Place etc/defaults/radiusd.conf and etc/rc.d/radiusd. Modify etc/rcYASUOKA Masahiko
to hook the rc script and modify etc/rc.conf to make it disable by default. Also add an entry for /etc/radiusd.conf to etc/changelist and etc/mtree/special. ok deraadt
2015-07-03Remove sudoersTodd C. Miller
2015-05-18Put ntpd.conf in MUTABLE so it's installed with 0644 mode.Antoine Jacoutot
discussed by deraadt@
2015-05-18enable ntpd by default at install time. We use pools and a reliableTheo de Raadt
constraint to keep them in check. in the worst case of being on a dark net, nothing changes. this is being enabled by default to allow gathering of more operational information from users. and if the operational heuristics in ntpd can be suitable refined, this may stay the default into the future. if not, ntpd will become even more awesome along the way. with reyk rpe
2015-03-27Move man.conf from /etc to /etc/examples, deleting what's no longer supported.Ingo Schwarze
Discussed with many and OK ajacoutot@.
2014-12-03Unhook rtsol(8) and rtsold(8) from the build.Florian Obser
OK deraadt@
2014-11-17Make /var/tmp a symbolic link to /tmp. The creation of /var/tmp in theTheo de Raadt
often space-constrained /var filesystem was a historical mistake. There are big implications for the daemons which assume they won't run out of space, and this is a first step towards trying to improve the situation. Move /tmp to the same 7-day expiration rules that /var/tmp had. vi.recover works just as well as before, except on memory filesystems; indicating that vi should be repaired to write files into homedirs or something. done with rpe ok many
2014-10-03sort RCDAEMONSTheo de Raadt
2014-10-01sliphome et sliplogin(8) are gone.Martin Pieuchot