Aren
/
NetBSD
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
NetBSD/etc/mtree/special

412 lines
17 KiB
Plaintext
Raw Normal View History

Imported envsys 2, a brief description of the new features: (Part 4: documentation and configuration files) * Support for detachable sensors. * Cleaned up the API for simplicity and efficiency. * Ability to send capacity/critical/warning events to powerd(8). * Adapted all the code to the new locking order. * Compatibility with the old envsys API: the ENVSYS_GTREINFO and ENVSYS_GTREDATA ioctl(2)s are supported. * Added support for a 'dictionary based communication channel' between sysmon_power(9) and powerd(8), that means there is no 32 bytes event size restriction anymore. * Binary compatibility with old envstat(8) and powerd(8) via COMPAT_40. * All drivers with the n^2 gtredata bug were fixed, PR kern/36226. Tested by: blymn: smsc(4). bouyer: ipmi(4), mfi(4). kefren: ug(4). njoly: viaenv(4), adt7463.c. riz: owtemp(4). xtraeme: acpiacad(4), acpibat(4), acpitz(4), aiboost(4), it(4), lm(4).
2007-07-01 11:55:51 +04:00
# $NetBSD: special,v 1.112 2007/07/01 07:55:53 xtraeme Exp $
update to Lite
1994-06-19 07:23:13 +04:00
# @(#)special 8.2 (Berkeley) 1/23/94
#
Remove comment about "hand-crafted". Mention this file may be overwritten on upgrades, where to put custom specs instead, and point to manual page.
2006-12-14 05:28:30 +03:00
# This file may be overwritten on upgrades.
# Put your custom specifications in /etc/mtree/special.local instead.
# See security.conf(5) for details.
update to Lite
1994-06-19 07:23:13 +04:00
#
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
# /etc/security checks:
# - All of these are checked if $check_mtree is enabled.
Use "nodiff" instead of "nomail" for the tag which is used to exclude files from having the changes diff generated. Suggested by Michael Graff.
2001-10-15 07:00:22 +04:00
# - Files with "nodiff" tags are highlighted if they change.
# - Files without "nodiff" or "exclude" tags are displayed
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
# with diff(1)s if $check_changelist is enabled.
#
update to Lite
1994-06-19 07:23:13 +04:00
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
/set uname=root gname=wheel
update to Lite
1994-06-19 07:23:13 +04:00
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
. type=dir mode=0755
update to Lite
1994-06-19 07:23:13 +04:00
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./dev type=dir mode=0755
./dev/drum type=char mode=0640 gname=kmem
./dev/fd type=dir mode=0755 ignore
./dev/kmem type=char mode=0640 gname=kmem
./dev/mem type=char mode=0640 gname=kmem
update to Lite
1994-06-19 07:23:13 +04:00
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc type=dir mode=0755
./etc/Distfile type=file mode=0644 optional
./etc/amd type=dir mode=0755 optional
./etc/apm type=dir mode=0755 optional
Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@, NetBSD Foundation Membership still pending.) This stack was written by Iain under sponsorship from Itronix Inc. The stack includes support for rfcomm networking (networking via your bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets. Drivers for both PCMCIA and USB bluetooth controllers are included.
2006-06-19 19:44:33 +04:00
./etc/bluetooth type=dir mode=0755
update to bluetooth device attachment: remove pseudo-device btdev(4) and inherent limitations add bthub(4) which autoconfigures at bluetooth controllers as they are enabled. bluetooth devices now attach here. btdevctl(8) and its cache is updated to handle new semantics etc/rc.d/btdevctl is updated to configure devices from a list in /etc/bluetooth/btdevctl.conf
2006-09-10 19:45:55 +04:00
./etc/bluetooth/btdevctl.conf type=file mode=0644
Supprot Bluetooth HCI UART (H4) driver and daemon.
2007-02-20 19:53:20 +03:00
./etc/bluetooth/btuartd.conf type=file mode=0644
Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@, NetBSD Foundation Membership still pending.) This stack was written by Iain under sponsorship from Itronix Inc. The stack includes support for rfcomm networking (networking via your bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets. Drivers for both PCMCIA and USB bluetooth controllers are included.
2006-06-19 19:44:33 +04:00
./etc/bluetooth/hosts type=file mode=0644
./etc/bluetooth/protocols type=file mode=0644
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/bootparams type=file mode=0644 optional
./etc/bootptab type=file mode=0644 optional
./etc/ccd.conf type=file mode=0644 optional
Added cgd rc.d script and put it in the appropriate postinstall and mtree files.
