Commit Graph

874 Commits

Author SHA1 Message Date
mrg 49a7341d45 make these changes to the default user.group:
- internal services run as `nobody'
- rpc.rusersd and rpc.sprayd run as `nobody'
- rpc.rstatd run as `nobody.kmem'
- rpc.rwalld run as `nobody.tty'
1997-10-07 12:45:32 +00:00
lukem cb57cd9636 add $ipmon and $ipmon_flags, to control startup of ipmon(8) 1997-10-07 12:11:48 +00:00
lukem 350c40dec5 add appletalk services [misc/4205] 1997-10-07 08:15:04 +00:00
lukem 9218b57240 remove bogus example 1997-10-07 07:39:34 +00:00
mrg 4902b56931 turn off lpd by default. 1997-10-06 14:10:22 +00:00
mrg 3aa3ff6410 comment a few entries, and add X11 1997-10-04 13:22:54 +00:00
mrg cf443f3572 add hunt(6) entry (commented by default) 1997-10-04 09:16:00 +00:00
mrg fe68d83ff9 add hunt(6) port. 1997-10-04 09:11:55 +00:00
is f1c9e3d0d1 - make ttyC* description up-to-date
- make more (8) ttyC's, is enough for 2 HyperCom4, or DraCo + HyperCom3/GVP-IO
  +  HyperCom4.
1997-09-26 15:38:50 +00:00
lukem 332ce4e67a highlight that a configured lo0 is necessary for sane network operation 1997-09-26 07:44:07 +00:00
thorpej 1f8ffaf716 Add /usr/pkg (destination of installed packages) and /usr/pkgsrc (where
build-from-source packages will live, as a separate SUP collection).
1997-09-25 19:05:08 +00:00
lukem 90ec96df78 - use 'ftpd -C user' to check the format of /etc/ftpusers.
closes [security/4061]
- rename $MPPATH to $MPBYPATH, to clarify its use
1997-09-23 14:36:56 +00:00
veego 4dd2356bd7 Add ./usr/share/samples/ipf 1997-09-21 16:51:44 +00:00
mikel 3d302c58a2 make some more files optional; from Erik Bertelsen in PR 4048 1997-09-20 04:02:01 +00:00
mikel b7c59de85d RCSid police 1997-09-20 03:09:17 +00:00
mikel 3e3f02a092 don't try to copy nonexistent README, & RCSid police 1997-09-20 03:05:39 +00:00
lukem f09b5e36c7 - don't print "Checking setuid files and devices:" if no problems
found (solves [security/4047])
- minor cleanup (rename a couple of variables, etc)
1997-09-18 05:16:19 +00:00
is af77dd123b Add Envoy NIP entry, as per rfc1700, closing PR 3499.
XXX We should have a script to import the official IANA list, transform to
# style comments, and augment with our additions.
1997-09-17 11:20:26 +00:00
bouyer 8f21e932b0 Typo in comments: netstart uses /etc/defaultdomain, not /etc/domainname. 1997-09-15 11:42:26 +00:00
mycroft 33aa7a562f f before t... 1997-09-12 17:42:08 +00:00
drochner a14fe6a191 fix an rc.conf flag check which was broken with the "checkyesno" changes 1997-09-12 10:36:04 +00:00
drochner 52157361c2 avoid to mount /usr twice if LKM load already did it 1997-09-12 09:53:08 +00:00
mikel 2bf1150565 add some files from /etc: inetd.conf, newsyslog.conf, protocols, rc.subr,
rpc, and services (required); ld.so.conf and resolv.conf (optional).
remove pointless 'ignore' keyword from /dev/mem
1997-09-10 06:09:15 +00:00
mikel afc1906e1c add some files from /etc to the list: csh.logout, inetd.conf,
ld.so.conf, newsyslog.conf, profile, rc.subr, resolv.conf, and rpc.
1997-09-10 06:05:44 +00:00
mikel a876c50cde deny toor; from Jim Bernard in PR security/4061 1997-09-08 02:51:58 +00:00
mikel 8806d2a16f update $net_interfaces comment to reference $auto_ifconfig 1997-09-08 02:43:26 +00:00
mikel 8cd518d0fd no more DEFAULT for $ntpdate_hosts; from Geoff Wing in PR bin/4073 1997-09-08 02:34:44 +00:00
cjs 26d1975b33 Add -l option to inetd. 1997-09-07 19:13:50 +00:00
mycroft 0d67d0dcc3 Nuke myname. 1997-09-07 10:08:31 +00:00
mycroft 6fd4b6ac56 Remove totally bogus default host name. 1997-09-07 09:49:49 +00:00
mycroft be208d150c Hard-code the loopback address; it never changes, and we do *not* want to be
doing name lookups here (by default, at least).
