Commit Graph

1764 Commits

Author SHA1 Message Date
lukem a4517195f9 needs to run after mountcritremote, since ipnat is in /usr/sbin 2000-08-21 23:33:50 +00:00
lukem d8b52eec28 support running /etc/rc.shutdown.local 2000-08-21 23:33:06 +00:00
lukem ce3ce86261 migrate raising of securelevel from sysctl to separate securelevel script.
the latter depends upon aftermountlkm (but is required by DAEMON), so that
lkms may be loaded before the securelevel is raised.
noted by Rafal Boni <rafal@mediaone.net> in [bin/10780]
2000-08-21 23:31:24 +00:00
lukem 49533ad06e don't start rc.d scripts with a `nostart' keyword 2000-08-21 23:09:50 +00:00
lukem 4e283949d1 remove rc.wscons 2000-08-21 23:07:11 +00:00
lukem 0c020b6812 migrate guts of these /etc/foo.conf config files into /etc/default/foo.conf,
and source the latter in the former.  this makes it easier for a sysadmin to
upgrade the default files without affecting local config, and retains the
semantics that the /etc/foo.conf files are the actual files that are edited
(as opposed to /etc/foo.local.conf or /etc/foo.conf.local or whatever, which
isn't as intuitive).
2000-08-21 23:06:22 +00:00
lukem 801142dbde - install files in etc/default/
- migrate rc.wscons to (already existing) rc.d/ wscons
2000-08-21 23:03:10 +00:00
lukem 09251753f6 migrate rc.wscons to (already existing) rc.d/wscons 2000-08-21 23:01:36 +00:00
lukem cbba2db233 migrate default installation config files from /etc to /etc/default 2000-08-21 23:00:26 +00:00
lukem aeebc796f0 add etc/default 2000-08-21 22:57:24 +00:00
lukem 54049fb460 remove rc.wscons 2000-08-21 22:57:11 +00:00
abs 31a6224745 Move options into ntp_flags, to make it possible to add '-u' without
modifying rc.d/ntpdate
2000-08-21 14:48:39 +00:00
mrg 4c835d91f6 add ramdisk support 2000-08-20 14:48:32 +00:00
lukem a96d29c7e3 support ${name}_nice even when using ${name}_chroot. per discussion with mrg... 2000-08-19 08:47:43 +00:00
bjh21 31bec2bf20 Add lpt and com 2000-08-17 14:13:41 +00:00
lukem 0847f3e3f5 add support for ${name}_chroot, which chroot(8)s before running the command.
allow changing the user credentials to ${name}_user, ${name}_group,
and ${name}_groups as part of this. if ${name}_chroot is used, the following
variables won't work: ${name}_chdir and ${name}_nice.
[requested by mrg; whipped up in a few minutes on his terminal :-]
2000-08-17 11:07:10 +00:00
itojun b1253dc369 synchronize with /etc/mail content.
NetBSD PR 10836 from koji@jp.above.net.
2000-08-15 14:48:23 +00:00
itojun 7342dfee1d reorder "localhost" entry, to prefer ::1 than 127.0.0.1. 2000-08-15 09:33:05 +00:00
mrg d2e1f953ef make that "audio*" not "audio". 2000-08-13 15:37:09 +00:00
mason ee4a3af175 This should be the final part of moving to 64 PTYs by default. Added
entries for tty{r,s}{0,1,2,3,4,5,6,7,8,9,a,b,c,d,e,f} to /etc/ttys.