2002-10-09 18:55:53 +04:00
./etc/cgd type=dir mode=0700 optional
./etc/cgd/cgd.conf type=file mode=0600 optional
monitor etc/changelist again
2001-10-15 06:56:42 +04:00
./etc/changelist type=file mode=0644
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/crontab type=file mode=0644 optional
./etc/csh.cshrc type=file mode=0644
./etc/csh.login type=file mode=0644
./etc/csh.logout type=file mode=0644
./etc/daily type=file mode=0644
./etc/daily.conf type=file mode=0644
./etc/daily.local type=file mode=0644 optional
./etc/defaultdomain type=file mode=0644 optional
./etc/defaults type=dir mode=0755
./etc/defaults/daily.conf type=file mode=0444
./etc/defaults/monthly.conf type=file mode=0444
./etc/defaults/rc.conf type=file mode=0444
./etc/defaults/security.conf type=file mode=0444
./etc/defaults/weekly.conf type=file mode=0444
./etc/dhclient-enter-hooks type=file mode=0644 optional
./etc/dhclient-exit-hooks type=file mode=0644 optional
./etc/dhclient.conf type=file mode=0644 optional
./etc/dhcpd.conf type=file mode=0644 optional
./etc/disktab type=file mode=0644
./etc/dm.conf type=file mode=0644
Add exclude tag to dumpdates so that diffs do not show up in the daily security report. This file is expected to change daily, and this is not a security problem. (Also, the most recent dumps are already shown in the daily report.)
2002-08-27 06:01:37 +04:00
./etc/dumpdates type=file mode=0664 gname=operator optional tags=exclude
Imported envsys 2, a brief description of the new features: (Part 4: documentation and configuration files) * Support for detachable sensors. * Cleaned up the API for simplicity and efficiency. * Ability to send capacity/critical/warning events to powerd(8). * Adapted all the code to the new locking order. * Compatibility with the old envsys API: the ENVSYS_GTREINFO and ENVSYS_GTREDATA ioctl(2)s are supported. * Added support for a 'dictionary based communication channel' between sysmon_power(9) and powerd(8), that means there is no 32 bytes event size restriction anymore. * Binary compatibility with old envstat(8) and powerd(8) via COMPAT_40. * All drivers with the n^2 gtredata bug were fixed, PR kern/36226. Tested by: blymn: smsc(4). bouyer: ipmi(4), mfi(4). kefren: ug(4). njoly: viaenv(4), adt7463.c. riz: owtemp(4). xtraeme: acpiacad(4), acpibat(4), acpitz(4), aiboost(4), it(4), lm(4).
2007-07-01 11:55:51 +04:00
./etc/envsys.conf type=file mode=0644 optional
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/ethers type=file mode=0644 optional
./etc/exports type=file mode=0644 optional
./etc/floppytab type=file mode=0644
./etc/fstab type=file mode=0644
./etc/ftpchroot type=file mode=0644
./etc/ftpd.conf type=file mode=0644 optional
./etc/ftpusers type=file mode=0644
./etc/ftpwelcome type=file mode=0644 optional
./etc/gateways type=file mode=0644 optional
./etc/gettytab type=file mode=0644
./etc/group type=file mode=0644
./etc/hesiod.conf type=file mode=0644 optional
./etc/hosts type=file mode=0644
./etc/hosts.allow type=file mode=0644 optional
./etc/hosts.deny type=file mode=0644 optional
./etc/hosts.equiv type=file mode=0600 optional
./etc/hosts.lpd type=file mode=0644 optional
./etc/ifaliases type=file mode=0644 optional
./etc/inetd.conf type=file mode=0644
./etc/ipf.conf type=file mode=0644 optional
Add ./etc/ipf6.conf
2002-02-20 00:33:13 +03:00
./etc/ipf6.conf type=file mode=0644 optional
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/ipnat.conf type=file mode=0644 optional
Change ipsec.conf not to be world-readable and nodiff, so we don't expose keys if they happen to be in that file. Also add /etc/racoon stuff.
2003-04-16 07:16:38 +04:00
./etc/ipsec.conf type=file mode=0600 optional tags=nodiff
Add distribution entries and supporting files for the iSCSI target.
2006-02-08 22:02:58 +03:00
./etc/iscsi type=dir mode=0755
Install the iscsi/auths file as mode 600.
2006-02-11 12:33:16 +03:00
./etc/iscsi/auths type=file mode=0600
Add distribution entries and supporting files for the iSCSI target.
2006-02-08 22:02:58 +03:00
./etc/iscsi/targets type=file mode=0644
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/ld.so.conf type=file mode=0644 optional
./etc/lkm.conf type=file mode=0644 optional
./etc/localtime type=link mode=0755
Add /etc/locate.conf
2004-02-06 18:36:52 +03:00
./etc/locate.conf type=file mode=0644 optional
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/login.conf type=file mode=0644 optional
./etc/mail type=dir mode=0755
./etc/mail/aliases type=file mode=0644
etc/mail/aliases.db is optional. From [misc/18536] by Jeremy Reed.