1997-09-07 09:47:31 +00:00
leo 3d37936e8d Extend with:
- a bit more of descriptive text
	- an example of the new way swap devices are defined
	- an example of the '-G' flag for GEMDOS-flavored msdos filesystems.
1997-09-02 19:59:23 +00:00
leo 7991f3f025 Remove fdN and rfdN before their node creation. 1997-09-02 19:56:56 +00:00
pk 46ac7ce9eb Don't copy files which are no longer here. 1997-08-31 23:22:02 +00:00
cjs ebb2301a41 Prune unused function. 1997-08-30 03:34:29 +00:00
veego fb559c8dc2 Add a check if sshd exists and comment out the sshd startup and the test.
Not everyone has a sshd on his system.
1997-08-29 10:29:07 +00:00
veego fb251b85eb Only start programms which we started in the previous version (1.15)
and also don't use the PATH with /usr/local/sbin:/usr/local/bin .
1997-08-29 10:22:24 +00:00
veego 61cf6ecccc s/rc.func/rc.subr/ 1997-08-29 10:09:38 +00:00
veego d1307e8424 Curt, what is in rc.func ?
I only see rc.subr so I renamed rc.func to rc.subr.
1997-08-29 09:33:34 +00:00
veego 08b399c5ce Add rc.subr to BIN1 1997-08-29 09:28:50 +00:00
cjs c3b0e18db8 Split rc.conf variables for starting programs into two: an on/off
switch and a set of flags. Get rid of DEFAULT flags entirely. Print
warnings if on/off switches are not set, or are set incorrectly.
Add a shell function to simplify this on/off switch testing.
1997-08-29 02:24:04 +00:00
mycroft 39709ef236 Don't require the host name to be set here. 1997-08-28 18:18:17 +00:00
thorpej 5b004f0ce6 ldconfig processes /etc/ld.so.conf internally; run it without cat'ing
the contents into an argument vector.
1997-08-26 19:35:33 +00:00
perry a8f17a8bdb update to version 1997082200 from Internic. 1997-08-24 15:50:47 +00:00
lukem 8ab86c4242 * add enss* to ss*
* use $0 instead of MAKEDEV
* remove superfluous umasks
1997-08-22 15:35:12 +00:00
lukem ed0a7677a8 * unlink devices before attempting to mknod them
* remove superfluous umasks
* replace `eval ...` with $((...)) or ${i#...}
* use $0 instead of MAKEDEV
* warn on unknown devices
* add enss* to ss*
* ensure tapes are root.operator 660
1997-08-22 15:30:49 +00:00
lukem 96f44170dc * use $0 instead of MAKEDEV
* use $((...)) instead of `eval ...`
* st* and md* are now root.operator 640
* reset the umask after running MAKEDEV.local
1997-08-22 15:02:12 +00:00
lukem e9aa93e046 obsolete stuff that's be superceeded by /usr/src/distrib/... 1997-08-22 12:27:46 +00:00
lukem f27e440f72 * remove superfluous umasks
* st* perms are 660 not 640
* ttyv* isn't a special case on the sparc (it's an i386-ism)
* add enss* to ss*
* use $0.local instead of MAKEDEV.local, and reset the umask afterwards
1997-08-22 12:25:16 +00:00
lukem 49d132729c these are *way* out of date... 1997-08-22 12:24:25 +00:00
lukem 3554ac334d * use $0 instead of MAKEDEV
* remove devices before mknod-ing them
* use ${i#...} and $((...)) instead of `eval ...`
* tz* has perms 660 root.operator (instead of 666 root.wheel)
* consolidate a few devices into one case, with internal switching
  for the slight difference (usually unit name and major number)
* reset the umask after MAKEDEV.local
* don't treat ttyv* specially - it's an i386-ism
1997-08-22 12:16:28 +00:00
lukem b790d7bce9 ttyv* shouldn't be treated specially on the hp300 (it's an i386-ism) 1997-08-22 12:06:27 +00:00
lukem d4a3164363 ttyv* shouldn't be treated specially on the alpha (it's an i386-ism) 1997-08-22 12:04:03 +00:00
lukem 607e11fb8a * add enss* to ss*
* st* has perms 660 not 640
* use $0 instead of MAKEDEV
* reset umask after MAKEDEV.local
1997-08-22 11:34:30 +00:00
lukem cdfa15cb5b * st* has perms 660 not 640
* add enss* to ss*
* invoke MAKEDEV.local as $0.local, and reset the umask afterwards
1997-08-22 11:30:57 +00:00
lukem fcbf94775b * add enss* to ss*
* st* has perms 660 not 640
* invoke MAKEDEV.local as $0.local, and reset umask afterwards
1997-08-22 11:26:01 +00:00
lukem 5629b8d007 * st* and wt* have perms 660 instead of 640
* add enss* to ss*
* invoke MAKEDEV.local as $0.local
* reset umask to 077 after running MAKEDEV.local
