summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2015-06-23fix emacs pkg namesGiovanni Bechis
2015-06-21syncTheo de Raadt
2015-06-215.9 base keyTheo de Raadt
2015-06-19add 5.9 packages keyChristian Weisgerber
2015-06-18I'm afraid it will be a sunday.Miod Vallat
2015-06-18add 5.9 firmware keyStuart Henderson
2015-06-17crank to 5.8-betaTheo de Raadt
2015-06-17Really make daemon_class read-only; it's set to "daemon" of a matchingAntoine Jacoutot
login class.
2015-06-16Typos in comments; Ville ValkonenMiod Vallat
2015-06-13add miniroot to MDEXTJasper Lievisse Adriaanse
2015-06-09miniroot for octeon; tested on edgerouter lite with local usb storageJasper Lievisse Adriaanse
ok jmatthew@ miod@
2015-06-06Allow rtsol keyword in hostname.if(5) with net.inet6.ip6.forwarding=1.Florian Obser
"inet6 autoconf" was working before and rtsol should behave the same. OK phessler
2015-06-02Rename the imx miniroot to nitrogen as it creates "6x_bootscript".Jonathan Gray
Add a miniroot for the CuBox-i which needs u-boot at a particular offset in the sd image to boot. Based on changes made by Patrick Wildt in bitrig.
2015-05-28Remove 1k bit groups. ok deraadt@, markus@Darren Tucker
2015-05-26Create aliases.db from the installed aliases file, so we get the correctChristian Weisgerber
owner and group. Reported by Mark Patruck. ok deraadt@ miod@
2015-05-22Update DH groupsDarren Tucker
2015-05-22Remove 6k and 8k bit moduli fragments since they are now kept inDarren Tucker
usr.bin/ssh/moduli-gen.
2015-05-20Now all the socs use the same va entry point and don't have anyJonathan Gray
conflicting symbols we can combine the configs. Multiple umg files are still required however. The bsd.umg target in the kernel is replaced by targets for bsd.IMX.umg, bsd.OMAP.umg and bsd.SUNXI.umg.
2015-05-19use the same va entry point on all armv7 socsJonathan Gray
Similiar changes were made in bitrig by Patrick Wildt. As part of this change the physical load address for imx and sunxi have changed. Any u-boot settings that include it will need to be modified. imx: 0x10800000 -> 0x10300000 sunxi: 0x40800000 -> 0x40300000 Tested by bmercer, canacar and myself. ok bmercer@
2015-05-18Change spamd to use divert-to instead of rdr-to.Reyk Floeter
divert-to has many advantages over rdr-to for proxies. For example, it is much easier to use, requires less code, does not depend on /dev/pf, works in-band without the asynchronous lookup (DIOCNATLOOK ioctl), saves us from additional port allocations by the rdr/NAT code, and even avoids potential collisions and race conditions that could theoretically happen with the lookup. Heads up: users will have to update their spamd PF rules from rdr-to to divert-to. spamd now also listens to 127.0.0.1 instead of "any" (0.0.0.0) by default which should be fine with most setups but has to be considered for some special configurations. Based on a diff is almost two years old but got delayed several times ... beck@: "now is the time to get it in" :) Tested by many With help from okan@ OK okan@ beck@ millert@
2015-05-18Put ntpd.conf in MUTABLE so it's installed with 0644 mode.Antoine Jacoutot
discussed by deraadt@
2015-05-18enable ntpd by default at install time. We use pools and a reliableTheo de Raadt
constraint to keep them in check. in the worst case of being on a dark net, nothing changes. this is being enabled by default to allow gathering of more operational information from users. and if the operational heuristics in ntpd can be suitable refined, this may stay the default into the future. if not, ntpd will become even more awesome along the way. with reyk rpe
2015-05-18Simplify example constraints URL to reduce load on the server side.Darren Tucker
ok henning@, reyk@
2015-05-04fix numbers for pppx, vscsi and diskmapJonathan Matthew
ok dlg@
2015-05-04Remove comments about default daemon_flags; most are empty, thoseIngo Schwarze
that aren't are redundant because they can be found in the rc.d(8) scripts themselves, and they risk getting out of sync. While here, sort the daemons alphabetically. No functional change. Triggered by a much smaller nameserver-only patch from stephan@. OK ajacoutot@ rpe@ stephan@ and looks good to sthen@.
