aboutsummaryrefslogtreecommitdiff
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Make the rc.conf(5) 'log_in_vain' knob an integer.Crist J. Clark2002-01-268-22/+85
| | | | | | | | | | | | | Try this out in -CURRENT, MFC, and then consider dropping the 'log_in_vain' knob all together. It really is something for sysctl.conf(5). PR: bin/32953 Reviewed by: -bugs discussion MFC after: 1 week Notes: svn path=/head/; revision=89808
* Add local/share/java/classes, local/share/sgml, local/share/xmlDag-Erling Smørgrav2002-01-231-0/+8
| | | | | | | | Approved by: ru, silence on -ports MFC after: 1 week Notes: svn path=/head/; revision=89701
* Do not taint ::/124 for localhost reverse table.Hajimu UMEMOTO2002-01-223-2/+26
| | | | Notes: svn path=/head/; revision=89660
* Reincarnate SETUID code in man(1), not compiled in by default.Ruslan Ermilov2002-01-224-7/+17
| | | | | | | | | The code will be fixed for all known security vulnerabilities, and a make.conf(5) knob (ENABLE_SUID_MAN) will be provided for those who still want it installed setuid for whatever reasons. Notes: svn path=/head/; revision=89653
* Enable OPIE by default, using the no_fake_prompts option to hide it fromDag-Erling Smørgrav2002-01-219-23/+40
| | | | | | | | | | | | | | | | | users who don't wish to use it. If the admin is worried about leaking information about which users exist and which have OPIE enabled, the no_fake_prompts option can simply be removed. Also insert the appropriate pam_opieaccess lines after pam_opie to break the chain in case the user is logging in from an untrusted host, or has a .opiealways file. The entire opieaccess / opiealways concept is slightly unpammish, but admins familiar with OPIE will expect it to work. Reviewed by: ache, markm Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=89619
* Really back out ache's commits. These files are now precisely as they wereDag-Erling Smørgrav2002-01-193-4/+7
| | | | | | | twentyfour hours ago, except for RCS ids. Notes: svn path=/head/; revision=89569
* Back out recent changesAndrey A. Chernov2002-01-193-3/+3
| | | | Notes: svn path=/head/; revision=89567
* Turn on pam_opie by default. It should not affect non-OPIE users.Andrey A. Chernov2002-01-191-1/+1
| | | | Notes: svn path=/head/; revision=89556
* Turn on pam_opie by default. It not affect non-OPIE usersAndrey A. Chernov2002-01-191-2/+1
| | | | Notes: svn path=/head/; revision=89553
* Previous commit was incomplete, useAndrey A. Chernov2002-01-191-1/+1
| | | | | | | | "[default=ignore success=done cred_err=die]" options instead of "required" Notes: svn path=/head/; revision=89551
* Add flags 0x10000 to IO Data WN-B11/PCM's entry. Evidentally, theyWarner Losh2002-01-191-1/+1
| | | | | | | | | | changed firmware and the new cards don't work without this. Submitted by: ume MFC after: 3 days Notes: svn path=/head/; revision=89549
* Remove explaining comment and pam_unix commented out, now pam_unix can beAndrey A. Chernov2002-01-191-4/+1
| | | | | | | chained with pam_opie Notes: svn path=/head/; revision=89547
* Change comment since fallback provided now not by ftpd but by pam_opieAndrey A. Chernov2002-01-191-1/+2
| | | | Notes: svn path=/head/; revision=89532
* Add:Warner Losh2002-01-181-1/+19
| | | | | | | | | | | Accton airDirect WN3301 Melco WLI-CF-S11G GeoWave GW-NS11S Submitted by: Shigeru Ishida-san on bsd-nomads (16142,16143,16144) Notes: svn path=/head/; revision=89488
* Re-add a call to "camcontrol rescan" after insertion of an aic pccard.Joerg Wunsch2002-01-171-0/+2
| | | | | | | | | | | | | | | We now do it as a "camcontrol rescan all" which is something ken promised to implement; for the time being it's not worse than the old "camcontrol rescan $device" which ended up in something like "camcontrol rescan aic1". Currently, camcontrol misinterprets the third non-numeric arg as number 0, and rescans bus 0, which is about the best we could get at this time. Approved by: imp MFC after: 1 week Notes: svn path=/head/; revision=89475
* o Improve the line-wrapping of additional comments, some of which appearedRobert Watson2002-01-173-48/+33
| | | | | | | to be wrapped around 60, others around 40 columns. Notes: svn path=/head/; revision=89438
* o Remove a somewhat less comprehensible comment about modifying /etc/rc.Robert Watson2002-01-173-15/+6
| | | | | | | o Improve line-wrapping of another comment for consistency. Notes: svn path=/head/; revision=89437
* Added this makefile. This is not attached to the build yet. I oftenBruce Evans2002-01-161-0/+8
