summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2016-05-23build armv7 efibootJonathan Gray
2016-05-22Use the -F flag of install(1) to ensure the file's content is flushed to disk.Robert Peichaer
OK deraadt
2016-05-21regenMark Kettenis
2016-05-21syncTheo de Raadt
2016-05-21Add /dev/openprom.Mark Kettenis
2016-05-21syncTheo de Raadt
2016-05-21Default /dev/video node to root.wheel 600 because this should not beTheo de Raadt
available wide open. there should be some access model either via a group or fbtab. This will cause a decision to be made. ok millert
2016-05-21Copy dtb files to miniroots and install disk. Increase the ramdisk sizeJonathan Gray
and force long filenames on the first mount of fat 16 filesystems so this works. U-boot scripts have not yet been changed to load these files. ok kettenis@
2016-05-14Remove handling of /etc/examples/ files by sysmerge(8). Getting regular messagesAntoine Jacoutot
about pkg.conf isn't really that helpful and if a big syntax change comes along well we have current.html. it was disabled during p2k16 and no one complained so far discussed with and ok deraadt@
2016-05-14add 6.1 firmware keyStuart Henderson
2016-05-14unhphenate the world: re-order -> reorderJason McIntyre
sthen does not object
2016-05-14another ftp:// to http://T.J. Townsend
2016-05-14switch ftp:// mirror to http://T.J. Townsend
2016-05-11remove hppa64 port, which we never got going beyond broken single users.Theo de Raadt
hppa reverse-stack gives us a valuable test case, but most developers don't have a 2nd one to proceed further with this. ok kettenis
2016-05-11add OpenBSD 6.1 packages keyChristian Weisgerber
2016-05-11add openbsd 6.1 base keyTheo de Raadt
2016-05-11crank to 6.0-betaTheo de Raadt
2016-05-11remove uatraps from "all" as wellJonathan Gray
ok beck@
2016-05-11Alas all good things come to an end. The U of A traplist is going away asBob Beck
the University of Alberta moves away from running a spamd fronted MX, so there is no more source for this traplist anymore.
2016-05-05show what we're doing when reordering libraries, otherwise the textStuart Henderson
above it is "starting network", which can make you think something is broken when your machine is as slow as some of mine. "Yeah, that's a pretty crappy machine" deraadt@
2016-05-03listen directive may use a table for authentication, to make this work theJoerg Jung
table has to be defined BEFORE consequently move all tables in the examples to the beginning and before the listen directive to avoid tables not being found no functional change ran into this myself earlier, also reported by cjones via irc ok gilles
2016-05-03signal name should be first, fixes reload; ok deraadt@Otto Moerbeek
2016-04-29Delete invocation of mailq(1) that was present for historical reasons.Ingo Schwarze
On a real mailserver, it's too noisy and may be a privacy concern. On a machine that's not a mailserver, it's pointless. Besides, Theo points out that running subsystems that potentially parse untrusted user data daily, at a predictable time, as root is not a very good idea in the first place. Suggested by millert@; gilles@ matthieu@ deraadt@ sthen@ agree
2016-04-28Replace /dev/bpf[0-9] with /dev/bpf and /dev/bpf0. The /dev/bpf node isMartin Natano
unused for now, but I plan to convert all programs in base to use it in a future diff. /dev/bpf0 is for compatibility with existing binaries and is to be removed after a transition period. ok rpe krw, for the installer part "Let's see it hit the tree." deraadt
2016-04-28Experiment on matching on the daemon_user is over. It needs more work.Antoine Jacoutot
portmap isn't happy with it as reported by naddy@
2016-04-27Revert the revert and match on the daemon_user again.Antoine Jacoutot
We'll see if something else breaks but it's the right thing to do. discussed with robert@
