Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-03-15 | Enable Unbound in base, ok deraadt@ | Stuart Henderson | |
2014-03-13 | Unhook httpd(8) from build; etc bits | Florian Obser | |
OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@ "The time is right." and much help getting the show on the road deraadt@ | |||
2014-02-19 | Ignore blank characters at the end of ${pkg_scripts} in order | Ingo Schwarze | |
to refrain from trying to execute /etc/rc.d/ in that case. Problem noticed by jasper@. Opinions on this patch vary: "much nicer, ok" sthen@ "good god, what horrible shell voodoo, ok" ajacoutot@ | |||
2014-01-19 | Extend the initial pf ruleset to explicitly allow dhcp / bootp and dhcpv6. | Claudio Jeker | |
Our dhclient only uses the bpf tap for broadcast packets (which bypass pf) but lease renewals will use a regular socket and are blocked without this change. Rules are written so that accidential forwarding of packets is not possible. Diff from brad@, OK henning@, benno@, mikeb@ | |||
2014-01-03 | Use kern.securelevel to determine whether or not we are in single | Todd C. Miller | |
user mode now that init no longer raises securelevel during reboot. OK deraadt@ | |||
2013-12-28 | document a hack we want fixed later | Theo de Raadt | |
2013-12-27 | - add chmod of seedfile in /etc | Robert Peichaer | |
- use its return code for single/multiuser detection ok deraadt | |||
2013-12-27 | re-use random_seed in shutdown section | Robert Peichaer | |
ok deraadt | |||
2013-12-27 | create a seed file for the bootloader in /etc/random.seed | Theo de Raadt | |
2013-12-27 | nest random_seed() contents into a single redirection | Theo de Raadt | |
idea from rpe | |||
2013-12-27 | re-do shutdown operations. Run the scripts if we may; take down carp | Theo de Raadt | |
unconditionally, and then do the optional powerdown discussed at length with rpe | |||
2013-12-27 | when forcing a re-key, might as well toss in dmesg as additional seed | Theo de Raadt | |
material | |||
2013-12-27 | all the random devices have been the same for a while; so let us avoid | Theo de Raadt | |
being obtuse and use /dev/random | |||
2013-12-26 | make absence of pkg_scripts non silent, after nits from theo and halex. | Marc Espie | |
okay rpe@, kirby@ | |||
2013-12-17 | Run spamd-setup from within /etc/rc.d/spamd, and take $spamd_black | Alexander Hall | |
into consideration. Diff from Maurice Janssen, thanks! ok rpe@ giovanni@ | |||
2013-12-15 | remove popa3d etc tendrils | Ted Unangst | |
2013-08-09 | Add rc.d(8) scripts for ipropd-master and ipropd-slave. | Antoine Jacoutot | |
ok deraadt@ | |||
2013-06-01 | hook up slowcgi to the tree, including /etc glue and a sample configuration | Christian Weisgerber | |
snippet; ok florian@ | |||
2012-11-18 | Remove pointless local declaration. | Antoine Jacoutot | |
ok halex@ | |||
2012-11-04 | Start ldomd(8). | Mark Kettenis | |
2012-09-20 | Enable npppd and npppctl in default build. Add npppd to rc and | YASUOKA Masahiko | |
install sample configs to /etc/. ok claudio deraadt henning mcbride | |||
2012-08-26 | Hook up nginx to rc(8). | Antoine Jacoutot | |
ok deraadt@ robert@ | |||
2012-08-20 | wire up the bits for tftp-proxy, which is called tftpproxy from rc.d's | David Gwynne | |
point of view. mostly ok sthen@ ajacoutot@, who were discussing the feng shui of the start_daemons chunk | |||
2012-04-06 | tedu the raidctl. | Joel Sing | |
ok deraadt@ | |||
2012-03-10 | ypbind likes a ypserv to talk to, and ypldap pretends to be ypserv. | David Gwynne | |
this diff starts ypldap before ypbind instead of after. ok deraadt@ ajacoutot@ | |||
