summaryrefslogtreecommitdiff
path: root/etc/rc
AgeCommit message (Collapse)Author
2014-03-15Enable Unbound in base, ok deraadt@Stuart Henderson
2014-03-13Unhook httpd(8) from build; etc bitsFlorian Obser
OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@ "The time is right." and much help getting the show on the road deraadt@
2014-02-19Ignore blank characters at the end of ${pkg_scripts} in orderIngo Schwarze
to refrain from trying to execute /etc/rc.d/ in that case. Problem noticed by jasper@. Opinions on this patch vary: "much nicer, ok" sthen@ "good god, what horrible shell voodoo, ok" ajacoutot@
2014-01-19Extend the initial pf ruleset to explicitly allow dhcp / bootp and dhcpv6.Claudio Jeker
Our dhclient only uses the bpf tap for broadcast packets (which bypass pf) but lease renewals will use a regular socket and are blocked without this change. Rules are written so that accidential forwarding of packets is not possible. Diff from brad@, OK henning@, benno@, mikeb@
2014-01-03Use kern.securelevel to determine whether or not we are in singleTodd C. Miller
user mode now that init no longer raises securelevel during reboot. OK deraadt@
2013-12-28document a hack we want fixed laterTheo de Raadt
2013-12-27- add chmod of seedfile in /etcRobert Peichaer
- use its return code for single/multiuser detection ok deraadt
2013-12-27re-use random_seed in shutdown sectionRobert Peichaer
ok deraadt
2013-12-27create a seed file for the bootloader in /etc/random.seedTheo de Raadt
2013-12-27nest random_seed() contents into a single redirectionTheo de Raadt
idea from rpe
2013-12-27re-do shutdown operations. Run the scripts if we may; take down carpTheo de Raadt
unconditionally, and then do the optional powerdown discussed at length with rpe
2013-12-27when forcing a re-key, might as well toss in dmesg as additional seedTheo de Raadt
material
2013-12-27all the random devices have been the same for a while; so let us avoidTheo de Raadt
being obtuse and use /dev/random
2013-12-26make absence of pkg_scripts non silent, after nits from theo and halex.Marc Espie
okay rpe@, kirby@
2013-12-17Run spamd-setup from within /etc/rc.d/spamd, and take $spamd_blackAlexander Hall
into consideration. Diff from Maurice Janssen, thanks! ok rpe@ giovanni@
2013-12-15remove popa3d etc tendrilsTed Unangst
2013-08-09Add rc.d(8) scripts for ipropd-master and ipropd-slave.Antoine Jacoutot
ok deraadt@
2013-06-01hook up slowcgi to the tree, including /etc glue and a sample configurationChristian Weisgerber
snippet; ok florian@
2012-11-18Remove pointless local declaration.Antoine Jacoutot
ok halex@
2012-11-04Start ldomd(8).Mark Kettenis
2012-09-20Enable npppd and npppctl in default build. Add npppd to rc andYASUOKA Masahiko
install sample configs to /etc/. ok claudio deraadt henning mcbride
2012-08-26Hook up nginx to rc(8).Antoine Jacoutot
ok deraadt@ robert@
2012-08-20wire up the bits for tftp-proxy, which is called tftpproxy from rc.d'sDavid Gwynne
point of view. mostly ok sthen@ ajacoutot@, who were discussing the feng shui of the start_daemons chunk
2012-04-06tedu the raidctl.Joel Sing
ok deraadt@
2012-03-10ypbind likes a ypserv to talk to, and ypldap pretends to be ypserv.David Gwynne
this diff starts ypldap before ypbind instead of after. ok deraadt@ ajacoutot@
2012-03-05add tftpd to the network daemons list just after ftpd and ftpproxy.David Gwynne
reminded by mikeb@ ok sthen@
2011-12-09Handle aucat -> sndiod name change, and enable sndiod by default. MostlyAlexandre Ratchov
from ajacoutot@. ok deraadt ajacoutot
2011-10-13Start ldapd(8) earlier so that ypldap(8) can properly run (an LDAPAntoine Jacoutot
server _must_ be running and accessible before ypldap is started). Add a proper pexp in the ypldap rc script. discussed with pyr@ robert@ deraadt@ ok deraadt@
2011-10-07The new ypbind changes requires that the domainname be set beforeTheo de Raadt
rc.conf is run. There's no real downside. ok aja
2011-10-06ccd goes to the atticTheo de Raadt
discussed with jsing and millert
2011-09-16Add a script for popa3d to support running it outside of inetd.Robert Nagy
2011-07-28supress empty rc.firsttime email and add hostname to the subject lineAlexander Hall
ok deraadt krw
2011-07-20remove an unneeded trailing semicolonAlexander Hall
2011-07-20cleanup of fill_baddynamic()Alexander Hall
ok krw@
2011-07-19random seed handling can now be done fairly early, well, as soon asTheo de Raadt
we are beyond the nfs diskless /var and /usr mounting. Issue also spotted by Hugo Villeneuve, attempt at repair by me. Let's see how it works out in practice... looked at by krw, too
2011-07-19Now that fill_baddynamic() is being called much earlier, it cannot useTheo de Raadt
grep in a NFS diskless environment. Found and fixed by Hugo Villeneuve
2011-07-18put aucat with network daemons for now, until a better solution is foundTheo de Raadt
2011-07-18move aucat very early, to cope with pkgs; ok ajaTheo de Raadt
2011-07-11there is a usage case where ypldap can be used without the localTheo de Raadt
domainname being set. adjust the scripts to start it in that way. discussed with pyr
2011-07-09tee the output from rc.firsttime to /dev/tty before passing it to mail(1)Alexander Hall
so we can enjoy it on the screen as well ok deraadt@
2011-07-08re-add ospfd/ospf6d support which got lost, and build scripts for themTheo de Raadt
2011-07-08early daemons fit on a lineTheo de Raadt
2011-07-08move the pflog0 setup to the pflogd script and onlyRobert Nagy
do that if pf is actually enabled (rely on pfctl -si) requested by deraadt@
2011-07-08Forgot to commit that part yesterday, spotted by sthen@Antoine Jacoutot
2011-07-08simplify, shorten, and "subtly and cleverly" rearrange some daemonTheo de Raadt
startups according to rules that some of us understand. it may come of sounding cocky, but any step beyond that would end up with a dependency graph which will never happen. this file is now ~60% of the length a week ago. ok guenther, robert, aja and people who will not test it until it is in
2011-07-08fix boot output and make sure spamlogd is only started when neededRobert Nagy
2011-07-08Switch amd and spamlogd to rc scripts and make sure that theRobert Nagy
rc_pre() functions are returning correctly. This change also simplyfies the changes because false || return 1 can be replaced with false if that's the last call. thanks halex@!
2011-07-08Small bits of fluff before the final re-organizationTheo de Raadt
ok halex
2011-07-08ARGH! the third part: socket handling cleanupTheo de Raadt
2011-07-08Oops, the second half of moving the key chunksTheo de Raadt