summaryrefslogtreecommitdiff
path: root/sys/conf/GENERIC
AgeCommit message (Collapse)Author
2002-11-29expose state table changesMichael Shalayeff
2002-09-26renable sppp and lmc, now freeTheo de Raadt
2002-09-23turn off sppp, lmc, and cz until various licenses on those components areTheo de Raadt
resolved. sorry -- i've been warning people for some time that i would start to take this stance.
2002-07-06Remove kernel support for NTP. ok deraadt@ and tholo@Thomas Nordin
2002-05-16systrace pseudo-device okay deraadt@Niels Provos
2002-05-16put TCP_ECN into the kernelTheo de Raadt
2002-03-14Turn the ptrace(2) syscall into a kernel compile option, option PTRACE inMiod Vallat
your kernel configuration file. By default, GENERIC will enable this. When PTRACE is not enabled, several ptrace-like features of the procfs filesystem will be disabled as well (namely, the ability to read and write any process' registers, as well as attching, single stepping and detaching to/from processes). This should help paranoid people build better sandboxens, and us to build smaller ramdisks.
2001-09-17No need to define TIMEZONE and DST to 0 here, param.c does that automagically.Artur Grabowski
2001-08-09change a maze of altq options into just "altq" for the base+red+cbq, andTheo de Raadt
then altq_* for each of the other * experimental options. and.. enable it by default in GENERIC.
2001-08-08IPCOMP removal. deraadt@ ok.Jean-Jacques Bernard-Gundol
2001-07-06"option IPSEC needs the enc interface"Angelos D. Keromytis
2001-07-05IPComp. Turned off by default in GENERIC.Jean-Jacques Bernard-Gundol
2001-06-27SWAPPAGER and DEVPAGER are distant memories from the past.Artur Grabowski
2001-06-25we need only one pflog nowNiels Provos
2001-06-25first stab at packet logging for pf. inspired by late night dreams of art.Niels Provos
we just pass drop and passed packets to different pseudo interface that can be listened to with bpf.
2001-06-25move pf hooks to sys/conf/GENERICKjell Wooding
2001-05-30Remove ipf. Darren Reed has interpreted his (old, new, whichever)Theo de Raadt
licence in a way that makes ipf not free according to the rules we established over 5 years ago, at www.openbsd.org/goals.html (and those same basic rules govern the other *BSD projects too). Specifically, Darren says that modified versions are not permitted. But software which OpenBSD uses and redistributes must be free to all (be they people or companies), for any purpose they wish to use it, including modification, use, peeing on, or even integration into baby mulching machines or atomic bombs to be dropped on Australia. Furthermore, we know of a number of companies using ipf with modification like us, who are now in the same situation, and we hope that some of them will work with us to fill this gap that now exists in OpenBSD (temporarily, we hope).
2001-05-17It's Daylight Saving Time, not Savings. Fix comments.Peter Valchev
Discussed with pjanzen@
2001-05-16Create COMPAT_25 and move ogetfsstat, ostatfs and ostatfs into it.Todd C. Miller
Create COMPAT_23 and move __osemctl, omsgctl, oshmctl there.
2001-05-16kill COMPAT_{09,10,11} kernel options. We still need kern_info_09.c and ↵Todd C. Miller
kern_ipc_10.c for other compat modules.
2001-05-04vlan in GENERIC (ti(4) now has an issue, jason will deal)Theo de Raadt
2001-04-09FFS_SOFTUPDATES in sys/conf/GENERICTheo de Raadt
2001-04-09LFS is not an option right now.Artur Grabowski
2001-03-08move gif* and faith* into sys/conf/GENERIC. deraadt and angelos okJun-ichiro itojun Hagino
2001-01-05Add commented-out MROUTING option (for completeness) -- (james@oaktree.co.uk)Angelos D. Keromytis
2000-12-31Up the number of gif interfaces, we just need one enc interface.Angelos D. Keromytis
2000-10-13enable PULLDOWN_TEST, and use m_pulldown for IPv6 packet parsing.Jun-ichiro itojun Hagino
this will make it easier for IPv6 code to cope with uncontinuous packet header on the mbuf (without this, ep interface on i386 chokes during IPv6 ND process). should affect IPv6 only.
2000-04-26pseudo-device vlan (commented out for now)Chris Cappuccio
2000-03-22make UVM_SWAP_ENCRYPT default, still need to enable via sysctlNiels Provos
2000-03-17Cryptographic services framework, and software "device driver". TheAngelos D. Keromytis
idea is to support various cryptographic hardware accelerators (which may be (detachable) cards, secondary/tertiary/etc processors, software crypto, etc). Supports session migration between crypto devices. What it doesn't (yet) support: - multiple instances of the same algorithm used in the same session - use of multiple crypto drivers in the same session - asymmetric crypto No support for a userland device yet. IPsec code path modified to allow for asynchronous cryptography (callbacks used in both input and output processing). Some unrelated code simplification done in the process (especially for AH). Development of this code kindly supported by Network Security Technologies (NSTI). The code was writen mostly in Greece, and is being committed from Montreal.
2000-03-02Add an option DDB_SAFE_CONSOLE that defaults db_console to 1.Artur Grabowski
In many cases, setting db_console in /etc/rc is too late.
2000-01-09add INET6 into conf/GENERIC.Jun-ichiro itojun Hagino
add pseudo-devices for IPv6 into arch/*/conf/GENERIC. nuke arch/*/conf/GENERIC.v6.
2000-01-08gre(4) interface in GENERICAngelos D. Keromytis
1999-12-30insert commented UVM_SWAP_ENCRYPTIONNiels Provos
1999-10-29Up the number of enc interfaces.Angelos D. Keromytis
1999-10-06Put TCP_SACK back in as it is not turned on by default anyway.Todd C. Miller
That way, users who want it can turn it on via sysctl.
1999-10-03Remove commented out sample of SHMMAXPGS setting with machine-specificNiklas Hallqvist
comment. People should read options.4 for such info anyhow, not this file.
1999-10-01SACK is not bug-free yet; off for 2.6Theo de Raadt
1999-09-29commented out profiling optionsArtur Grabowski
1999-09-29Add option NETATALK (commented out).Angelos D. Keromytis
1999-07-06Added TCP_SIGNATURE option.cmetz
1999-07-01lmc driver; ported by chris@dqc.orgTheo de Raadt
1999-06-08disable TCP_FACK for nowNiels Provos
1999-05-27remove the NO_KMEMSTATS hack from sys/malloc.hArtur Grabowski
add KMEMSTATS to GENERIC to keep old behavior
1999-04-20renable TCP_SACK and TCP_FACK again. if you have problems direct flaimsNiels Provos
to me.
1999-04-11Reenable IPSEC now that it is off by default, but can be enabled via sysctlNiklas Hallqvist
1999-04-07and enc is not default eitherTheo de Raadt
1999-04-07disable IPSEC by defaultTheo de Raadt
1999-03-30make option IPSEC imply option KEYNiklas Hallqvist
1999-02-28support bridging by defaultTheo de Raadt