summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2020-04-16Suggest to update RPKI once an hour.job
In autonomous systems running bgpd(8) and rpki-client(8) on their edge routers, it may be beneficial when out-of-the-box all routers don't all do rpki fetches & bgp loads at the same time. It is expected behavior for RPKI information to un-evenly percolate towards the BGP edge in a staggered way. The 'once an hour' pace may be a reasonable balance between the needs of internet users, and what network operators tolerate in churn. OK deraadt@
2020-04-15Use the new random interval support in cron instead of a random sleep.Todd C. Miller
The random intervals used can be adjusted as needed. OK deraadt@
2020-04-05adjust day of the week and yearTheo Buehler
2020-04-05crank to 6.7-betaTheo de Raadt
2020-04-04clang bsd.rd is a bit bigger..Theo de Raadt
2020-04-03increase rdroot sizeJonathan Gray
ok kettenis@ deraadt@
2020-03-13Run getty on all /dev/ttyC* apart from ttyC0, since it might conflictPatrick Wildt
with /dev/console. Feedback from and ok kettenis@
2020-03-12syncPatrick Wildt
2020-03-12Add /dev/drm[0-3].Patrick Wildt
ok deraadt@
2020-03-12grow limits a bit because clang is a pig.Theo de Raadt
2020-03-11Bump the pbuild data size limit to 7G; Firefox 74 no longer builds in 6G.Christian Weisgerber
ok deraadt@
2020-03-10add 6.8 fw pubkeyStuart Henderson
2020-03-04add 6.8 syspatch public keyRobert Nagy
2020-02-28oops some snapshot tests fell inTheo de Raadt
2020-02-28syncTheo de Raadt
2020-02-276.8 packages keyChristian Weisgerber
2020-02-26add 6.8 base keyTheo de Raadt
2020-02-22Do not run _rc_parse_conf of /var/run/rc.d/foobar on "start".Antoine Jacoutot
This is needed in case a foobar fails to start but still returns 0. Changing its flags (in rc.conf.local) would then get ignored because of this cache (which is around to handle stop/check/reload on flags changes). claudio@ reported this issue when struggling with prometheus several weeks ago
2020-02-20Import regenerated moduli.Darren Tucker
2020-02-16Remove trailing backslasheskn
"prefix-set" blocks work with line breaks just fine, probably old macro leftover. OK job claudio
2020-02-12do not propagate TMPDIR and override value from /etc/locate.rc in weeklyJoerg Jung
effectively reverting r1.9 to follow principal of least surprise "this is fine" millert "i agree with direction" schwarze
2020-01-28sortChristian Weisgerber
2020-01-26try disconnecting old world boot.mac bootloader for a bitTed Unangst
2020-01-25sync rc.d/sshd with sshd proctitle change - listener has been modified toStuart Henderson
keep command-line arguments again; ok aja@ djm@
2020-01-24regenMartin Pieuchot
2020-01-24Use major 32 for dt(4).Martin Pieuchot
ok visa@, kettenis@, deraadt@
2020-01-24retire rebound etc bits to the atticTed Unangst
2020-01-24revert previous; guenther noted that the csh(1) part belongs in dot.loginOkan Demirmen
because each invocation will grow the path, but that exposed an interaction with loginShell:true in our dot.Xdefaults...
2020-01-23Extend PATH from login(1)/setusercontext(3) instead of overriding.Okan Demirmen
OK millert@
2020-01-23regen after adding pppacDavid Gwynne
2020-01-23wire up pppac(4).David Gwynne
with help from claudio@
2020-01-22update pexp in rc.d/sshd to match the new setproctitle ('sshd: [listener]Stuart Henderson
1 of 10-100 startups'). "makes sense" deraadt@ Beware if you have multiple sshd processes (e.g. on different ports) and want to restart/stop just one - with the current proctitle there's no way to distinguish between these so rc.d/rcctl will match all of them.
2020-01-21regenMartin Pieuchot
2020-01-21Add /dev/dtMartin Pieuchot
2020-01-156.4 keys not needed anymoreTheo de Raadt
2020-01-15Do not redirect already quiet stdout for IPv6 reject routeskn
"route -q" already silences all standard output; if it still prints something, that's a bug to fix in route. OK bluhm
2019-12-30don't suppress error output from running updatelocatedbMarc Espie
check that the resulting db works instead of some more specific test okay schwarze@
2019-12-22regenMark Kettenis
2019-12-22Wire up ipmi(4).Mark Kettenis
ok deraadt@
2019-12-21a few depend:-related thingies that were still in.Marc Espie
okay millert@, tb@
2019-12-17syncReyk Floeter
2019-12-17Fix fido(4) documentation link (no functional change)Reyk Floeter
2019-12-17Add fido(4), a HID driver for FIDO/U2F security keysReyk Floeter
While FIDO/U2F keys were already supported by the generic uhid(4) driver, this driver adds the first step to tighten the security of FIDO/U2F access. Specifically, users don't need read/write access to all USB/HID devices anymore and the driver also improves integration with pledge(2) and unveil(2): It is pledge-friendly because it doesn't require any ioctls to discover the device and unveil-friendly because it uses a single /dev/fido/* directory for its device nodes. It also allows to support FIDO/U2F in firefox without further weakening the "sandbox" of the browser. Firefox does not have a proper privsep design and many operations, such as U2F access, are handled directly by the main process. This means that the browser's "fat" main process needs direct read/write access to all USB HID devices, at least on other operating systems. With fido(4) we can support security keys in Firefox under OpenBSD without such a compromise. With this change, libfido2 stops using the ioctl to query the device vendor/product and just assumes "OpenBSD" "fido(4)" instead. The ioctl is still supported but there was no benefit in obtaining the vendor product or name; it also allows to use libfido2 under pledge. With feedback from deraadt@ and many others OK kettenis@ djm@ and jmc@ for the manpage bits
2019-12-14Fix comment: vmctl command options come before argumentskn
2019-12-14syncTheo de Raadt
2019-12-14usb devices nodes have been excesively permissive.Theo de Raadt
repair that.
2019-12-13syncTheo de Raadt
2019-12-13gpr(4) goes awayTheo de Raadt
2019-12-04Insert missing &&job
OK claudio@
2019-12-04Attempt to smear out stampedes on the RPKI rsync serversjob
OK claudio@ benno@
generated by cgit v1.2.3 (git 2.25.1) at 2024-12-03 03:53:41 +0000