summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2018-12-07Enable DNSSEC validation.Florian Obser
Requested by & OK claudio Input & OK sthen OK job, solene Various commenting that they run with validation since a long time without issues.
2018-11-17add the missing space. in the future, should mail -f the file to ensure it ↵Theo de Raadt
is correct format
2018-11-17make the bogon set competely or-longer, rather than having to manage itTheo de Raadt
or-longer at useage time. ok job benno
2018-11-13Grow sgi iso to make room for clang.Visa Hankala
Cluebat and OK deraadt@
2018-10-31Import new moduli.Darren Tucker
2018-10-29Revert previous (for now).Antoine Jacoutot
semarie found a few regressions with daemon that will fail if cwd is not accessible.
2018-10-16Change the way we call su(1) in rcexec:Antoine Jacoutot
- drop `-'l' to prevent simulating a full login and running /root/.profile (prodded by a mail from J Greely) - use `-m' to preserve the environment because we now set HOME to "/" like /etc/rc does; note that we now also clear the environment using `env -i' before running su(1) which leaves us with only HOME, PATH and SHELL Committing early to catch regressions fast, if any. ok halex@
2018-09-27Add vmctl stop -a [-fw] option to stop or terminate all running VMs.Reyk Floeter
This is also be used to simplify the vmd rc stop script. OK mlarkin@ ccardenas@
2018-09-23add 6.5 syspatch public keyRobert Nagy
2018-09-216.5 firmware keyStuart Henderson
2018-09-20grow alpha and hppa media to accomodate some recent growthTheo de Raadt
2018-09-20Import updated moduli.Darren Tucker
2018-09-186.5 packages keyChristian Weisgerber
2018-09-186.5 base keyTheo de Raadt
2018-09-18grow arm64 ramdiskTheo de Raadt
2018-09-10Adjust the config to -current bgpd which makes it a lot more readable.Claudio Jeker
OK phessler@
2018-09-09update example bgpd.conf to use new config language features:Sebastian Benoit
network prefix-set ... and filters with prefix-set ... or-longer. ok claudio@
2018-09-08Remove optional commas from example config. In the future these optionalClaudio Jeker
commas may become a syntax error.
2018-08-31syncJoshua Stein
2018-08-31Add more uhid devices, 8 totalJoshua Stein
ok deraadt
2018-08-29Historically /etc/netstart (and the equivalent code in the installKenneth R Westerback
script) did 'ifconfig <if> down' before starting dhclient(8). This was a way of ensuring old running copies of dhclient were killed before a new one started. Current dhclient does not need this assist, so change "ifconfig <if> down" to "ifconfig <if> up" pending further script optimizations. Similar to a 2014 attempt by halex@. Prompted by a misc@ report from Kristjan Komlosi reporting hanging diskless setups. ok halex@ kn@
2018-08-28Unclutter bgpd.conf example config filejob
We're aiming to work towards an examples/bgpd.conf file that is a good starting point for real world deployments rather than a showcase of all capabilities bgpd(8) has. OK deraadt@ claudio@
2018-08-20syncMark Kettenis
2018-08-20Add /dev/drm[0-3].Mark Kettenis
ok deraadt@, jsg@, mpi@
2018-08-19syncanton
2018-08-19Add kcov(4), a kernel code coverage tracing driver. It's used in conjunctionanton
with the syzkaller kernel fuzzer. So far, 8 distinct panics have been found and fixed. This effort will continue. kcov is limited to architectures using Clang as their default compiler and is not enabled by default. With help from mpi@, thanks! ok kettenis@ mpi@ visa@
2018-08-16Switch nsd control socket from localhost to a unix domain socket.Florian Obser
OK sthen
2018-08-16The zoneinfo directories can be mode 755 just like everything else.Todd C. Miller
OK deraadt@
2018-08-11don't need 61 keys anymoreTheo de Raadt
2018-08-10crank to 6.4-betaTheo de Raadt
2018-08-07Similar to the ldpd.conf change don't use a macro of the secret.Claudio Jeker
Macros get sometimes logged so we should not encurage to use them for sensitive data.
2018-08-06Correct example file since reserved words cannot be used as macros. Not onlyRicardo Mestre
that, the macro used was password and if we changed it to something like pass="secret" it would log it if the daemon was ran in verbose mode. Hint and OK claudio@
2018-07-28syncAlexandre Ratchov
2018-07-28Remove unused /dev/audio and /dev/audioctl symlinks.Alexandre Ratchov
ok deraadt
2018-07-25s/resolver/nameserver/ to match parse.y -r1.4Jasper Lievisse Adriaanse
2018-07-24add rad.conf exampleJasper Lievisse Adriaanse
ok florian@
2018-07-23add _rad userFlorian Obser
OK tb, claudio
2018-07-23Remove rtadvd(8) rc script.Florian Obser
2018-07-23Remove rtadvd(8) leftovers in etc.Florian Obser
OK deraadt, phessler
2018-07-23It's time to switch to rad(8); tested by many.Florian Obser
Unhook rtadvd from build. OK deraadt, phessler
2018-07-23It's time to switch to rad(8); tested by many.Florian Obser
Remove rtadvd(8) from rc(8). OK deraadt, phessler
2018-07-22document method=https, and use it in the example config;Jason McIntyre
from lauri tirkkonen; ok sthen beck
2018-07-13add rad.conf; from semarie; tweak & OK tbFlorian Obser
2018-07-12rc(8) infrastructure for radFlorian Obser
2018-07-12Add _rad user and group for rad(8).Florian Obser
This recycles the _btd uid/gid that have been removed in 2013. Discussed in the hackroom.
2018-07-11Explicitly call "/etc/rc.d/vmd stop". This issues graceful shutdown commandsStuart Henderson
to running VMs (at least for OpenBSD ones), but the stop routine for system daemons is not usually called at shutdown. Earlier version with just "vmd stop" ok reyk@ kn@, ajacoutot@ reminded me to hide the contextless "vmd(ok)" text which looks bad, I did so and wrapped it with a "stopping VMs" message (it can take some time, especially when you have multiple VMs, so better to have some clear feedback).
2018-07-11Add -w option to vmctl stop to wait for completion of VM termination.Reyk Floeter
Use it in /etc/rc.d/vmd accordingly. OK sthen@
2018-07-11Don't hide errors when IPv6 forwarding is not enabled.Florian Obser
OK(failed) phessler OK deraadt
2018-07-10we were refering to 10k states by default here as well, pt out by claudioHenning Brauer
2018-07-08netstart is used during system start, but also interactively.Theo Buehler
Show proper error message if a regular user executes netstart. Only do the privilege check if the id binary is available, which might not be the case during diskless system startup. ok deraadt, jasper, jca, krw, rpe (who wrote the same diff), sthen