summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2017-08-28Display that we are running the upgrade scripts when they exist. On slowishAntoine Jacoutot
machines, running sysmerge(8) can take a little while so don't let people wonder about why the output seems stuck. ok sthen@ tb@ rpe@
2017-08-25Sync emacs package versionJeremie Courreges-Anglas
(again...)
2017-08-25add new firmware keyStuart Henderson
2017-08-22add 6.3 packages keyChristian Weisgerber
2017-08-21Move the kernel relinking code from /etc/rc into a seperate scriptRobert Peichaer
/usr/libexec/reorder_kernel. Requested by ajacoutot@ to be able to relink the kernel from within syspatch(8). OK deraadt@ tb@
2017-08-21add basedir of the kernel link-kitRobert Peichaer
requested by ajacoutot@ OK tb@
2017-08-215.9 pubkeys no longer neededTheo de Raadt
2017-08-21add 6.3 base keyTheo de Raadt
2017-08-20Simplify the code for stopping daemons listed in pkg_scripts inRobert Peichaer
reverse order on shutdown. OK aja@ tb@
2017-08-20crank to 6.2-betaTheo de Raadt
2017-08-16crank memory limitsTheo de Raadt
2017-08-12Add manpage update for new grouping feature '{from,to} {i,e}bgp'job
OK phessler@
2017-08-05add /usr/X11R6/share/libdrm for recent libdrm versionsJonathan Gray
2017-07-25Finally remove backwards compat code to support the 'rtsol' keywordRobert Peichaer
in hostname.if(5) OK mpi@ deraadt@ florian@ OK jmc@ from doc perspective
2017-07-21Align ifstart() in netstart and install.sub.Robert Peichaer
- in netstart, rename _file to _hn referencing hostname.if files - in install.sub switch ifstart() to be used with _if instead of _hn as parameter ok krw@ tb@
2017-07-21syncMike Belopuhov
2017-07-21Multiple virtualization layers may be available at the same timeMike Belopuhov
reachable through different pvbus device nodes. Suggestion and OK deraadt, OK reyk
2017-07-18Use a bit better idiom to get most recent version of the libraryVadim Zhukov
being reordered. okay tb@ deraadt@
2017-07-18Use numerical sysctl output to check for nfs mounts.Robert Peichaer
OK tb@
2017-07-17Tweak previous.Robert Peichaer
2017-07-17Use a more compact way to compose the initial pf ruleset.Robert Peichaer
Diff from Klemens Nanni OK tb@ zhuk@
2017-07-17Now that choosing the library versions is much faster, we can doTheo Buehler
it after remounting the filesystem containing /usr/lib as rw: the former is pointless if the latter should happen to fail. From Klemens Nanni ok rpe
2017-07-17Optimize and simplify the selection of the latest library version inTheo Buehler
reorder_libs(). From Klemens Nanni with input from rpe. ok rpe, zhuk
2017-07-15Replace some `eval` with $(eval) for consistency and useTheo Buehler
parameter expansion instead of basename(1). From Raf Czlonka ok rpe
2017-07-10Test if an acct file exists before trying to rename it. This silencesAlexander Bluhm
false warnings in the frist three daily mails after process accounting has been turned on. from Raf Czlonka
2017-07-08Increase size to make slaacd fit.Florian Obser
Size problem noted by me, correct fix from deraadt@
2017-07-04Switch reorder_kernel() from sending emails to logging via syslogRobert Peichaer
and to write the logfile inside the kernel compile dir. - turn the whole reorder_kernel function into a subshell {} -> () - create kernel compile dir early on - redirect all stdout/stderr to a logfile inside this dir - setup ERR trap handler that - disables the EXIT trap handler - syslogs the error and hints to the logfile - additionally sends this message to the console - setup EXIT trap handler that syslogs success - wipe only the content instead of the whole kernel compile dir - reestablish stdout redirection to the log after the wipe - remove -q option of sha256 to log check result - run reorder_kernel() in the background OK deraadt@ tb@
2017-07-04Add GRACEFUL_SHUTDOWN example to bgpd.confjob
OK phessler@
2017-06-30Improve reorder_kernel()Robert Peichaer
- check for and exit if /usr/share is on a nfs mounted filesystem - add trap handlers that mail the logfile to the admin user - use $_compile instead of $_compile_dir like in the installer - use $_compile/$_kernel instead of $_kernel_dir - remove the now redundant sha256 -h ... after make newinstall - write stdout/stderr of the background subshell to a logfile OK tb@ deraadt@
