summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2014-03-15httpd_flags was still used here; remove it.Stuart Henderson
Add a log socket in /var/www/dev/log if nginx is enabled, it is needed as the openlog() call is done after chrooting. ok brad@ florian@ deraadt@
2014-03-15Add a new sample config file and rc.d script for unbound, ok deraadt@Stuart Henderson
2014-03-14regenMark Kettenis
2014-03-14We no longer support the userland interface for agp(4).Mark Kettenis
2014-03-14Add "ub-dns-control" (for unbound's equivalent of rndc), so that it's addedStuart Henderson
to the port list in net.inet.tcp.baddynamic. Service name taken from IANA service-names-port-numbers.txt. If anyone's interested in adding AF_UNIX support for comms between unbound and unbound-control, that would very welcome. OK brad@ deraadt@
2014-03-14adding a user is hard. mistakes pointed out by ajacoutotTed Unangst
2014-03-13smtpd dudes forgot to add their _smtpq userTed Unangst
2014-03-13it's a tedu miracle! this file is just descriptions, so resurrect spraydTed Unangst
2014-03-13Unhook httpd(8) from build; etc bitsFlorian Obser
OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@ "The time is right." and much help getting the show on the road deraadt@
2014-03-12just run newaliases. should be about the same, but less sendmail.Ted Unangst
ok todd
2014-03-12switch over to smtpd by default.Ted Unangst
ok deraadt gilles todd
2014-03-12Are they going to help?Ted Unangst
No. Well, then tell them to stay out of the way. ok deraadt
2014-03-07too old, undermaintainedTed Unangst
2014-03-06the pre-5.5 test keys are no longer usefulTheo de Raadt
2014-03-05some files were not being hashes, because they were missing from MDEXTTheo de Raadt
noticed by jsg, and important enough to make release
2014-03-03cdemu is no moreTheo de Raadt
2014-03-02Add two disktab entries, for *.fs install filesystems (let's call themTheo de Raadt
'miniroot and maxiroot').. from chris
2014-02-28proper (non-test) keys for 5.5 and 5.6 baseTheo de Raadt
2014-02-27Build a small miniroot filesystem which can be dumped on a new disk or anMiod Vallat
existing swap partition for an easier initial installation.
2014-02-26proper (non-test) keys for 5.5 and 5.6 firmwareStuart Henderson
2014-02-26the test 5.4 keys can go awayTheo de Raadt
2014-02-26OpenBSD 5.5 and 5.6 packages public keysChristian Weisgerber
2014-02-26fix pkg namesGiovanni Bechis
"feel free to fix it" deraadt@
2014-02-24revert previousMarc Espie
has fun effects on some manpages under some circumstances, as found out by sthen@: the gindent manpage looks like shit when seen with that new default man.conf on an uft8 terminal, e.g., quotes combine with the previous character to yield accented letters for no reason. this should be handled calmly after release, not rushed in at the last minute (okay deraadt@)
2014-02-24default to locale awareness. safer than changing internal mandoc defaults.Ted Unangst
2014-02-19Ignore blank characters at the end of ${pkg_scripts} in orderIngo Schwarze
to refrain from trying to execute /etc/rc.d/ in that case. Problem noticed by jasper@. Opinions on this patch vary: "much nicer, ok" sthen@ "good god, what horrible shell voodoo, ok" ajacoutot@
2014-02-15Show the exemplary rules for accepting default routes for IPv6 as well.pelikan
ok sthen florian
2014-02-14regen to add audio*Alexandre Ratchov
2014-02-14readd audio devices, from david@, thanks!Alexandre Ratchov
2014-02-03Build and document bsd.mp on alpha.Miod Vallat
2014-01-25delete junk fileTheo de Raadt
2014-01-25Change the default PF policy to "block return", including x11 asDarren Tucker
suggested by naddy@. This solves the problem that occurs when a server crashes or is hard booted and comes back up without tearing down any connections to it, and packets from these connections don't match any existing state or rule and are silenty dropped. ok phessler@ henning@ claudio@ dlg@
2014-01-24sort the SHA256 fileTheo de Raadt
2014-01-19Extend the initial pf ruleset to explicitly allow dhcp / bootp and dhcpv6.Claudio Jeker
Our dhclient only uses the bpf tap for broadcast packets (which bypass pf) but lease renewals will use a regular socket and are blocked without this change. Rules are written so that accidential forwarding of packets is not possible. Diff from brad@, OK henning@, benno@, mikeb@
2014-01-12Directories updates for freetype 2.5.2Matthieu Herrb
2014-01-12crank to 5.5betaTheo de Raadt
2014-01-11test pkg key for during the 5.5-beta sequenceChristian Weisgerber
2014-01-11test fw key for during the 5.5-beta sequenceStuart Henderson
2014-01-11test key for during the 5.5-beta sequenceTheo de Raadt
2014-01-10Remove unnecessary rc_post from rc.d/nsd.Stuart Henderson
It was there to try and ensure that failure was reported if nsd stopped shortly after startup (as it used to do if the address was in use, etc), but this is no longer the case with nsd 4 which returns a failure at startup in these cases, and having it there breaks properly printing "(ok)" when stopping.
2014-01-10be a bit more carefulTheo de Raadt
2014-01-10be forceful with removing the SHA256 fileTheo de Raadt
2014-01-10a new key. Once again, this is still testing time.Theo de Raadt
2014-01-09Add DHCPv6.Brad Smith
ok deraadt@
2014-01-09Install our third key. NOTE that this is a TEST KEY for use as we improveStuart Henderson
our processes. requested by espie@
2014-01-09remove the SHA256 file as soon as we start creating setsTheo de Raadt
2014-01-09Install our second key. NOTE that this is a TEST KEY for use as we improveMarc Espie
our processes. prodded by deraadt@
2014-01-09install signify keysTheo de Raadt
2014-01-09Install our first key. NOTE that this is a TEST KEY for use as we improveTheo de Raadt
our processes. ok tedu
2014-01-08create the /etc/signify directoryTheo de Raadt