summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2015-11-10syncStuart Henderson
2015-11-10remove stray { }Stuart Henderson
2015-11-10syncStuart Henderson
2015-11-10add /dev/vmm, req'd by and ok mlarkin@Stuart Henderson
2015-11-10Fix typos in commentsTim van der Molen
2015-11-10With ikectl now requiring ca specific sections not present in theJonathan Gray
general openssl cnf files install the ikeca.cnf file. ok sthen@ requested by reyk@
2015-11-09Add user "_vmd" for forthcoming vmd daemonMike Larkin
ok deraadt@
2015-11-05After removing National Language Support (NLS) from base, stopAlexander Bluhm
creating the directory /usr/share/nls. Having a non-existing default path in catopen(3) does not make sense, so remove it. If the user does not specify a NLS path, better fail early than fail because of an empty directory. Remove path form hier(7). OK stsp@ schwarze@ jmc@
2015-11-01Start the rework of the /etc/netstart shell script.Robert Peichaer
General changes: - apply a similar 'style' as used in the installer scripts - improve comments to be more to the point, remove where code is obvious - document usage of functions if they have arguments - rename variables where it improves readability - replace really old-school shell code with more contemporary idioms Other changes: - No need to care about "autoboot" because netstart doesn't inherit the positional parameters from /etc/rc anymore. /etc/rc executes netstart instead of sourcing it since r1.439. - Use simpler for-loop to process list of interfaces with ifstart. OK halex@
2015-11-01A missed backticks to $() conversion.Robert Peichaer
OK krw@
2015-10-26The hostname variable is not used since r1.99. Remove it and useRobert Peichaer
stripcom() output directly with the hostname command. OK deraadt@ krw@
2015-10-23ypcipher isn't supported any more - it was already removed from login.conf(5)Stuart Henderson
and pwd_gensalt.c - so remove it from the default /etc/login.conf files as well. ok millert@
2015-10-23netstart bits for tap(4)Claudio Jeker
2015-10-23Sync (after tap addition)Claudio Jeker
2015-10-23MAKEDEV bits for tap(4)Claudio Jeker
OK dlg@ mpi@
2015-10-23add BUILDINFO file. currently contains a timestamp. ok deraadtTed Unangst
2015-10-21add missing rcsidGleydson Soares
ok renato@
2015-10-21Remove Diffie-Hellman moduli entries below 2048.Doug Hogan
OpenSSH requires a 2048 minimum for DH in the client and server. input and ok sthen@ ok dtucker@, djm@
2015-10-19Delete the empty example file "ftpchroot"; no example is needed.Ingo Schwarze
Move the one useful bit of information contained in the file ("one user name per line") to the ftpd(8) manual page where it belongs. OK deraadt@ sthen@
2015-10-19Update etc/mtree/BSD.x11.dist (freetype-2.6.1)David Coppa
2015-10-18Finish first round of rework of the rc script.Robert Peichaer
OK krw@ halex@
2015-10-18Forcibly delete /var/run/ypbind.lock to prepare for the worst cases.Theo de Raadt
ok aja
2015-10-16Missing local.Antoine Jacoutot
ok schwarze@
2015-10-16The hosts.lpd examples file does not contain a single example.Ingo Schwarze
The file format is so simple that no example is needed. All relevant documentation is already available from the proper place, which is the lpd(8) manual. Consequently, delete the empty file. OK millert@ dcoppa@ beck@ deraadt@
2015-10-15no mail for _rebound. deraadtTed Unangst
2015-10-15_rebound user and group (52)Ted Unangst
2015-10-14Allow group wheel to read the mail log. OK gilles@ sthen@Todd C. Miller
2015-10-10Fix /var/spool/smtpd/offline ownership and mode.Antoine Jacoutot
ok gilles@
2015-10-04add _eigrpd user/groupTheo de Raadt
2015-10-03Enable eigrpd(8) and eigrpctl(8) in the buildsRenato Westphal
ok deraadt@
2015-09-29Besides the usual style changes:Robert Peichaer
- verify that kbd is executable and kbdtype is not empty - use safer 'print --' to pipe the initial pf ruleset to pfctl - simplify the ipsecctl if-block Feedback and OK halex@ OK krw@
2015-09-27Don't print output when setting autoconf on interfaces. Suggested by deraadt,Stuart Henderson
ok florian@ rpe@
2015-09-27Add IP26 kernels and boot blocks to the installation media.Miod Vallat
2015-09-27add Ed25519 SSH host key; ok deraadt@Christian Weisgerber
2015-09-20Enable IP26 builds.Miod Vallat
2015-09-13Rename __sysctl syscall to just sysctl, as the userland wrapper is no longerPhilip Guenther
necessary ok deraadt@ jsing@
2015-09-13only print the "IPv6 autoconf" line if there are interfaces to configureStuart Henderson
feedback/ok rpe
2015-09-13- FOO=bar; export FOO -> export FOO=barRobert Peichaer
- run domainname only with a non-empty /etc/defaultdomain file - Make single-user if-block more intuitive, which also matches better what the comment actually says OK halex@, krw@ on a similar diff
2015-09-13Remove setup_X_sockets():Robert Peichaer
The creation of Unix sockets directories in /tmp for X happens right after pruning /tmp. So the whole dance of checking for their existence, ownership or permissions is not necessary. It's safe to just create them with the right permissions if X is installed. Changes to do_fsck(): Remove the _flags variable and pass flags to fsck directly with "$@". Feedback and OK halex@ OK krw@ on a similar diff
2015-09-12Provide an ftpproxy6 rc script. ftp-proxy can only open one listening socketStuart Henderson
at a time, so a second instance of the daemon is required. OK mikeb stsp ajacoutot
2015-09-11the parser doesn't accept "inet" here; pointed out by Denis Fondras on miscStuart Henderson
2015-09-11When ARIN prepared for the IPv4-pocolypse, they put aside a /10 forPeter Hessler
**smaller than /24 allocations**. Our default ruleset will not allow those, even though they will be for various pieces of critical dual-stack infrastructure to help IPv6-only systems survive. This adds a default rule to allow those blocks. With it, I see the RIPE announced test blocks on our AMS-IX peers. ARIN announced this block and policy at, enjoy https://www.arin.net/announcements/2014/20140130.html OK benno@, claudio@, sthen@, florian@
2015-09-11Set "inet6 autoconf" individually on interfaces that have rtsol set inStuart Henderson
hostname.if, previously netstart tried to configure them all at once ("ifconfig if0 if1 if2 inet6 autoconf"). From Delan Azabani, ok phessler@
2015-09-07sync to BOOTIA32.EFI changeTheo de Raadt
2015-09-02copy from mdec to reldirTheo de Raadt
2015-09-02ship BOOTX64.EFI BOOTX86.EFITheo de Raadt
2015-08-29handle minirootTheo de Raadt
2015-08-28fakeramdisk entry for minirootTheo de Raadt
2015-08-28Changes for start_daemon():Robert Peichaer
- use more descriptive variable name Changes for make_keys(): - use variables for file paths - key -> keys in message - take into account the return codes of isakmpd private *and* public key generation OK krw@ halex@
2015-08-27Update: add include/libdrm, sort include/EGL, add share/util-macrosMatthieu Herrb