summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2019-07-15Add tls-cert-bundle and example of using a DNS-over-TLS forwarder.Darren Tucker
Note that, at this time, Unbound does not re-use TLS connections (https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4089) so the TCP and TLS handshakes will cause a disproportiate increase in latency compared to UDP. ok sthen@ florian@
2019-07-04add server time.cloudflare.com.Theo de Raadt
- Cloudflare have very good adjacency (if PCH did anycast ntp, we'd use it) - As ntp input, it is great they don't leapsmear - Not all their nodes do ntp, hope they succeed at scaling that up - ntpd constrains (un-auth) ntp packets within a TLS constraint window so there is no downside (unlike pool.ntp entries which slowly decay but that's a story for another commit..) ok otto
2019-06-28miniroot prototype disklabels should attempt to contain accurateTheo de Raadt
prototype information (in this case, the miniroot-building code is completely lovecraft)
2019-06-19move tals to /etc, where they can be upgraded by a "sysupgrade" ifTheo de Raadt
such a circumstance ever occurs. ok job
2019-06-11regenJoshua Stein
2019-06-11make 10 wsmouse devicesJoshua Stein
for anything other than a regular old mouse, X needs to be able to directly talk to the device and newer machines can have all kinds of touchscreens, pen devices, touchpads, etc. ok deraadt
2019-06-08grow sparc64 miniroot a littleTheo de Raadt
2019-06-07Switch to v02 api url.Florian Obser
2019-06-02spelling/grammar fixes; from larry hynesJason McIntyre
2019-05-27add vulkan dirsJonathan Gray
2019-05-12Stop generating keys for nsd-control(8). These are unused since nsd wasTim van der Molen
switched to using a local control socket by default. OK florian@ sthen@
2019-05-12Add first drm render node to list of devices to change when logging inJonathan Gray
on ttyC0. While here add drm0 to loongson and add the complete set of wscons and drm devices to arm64. ok kettenis@
2019-05-11socppc makes an extended visit to the bigbucket.Theo de Raadt
ok kettenis
2019-05-10few can remember what apm wasSebastian Benoit
ok deraadt@
2019-05-10ld.so boot cleanup support:Philip Guenther
- put functions and data which are only used before calling the executable's start function into their own page-aligned segments for unmapping (only done on amd64, arm64, armv7, powerpc, and sparc64 so far) - pass .init_array and .preinit_array functions an addition argument which is a callback to get a structure which includes a function that frees the boot text and data - sometimes delay doing RELRO processing: for a shared-object marked DF_1_INITFIRST do it after the object's .init_array, for the executable do it after the .preinit_array - improve test-ld.so to link against libpthread and trigger its initialization late libc changes to use this will come later ok kettenis@
2019-05-10syncStuart Henderson
2019-05-10vmm(4) was removed from share/man/man8/man8.i386/MAKEDEV.8 but not theStuart Henderson
input file or MAKEDEV script itself; sync up the input file. req by jmc@
2019-05-02pbuild class: bump datasize and maxproc; these should be sufficient forAntoine Jacoutot
running a ports bulk without bumping anything else (matches what's on amd64.ports and exopi) ok sthen@ phessler@ espie@ naddy@
2019-04-26no more libFSMatthieu Herrb
2019-04-26Import regenerated moduli.Darren Tucker
2019-04-26we stopped making floppies a while agoTheo de Raadt
2019-04-1463 keys no longer usefulTheo de Raadt
2019-04-14syncJonathan Gray
2019-04-14create drm render node devicesJonathan Gray
2019-04-05Fix hack(6).Anthony J. Bentley
- Write savegames and scorefiles to the current directory instead of /var - Save oc_name and oc_descr alongside oc_uname in all situations - When a levitation potion times out, explicitly float down These patches were contributed last year by "tonypony76"; thanks! ok deraadt@, with added enthusiasm from tedu@
2019-04-01revert previous. ifconfig errors may be interesting... to be revisited.Ted Unangst
2019-04-01Update radiusd.conf(5) man page and its example to recommend toYASUOKA Masahiko
surround words with double quote. Also fix a bug in the man page that module argument was missing for "module set".
2019-04-01florian noticed unused etc/ssl/lib directory. jsing notes a releaseTheo de Raadt
near 0.9.7a mistakenly created this incorrect directory. This was mimicked into our mtree framework in 1998, where it survived for over 20 years. ok jsing
2019-04-01catch/hide errors from ifconfig carp in case there is no carp.Ted Unangst
ok deraadt
2019-03-25add syspatch signify key for 6.6Robert Nagy
2019-03-21Start in the daemon configured routing table and not in the one we're currentlyAntoine Jacoutot
in. This fixes the case where one would be in a non default rdomain shell then run an rdomain 0 rc.d daemon. reported by YASUOKA Masahiko and Pierre Emeriaud ok sthen@ claudio@ benno@
2019-03-19Remove old X proto documentation directories.Matthieu Herrb
2019-03-17Grow sgi ISO/FS media space to cope with the clang growth.Theo de Raadt
2019-03-12Almost all terminals now support hardware tabs so default to OXTABSNicholas Marriott
off. This makes three changes: adds the ht capability to the standard lines in gettytab(5); removes OXTABS from TTYDEF_OFLAG in ttydefaults.h (the defaults used by pty(4) - diff from martijn); and only sets OXTABS on terminals which lack hts and tbc in tset(1) (from Thomas Dickey upstream). Addresses problems reported by tedu. ok millert
2019-03-05install*.{fs,iso} get larger due to clang library changesTheo de Raadt
2019-02-26crank to 6.5-betaTheo de Raadt
2019-02-24Remove -S from install commandskn
As of usr.bin/xinstall/install.c revision 1.68, -S is a no-op and install(1) will always create files safely, thus clean the option usage from the tree. Diff from Lauri Tirkkonen <lotheac at iki dot fi>, thanks.
2019-02-19Simplify NFS check in reorder_libs()kn
Loop over df(1)'s output directly, ensure the resulting list of block devices is unique to avoid later duplicity checks and redundant mount(8) invocations. This allows direct bail out on invalid types and simpler saving for later remount. OK deraadt
2019-02-19sync staff datasize-cur with defaultJonathan Gray
ok deraadt@
2019-02-11We no longer need /etc/unwindFlorian Obser
OK sthen
2019-02-11Since the new trust anchor format no longer contains constantlyFlorian Obser
changing timestamps we can track it in /etc/changelist. OK sthen
2019-02-10Revert previous. requested by deraadt@Matthieu Herrb
2019-02-10Remove old X proto documentation directoriesMatthieu Herrb
2019-02-10crank limits because of mesaTheo de Raadt
2019-02-07No need to run unbound-anchor anymore. Unwind(8) handles the bootstrapFlorian Obser
correctly itself now. At leat considering the end of life times of OpenBSD releases and the speed at which the root key signing key (KSK) rolls. On the other hand, unbound-anchor assumes a certain network quality which we cannot guarantee in places where we want to run unwind(8). This in turn can lead to unbound-anchor stalling the boot process.
2019-02-056.6 firmware keyStuart Henderson
2019-02-056.6 packages keyChristian Weisgerber
2019-02-05Add an example unwind.conf.Florian Obser
Note that unwind(8) works without a config file in many (most?) cases. This provides an example on how to use the captive portal detection feature. Input benno Input & OK sthen
2019-02-05sets grew a little, install*.* need to alsoTheo de Raadt
2019-02-03add 6.6 base keyTheo de Raadt