Commit Graph

3500 Commits

Author SHA1 Message Date
rpaulo 7acb962baa RFC 3879 deprecated the IPv6 site-local prefix (fec0::/10):
* remove all references to $ip6sitelocal and output a warning
    message if the variable is defined.
    * introduce $ip6uniquelocal (defaults to 'NO') that will control the
    behaviour of the system when $ip6mode is ``router'' (i.e. fc00::/7
    will not be routed if the variable is ``NO'') as per RFC 4193.

Thanks to Jonathan A. Kollasch for pointing this out in PR 32152.
2005-11-24 17:28:45 +00:00
tsutsui 5fcffc47a7 Build small INSTALL kernel for bootstrap with the cobalt native bootloader. 2005-11-23 08:22:54 +00:00
rpaulo db8440ab65 Add smtps: 465 tcp/udp. We need it for postfix since we ship it with
TLS support.
2005-11-21 12:29:41 +00:00
wiz 850fd51087 Add /usr/share/legal. 2005-10-22 12:31:52 +00:00
hubertf 3b644e49b3 Per Christos (board):
* move src/etc/COPYRIGHT to src/share/legal/COPYRIGHT and install that
   (in /usr/share/legal)
 * nuke src/share/man/man0/COPYRIGHT
 * mark /usr/share/man/COPYRIGHT as obsolete
2005-10-22 06:04:57 +00:00
hubertf df48f941aa Fix comment: "Below", variables are assigned with += not = 2005-10-22 05:46:06 +00:00
elad 07a01daf00 Load Veriexec signatures after mountall. Use veriexec_strict and
veriexec_verbose to set strict level and verbose level in rc.conf.
Defaults are 0.
2005-10-15 23:26:30 +00:00
tsutsui 387175fffe - tty0? -> ttyZ?
- add ttyE0
2005-10-15 03:00:30 +00:00
tsutsui 822346a086 tty0? -> ttyZ? 2005-10-15 02:58:31 +00:00
elad 78df0b1930 Revert previous commit; I'll find a better solution. 2005-10-11 21:36:11 +00:00
elad d8980923a4 We need mountall here. 2005-10-11 21:24:09 +00:00
he 6de0a4bd6a Add entries so that ./usr/share/doc/html/bind9/arm gets created,
now that we want to install something there.
2005-10-11 06:12:43 +00:00
jmc 38f5f32c9c After building sets, make sure and checksum the kern-* files in binary/sets. 2005-10-07 17:22:12 +00:00
tsutsui a1987ab423 Remove old tty0? entries and add new ttyC? and ttyM?. 2005-10-07 16:20:43 +00:00
tsutsui 76540c92cb Remove compat symlink entries for old dca(4), dcm(4) and apci(4).
Now they might cause other problems.
2005-10-07 16:15:41 +00:00
rpaulo 995861ac50 Replace tty0[0-1] with ttyZ[0-1] because if we list symlinks, PAM
would break and remove tty0[2-7] since they don't exist.
2005-10-07 11:38:19 +00:00
martin c1a47858e9 Better size estimation (the previous code counted the compressed kernels,
but we only need the constant size volume header)
2005-10-04 16:11:15 +00:00
christos 1cd51a7e8a update todo items. 2005-10-03 00:17:53 +00:00
jmcneill d94618bd3e Add gpio devices to template. 2005-09-27 02:44:12 +00:00
christos bc249013c1 Add the TOG copyright. 2005-09-24 18:22:22 +00:00
tsarna a3e8f0991e Add pam_afslog. Like pam_krb5, this is a fast, quiet no-op if you aren't
actually using it the subsystem.

Approved by: gendalia
2005-09-22 01:02:12 +00:00
elad 392d31ddc2 Use more sane defaults for commented out fingerd entry.
From OpenBSD and Zafer Aydogan.
PR/31341.
2005-09-18 19:47:28 +00:00
tsarna 9cb3a4de17 Default rwhod to running as _rwhod (but leave disabled by default).
I thought I already comitted this one...
2005-09-15 03:40:34 +00:00
tsarna 384be89761 Adjust for ownership of /var/rwho 2005-09-14 14:01:57 +00:00
tsarna cd41b5d099 add _rwhod user (and group) 2005-09-12 16:21:56 +00:00
rpaulo 0a8fc88cf5 Remove the localhost ip6.int example since, as per RFC 4159, ip6.int is
now depreciated.

