Age | Commit message (Collapse) | Author | |
---|---|---|---|
2014-02-24 | revert previous | Marc Espie | |
has fun effects on some manpages under some circumstances, as found out by sthen@: the gindent manpage looks like shit when seen with that new default man.conf on an uft8 terminal, e.g., quotes combine with the previous character to yield accented letters for no reason. this should be handled calmly after release, not rushed in at the last minute (okay deraadt@) | |||
2014-02-24 | default to locale awareness. safer than changing internal mandoc defaults. | Ted Unangst | |
2014-02-19 | Ignore blank characters at the end of ${pkg_scripts} in order | Ingo Schwarze | |
to refrain from trying to execute /etc/rc.d/ in that case. Problem noticed by jasper@. Opinions on this patch vary: "much nicer, ok" sthen@ "good god, what horrible shell voodoo, ok" ajacoutot@ | |||
2014-02-15 | Show the exemplary rules for accepting default routes for IPv6 as well. | pelikan | |
ok sthen florian | |||
2014-02-14 | regen to add audio* | Alexandre Ratchov | |
2014-02-14 | readd audio devices, from david@, thanks! | Alexandre Ratchov | |
2014-02-03 | Build and document bsd.mp on alpha. | Miod Vallat | |
2014-01-25 | delete junk file | Theo de Raadt | |
2014-01-25 | Change the default PF policy to "block return", including x11 as | Darren Tucker | |
suggested by naddy@. This solves the problem that occurs when a server crashes or is hard booted and comes back up without tearing down any connections to it, and packets from these connections don't match any existing state or rule and are silenty dropped. ok phessler@ henning@ claudio@ dlg@ | |||
2014-01-24 | sort the SHA256 file | Theo de Raadt | |
2014-01-19 | Extend the initial pf ruleset to explicitly allow dhcp / bootp and dhcpv6. | Claudio Jeker | |
Our dhclient only uses the bpf tap for broadcast packets (which bypass pf) but lease renewals will use a regular socket and are blocked without this change. Rules are written so that accidential forwarding of packets is not possible. Diff from brad@, OK henning@, benno@, mikeb@ | |||
2014-01-12 | Directories updates for freetype 2.5.2 | Matthieu Herrb | |
2014-01-12 | crank to 5.5beta | Theo de Raadt | |
2014-01-11 | test pkg key for during the 5.5-beta sequence | Christian Weisgerber | |
2014-01-11 | test fw key for during the 5.5-beta sequence | Stuart Henderson | |
2014-01-11 | test key for during the 5.5-beta sequence | Theo de Raadt | |
2014-01-10 | Remove unnecessary rc_post from rc.d/nsd. | Stuart Henderson | |
It was there to try and ensure that failure was reported if nsd stopped shortly after startup (as it used to do if the address was in use, etc), but this is no longer the case with nsd 4 which returns a failure at startup in these cases, and having it there breaks properly printing "(ok)" when stopping. | |||
2014-01-10 | be a bit more careful | Theo de Raadt | |
2014-01-10 | be forceful with removing the SHA256 file | Theo de Raadt | |
2014-01-10 | a new key. Once again, this is still testing time. | Theo de Raadt | |
2014-01-09 | Add DHCPv6. | Brad Smith | |
ok deraadt@ | |||
2014-01-09 | Install our third key. NOTE that this is a TEST KEY for use as we improve | Stuart Henderson | |
our processes. requested by espie@ | |||
2014-01-09 | remove the SHA256 file as soon as we start creating sets | Theo de Raadt | |
2014-01-09 | Install our second key. NOTE that this is a TEST KEY for use as we improve | Marc Espie | |
our processes. prodded by deraadt@ | |||
2014-01-09 | install signify keys | Theo de Raadt | |
2014-01-09 | Install our first key. NOTE that this is a TEST KEY for use as we improve | Theo de Raadt | |
our processes. ok tedu | |||
2014-01-08 | create the /etc/signify directory | Theo de Raadt | |
2014-01-06 | Rework the setup of the bootable installation cd-rom (installXX.iso) to | Miod Vallat | |
contain both a 2048-byte sector ffs filesystem, and a 512-byte volume header, so that the IP27 boot magic^Wuglyness recently added to the boot-only cd-rom (cdXX.iso) can be applied as well. The full-blown installation iso can now boot on IP27/28/30/32/35. | |||
2014-01-05 | sync | Theo de Raadt | |
2014-01-05 | We need /dev/random on the install media | Theo de Raadt | |
discussed with rpe and halex | |||
2014-01-03 | Use kern.securelevel to determine whether or not we are in single | Todd C. Miller | |
user mode now that init no longer raises securelevel during reboot. OK deraadt@ | |||
2013-12-28 | document a hack we want fixed later | Theo de Raadt | |
2013-12-27 | - add chmod of seedfile in /etc | Robert Peichaer | |
- use its return code for single/multiuser detection ok deraadt | |||
2013-12-27 | re-use random_seed in shutdown section | Robert Peichaer | |
ok deraadt | |||
2013-12-27 | create a seed file for the bootloader in /etc/random.seed | Theo de Raadt | |
2013-12-27 | nest random_seed() contents into a single redirection | Theo de Raadt | |
idea from rpe | |||
2013-12-27 | re-do shutdown operations. Run the scripts if we may; take down carp | Theo de Raadt | |
unconditionally, and then do the optional powerdown discussed at length with rpe | |||
2013-12-27 | /stand has not been used in decades | Theo de Raadt | |
ok miod | |||
2013-12-27 | when forcing a re-key, might as well toss in dmesg as additional seed | Theo de Raadt | |
material | |||
2013-12-27 | all the random devices have been the same for a while; so let us avoid | Theo de Raadt | |
being obtuse and use /dev/random | |||
2013-12-26 | make absence of pkg_scripts non silent, after nits from theo and halex. | Marc Espie | |
okay rpe@, kirby@ | |||
2013-12-18 | Adapt nsd(1) comment to match the default daemon_flags of the rc.d script. | Antoine Jacoutot | |
ok sthen@ | |||
2013-12-17 | Run spamd-setup from within /etc/rc.d/spamd, and take $spamd_black | Alexander Hall | |
into consideration. Diff from Maurice Janssen, thanks! ok rpe@ giovanni@ | |||
2013-12-15 | remove popa3d etc tendrils | Ted Unangst | |
2013-12-12 | Have df(1) in the daily output show the inodes used/free. | Brad Smith | |
a few developers thought this was a reasonable/good idea. | |||
2013-12-11 | Use a correct pexp and unbreak stop/reload. The old and wrong pexp | Jeremie Courreges-Anglas | |
in /var/run/rc.d/identd has to be manually removed. Reported by Adam Jeanguenat (avj at voyager dot 6v6 dot org). ok dcoppa@ lteo@ | |||
2013-12-10 | Drop the f0, f1, f2 gettytab capabilities that were used to poke | Christian Weisgerber | |
magic numbers into sgttyb. The "modern" replacement for f# is the set of i#, o#, c#, l# to poke magic numbers into termios. ok miod@ | |||
2013-12-04 | Stop security(8) whining about /etc/nsd.conf which has moved, pointed out | Stuart Henderson | |
by Bjorn Ketelaars. Check that the /var/nsd/etc directory is protected instead, it may contain zone-transfer keys etc. | |||
2013-12-01 | kill /var/obj which has been commented out since -r1.1 in '95. | Jasper Lievisse Adriaanse | |
ok deraadt@ | |||
2013-12-01 | Copy the bootblocks to the release directory and sha256 it; spotted by | Miod Vallat | |
aoyama@ |