2003-05-09 04:10:52 +04:00
./etc/mail/aliases.db type=file mode=0644 optional tags=exclude
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/mail.rc type=file mode=0644
./etc/mailer.conf type=file mode=0644
./etc/man.conf type=file mode=0644
Use "nodiff" instead of "nomail" for the tag which is used to exclude files from having the changes diff generated. Suggested by Michael Graff.
2001-10-15 07:00:22 +04:00
./etc/master.passwd type=file mode=0600 tags=nodiff
Mark mk.conf optional, addressing install/15572.
2002-02-24 20:17:48 +03:00
./etc/mk.conf type=file mode=0644 optional
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/moduli type=file mode=0444
./etc/monthly type=file mode=0644
./etc/monthly.conf type=file mode=0644
./etc/monthly.local type=file mode=0644 optional
./etc/mrouted.conf type=file mode=0644
./etc/mtree type=dir mode=0755
./etc/mtree/special type=file mode=0444
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./etc/mtree/special.local type=file mode=0644 optional
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/mygate type=file mode=0644 optional
Document the defaultroute6 rc.conf variable and the /etc/mygate6 file in /etc/defaults/rc.conf, /etc/mtree/special, and rc.conf(5). Ok with wiz.
2006-03-27 14:07:07 +04:00
./etc/mygate6 type=file mode=0644 optional
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/myname type=file mode=0644 optional
./etc/named.conf type=file mode=0644 optional
./etc/namedb type=dir mode=0755
./etc/netconfig type=file mode=0644
./etc/netgroup type=file mode=0644 optional
./etc/netstart.local type=file mode=0644 optional
./etc/networks type=file mode=0644
./etc/newsyslog.conf type=file mode=0644
./etc/nsswitch.conf type=file mode=0644
./etc/ntp.conf type=file mode=0644 optional
Add /etc/pam.conf and /etc/pam.d/*
2005-05-02 07:23:43 +04:00
./etc/pam.conf type=file mode=0644 optional
./etc/pam.d type=dir mode=0755
./etc/pam.d/display_manager type=file mode=0644
./etc/pam.d/ftpd type=file mode=0644
./etc/pam.d/gdm type=file mode=0644
./etc/pam.d/imap type=file mode=0644
./etc/pam.d/kde type=file mode=0644
./etc/pam.d/login type=file mode=0644
./etc/pam.d/other type=file mode=0644
./etc/pam.d/passwd type=file mode=0644
./etc/pam.d/pop3 type=file mode=0644
./etc/pam.d/ppp type=file mode=0644
./etc/pam.d/rexecd type=file mode=0644
./etc/pam.d/rsh type=file mode=0644
./etc/pam.d/sshd type=file mode=0644
./etc/pam.d/su type=file mode=0644
./etc/pam.d/system type=file mode=0644
./etc/pam.d/telnetd type=file mode=0644
./etc/pam.d/xdm type=file mode=0644
./etc/pam.d/xserver type=file mode=0644
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/passwd type=file mode=0644
./etc/passwd.conf type=file mode=0644 optional
./etc/phones type=file mode=0644
remove superfluous "uname=root gname=wheel" from etc/postfix/** entries
2003-04-15 10:21:51 +04:00
./etc/postfix type=dir mode=0755 optional
./etc/postfix/main.cf type=file mode=0644 optional
./etc/postfix/master.cf type=file mode=0644 optional
./etc/postfix/postfix-script type=file mode=0555 optional
etc/powerd/** is optional
2003-04-30 13:05:56 +04:00
./etc/powerd type=dir mode=0755 optional
./etc/powerd/scripts type=dir mode=0755 optional
Add acadapter, lid_switch, and sleep_button powerd scripts.
2006-09-26 06:19:56 +04:00
./etc/powerd/scripts/acadapter type=file mode=0555 optional
./etc/powerd/scripts/lid_switch type=file mode=0555 optional
etc/powerd/** is optional
2003-04-30 13:05:56 +04:00
./etc/powerd/scripts/power_button type=file mode=0555 optional
./etc/powerd/scripts/reset_button type=file mode=0555 optional
Imported envsys 2, a brief description of the new features: (Part 4: documentation and configuration files) * Support for detachable sensors. * Cleaned up the API for simplicity and efficiency. * Ability to send capacity/critical/warning events to powerd(8). * Adapted all the code to the new locking order. * Compatibility with the old envsys API: the ENVSYS_GTREINFO and ENVSYS_GTREDATA ioctl(2)s are supported. * Added support for a 'dictionary based communication channel' between sysmon_power(9) and powerd(8), that means there is no 32 bytes event size restriction anymore. * Binary compatibility with old envstat(8) and powerd(8) via COMPAT_40. * All drivers with the n^2 gtredata bug were fixed, PR kern/36226. Tested by: blymn: smsc(4). bouyer: ipmi(4), mfi(4). kefren: ug(4). njoly: viaenv(4), adt7463.c. riz: owtemp(4). xtraeme: acpiacad(4), acpibat(4), acpitz(4), aiboost(4), it(4), lm(4).
