summaryrefslogtreecommitdiff
path: root/etc/etc.hppa
AgeCommit message (Collapse)Author
2020-04-18regenAlexandre Ratchov
2020-01-24regenMartin Pieuchot
2020-01-24Use major 32 for dt(4).Martin Pieuchot
ok visa@, kettenis@, deraadt@
2020-01-23regen after adding pppacDavid Gwynne
2020-01-23wire up pppac(4).David Gwynne
with help from claudio@
2019-12-17syncReyk Floeter
2019-12-17Add fido(4), a HID driver for FIDO/U2F security keysReyk Floeter
While FIDO/U2F keys were already supported by the generic uhid(4) driver, this driver adds the first step to tighten the security of FIDO/U2F access. Specifically, users don't need read/write access to all USB/HID devices anymore and the driver also improves integration with pledge(2) and unveil(2): It is pledge-friendly because it doesn't require any ioctls to discover the device and unveil-friendly because it uses a single /dev/fido/* directory for its device nodes. It also allows to support FIDO/U2F in firefox without further weakening the "sandbox" of the browser. Firefox does not have a proper privsep design and many operations, such as U2F access, are handled directly by the main process. This means that the browser's "fat" main process needs direct read/write access to all USB HID devices, at least on other operating systems. With fido(4) we can support security keys in Firefox under OpenBSD without such a compromise. With this change, libfido2 stops using the ioctl to query the device vendor/product and just assumes "OpenBSD" "fido(4)" instead. The ioctl is still supported but there was no benefit in obtaining the vendor product or name; it also allows to use libfido2 under pledge. With feedback from deraadt@ and many others OK kettenis@ djm@ and jmc@ for the manpage bits
2019-12-14syncTheo de Raadt
2019-11-05Add a default priority of 5 for user _pbuild, this should help keeping systemsolene
responsive during packages compilation, especially on slower machines. feedback welcome from people building ports discussed with deraadt@
2019-09-15Add ttyC4 to lost of devices to change when logging in on ttyC0 (and inMark Kettenis
some cases also the serial console) such that X can use it as its VT when running without root privileges. ok jsg@, matthieu@
2019-06-11regenJoshua Stein
2019-06-02spelling/grammar fixes; from larry hynesJason McIntyre
2019-02-19sync staff datasize-cur with defaultJonathan Gray
ok deraadt@
2019-02-10crank limits because of mesaTheo de Raadt
2018-09-20grow alpha and hppa media to accomodate some recent growthTheo de Raadt
2018-08-31syncJoshua Stein
2018-07-28syncAlexandre Ratchov
2017-11-14syncChristian Weisgerber
2017-10-16syncChristian Weisgerber
2017-04-04cp -p the bootblocks to RELEASEDIR; ok tbTheo de Raadt
2017-02-06List openfiles-max explicitly in default /etc/login.conf files. Otherwise,Stuart Henderson
raising openfiles-cur above the implicit -max value (1024 on at least the common arch) results in the setting not being applied at all. Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about openfiles= from millert@ - changes in this version are to use 1024 for -max rather than 512 to avoid changing the existing hard limit, and just use openfiles= for bgpd/unbound where max and cur are the same value.
2016-12-30resize some of the ramdisks and miniroots that can be larger.Theo de Raadt
2016-09-11syncTheo de Raadt
2016-09-11syncTheo de Raadt
2016-09-08sync after /dev/sound* removalAlexandre Ratchov
2016-09-04regenChristian Weisgerber
2016-09-04Remove the tape block device nodes.Christian Weisgerber
While here, also remove two forgotten descriptions for long obsolete devices.
2016-09-02syncKazuya Goda
2016-09-02Add switch(4) cdev entryKazuya Goda
ok deraadt@ yasuoka@ reyk@
2016-05-21syncTheo de Raadt
2016-05-21syncTheo de Raadt
2016-04-28Replace /dev/bpf[0-9] with /dev/bpf and /dev/bpf0. The /dev/bpf node isMartin Natano
unused for now, but I plan to convert all programs in base to use it in a future diff. /dev/bpf0 is for compatibility with existing binaries and is to be removed after a transition period. ok rpe krw, for the installer part "Let's see it hit the tree." deraadt
2016-04-25regenTed Unangst
2016-04-25burn down the systraceTed Unangst
2016-03-12regen generated files after MAKEDEVs commitsMarc Espie
2015-11-10syncStuart Henderson
2015-11-10syncStuart Henderson
2015-10-23ypcipher isn't supported any more - it was already removed from login.conf(5)Stuart Henderson
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well. ok millert@
2015-10-23Sync (after tap addition)Claudio Jeker
2015-10-23MAKEDEV bits for tap(4)Claudio Jeker
OK dlg@ mpi@
2015-08-14The disktab attribute 'ty' was used to set D_REMOVEABLE and D_RAMDISKKenneth R Westerback
flags in the disklabel. These flags were discarded in 2006. Remove documentation for and instances of 'ty'. Add instances of 'dt' that were missing. Use 'floppy' as the value of 'dt' for all floppies and 'rdroot' for all boot images/miniroots. Add 'rdroot' to dktypenames and an associated #define DTYPE_RDROOT, since 'dt' values are parsed by matching entries in dktypenames[]. Slightly tweaked part of larger cleanup diff previously ok deraadt@.
2015-07-20add class used by the _pbuild user for DPB, ok ajacoutot@Stuart Henderson
2015-02-17Add class section for unbound, using openfiles-cur=512 ratherStuart Henderson
than the daemon class' default of 128. Reminded by/ok ajacoutot@
2014-12-11regenTed Unangst
2014-12-11remove urioTed Unangst
2014-10-09regenTed Unangst
2014-10-09delete all the cry devices too. missed by mikeb previously.Ted Unangst
2014-10-09remove lkmTed Unangst
2014-08-20Remove userland bits related to the crypto(4) interface; ok deraadtMike Belopuhov
2014-07-11regenTed Unangst
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-04 02:19:21 +0000