summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2014-02-24revert previousMarc Espie
has fun effects on some manpages under some circumstances, as found out by sthen@: the gindent manpage looks like shit when seen with that new default man.conf on an uft8 terminal, e.g., quotes combine with the previous character to yield accented letters for no reason. this should be handled calmly after release, not rushed in at the last minute (okay deraadt@)
2014-02-24default to locale awareness. safer than changing internal mandoc defaults.Ted Unangst
2014-02-19Ignore blank characters at the end of ${pkg_scripts} in orderIngo Schwarze
to refrain from trying to execute /etc/rc.d/ in that case. Problem noticed by jasper@. Opinions on this patch vary: "much nicer, ok" sthen@ "good god, what horrible shell voodoo, ok" ajacoutot@
2014-02-15Show the exemplary rules for accepting default routes for IPv6 as well.pelikan
ok sthen florian
2014-02-14regen to add audio*Alexandre Ratchov
2014-02-14readd audio devices, from david@, thanks!Alexandre Ratchov
2014-02-03Build and document bsd.mp on alpha.Miod Vallat
2014-01-25delete junk fileTheo de Raadt
2014-01-25Change the default PF policy to "block return", including x11 asDarren Tucker
suggested by naddy@. This solves the problem that occurs when a server crashes or is hard booted and comes back up without tearing down any connections to it, and packets from these connections don't match any existing state or rule and are silenty dropped. ok phessler@ henning@ claudio@ dlg@
2014-01-24sort the SHA256 fileTheo de Raadt
2014-01-19Extend the initial pf ruleset to explicitly allow dhcp / bootp and dhcpv6.Claudio Jeker
Our dhclient only uses the bpf tap for broadcast packets (which bypass pf) but lease renewals will use a regular socket and are blocked without this change. Rules are written so that accidential forwarding of packets is not possible. Diff from brad@, OK henning@, benno@, mikeb@
2014-01-12Directories updates for freetype 2.5.2Matthieu Herrb
2014-01-12crank to 5.5betaTheo de Raadt
2014-01-11test pkg key for during the 5.5-beta sequenceChristian Weisgerber
2014-01-11test fw key for during the 5.5-beta sequenceStuart Henderson
2014-01-11test key for during the 5.5-beta sequenceTheo de Raadt
2014-01-10Remove unnecessary rc_post from rc.d/nsd.Stuart Henderson
It was there to try and ensure that failure was reported if nsd stopped shortly after startup (as it used to do if the address was in use, etc), but this is no longer the case with nsd 4 which returns a failure at startup in these cases, and having it there breaks properly printing "(ok)" when stopping.
2014-01-10be a bit more carefulTheo de Raadt
2014-01-10be forceful with removing the SHA256 fileTheo de Raadt
2014-01-10a new key. Once again, this is still testing time.Theo de Raadt
2014-01-09Add DHCPv6.Brad Smith
ok deraadt@
2014-01-09Install our third key. NOTE that this is a TEST KEY for use as we improveStuart Henderson
our processes. requested by espie@
2014-01-09remove the SHA256 file as soon as we start creating setsTheo de Raadt
2014-01-09Install our second key. NOTE that this is a TEST KEY for use as we improveMarc Espie
our processes. prodded by deraadt@
2014-01-09install signify keysTheo de Raadt
2014-01-09Install our first key. NOTE that this is a TEST KEY for use as we improveTheo de Raadt
our processes. ok tedu
2014-01-08create the /etc/signify directoryTheo de Raadt
2014-01-06Rework the setup of the bootable installation cd-rom (installXX.iso) toMiod Vallat
contain both a 2048-byte sector ffs filesystem, and a 512-byte volume header, so that the IP27 boot magic^Wuglyness recently added to the boot-only cd-rom (cdXX.iso) can be applied as well. The full-blown installation iso can now boot on IP27/28/30/32/35.
2014-01-05syncTheo de Raadt
2014-01-05We need /dev/random on the install mediaTheo de Raadt
discussed with rpe and halex
2014-01-03Use kern.securelevel to determine whether or not we are in singleTodd C. Miller
user mode now that init no longer raises securelevel during reboot. OK deraadt@
2013-12-28document a hack we want fixed laterTheo de Raadt
2013-12-27- add chmod of seedfile in /etcRobert Peichaer
- use its return code for single/multiuser detection ok deraadt
2013-12-27re-use random_seed in shutdown sectionRobert Peichaer
ok deraadt
2013-12-27create a seed file for the bootloader in /etc/random.seedTheo de Raadt
2013-12-27nest random_seed() contents into a single redirectionTheo de Raadt
idea from rpe
2013-12-27re-do shutdown operations. Run the scripts if we may; take down carpTheo de Raadt
unconditionally, and then do the optional powerdown discussed at length with rpe
2013-12-27/stand has not been used in decadesTheo de Raadt
ok miod
2013-12-27when forcing a re-key, might as well toss in dmesg as additional seedTheo de Raadt
material
2013-12-27all the random devices have been the same for a while; so let us avoidTheo de Raadt
being obtuse and use /dev/random
2013-12-26make absence of pkg_scripts non silent, after nits from theo and halex.Marc Espie
okay rpe@, kirby@
2013-12-18Adapt nsd(1) comment to match the default daemon_flags of the rc.d script.Antoine Jacoutot
ok sthen@
2013-12-17Run spamd-setup from within /etc/rc.d/spamd, and take $spamd_blackAlexander Hall
into consideration. Diff from Maurice Janssen, thanks! ok rpe@ giovanni@
2013-12-15remove popa3d etc tendrilsTed Unangst
2013-12-12Have df(1) in the daily output show the inodes used/free.Brad Smith
a few developers thought this was a reasonable/good idea.
2013-12-11Use a correct pexp and unbreak stop/reload. The old and wrong pexpJeremie Courreges-Anglas
in /var/run/rc.d/identd has to be manually removed. Reported by Adam Jeanguenat (avj at voyager dot 6v6 dot org). ok dcoppa@ lteo@
2013-12-10Drop the f0, f1, f2 gettytab capabilities that were used to pokeChristian Weisgerber
magic numbers into sgttyb. The "modern" replacement for f# is the set of i#, o#, c#, l# to poke magic numbers into termios. ok miod@
2013-12-04Stop security(8) whining about /etc/nsd.conf which has moved, pointed outStuart Henderson
by Bjorn Ketelaars. Check that the /var/nsd/etc directory is protected instead, it may contain zone-transfer keys etc.
2013-12-01kill /var/obj which has been commented out since -r1.1 in '95.Jasper Lievisse Adriaanse
ok deraadt@
2013-12-01Copy the bootblocks to the release directory and sha256 it; spotted byMiod Vallat
aoyama@