2007-07-01 11:55:51 +04:00
./etc/powerd/scripts/sensor_battery type=file mode=0555 optional
./etc/powerd/scripts/sensor_drive type=file mode=0555 optional
./etc/powerd/scripts/sensor_fan type=file mode=0555 optional
./etc/powerd/scripts/sensor_power type=file mode=0555 optional
./etc/powerd/scripts/sensor_resistance type=file mode=0555 optional
./etc/powerd/scripts/sensor_temperature type=file mode=0555 optional
./etc/powerd/scripts/sensor_voltage type=file mode=0555 optional
Add acadapter, lid_switch, and sleep_button powerd scripts.
2006-09-26 06:19:56 +04:00
./etc/powerd/scripts/sleep_button type=file mode=0555 optional
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/ppp type=dir mode=0755 optional
./etc/ppp/options type=file mode=0644 optional
./etc/printcap type=file mode=0644
./etc/profile type=file mode=0644
./etc/protocols type=file mode=0644
./etc/rbootd.conf type=file mode=0644 optional
./etc/rc type=file mode=0644
./etc/rc.conf type=file mode=0644
./etc/rc.d type=dir mode=0755
./etc/rc.d/DAEMON type=file mode=0555
./etc/rc.d/LOGIN type=file mode=0555
etc/rc.d/NETWORK was renamed to etc/rc.d/NETWORKING
2002-02-03 11:33:14 +03:00
./etc/rc.d/NETWORKING type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/SERVERS type=file mode=0555
./etc/rc.d/accounting type=file mode=0555
./etc/rc.d/altqd type=file mode=0555
./etc/rc.d/amd type=file mode=0555
./etc/rc.d/apmd type=file mode=0555
./etc/rc.d/bootconf.sh type=file mode=0555
./etc/rc.d/bootparams type=file mode=0555
Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@, NetBSD Foundation Membership still pending.) This stack was written by Iain under sponsorship from Itronix Inc. The stack includes support for rfcomm networking (networking via your bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets. Drivers for both PCMCIA and USB bluetooth controllers are included.
2006-06-19 19:44:33 +04:00
./etc/rc.d/btconfig type=file mode=0555
rename btcontrol(8) as btdevctl(8) to make it fit with the NetBSD naming scheme for control programs. This fixes pr 34051.
2006-08-13 13:03:21 +04:00
./etc/rc.d/btdevctl type=file mode=0555
Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@, NetBSD Foundation Membership still pending.) This stack was written by Iain under sponsorship from Itronix Inc. The stack includes support for rfcomm networking (networking via your bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets. Drivers for both PCMCIA and USB bluetooth controllers are included.
2006-06-19 19:44:33 +04:00
./etc/rc.d/bthcid type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/ccd type=file mode=0555
Add missing rc.d scripts (cgd, ftpd, hostapd, ifwatchd, ipfs, irdaattach, moused, rtclocaltime, staticroute, tpctl). From Jukka Salmi in PR misc/33626.
2006-09-25 03:10:47 +04:00
./etc/rc.d/cgd type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/cleartmp type=file mode=0555
./etc/rc.d/cron type=file mode=0555
./etc/rc.d/dhclient type=file mode=0555
./etc/rc.d/dhcpd type=file mode=0555
./etc/rc.d/dhcrelay type=file mode=0555
./etc/rc.d/dmesg type=file mode=0555
./etc/rc.d/downinterfaces type=file mode=0555
enable rc.d fixsb script initial testing suggests that it is working and I am confident it will not cause irrevocable damage
2004-04-18 08:02:27 +04:00
./etc/rc.d/fixsb type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/fsck type=file mode=0555
Add missing rc.d scripts (cgd, ftpd, hostapd, ifwatchd, ipfs, irdaattach, moused, rtclocaltime, staticroute, tpctl). From Jukka Salmi in PR misc/33626.
2006-09-25 03:10:47 +04:00
./etc/rc.d/ftpd type=file mode=0555
./etc/rc.d/hostapd type=file mode=0555
add identd
2004-02-01 05:32:58 +03:00
./etc/rc.d/identd type=file mode=0555
Add missing rc.d scripts (cgd, ftpd, hostapd, ifwatchd, ipfs, irdaattach, moused, rtclocaltime, staticroute, tpctl). From Jukka Salmi in PR misc/33626.
2006-09-25 03:10:47 +04:00
./etc/rc.d/ifwatchd type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/inetd type=file mode=0555
./etc/rc.d/ipfilter type=file mode=0555
Add missing rc.d scripts (cgd, ftpd, hostapd, ifwatchd, ipfs, irdaattach, moused, rtclocaltime, staticroute, tpctl). From Jukka Salmi in PR misc/33626.
