summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2015-07-15Drop comments; we already have a fully documented file underAntoine Jacoutot
/etc/examples/ntpd.conf ok deraadt@ benno@ schwarze@
2015-07-15Fix base rc.d scripts after the recent rc.subr change.Antoine Jacoutot
ok halex@
2015-07-15By default, require an exact match of the process name and argument list.Antoine Jacoutot
This allows running several instances of the same rc.d(8) script by just linking it to different name. e.g. ln -s ftpproxy ftpproxy6 echo 'ftpproxy6_flags=-6' >>/etc/rc.conf.local This is likely to break some rc.d scripts in ports. I will try and fix them all in the next few days but I'd appreciate reports if I missed some. ok halex@
2015-07-15Always use the default flags when running !start.Antoine Jacoutot
This is necessary so that rc.d scripts launched with `-f' can be properly stopped, checked and reloaded. ok schwarze@
2015-07-15Merge comments.Antoine Jacoutot
2015-07-07/var/unbound/db/root.key can be stored in plain text actually; that's justAntoine Jacoutot
the public key. prodded by semarie@ ok sthen@
2015-07-07Only store checksums for:Antoine Jacoutot
/var/nsd/etc/nsd.conf (may contain a key) /var/unbound/db/root.key (fix path as well) from Tim van der Molen ok millert@ sthen@
2015-07-03Remove sudoersTodd C. Miller
2015-06-29enable vexpressJonathan Gray
2015-06-28regenJonathan Matthew
2015-06-28add usb devicesJonathan Matthew
2015-06-23fix emacs pkg namesGiovanni Bechis
2015-06-21syncTheo de Raadt
2015-06-215.9 base keyTheo de Raadt
2015-06-19add 5.9 packages keyChristian Weisgerber
2015-06-18I'm afraid it will be a sunday.Miod Vallat
2015-06-18add 5.9 firmware keyStuart Henderson
2015-06-17crank to 5.8-betaTheo de Raadt
2015-06-17Really make daemon_class read-only; it's set to "daemon" of a matchingAntoine Jacoutot
login class.
2015-06-16Typos in comments; Ville ValkonenMiod Vallat
2015-06-13add miniroot to MDEXTJasper Lievisse Adriaanse
2015-06-09miniroot for octeon; tested on edgerouter lite with local usb storageJasper Lievisse Adriaanse
ok jmatthew@ miod@
2015-06-06Allow rtsol keyword in hostname.if(5) with net.inet6.ip6.forwarding=1.Florian Obser
"inet6 autoconf" was working before and rtsol should behave the same. OK phessler
2015-06-02Rename the imx miniroot to nitrogen as it creates "6x_bootscript".Jonathan Gray
Add a miniroot for the CuBox-i which needs u-boot at a particular offset in the sd image to boot. Based on changes made by Patrick Wildt in bitrig.
2015-05-28Remove 1k bit groups. ok deraadt@, markus@Darren Tucker
2015-05-26Create aliases.db from the installed aliases file, so we get the correctChristian Weisgerber
owner and group. Reported by Mark Patruck. ok deraadt@ miod@
2015-05-22Update DH groupsDarren Tucker
2015-05-22Remove 6k and 8k bit moduli fragments since they are now kept inDarren Tucker
usr.bin/ssh/moduli-gen.
2015-05-20Now all the socs use the same va entry point and don't have anyJonathan Gray
conflicting symbols we can combine the configs. Multiple umg files are still required however. The bsd.umg target in the kernel is replaced by targets for bsd.IMX.umg, bsd.OMAP.umg and bsd.SUNXI.umg.