2012-03-05 | add tftpd to the network daemons list just after ftpd and ftpproxy. | David Gwynne | |
reminded by mikeb@ ok sthen@ | |||
2011-12-09 | Handle aucat -> sndiod name change, and enable sndiod by default. Mostly | Alexandre Ratchov | |
from ajacoutot@. ok deraadt ajacoutot | |||
2011-10-13 | Start ldapd(8) earlier so that ypldap(8) can properly run (an LDAP | Antoine Jacoutot | |
server _must_ be running and accessible before ypldap is started). Add a proper pexp in the ypldap rc script. discussed with pyr@ robert@ deraadt@ ok deraadt@ | |||
2011-10-07 | The new ypbind changes requires that the domainname be set before | Theo de Raadt | |
rc.conf is run. There's no real downside. ok aja | |||
2011-10-06 | ccd goes to the attic | Theo de Raadt | |
discussed with jsing and millert | |||
2011-09-16 | Add a script for popa3d to support running it outside of inetd. | Robert Nagy | |
2011-07-28 | supress empty rc.firsttime email and add hostname to the subject line | Alexander Hall | |
ok deraadt krw | |||
2011-07-20 | remove an unneeded trailing semicolon | Alexander Hall | |
2011-07-20 | cleanup of fill_baddynamic() | Alexander Hall | |
ok krw@ | |||
2011-07-19 | random seed handling can now be done fairly early, well, as soon as | Theo de Raadt | |
we are beyond the nfs diskless /var and /usr mounting. Issue also spotted by Hugo Villeneuve, attempt at repair by me. Let's see how it works out in practice... looked at by krw, too | |||
2011-07-19 | Now that fill_baddynamic() is being called much earlier, it cannot use | Theo de Raadt | |
grep in a NFS diskless environment. Found and fixed by Hugo Villeneuve | |||
2011-07-18 | put aucat with network daemons for now, until a better solution is found | Theo de Raadt | |
2011-07-18 | move aucat very early, to cope with pkgs; ok aja | Theo de Raadt | |
2011-07-11 | there is a usage case where ypldap can be used without the local | Theo de Raadt | |
domainname being set. adjust the scripts to start it in that way. discussed with pyr | |||
2011-07-09 | tee the output from rc.firsttime to /dev/tty before passing it to mail(1) | Alexander Hall | |
so we can enjoy it on the screen as well ok deraadt@ | |||
2011-07-08 | re-add ospfd/ospf6d support which got lost, and build scripts for them | Theo de Raadt | |
2011-07-08 | early daemons fit on a line | Theo de Raadt | |
2011-07-08 | move the pflog0 setup to the pflogd script and only | Robert Nagy | |
do that if pf is actually enabled (rely on pfctl -si) requested by deraadt@ | |||
2011-07-08 | Forgot to commit that part yesterday, spotted by sthen@ | Antoine Jacoutot | |
2011-07-08 | simplify, shorten, and "subtly and cleverly" rearrange some daemon | Theo de Raadt | |
startups according to rules that some of us understand. it may come of sounding cocky, but any step beyond that would end up with a dependency graph which will never happen. this file is now ~60% of the length a week ago. ok guenther, robert, aja and people who will not test it until it is in | |||
2011-07-08 | fix boot output and make sure spamlogd is only started when needed | Robert Nagy | |
2011-07-08 | Switch amd and spamlogd to rc scripts and make sure that the | Robert Nagy | |
rc_pre() functions are returning correctly. This change also simplyfies the changes because false || return 1 can be replaced with false if that's the last call. thanks halex@! | |||
2011-07-08 | Small bits of fluff before the final re-organization | Theo de Raadt | |
ok halex | |||
2011-07-08 | ARGH! the third part: socket handling cleanup | Theo de Raadt | |
2011-07-08 | Oops, the second half of moving the key chunks | Theo de Raadt | |