2006-09-25 03:10:47 +04:00
./etc/rc.d/ipfs type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/ipmon type=file mode=0555
./etc/rc.d/ipnat type=file mode=0555
./etc/rc.d/ipsec type=file mode=0555
Add missing rc.d scripts (cgd, ftpd, hostapd, ifwatchd, ipfs, irdaattach, moused, rtclocaltime, staticroute, tpctl). From Jukka Salmi in PR misc/33626.
2006-09-25 03:10:47 +04:00
./etc/rc.d/irdaattach type=file mode=0555
Add distribution entries and supporting files for the iSCSI target.
2006-02-08 22:02:58 +03:00
./etc/rc.d/iscsi_target type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/isdnd type=file mode=0555
./etc/rc.d/kdc type=file mode=0555
./etc/rc.d/ldconfig type=file mode=0555
./etc/rc.d/lkm1 type=file mode=0555
./etc/rc.d/lkm2 type=file mode=0555
./etc/rc.d/lkm3 type=file mode=0555
./etc/rc.d/local type=file mode=0555
./etc/rc.d/lpd type=file mode=0555
Add mixerctl rc.d script.
2002-06-02 22:38:35 +04:00
./etc/rc.d/mixerctl type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/mopd type=file mode=0555
./etc/rc.d/motd type=file mode=0555
./etc/rc.d/mountall type=file mode=0555
./etc/rc.d/mountcritlocal type=file mode=0555
./etc/rc.d/mountcritremote type=file mode=0555
./etc/rc.d/mountd type=file mode=0555
Add missing rc.d scripts (cgd, ftpd, hostapd, ifwatchd, ipfs, irdaattach, moused, rtclocaltime, staticroute, tpctl). From Jukka Salmi in PR misc/33626.
2006-09-25 03:10:47 +04:00
./etc/rc.d/moused type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/mrouted type=file mode=0555
./etc/rc.d/named type=file mode=0555
./etc/rc.d/ndbootd type=file mode=0555
./etc/rc.d/network type=file mode=0555
./etc/rc.d/newsyslog type=file mode=0555
./etc/rc.d/nfsd type=file mode=0555
./etc/rc.d/nfslocking type=file mode=0555
./etc/rc.d/ntpd type=file mode=0555
./etc/rc.d/ntpdate type=file mode=0555
Add support for per-user /tmp. Enabled via per_user_tmp in /etc/rc.conf (default off). See security(8) and rc.conf(5) for more details. Lots of input from thorpej@ & christos@, thanks!
2007-02-04 11:19:26 +03:00
./etc/rc.d/perusertmp type=file mode=0555
pf needs to be started after the network is up, because some pf rules derive IP address(es) from the interface (e.g "... from any to fxp0"). This however, creates window for possible attacks from the network. Implement the solution proposed by YAMAMOTO Takashi: Add /etc/defaults/pf.boot.conf and load it with the /etc/rc.d/pf_boot script before starting the network. People who don't like the default rules can override it with their own /etc/pf.boot.conf. The default rules have been obtained from OpenBSD. No objections on: tech-security
2005-08-23 16:12:56 +04:00
./etc/rc.d/pf type=file mode=0555
./etc/rc.d/pf_boot type=file mode=0555
./etc/rc.d/pflogd type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/poffd type=file mode=0555
./etc/rc.d/postfix type=file mode=0555
Add powerd rc.d script and configuration scripts.
2003-04-18 09:42:04 +04:00
./etc/rc.d/powerd type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/ppp type=file mode=0555
./etc/rc.d/pwcheck type=file mode=0555
./etc/rc.d/quota type=file mode=0555
./etc/rc.d/racoon type=file mode=0555
./etc/rc.d/raidframe type=file mode=0555
Split raidframe parity checking/rebuild out into raidframeparity, which is called after quota so we don't end up with fsck and raidframe parity rebuild taking forever after a crash/reboot. While we are here check for raid[0-9].conf & raid[1-9][0-9].conf not raid[0-9].conf & raid[0-9][0-9].conf
2002-09-03 19:35:51 +04:00
./etc/rc.d/raidframeparity type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/rarpd type=file mode=0555
./etc/rc.d/rbootd type=file mode=0555
./etc/rc.d/root type=file mode=0555
./etc/rc.d/route6d type=file mode=0555
./etc/rc.d/routed type=file mode=0555
./etc/rc.d/rpcbind type=file mode=0555
./etc/rc.d/rtadvd type=file mode=0555
Add missing rc.d scripts (cgd, ftpd, hostapd, ifwatchd, ipfs, irdaattach, moused, rtclocaltime, staticroute, tpctl). From Jukka Salmi in PR misc/33626.