* warn on unknown devices
1997-08-22 11:19:43 +00:00
lukem 81cdcf7570 * use $0 instead of MAKEDEV
* set ct* mt* and st* to root.operator 660 (not root.wheel 666)
1997-08-22 11:10:42 +00:00
lukem 1d665a7616 * use $0 instead of MAKEDEV
* remove superfluous umasks
* st* perms are 660 not 640
* ensure md0 and rfd0c get the correct perms
* add enss* to ss*
1997-08-22 10:55:18 +00:00
lukem 3e16910ca2 remove enss* before we try & mknod it 1997-08-22 10:46:27 +00:00
lukem 7cb2956f2d * st* has perms 660 not 640
* add enss* to ss*
* md* is root.operator 640 not root.wheel 600
* use ${i#...} instead of `expr ...`
* use 'sh $0.local' not 'sh MAKEDEV.local'
* warn on invalid devices
1997-08-22 10:41:17 +00:00
lukem 93f6aeeee8 use 'sh $0 ...' instead of 'sh MAKEDEV ...' 1997-08-22 10:32:28 +00:00
lukem fca196598f * use $((...)) not `expr ...`
* st* has perms 660 not 640
* use $0 not MAKEDEV
* add enss* to ss*
* remove superfluous use of umask
* ensure umask is reset after running MAKEDEV.local
1997-08-22 10:28:06 +00:00
lukem 237c80a5db * set perms on st* to 660 not 640
* remove superfluous umask
1997-08-22 10:14:45 +00:00
lukem 89fa41e9da - correct use of generated temporary files.
- clean up comments and generated output.
- clean up $SECUREDIR if SIGINT or SIGQUIT received.
- .rhosts may have to be world readable in NFS environments, so allow it to be.
- update list of disks to check for reasonable permissions
- don't show differences in /etc/master.passwd, as the encrypted strings may
  be sent. From reading comments earlier in the script, this was the intention
  anyway. Fix from Jim Bernard <jbernard@tater.mines.edu> in [security/3994].
- when checking /etc/ftpusers, skip comment lines and only match full
  usernames.
  XXX: this should be enhanced to check lines of the enhanced ftpusers format.
1997-08-22 09:40:17 +00:00
agc 44579dfa67 Remove the uname=man lines as NetBSD doesn't seem to have a user called
man.

Add NetBSD RCS Id.
1997-08-20 15:41:11 +00:00
agc 51e120ae5a Import FreeBSD's etc/mtree/BSD.local.dist as etc/mtree/BSD.pkg.dist.
This is for use with the FreeBSD ports system.
1997-08-20 15:23:33 +00:00
mikel 71d389d416 include hostname in subject of email with results of running *ly
scripts; from Jim Bernard in PR misc/3996
1997-08-20 07:18:41 +00:00
veego 94c1e883f6 Added missing en$name$unit entry for the chmod command in ss*).
Noticed by Luke Mewburn on tech-security.
1997-08-19 18:39:56 +00:00
lukem a563ca4687 As per [bin/1814] from Arne Juul <arnej@imf.unit.no>, and discussions
with matt green <mrg@netbsd.org> (to shut up /etc/security)
* set ingres account shell to /sbin/nologin
* set ~daemon to / (not /root)
1997-08-19 15:07:12 +00:00
lukem 67087092d4 remove incorrect vn* entry, as vnd* exists and vn* doesn't work anyway 1997-08-19 13:33:04 +00:00
lukem 0f26a04544 * ensure that check for '.' in root's $PATH doesn't yield a false positive.
fix from Jim Bernard <jbernard@tater.mines.edu> in [security/3995]
* detect empty :: elements as '.' in a sh(1) path (leading :, trailing :,
  or ::)
1997-08-19 12:08:35 +00:00
augustss 912c4ee11f Create /dev/audioctl and allow creation of multiple audio devices. 1997-08-18 21:23:12 +00:00
cjs d10a9ab09b Move ntpdate before `starting network daemons' to get cleaner output
during boot. Besides, it's not a daemon anyway.
1997-08-05 03:32:51 +00:00
lukem edbafa0300 4.4BSD has the ability to automagially add a route to localhost from
an interface to first time its address is referenced.  Therefore:
* configure lo0 before all other interfaces (rather than afterwards).
* don't explicitly add a route from `hostname` to localhost
1997-08-04 06:09:49 +00:00
perry e77a6f04d3 Finally finish fixing pr-230 by assigning minor+8 and minor+16 device
names for the lower density minor dev numbers. My shell code would
even work for a wt1 device, but I would seriously pity anyone trying
to get two of these things to work on one machine. Heck, no one should
even try to use ONE wt device.