2015-05-19use the same va entry point on all armv7 socsJonathan Gray
Similiar changes were made in bitrig by Patrick Wildt. As part of this change the physical load address for imx and sunxi have changed. Any u-boot settings that include it will need to be modified. imx: 0x10800000 -> 0x10300000 sunxi: 0x40800000 -> 0x40300000 Tested by bmercer, canacar and myself. ok bmercer@
2015-05-18Change spamd to use divert-to instead of rdr-to.Reyk Floeter
divert-to has many advantages over rdr-to for proxies. For example, it is much easier to use, requires less code, does not depend on /dev/pf, works in-band without the asynchronous lookup (DIOCNATLOOK ioctl), saves us from additional port allocations by the rdr/NAT code, and even avoids potential collisions and race conditions that could theoretically happen with the lookup. Heads up: users will have to update their spamd PF rules from rdr-to to divert-to. spamd now also listens to 127.0.0.1 instead of "any" (0.0.0.0) by default which should be fine with most setups but has to be considered for some special configurations. Based on a diff is almost two years old but got delayed several times ... beck@: "now is the time to get it in" :) Tested by many With help from okan@ OK okan@ beck@ millert@
2015-05-18Put ntpd.conf in MUTABLE so it's installed with 0644 mode.Antoine Jacoutot
discussed by deraadt@
2015-05-18enable ntpd by default at install time. We use pools and a reliableTheo de Raadt
constraint to keep them in check. in the worst case of being on a dark net, nothing changes. this is being enabled by default to allow gathering of more operational information from users. and if the operational heuristics in ntpd can be suitable refined, this may stay the default into the future. if not, ntpd will become even more awesome along the way. with reyk rpe
2015-05-18Simplify example constraints URL to reduce load on the server side.Darren Tucker
ok henning@, reyk@
2015-05-04fix numbers for pppx, vscsi and diskmapJonathan Matthew
ok dlg@
2015-05-04Remove comments about default daemon_flags; most are empty, thoseIngo Schwarze
that aren't are redundant because they can be found in the rc.d(8) scripts themselves, and they risk getting out of sync. While here, sort the daemons alphabetically. No functional change. Triggered by a much smaller nameserver-only patch from stephan@. OK ajacoutot@ rpe@ stephan@ and looks good to sthen@.
2015-05-02No more pf_rules ipsec_rules.Antoine Jacoutot
2015-05-02Drop pf_rules and ipsec_rules from rc.conf(5); it shouldn't have been madeAntoine Jacoutot
tweakable: there's no real point and these files support the 'include' option so one can always get its config from whatever path... especially useful when testing a new ruleset. man page inputs from schwarze@ ok halex@ schwarze@ rpe@ deraadt@
2015-04-30Add smtpd(8) spool directories so that they are registered as part of base.Antoine Jacoutot
ok henning@ gilles@ deraadt@
2015-04-29Check arguments before eval so we don't end up with a cryptic error message.Antoine Jacoutot
reported by jasper@ While here: _rc_is_supported() -> _rc_not_supported() - saves a fork - reduces triple negation to double negation in _rc_not_supported() - simplifie condition for rc_restart=NO from schwarze@ ok jasper@ schwarze@
2015-04-29VERBOSESTATUS or no VERBOSESTATUS, failed or missing dumps are stillAlexander Hall
worth noting "go ahead" schwarze@
2015-04-27Simplify remote(5) example file and remove stuff not supported by cu(1).Nicholas Marriott
some tweaks from sobrado@, ok deraadt@
2015-04-27Add a _file user and use for privsep, ok deraadtNicholas Marriott
2015-04-15add the include dir for libepoxyJonathan Gray
2015-04-12Switch example NSD config to splitting master and slave zones into differentStuart Henderson
subdirectories (/var/nsd/zones/{master,slave}) and create these in mtree. Nearly everybody that uses NSD for slave zones that I talked to already has this layout. Bikesh^Wdiscussed with ajacoutot florian millert and others. ok ajacoutot@ florian@ phessler@ claudio@ jung@
2015-04-03Add ddb.log example; OK halex@Todd C. Miller
2015-03-31For consistency with the diff subcommand, add rdiff -uChristian Weisgerber
(-N is always implied and -p isn't available.) ok guenther@, sthen@
2015-03-28_rc_err(): only display error message if there's an actual one.Antoine Jacoutot
Remove an exit() statement that could never be reached.
2015-03-27Actually use the new man.conf(5) "output" directive.Ingo Schwarze
Additional functionality, yet minus 45 lines of code.
2015-03-27Move man.conf from /etc to /etc/examples, deleting what's no longer supported.Ingo Schwarze
Discussed with many and OK ajacoutot@.
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-26 06:10:19 +0000