summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2014-10-21Remove SSLv2 and SSLv3 references from the example relayd.conf and theLawrence Teo
relevant example snippet in the relayd.conf(5) man page. Change the default SSL protocols in the example file/man page to "no tlsv1.0" (suggested by sthen@), which will enable the TLSv1.1 and TLSv1.2 protocols only. feedback/ok jsing@ reyk@ sthen@
2014-10-17Drop the _lkm group.Antoine Jacoutot
ok dcoppa@ deraadt@
2014-10-09regenTed Unangst
2014-10-09delete all the cry devices too. missed by mikeb previously.Ted Unangst
2014-10-09remove lkmTed Unangst
2014-10-09no lkmTed Unangst
2014-10-03sort RCDAEMONSTheo de Raadt
2014-10-02No longer check for slip.{host,login}; pointed by dcoppa@Martin Pieuchot
2014-10-01sliphome et sliplogin(8) are gone.Martin Pieuchot
2014-09-28Revert 1.142. Without the down netstart will just print the ifconfigClaudio Jeker
output because it may end up just calling 'ifconfig $if'. This needs to be done better and properly tested.
2014-09-26remove explicit 'down' of an interface before starting a dhcp request, therebyAlexander Hall
avoiding annoying delays for some switch configurations ok claudio@ deraadt@ i would add ok phessler@, but it was not valid without an ok krw@
2014-09-22Get rid of intermediate file handling during sumfile creationRobert Peichaer
by first changing to $DESTDIR and then simply piping to xargs. OK deraadt@
2014-09-20Drop smmsp group and alias.Antoine Jacoutot
ok matthieu@ miod@
2014-09-19Remove sendmail queue directories.Antoine Jacoutot
ok matthieu@
2014-09-17With sendmail(8) gone, there is not much point in keeping /etc/mail/Makefile.Antoine Jacoutot
There is one table in the default configuration which is 'aliases' and the db can be created using newaliases(8). "go for it" guenther@ ok sthen@ matthieu@ gilles@
2014-09-16More sendmail removal.Antoine Jacoutot
ok matthieu@
2014-09-15Remove sendmail specific files.Matthieu Herrb
2014-09-15Remove sendmail tentacles. ok krw@ ajacoutot@Matthieu Herrb
2014-09-15Ensure proper group ID for chio.conf example.Robert Peichaer
Noted by and OK ajacoutot@ Positive feedback halex@
2014-09-05Remove /etc/{hosts,myname} from etc.tgz.Antoine Jacoutot
Make the installer create the /etc/hosts template. While here, re-add a missing 'echo' from install.sh. ok miod@ krw@ halex@
2014-09-03No more /etc/rndc.key. ok sthen@Matthieu Herrb
2014-08-30Make it possible to pass a specific error code to _rc_err().Antoine Jacoutot
ok robert@ schwarze@
2014-08-29Move dhclient.conf(5) to examples.Antoine Jacoutot
no objections from todd@ millert@ rpe@
2014-08-27Nuke net.inet6.icmp6.rediraccept and allow redirects on interfacesFlorian Obser
with autoconf enabled. If one is doing SLAAC one does already trust link local icmp6 so the policy for icmp6 redirects should be the same. pointed out by & OK bluhm@; OK henning@
2014-08-27Add httpd default log files to the rotation.Christian Weisgerber
ok reyk@ (who suggested these lines a while ago)
2014-08-26Create etc set during 'make build' and embed it in base set to makeRobert Peichaer
it available during a regular install or upgrade so that it doesn't need to be independently fetched. Idea, directions and OK deraadt@ Feedback and Ok halex@ and aja@
2014-08-26usr.sbinRobert Nagy
2014-08-25No more /etc/X11/fsMatthieu Herrb
2014-08-25Add a generic system-wide /usr/share/misc/mime.types file that can beReyk Floeter
included in httpd.conf. httpd(8) now supports both mime.types flavours with or without semicolon at the end of the line (nginx- or apache-style). Discussed with many, with input from halex@ OK halex@
2014-08-25snmpd cannot reloadAlexander Hall
ok reyk@
2014-08-25Put _rc_err argument under quotes to respect the syntax we are passing.Antoine Jacoutot
2014-08-24Fix reversed logic.Antoine Jacoutot
ok schwarze@
2014-08-24Drop uneeded parenthesis in usage().Antoine Jacoutot
ok schwarze@
2014-08-24Drop unused variables.Antoine Jacoutot
2014-08-24In debug mode, make it clear when we are using the default flags whenAntoine Jacoutot
none are set. initial patch from me but reworked by schwarze@ ok schwarze@
2014-08-24In debug mode (`-d'), only print the flags relevant to the rc.d(8) we areAntoine Jacoutot
calling instead of all flags which makes it very difficult to see the information we actually need. ok schwarze@ robert@
2014-08-23Shrink this to the minimum, but reference /etc/examples/pf.confTheo de Raadt
(someone should really sit down and flesh out the examples)
2014-08-22disable use of bind in base; in the base use nsd/unbound instead.Theo de Raadt
a proper & complete bind port will show up. discussed with many for years
2014-08-22Set the default nfsd flags to "-tun 4". Matches the commentJonathan Gray
in rc.conf and the behaviour of the backwards compatibility code in rc.subr for nfs_server=YES. ok ajacoutot@
2014-08-21Drop sanitation, _rc_parse_conf does this for us already.Antoine Jacoutot
ok schwarze@
2014-08-20Remove userland bits related to the crypto(4) interface; ok deraadtMike Belopuhov
2014-08-17Execute /etc/netstart using sh(1) instead of sourcing it.Antoine Jacoutot
Committing early to make sure we have time to fix any side-effect. ok deraadt@
2014-08-17When running interactively, display the output of the "check" actionAntoine Jacoutot
(ok or failed) like we do with all other actions. ok jung@ rpe@
2014-08-13Add /usr/X11R6/share/X11/app-defaultsMatthieu Herrb
2014-08-11Typo.Antoine Jacoutot
ok kili@
2014-08-11Let _rc_parse_conf stick to parsing /etc/rc.conf and /etc/rc.conf.localMatthias Kilian
if it's invoked without parameters. It's simpler than adding adding /etc/rc.conf and /etc/rc.conf.local parameters whereever _rc_parse_conf is used (e.g. /etc/rc and /etc/netstart). While here, replace a for foo in "$@"; do something; done by for foo; do something; done ok aja@
2014-08-11Make it possible to pass arguments to _rc_parse_conf().Antoine Jacoutot
ok robert@
2014-08-06Change grammar to remove a shift/reduce conflict that was introducedReyk Floeter
with the ssl options. "listen on $ip port 443 ssl" turns into "listen on $ip ssl port 443". ok florian@
2014-08-05Add configuration options for the most-important connection limits:Reyk Floeter
max requests (per connection) and timeout. We don't want to add too many button, and there are good defaults, but these ones are kind of mandatory.
2014-08-04enable httpd; ok deraadt@Christian Weisgerber