| Age | Commit message (Collapse) | Author |
|---|
|
routes are available. This fixes usage for some OpenVPN users that start
it from hostname.tun*.
Tested by Johan Huldtgren. ok sthen@, johan@.
|
|
|
|
to make logging to syslog work with php for example.
ok deraadt@, henning@
|
|
|
|
"sure" sthen@
|
|
|
|
for the X protocol instead of port 6000 only; this way pf provides
the same protection level to all X servers.
ok sthen@; "I am convinced that 6000-6010 is acceptable for blocking
in pf" deraadt@, "i'd thought of something similar" oga@
|
|
changed with a sysctl, so note it in sysctl.conf. v6 needs further
testing following discussions on the tech mailing list; rainer@ points
out possible interactions with neighbour discovery which need to be
investigated first.
"go ahead on the v4 part" deraadt@
|
|
|
|
ok miod@
|
|
|
|
|
|
|
|
arches. ok todd@ beck@
|
|
ok deraadt@
|
|
turns bombs into flowers, water into beer and eradicts swine flu
|
|
|
|
|
|
|
|
(although for now our cd images fail to boot on IP27 and IP30).
|
|
1) replace +%e by +%d, unescaped blanks don't work at all in file names
2) replace +%b by +%m to make log files sort better by month
3) replace the home-grown +%Y.%m.%d by the standard +%F (= +%Y-%m-%d)
from Tim van der Molen <tbvdm at xs4all dot nl>, thanks!
ok okan@
|
|
1) advertise *.local and next_part near the top of the three scripts
2) daily: mention smtpd(8) mailq behaviour (like for sendmail, postfix, exim)
3) weekly: drop a comment trivially rehashing the next two lines of code
documenting next_part in the scripts was suggested by jmc@
ok sthen@ okan@ halex@; "i won't object" ajacoutot@
|
|
useful for example for release(8) DESTDIRs, ro-mounted foreign OS
partitions, nosuid+nodev-mounted backup areas and the like
while here, do not call ls w/o args in case find returns nothing
based on a patch from halex@, re-implemented by me; variable naming by jmc@
ok halex@ jmc@
|
|
Do not attempt to copy a larger partition onto a smaller one.
Backup of non-ffs root partitions was never supported, so don't even try.
(Both of the above suggested by guenther@).
Also add error messages in case ROOTBACKUP is switched on but severely
misconfigured - those were silently ignored in the past:
/altroot not defined or wrong type or on the same device as root.
otto@ agrees that checking the sizes makes sense
|
|
crontab(1) does.
ok miod@
|
|
and mention this in the Makefile so that this hopefully doesn't get broken
next time the size is modified. Repairs install45.iso.
|
|
suggested, tweaked and ok by guenther@
|
|
|
|
|
|
error out.
Add a new user _rwalld for rpc.rwalld, and use that instead
of nobody, also unconditionally drop to _rwalld not only
if rpc.rwalld was started with euid 0 (as root).
ok deraadt@
|
|
i.e. rely on the PATH set up in the root crontab(5)
in case /usr/local/bin is needed, daily.local is a logical place to append it
suggested by ajacoutot@; "i like this" okan@; feedback jmc@ deraadt@;
"i don't strongly object" sthen@
|
|
rely on the PATH set up in the root crontab(5), just like in monthly(8)
suggested by ajacoutot@; "i like this" okan@; feedback jmc@ sthen@;
"absolutely" deraadt@
|
|
based on a patch from John Wong, johnw at wonghome dot net, tweaked by me
while here, document globbing for normal lines, too
"i like that" okan@; feedback and ok jmc@
|
|
|
|
stratum 2. ok henning@
|
|
by moving it down to the bottom of the code;
"I definitely like this" ajacoutot@
|
|
found while investigating an unrelated bug report from John Wong
|
|
|
|
shortening the script by 100 lines and making it easier to understand
no functional change intended
feedback and ok sthen@ ajacoutot@ okan@
|
|
machinery minimally cope with this.
Discussed with and reluctantely accepted by deraadt@; we both dislike
losing the ``naturally comes out of your fingers'' kernel names and the
``one size fits all'' logic; but for now I don't see any easy way to
get a single kernel binary able to run on multiple IP## flavours.
|
|
|
|
|
|
ok deraadt@
|
|
When set to 0, daily(8) won't send mail unless there is something to report.
Using feedback from kettenis@ henning@ jmc@
OK sthen@ jmc@
|
|
in order not to annoy parser scripts and their owners (like henning@)
|
|
add the same infrastructure to daily; silencing daily needs another step
discussed with ajacoutot@ okan@ todd@ sthen@ deraadt@ jmc@
"immediately commit" deraadt@ (without seeing the final diff)
|
|
|
|
in preparation for improvements in /etc/daily and /etc/weekly
using feedback and suggestions from jmc@ and sthen@
ok jmc@, and sthen@ agreed with the general direction
|
|
|
|
can be fairly sure the terminal is already initialized. Avoids
a one second pause on login. Requested and OK deraadt@
|
