summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2023-04-26During boot we have a protective and restrictive pf ruleset during the timePeter Hessler
we are running netstart, and then load the pf.conf ruleset after all of the interfaces are loaded. Allow in and out IPv6 neighbor advertisement traffic without state during that time. suggestions/OK from saschan@ OK sthen@ kn@ florian@ deraadt@
2023-04-24add default tmux config; ok sthenKlemens Nanni
2023-04-21Delete incomplete and unreferenced 'miniroot' entries fromKenneth R Westerback
arm64 and macppc disktab.
2023-04-19Remove obsolete/unused disktab entries for install mediaKenneth R Westerback
that are no longer built. ok miod@
2023-04-18changelist: remove dhclient(8) filesSebastien Marie
as currently dhclient(8) is a (sort of) alias to "ifconfig inet autoconf", these files aren't used anymore. ok tb@
2023-04-18changelist: add unbound-control filesSebastien Marie
ok tb@
2023-04-16Add /etc/mixerctl.conf to changelist(5).Antoine Jacoutot
ok deraadt@ kn@ semarie@
2023-03-25things will be ready a bit earlierTheo de Raadt
2023-03-25correct day of weekTheo de Raadt
2023-03-15slightly earlier, and tweak some datesTheo de Raadt
2023-03-07Nuke pointless 'pb#N:ob#0:' lines from floppyKenneth R Westerback
types. ok miod@
2023-03-06Delete extraneous trailing blank line.Kenneth R Westerback
2023-03-06Remove pointless ":ob#0:pb#0:[tb=swap:]" disktab lines.Kenneth R Westerback
ok miod@
2023-03-06tweak examples/iked.conf bits a little further following comments byStuart Henderson
aisha@ and Crystal Kolipe, ok aisha@ tobhe@
2023-03-04move to 7.3-betaTheo de Raadt
2023-03-03Process accounting and lastcomm(1) can detect execve(2) violationsAlexander Bluhm
of pinsyscall(2) policy. Report such findings in daily mail like other security violations. User has to turn on accounting=YES in rc.conf.local to utilize this feature. OK deraadt@
2023-03-01/etc/examples/iked.conf tweaks:Stuart Henderson
- show a demo of a strong random string for psk, for some types of configuration psk makes sense. the previous example hinted at.not using it. - change the EAP MSCHAPv2 example so that more than one client can connect (previous used address config but with only a single address not a pool), and use the newer keywords to show how to route all traffic from dynamic-ip clients over the tunnel ok tobhe@
2023-02-28add 7.4 fw keyStuart Henderson
2023-02-19add 7.4 syspatch public keyRobert Nagy
2023-02-197.4 packages keyChristian Weisgerber
2023-02-187.4 base keyTheo de Raadt
2023-01-28syncTheo de Raadt
2023-01-28Update the number of default wskbd entriesPeter Hessler
OK deraadt@
2023-01-25Delete TAB only line.ASOU Masato
2023-01-24syncJeremie Courreges-Anglas
2023-01-24Provide /dev/ujoy/[0-3]Jeremie Courreges-Anglas
ok deraadt@ miod@
2023-01-18process the sshd random-relink kit if it is found. sshd's text segmentTheo de Raadt
is now garbled, and in the future xonly univirse you'll have poor success downloading it or libc to know where gadgets are. ok djm
2023-01-14regenMark Kettenis
2023-01-14Create /dev/efi on amd64 and arm64.Mark Kettenis
ok yasuoka@
2022-12-28Make wait_reorder_libs() honour library_aslr=NOKlemens Nanni
Otherwise it will unconditionally print an empty line in case relinking is disabled. Reported by kettenis Feedback OK tb OK florian
2022-12-26add newline missed in previousKlemens Nanni
2022-12-26Re-order libraries in parallel to netstart.Florian Obser
While netstart is busy setting up the network and waiting for a default route we can already start with reordering libraries since this does not depend on running network, speeding things up. Idea & input deraadt Input & OK kn
2022-12-18Revert previous as it doesn't create additional lo(4) anymoreKlemens Nanni
Reported by Andreas Bartelt on bugs@
2022-12-18Do not try to create physical interfacesKlemens Nanni
vifscreate() always creates all virtual interfaces up-front. To check whether a given interface exists, ifstart() uses ifcreate() which tries to create nonexistent ones. Virtual ones are guaranteed to be present and physical ones cannot be created, so replace the ifcreate() call with a simpler ifconfig test and clarify the comment. OK martijn afresh1
2022-12-16zap double space and needless line breakKlemens Nanni
2022-12-16Prioritize lladdr over name/unit in hostname.if processingAndrew Fresh
When needed, lladdr is more precise and enduring. Suggested by deraadt@ Many improvments and OK kn@
2022-12-05Add support configuring hostname.if(5) by lladdrAndrew Fresh
Original implementation by martijn@ Feedback and suggestions from kn@, sthen@, claudio@, florian@, and deraadt@. ok deraadt
2022-11-30add configtest; OK martijnKlemens Nanni
2022-11-28rc(8): reorder_libs: print names of relinked librariesScott Soule Cheloha
When booting from slow media, the boot can appear to stall at the "reordering libs" line for quite some time. For my example, my G4 PowerMac booting from USB 1.1 takes a full minute to reorder the libraries. Let's print the name of each library before it is relinked. This gives the operator a better sense of what the machine is doing. In particular, it signals to the operator that the machine did not hang. With input from kn@, deraadt@. Positive feedback from sthen@. Link: https://marc.info/?l=openbsd-tech&m=165914104421476&w=2 ok kn@
2022-11-10RegenKenneth R Westerback
2022-11-10Nuke Vax (ra,rx) and HP-300 (hd) devices.Kenneth R Westerback
Noticed by kn@ ok millert@
2022-11-09RegenKenneth R Westerback
2022-11-09Remove xy/xd. SMD left with sparc.Kenneth R Westerback
ok kn@ deraadt@
2022-11-09Remove xy/xd. SMD left with sparc.Kenneth R Westerback
ok kn@ deraadt@
2022-11-07Import regenerated moduli.Darren Tucker
2022-11-06regen after /dev/pf? cleanup (only /dev/pf exists)Klemens Nanni
2022-11-06There is only one pf(4); OK sashanKlemens Nanni
2022-11-05"need root privileges" is an error, print it on stderr"Klemens Nanni
2022-11-05Print full path in usage; OK jmcKlemens Nanni
2022-11-01Only load the SOII key if IPv6 is availableKlemens Nanni
Possible now that IP6KERNERL is hoisted. This also improves readability and zaps double negation logic.