summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2019-08-06oops, 6.7, spotted by tedu well in advance of it becoming an issueTheo de Raadt
2019-08-056.7 packages keyChristian Weisgerber
2019-08-04Revise the way how the octeon bootloader is built. The originalVisa Hankala
approach was not right, and there is still room for improvement. OK deraadt@
2019-08-03good idea to make next-generation keys available well before heading into ↵Theo de Raadt
release.
2019-07-28Link octeon bootloader to the build.Visa Hankala
OK deraadt@
2019-07-28Add a dedicated ramdisk entry for the octeon bootloader to reduceVisa Hankala
the size of the "boot" file. OK deraadt@
2019-07-27man5/sparc64 is now required (on all arch)Theo de Raadt
2019-07-26standard DoT port is 853 not 953; from myportslist20190323 at nym.hush.comStuart Henderson
2019-07-25Show unveil(2) violators in lastcomm(1) output and daily mail.Alexander Bluhm
input Janne Johansson, schwarze@; OK deraadt@ millert@
2019-07-24Stop using reserved words in the smtpd.conf configuration exampleskmos
in the default smtpd.conf and smtpd.conf(5) manual page. This eliminates ambiguity in our documentation examples that can cause confusion. Input and OK deraadt@ schwarze@ kn@
2019-07-17regenVisa Hankala
2019-07-17Add a bootloader for octeon.Visa Hankala
The firmware on OCTEON machines usually does not provide an interface for accessing devices, which has made it tricky to implement an OpenBSD bootloader. To solve this device access problem, this new loader has been built on top of a small kernel. The kernel provides all the necessary devices drivers, while most of the usual bootloader logic is in a userspace program in a ramdisk. The loader program is accompanied by a special device, octboot(4). The main purpose of this device is to implement a mechanism for loading and launching kernels. The mechanism has been inspired by Linux' kexec(2) system call. The bootloader will be enabled later when it is ready for general use. Discussed with deraadt@
2019-07-15Add tls-cert-bundle and example of using a DNS-over-TLS forwarder.Darren Tucker
Note that, at this time, Unbound does not re-use TLS connections (https://www.nlnetlabs.nl/bugs-script/show_bug.cgi?id=4089) so the TCP and TLS handshakes will cause a disproportiate increase in latency compared to UDP. ok sthen@ florian@
2019-07-04add server time.cloudflare.com.Theo de Raadt
- Cloudflare have very good adjacency (if PCH did anycast ntp, we'd use it) - As ntp input, it is great they don't leapsmear - Not all their nodes do ntp, hope they succeed at scaling that up - ntpd constrains (un-auth) ntp packets within a TLS constraint window so there is no downside (unlike pool.ntp entries which slowly decay but that's a story for another commit..) ok otto
2019-06-28miniroot prototype disklabels should attempt to contain accurateTheo de Raadt
prototype information (in this case, the miniroot-building code is completely lovecraft)
2019-06-19move tals to /etc, where they can be upgraded by a "sysupgrade" ifTheo de Raadt
such a circumstance ever occurs. ok job
2019-06-11regenJoshua Stein
2019-06-11make 10 wsmouse devicesJoshua Stein
for anything other than a regular old mouse, X needs to be able to directly talk to the device and newer machines can have all kinds of touchscreens, pen devices, touchpads, etc. ok deraadt
2019-06-08grow sparc64 miniroot a littleTheo de Raadt
2019-06-07Switch to v02 api url.Florian Obser
2019-06-02spelling/grammar fixes; from larry hynesJason McIntyre
2019-05-27add vulkan dirsJonathan Gray
2019-05-12Stop generating keys for nsd-control(8). These are unused since nsd wasTim van der Molen
switched to using a local control socket by default. OK florian@ sthen@
2019-05-12Add first drm render node to list of devices to change when logging inJonathan Gray
on ttyC0. While here add drm0 to loongson and add the complete set of wscons and drm devices to arm64. ok kettenis@
2019-05-11socppc makes an extended visit to the bigbucket.Theo de Raadt
ok kettenis
2019-05-10few can remember what apm wasSebastian Benoit
