aboutsummaryrefslogtreecommitdiff
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* As of r232844 we no longer need the maxpoll 9 workaround.Xin LI2012-08-201-8/+7
| | | | | | | MFC after: 3 days Notes: svn path=/head/; revision=239464
* Upgrade our copy of llvm/clang to trunk r162107. With thanks toDimitry Andric2012-08-201-1/+1
| | | | | | | Benjamin Kramer and Joerg Sonnenberger for their input and fixes. Notes: svn path=/head/; revision=239462
* - Allow to pass extra parameters for each jails.Jun Kuriyama2012-08-192-5/+20
| | | | | | | | | | - To achieve above, convert jail(8) invocation to use new style command line "-c" flag. Reviewed at: freebsd-jail@ Notes: svn path=/head/; revision=239382
* Regenerate usb.confHans Petter Selasky2012-08-051-13/+269
| | | | | | | MFC after: 2 weeks Notes: svn path=/head/; revision=239056
* Revert SVN r238628 (mistake).Devin Teske2012-07-191-1/+1
| | | | Notes: svn path=/head/; revision=238629
* Fix syntax errors (s/:=/:-/).Devin Teske2012-07-192-2/+2
| | | | | | | | | Reviewed by: emaste (mentor) Approved by: emaste (mentor) MFC after: 3 days Notes: svn path=/head/; revision=238628
* Allow to specify no source-address-selection policyMaksim Yevmenkin2012-07-191-0/+3
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=238622
* Add share/examples/libusb20 to the list of directories.Joerg Wunsch2012-07-191-0/+2
| | | | Notes: svn path=/head/; revision=238618
* Move -n ${_jail} before ${_flags} so that any -n options in ${_flags}Dag-Erling Smørgrav2012-07-181-1/+1
| | | | | | | will override ours instead of the other way around. Notes: svn path=/head/; revision=238605
* MFP4 214344:Brooks Davis2012-07-131-1/+1
| | | | | | | | | | Tighten the regular expression that checks for an md /tmp such that no /tmp mount and an md / isn't improperly matched. Sponsored by: DARPA/AFRL Notes: svn path=/head/; revision=238427
* Whitespace nitKevin Lo2012-07-1312-16/+16
| | | | Notes: svn path=/head/; revision=238416
* Fix a missing ";".Hiroki Sato2012-07-091-1/+1
| | | | Notes: svn path=/head/; revision=238308
* - Add IFT_L2VLAN (vlan(4)) support.Hiroki Sato2012-07-091-1/+2
| | | | | | | | | - Add -P option to support PID file. When -a is specified /var/run/rarpd.pid is used, and when an interface is specified /var/run/rarpd.<ifname>.pid is used by default. Notes: svn path=/head/; revision=238282
* Make ipfw0 logging pseudo-interface clonable. It can be created automaticallyHiroki Sato2012-07-092-0/+5
| | | | | | | | | | by $firewall_logif rc.conf(5) variable at boot time or manually by ifconfig(8) after a boot. Discussed on: freebsd-ipfw@ Notes: svn path=/head/; revision=238277
* Name jails automatically.Dag-Erling Smørgrav2012-07-041-1/+1
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=238102
* Revert r238004 as more review has come in and there is now a discussionSean Bruno2012-07-021-1/+1
| | | | | | | on how to best proceed. Notes: svn path=/head/; revision=238009
* Cosmetic display change of Cx states via cx_supported sysctl entries.Sean Bruno2012-07-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adjust power_profile script to handle the new world order as well. Some vendors are opting out of a C2 state and only defining C1 & C3. This leads the acpi_cpu display to indicate that the machine supports C1 & C2 which is caused by the (mis)use of the index of the cx_state array as the ACPI_STATE_CX value. e.g. the code was pretending that cx_state[i] would always convert to i by subtracting 1. cx_state[2] == ACPI_STATE_C3 cx_state[1] == ACPI_STATE_C2 cx_state[0] == ACPI_STATE_C1 however, on certain machines this would lead to cx_state[1] == ACPI_STATE_C3 cx_state[0] == ACPI_STATE_C1 This didn't break anything but led to a display of: * dev.cpu.0.cx_supported: C1/1 C2/96 Instead of * dev.cpu.0.cx_supported: C1/1 C3/96 MFC after: 2 weeks Notes: svn path=/head/; revision=238004
* Similar to all.log, mention that /var/log/console.log has to be created and ↵Christian Brueffer2012-07-011-0/+1
| | | | | | | | | | | | | chmod'ed to make logging work. PR: 168889 Submitted by: Robert Simmons <rsimmons0@gmail.com> MFC after: 1 week Notes: svn path=/head/; revision=237921
