summaryrefslogtreecommitdiff
path: root/etc/etc.octeon
AgeCommit message (Collapse)Author
2022-11-10RegenKenneth R Westerback
2022-11-09RegenKenneth R Westerback
2022-11-06regen after /dev/pf? cleanup (only /dev/pf exists)Klemens Nanni
2022-02-21cap the daemon login class' datasize at either 1G or 4G depending onRobert Nagy
the architecture and set the bgpd class' datasize to either 16G or 1G ok sthen@ and discussed with many
2022-01-04- add LDAPJason McIntyre
- capitalise RADIUS when referring to the protocol - remove tis from raf czlonka ok sthen ajacoutot
2021-11-11Regen after switch(4) removalClaudio Jeker
2021-11-11/dev/switch[0-4] is no longer needed.Claudio Jeker
2021-04-25Bump pbuild stacksize to 8M.mortimer
Addresses a stack exhaustion issue with llvm11 and a small number of ports. ok kettenis@
2021-04-02syncTheo de Raadt
2021-04-02don't put ptys onto the ramdisk mediaTheo de Raadt
from miod
2021-01-23syncTheo de Raadt
2021-01-23introduce ujoy(4), a restricted subset of uhid(4) for gamecontrollers.thfr
This includes ujoy_hid_is_collection() to work around limitations of hid_is_collection() until this can be combined without fallout. input, testing with 8bitdo controller, and ok brynet@ PS4 controller testing, fix for hid_is_collection, and ok mglocker@
2021-01-07add a xenodm login class and bump openfiles to 512 to avoid running outRobert Nagy
of file descriptors while running a busy desktop the xenodm login class expands the records from the daemon login class ok aja@, deraadt@, kettenis@, sthen@
2021-01-03Add space for ballooning clang.Visa Hankala
Moreover, this makes default datasize limits consistent mips64-wide.
2020-07-06regen after kstat additionDavid Gwynne
2020-07-06wire up kstat(4).David Gwynne
it's only accessible to root:wheel. ok deraadt@
2020-05-17Change install images called *.fs to *.img. These are UFS filesystem images,Theo de Raadt
but additionally have a bootblock in the first 8K (since UFS does not use that space). There are some UEFI direct-from-internet bootloaders that require the name *.img. So this makes things more convenient for those, while keeping it consistant in all architectures. ok kettenis beck kn
2020-04-24regenAlexandre Ratchov
2020-04-24Bump audio devices count to 4Alexandre Ratchov
ok deraadt
2020-04-18regenAlexandre Ratchov
2020-01-23regen after adding pppacDavid Gwynne
2020-01-23wire up pppac(4).David Gwynne
with help from claudio@
2020-01-21regenMartin Pieuchot
2020-01-21Add /dev/dtMartin Pieuchot
2019-12-17syncReyk Floeter
2019-12-17Add fido(4), a HID driver for FIDO/U2F security keysReyk Floeter
While FIDO/U2F keys were already supported by the generic uhid(4) driver, this driver adds the first step to tighten the security of FIDO/U2F access. Specifically, users don't need read/write access to all USB/HID devices anymore and the driver also improves integration with pledge(2) and unveil(2): It is pledge-friendly because it doesn't require any ioctls to discover the device and unveil-friendly because it uses a single /dev/fido/* directory for its device nodes. It also allows to support FIDO/U2F in firefox without further weakening the "sandbox" of the browser. Firefox does not have a proper privsep design and many operations, such as U2F access, are handled directly by the main process. This means that the browser's "fat" main process needs direct read/write access to all USB HID devices, at least on other operating systems. With fido(4) we can support security keys in Firefox under OpenBSD without such a compromise. With this change, libfido2 stops using the ioctl to query the device vendor/product and just assumes "OpenBSD" "fido(4)" instead. The ioctl is still supported but there was no benefit in obtaining the vendor product or name; it also allows to use libfido2 under pledge. With feedback from deraadt@ and many others OK kettenis@ djm@ and jmc@ for the manpage bits
2019-12-14syncTheo de Raadt
2019-11-05Add a default priority of 5 for user _pbuild, this should help keeping systemsolene
responsive during packages compilation, especially on slower machines. feedback welcome from people building ports discussed with deraadt@
2019-10-18Bump datasize-cur for pbuild on mips64, to make room for modernity.Visa Hankala
OK deraadt@
2019-09-15Add ttyC4 to lost of devices to change when logging in on ttyC0 (and inMark Kettenis
some cases also the serial console) such that X can use it as its VT when running without root privileges. ok jsg@, matthieu@
2019-08-04Revise the way how the octeon bootloader is built. The originalVisa Hankala
approach was not right, and there is still room for improvement. OK deraadt@
2019-07-28Link octeon bootloader to the build.Visa Hankala
OK deraadt@
2019-07-28Add a dedicated ramdisk entry for the octeon bootloader to reduceVisa Hankala
the size of the "boot" file. OK deraadt@
2019-07-17regenVisa Hankala
2019-07-17Add a bootloader for octeon.Visa Hankala
The firmware on OCTEON machines usually does not provide an interface for accessing devices, which has made it tricky to implement an OpenBSD bootloader. To solve this device access problem, this new loader has been built on top of a small kernel. The kernel provides all the necessary devices drivers, while most of the usual bootloader logic is in a userspace program in a ramdisk. The loader program is accompanied by a special device, octboot(4). The main purpose of this device is to implement a mechanism for loading and launching kernels. The mechanism has been inspired by Linux' kexec(2) system call. The bootloader will be enabled later when it is ready for general use. Discussed with deraadt@
2019-06-11regenJoshua Stein
2019-06-02spelling/grammar fixes; from larry hynesJason McIntyre
2018-07-28syncAlexandre Ratchov
2017-11-14syncChristian Weisgerber
2017-10-16syncChristian Weisgerber
2017-08-16crank memory limitsTheo de Raadt
2017-02-06List openfiles-max explicitly in default /etc/login.conf files. Otherwise,Stuart Henderson
raising openfiles-cur above the implicit -max value (1024 on at least the common arch) results in the setting not being applied at all. Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about openfiles= from millert@ - changes in this version are to use 1024 for -max rather than 512 to avoid changing the existing hard limit, and just use openfiles= for bgpd/unbound where max and cur are the same value.
2016-09-11syncTheo de Raadt
2016-09-11syncTheo de Raadt
2016-09-08sync after /dev/sound* removalAlexandre Ratchov
2016-09-04regenChristian Weisgerber
2016-09-04Remove the tape block device nodes.Christian Weisgerber
While here, also remove two forgotten descriptions for long obsolete devices.
2016-09-02syncKazuya Goda
2016-09-02Add switch(4) cdev entryKazuya Goda
ok deraadt@ yasuoka@ reyk@
2016-07-05regenVisa Hankala