| | | | | | | | install parts of /etc manually and it helps to have a makefile for each subdir even if the main makefile doesn't invoke it. Notes: svn path=/head/; revision=89417
* Do not install man(1) setuid ``man''.Ruslan Ermilov2002-01-154-17/+7
| | | | | | | | | | | | | | | | | | | | | | | | | The catpaging and setuidness features of man(1) combined make it vulnerable to a number of security attacks. Specifically, it was possible to overwrite system catpages with arbitrarily contents by either setting up a symlink to a directory holding system catpages, or by writing custom -mdoc or -man groff(1) macro packages and setting up GROFF_TMAC_PATH in environment to point to them. (See PR below for details). This means man(1) can no longer create system catpages on a regular user's behalf. (It is still able to if the user has write permissions to the directory holding catpages, e.g., user's own manpages, or if the running user is ``root''.) To create and install catpages during ``make world'', please set MANBUILDCAT=YES in /etc/make.conf. To rebuild catpages on a weekly basis, please set weekly_catman_enable="YES" in /etc/periodic.conf. PR: bin/32791 Notes: svn path=/head/; revision=89390
* Everybody (for suitable values of "everybody") seems to think pam.conf shouldDag-Erling Smørgrav2002-01-142-7/+1
| | | | | | | | | be removed outright. Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=89364
* Re-add pam.conf so it will get installed so people who don't know aboutDag-Erling Smørgrav2002-01-141-1/+1
| | | | | | | | | pam.d will find out about it by reading pam.conf. Sponsored by: DARPA, NAI Labs Notes: svn path=/head/; revision=89359
* Point people towards /etc/pam.d/README.Dag-Erling Smørgrav2002-01-141-201/+2
| | | | Notes: svn path=/head/; revision=89350
* Unmunge the version preservation code and obfuscate it so CVS won't mungeDag-Erling Smørgrav2002-01-121-2/+2
| | | | | | | it all over again. Notes: svn path=/head/; revision=89298
* Back out previous commit, which erroneously removed essential comments. IDag-Erling Smørgrav2002-01-121-1/+3
| | | | | | | | | definitely need coffee. Apologies to: ache Notes: svn path=/head/; revision=89290
* Update copyrightDag-Erling Smørgrav2002-01-121-1/+1
| | | | Notes: svn path=/head/; revision=89289
* Switch over to /etc/pam.d/.Dag-Erling Smørgrav2002-01-121-6/+0
| | | | | | | Sponsored by: DARPA / NAI Labs Notes: svn path=/head/; revision=89287
* Sync with pam.conf revision 1.25.Dag-Erling Smørgrav2002-01-121-3/+1
| | | | Notes: svn path=/head/; revision=89286
* Preserve FreeBSD version strings in target files.Dag-Erling Smørgrav2002-01-121-1/+11
| | | | Notes: svn path=/head/; revision=89285
* Correct Corega KK Wireless entryWarner Losh2002-01-121-1/+1
| | | | Notes: svn path=/head/; revision=89281
* Sort entries and clarify commentsAlexey Zelkin2002-01-111-2/+5
| | | | Notes: svn path=/head/; revision=89261
* o Add T-POWER flashWarner Losh2002-01-101-2/+19
| | | | | | | | | | | | | Submitted by: Michael Johansson <micke@nevermind.net> o Sony PCWA-C100 WaveLAN card Submitted by: "Jeremiah Gowdy" <jgowdy@home.com> o Corega KK Wireless LAN PCCA-11 (version b?) Submitted by: Masahide *MAC* Noda <mac@clave.gr.jp> Notes: svn path=/head/; revision=89239
* Add a commented-out alternative for the ether line of a DIGITIALJoerg Wunsch2002-01-081-0/+1
| | | | | | | | | DEPCM-BA card, as found on my rev. C01 card. MFC after: 1 week Notes: svn path=/head/; revision=89106
* Add forgotten alias for ru_SU.ISO8859-5Andrey A. Chernov2002-01-081-0/+1
| | | | Notes: svn path=/head/; revision=89087
* Add ru_SU locale aliases for nls area alsoAlexey Zelkin2002-01-081-0/+3
| | | | Notes: svn path=/head/; revision=89083
* Actually make aliases for ru_SU locales.Alexey Zelkin2002-01-081-0/+4
| | | | Notes: svn path=/head/; revision=89078
* Add ro_ROAndrey A. Chernov2002-01-082-0/+6
| | | | | | | | PR: 33343 Submitted by: Adrian Penisoara <ady@warpnet.ro> Notes: svn path=/head/; revision=89076
* ISO 8859-1 -> ISO 8859-5 for ru_*Andrey A. Chernov2002-01-081-2/+2
| | | | Notes: svn path=/head/; revision=89075
* Correctly handle cases of deprecated locales which are supposedAlexey Zelkin2002-01-082-0/+24
| | | | | | | | | | | | | | | | | | | | to have backward compatibility symbolic links. This code should check existence of deprecated locales and fix them using following scheme: . if new locale directory exisists and is a symlink -- remove it . if old locale directory exists and not a symlink -- rename it to its new name This should allow to mtree(1) and existing locale aliases make(1) rules to setup locale dirs correctly (avoid self-referenced symlinks) BTW, this commit brings in backward compatibility support for ru_SU locales (aliased to appropriate ru_RU ones). Notes: svn path=/head/; revision=89074
