1712 Commits

Author SHA1 Message Date
lukem
ce3ce86261 migrate raising of securelevel from sysctl to separate securelevel script.
the latter depends upon aftermountlkm (but is required by DAEMON), so that
lkms may be loaded before the securelevel is raised.
noted by Rafal Boni <rafal@mediaone.net> in [bin/10780]
2000-08-21 23:31:24 +00:00
lukem
49533ad06e don't start rc.d scripts with a `nostart' keyword 2000-08-21 23:09:50 +00:00
lukem
4e283949d1 remove rc.wscons 2000-08-21 23:07:11 +00:00
lukem
0c020b6812 migrate guts of these /etc/foo.conf config files into /etc/default/foo.conf,
and source the latter in the former.  this makes it easier for a sysadmin to
upgrade the default files without affecting local config, and retains the
semantics that the /etc/foo.conf files are the actual files that are edited
(as opposed to /etc/foo.local.conf or /etc/foo.conf.local or whatever, which
isn't as intuitive).
2000-08-21 23:06:22 +00:00
lukem
801142dbde - install files in etc/default/
- migrate rc.wscons to (already existing) rc.d/ wscons
2000-08-21 23:03:10 +00:00
lukem
09251753f6 migrate rc.wscons to (already existing) rc.d/wscons 2000-08-21 23:01:36 +00:00
lukem
cbba2db233 migrate default installation config files from /etc to /etc/default 2000-08-21 23:00:26 +00:00
lukem
aeebc796f0 add etc/default 2000-08-21 22:57:24 +00:00
lukem
54049fb460 remove rc.wscons 2000-08-21 22:57:11 +00:00
abs
31a6224745 Move options into ntp_flags, to make it possible to add '-u' without
modifying rc.d/ntpdate
2000-08-21 14:48:39 +00:00
mrg
4c835d91f6 add ramdisk support 2000-08-20 14:48:32 +00:00
lukem
a96d29c7e3 support ${name}_nice even when using ${name}_chroot. per discussion with mrg... 2000-08-19 08:47:43 +00:00
bjh21
31bec2bf20 Add lpt and com 2000-08-17 14:13:41 +00:00
lukem
0847f3e3f5 add support for ${name}_chroot, which chroot(8)s before running the command.
allow changing the user credentials to ${name}_user, ${name}_group,
and ${name}_groups as part of this. if ${name}_chroot is used, the following
variables won't work: ${name}_chdir and ${name}_nice.
[requested by mrg; whipped up in a few minutes on his terminal :-]
2000-08-17 11:07:10 +00:00
itojun
b1253dc369 synchronize with /etc/mail content.
NetBSD PR 10836 from koji@jp.above.net.
2000-08-15 14:48:23 +00:00
itojun
7342dfee1d reorder "localhost" entry, to prefer ::1 than 127.0.0.1. 2000-08-15 09:33:05 +00:00
mrg
d2e1f953ef make that "audio*" not "audio". 2000-08-13 15:37:09 +00:00
mason
ee4a3af175 This should be the final part of moving to 64 PTYs by default. Added
entries for tty{r,s}{0,1,2,3,4,5,6,7,8,9,a,b,c,d,e,f} to /etc/ttys.