2006-09-25 03:10:47 +04:00
./etc/rc.d/rtclocaltime type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/rtsold type=file mode=0555
./etc/rc.d/rwho type=file mode=0555
./etc/rc.d/savecore type=file mode=0555
./etc/rc.d/screenblank type=file mode=0555
Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@, NetBSD Foundation Membership still pending.) This stack was written by Iain under sponsorship from Itronix Inc. The stack includes support for rfcomm networking (networking via your bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets. Drivers for both PCMCIA and USB bluetooth controllers are included.
2006-06-19 19:44:33 +04:00
./etc/rc.d/sdpd type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/securelevel type=file mode=0555
./etc/rc.d/sshd type=file mode=0555
Fix a sorting error in the last change. Pointed out by Jukka Salmi.
2006-09-26 01:26:27 +04:00
./etc/rc.d/staticroute type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/swap1 type=file mode=0555
./etc/rc.d/swap2 type=file mode=0555
./etc/rc.d/sysctl type=file mode=0555
./etc/rc.d/sysdb type=file mode=0555
./etc/rc.d/syslogd type=file mode=0555
./etc/rc.d/timed type=file mode=0555
Add missing rc.d scripts (cgd, ftpd, hostapd, ifwatchd, ipfs, irdaattach, moused, rtclocaltime, staticroute, tpctl). From Jukka Salmi in PR misc/33626.
2006-09-25 03:10:47 +04:00
./etc/rc.d/tpctl type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/ttys type=file mode=0555
Add the veriexec rc.d script.
2004-01-14 13:51:54 +03:00
./etc/rc.d/veriexec type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/virecover type=file mode=0555
add wdogctl
2002-07-30 13:11:27 +04:00
./etc/rc.d/wdogctl type=file mode=0555
PR 34692: wpa_supplicant script. By Jukka Salmi.
2006-10-07 20:50:34 +04:00
./etc/rc.d/wpa_supplicant type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/wscons type=file mode=0555
add wsmoused
2002-07-04 03:29:51 +04:00
./etc/rc.d/wsmoused type=file mode=0555
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/rc.d/xdm type=file mode=0555
./etc/rc.d/xfs type=file mode=0555
./etc/rc.d/ypbind type=file mode=0555
./etc/rc.d/yppasswdd type=file mode=0555
./etc/rc.d/ypserv type=file mode=0555
./etc/rc.lkm type=file mode=0644
./etc/rc.local type=file mode=0644 optional
./etc/rc.shutdown type=file mode=0644
./etc/rc.shutdown.local type=file mode=0644 optional
./etc/rc.subr type=file mode=0644
./etc/remote type=file mode=0644
./etc/resolv.conf type=file mode=0644 optional
./etc/rpc type=file mode=0644
./etc/rtadvd.conf type=file mode=0644 optional
./etc/security type=file mode=0644
./etc/security.conf type=file mode=0644
./etc/security.local type=file mode=0644 optional
./etc/services type=file mode=0644
./etc/shells type=file mode=0644
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./etc/shosts.equiv type=file mode=0600 optional
PR/18476: reed at reedmedia dot net: add /etc/skel to special mtree Slightly different patch applied (entry was made optional), thanks!
2006-09-23 13:42:31 +04:00
./etc/skel type=dir mode=0755 optional
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./etc/spwd.db type=file mode=0600 tags=exclude
etc/ssh is mode 0755 not 0644. Noted by Toru TAKAMIZU on current-users.
2002-03-27 10:15:57 +03:00
./etc/ssh type=dir mode=0755 optional
Complete the conversion back to the OpenSSH default configuration files of "/etc/ssh/ssh_config" (from "/etc/ssh/ssh.conf") for ssh(1) and other userland tools, and "/etc/ssh/sshd_config (from "/etc/ssh/sshd.conf") for sshd(8). etc/postinstall will detect this, and if "fix" is given, rename the files.
2002-04-29 12:23:34 +04:00
./etc/ssh/ssh_config type=file mode=0644 optional
move ssh config file to /etc/ssh
2002-03-22 18:47:01 +03:00
./etc/ssh/ssh_host_dsa_key type=file mode=0600 optional tags=nodiff
./etc/ssh/ssh_host_dsa_key.pub type=file mode=0644 optional
./etc/ssh/ssh_host_key type=file mode=0600 optional tags=nodiff
./etc/ssh/ssh_host_key.pub type=file mode=0644 optional
./etc/ssh/ssh_host_rsa_key type=file mode=0600 optional tags=nodiff
./etc/ssh/ssh_host_rsa_key.pub type=file mode=0644 optional
./etc/ssh/ssh_known_hosts type=file mode=0644 optional
./etc/ssh/ssh_known_hosts2 type=file mode=0644 optional
Complete the conversion back to the OpenSSH default configuration files of "/etc/ssh/ssh_config" (from "/etc/ssh/ssh.conf") for ssh(1) and other userland tools, and "/etc/ssh/sshd_config (from "/etc/ssh/sshd.conf") for sshd(8). etc/postinstall will detect this, and if "fix" is given, rename the files.