2016-04-27Override each and every rc.d functions to be able to match on the user.Antoine Jacoutot
2016-04-27We want to run sysmerge(8) a bit earlier in the boot process so that it has aAntoine Jacoutot
chance to update the *default* configuration of the important daemons. Factorize rc.firsttime into a run_upgrade_script() function which takes the script suffix name as an argument. i.e. run_upgrade_script sysmerge / run_upgrade_script firsttime discussed with deraadt@ ok deraadt@ rpe@
2016-04-27Revert matching on the daemon user for now; it breaks sndiod handling whichAntoine Jacoutot
does start as root but does not have a root master process and instead changed its uid. reported by deraadt@
2016-04-27Use 'sort -V' which is actually meant to sort version numbers.Robert Peichaer
Noted by zhuk@ OK deraadt@
2016-04-26Bump copyright.Antoine Jacoutot
2016-04-26Introduce rtable(4) support to rc.subr(8).Antoine Jacoutot
It works by adding daemon_rtable=$id in /etc/rc.conf.local. rcctl(8) support coming in a few and so are the man pages bits. If you want multiple instances of the same daemon running in different routing tables, just symlink the original rc.d script. e.g. # cd /etc/rc.d && ln -s dhcpd dhcpd42 Then enable your daemons as such in rc.conf.local: dhcpd_flags= dhcpd42_flags= dhcpd42_rtable=42 most work done by Jiri B <jirib@devio.us>; with a few tweaks and simplifications by yours truly ok robert@ ... should make henning happy ;-)
2016-04-26Extend _RC_RUNFILE (/var/run/rc.d/scriptname) content with:Antoine Jacoutot
daemon_class, daemon_flags, daemon_timeout, daemon_user, pexp Add "pexp" as a valid variable to _rc_parse_conf() and sort the list while here. Besides having an easy way to see how a daemon was started exactly, it opens the door to rdomain/rtable support in rc.d(8). We need to have as much information on a daemon as possible if we want to target a specific rtable (using -T) and it also makes it easier to start multiple instances of the same daemon with similar flags as a different user... Of course that only works with rc.d scripts *not* overwritting the default rc_* functions. Man page tweaks coming later. discussed with and ok robert@
2016-04-26Re-link (only the newest) libc.so, placing the objects in a randomTheo de Raadt
order. with shell script assistance from rpe
2016-04-25rm systraceTed Unangst
2016-04-25regenTed Unangst
2016-04-25burn down the systraceTed Unangst
2016-04-21syncStuart Henderson
2016-04-20Remove the requirement that /etc/printcap must be a regular file.Ingo Schwarze
CUPS wants it to be a symlink, and that is probably the most common printing system. Bad idea to constantly spam everybody about that! Antoine already adjusted the file permissions in pkg/cupsd.rc rev. 1.24. OK ajacoutot@ (print/cups MAINTAINER).
2016-04-20Don't watch unbound's dnssec root zone key, to reduce security(8) spam.Stuart Henderson
ok martijn@ semarie@ matthieu@ danj@ benno@
2016-04-20adds iked(8) default key.Sebastien Marie
ok sthen@
2016-04-11syncStuart Henderson
2016-04-08syncStuart Henderson
2016-04-07syncStuart Henderson
2016-04-01Tweak rcctl wording.Antoine Jacoutot
from ian@
2016-04-01Rename the 'faulty' list action to 'failed'; it clearer.Antoine Jacoutot
prodded by matthieu@ ok millert@ jung@ sthen@
2016-03-30add "outgoing-interface" to sample unbound.confStuart Henderson
2016-03-27Don't delete the 224/4 route in netstart, unless it's being done to ensure thatStuart Henderson
a -reject route can be added. Restores the ability to set an interface route before daemons are started, lost during the previous simplification. ok millert mpi
2016-03-26Make it possible to get usage as a non-root user.Antoine Jacoutot
ok robert@
2016-03-26Handle the rc_stop=NO => rc_restart=NO case within _rc_not_supported().Antoine Jacoutot