* Populate etc.sparc64:John Baldwin2002-01-073-0/+540
| | | | | | | | | | | | | - The disktab was taken from etc.alpha. - rc.sparc64 doesn't do anything right now. - The ttys file has all the vty's commented out since we don't know how those will work yet. Also, an entry is added for the Openfirmware console device. Submitted by: jake (partially) Notes: svn path=/head/; revision=89029
* Comment out an example that was missed on first import.Sheldon Hearn2002-01-071-1/+1
| | | | | | | Reported by: Jeroen Ruigrok <asmodai@wxs.nl> Notes: svn path=/head/; revision=89001
* Install nsmb.conf with mode 0600, since it may be modified to includeSheldon Hearn2002-01-041-2/+2
| | | | | | | | | passwords for remote shares. Reported by: Andre Albsmeier <andre@albsmeier.net> Notes: svn path=/head/; revision=88878
* Improve pam_unix/opie related ftpd comment even moreAndrey A. Chernov2002-01-022-2/+6
| | | | Notes: svn path=/head/; revision=88807
* Clarify comment about pam_unix fallback for ftpdAndrey A. Chernov2002-01-012-2/+2
| | | | Notes: svn path=/head/; revision=88766
* Turn on pam_opie.so for ftpd by defaultAndrey A. Chernov2002-01-012-6/+6
| | | | | | | It not affect non-OPIE users Notes: svn path=/head/; revision=88764
* Fix bugs in the structure for rx_frame by making gap length one byte andDoug Ambrisko2001-12-311-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | a packed array so sizeof work. This broke RFMON mode and passing up 802.11 packets. The Linux emulation code was derived from the open source Linux driver to maintain compatibility. LEAP support is added, hints from Richard Johnson. I've verified this locally with PC350v42510.img firmware. More bug fixing from Marco to fix long passwords. Change DELAYs in flash part of driver to FLASH_DELAY which uses tsleep so it doesn't look like your system died during a flash update. Install header files in /usr/include/dev/an Cleanup some ifmedia bugs add "Home" key mode to ifmedia and ancontrol. This way you can manage 2 keys a little easier. Map the home mode into key 5. Enhance ifconfig to dump the various configured SSIDs. I use a bunch of different ones and roam between them. Use the syntax similar to the WEP keys to deal with setting difference SSIDs. Bump up up the Card capabilities RID since they added 2 bytes to it in the latest firmware. Thankfully we changed it from a terminal failure so the card still worked but the driver whined. Some cleanup patches from Marco Molteni. Submitted by: Richard Johnson <raj@cisco.com> Marco Molteni <molter@tin.it> and myself Various checks: David Wolfskill <david@catwhisker.org> Reviewed by: Brooks Davis <brooks@freebsd.org> Warner Losh <imp@freebsd.org> Approved by: Brooks Davis <brooks@freebsd.org> Warner Losh <imp@freebsd.org> Obtained from: Linux emulation API's from Aironet driver. Notes: svn path=/head/; revision=88748
* Grammar fix for commentGregory Neil Shapiro2001-12-301-2/+2
| | | | Notes: svn path=/head/; revision=88684
* Don't require operators to override the list of network filesystemSheldon Hearn2001-12-292-5/+13
| | | | | | | | | | | | | | | | | | | types (networkfs_types) with a version that includes the original list. This increases the scope for user error and also means that systems with networkfs_types set in /etc/rc.conf will not benefit from changes to the list in /etc/defaults/rc.conf on upgrade. Instead, store the default list in /etc/rc itself and allow the operator to append to that list by specifying her own list in networkfs_types. Rename networkfs_types to extra_netfs_types accordingly, as the new name better describes the purpose of the variable. Default the value to 'NO'. Notes: svn path=/head/; revision=88676
* "10/100Base FastEthernet PC CARD" (LNA-100) from Billionton Systems Inc.Warner Losh2001-12-291-0/+6
| | | | | | | Submitted by: "Torfinn Ingolfsen" <torfinn.ingolfsen@oslo.online.no> Notes: svn path=/head/; revision=88605
* Novac DVD/CD Station(Portable DVD/CD-ROM playerWarner Losh2001-12-281-0/+4
| | | | | | | Submitted by: moment@pluto.dti.ne.jp Notes: svn path=/head/; revision=88563
* Xircom RealPort RE-10Warner Losh2001-12-281-0/+6
| | | | | | | Submitted by: Willem van Engen <wvengen@stack.nl> Notes: svn path=/head/; revision=88562