summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2014-12-29Add line continuation to be consistent with rc_pre(); ok sthen@Antoine Jacoutot
2014-12-29pexp is not needed; ok sthen@Antoine Jacoutot
2014-12-28Change the default ext_addr from "egress" to "*". Listening on theReyk Floeter
egress group only works if you have a default route; this confused some people.
2014-12-26the kvm.db is now kmem owned. noticed by Steven RobertsTed Unangst
2014-12-22dickman noticed /var/rwho keeps coming back. remove it.Ted Unangst
2014-12-22Out out you evil network daemon.Florian Obser
OK deraadt@ some time ago
2014-12-19Add rdp/rfb/vnc.Antoine Jacoutot
no objection from deraadt@
2014-12-13Install netboot.mopMiod Vallat
2014-12-12Like previously done in relayd, change the keyword "ssl" to "tls" toReyk Floeter
reflect reality. OK benno@
2014-12-12Change the keyword "ssl" to "tls" to reflect reality since weReyk Floeter
effectively disabled support for the SSL protocols. SSL remains a common term describing SSL/TLS, there is some controvery about this change, and the name really doesn't matter, but I feel confident about it now. (btw., sthen@ pointed out some historical context: http://tim.dierks.org/2014/05/security-standards-and-name-changes-in.html) OK benno@, with input from tedu@
2014-12-11regenTed Unangst
2014-12-11remove urioTed Unangst
2014-12-11remove urioTed Unangst
2014-12-09If it exists, use /usr/ports/infrastructure/man/ by default for apropos(1);Ingo Schwarze
we already used it by default for man(1) before. While here, fix the order of Xenocara and ports. ok millert@ sthen@
2014-12-03Unhook rtsol(8) and rtsold(8) from the build.Florian Obser
OK deraadt@
2014-12-03The kernel handles rtsol(8) functionality since some time now.Florian Obser
Treat rtsol in hostname.if as a keyword like dhcp and call ifconfig inet6 autoconf. "reads good" todd@ OK krw@ (who is *not* an IPv6 person), but I recruited him in his capacity as an installer person.
2014-11-30Fix comment: We don't use RC4 anymore, it's better to be moreDavid Coppa
generic. ok miod@
2014-11-27Remove ofwbootfd from sparc64 release dir since nobody will need it.Stefan Sperling
Requested by deraadt.
2014-11-26Add ofwbootfd to list of sparc64 release files to checksum.Stefan Sperling
2014-11-24Remove another sparc64 md installboot reference that was hiding in here.Stefan Sperling
ok deraadt
2014-11-22/dev/random has created the same effect as /dev/arandom (and /dev/urandom)Theo de Raadt
for quite some time. Mop up the last few, by using /dev/random where we actually want it, or not even mentioning arandom where it is irrelevant.
2014-11-17Make /var/tmp a symbolic link to /tmp. The creation of /var/tmp in theTheo de Raadt
often space-constrained /var filesystem was a historical mistake. There are big implications for the daemons which assume they won't run out of space, and this is a first step towards trying to improve the situation. Move /tmp to the same 7-day expiration rules that /var/tmp had. vi.recover works just as well as before, except on memory filesystems; indicating that vi should be repaired to write files into homedirs or something. done with rpe ok many
2014-11-17"reload" should fail if the service is not running in the first place.Antoine Jacoutot
ok robert@ sthen@
2014-11-07add svn, fix sort-order of iscsi. ok ajacoutot@ dcoppa@ phessler@Stuart Henderson
2014-11-05When clearing /tmp, use "-maxdepth -1" instead of "-type d -prune".Todd C. Miller
This is easier to understand and fixes a bug where the "-type d -prune" was misplaced as noticed by pirofti@. OK deraadt@
2014-10-21Remove SSLv2 and SSLv3 references from the example relayd.conf and theLawrence Teo
relevant example snippet in the relayd.conf(5) man page. Change the default SSL protocols in the example file/man page to "no tlsv1.0" (suggested by sthen@), which will enable the TLSv1.1 and TLSv1.2 protocols only. feedback/ok jsing@ reyk@ sthen@
2014-10-17Drop the _lkm group.Antoine Jacoutot
ok dcoppa@ deraadt@
2014-10-09regenTed Unangst
2014-10-09delete all the cry devices too. missed by mikeb previously.Ted Unangst
2014-10-09remove lkmTed Unangst
2014-10-09no lkmTed Unangst
2014-10-03sort RCDAEMONSTheo de Raadt
2014-10-02No longer check for slip.{host,login}; pointed by dcoppa@Martin Pieuchot
2014-10-01sliphome et sliplogin(8) are gone.Martin Pieuchot
2014-09-28Revert 1.142. Without the down netstart will just print the ifconfigClaudio Jeker
output because it may end up just calling 'ifconfig $if'. This needs to be done better and properly tested.
2014-09-26remove explicit 'down' of an interface before starting a dhcp request, therebyAlexander Hall
avoiding annoying delays for some switch configurations ok claudio@ deraadt@ i would add ok phessler@, but it was not valid without an ok krw@
2014-09-22Get rid of intermediate file handling during sumfile creationRobert Peichaer
by first changing to $DESTDIR and then simply piping to xargs. OK deraadt@
2014-09-20Drop smmsp group and alias.Antoine Jacoutot
ok matthieu@ miod@
2014-09-19Remove sendmail queue directories.Antoine Jacoutot
ok matthieu@
2014-09-17With sendmail(8) gone, there is not much point in keeping /etc/mail/Makefile.Antoine Jacoutot
There is one table in the default configuration which is 'aliases' and the db can be created using newaliases(8). "go for it" guenther@ ok sthen@ matthieu@ gilles@
2014-09-16More sendmail removal.Antoine Jacoutot
ok matthieu@
2014-09-15Remove sendmail specific files.Matthieu Herrb
2014-09-15Remove sendmail tentacles. ok krw@ ajacoutot@Matthieu Herrb
2014-09-15Ensure proper group ID for chio.conf example.Robert Peichaer
Noted by and OK ajacoutot@ Positive feedback halex@
2014-09-05Remove /etc/{hosts,myname} from etc.tgz.Antoine Jacoutot
Make the installer create the /etc/hosts template. While here, re-add a missing 'echo' from install.sh. ok miod@ krw@ halex@
2014-09-03No more /etc/rndc.key. ok sthen@Matthieu Herrb
2014-08-30Make it possible to pass a specific error code to _rc_err().Antoine Jacoutot
ok robert@ schwarze@
2014-08-29Move dhclient.conf(5) to examples.Antoine Jacoutot
no objections from todd@ millert@ rpe@
2014-08-27Nuke net.inet6.icmp6.rediraccept and allow redirects on interfacesFlorian Obser
with autoconf enabled. If one is doing SLAAC one does already trust link local icmp6 so the policy for icmp6 redirects should be the same. pointed out by & OK bluhm@; OK henning@
2014-08-27Add httpd default log files to the rotation.Christian Weisgerber
ok reyk@ (who suggested these lines a while ago)