Discussedon tech-net.
2005-09-01 14:02:01 +00:00
tron f851540ac2 Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.
2005-08-30 10:58:33 +00:00
peter 9c1da17e90 pf needs to be started after the network is up, because some pf rules
derive IP address(es) from the interface (e.g "... from any to fxp0").
This however, creates window for possible attacks from the network.

Implement the solution proposed by YAMAMOTO Takashi:
Add /etc/defaults/pf.boot.conf and load it with the /etc/rc.d/pf_boot
script before starting the network. People who don't like the default
rules can override it with their own /etc/pf.boot.conf.
The default rules have been obtained from OpenBSD.

No objections on: tech-security
2005-08-23 12:12:56 +00:00
perry 15e3f0cc19 Small ugly hack -- sed "Mounted on" to "Mount" so that the df line
fits in <80 columns.

We should probably do this better -- I'm going to look into importing
der mouse's halign program to make a cleaner job of this.
2005-08-22 14:24:45 +00:00
perry 9e84da172c Make max_loginlen and max_grouplen 16.
We've handled 16 character logins for quite some time, and we even
have packages that create >8 character accounts. There is no point in
pretending the limit is 8 any more by default.

Discussed (very lightly -- there was little comment) on tech-userlevel
2005-08-22 14:09:23 +00:00
rpaulo 82bdaacb4f Adapted to the changes of grfinfo(1) MANSUBDIR (hp300). (thanks Klaus Klein) 2005-08-20 17:23:53 +00:00
drochner 35a754577f add SIP
(not going to import everything from IANA, but this is an increasingly
popular one)
2005-08-16 19:41:01 +00:00
peter ad9c34ce5c Changes suggested by lukem:
1. Order pf to start before the network is configured.

2. If the pf_rules cannot be found at boot time, abort the boot (from the
   ipfilter script).
2005-08-10 13:52:05 +00:00
peter c9c458f33c Add command_args="-D" to the ftpd rc.d script. This flag is always needed
when running ftpd as daemon and it will now automatically be appended to the
command line, even if ftpd_flags doesn't have it.

Suggested by Alan Barrett and Luke Mewburn, thanks.
2005-08-09 14:59:33 +00:00
peter c100ff5b4d Add "-ll" to ftpd_flags to be consistent with the entry in inetd.conf.
Suggested by lukem@.
2005-08-08 00:20:46 +00:00
peter 9cfba4bb75 Add a note telling that ftpd_flags should always contain "-D".
Suggested by lukem@.
2005-08-08 00:19:37 +00:00
peter d0b18db569 Allow to change the location of the pf ruleset with the variable $pf_rules. 2005-08-07 01:03:39 +00:00
chris 3d4b482c1f As requested in PR port-cats/30460 add support for GENERIC.ABLE kernel to
sysinst, and also add the ABLE install kernel to the generated release
kernels.
2005-08-07 00:21:38 +00:00
peter f74a86ef4f Add the new ftpd rc.d script. 2005-08-04 22:32:44 +00:00
peter cbc0c4b837 Add defaults for ftpd. 2005-08-04 22:29:01 +00:00
peter 7eb092e6c3 Add rc.d support for standalone ftpd, suggested by perry@. 2005-08-04 22:28:17 +00:00
shige 9bc1bf15c8 Add md-kernel for installation: INSTALL_OPENBLOCKS266. 2005-08-03 14:55:37 +00:00
nakayama 69b6d49897 Add man page for teliosio(4). 2005-07-31 00:12:16 +00:00
skrll acd7c4c5ca Add a driver for Cypress microcontroller based USB serial adapters.
XXX hw flow control is not supported.
2005-07-30 06:14:49 +00:00
christos 0e7146df89 Improve on the migration bit. Check if files are different, and if not,
remove the source and leave a symlink behind. Otherwise, let the user know.
2005-07-17 21:28:45 +00:00
christos a2663103c5 Copy and link files to allow a chrooted named to start-up automatically. 2005-07-17 16:30:57 +00:00
kiyohara c1a84a4d12 ieee1394 import from FreeBSD. 2005-07-11 15:29:05 +00:00
lukem fccd5bd47c Update permissions of /var/log/wtmp{,x} to match those installed by
etc/Makefile.
Fixes PR 30717 from Jukka Salmi.
2005-07-11 08:41:40 +00:00
macallan 478cf01748 added ttyC00 and ttyC01 fopr the SPARCbook's internal modem and PCMCIA
modems
2005-07-03 18:08:53 +00:00
rpaulo aafff09728 Add ptyfs to the file-system types ignored by the find_core check.
Ok'ed by Christos Zoulas and Hubert Feyrer.
2005-06-30 18:23:26 +00:00