Age | Commit message (Collapse) | Author | |
---|---|---|---|
2015-11-10 | sync | Stuart Henderson | |
2015-11-10 | remove stray { } | Stuart Henderson | |
2015-11-10 | sync | Stuart Henderson | |
2015-11-10 | add /dev/vmm, req'd by and ok mlarkin@ | Stuart Henderson | |
2015-11-10 | Fix typos in comments | Tim van der Molen | |
2015-11-10 | With ikectl now requiring ca specific sections not present in the | Jonathan Gray | |
general openssl cnf files install the ikeca.cnf file. ok sthen@ requested by reyk@ | |||
2015-11-09 | Add user "_vmd" for forthcoming vmd daemon | Mike Larkin | |
ok deraadt@ | |||
2015-11-05 | After removing National Language Support (NLS) from base, stop | Alexander Bluhm | |
creating the directory /usr/share/nls. Having a non-existing default path in catopen(3) does not make sense, so remove it. If the user does not specify a NLS path, better fail early than fail because of an empty directory. Remove path form hier(7). OK stsp@ schwarze@ jmc@ | |||
2015-11-01 | Start the rework of the /etc/netstart shell script. | Robert Peichaer | |
General changes: - apply a similar 'style' as used in the installer scripts - improve comments to be more to the point, remove where code is obvious - document usage of functions if they have arguments - rename variables where it improves readability - replace really old-school shell code with more contemporary idioms Other changes: - No need to care about "autoboot" because netstart doesn't inherit the positional parameters from /etc/rc anymore. /etc/rc executes netstart instead of sourcing it since r1.439. - Use simpler for-loop to process list of interfaces with ifstart. OK halex@ | |||
2015-11-01 | A missed backticks to $() conversion. | Robert Peichaer | |
OK krw@ | |||
2015-10-26 | The hostname variable is not used since r1.99. Remove it and use | Robert Peichaer | |
stripcom() output directly with the hostname command. OK deraadt@ krw@ | |||
2015-10-23 | ypcipher isn't supported any more - it was already removed from login.conf(5) | Stuart Henderson | |
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well. ok millert@ | |||
2015-10-23 | netstart bits for tap(4) | Claudio Jeker | |
2015-10-23 | Sync (after tap addition) | Claudio Jeker | |
2015-10-23 | MAKEDEV bits for tap(4) | Claudio Jeker | |
OK dlg@ mpi@ | |||
2015-10-23 | add BUILDINFO file. currently contains a timestamp. ok deraadt | Ted Unangst | |
2015-10-21 | add missing rcsid | Gleydson Soares | |
ok renato@ | |||
2015-10-21 | Remove Diffie-Hellman moduli entries below 2048. | Doug Hogan | |
OpenSSH requires a 2048 minimum for DH in the client and server. input and ok sthen@ ok dtucker@, djm@ | |||
2015-10-19 | Delete the empty example file "ftpchroot"; no example is needed. | Ingo Schwarze | |
Move the one useful bit of information contained in the file ("one user name per line") to the ftpd(8) manual page where it belongs. OK deraadt@ sthen@ | |||
2015-10-19 | Update etc/mtree/BSD.x11.dist (freetype-2.6.1) | David Coppa | |
2015-10-18 | Finish first round of rework of the rc script. | Robert Peichaer | |
OK krw@ halex@ | |||
2015-10-18 | Forcibly delete /var/run/ypbind.lock to prepare for the worst cases. | Theo de Raadt | |
ok aja | |||
2015-10-16 | Missing local. | Antoine Jacoutot | |
ok schwarze@ | |||
2015-10-16 | The hosts.lpd examples file does not contain a single example. | Ingo Schwarze | |
The file format is so simple that no example is needed. All relevant documentation is already available from the proper place, which is the lpd(8) manual. Consequently, delete the empty file. OK millert@ dcoppa@ beck@ deraadt@ | |||
2015-10-15 | no mail for _rebound. deraadt | Ted Unangst | |
2015-10-15 | _rebound user and group (52) | Ted Unangst | |
