summaryrefslogtreecommitdiff
path: root/etc
AgeCommit message (Collapse)Author
2019-01-21Use ${rcexec} in rc_pre to do the config testing. This allows to specifyClaudio Jeker
macros with spaces in them. With and OK ajacoutot
2019-01-20untabifyMatthieu Herrb
2019-01-20New doc directories for xorgprotoMatthieu Herrb
2019-01-20The shell will strip the quotes from daemon_flags when starting a daemon so makeAntoine Jacoutot
sure pexp matches the process (i.e. doesn't include the quotes). It's a bit hackish but it allows things like these in rc.conf.local: relayd_flags=-D IPS="1.2.3.4 2.3.4.5" And we properly end up with... $ grep ^pexp /var/run/rc.d/relayd pexp=/usr/sbin/relayd -D IPS=1.2.3.4 1.2.3.5 ... which matches what is in the process list: root 14217 <snip> 0:00.01 /usr/sbin/relayd -D IPS=1.2.3.4 1.2.3.5 There's always the possibility that we have introduced a regressions with hand crafted functions in rc.d scripts (mostly from packags), so watch out. reported by and debugged with claudio@
2019-01-19document pwraction in the example fileTed Unangst
2019-01-19Clean-up unused directoriesMatthieu Herrb
2019-01-12Use acpidump -q to avoid message about ACPI information not being found.Mark Kettenis
Many arm64 systems use device trees instead of ACPI and acpidump is expectected to fail on those systems. And vmm(4) doesn't provide ACPI information either. ok deraadt@
2019-01-08Move acme-client.conf to examples. Since we no longer store theFlorian Obser
agreement url in here we no longer need to updated it all the time. OK deraadt
2018-12-206.2 keys no longer requiredTheo de Raadt
2018-12-16Remove control-use-cert. It is ignored for local sockets (since unbound 1.7.3).Tim van der Molen
OK florian@ sthen@
2018-12-12add commented-out "val-log-level: 2" next to the uncommentable line toStuart Henderson
enable dnssec validation, it's really useful for debug
2018-12-11the world is not ready for dnssec enabled by defaultFlorian Obser
2018-12-10remove qname-minimisation from sample config, this was turned on byStuart Henderson
default upstream in 1.7.2 (picked up by us with the update to 1.7.3). ok florian@
2018-12-07Remove public resolver IP addresses, just provide a neutral "documentationStuart Henderson
prefix" address instead - there are so many available with varying policies that this isn't a good place to list them (and might imply some kind of recommendation which is not intended). Particularly prompted by several on the previous list (he.net and opendns) strip RRSIG from results which cause DNSSEC failures now that validation is enabled in the example config as noticed by solene@. While there, shrink qname-minimisation comment to match other nearby comments, and drop dns64 example which is quite a specialist use case and not really needed in this basic example.
2018-12-07Enable DNSSEC validation.Florian Obser
Requested by & OK claudio Input & OK sthen OK job, solene Various commenting that they run with validation since a long time without issues.
2018-11-17add the missing space. in the future, should mail -f the file to ensure it ↵Theo de Raadt
is correct format
2018-11-17make the bogon set competely or-longer, rather than having to manage itTheo de Raadt
or-longer at useage time. ok job benno
2018-11-13Grow sgi iso to make room for clang.Visa Hankala
Cluebat and OK deraadt@
2018-10-31Import new moduli.Darren Tucker
2018-10-29Revert previous (for now).Antoine Jacoutot
semarie found a few regressions with daemon that will fail if cwd is not accessible.
2018-10-16Change the way we call su(1) in rcexec:Antoine Jacoutot
- drop `-'l' to prevent simulating a full login and running /root/.profile (prodded by a mail from J Greely) - use `-m' to preserve the environment because we now set HOME to "/" like /etc/rc does; note that we now also clear the environment using `env -i' before running su(1) which leaves us with only HOME, PATH and SHELL Committing early to catch regressions fast, if any. ok halex@
2018-09-27Add vmctl stop -a [-fw] option to stop or terminate all running VMs.Reyk Floeter
This is also be used to simplify the vmd rc stop script. OK mlarkin@ ccardenas@
2018-09-23add 6.5 syspatch public keyRobert Nagy
2018-09-216.5 firmware keyStuart Henderson
2018-09-20grow alpha and hppa media to accomodate some recent growthTheo de Raadt
2018-09-20Import updated moduli.Darren Tucker
2018-09-186.5 packages keyChristian Weisgerber
2018-09-186.5 base keyTheo de Raadt
2018-09-18grow arm64 ramdiskTheo de Raadt
2018-09-10Adjust the config to -current bgpd which makes it a lot more readable.Claudio Jeker
OK phessler@
2018-09-09update example bgpd.conf to use new config language features:Sebastian Benoit
network prefix-set ... and filters with prefix-set ... or-longer. ok claudio@
2018-09-08Remove optional commas from example config. In the future these optionalClaudio Jeker
commas may become a syntax error.
2018-08-31syncJoshua Stein
2018-08-31Add more uhid devices, 8 totalJoshua Stein
ok deraadt
2018-08-29Historically /etc/netstart (and the equivalent code in the installKenneth R Westerback
script) did 'ifconfig <if> down' before starting dhclient(8). This was a way of ensuring old running copies of dhclient were killed before a new one started. Current dhclient does not need this assist, so change "ifconfig <if> down" to "ifconfig <if> up" pending further script optimizations. Similar to a 2014 attempt by halex@. Prompted by a misc@ report from Kristjan Komlosi reporting hanging diskless setups. ok halex@ kn@
2018-08-28Unclutter bgpd.conf example config filejob
We're aiming to work towards an examples/bgpd.conf file that is a good starting point for real world deployments rather than a showcase of all capabilities bgpd(8) has. OK deraadt@ claudio@
2018-08-20syncMark Kettenis
2018-08-20Add /dev/drm[0-3].Mark Kettenis
ok deraadt@, jsg@, mpi@
2018-08-19syncanton
2018-08-19Add kcov(4), a kernel code coverage tracing driver. It's used in conjunctionanton
with the syzkaller kernel fuzzer. So far, 8 distinct panics have been found and fixed. This effort will continue. kcov is limited to architectures using Clang as their default compiler and is not enabled by default. With help from mpi@, thanks! ok kettenis@ mpi@ visa@
2018-08-16Switch nsd control socket from localhost to a unix domain socket.Florian Obser
OK sthen
2018-08-16The zoneinfo directories can be mode 755 just like everything else.Todd C. Miller
OK deraadt@
2018-08-11don't need 61 keys anymoreTheo de Raadt
2018-08-10crank to 6.4-betaTheo de Raadt
2018-08-07Similar to the ldpd.conf change don't use a macro of the secret.Claudio Jeker
Macros get sometimes logged so we should not encurage to use them for sensitive data.
2018-08-06Correct example file since reserved words cannot be used as macros. Not onlyRicardo Mestre
that, the macro used was password and if we changed it to something like pass="secret" it would log it if the daemon was ran in verbose mode. Hint and OK claudio@
2018-07-28syncAlexandre Ratchov
2018-07-28Remove unused /dev/audio and /dev/audioctl symlinks.Alexandre Ratchov
ok deraadt
2018-07-25s/resolver/nameserver/ to match parse.y -r1.4Jasper Lievisse Adriaanse
2018-07-24add rad.conf exampleJasper Lievisse Adriaanse
ok florian@
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-30 01:25:00 +0000