ok deraadt@
2019-05-10ld.so boot cleanup support:Philip Guenther
- put functions and data which are only used before calling the executable's start function into their own page-aligned segments for unmapping (only done on amd64, arm64, armv7, powerpc, and sparc64 so far) - pass .init_array and .preinit_array functions an addition argument which is a callback to get a structure which includes a function that frees the boot text and data - sometimes delay doing RELRO processing: for a shared-object marked DF_1_INITFIRST do it after the object's .init_array, for the executable do it after the .preinit_array - improve test-ld.so to link against libpthread and trigger its initialization late libc changes to use this will come later ok kettenis@
2019-05-10syncStuart Henderson
2019-05-10vmm(4) was removed from share/man/man8/man8.i386/MAKEDEV.8 but not theStuart Henderson
input file or MAKEDEV script itself; sync up the input file. req by jmc@
2019-05-02pbuild class: bump datasize and maxproc; these should be sufficient forAntoine Jacoutot
running a ports bulk without bumping anything else (matches what's on amd64.ports and exopi) ok sthen@ phessler@ espie@ naddy@
2019-04-26no more libFSMatthieu Herrb
2019-04-26Import regenerated moduli.Darren Tucker
2019-04-26we stopped making floppies a while agoTheo de Raadt
2019-04-1463 keys no longer usefulTheo de Raadt
2019-04-14syncJonathan Gray
2019-04-14create drm render node devicesJonathan Gray
2019-04-05Fix hack(6).Anthony J. Bentley
- Write savegames and scorefiles to the current directory instead of /var - Save oc_name and oc_descr alongside oc_uname in all situations - When a levitation potion times out, explicitly float down These patches were contributed last year by "tonypony76"; thanks! ok deraadt@, with added enthusiasm from tedu@
2019-04-01revert previous. ifconfig errors may be interesting... to be revisited.Ted Unangst
2019-04-01Update radiusd.conf(5) man page and its example to recommend toYASUOKA Masahiko
surround words with double quote. Also fix a bug in the man page that module argument was missing for "module set".
2019-04-01florian noticed unused etc/ssl/lib directory. jsing notes a releaseTheo de Raadt
near 0.9.7a mistakenly created this incorrect directory. This was mimicked into our mtree framework in 1998, where it survived for over 20 years. ok jsing
2019-04-01catch/hide errors from ifconfig carp in case there is no carp.Ted Unangst
ok deraadt
2019-03-25add syspatch signify key for 6.6Robert Nagy
2019-03-21Start in the daemon configured routing table and not in the one we're currentlyAntoine Jacoutot
in. This fixes the case where one would be in a non default rdomain shell then run an rdomain 0 rc.d daemon. reported by YASUOKA Masahiko and Pierre Emeriaud ok sthen@ claudio@ benno@
2019-03-19Remove old X proto documentation directories.Matthieu Herrb
2019-03-17Grow sgi ISO/FS media space to cope with the clang growth.Theo de Raadt
2019-03-12Almost all terminals now support hardware tabs so default to OXTABSNicholas Marriott
off. This makes three changes: adds the ht capability to the standard lines in gettytab(5); removes OXTABS from TTYDEF_OFLAG in ttydefaults.h (the defaults used by pty(4) - diff from martijn); and only sets OXTABS on terminals which lack hts and tbc in tset(1) (from Thomas Dickey upstream). Addresses problems reported by tedu. ok millert
2019-03-05install*.{fs,iso} get larger due to clang library changesTheo de Raadt
2019-02-26crank to 6.5-betaTheo de Raadt
2019-02-24Remove -S from install commandskn
As of usr.bin/xinstall/install.c revision 1.68, -S is a no-op and install(1) will always create files safely, thus clean the option usage from the tree. Diff from Lauri Tirkkonen <lotheac at iki dot fi>, thanks.
2019-02-19Simplify NFS check in reorder_libs()kn
Loop over df(1)'s output directly, ensure the resulting list of block devices is unique to avoid later duplicity checks and redundant mount(8) invocations. This allows direct bail out on invalid types and simpler saving for later remount. OK deraadt