2015-10-14 | Allow group wheel to read the mail log. OK gilles@ sthen@ | Todd C. Miller | |
2015-10-10 | Fix /var/spool/smtpd/offline ownership and mode. | Antoine Jacoutot | |
ok gilles@ | |||
2015-10-04 | add _eigrpd user/group | Theo de Raadt | |
2015-10-03 | Enable eigrpd(8) and eigrpctl(8) in the builds | Renato Westphal | |
ok deraadt@ | |||
2015-09-29 | Besides the usual style changes: | Robert Peichaer | |
- verify that kbd is executable and kbdtype is not empty - use safer 'print --' to pipe the initial pf ruleset to pfctl - simplify the ipsecctl if-block Feedback and OK halex@ OK krw@ | |||
2015-09-27 | Don't print output when setting autoconf on interfaces. Suggested by deraadt, | Stuart Henderson | |
ok florian@ rpe@ | |||
2015-09-27 | Add IP26 kernels and boot blocks to the installation media. | Miod Vallat | |
2015-09-27 | add Ed25519 SSH host key; ok deraadt@ | Christian Weisgerber | |
2015-09-20 | Enable IP26 builds. | Miod Vallat | |
2015-09-13 | Rename __sysctl syscall to just sysctl, as the userland wrapper is no longer | Philip Guenther | |
necessary ok deraadt@ jsing@ | |||
2015-09-13 | only print the "IPv6 autoconf" line if there are interfaces to configure | Stuart Henderson | |
feedback/ok rpe | |||
2015-09-13 | - FOO=bar; export FOO -> export FOO=bar | Robert Peichaer | |
- run domainname only with a non-empty /etc/defaultdomain file - Make single-user if-block more intuitive, which also matches better what the comment actually says OK halex@, krw@ on a similar diff | |||
2015-09-13 | Remove setup_X_sockets(): | Robert Peichaer | |
The creation of Unix sockets directories in /tmp for X happens right after pruning /tmp. So the whole dance of checking for their existence, ownership or permissions is not necessary. It's safe to just create them with the right permissions if X is installed. Changes to do_fsck(): Remove the _flags variable and pass flags to fsck directly with "$@". Feedback and OK halex@ OK krw@ on a similar diff | |||
2015-09-12 | Provide an ftpproxy6 rc script. ftp-proxy can only open one listening socket | Stuart Henderson | |
at a time, so a second instance of the daemon is required. OK mikeb stsp ajacoutot | |||
2015-09-11 | the parser doesn't accept "inet" here; pointed out by Denis Fondras on misc | Stuart Henderson | |
2015-09-11 | When ARIN prepared for the IPv4-pocolypse, they put aside a /10 for | Peter Hessler | |
**smaller than /24 allocations**. Our default ruleset will not allow those, even though they will be for various pieces of critical dual-stack infrastructure to help IPv6-only systems survive. This adds a default rule to allow those blocks. With it, I see the RIPE announced test blocks on our AMS-IX peers. ARIN announced this block and policy at, enjoy https://www.arin.net/announcements/2014/20140130.html OK benno@, claudio@, sthen@, florian@ | |||
2015-09-11 | Set "inet6 autoconf" individually on interfaces that have rtsol set in | Stuart Henderson | |
hostname.if, previously netstart tried to configure them all at once ("ifconfig if0 if1 if2 inet6 autoconf"). From Delan Azabani, ok phessler@ | |||
2015-09-07 | sync to BOOTIA32.EFI change | Theo de Raadt | |
2015-09-02 | copy from mdec to reldir | Theo de Raadt | |
2015-09-02 | ship BOOTX64.EFI BOOTX86.EFI | Theo de Raadt | |
2015-08-29 | handle miniroot | Theo de Raadt | |
2015-08-28 | fakeramdisk entry for miniroot | Theo de Raadt | |
2015-08-28 | Changes for start_daemon(): | Robert Peichaer | |
- use more descriptive variable name Changes for make_keys(): - use variables for file paths - key -> keys in message - take into account the return codes of isakmpd private *and* public key generation OK krw@ halex@ | |||
2015-08-27 | Update: add include/libdrm, sort include/EGL, add share/util-macros | Matthieu Herrb | |