summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2022-08-01Raise "staff" login class datasize-cur on arm64 to the value of amd64.Stefan Sperling
Values for other login classes defined in this file match amd64 already. ok millert, tb, deraadt
2022-07-28Only attempt to set the yp domainname if not yet set; gets rid of an errorMiod Vallat
message at shutdown. tweaks & ok deraadt@
2022-07-27Place ypldap with ypserv, inside the $domainname check, since it alsoTheo de Raadt
has the same requirement.
2022-07-21fix dowTheo de Raadt
2022-07-217.3 packages keyChristian Weisgerber
2022-07-21add 7.3 firmware keyStuart Henderson
2022-07-217.3 base keyTheo de Raadt
2022-07-20move to 7.2-beta. this gets done very early, to avoid finding outTheo de Raadt
version number issues close to release
2022-07-17/var/run/ypbind.lock doesn't need to be forcefully removedTheo de Raadt
ok aja
2022-07-11Generate P-256 ECDH keys for iked instead of reusing 2048 bit RSA keysTobias Heider
from isakmpd. ok bluhm@
2022-07-03Create virtual interfaces upfront if specified on the command lineKlemens Nanni
In cases like `sh /etc/netstart pair1 pair2', one of hostname.pair{1,2} will contain a "patch pair{2,1}" command which expects the other interface to exist. If none exist, this would fail and netstart had to be run separately or "patch"ed interface had to be manually created before. There are other use cases where interfaces depend on each other, so before (re)configuring an explicit list of interfaces, create all virtual ones upfront so that a single netstart invocation will configure everything correctly without having reflect dependencies in multiple ordered netstart invocations. Copy isin() from install.sub to help. Feedback OK halex
2022-07-02Add /etc/rpki/skiplistDaniel Jakots
ok tb
2022-06-28Add missing colon. Noticed by jmc@Claudio Jeker
2022-06-28Hook up bgplgd. Uses _bgplgd user with id 71:71 add a rc.d script andClaudio Jeker
all the other rc plumbing. OK deraadt@
2022-06-27Remove switch(4) leftovers.Visa Hankala
OK deraadt@ mpi@ claudio@ miod@
2022-06-26Wait for autoconf interfaces to come up in netstart(8) instead ofFlorian Obser
rc(8). This makes tunnel interfaces work that depend on working autoconf interfaces. OK deraadt
2022-06-26Start network auto configuration daemons earlier so that tunnelFlorian Obser
interfaces can depend on dhcp or slaac. dhcpleased needs /var mounted so pull that up, we do not support /var on nfs. With & OK deraadt, earlier version OK sthen
2022-06-06bump pbuild's datasize-cur from 2G to 3G on i386, this or close to itStuart Henderson
is needed to build some important ports. ok tb@
2022-05-26Introduce a new daemon_execdir variable for changing to a specified directoryAntoine Jacoutot
before running rc_rcexec. Based on an proposal from openbsd.tech at aisha.cc ok robert@ abieber@
2022-05-21${rcexec} -> rc_execAntoine Jacoutot
2022-05-21Replace the $rcexec variable by an rc_exec function.Antoine Jacoutot
It is much cleaner to the eyes and makes more sense from a functionnal point of view. This will allow to extend rc_exec with other functionnalities (like upcoming rc_startdir). Bonus point: daemon_logger will now work with manually crafted rc_start functions. This will require a mechanical change from ${rcexec} to rc_exec in rc.d scripts. ports will be fixed right after this commit but we will keep compatibility to give a chance to people to fix their custom scripts. positive tests from a few ok robert@
2022-05-21No need for true(1).Antoine Jacoutot
2022-05-17Simplify unbound rc.d script.Antoine Jacoutot
input/ok sthen@ halex@
2022-05-12add login.conf.d to mtree, from Raf Czlonka, ok deraadtStuart Henderson
2022-05-12add /etc/login.conf.d/* to /etc/changelist, ok deraadtStuart Henderson
2022-04-21Remove _switchd user/group/aliasDaniel Jakots
ok millert deraadt switchd(8) was removed back in November. Commit message was: Retire switchd and switchctl. While interesting they never managed to really get into a usable state. The OpenFlow API is mostly superseeded by P4 and so this is a bit of a dead end.
2022-04-21Fix previous rc.d/spamlogd commit, the check in rc_pre is not neededStuart Henderson
because rc.subr has special-casing for spamd/spamlogd. Teach the script to detect the pflog interface from spamlogd flags and create the correct interface if needed. ok jturner@
2022-04-20Import regenerated moduliDarren Tucker
2022-04-11Fix spamlogd's rc_pre to avoid creating pflog0 if spamd is disabled.Stuart Henderson
The conditional was not checked (prior to r1.2 the exit code from the conditional was implicitly used as the exit code from the whole shell function, but this wasn't adapted when pflog creation was added). Reported/tested by Clint Pachl
2022-04-05Zap emacs version in the pkg_add exampleJeremie Courreges-Anglas
Instead of updating/forgetting the emacs version at each release cycle. ok tb@ deraadt@
2022-04-05bump emacs version so the pkg_add example worksTheo Buehler
ok deraadt
2022-04-05add 7.2 firmware public key, ok deraadtStuart Henderson
2022-04-05add 7.2 syspatch public keyRobert Nagy
2022-04-05New day is a ThursdayTheo Buehler
please fix deraadt
2022-04-04move release date a littleTheo de Raadt
2022-03-26grow i386 mediaTheo de Raadt
2022-03-04fix year, from mikhailTheo de Raadt
2022-03-02Add openvpn ports (udp/1194 & tcp/1194) to /etc/servicesLandry Breuil
Registered at IANA since 2004, also present on Linux & FreeBSD ok sthen@ stsp@ jca@
2022-02-28provide a login class for vmd, the "daemon" class now has a datasizeStuart Henderson
limit which is a bit low for VMs. only done on amd64 as vmd is only provided there. ok deraadt@
2022-02-22add some more tunnels to the list of interfaces that rely on routing.David Gwynne
2022-02-21cap the daemon login class' datasize at either 1G or 4G depending onRobert Nagy
the architecture and set the bgpd class' datasize to either 16G or 1G ok sthen@ and discussed with many
2022-02-207.2 packages keyChristian Weisgerber
2022-02-207.2 base keyTheo de Raadt
2022-02-20move to 7.1-betaTheo de Raadt
2022-02-13Add /usr/local/share/examples/login.conf.d to the default hierarchy.Antoine Jacoutot
ok sthen@ espie@ deraadt@
2022-02-10look for the login class in both login.conf and login.conf.d/${class}Robert Nagy
ok aja@
2022-02-10introduce support for storing capability databases in /etc/login.conf.d;Robert Nagy
anytime a class is looked up, the /etc/login.conf.d/${class} file will be checked first for a matching class definition; this will allow us to easily add custom login classes from packages ok millert@
2022-02-09Increase armv7 ramdisk size to avoid errors in installer.Visa Hankala
OK deraadt@
2022-01-17filessystems -> filesystemsJonathan Gray
2022-01-07regenJonathan Gray