Thanks to Matthew Green for pointing out the need.
2000-08-12 13:43:40 +00:00
phil
8ecc16e026 Add the coda services. 2000-08-11 23:25:34 +00:00
matt
01c441e0c2 Fix device creation for SCSI tapes. 2000-08-11 19:19:03 +00:00
toddpw
e36c17d6c2 Have port-i386 use installation/floppy, for conformance with release(7). 2000-08-11 09:20:38 +00:00
lukem
5007ab036b - sshd has a pid file, so take advantage of it
- support `reload' arg (using default of SIGHUP)
2000-08-10 22:49:43 +00:00
thorpej
690a071d43 Need bsd.own.mk 2000-08-10 22:02:07 +00:00
lukem
0b1677de5f - provide sshd not ssh
- don't start until after LOGIN (after NETWORK is way too early)
- KNF (as such :)
2000-08-10 01:41:09 +00:00
mrg
64fe1807a8 remove xy & xd support. 2000-08-09 10:54:20 +00:00
thorpej
26aeddad0c Add `swat' (Samba Web Administration Tool) services at 901/tcp. 2000-08-08 03:10:50 +00:00
thorpej
81958d9213 Add kdc/kdc_flags variables. 2000-08-06 21:34:17 +00:00
thorpej
f0c5d26a40 Startup script glue for the Heimdal KDC. 2000-08-06 21:32:56 +00:00
thorpej
6636b19ffd Add (commented out) hprop service, along with a short explanation
of when to enable it and why.
2000-08-06 20:35:13 +00:00
thorpej
eb8931bc84 Add `hprop' service (754/tcp). 2000-08-06 20:12:19 +00:00
fvdl
4ed8b47725 Do not create the binary/security directory, there is no seperate
security set anymore.
2000-08-06 18:10:48 +00:00
thorpej
4bfab7fc50 /var/krb5kdc -> /var/heimdal 2000-08-06 17:15:47 +00:00
nonaka
7a41932873 for make snapshot 2000-08-06 16:11:32 +00:00
thorpej
ac1bd4275a Remove the (not supported) krbupdate service, and add (commented out)
kerberos-adm.
2000-08-05 00:48:15 +00:00
thorpej
75713daa92 Add ISAKMP. 2000-08-03 22:58:37 +00:00
kleink
a8c7e91153 As discussed with Hubert Feyrer in private mail, install UTC as the default
time zone; while amounting to the same offset, the time zone 'name' of
Factory violates the prinicple of least surprise.
2000-08-03 13:00:02 +00:00
hubertf
343777f0d3 Change default timezone from US/Pacific to Factory:
Before:
    Wed Aug  2 06:53:04 PDT 2000

After:
    Wed Aug  2 13:52:52 Local time zone must be set--see zic manual page 2000
2000-08-02 14:40:45 +00:00
itojun
e9b5e5d87c fix comment on DAD wait 2000-08-02 13:59:11 +00:00
hubertf
dcefdf7722 Adjust comment to what's actually being done 2000-08-02 11:07:51 +00:00
itojun
8451f00774 we need to sleep for IPv6 DAD period, before and after rtsol.
(they are for stability in boot-time configuration)
comment from perry.
2000-08-01 20:49:11 +00:00
jwise
d6662ec62f Change name of precmd from start_precmd to sshd_precmd. While it worked
fine as was, the result was the line `start_precmd=start_precmd' which
looked odd.  Pointed out by Bernd Ernesti.

While here, add NetBSD RCS Id.

BTW, to clarify, as people have asked:  this script does not support
pkgsrc/security/sshd -- that package comes with a perfectly fine rc script
which in addition to supporting /etc/rc.d can also be used with 1.4.X.

This script will not trivially work with the ssh package as it a.) calls
the ssh commands at the pathnames they will be installed at by usr.bin/ssh,
and b.) generates a DSA key as well as an RSA key.
2000-08-01 14:28:32 +00:00
jlam
f3983ea4df Correct apparent past-o: RSA -> DSA 2000-07-31 21:43:52 +00:00
jwise
5da8f604df Add $sshd and $sshd_flags for use by both usr.bin/sshd and pkgsrc/security/{open,}ssh
As a precedent, note the presence of $gated, even though we do not distribute
gated outside of pkgsrc.
2000-07-31 20:47:41 +00:00
jwise
5cfec6f11d An sshd startup script for use with usr.bin/sshd. Installation is conditional
on ${SSHDIST}, as with usr.bin/ssh itself.

This script includes a `keygen' target for regenerating RSA and DSA host keys,
and invokes this if these keys are not present when sshd is started up.
2000-07-31 20:39:41 +00:00
chuck
fcf381833d actually make use of new features introduced in man.c (rev 1.23):
allow to specify relative paths for sections in man.conf - they are used
          similarily to _subdir, but only when appropriate
2000-07-31 00:26:48 +00:00
chuck
c438e69177 if update_motd is set, do not gratuitously force it to have an empty line
in it.  also be a bit smarter about deleting stuff from motd during
update.  it is now possible to have a one line motd just like in SunOS.
2000-07-31 00:17:05 +00:00
veego
ea8a88f609 syslog requires databases from sysdb which creates /var/run/utmp. 2000-07-29 21:50:20 +00:00
soren
d13496d33e md0c -> md0d. 2000-07-29 10:56:19 +00:00
christos
023a7f381f add back check to .rhosts cat -f avoids the security hole. 2000-07-28 21:38:43 +00:00
mason
2ff2883ec7 pty{0,1} created more than once for "floppy" target. Corrected. 2000-07-27 19:16:09 +00:00