summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2014-01-09Install our third key. NOTE that this is a TEST KEY for use as we improveStuart Henderson
our processes. requested by espie@
2014-01-09remove the SHA256 file as soon as we start creating setsTheo de Raadt
2014-01-09Install our second key. NOTE that this is a TEST KEY for use as we improveMarc Espie
our processes. prodded by deraadt@
2014-01-09install signify keysTheo de Raadt
2014-01-09Install our first key. NOTE that this is a TEST KEY for use as we improveTheo de Raadt
our processes. ok tedu
2014-01-08create the /etc/signify directoryTheo de Raadt
2014-01-06Rework the setup of the bootable installation cd-rom (installXX.iso) toMiod Vallat
contain both a 2048-byte sector ffs filesystem, and a 512-byte volume header, so that the IP27 boot magic^Wuglyness recently added to the boot-only cd-rom (cdXX.iso) can be applied as well. The full-blown installation iso can now boot on IP27/28/30/32/35.
2014-01-05syncTheo de Raadt
2014-01-05We need /dev/random on the install mediaTheo de Raadt
discussed with rpe and halex
2014-01-03Use kern.securelevel to determine whether or not we are in singleTodd C. Miller
user mode now that init no longer raises securelevel during reboot. OK deraadt@
2013-12-28document a hack we want fixed laterTheo de Raadt
2013-12-27- add chmod of seedfile in /etcRobert Peichaer
- use its return code for single/multiuser detection ok deraadt
2013-12-27re-use random_seed in shutdown sectionRobert Peichaer
ok deraadt
2013-12-27create a seed file for the bootloader in /etc/random.seedTheo de Raadt
2013-12-27nest random_seed() contents into a single redirectionTheo de Raadt
idea from rpe
2013-12-27re-do shutdown operations. Run the scripts if we may; take down carpTheo de Raadt
unconditionally, and then do the optional powerdown discussed at length with rpe
2013-12-27/stand has not been used in decadesTheo de Raadt
ok miod
2013-12-27when forcing a re-key, might as well toss in dmesg as additional seedTheo de Raadt
material
2013-12-27all the random devices have been the same for a while; so let us avoidTheo de Raadt
being obtuse and use /dev/random
2013-12-26make absence of pkg_scripts non silent, after nits from theo and halex.Marc Espie
okay rpe@, kirby@
2013-12-18Adapt nsd(1) comment to match the default daemon_flags of the rc.d script.Antoine Jacoutot
ok sthen@
2013-12-17Run spamd-setup from within /etc/rc.d/spamd, and take $spamd_blackAlexander Hall
into consideration. Diff from Maurice Janssen, thanks! ok rpe@ giovanni@
2013-12-15remove popa3d etc tendrilsTed Unangst
2013-12-12Have df(1) in the daily output show the inodes used/free.Brad Smith
a few developers thought this was a reasonable/good idea.
2013-12-11Use a correct pexp and unbreak stop/reload. The old and wrong pexpJeremie Courreges-Anglas
in /var/run/rc.d/identd has to be manually removed. Reported by Adam Jeanguenat (avj at voyager dot 6v6 dot org). ok dcoppa@ lteo@
2013-12-10Drop the f0, f1, f2 gettytab capabilities that were used to pokeChristian Weisgerber
magic numbers into sgttyb. The "modern" replacement for f# is the set of i#, o#, c#, l# to poke magic numbers into termios. ok miod@
2013-12-04Stop security(8) whining about /etc/nsd.conf which has moved, pointed outStuart Henderson
by Bjorn Ketelaars. Check that the /var/nsd/etc directory is protected instead, it may contain zone-transfer keys etc.
2013-12-01kill /var/obj which has been commented out since -r1.1 in '95.Jasper Lievisse Adriaanse
ok deraadt@
2013-12-01Copy the bootblocks to the release directory and sha256 it; spotted byMiod Vallat
aoyama@
2013-11-26/etc/nsd.conf -> /var/nsd/etc/nsd.confStuart Henderson
2013-11-26install sample nsd config file to /var/nsd/etc not /etc, spotted by/ok deraadtStuart Henderson
2013-11-26update for NSD 4.0.0; generate keys for nsd-control if non-existent, andStuart Henderson
use nsd-control to signal NSD.
2013-11-26new sample config entries for NSD 4.0.0Stuart Henderson
2013-11-26mtree changes for NSD 4.0Stuart Henderson
2013-11-21regenMark Kettenis
2013-11-21Change /dev/drm* permissions to 0600.Mark Kettenis
ok deraadt@, naddy@, ajacoutot@
2013-11-18Give /dev/drm0 to the user logged on the console to be ableMatthieu Herrb
to run OpenGL applications. ok kettenis@ naddy@
2013-11-17Delete unused `:0'.Kenji Aoyama
"Good catch" miod@
2013-11-17Remove unused /dev/X0 entries. ok millert@Matthieu Herrb
2013-11-05syncTheo de Raadt
2013-11-05kill iop(4); spotted by jmcTheo de Raadt
2013-11-03ugly spacesTheo de Raadt
2013-11-01missing regen after gpio(4) got addedJasper Lievisse Adriaanse
2013-11-01hookup sunxi bits for miniroot and ramdisk, tested on pcduino.Jasper Lievisse Adriaanse
note that on boards without ahci you will need to install to usb and still boot of sd, at least until there's support for the sd slot. ok patrick@
2013-10-28Revamp ARMv7 ramdisk and miniroot creation process.Patrick Wildt
Instead of running mkuboot during install, we call it on during the release build, so that we can also ship bootable images of the generic and the ramdisk kernel. We can now build miniroots for imx, too. The installer also can recognize the SoC and makes decision based on it. Use ext2fs for i.MX6 based devices. Tar the bootloader files to save some space. ok syl@
2013-10-27enable gpioctl(8) for armv7, and add associated devices on armv7/sunxi.aalm
ok jasper@, patrick@, rapha@
2013-10-20Remove Freetype internal directories.Matthieu Herrb
2013-10-19add a random sleep of up to half an hour to distribute the serverAlexander Hall
load from spamd-setup. Brought up by phessler@ who also pointed out that the percent sign must be escaped in the command. ok ajacoutot@ joerg@ phessler@ and sort of @blambert
2013-10-18create usr/share/man/man5/macppcMiod Vallat
2013-10-17a.out emulation went awayTheo de Raadt