2017-06-27remove some old cruft.Ted Unangst
2017-06-23Import regenerated moduli.Darren Tucker
2017-06-22Adjust relink procedure to use new targets. Better use semantics forTheo de Raadt
users and developers. diff from rpe, ok tb
2017-06-22compile.tgz no longer needs to contain machine/ subdir, instead it needsTheo de Raadt
makegap.sh ok tb
2017-06-21When building a snapshot, install the compile.tgz file to builder'sTheo de Raadt
/usr/share/ so that next boot will find it and perhaps use it. ok tb rpe
2017-06-19As early as possible, create a link /bsd.booted to the /bsd kernel weTheo de Raadt
presume we booted from. If you boot from another kernel, we cannot help you later with hibernate, sorry -- The kernel does not get a useable filename from the bootblocks. In the bootblocks, detect a live hibernate signature and boot from /bsd.booted instead. with yasuoka, lots of discussion with mlarkin, ok tom
2017-06-14Add a new function reorder_kernel() that relinks and installs theRobert Peichaer
new kernel in the background on system startup. It stores the hash of the new kernel and sends a notification email to the admin or root user. If it finds /usr/share/compile.tgz, it removes the existing compile dir and replaces it with the content of (new) archive. If the hash of /bsd does not match the stored one, no relinking happens. Idea from, joint work with and OK deraadt@ OK tb@ halex@ unnoticed by many
2017-06-14Grow sgi iso, to account for base containing compile.tgz.Theo de Raadt
SGI has 8 kernels, so the file is 113MB!
2017-06-13For KARL, include a linkkit into the base set, as usr/share/compile.tgz.Theo de Raadt
This contains the relevant pieces from all the GENERIC* compile directories (*.o ld.script Makefile gap.S). It also includes the machine/ subdir for now, to support re-randomizing of gap.S, though other methods are being investigated. (Any binutils ld.script hackers out there?) collaboration with rpe
2017-06-13The KARL compile.tgz linkkit adds some growth to the base set.Theo de Raadt
Prepare the install*.fs files for this growth.
2017-06-12destroy lint remnants.Marc Espie
okay millert@ deraadt@
2017-06-10Report processes that were killed due to pledge or memory accessAlexander Bluhm
violations in the daily mail. OK millert@ jmc@
2017-06-06start slaacd as early as possible, right after pf and sysctl.conf areFlorian Obser
setup. Input & OK deraadt@
2017-06-06Mention that the special files are created in the current workingTheo Buehler
directory. Suggested by Scott Cheloha. discussed with jmc
2017-06-05Temporarily disable the second call to rc_check until I figure out whatAntoine Jacoutot
is going on. Should fix another case of false negative reported by sthen (redis).
2017-06-05Fix logic in _rc_wait to properly cope with setproctitle(3) daemons. It was aAntoine Jacoutot
regression from my recent rc.subr changes. reported by deraadt@ and naddy@ : pflogd was marked as failed during boot while it was properly running
2017-06-03We have been running a small awk program before installing the relinked libc.Theo de Raadt
Perform the same kind of test for relinked libcrypto, using an openssl sequence (proposed by sthen)
2017-06-03Immediately after mounting / read-write, chmod og-rwx the kernel. RemoteTheo de Raadt
prying eyes were already been hindered at determining kernel addresses, now local prying eyes are also hindered. ok tb rpe
2017-06-03kernels in compile dirs are og-rwx, so need to make them readable inTheo de Raadt
$RELEASEDIR ok tb rpe
2017-06-03Move slaacd to /sbinFlorian Obser
jca points out that all the other interface configuration tools live there (like ifconfig or dhclient). Furthermore it starts so early in the boot process that /usr might not be mounted yet if it's a nfs filesystem. sthen and deraadt agree
2017-05-30Introduce a scary rc.conf(8) knob library_aslr=(YES|NO) to turn off theTheo Buehler
reordering of libraries by rc(8). This way machines with very slow disk I/O have a chance of booting within reasonable time now that libcrypto is also randomized. Discussed with various; input & ok from deraadt ajacoutot
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-27 16:26:47 +0000