summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2011-04-04Dump some useless calls to dhclient-script. i.e. MEDIUM, PREINIT,Kenneth R Westerback
ARPSEND, ARPCHECK. Drop support for 'media', 'medium' and 'alias' specifications in dhclient.conf. Old leases still parse but these options now have no effect. Be more polite and decline all offers we don't accept. Fix a IMSG length check. Many expressions of support at various bars. ok henning@ deraadt@ beck@
2011-04-04show how to disable pool_debugTheo de Raadt
2011-03-25Bump timeout to 30s.Antoine Jacoutot
ok robert@
2011-03-24if daemon_flags=NO is set, just exitRobert Nagy
ok ajacoutot@
2011-03-23use ssh-keygen -A; ok deraadtKevin Steves
2011-03-23Update since ICMP6 redirects are disabled by default now.Federico G. Schwindt
After discussion with bluhm@, fgsch@, sthen@ and deraadt@ claudio@ and sthen@ ok.
2011-03-19Since we now use pkill -0 for "check", it must be run as root,Ian Darwin
so remove that test condition. Commented by schwarze@, OK ajacoutot@
2011-03-17- introduce the INRC environment variable so that rc.subr(8) knows if itRobert Nagy
gets called from rc.local or rc.shutdown - notify the user if a given operation was successfull or not by appending the (ok) or (failed) strings to the end of the daemon name - hide stdout and stdin unless RC_DEBUG=1 is set, otherwise all the function names will be printed out and all output sent to stdin or stdout - since from now on rc.subr is taking care of printing out the daemon names on startup, we don't need to do this from rc.{local,shutdown} anymore brainkilling work done by me and ajacoutot@, ok ajacoutot@
2011-03-14Return proper codes so that we don't rc_start if rc_pre failed and weAntoine Jacoutot
don't rc_post if rc_stop failed. "I agree with the direction" sthen@ ok robert@
2011-03-10Add a small comment at the top to explain what this file does.Antoine Jacoutot
Use $() constructs as it's safer than ``. Both req. by deraadt@ Use pkill instead of pgrep in rc_check so that we don't need to fiddle with redirections in reload. prodded by schwarze@ ok robert@
2011-03-09Make reload and check consistent with start/stop.Antoine Jacoutot
ok robert@
2011-03-09Move the redirections into the rc_cmd itself instead of rc_start andAntoine Jacoutot
rc_stop so scripts don't need to set it. ok sthen@ (on a much bigger diff) robert@
2011-03-09Move rc_pre and rc_post out of the rc_start/rc_stop functions into theAntoine Jacoutot
rc_cmd start/stop actions. This way when rc.d(8) scripts override these functions, we don't loose rc_{pre,post}. Add a max 5 secs loop after rc_stop in the rc_cmd top action. This seems to be a good default for returning to command line only after the daemon has really stopped. This fixes "restart" for some daemons and allows to properly stop some others at shutdown time. Note that this is just a best-effort default, some daemons may need a lot more time to shutdown but this case is usually handled in the rc.d(8) script itself and we obviously do not want to hang the shutdown process. Call rc_cmd start/stop in restart and _not_ rc_start/rc_stop which can get overriden in a script. discussed with and inputs from sthen@ and schwarze@ ok sthen@ robert@
2011-03-06Add an "rc_bg" variable that is undefined by default and allows to startAntoine Jacoutot
a daemon in the background. man page tweaks from schwarze@ discussed with an ok schwarze@ robert@
2011-02-24Remove daemon_shell and force the use of /bin/sh for the su(1) call.Antoine Jacoutot
ok robert@ espie@ miod@
2011-02-16allow users to enable access to the /dev/crypto, but keep it turned offMike Belopuhov
by default, adjust comments in sysctl.conf; ok markus, tedu, djm, miod
2011-02-12Add the rc_scripts variable for rc.d(8).Antoine Jacoutot
prodded by espie@ ok miod@
2011-02-09fix an unbalanced parenthesis in a comment; while here, split the commentIgor Sobrado
in a better place to make it more readable. ok jmc@ and miod@
2011-01-24change default nsd(8) paths. ok sthen@Jakob Schlyter
2011-01-19add ldapd.conf; ok sthen@David Krause
2011-01-19catch up changelist with recent additions; ok sthen@David Krause
2011-01-19Add 2001:2::/48 (prefix used for benchmarking) to the list ofClaudio Jeker
non-routeable prefixes. While there sort list. Diff provided by Andre Keller.
