Commit Graph

197 Commits

Author SHA1 Message Date
riastradh
c91905c4be Save the entropy seed daily in /etc/security. 2019-12-06 14:43:29 +00:00
brad
12ea0a140d Add support for legacy ZFS filesystems, specified by mountpoint=legacy
in the ZFS properties of the dataset and a simple man page for
mount_zfs.  With this, it is possible to put ZFS filesystems in
/etc/fstab as file system type zfs.

Add a rc.d script that kicks the module ZFS load mostly before
mountall runs simular to what LVM does.  This allows for any legacy
mounts to be specified in critical_local_filesystems and allows for
ZFS pools on top of cgd (probably among other things).  Introduce a
rc.conf variable called zfs which needs to be set to YES, in the usual
manor of things, to get zvols and ZFS dataset support rather then just
assume that 'zfs mount' does that in mountall.  Fix a problem in
mountall if ZFS is not compiled into the system.
2019-09-15 19:38:08 +00:00
msaitoh
532016140e Fix typo in comment (s/partion/partition/). 2019-07-24 02:37:17 +00:00
kre
6aaf09f01b revert previous. somehowI failedto see that was already done. 2019-05-12 01:45:25 +00:00
kre
1aa98bd080 install rc.d 2019-05-12 01:33:47 +00:00
maxv
907a706c0b Add smtoff, an rc.d script that disables Simultaneous Multi-Threading. It
parses the output of cpuctl, and executes "cpuctl offline" for each CPU
that has SmtID!=0.

The default is "smtoff=NO", which means that SMT remains enabled.
2019-05-11 19:31:03 +00:00
sevan
967446d222 Include npf_boot rc.d scripts which loads an interim config early in boot.
By default /etc/default/npf.boot.conf which can be overriden by /etc/npf.boot.conf.
2019-04-10 00:32:15 +00:00
sevan
10a9937f89 Allow DHCP
Neighbour Advertisement should be allowed both ways, otherwise
ipv6nd_sendadvertisement() from dhcpcd logs "Network is unreachable"
2019-04-07 02:08:08 +00:00
sevan
14689fed34 Add an initial ruleset and rc script for NPF to protect host during early stage
of boot, similar to what is currently available for PF.
2019-04-02 01:50:32 +00:00
roy
08c8b11310 Setup default wpa_supplicant flags so that it:
* Writes diagnostics to syslog
  * Enables interface matching to hotplug wireless interfaces
  * Uses /etc/wpa_supplicant.conf
2019-01-12 17:38:36 +00:00
martin
a52a4fdc24 Apply patch from Ian D. Leroux in PR bin/51019:
when unmounting tmpfs file systems at shutdown time, avoid unmounting
a tmpfs created by init on /dev - behaviour overridable from rc.conf.
By default all tmpfs that have device nodes are not mounted.
2018-10-19 14:11:12 +00:00
maxv
6049b090a1 Remove the userland part of ISDN. The kernel part is untouched for now.
ipppctl was actually an exact copy of pppoectl; there is no functional
change in pppoectl in this commit.
2018-09-23 07:24:19 +00:00
roy
b729dec75a Remove dhclient from the base system.
Discussed here:
https://mail-index.netbsd.org/tech-userlevel/2018/06/21/msg011233.html
2018-06-29 12:34:13 +00:00
uwe
2a24bb8653 Provide resize_disklabel=NO default. Used by arm images and is not
part of the stock rc.d yet.  This silences rc when you delete the
whole resize_* block from rc.conf after the first boot.
2018-05-25 20:48:54 +00:00
martin
ac1539438e Cosmetics: default to dmesg -t when writing /var/run/dmesg.boot -
the timestamps at boot time are mostly useless.
2018-04-18 04:27:47 +00:00
christos
b985414b8f Merge autofs support from: Tomohiro Kusumi
XXX: Does not work yet
2018-01-09 03:31:12 +00:00
is
d9123c9e75 Add startup file for dhcp v6 with builtin isc-dhcp. Alas, this needs to
be a seperate process. On the positive side: this can't break the dhcpd
for IPv4 when tested.
2017-12-29 18:15:48 +00:00
christos
09e56bb693 add nsd 2017-01-07 19:55:35 +00:00
christos
71cba524e4 add scripts for npfd 2017-01-05 14:39:09 +00:00
christos
c90b9921a5 unbound additions 2016-08-20 11:21:50 +00:00
roy
d0367588d0 Instead of waiting for a duration based in IPv6 DAD count sysctl,
wait for 15 seconds for tentative flags to clear allowing 5 seconds
for detached flags to clear as well from configured addresses.