2002-04-29 12:23:34 +04:00
./etc/ssh/sshd_config type=file mode=0644 optional
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./etc/sysctl.conf type=file mode=0644
./etc/syslog.conf type=file mode=0644
./etc/ttyaction type=file mode=0644 optional
./etc/ttys type=file mode=0644
./etc/usermgmt.conf type=file mode=0644 optional
./etc/weekly type=file mode=0644
./etc/weekly.conf type=file mode=0644
./etc/weekly.local type=file mode=0644 optional
./etc/wscons.conf type=file mode=0644
update to Lite
1994-06-19 07:23:13 +04:00
Change ipsec.conf not to be world-readable and nodiff, so we don't expose keys if they happen to be in that file. Also add /etc/racoon stuff.
2003-04-16 07:16:38 +04:00
./etc/racoon type=dir mode=0755 optional
./etc/racoon/racoon.conf type=file mode=0644 optional
./etc/racoon/psk.txt type=file mode=0600 optional tags=nodiff
Add support for per-user /tmp. Enabled via per_user_tmp in /etc/rc.conf (default off). See security(8) and rc.conf(5) for more details. Lots of input from thorpej@ & christos@, thanks!
2007-02-04 11:19:26 +03:00
./private type=dir mode=0755 optional
./private/tmp type=dir mode=0111 optional ignore
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./root type=dir mode=0755
./root/.cshrc type=file mode=0644
./root/.klogin type=file mode=0600 optional
./root/.login type=file mode=0644
./root/.profile type=file mode=0644
./root/.rhosts type=file mode=0600 optional
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./root/.shosts type=file mode=0600 optional
./root/.ssh type=dir mode=0700 optional
./root/.ssh/authorized_keys type=file mode=0600 optional
./root/.ssh/authorized_keys2 type=file mode=0600 optional
./root/.ssh/config type=file mode=0644 optional
Use "nodiff" instead of "nomail" for the tag which is used to exclude files from having the changes diff generated. Suggested by Michael Graff.
2001-10-15 07:00:22 +04:00
./root/.ssh/id_dsa type=file mode=0600 optional tags=nodiff
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./root/.ssh/id_dsa.pub type=file mode=0644 optional
Use "nodiff" instead of "nomail" for the tag which is used to exclude files from having the changes diff generated. Suggested by Michael Graff.
2001-10-15 07:00:22 +04:00
./root/.ssh/id_rsa type=file mode=0600 optional tags=nodiff
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./root/.ssh/id_rsa.pub type=file mode=0644 optional
Use "nodiff" instead of "nomail" for the tag which is used to exclude files from having the changes diff generated. Suggested by Michael Graff.
2001-10-15 07:00:22 +04:00
./root/.ssh/identity type=file mode=0600 optional tags=nodiff
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./root/.ssh/identity.pub type=file mode=0644 optional
./root/.ssh/known_hosts type=file mode=0644 optional
./root/.ssh/known_hosts2 type=file mode=0644 optional
update to Lite
1994-06-19 07:23:13 +04:00
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./sbin type=dir mode=0755 ignore
update to Lite
1994-06-19 07:23:13 +04:00
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./usr type=dir mode=0755
./usr/bin type=dir mode=0755 ignore
./usr/games type=dir mode=0755 optional
./usr/games/hide type=dir mode=0750 gname=games ignore optional
./usr/include type=dir mode=0755 ignore
./usr/lib type=dir mode=0755 ignore
./usr/libdata type=dir mode=0755 ignore
./usr/libexec type=dir mode=0755 ignore
./usr/pkg type=dir mode=0755 ignore optional
./usr/sbin type=dir mode=0755 ignore
./usr/share type=dir mode=0755 ignore
./var type=dir mode=0755
./var/account type=dir mode=0755
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./var/account/acct type=file mode=0644 optional tags=exclude
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./var/at type=dir mode=0755 ignore
./var/backups type=dir mode=0755 ignore
add ./var/chroot and subdirectories
2004-11-25 04:33:31 +03:00
./var/chroot type=dir mode=0755
./var/chroot/named type=dir mode=0755
./var/chroot/named/dev type=dir mode=0755
./var/chroot/named/etc type=dir mode=0755
./var/chroot/named/etc/namedb type=dir mode=0755
./var/chroot/named/etc/namedb/cache type=dir mode=0775 uname=named gname=named
./var/chroot/named/usr type=dir mode=0755
./var/chroot/named/usr/libexec type=dir mode=0755
./var/chroot/named/var type=dir mode=0755
./var/chroot/named/var/run type=dir mode=0775 gname=named
./var/chroot/named/var/tmp type=dir mode=01775 gname=named
./var/chroot/ntpd type=dir mode=0755
./var/chroot/ntpd/dev type=dir mode=0755
./var/chroot/ntpd/var type=dir mode=0755
./var/chroot/ntpd/var/db type=dir mode=0775 gname=ntpd
./var/chroot/ntpd/var/run type=dir mode=0775 gname=ntpd
PR/30177: Rui Paulo: /var/chroot/pflogd isn't created by default
2005-05-11 14:41:51 +04:00
./var/chroot/pflogd type=dir mode=0755
add ./var/chroot and subdirectories
2004-11-25 04:33:31 +03:00
./var/chroot/sshd type=dir mode=0755
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./var/cron type=dir mode=0755
./var/cron/tabs type=dir mode=0700
./var/cron/tabs/root type=file mode=0600
./var/db type=dir mode=0755
./var/log type=dir mode=0755
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./var/log/authlog type=file mode=0600 optional tags=exclude
Consistently use 0664 root:utmp for /var/log/{lastlog,wtmp}{,x}. Rest of PR 18670.