Thanks to Matthew Green for pointing out the need.
2000-08-12 13:43:40 +00:00
phil 8ecc16e026 Add the coda services. 2000-08-11 23:25:34 +00:00
matt 01c441e0c2 Fix device creation for SCSI tapes. 2000-08-11 19:19:03 +00:00
toddpw e36c17d6c2 Have port-i386 use installation/floppy, for conformance with release(7). 2000-08-11 09:20:38 +00:00
lukem 5007ab036b - sshd has a pid file, so take advantage of it
- support `reload' arg (using default of SIGHUP)
2000-08-10 22:49:43 +00:00
thorpej 690a071d43 Need bsd.own.mk 2000-08-10 22:02:07 +00:00
lukem 0b1677de5f - provide sshd not ssh
- don't start until after LOGIN (after NETWORK is way too early)
- KNF (as such :)
2000-08-10 01:41:09 +00:00
mrg 64fe1807a8 remove xy & xd support. 2000-08-09 10:54:20 +00:00
thorpej 26aeddad0c Add `swat' (Samba Web Administration Tool) services at 901/tcp. 2000-08-08 03:10:50 +00:00
thorpej 81958d9213 Add kdc/kdc_flags variables. 2000-08-06 21:34:17 +00:00
thorpej f0c5d26a40 Startup script glue for the Heimdal KDC. 2000-08-06 21:32:56 +00:00
thorpej 6636b19ffd Add (commented out) hprop service, along with a short explanation
of when to enable it and why.
2000-08-06 20:35:13 +00:00
thorpej eb8931bc84 Add `hprop' service (754/tcp). 2000-08-06 20:12:19 +00:00
fvdl 4ed8b47725 Do not create the binary/security directory, there is no seperate
security set anymore.
2000-08-06 18:10:48 +00:00
thorpej 4bfab7fc50 /var/krb5kdc -> /var/heimdal 2000-08-06 17:15:47 +00:00
nonaka 7a41932873 for make snapshot 2000-08-06 16:11:32 +00:00
thorpej ac1bd4275a Remove the (not supported) krbupdate service, and add (commented out)
kerberos-adm.
2000-08-05 00:48:15 +00:00
thorpej 75713daa92 Add ISAKMP. 2000-08-03 22:58:37 +00:00
kleink a8c7e91153 As discussed with Hubert Feyrer in private mail, install UTC as the default
time zone; while amounting to the same offset, the time zone 'name' of
Factory violates the prinicple of least surprise.
2000-08-03 13:00:02 +00:00
hubertf 343777f0d3 Change default timezone from US/Pacific to Factory:
Before:
    Wed Aug  2 06:53:04 PDT 2000

After:
    Wed Aug  2 13:52:52 Local time zone must be set--see zic manual page 2000
2000-08-02 14:40:45 +00:00
itojun e9b5e5d87c fix comment on DAD wait 2000-08-02 13:59:11 +00:00
hubertf dcefdf7722 Adjust comment to what's actually being done 2000-08-02 11:07:51 +00:00
itojun 8451f00774 we need to sleep for IPv6 DAD period, before and after rtsol.
(they are for stability in boot-time configuration)
comment from perry.
2000-08-01 20:49:11 +00:00
jwise d6662ec62f Change name of precmd from start_precmd to sshd_precmd. While it worked
fine as was, the result was the line `start_precmd=start_precmd' which
looked odd.  Pointed out by Bernd Ernesti.

While here, add NetBSD RCS Id.

BTW, to clarify, as people have asked:  this script does not support
pkgsrc/security/sshd -- that package comes with a perfectly fine rc script
which in addition to supporting /etc/rc.d can also be used with 1.4.X.

This script will not trivially work with the ssh package as it a.) calls
the ssh commands at the pathnames they will be installed at by usr.bin/ssh,
and b.) generates a DSA key as well as an RSA key.
2000-08-01 14:28:32 +00:00
jlam f3983ea4df Correct apparent past-o: RSA -> DSA 2000-07-31 21:43:52 +00:00
jwise 5da8f604df Add $sshd and $sshd_flags for use by both usr.bin/sshd and pkgsrc/security/{open,}ssh
As a precedent, note the presence of $gated, even though we do not distribute
gated outside of pkgsrc.
2000-07-31 20:47:41 +00:00
jwise 5cfec6f11d An sshd startup script for use with usr.bin/sshd. Installation is conditional
on ${SSHDIST}, as with usr.bin/ssh itself.

This script includes a `keygen' target for regenerating RSA and DSA host keys,
and invokes this if these keys are not present when sshd is started up.
2000-07-31 20:39:41 +00:00
chuck fcf381833d actually make use of new features introduced in man.c (rev 1.23):
allow to specify relative paths for sections in man.conf - they are used
          similarily to _subdir, but only when appropriate
2000-07-31 00:26:48 +00:00
chuck c438e69177 if update_motd is set, do not gratuitously force it to have an empty line
in it.  also be a bit smarter about deleting stuff from motd during
update.  it is now possible to have a one line motd just like in SunOS.
2000-07-31 00:17:05 +00:00
veego ea8a88f609 syslog requires databases from sysdb which creates /var/run/utmp. 2000-07-29 21:50:20 +00:00
soren d13496d33e md0c -> md0d. 2000-07-29 10:56:19 +00:00
christos 023a7f381f add back check to .rhosts cat -f avoids the security hole. 2000-07-28 21:38:43 +00:00
mason 2ff2883ec7 pty{0,1} created more than once for "floppy" target. Corrected. 2000-07-27 19:16:09 +00:00
veego 3e53e60091 Really, we don't need a 2nd pty0 in the floppy target. 2000-07-27 19:09:57 +00:00
mason 12fa1acae3 As before, make 64 PTYs default. Forgot to move updated version back after
moving it aside to commit fix to previous version, prior to larger commit.
2000-07-27 18:46:15 +00:00
mason db8e04e0f8 Move to a default of 64 PTYs in "all" targets. Normalize "floppy" and
"minimal" targets to use 16 PTYs.
2000-07-27 18:43:14 +00:00
mason d123ebaad1 Correct typo - missing $0. 2000-07-27 18:41:34 +00:00
lukem 392130e304 move recreating /var/run/utmp from mountcritlocal (where /var/run is
purged but /usr/bin/install is not available) to sysdb.
problem noted by Matthias Drochner.
2000-07-27 13:58:49 +00:00
itojun 0e416c083c add usr.bin/{hoststat,purgestat}, which are new argv[0] hack
for sendmail 8.10.x and beyond.  sorry that i forgot to add this one.