2011-01-19remove EOL whitespaceDavid Krause
2011-01-19sort entriesDavid Krause
2011-01-19update location of host.random: it moved from /etc to /var/db in 1999...David Krause
2011-01-14We should not sum the install*.iso file, since it is not created at buildTheo de Raadt
time. We've been summing the one from the previous build (then additional goo I run has been cleaning it up..)
2011-01-14in the most trivial way, request that the kernel arc4random re-key afterTheo de Raadt
we run netstart ok tedu, djm liked it too
2011-01-13move to 4.9-currentTheo de Raadt
2011-01-10talk to /dev/arandom as a single read or write.Theo de Raadt
in particular a single write will result in a single re-key event, rather than 64 writes causing 64 re-keys -- wasting the kernel's time. ok guenther
2011-01-05Put the "su -c ..." command into an rcexec variable so that we canAntoine Jacoutot
easily use it in rc scripts instead of copying/pasting the same huge command lines everywhere. ok robert@ sthen@
2011-01-04Check for a login class that match the rc script name and if we find oneAntoine Jacoutot
let's use it. If not, then fall back to using daemon. While here, do some reordering. "I like this" sthen@, ok robert@
2010-12-30Start shipping bsd.mp for hppa; ok miodTheo de Raadt
2010-12-29After the recent changes, there is no need for an rc_conf function.Antoine Jacoutot
As schwarze@ also stated, this will prevent anyone from calling it (which would be an error) and makes it clearer that rc.subr is not just a functions container. No functionnal change, unless you were calling rc_conf from an rc script which would have been wrong anyway. ok schwarze@ robert@
2010-12-28- add /usr/lib/pkgconfig/Jasper Lievisse Adriaanse
2010-12-27There is no point in calling rc_conf manually from each and every rcAntoine Jacoutot
script; instead, rc.subr can call rc_conf itself right after reading in rc.conf. from schwarze@ (committing on his behalf) ok robert@
2010-12-24Fix a flaw in the rc.subr framework reported by stephan@ whereAntoine Jacoutot
local_rcconf would get overwritten by flags from the rc script itself. Based on an original idea and diff from robert@, create an rc_conf function that we add in the rc_script after the defaults daemon* variables. This way we can use defaults variables names in other part of the script (when defining a specific pexp for instance). While here, simplify setting up the default daemon variables so that we don't need to do any substitution in rc_start. rc scripts must include daemon variables before calling rc_conf. All other locally modified variables (pexp, rc_reload, local additions...) must come after. feedback from and works for sthen@ ok robert@
2010-12-22Consistantly use /dev/arandom for feeding entropy to the kernel.Theo de Raadt
ok kjell otto miod
2010-12-17allow default blowfish rounds to be tweakable by arch, no behavioral changeTed Unangst
ok deraadt
2010-12-16Add IANA officially assigned numbers for zabbix.Antoine Jacoutot
ok sthen@ deraadt@
2010-12-13Prefer '-l' over '-' which is deprecated.Antoine Jacoutot
Also noticed and agreed by eric@ ok robert@
2010-12-13simulate a full login with su, now that the environment is fine afterRobert Nagy
the last su(1) commit
2010-12-13Only run tset for interactive shells. OK robert@Todd C. Miller
2010-12-11Make it possible to mark an rc action as unsupported by setting theAntoine Jacoutot
corresponding variable to NO. e.g. rc_reload=NO This will save us the trouble of copying the same rc_reload() function (or others) all over the tree. ok robert@
2010-12-11Sanitise daemon_flags: remove multiple whitespaces from _rcflags.Antoine Jacoutot
requested by okan@, ok robert@
2010-12-11Do not overwrite the settings in the rc scripts itself, so use the sameRobert Nagy
method to handle _class, _user and _shell as we do for _flags. discussed with and ok ajacoutot@
2010-12-10Add support for setting _user _class and _shell for a specific daemon,Robert Nagy
and use su to start the daemons. By default if there is no class defined, daemon will be used. For a shell it defaults to /bin/sh.
2010-12-02The awk's split() starts numbering array indices at 1 not 0.Todd C. Miller
2010-11-28Update example filterset to include a basic IPv6 filterset.Claudio Jeker
While there extend the current IPv4 filterset. OK sthen@, henning@
2010-11-26better line for net.inet.carp.log reflecing current reality;Otto Moerbeek
ok mcbride@ claudio@ henning@
2010-11-26Do like in rc.local and print the daemon name before running rc_stop.Antoine Jacoutot
ok robert@