Commit Graph

391 Commits

Author SHA1 Message Date
elad 4c99077841 PR/31497: Robert Elz: rc.d/accounting should have KEYWORD: shutdown 2006-10-08 18:08:39 +00:00
elad debd0acd05 Back out previous. This was a dup of PR/29144 that was fixed differently.
Thanks to pavel@ for pointing out, okay oster@.
2006-10-07 23:08:03 +00:00
rpaulo 6080ffe830 PR 30716: rc.d/ntpd{,ate} precedes rc.d/rtsold. By Ed Hynan.
rc.d/rtsold should be in the same start up line as dhclient.
2006-10-07 21:41:41 +00:00
rpaulo 20c84defc6 PR 34692: wpa_supplicant script.
By Jukka Salmi.
2006-10-07 20:52:52 +00:00
rpaulo e3c4f7c039 PR 34692: wpa_supplicant script.
By Jukka Salmi.
2006-10-07 16:50:34 +00:00
elad 0141f6f58f PR/22340: Benedikt Meurer: cleartmp should honor ifile on LFS
Patch applied, thanks!
2006-10-07 07:01:21 +00:00
riz 7338f92d29 Trap SIGINT so that if fsck is interrupted by ^C, we drop into single-user
mode.  Fixes misc/29822 from der Mouse, fix from Arnaud Lacombe with
comment rework by me.
2006-10-07 04:11:23 +00:00
sketch de3bf5da0e Tidy output so it matches other rc scripts. 2006-10-01 15:17:51 +00:00
plunky 4f1cbddc12 update to bluetooth device attachment:
remove pseudo-device btdev(4) and inherent limitations

add bthub(4) which autoconfigures at bluetooth controllers as they
are enabled. bluetooth devices now attach here.

btdevctl(8) and its cache is updated to handle new semantics

etc/rc.d/btdevctl is updated to configure devices from a list
in /etc/bluetooth/btdevctl.conf
2006-09-10 15:45:55 +00:00
christos 156b02eae7 make postconf configurable 2006-09-07 15:26:08 +00:00
christos 4f593623cc - find the correct newaliases program from postconf
(suggested by Geert Hendrickx)
- only check for hash files.
2006-09-07 14:16:55 +00:00
christos e32e513967 Find the alias file name from the postfix configuration. From our anonymous
user.
2006-09-05 22:10:51 +00:00
plunky 99a7113fbc Fix typo in variable name 2006-08-14 18:55:18 +00:00
plunky 885b13c515 rename btcontrol(8) as btdevctl(8) to make it fit with the NetBSD naming
scheme for control programs. This fixes pr 34051.
2006-08-13 09:03:21 +00:00
dyoung 08605a2dd4 Per lukem's request, revert previous change which skipped installation
of /etc/rc.d/ipfilter and family if MKIPFILTER=no.  As lukem points
out, skipping installation of etc/rc.d/ scripts is not inconsistent
with other optional components, such as pf, x11, etc.
2006-08-07 02:08:47 +00:00
dyoung 50097c84af Only install ipfilter, ipfs, ipmon, and ipnat if MKIPFILTER=no. 2006-08-05 17:26:14 +00:00
tron fdeefd9c3e Bluetooth fixes by Iain Hibbert:
Create "/etc/rc.d/btcontrol" to attach bluetooth devices at boot.
2006-07-26 11:14:55 +00:00
gdamore a5c89047c0 Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@,
NetBSD Foundation Membership still pending.)  This stack was written by
Iain under sponsorship from Itronix Inc.

The stack includes support for rfcomm networking (networking via your
bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets.

Drivers for both PCMCIA and USB bluetooth controllers are included.
2006-06-19 15:44:33 +00:00
christos 8ab9b7b454 PR/33760: dieter roelants: a default install can't send mail due to
missing aliases.db
2006-06-18 14:05:34 +00:00
rpaulo 9637f337f2 s/mountall/mountcritremote/
Noticed by Jukka Salmi.
2006-06-02 01:06:16 +00:00
christos ace25de76c Remove sendmail (approved by core) 2006-05-30 00:40:22 +00:00
simonb c1cf826a2c In the rc.d file list, start a new line for each first letter of
the rc.d scripts.  Indent by an extra tab to match indentation of
usr.sbin/postinstall/postinstall
2006-05-14 15:43:54 +00:00
rpaulo b70b378d36 add missing files 2006-04-30 19:57:07 +00:00
rpaulo 80cb906203 Add a script to start irdaattach on boot. 2006-04-30 15:18:19 +00:00
rpaulo 32cb3ed274 Remove wrong comment. 2006-04-30 13:00:04 +00:00
rpaulo 6971718ee3 rc script to control hostapd. 2006-04-30 12:54:26 +00:00
blymn f79b447e34 Fix rtc offset calculation for timezones that are not integral hours. 2006-04-26 09:57:01 +00:00
hubertf 831546110a When switching the /etc/etc.current symlink, make it relative to /etc,
not absolute.