This is now protocol independant and allows time for the interfaces to
work out if they have a carrier or not.
2016-01-07 11:51:07 +00:00
plunky
d86700ce1a "ip6addrctl_enable" is now "ip6addrctl", set the default appropriately 2015-12-26 21:05:11 +00:00
christos
4f497f781b Add defaults for ip6addrctl 2015-12-13 02:27:06 +00:00
chopps
94dff34741 Add resize_root boot operation. If resize_root=YES in rc.conf then
the system attempts to resize the root file system to fill it's
partition prior to mounting read-write. Useful for things like AMI
file system images. May eventually be used by arm images after
coming up with similar solution for increasing the parition size.
2015-03-30 10:58:37 +00:00
jmcneill
7ba4328bfa Process /etc/modules.conf (if present) at startup, before securelevel is
raised, to allow module loading on ports without a module aware bootloader.
2015-03-21 19:10:43 +00:00
christos
bef8765f0a there is no more makewhatis 2015-03-04 14:54:38 +00:00
joerg
88c9fb0be8 Add rc script for /sbin/iscsid. 2015-02-21 23:13:00 +00:00
christos
3e734a9422 add blacklistd 2015-01-25 16:26:34 +00:00
jmcneill
f1c95757e8 It doesn't make sense to start wpa_supplicant from an rc.d script without
the -B flag, so always prepend it to $rc_flags.
2015-01-22 19:50:21 +00:00
tron
a0fbec155b Revert last change. This was already fixed differently and something
went wrong with the change anyway. Sorry
2014-09-26 11:04:06 +00:00
tron
4c439aa401 Re-add default for "rtsol". "/etc/rc.d/network" still checks for this
setting and complains if it isn't defined at all. Add a comment that
it is deprecated and suggest to use "dhcpcd=YES" instead.
2014-09-26 10:36:11 +00:00
roy
d784a83a57 rtsol has gone. 2014-09-13 11:07:08 +00:00
roy
cb2e7b1a58 Add the -M flag to dhcpcd so it stays in master mode even for one
interface. Suggested by apb@
2014-09-13 11:06:42 +00:00
roy
c6314d6139 Remove rtsol(8) and rtsold(8) as their functionality is in dhcpcd(8).
Remove rtsol(8) from rc.d/network.
Add -w seconds command to ifconfig to wait for N seconds for until DAD
has finished on all addresses.
Use ifconfig -w in rc.d/network instead of a forced sleep.

As discussed on tech-net@
2014-09-11 13:10:03 +00:00
wiz
7f6fa64667 'file system' for consistency with documentation (instead of 'filesystem'). 2014-07-22 17:11:09 +00:00
spz
acaf72ec02 Introduce a variable for security.conf, default empty, to list users
whose home is (allowed to be) owned by another user.

It's a separate variable and not just check_passwd_permit_dups so I can
make security shut up about my uucp users.

Fixes the second half of PR misc/36063
2013-11-06 19:37:05 +00:00
agc
1410cf30c2 Fix for problematic paths in /etc/daily and /etc/security reported in
PR/47645.

Add a separate file which contains the paths for the pkg_admin and
pkg_info utilities. This is called /etc/pkgpath.conf (to distinguish it
from pkg.conf).

Thanks also to Edgar Fuss for the sanity check.
2013-05-01 05:36:25 +00:00
prlw1
281a5e1fdb Add ppp=YES variable. Currently pppd(8) starts automatically if ppp_peers
is not empty. Adding a ppp variable allows the default peer to be set,
and ppp set to NO so that dialing can happen with /etc/rc.d/ppp onestart.
Default set to YES so that old behaviour is preserved.
http://mail-index.netbsd.org/tech-userlevel/2012/08/21/msg006656.html
2013-01-13 18:47:57 +00:00
riastradh
9dc19ed03b Nix `-b 1024' from ssh_keygen_flags in /etc/defaults/rc.conf.
No objections on tech-security:

http://mail-index.NetBSD.org/tech-security/2012/09/03/msg000548.html

The security of generating keys at boot remains questionable, but
this change makes that no worse.
2013-01-11 04:32:41 +00:00
christos
ba9bed30be No need to specify nfsd flags anymore. The defaults DTRT. 2012-08-13 08:20:44 +00:00
christos
da43ca12af PR/46757: Edgar Fuß: Change default to pkg_vulnerabilities from NO to unset,
and make unset insted of NO to produce warnings, so that setting it to NO does
produce warnings (if it is inappropriate for the machine to warn about this).
2012-07-30 17:09:33 +00:00
christos
e763a079db PR/46756: Edgar Fuß: Enable ignoring subdirectories in daily's find_core 2012-07-30 17:06:51 +00:00
spz
c6302b7410 change security so that there is a configuration value for the list of
users who will not be considered for duplicate uid check.
Seed it with 'toor' in defaults/security.conf.
2012-04-05 09:09:27 +00:00
joerg
410d0f4380 Import the new apropos/whatis.
This code has been developed by Abhinav Upadhyay as part of Google's Summer
of Code 2011. It uses libmandoc to parse man pages and builds a Full
Text Index in a SQLite database. The combination of indexing the full
manual page, filtering out stop words and ranking individual matches
based on the section gives a much improved user experience.

The old makewhatis and friends are kept under MKMAKEMANDB=no for now.
2012-02-07 19:13:24 +00:00
tsutsui
b25081130c Add a default for isibootd(8). Pointed out by nonaka@. 2011-12-23 05:05:04 +00:00
darcy
5bc4a2e2d4 Add option to include daily insecurity output in daily output.
PR bin/17029
2011-12-17 12:27:42 +00:00
tls
4924aa205a Load entropy at system boot (only works at securelevel < 1); save
at system shutdown.  Disable with random_seed=NO in rc.conf if desired.

Goes to some trouble to never load or save to network filesystems.

Entropy should really be loaded by the boot loader but I am still
sorting out how to pass it to the kernel.
2011-11-23 10:47:48 +00:00
darcy
77a099d5ff Allow pf flags to be specified in rc.conf.
Add default to defaults/rc.d as suggested by lukem@
2011-11-21 20:56:21 +00:00
riz
6fc3b870af Create and install an rc.d file for devpubd - a daemon to listen
on drvctl and autocreate device nodes in /dev for those which don't have any.
Set the default to "NO" for now.
2011-09-06 21:32:29 +00:00
jym
cec3d05bda Arch-specific rc.conf files are not really autonomous rc.conf
files, they are appended to the end of etc/defaults/rc.conf.

So rename them to rc.conf.append for clarity, as suggested by mrg@. Adapt
Makefile accordingly.
2011-08-22 20:48:38 +00:00