Commit Graph

176 Commits

Author SHA1 Message Date
plunky d86700ce1a "ip6addrctl_enable" is now "ip6addrctl", set the default appropriately 2015-12-26 21:05:11 +00:00
christos 4f497f781b Add defaults for ip6addrctl 2015-12-13 02:27:06 +00:00
chopps 94dff34741 Add resize_root boot operation. If resize_root=YES in rc.conf then
the system attempts to resize the root file system to fill it's
partition prior to mounting read-write. Useful for things like AMI
file system images. May eventually be used by arm images after
coming up with similar solution for increasing the parition size.
2015-03-30 10:58:37 +00:00
jmcneill 7ba4328bfa Process /etc/modules.conf (if present) at startup, before securelevel is
raised, to allow module loading on ports without a module aware bootloader.
2015-03-21 19:10:43 +00:00
christos bef8765f0a there is no more makewhatis 2015-03-04 14:54:38 +00:00
joerg 88c9fb0be8 Add rc script for /sbin/iscsid. 2015-02-21 23:13:00 +00:00
christos 3e734a9422 add blacklistd 2015-01-25 16:26:34 +00:00
jmcneill f1c95757e8 It doesn't make sense to start wpa_supplicant from an rc.d script without
the -B flag, so always prepend it to $rc_flags.
2015-01-22 19:50:21 +00:00
tron a0fbec155b Revert last change. This was already fixed differently and something
went wrong with the change anyway. Sorry
2014-09-26 11:04:06 +00:00
tron 4c439aa401 Re-add default for "rtsol". "/etc/rc.d/network" still checks for this
setting and complains if it isn't defined at all. Add a comment that
it is deprecated and suggest to use "dhcpcd=YES" instead.
2014-09-26 10:36:11 +00:00
roy d784a83a57 rtsol has gone. 2014-09-13 11:07:08 +00:00
roy cb2e7b1a58 Add the -M flag to dhcpcd so it stays in master mode even for one
interface. Suggested by apb@
2014-09-13 11:06:42 +00:00
roy c6314d6139 Remove rtsol(8) and rtsold(8) as their functionality is in dhcpcd(8).
Remove rtsol(8) from rc.d/network.
Add -w seconds command to ifconfig to wait for N seconds for until DAD
has finished on all addresses.
Use ifconfig -w in rc.d/network instead of a forced sleep.

As discussed on tech-net@
2014-09-11 13:10:03 +00:00
wiz 7f6fa64667 'file system' for consistency with documentation (instead of 'filesystem'). 2014-07-22 17:11:09 +00:00
spz acaf72ec02 Introduce a variable for security.conf, default empty, to list users
whose home is (allowed to be) owned by another user.

It's a separate variable and not just check_passwd_permit_dups so I can
make security shut up about my uucp users.

Fixes the second half of PR misc/36063
2013-11-06 19:37:05 +00:00
agc 1410cf30c2 Fix for problematic paths in /etc/daily and /etc/security reported in
PR/47645.

Add a separate file which contains the paths for the pkg_admin and
pkg_info utilities. This is called /etc/pkgpath.conf (to distinguish it
from pkg.conf).

Thanks also to Edgar Fuss for the sanity check.
2013-05-01 05:36:25 +00:00
prlw1 281a5e1fdb Add ppp=YES variable. Currently pppd(8) starts automatically if ppp_peers
is not empty. Adding a ppp variable allows the default peer to be set,
and ppp set to NO so that dialing can happen with /etc/rc.d/ppp onestart.
Default set to YES so that old behaviour is preserved.
http://mail-index.netbsd.org/tech-userlevel/2012/08/21/msg006656.html
2013-01-13 18:47:57 +00:00
riastradh 9dc19ed03b Nix `-b 1024' from ssh_keygen_flags in /etc/defaults/rc.conf.
No objections on tech-security:

http://mail-index.NetBSD.org/tech-security/2012/09/03/msg000548.html

The security of generating keys at boot remains questionable, but
this change makes that no worse.
2013-01-11 04:32:41 +00:00
christos ba9bed30be No need to specify nfsd flags anymore. The defaults DTRT. 2012-08-13 08:20:44 +00:00
christos da43ca12af PR/46757: Edgar Fuß: Change default to pkg_vulnerabilities from NO to unset,
and make unset insted of NO to produce warnings, so that setting it to NO does
produce warnings (if it is inappropriate for the machine to warn about this).
2012-07-30 17:09:33 +00:00
christos e763a079db PR/46756: Edgar Fuß: Enable ignoring subdirectories in daily's find_core 2012-07-30 17:06:51 +00:00
spz c6302b7410 change security so that there is a configuration value for the list of
users who will not be considered for duplicate uid check.
Seed it with 'toor' in defaults/security.conf.
2012-04-05 09:09:27 +00:00
joerg 410d0f4380 Import the new apropos/whatis.
This code has been developed by Abhinav Upadhyay as part of Google's Summer
of Code 2011. It uses libmandoc to parse man pages and builds a Full
Text Index in a SQLite database. The combination of indexing the full
manual page, filtering out stop words and ranking individual matches
based on the section gives a much improved user experience.

