summaryrefslogtreecommitdiff
path: root/etc/etc.sgi
AgeCommit message (Collapse)Author
2020-04-18regenAlexandre Ratchov
2020-01-23regen after adding pppacDavid Gwynne
2020-01-23wire up pppac(4).David Gwynne
with help from claudio@
2020-01-21regenMartin Pieuchot
2020-01-21Add /dev/dtMartin Pieuchot
2019-12-17syncReyk Floeter
2019-12-17Add fido(4), a HID driver for FIDO/U2F security keysReyk Floeter
While FIDO/U2F keys were already supported by the generic uhid(4) driver, this driver adds the first step to tighten the security of FIDO/U2F access. Specifically, users don't need read/write access to all USB/HID devices anymore and the driver also improves integration with pledge(2) and unveil(2): It is pledge-friendly because it doesn't require any ioctls to discover the device and unveil-friendly because it uses a single /dev/fido/* directory for its device nodes. It also allows to support FIDO/U2F in firefox without further weakening the "sandbox" of the browser. Firefox does not have a proper privsep design and many operations, such as U2F access, are handled directly by the main process. This means that the browser's "fat" main process needs direct read/write access to all USB HID devices, at least on other operating systems. With fido(4) we can support security keys in Firefox under OpenBSD without such a compromise. With this change, libfido2 stops using the ioctl to query the device vendor/product and just assumes "OpenBSD" "fido(4)" instead. The ioctl is still supported but there was no benefit in obtaining the vendor product or name; it also allows to use libfido2 under pledge. With feedback from deraadt@ and many others OK kettenis@ djm@ and jmc@ for the manpage bits
2019-12-14syncTheo de Raadt
2019-11-05Add a default priority of 5 for user _pbuild, this should help keeping systemsolene
responsive during packages compilation, especially on slower machines. feedback welcome from people building ports discussed with deraadt@
2019-10-18Bump datasize-cur for pbuild on mips64, to make room for modernity.Visa Hankala
OK deraadt@
2019-09-15Add ttyC4 to lost of devices to change when logging in on ttyC0 (and inMark Kettenis
some cases also the serial console) such that X can use it as its VT when running without root privileges. ok jsg@, matthieu@
2019-06-11regenJoshua Stein
2019-06-02spelling/grammar fixes; from larry hynesJason McIntyre
2019-03-17Grow sgi ISO/FS media space to cope with the clang growth.Theo de Raadt
2018-11-13Grow sgi iso to make room for clang.Visa Hankala
Cluebat and OK deraadt@
2018-08-31syncJoshua Stein
2018-07-28syncAlexandre Ratchov
2017-11-14syncChristian Weisgerber
2017-10-16syncChristian Weisgerber
2017-08-16crank memory limitsTheo de Raadt
2017-06-14Grow sgi iso, to account for base containing compile.tgz.Theo de Raadt
SGI has 8 kernels, so the file is 113MB!
2017-04-04cp -p the bootblocks to RELEASEDIR; ok tbTheo de Raadt
2017-02-06List openfiles-max explicitly in default /etc/login.conf files. Otherwise,Stuart Henderson
raising openfiles-cur above the implicit -max value (1024 on at least the common arch) results in the setting not being applied at all. Earlier version OK tom@ danj@ ajacoutot@ benno@ krw@ beck@, suggestion about openfiles= from millert@ - changes in this version are to use 1024 for -max rather than 512 to avoid changing the existing hard limit, and just use openfiles= for bgpd/unbound where max and cur are the same value.
2016-09-11syncTheo de Raadt
2016-09-11cua/tty nodes only need group dialer, the initial uid does notTheo de Raadt
matter much -- and "uucp" is just stupid in 2016. ok rpe
2016-09-11syncTheo de Raadt
2016-09-08sync after /dev/sound* removalAlexandre Ratchov
2016-09-04regenChristian Weisgerber
2016-09-04Remove the tape block device nodes.Christian Weisgerber
While here, also remove two forgotten descriptions for long obsolete devices.
2016-09-02syncKazuya Goda
2016-09-02Add switch(4) cdev entryKazuya Goda
ok deraadt@ yasuoka@ reyk@
2016-05-21syncTheo de Raadt
2016-05-21syncTheo de Raadt
2016-04-28Replace /dev/bpf[0-9] with /dev/bpf and /dev/bpf0. The /dev/bpf node isMartin Natano
unused for now, but I plan to convert all programs in base to use it in a future diff. /dev/bpf0 is for compatibility with existing binaries and is to be removed after a transition period. ok rpe krw, for the installer part "Let's see it hit the tree." deraadt
2016-04-25regenTed Unangst
2016-04-25burn down the systraceTed Unangst
2016-03-12regen generated files after MAKEDEVs commitsMarc Espie
2015-12-27welcome GENERIC.IP27 MP (dual cpu on O350 now)Theo de Raadt
ok visa
2015-11-10syncStuart Henderson
2015-11-10syncStuart Henderson
2015-10-23ypcipher isn't supported any more - it was already removed from login.conf(5)Stuart Henderson
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well. ok millert@
2015-10-23Sync (after tap addition)Claudio Jeker
2015-10-23MAKEDEV bits for tap(4)Claudio Jeker
OK dlg@ mpi@
2015-09-27Add IP26 kernels and boot blocks to the installation media.Miod Vallat
2015-09-20Enable IP26 builds.Miod Vallat
2015-08-14The disktab attribute 'ty' was used to set D_REMOVEABLE and D_RAMDISKKenneth R Westerback
flags in the disklabel. These flags were discarded in 2006. Remove documentation for and instances of 'ty'. Add instances of 'dt' that were missing. Use 'floppy' as the value of 'dt' for all floppies and 'rdroot' for all boot images/miniroots. Add 'rdroot' to dktypenames and an associated #define DTYPE_RDROOT, since 'dt' values are parsed by matching entries in dktypenames[]. Slightly tweaked part of larger cleanup diff previously ok deraadt@.
2015-07-20add class used by the _pbuild user for DPB, ok ajacoutot@Stuart Henderson
2015-02-17Add class section for unbound, using openfiles-cur=512 ratherStuart Henderson
than the daemon class' default of 128. Reminded by/ok ajacoutot@
2014-12-11regenTed Unangst
2014-12-11remove urioTed Unangst
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-29 18:49:18 +0000