From: Andrew Brown <atatat@atatdot.net>
2000-07-26 16:35:33 +00:00
lukem 48b9eee5e1 * add new dummy dependancy `NETWORK' to be REQUIREd by services which need
networking to be operational before starting, and use as appropriate.
  NETWORK depends upon network and dhclient.
* move the guts of systemfs into mountcritlocal
* replace the dependancy on systemfs with mountcritremote, and remove the
  former.
* SERVERS now also depends upon ppp

Notes:
* dhclient (and others) needs /var to be a $critical_filesystem_beforenet
* dhclient now starts before syslogd (because the latter needs /usr, and
  /usr might need dhclient to be mounted)

Should fix PRs:
    [install/9853] [bin/10002] [misc/10349] [port-i386/10633] [misc/10641]
2000-07-26 00:11:48 +00:00
thorpej fe54e81eb3 Also do ../usr.bin/ssh for the `distribution' target. 2000-07-25 19:07:39 +00:00
jdolecek 1bf05ae3b1 the format without netmask is supported for compatibility only and not
specifying it is discouradged, actually
also add comments about this fact to etc/rc.d/network, for people who
don't read manpages :)
2000-07-25 18:47:28 +00:00
drochner 6c44b52470 add usr/share/wscons/{fonts,keymaps} 2000-07-25 17:20:13 +00:00
drochner 8ba3198bec the pcvt fonts are in /usr/share/wscons/fonts now 2000-07-25 17:14:58 +00:00
itojun 674467bac8 add "start" argument to sshd.sh.
- sshd.sh comes with pkgsrc/security/openssh requires "start" argument
- sshd.sh comes with pkgsrc/security/{ssh,ssh6} does not care about argument
- it seems to me, from license twists, openssh installation will get
  more popular
2000-07-24 10:10:05 +00:00
briggs a2c0644e20 Add a Makefile.inc with snap_md_post to build and install release notes
for a make release or make snapshot.
2000-07-22 02:33:53 +00:00
briggs 5d1a00b125 Add a snap_md_post to build release notes and boot floppies on a make
release or make snapshot.
2000-07-22 02:33:06 +00:00
lukem 1a54e63fe1 match reality WRT rc.d... 2000-07-22 01:50:30 +00:00
lukem e15f7a2a6f clarify the difference between $critical_filesystems_beforenet and
$critical_filesystems, and why `/var' should be in the former (or
implied as part of `/' which is already mounted).
2000-07-22 01:09:44 +00:00
joda d3f42e569d add some kerberos related ports 2000-07-22 00:26:42 +00:00
lukem 1a29746222 - fix typo; the first ipsec_start() should be ipsec_prestart()
- if ipsec.conf isn't readable and the system is booting directly to multiuser,
  send SIGTERM to the parent (/etc/rc) so that init(8) aborts the boot.
2000-07-21 01:16:07 +00:00
lukem 262e4b1975 if ipf.conf isn't readable and the system is booting directly to multiuser,
send SIGTERM to the parent (/etc/rc) so that init(8) aborts the boot.
2000-07-21 01:14:23 +00:00
lukem 9c7a535df6 - be consistent in formatting sentences
- note that xdm might need wscons for local X servers (c.f. [install/9967])
2000-07-21 00:25:31 +00:00
lukem 31e7834913 reword description 2000-07-20 23:36:56 +00:00
lukem acae4fe558 in err() and warn() put a : between the ERROR/WARNING label and the message 2000-07-20 23:12:44 +00:00
thorpej f5e99478c8 Build a list of cloning network interfaces to configure, as well
as normal interfaces.
2000-07-20 19:43:10 +00:00
bjh21 00a398bd22 New kernel for small systems 2000-07-19 16:49:08 +00:00
lukem 47a3878257 reenable stop_cmd now that network doesn't get run at shutdown 2000-07-17 15:25:42 +00:00
lukem db024b3733 add '# KEYWORD: shutdown' so that these scripts get run at shutdown time.
now, only scripts with the keyword `shutdown' will be run by /etc/rc.shutdown,
which speeds up shutdown and makes it more robust.
2000-07-17 15:24:48 +00:00
lukem d046f31b64 run rcorder with `-k shutdown', so that only the scripts with a
`shutdown' keyword get run at shutdown time.
2000-07-17 15:23:28 +00:00
lukem 97d13d02c3 * remove bogus comment about aborting the boot if ipsec.conf doesn't exist;
this hasn't really worked and is probably too messy to resolve...
2000-07-17 13:10:54 +00:00
lukem a8b1b91ded * add support for `status'
* remove bogus comment about aborting the boot if ipf fails; this hasn't
  been supported since the rc.d migration and is too messy to resolve...
2000-07-17 12:58:14 +00:00
lukem d92b803c29 use "load_rc_config swap" for swap1 and swap2 2000-07-17 12:27:04 +00:00
lukem 8086bde7eb share the same load_rc_config between the lkm* scripts 2000-07-15 02:30:18 +00:00
lukem bafa86ff31 add usr/share/examples/syslogd 2000-07-13 14:24:13 +00:00
ad 1bc309ff6c - Replace `[ZBN-]' with `flags'.
- kerberos.log isn't generated by syslogd(8). Add `N' flag.
2000-07-11 12:41:06 +00:00
eeh 1feaf31d56 If MACHINE_ARCH is 64-bit then only build 64-bit kernels. 2000-07-07 23:06:09 +00:00
ad 05ca1d3393 Add /etc/{hesiod,passwd}.conf. 2000-07-06 11:11:16 +00:00
itojun 0bfeec5234 sync sendmail default configuration file with GENERIC kernel setting.
was: sendmail-IPv6.cf(v4/v6) + sendmail.cf(v4)
now: sendmail-IPv4only.cf(v4) + sendmail.cf(v4/v6)