The old makewhatis and friends are kept under MKMAKEMANDB=no for now.
2012-02-07 19:13:24 +00:00
tsutsui b25081130c Add a default for isibootd(8). Pointed out by nonaka@. 2011-12-23 05:05:04 +00:00
darcy 5bc4a2e2d4 Add option to include daily insecurity output in daily output.
PR bin/17029
2011-12-17 12:27:42 +00:00
tls 4924aa205a Load entropy at system boot (only works at securelevel < 1); save
at system shutdown.  Disable with random_seed=NO in rc.conf if desired.

Goes to some trouble to never load or save to network filesystems.

Entropy should really be loaded by the boot loader but I am still
sorting out how to pass it to the kernel.
2011-11-23 10:47:48 +00:00
darcy 77a099d5ff Allow pf flags to be specified in rc.conf.
Add default to defaults/rc.d as suggested by lukem@
2011-11-21 20:56:21 +00:00
riz 6fc3b870af Create and install an rc.d file for devpubd - a daemon to listen
on drvctl and autocreate device nodes in /dev for those which don't have any.
Set the default to "NO" for now.
2011-09-06 21:32:29 +00:00
jym cec3d05bda Arch-specific rc.conf files are not really autonomous rc.conf
files, they are appended to the end of etc/defaults/rc.conf.

So rename them to rc.conf.append for clarity, as suggested by mrg@. Adapt
Makefile accordingly.
2011-08-22 20:48:38 +00:00
jym f56903492e Modify etc/defaults/Makefile so that architectures can specify an additional
rc.conf file. This one should reside under etc/etc.${MACHINE}/, and will
get automatically appended to etc/defaults/rc.conf at build time if present.

This is used by i386 and amd64 to append a small MD rc.conf(5) configuration
at the end of the defaults/rc.conf file, so that powerd(8) can be started
by default when we are running in a Xen environment. This is needed to support
save/restore functions for domains.

From all the alternatives proposed to fix that issue (from /etc/rc.conf
parsing in postinstall to etc/defaults/rc.conf arch-hooks) I believe
this one will appease everyone because it:
- does not touch etc/defaults/rc.conf template file,
- patches it at build time for MD hooks only when required,
- does not need to parse/modify a user-specified file like /etc/rc.conf (which
is a complex, error-prone operation),
- only enables powerd(8) by default when conditions are met (Xen environment)
while still allowing root to shoot himself in the foot if he wants to
override this manually in /etc/rc.conf.

See also http://mail-index.netbsd.org/tech-userlevel/2011/07/25/msg005246.html
2011-08-22 18:54:05 +00:00
plunky b52bb12959 provide a new 'bluetooth' rc.d script, to handle Bluetooth configuration
in a simpler manner. This replaces btattach, btconfig, bthcid, btdevctl
and sdpd scripts, and also should not require any configuration settings
other than "bluetooth=YES", though the full range of configurations is
still possible.
2011-05-27 09:28:41 +00:00
jmcneill a58d526ab8 Add rc.d script to make sure the system fontconfig cache is up to date. 2011-02-18 00:42:20 +00:00
rmind 07ac07d35f NPF checkpoint:
- Add libnpf(3) - a library to control NPF (configuration, ruleset, etc).
- Add NPF support for ftp-proxy(8).
- Add rc.d script for NPF.
- Convert npfctl(8) to use libnpf(3) and thus make it less depressive.
  Note: next clean-up step should be a parser, once dholland@ will finish it.
- Add more documentation.
- Various fixes.
2011-02-02 02:20:24 +00:00
kefren e0adf296c4 add ldpd rc script 2011-01-13 10:55:19 +00:00
jmmv 53cb2117e8 Deprecate the pkgdb_dir settings from daily.conf and security.conf in
favor of the PKG_DBDIR variable in /etc/pkg_install.conf.  The purpose
of this is to only have to define the location of the packages database
in a single place and have all other system components pick it up.

pkgdb_dir is still honored if defined and the scripts will spit out a
warning in that case, asking the administrator to migrate to the
PKG_DBDIR setting.  We can't remove this compatibility workaround until,
at least, after NetBSD 6 is released.
2010-02-05 16:29:02 +00:00
jmmv 8026500970 Default fetch_pkg_vulnerabilities to NO and complain if it is set to that
value when packages are found (so that the user knows he is not getting the
vulnerability checks).

