summaryrefslogtreecommitdiff
path: root/etc/Makefile
AgeCommit message (Collapse)Author
2020-09-13Install /etc/examples/login_ldap.conf with proper mode and ownership.Antoine Jacoutot
tweak from deraadt@ ok martijn@ tb@
2020-09-13Install login_ldap.conf and register it into changelist and mtree/special.Antoine Jacoutot
ok tb@ (who had the same diff) & deraadt@
2020-06-29enter etc.powerpc64Theo de Raadt
2020-01-24retire rebound etc bits to the atticTed Unangst
2019-12-21a few depend:-related thingies that were still in.Marc Espie
okay millert@, tb@
2019-12-02sync namesTheo de Raadt
2019-11-30Tweak rpki-client to create all 4 output file formats from a singleTheo de Raadt
compute, based upon flags. OpenBGPD compatible format by default if no options, to integrate with bgpd.conf and bgpctl reload. Adapt mtree and stuff. This will receive further refactoring... ok benno job
2019-11-29create a var/db/rpki-client/roa file with correct ownership so thatTheo de Raadt
rpki-client(8) can deal with it (some upcoming changes...)
2019-11-27Nuke http captive portal detection; something better is coming.Florian Obser
OK otto
2019-08-12There is no reason why the TAL files are installed only readable by rootClaudio Jeker
these are public files. Agreed by deraadt@ (and florian@)
2019-06-19move tals to /etc, where they can be upgraded by a "sysupgrade" ifTheo de Raadt
such a circumstance ever occurs. ok job
2019-05-11socppc makes an extended visit to the bigbucket.Theo de Raadt
ok kettenis
2019-02-05Add an example unwind.conf.Florian Obser
Note that unwind(8) works without a config file in many (most?) cases. This provides an example on how to use the captive portal detection feature. Input benno Input & OK sthen
2019-01-26rc(8) bits for unwind(8); OK deraadtFlorian Obser
2019-01-08Move acme-client.conf to examples. Since we no longer store theFlorian Obser
agreement url in here we no longer need to updated it all the time. OK deraadt
2018-07-24add rad.conf exampleJasper Lievisse Adriaanse
ok florian@
2018-07-23It's time to switch to rad(8); tested by many.Florian Obser
Unhook rtadvd from build. OK deraadt, phessler
2018-07-12rc(8) infrastructure for radFlorian Obser
2018-04-29stop installing /etc/networks, it is now unused; OK deraadt@ tb@Ingo Schwarze
2017-11-05Consolidate lib.so.*.a, ld.so.a and the kernel relink kit intoRobert Peichaer
one location under /usr/share/relink. Be more specific in src/etc/rc reorder_libs() what filesystems need r/w remount and ensure that their mount state is restored. Idea and positive feedback from deraadt@ OK aja@ tb@
2017-06-22compile.tgz no longer needs to contain machine/ subdir, instead it needsTheo de Raadt
makegap.sh ok tb
2017-06-21When building a snapshot, install the compile.tgz file to builder'sTheo de Raadt
/usr/share/ so that next boot will find it and perhaps use it. ok tb rpe
2017-06-13For KARL, include a linkkit into the base set, as usr/share/compile.tgz.Theo de Raadt
This contains the relevant pieces from all the GENERIC* compile directories (*.o ld.script Makefile gap.S). It also includes the machine/ subdir for now, to support re-randomizing of gap.S, though other methods are being investigated. (Any binutils ld.script hackers out there?) collaboration with rpe
2017-06-12destroy lint remnants.Marc Espie
okay millert@ deraadt@
2017-06-03kernels in compile dirs are og-rwx, so need to make them readable inTheo de Raadt
$RELEASEDIR ok tb rpe
2017-05-29rc.d(8) for slaacdFlorian Obser
OK phessler, deraadt
2017-04-14mark newish phony targets as phony.Marc Espie
okay tb@
2017-03-17Enable dhcrelay6(8).Rafael Zalamena
ok deraadt@
2017-02-27Remove support for pkg.conf in light of the consolidation towardsRobert Peichaer
a single configuration file for the OpenBSD repository location. The pkg_* tools now use installurl(5) to find the package repository. NOTE: /etc/installurl only contains a single URL pointing to a mirror. Use the PKG_PATH environment variable to specify more than one package repository. prodded by and OK deraadt@ aja@
2017-02-26Switch to xenodm(1).Matthieu Herrb
Do it now deraadt@
