summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2016-10-05De-escalate to an unprivileged users during 'make build' and 'make release'.Martin Natano
- If you start make build as root, everything will be run as root. Nothing new here. New is, that you can set BUILDUSER=somebody and the unprived parts will be run as somebody. - If you start make build with sudo, the unprived parts will be run as the real user (meaning YOU). You can still set BUILDUSER=somebody and the uprived parts will run as somebody. - If you start make build as a normal user it will error out. "I'm sorry Dave." Note that DESTDIR must be on partition with the noperm flag set for make release to work correctly as an unprivileged user. idea and ok deraadt input and ok tb ratchov millert rpe, halex and probably others where part of the conversation to make this happen, thanks!
2016-10-05Add support for enhanced networking configuration and virtual switches.Reyk Floeter
See vm.conf(5) for more details. OK mlarkin@
2016-10-04stop supporting SUDO builds. Something better is coming, so let'sTheo de Raadt
align everyone who is using SUDO builds towards the new strategy. ok natano
2016-09-27Run acpidump(8) at system startup and store ACPI tables in theRobert Peichaer
/var/db/acpi directory. Later sendbug(1) will use this data in bug reports. That directory is created by mtree. idea from and OK deraadt OK kettenis
2016-09-27Delay switch(4) interface start up so it can attach virtual interfacesRafael Zalamena
like vether(4). nits from and ok benno@, phessler@
2016-09-27Add unprivileged user for traceroute.Florian Obser
Input deraadt@ OK benno@, sthen@
2016-09-26+ _pingOtto Moerbeek
2016-09-26Add _ping user/group.Florian Obser
OK natano on a previous diff which used a different uid/gid. naddy@ pointed out that uid/gid was already taken on "important" systems. Turns out we cannot easily recycle freed up uids/gids so settle on 51.
2016-09-26Add /etc/acme-client.conf to mtree/special and changelist.Antoine Jacoutot
ok deraadt@ sthen@ florian@
2016-09-21the account key(s) live in /etc/acme; OK benno@Florian Obser
2016-09-18fix buildTheo de Raadt
2016-09-18add a config file parser to acme-client (unused at the moment, so thatSebastian Benoit
it can be worked on in the tree). ok florian@ deraadt@
2016-09-17pathnames for cert and key files need to be quoted.T.J. Townsend
reported by brynet
2016-09-17add example certificate and key files generated with acme-client.T.J. Townsend
ok florian
2016-09-14Do the same with less code.Robert Peichaer
OK halex
2016-09-13proxy uid/gid was split up for seperate purposes; it can go away now.Theo de Raadt
2016-09-11syncTheo de Raadt
2016-09-11cua/tty nodes only need group dialer, the initial uid does notTheo de Raadt
matter much -- and "uucp" is just stupid in 2016. ok rpe
2016-09-11Set owner for /etc/{passwd,pwd.db,spwd.db} and /var/sysmerge/etcsum.Martin Natano
from rpe
2016-09-11Add a few directories missed in the pastMatthieu Herrb
2016-09-11The /etc/{localtime,rmt}, /var/tmp and /sys symlinks and the etc tarballMartin Natano
should be owned by root. ok deraadt
2016-09-11syncTheo de Raadt
2016-09-11extra spacesTheo de Raadt
2016-09-10Unbreak ksh.kshrc by using a MI way of finding out the console device name.Robert Peichaer
Found by landry OK deraadt
2016-09-10Simplify setting the USER and UID variables.Robert Peichaer
While here, convert `` to $(). OK halex
2016-09-10Remove remnants of rlogin, it's long gone (2002).Robert Peichaer
OK halex
2016-09-10IdentationRobert Peichaer
OK halex, krw
2016-09-09print a clear error message when not ran as root instead of just fallingJasper Lievisse Adriaanse
through and try whatever it can do with the invoking user's perms feedback/ok aja@ rpe@
2016-09-09Convert [] to ksh style [[]] tests.Robert Peichaer
Based on a diff from Anthony Coulter. OK krw, halex
2016-09-09Resurrect the detection of the console device that got lost a long time ago.Robert Peichaer
OK tb
2016-09-08sync after /dev/sound* removalAlexandre Ratchov
2016-09-08Remove /dev/sound* as they are not used and they are identicalAlexandre Ratchov
to /dev/audio*. No port is using them (thanks to sthen@ for checking). ok sthen@
2016-09-07remove unused MD man5 dirs; ok schwarzeJason McIntyre
while here, remove the comment for man6, according to ingo's system...
2016-09-07Introduce an _rc_check_name() function to check the input script name so thatAntoine Jacoutot
we don't end up with cryptic error messages. Regex help from rpe@ Issue reported by Anthony Coulter in rcctl(8), but better fix the root cause. Also clarify the mage page that rc.d script name must follow ksh(1) variable naming. ok robert@ sthen@
2016-09-07restore commenting scheme:Ingo Schwarze
before descending, after ascending, but not around single-subdir dirs
2016-09-04regenChristian Weisgerber
2016-09-04Remove the tape block device nodes.Christian Weisgerber
While here, also remove two forgotten descriptions for long obsolete devices.
2016-09-04bump the random timeout to taking % 2048 sec to avoid modulus biasTheo Buehler
ok phessler
2016-09-03update pf.os for larger wscale by defaultStuart Henderson
2016-09-03Add /var/syspatch to mtree(8).Antoine Jacoutot
OK many
2016-09-03Retire zaurus, as it hasn't made the EABI jump and will be permanently brokenPhilip Guenther
shortly when we use the hardware thread register in userland
2016-09-03Add doas.conf example configuration file.Paul Irofti
Discussed with and loved by many. OK tedu@, tom@, deraadt@.
2016-09-02syncKazuya Goda
2016-09-02Add switch(4) cdev entryKazuya Goda
ok deraadt@ yasuoka@ reyk@
2016-09-02move links from http to https://www.openbsd.org/Theo Buehler
ok beck
2016-09-02syncStuart Henderson
2016-09-01remove sparc piecesTheo de Raadt
2016-08-31create acme-client directoriesFlorian Obser
2016-08-31use tab.Antoine Jacoutot
2016-08-23syncOkan Demirmen
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-02 03:38:50 +0000