1997-08-04 03:50:26 +00:00
perry 2a376043c7 add apmd to /etc/rc and /etc/rc.conf per Lennart Augstsson in pr 3313 1997-08-03 22:24:20 +00:00
leo b9906e7600 Use DISKUNIT macro to encode md's unit in the minor number. 1997-08-01 19:38:30 +00:00
perry 07a71fdfd0 Make MAKEDEV and MAKEDEV.local mutually consistant. Reported in
pr #2596 by Tatoku Ogaito, but my fix is different from his.
This is purely an aesthetic change.
1997-07-31 04:08:15 +00:00
perry e53ae14bdd Fix boot time vi recovery as reported by NAKAJIMA Yoshihiro in pr-3430
Really weird bug. On inspection, the shell code in rc looked fine, but
when tested, sure enough, the semantics of the shell were not what I
thought they were. Very unexpected to me, and obviously to the
hundreds of people who must have read those lines without seeing that
they were broken.
1997-07-31 03:35:39 +00:00
perry 7bd6622ead make some items 'optional' -- per pr-3663 from Erik Bertelsen 1997-07-31 03:03:13 +00:00
mark 0c0a1966bb Use the Pc entry from gettytab for our virtual terminals. 1997-07-31 02:34:18 +00:00
perry ea4d1ded44 1) close my own pr-2502 by adding ce and ck to default
2) substantial cleanup. In particular, I got rid of lots of
   egregiously obsolete entries, and I got rid of obsolete
   capabilities in the only mostly obsolete entries, etc.
1997-07-31 00:38:30 +00:00
perry 9dee21c94e add a default minfree file (requested by David Brownlee, pr-1577) 1997-07-30 22:17:55 +00:00
phil 851aef5327 Add ta=4.2BSD to both floppy3 and floppy5 entries. (If you are
disklabeling your floppy, you are most likely putting on a 4.2BSD
file system.  This is in support of the distrib/i386/floppies
building via vnds.)
1997-07-29 18:46:06 +00:00
mark fb64b594bc Added a ramdisk option to build all the devices needed for an install
ramdisk.
Reformatted a couple of lines.
1997-07-28 17:41:59 +00:00
mark b7b4948831 Added swap entry and a nice set of comments. 1997-07-28 17:38:45 +00:00
phil ffde90f14b Make all tty??/pty?? pairs that can be opened by openpty().
Remove use of awk for generating names.
Make all consistent as possible.
Closes PR 3420.
1997-07-23 01:29:36 +00:00
phil 840d172649 Make all MAKEDEVs make fd/* similar. No need for awk or expr.
Inspired by PR 3420.  Some MAKEDEVS had the fd separated out
of std and fd added to std.
1997-07-22 23:13:05 +00:00
phil 779c94c7af Allow routes to be flushed in netstart (rc.conf option, default YES).
PR 3228.
1997-07-22 18:41:08 +00:00
perry 1edc7aef02 fix 3885 from Matthias Scheler -- print out the name of each loaded module 1997-07-18 23:38:52 +00:00
phil a621321b0e Add /usr/share/sendmail/cf that got missed in original addition of
/usr/share/sendmail/*.  Closes PR 3881.
1997-07-17 20:45:01 +00:00
mark 237e1b7fb6 Create wd2 and wd3 device files for 'all' and 'floppy' options. 1997-07-17 00:12:55 +00:00
phil bc41d19ad5 Add /usr/share/sendmail tree to distribution. 1997-07-16 23:33:59 +00:00
veego fb68fae55e Move savecore up before named to get a dump on low memory systems and
move 'mount -a' between yp and nfs daemons.
1997-07-15 11:19:20 +00:00
drochner 4e045b6b43 Take 2 to get the mount order "right", taking care of possible LKM
loads before netstart this time.
LKMs can be loaded at 3 strategic places in /etc/rc - before netstart,
before "mount -a" and after all. "before netstart" works only if
the /usr filesystem is local (or on NFS, if root is too).
An additional field ("when") in lkm.conf controls when the LKM is
loaded.
1997-07-14 11:55:44 +00:00
hpeyerl 93f2294467 Satellite receiver driver for ISA cards from PlanetConnect by Jason and
Herb for Canada Connect Corp.
1997-07-13 19:29:17 +00:00
hpeyerl 91e0832cae Satellite receiver driver for ISA cards from PlanetConnect by Jason and
Herb for Canada Connect Corp.
1997-07-13 19:16:59 +00:00
veego a6fe27dced Back out the last two commits for now till we find a better way to fix
the mount problems.
1997-07-11 12:01:06 +00:00
veego 6553fa7064 rc.lkm needs /usr/bin/ld, so try to mount it with -t nonfs before rc.lkm. 1997-07-11 09:06:59 +00:00