Why?  People is complaining.  (And somehow, the argument that NetBSD doesn't
do any network operation by default convinces me that it should continue to
do so.)

But still, I will be adding a question to sysinst to enable/disable this.
2010-01-20 22:19:20 +00:00
jmmv 497b5f8044 Add the fetch_pkg_vulnerabilities option to the daily script to keep the
packages vulnerability database up to date.  This will only fetch the
file from the server if it has changed since the last run.

Add the check_pkg_vulnerabilities and check_pkg_signatures options to the
security script to check that the installed packages are sane.

All of these options are enabled by default but they will only run if
there is, at least, one installed package.
2010-01-19 22:08:11 +00:00
tsarna a4329df0cc mdnsd enhancements and fixes:
- Enhance the built-in drop-privs support and use it instead of
  having the rc.conf do it. Avoids log error on startup.
  From OpenSolaris, with enhancements.
- Add dumping of the unicast server list to the DumpStateLog
  debugging output, a'la Mac OS X.
- Fix a locking botch that caused warnings in the log.
- Fix FILE leak. From OpenSolaris.
2009-10-01 16:36:20 +00:00
tsarna a8bcd3b5c3 Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder. 2009-09-29 23:56:26 +00:00
dholland 84e9f6e9f9 Make rtsold_flags default to -a as per PR 39657. 2009-09-19 19:47:48 +00:00
apb 70472a4826 Add the ability for file systems mounted via mount_critical_filesystems()
in rc.subr to be marked as optional.  This means that it's not an
error if the file system is not mentioned in /etc/fstab.  It is
still an error if something else goes wrong.

Change the defaults for these two variables in /etc/defaults/rc.conf:
critical_filesystems_local="OPTIONAL:/var"
critical_filesystems_remote="OPTIONAL:/usr"
2009-09-14 12:05:12 +00:00
apb 89fd535731 Add a postprocessor to /etc/rc, which logs messages to /var/run/rc.log,
and which can suppress output in silent mode.  Silent mode is enabled
via the new rc_silent variable, which defaults to a value that depends
on the kern.boothowto sysctl.

Part of the /etc/rc silent changes requested in PR 41946
and proposed in tech-userlevel.
2009-09-11 18:17:04 +00:00
mbalmer 70d654f756 Document recent gpio(4) changes and introduce a new config file for GPIO.
Integrate with the startup scripts in /etc/rc.d.  Introduce new variable
"gpio" for /etc/rc.conf.
2009-07-25 16:20:10 +00:00
roy 6bdecd9c27 Add an rc.d script for dhcpcd(8) 2009-04-28 23:30:34 +00:00
joerg 760b4799c4 Add rc_directories to specify where to look for rc scripts.
For the moment all scripts must be in /root and non-existent directories
are skipped.
2009-04-10 16:18:04 +00:00
hannken a51a8b101a Add flags to rc.d/ipfilter. Use it from rc.conf like
ipfilter=YES ipfilter_flags="-T fr_statemax=18963,fr_statesize=27091"

Ok: Christos Zoulas <christos@netbsd.org>
2009-03-23 18:52:02 +00:00
haad a4e585254c Add support for lvm to security script. Backup lvm configuration to /var/backup/lvm with other system backups. Disable lvm check until MKLVM is enabled by default. no objections on tech-userlevel@. 2009-01-27 10:32:18 +00:00
haad 6fa32f841f Add lvm rc script for starting LV's during boot. starting lvm is turn off
by default, until MKLVM is enabled by default. This script can be used
without /usr/bin.
2009-01-14 22:07:55 +00:00
apb a0398a9d79 * Add etc/rc.d/rndctl script, based on work by Brian A. Seklecki. This
allows you to invoke rndctl(8) during the boot.
* Add rndctl=NO and rndctl_flags="" to /etc/defaults/rc.conf.
* Document rndctl and rndctl_flags variables in rc.conf(5).
2009-01-04 12:10:30 +00:00
isaki cf59801230 x68k pow(4) now uses MI sysmon_pswitch framework. suggested by tsutsui@.
- Make MD poffd(8) retire, and use MI powerd(8) instead of it.
- Make /dev/pow1 retire, because nobody holds /dev/pow0 any longer.
  Use /dev/pow0 for pow(4) ioctl.
- POWIOCSSIGNAL ioctl which is for poffd(8) is also obsoleted.
2008-12-20 13:20:58 +00:00