do we need etc/obsolete.mi?
2000-07-04 12:21:02 +00:00
enami e0c644c119 Apply same changes done in rev. 1.5 for the entry `hp' which is
added in rev. 1.6
2000-07-03 06:11:23 +00:00
sommerfeld 9928e1fe95 Fix pr9320: improve umask checking for root's dotfiles.
Now even notices bogus umasks like 044
2000-07-02 22:27:47 +00:00
tsarna 202af8ae4a Fix typo (enable -> enabled) 2000-07-02 18:18:20 +00:00
wrstuden becc493865 And let's make some audio devices too. Stolen from port-alpha. 2000-07-01 21:41:41 +00:00
hubertf 3c57129f75 Clarify comment that inetd only starts up IP-based services *that are
enabled in /etc/inetd.conf* (someone asked me last week why NetBSD doesn't
come with a telnet server...)
2000-07-01 20:03:44 +00:00
mrg c76b8a26a9 add "wd" support 2000-07-01 16:27:47 +00:00
minoura ae45dff5fc GENERIC should run on any environment.
It required 6MB of memory;  disable some options/devices so that
it can run on 4MB machines.
2000-06-28 15:27:19 +00:00
thorpej 81a51455cd Fix brain'o in last, pointed out by Johan Danielsson. 2000-06-25 16:25:33 +00:00
thorpej 685a0649a8 lm* -> sysmon 2000-06-24 00:43:26 +00:00
fvdl 1840f1fa18 Allow a higher count of started services for broadcast RPC services. Since
rpcbind version 3 and 4 clients will try broadcasts using both the old
and new protocol for IPv4, the double amount of packets may come in,
causing bogus "service looping" events in inetd.
2000-06-22 11:35:13 +00:00
itojun c60ddc2403 remove ip6defaultif configuration. because:
- ndp is in /usr/sbin, chokes on NFS-mounted /usr installation
- the option is just for IPv6 specification geek, not for normal users
2000-06-20 16:48:14 +00:00
ad bd9588d282 Add /etc/netconfig and /etc/security.local. 2000-06-20 15:01:19 +00:00