2017-02-12As it's done in /etc/skel for new regular users, create an emptyLandry Breuil
/root/.ssh/authorized_keys file with correct permissions (0600 for the file, 0700 for /root/.ssh dir). Since we encourage administrators to use public keys only if they want to access root account via ssh, might aswell make it easier, this will be particularly useful in managed/provisioned environments (think ansible & others). Note that administrators might get an e-mail from security(8) if the file suddenly appears after an update - this is of course expected :) ok tb@ sthen@ rpe@ ajacoutot@
2017-02-02Use a single chown user:group instead of separate chown and chgrp.Robert Peichaer
OK tb@
2017-01-25+arm64Patrick Wildt
2017-01-23Interpolate a 'make cleandir' if KEEPKERNELS is set to a non-empty string,Theo Buehler
right before building kernels. This should unbreak 'make release' for people having this setting. ok deraadt
2016-11-20Fix up some permissions in RELEASEDIR and /var/sysmerge.Theo Buehler
help, testing & ok rpe
2016-11-19Enable builds with a dedicated user that cannot elevate privileges or writeTheo Buehler
to /usr/src or /usr/xenocara. Change /usr/{,x}obj to owner build:wobj with mode 770 and install the systemwide makefiles before starting a build. The root of the noperm fs containing DESTDIR should also be owned by build:wobj. Developers will need to add their users to group wobj to be able to write to /usr/{,x}obj/. "push forward" deraadt; testing, input & ok rpe
2016-11-05Remove the obj, xobj and src directories from the base set.Robert Peichaer
The installer will create these directories during install. So local setups will not get overwritten during upgrades. idea from and OK deraadt@ with help from and OK tb@ feedback from and no objections halex@
2016-10-14Build the bundle of GENERIC* kernels in using the new compile metods,Theo de Raadt
and de-escalate to $BUILDUSER. Much help from natano and tb.
2016-10-09Remove check for RELEASEDIR permissions, there are usecases where otherMartin Natano
filesystem permissions are required. requested by deraadt
2016-10-09Check that DESTDIR is on a noperm filesystem that's properly lockedMartin Natano
down and enforce reasonable permissions for RELEASEDIR. prodded by and ok deraadt ok tb
2016-10-06Add switchdReyk Floeter
OK deraadt@
2016-10-06Print the root check error message to stderr. While there add the nameMartin Natano
of the target to the message to be more descriptive. ok deraadt tb
2016-10-06Build kernels as root for now. Otherwise we run into permission issuesMartin Natano
when the source tree is not owned by ${BUILDUSER}. ok deraadt
2016-10-05conditionally create obj & xobj same way that src is handledTheo de Raadt
ok natano
2016-10-05De-escalate to an unprivileged users during 'make build' and 'make release'.Martin Natano
- If you start make build as root, everything will be run as root. Nothing new here. New is, that you can set BUILDUSER=somebody and the unprived parts will be run as somebody. - If you start make build with sudo, the unprived parts will be run as the real user (meaning YOU). You can still set BUILDUSER=somebody and the uprived parts will run as somebody. - If you start make build as a normal user it will error out. "I'm sorry Dave." Note that DESTDIR must be on partition with the noperm flag set for make release to work correctly as an unprivileged user. idea and ok deraadt input and ok tb ratchov millert rpe, halex and probably others where part of the conversation to make this happen, thanks!
2016-10-04stop supporting SUDO builds. Something better is coming, so let'sTheo de Raadt
align everyone who is using SUDO builds towards the new strategy. ok natano
2016-09-18fix buildTheo de Raadt
2016-09-18add a config file parser to acme-client (unused at the moment, so thatSebastian Benoit
it can be worked on in the tree). ok florian@ deraadt@
2016-09-11Set owner for /etc/{passwd,pwd.db,spwd.db} and /var/sysmerge/etcsum.Martin Natano
from rpe
2016-09-11The /etc/{localtime,rmt}, /var/tmp and /sys symlinks and the etc tarballMartin Natano
should be owned by root. ok deraadt
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-20 18:00:16 +0000