summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2018-08-16Switch nsd control socket from localhost to a unix domain socket.Florian Obser
OK sthen
2018-08-16The zoneinfo directories can be mode 755 just like everything else.Todd C. Miller
OK deraadt@
2018-08-11don't need 61 keys anymoreTheo de Raadt
2018-08-10crank to 6.4-betaTheo de Raadt
2018-08-07Similar to the ldpd.conf change don't use a macro of the secret.Claudio Jeker
Macros get sometimes logged so we should not encurage to use them for sensitive data.
2018-08-06Correct example file since reserved words cannot be used as macros. Not onlyRicardo Mestre
that, the macro used was password and if we changed it to something like pass="secret" it would log it if the daemon was ran in verbose mode. Hint and OK claudio@
2018-07-28syncAlexandre Ratchov
2018-07-28Remove unused /dev/audio and /dev/audioctl symlinks.Alexandre Ratchov
ok deraadt
2018-07-25s/resolver/nameserver/ to match parse.y -r1.4Jasper Lievisse Adriaanse
2018-07-24add rad.conf exampleJasper Lievisse Adriaanse
ok florian@
2018-07-23add _rad userFlorian Obser
OK tb, claudio
2018-07-23Remove rtadvd(8) rc script.Florian Obser
2018-07-23Remove rtadvd(8) leftovers in etc.Florian Obser
OK deraadt, phessler
2018-07-23It's time to switch to rad(8); tested by many.Florian Obser
Unhook rtadvd from build. OK deraadt, phessler
2018-07-23It's time to switch to rad(8); tested by many.Florian Obser
Remove rtadvd(8) from rc(8). OK deraadt, phessler
2018-07-22document method=https, and use it in the example config;Jason McIntyre
from lauri tirkkonen; ok sthen beck
2018-07-13add rad.conf; from semarie; tweak & OK tbFlorian Obser
2018-07-12rc(8) infrastructure for radFlorian Obser
2018-07-12Add _rad user and group for rad(8).Florian Obser
This recycles the _btd uid/gid that have been removed in 2013. Discussed in the hackroom.
2018-07-11Explicitly call "/etc/rc.d/vmd stop". This issues graceful shutdown commandsStuart Henderson
to running VMs (at least for OpenBSD ones), but the stop routine for system daemons is not usually called at shutdown. Earlier version with just "vmd stop" ok reyk@ kn@, ajacoutot@ reminded me to hide the contextless "vmd(ok)" text which looks bad, I did so and wrapped it with a "stopping VMs" message (it can take some time, especially when you have multiple VMs, so better to have some clear feedback).
2018-07-11Add -w option to vmctl stop to wait for completion of VM termination.Reyk Floeter
Use it in /etc/rc.d/vmd accordingly. OK sthen@
2018-07-11Don't hide errors when IPv6 forwarding is not enabled.Florian Obser
OK(failed) phessler OK deraadt
2018-07-10we were refering to 10k states by default here as well, pt out by claudioHenning Brauer
2018-07-08netstart is used during system start, but also interactively.Theo Buehler
Show proper error message if a regular user executes netstart. Only do the privilege check if the id binary is available, which might not be the case during diskless system startup. ok deraadt, jasper, jca, krw, rpe (who wrote the same diff), sthen
2018-07-03list the ports for gre in udp, as per rfc8086 and iana assignments.David Gwynne
ok benno@ deraadt@
2018-06-27a mirror URLs -> a mirror URLTheo Buehler
From Raf Czlonka
2018-06-21Add 6to4 anycast prefixes to bogon filterjob
Globally anycasted 6to4 has outlived its usefulness. Operational discussion: http://seclists.org/nanog/2018/Jun/268 OK deraadt@
2018-06-13Rename httpd.conf "root strip" option to "request strip".Reyk Floeter
"root strip" was semantically incorrect and did cause some confusion as it never stripped the root but the client's request path. Discussed with many. Heads up: this is a grammar change that also affects acme-client(1) configurations (see current.html). OK claudio@
2018-06-13Adjust example after the announce (all|self|...) change.Claudio Jeker
Adjust filters and comment them to explain the basic operation. Use large-community and a prefix-set to ensure no bad prefixes are leaked to eBGP speakers. With and OK job@
2018-06-07prepare for dri3protoMatthieu Herrb
2018-06-04remove "from local" (the default) from one of the match rules: the lineJason McIntyre
immediately above also uses this notation, it's shorter, and it keeps two examples in the man page which claim to be the same as the default config (but with exceptions) in sync; ok gilles
2018-05-24update default config to new grammarGilles Chehade
ok eric@
2018-05-18Put commented minimal-reponses and refuse-any defaults into nsd.confFlorian Obser
so that the changed default will be pointed out to the admin by sysmerge. Idea & OK sthen
2018-05-16Remove default ls -C alias.Marco Pfatschbacher
OK millert@, kn@, ian@, sthen@
2018-05-06don't put options in here that should not be needed in the majority ofSebastian Benoit
cases and will just be copied by users without thinking. ok claudio@
2018-05-02Add std.1500000 entry, mostly because of firmware constraints on variousMark Kettenis
Rockchip ARM SoCs. ok millert@, deraadt@
2018-04-29stop installing /etc/networks, it is now unused; OK deraadt@ tb@Ingo Schwarze
2018-04-28Add a proper usage() function.Robert Peichaer
Suggested by and OK jmc. OK tb
2018-04-13spaces->tabAntoine Jacoutot
ok kettenis@+florian@'s OCD
2018-04-11"listen on * port 80" means all v4 and v6 addresses these days.Florian Obser
OK benno
2018-04-04adapt armv7 manual pages for arm64Jonathan Gray
2018-04-03Import regenerated moduli file.Darren Tucker
2018-03-29Add aggressive-nsec example block.Florian Obser
While here, qname minimisation is an RFC since some time. tweak & OK sthen
2018-03-23probably the correct dateTheo de Raadt
2018-03-23Provide an example httpd.conf that's actually useful.Florian Obser
With & OK deraadt input sthen looks better to beck OK benno
2018-03-23Since a while relayd switched from the TLS session cache to using only TLSClaudio Jeker
session tickets instead. Adjust example relayd.conf file. From Matt Schwartz, reminded by jmc@ OK deraadt@
2018-03-15add syspatch public keys for 6.3 and 6.4Robert Nagy
2018-03-14remove 6.0 keysT.J. Townsend
2018-03-04when -n is used, no need to spit out "Missing parameters." beforeJason McIntyre
displaying usage(); ok tb
2018-03-03Lowercase 'usage' and group -n with interface in it.Landry Breuil
From jmc@, ok tb@