2015-05-02No more pf_rules ipsec_rules.Antoine Jacoutot
2015-05-02Drop pf_rules and ipsec_rules from rc.conf(5); it shouldn't have been madeAntoine Jacoutot
tweakable: there's no real point and these files support the 'include' option so one can always get its config from whatever path... especially useful when testing a new ruleset. man page inputs from schwarze@ ok halex@ schwarze@ rpe@ deraadt@
2015-04-30Add smtpd(8) spool directories so that they are registered as part of base.Antoine Jacoutot
ok henning@ gilles@ deraadt@
2015-04-29Check arguments before eval so we don't end up with a cryptic error message.Antoine Jacoutot
reported by jasper@ While here: _rc_is_supported() -> _rc_not_supported() - saves a fork - reduces triple negation to double negation in _rc_not_supported() - simplifie condition for rc_restart=NO from schwarze@ ok jasper@ schwarze@
2015-04-29VERBOSESTATUS or no VERBOSESTATUS, failed or missing dumps are stillAlexander Hall
worth noting "go ahead" schwarze@
2015-04-27Simplify remote(5) example file and remove stuff not supported by cu(1).Nicholas Marriott
some tweaks from sobrado@, ok deraadt@
2015-04-27Add a _file user and use for privsep, ok deraadtNicholas Marriott
2015-04-15add the include dir for libepoxyJonathan Gray
2015-04-12Switch example NSD config to splitting master and slave zones into differentStuart Henderson
subdirectories (/var/nsd/zones/{master,slave}) and create these in mtree. Nearly everybody that uses NSD for slave zones that I talked to already has this layout. Bikesh^Wdiscussed with ajacoutot florian millert and others. ok ajacoutot@ florian@ phessler@ claudio@ jung@
2015-04-03Add ddb.log example; OK halex@Todd C. Miller
2015-03-31For consistency with the diff subcommand, add rdiff -uChristian Weisgerber
(-N is always implied and -p isn't available.) ok guenther@, sthen@
2015-03-28_rc_err(): only display error message if there's an actual one.Antoine Jacoutot
Remove an exit() statement that could never be reached.
2015-03-27Actually use the new man.conf(5) "output" directive.Ingo Schwarze
Additional functionality, yet minus 45 lines of code.
2015-03-27Move man.conf from /etc to /etc/examples, deleting what's no longer supported.Ingo Schwarze
Discussed with many and OK ajacoutot@.
2015-03-11syncTheo de Raadt
2015-03-11openprom, just like eeprom; ok miodTheo de Raadt
2015-03-11syncTheo de Raadt
2015-03-11eeprom(8) is only run by root now, so no need for kmem groupTheo de Raadt
ok miod
2015-03-11'rc.firstime' -> 'rc.firsttime' in comment.Kenneth R Westerback
Diff from Navan Carson via tech@
2015-03-10Set verbosity to 1 (the default is 0) so we log incoming notifiesTodd C. Miller
and zone xfers. OK florian@ deraadt@
2015-03-10Disable db file. It is believed to be a saner default for the commonFlorian Obser
use case. sthen@ noticed a problem with missing records on shutdown. OK sthen@
2015-03-06fix pkgnames versionGiovanni Bechis
ok deraadt@
2015-03-05syncKenji Aoyama
ok deraadt@
2015-03-05Add com(4) and wd(4) to use them on PCMCIA.Kenji Aoyama
ok deraadt@
2015-02-18Remove old cruft, that make no sense at all on OpenBSD.Robert Peichaer
- comments relevant to other brands of UNIX - the no-op KSH_VERSION case-block, we only have pdksh - the case-block for setting aliases based on UNIX brand together with a comment that falsely encourages to modify this file instead of putting stuff in $HOME/.kshrc OK krw@ halex@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-29 01:40:53 +0000