2005-05-22 18:34:20 +04:00
./var/log/lastlog type=file mode=0664 gname=utmp tags=exclude
./var/log/lastlogx type=file mode=0664 gname=utmp tags=exclude
./var/log/wtmp type=file mode=0664 gname=utmp tags=exclude
./var/log/wtmpx type=file mode=0664 gname=utmp tags=exclude
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./var/mail type=dir mode=1777 ignore
./var/preserve type=dir mode=0755 ignore
./var/run type=dir mode=0755
Major overhaul, with help from Andrew Brown <atatat@netbsd.org>. Features: - Add a bunch of stuff to /etc/mtree/special to enable removal of /etc/changelist: - files which we want to monitor for changes but don't want to see the diffs of (master.passwd, ssh_host_key, ...) are tagged with "nomail" - files which we don't want to monitor are tagged with "exclude" (such as netgroup.db, kvm.db, ...) - monitor /etc/mtree/special.local, /root/.ssh/* - remove /etc/changelist, and a bunch of XXX comments - use mtree(8)'s -D, -I, and -E to generate lists of files to actually do the changelist stuff on. - support /etc/mtree/special.local as an optional user-provided version of /etc/mtree/special (effectively, an enhanced /etc/changelist) - Add code to monitor: /etc/ifconfig.* /etc/raid*.conf /etc/rc.conf.d/* including support for these files being added and removed at will. - If /sbin/fdisk exists, backup the output of "fdisk $disk" for all the active disk drives as part of $check_disklabels - Check permissions on: ~/.ssh/* ~/.shosts Details: - Reorder initialisation of defaults - Remove special case for /etc/master.passwd "monitor but don't email diffs" with general case for other similar files. - Keep all `autogenerated' files (such as disklabel.*, setuid.current, ...) in "$backup_dir/work", to minimise name clashes. - Add migrate_file(old, new) to do the hard work of migrating files from the old `top level' /var/backups mechanism to the `full path' mechanism recently added. Use this appropriately. - Add backup_and_diff(file, printdiffs), to the hard work of backing-up and diff-ing files. - Cleanup use of shell redirects - /bin/sh supports ~root globbing, so use it. - Improve umask checking; use awk regex rather than awk math
2001-10-12 09:18:23 +04:00
./var/run/utmp type=file mode=0664 gname=utmp tags=exclude
Add /var/run/utmpx, requested by soren.
2002-09-03 04:56:08 +04:00
./var/run/utmpx type=file mode=0664 gname=utmp tags=exclude
Take advantage of mtree(8)'s recently added support for absolute paths. Use a default "/set uname=root gname=wheel". This drastically reduces the size of the file, as well as making it far more maintainable. The differences are: lines words bytes filename 342 1633 16272 special-relative 295 998 11971 special-absolute
2001-10-05 20:11:46 +04:00
./var/spool type=dir mode=0755
./var/spool/ftp type=dir mode=0755 optional
./var/spool/ftp/bin type=dir mode=0755 optional
./var/spool/ftp/bin/ls type=file mode=0555 optional
./var/spool/ftp/etc type=dir mode=0755 optional
./var/spool/ftp/etc/group type=file mode=0644 optional
./var/spool/ftp/etc/localtime type=file mode=0644 optional
./var/spool/ftp/etc/master.passwd type=file mode=0600 optional
./var/spool/ftp/etc/passwd type=file mode=0644 optional
./var/spool/ftp/hidden type=dir mode=0111 ignore optional
./var/spool/ftp/pub type=dir mode=0775 ignore optional
./var/spool/output type=dir mode=0755 ignore
./var/yp type=dir mode=0755
./var/yp/Makefile type=file mode=0644 optional