This affects an update with sysinst, which will try to look at
/targetroot/etc/fstab, which points to /etc/etc.whatever, which is
not there during the upgrade, and results in all (/targetroot)/etc
files getting nuked!
2006-04-23 23:26:26 +00:00
agc 2235f2dadf Add distribution entries and supporting files for the iSCSI target. 2006-02-08 19:02:58 +00:00
peter 3c194e239e Add an extra argument to "setvar" to indicate whether a keyboard,
display or mouse variable should be changed. This is backwards compatible
with the old setvar style: if the argument is not specified, it defaults
to `keyboard'.
2005-12-13 21:46:47 +00:00
christos 6491f15ca3 fix migration problems:
1. missing slash created namedb127 files in the dest dir.
2. /etc/named.conf was not getting migrated.
2005-11-29 21:07:25 +00:00
rpaulo 7acb962baa RFC 3879 deprecated the IPv6 site-local prefix (fec0::/10):
* remove all references to $ip6sitelocal and output a warning
    message if the variable is defined.
    * introduce $ip6uniquelocal (defaults to 'NO') that will control the
    behaviour of the system when $ip6mode is ``router'' (i.e. fc00::/7
    will not be routed if the variable is ``NO'') as per RFC 4193.

Thanks to Jonathan A. Kollasch for pointing this out in PR 32152.
2005-11-24 17:28:45 +00:00
elad 07a01daf00 Load Veriexec signatures after mountall. Use veriexec_strict and
veriexec_verbose to set strict level and verbose level in rc.conf.
Defaults are 0.
2005-10-15 23:26:30 +00:00
elad 78df0b1930 Revert previous commit; I'll find a better solution. 2005-10-11 21:36:11 +00:00
elad d8980923a4 We need mountall here. 2005-10-11 21:24:09 +00:00
peter 9c1da17e90 pf needs to be started after the network is up, because some pf rules
derive IP address(es) from the interface (e.g "... from any to fxp0").
This however, creates window for possible attacks from the network.

Implement the solution proposed by YAMAMOTO Takashi:
Add /etc/defaults/pf.boot.conf and load it with the /etc/rc.d/pf_boot
script before starting the network. People who don't like the default
rules can override it with their own /etc/pf.boot.conf.
The default rules have been obtained from OpenBSD.

No objections on: tech-security
2005-08-23 12:12:56 +00:00
peter ad9c34ce5c Changes suggested by lukem:
1. Order pf to start before the network is configured.

2. If the pf_rules cannot be found at boot time, abort the boot (from the
   ipfilter script).
2005-08-10 13:52:05 +00:00
peter c9c458f33c Add command_args="-D" to the ftpd rc.d script. This flag is always needed
when running ftpd as daemon and it will now automatically be appended to the
command line, even if ftpd_flags doesn't have it.

Suggested by Alan Barrett and Luke Mewburn, thanks.
2005-08-09 14:59:33 +00:00
peter 9cfba4bb75 Add a note telling that ftpd_flags should always contain "-D".
Suggested by lukem@.
2005-08-08 00:19:37 +00:00
peter d0b18db569 Allow to change the location of the pf ruleset with the variable $pf_rules. 2005-08-07 01:03:39 +00:00
peter f74a86ef4f Add the new ftpd rc.d script. 2005-08-04 22:32:44 +00:00
peter 7eb092e6c3 Add rc.d support for standalone ftpd, suggested by perry@. 2005-08-04 22:28:17 +00:00
christos 0e7146df89 Improve on the migration bit. Check if files are different, and if not,
remove the source and leave a symlink behind. Otherwise, let the user know.
2005-07-17 21:28:45 +00:00
christos a2663103c5 Copy and link files to allow a chrooted named to start-up automatically. 2005-07-17 16:30:57 +00:00
symka 87283c876e PR/29317: ifconfig.if does not allow parameters with spaces
OKeyd by christos@
2005-06-28 13:36:40 +00:00
elad faffb35d60 Run veriexec before securelevel and sysctl scripts. Suggested by Nino Dehne. 2005-06-15 18:49:40 +00:00
cjs 2dc0814b72 Make ifaliases_lo0 in rc.conf work just like other interfaces (instead of
being ignored). Also, when configuring aliases set as ifaliases_xxN,
print out the interface name and the alias address.
2005-04-26 10:28:29 +00:00
blymn 8387760ed1 Rototill of the verified exec functionality.
* We now use hash tables instead of a list to store the in kernel
    fingerprints.
  * Fingerprint methods handling has been made more flexible, it is now
    even simpler to add new methods.
  * the loader no longer passes in magic numbers representing the
    fingerprint method so veriexecctl is not longer kernel specific.
  * fingerprint methods can be tailored out using options in the kernel
    config file.
  * more fingerprint methods added - rmd160, sha256/384/512
  * veriexecctl can now report the fingerprint methods supported by the
    running kernel.
  * regularised the naming of some portions of veriexec.
2005-04-20 13:44:45 +00:00
lukem 8232ca0162 Tweaks for the move of postinstall from /etc to /usr/sbin 2005-04-17 23:12:40 +00:00
lukem c0372ca1ef ypserv(8) doesn't need the domainname(1) set -- it will serve any maps
present under /var/yp/<somedomain>/<map> -- so don't require it.
Thanks to Chuck Cranor for the suggestion.
2005-04-01 23:25:29 +00:00