* Only output a list of file systems that need to be dumped if the systemJohn Baldwin2012-06-201-5/+8
| | | | | | | | | | has a non-empty dumpdates file. Reviewed by: brooks MFC after: 1 week Notes: svn path=/head/; revision=237337
* Install filemon.h into /usr/include for userland consumption.David E. O'Brien2012-06-201-0/+2
| | | | Notes: svn path=/head/; revision=237279
* Passive mode is the default, and has been for a while.Dag-Erling Smørgrav2012-06-191-1/+1
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=237270
* Switch the default password hash from md5 to sha512.Dag-Erling Smørgrav2012-06-191-1/+1
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=237269
* Finally nuke auth.conf, nine years after it was deprecated. The onlyDag-Erling Smørgrav2012-06-122-10/+1
| | | | | | | | | | | | | | | | | | | | | thing it was still used for was to set the "global default" password hash. Since the stock auth.conf contained nothing but comments, the global default was actually the first algorithm in crypt(3)'s list, which happens to be DES; I take the fact that nobody noticed as proof that it was not used outside of crypt(3). The only other use in our tree was in the Kerberos support code in in tinyware's passwd(1). I removed that code in an earlier commit; it would not have compiled anyway, as it only supported Kerberos IV. The auth_getval() function is now a stub that always returns NULL, which has the same effect as a functional auth_getval() with an empty auth.conf. MFC after: 3 weeks Notes: svn path=/head/; revision=236965
* Don't attempt to delete .sujournal in /tmpEitan Adler2012-05-301-0/+1
| | | | | | | | | | PR: conf/163828 Submitted by: Tatsuki Makino <tatsuki_makino@hotmail.com> Approved by: cperciva MFC after: 1 week Notes: svn path=/head/; revision=236284
* - FreeBSD ships a KDE PAM module in base, but it's missing support for ↵Martin Wilke2012-05-302-20/+0
| | | | | | | | | | | | | | passwordless login (kde-np), and it doesn't really belong in base system. PR: misc/167261 Submitted by: avilla@ Approved by: rwatson (mentor) MFC after: 3 days Notes: svn path=/head/; revision=236281
* Regenerate usb.confHans Petter Selasky2012-05-211-5/+13
| | | | | | | MFC after: 3 days Notes: svn path=/head/; revision=235725
* Add support for our own DTrace scripts and those from the DTraceToolkitGeorge V. Neville-Neil2012-05-181-0/+4
| | | | | | | | | | | to the build system. FreeBSD written scripts are stored in src/share and the toolkit scripts are brought from the cddl directory into a working tree via install. MFC after: 2 weeks Notes: svn path=/head/; revision=235613
* Import work done under project/nand (@235533) into head.Grzegorz Bernacki2012-05-171-0/+4
| | | | | | | | | | | | | | | | | The NAND Flash environment consists of several distinct components: - NAND framework (drivers harness for NAND controllers and NAND chips) - NAND simulator (NANDsim) - NAND file system (NAND FS) - Companion tools and utilities - Documentation (manual pages) This work is still experimental. Please use with caution. Obtained from: Semihalf Supported by: FreeBSD Foundation, Juniper Networks Notes: svn path=/head/; revision=235537
* Submitted by: gavin, pjdEitan Adler2012-05-091-2/+2
| | | | | | | | Approved by: cperciva MFC after: 3 days Notes: svn path=/head/; revision=235203
* Display dropped transmit packets in the daily network interface output.John Baldwin2012-05-071-2/+2
| | | | | | | | | PR: conf/165956 Submitted by: Jeremy Chadwick MFC after: 1 week Notes: svn path=/head/; revision=235132
* - Change kfd rc script to be more conformant with rcNG conventions:Stanislav Sedov2012-05-062-9/+7
| | | | | | | | | | | | | o change rcname to kfd; o move mandatory options to command_args; o add missing "shutdown" keyword; o fix require line. Kfd doesn't really need to be started before daemons. Suggested by: dougb Notes: svn path=/head/; revision=235107
* - Don't log messages saying that accounting is being disabled and enabledJohn Baldwin2012-05-021-3/+1
| | | | | | | | | | | | | if the accounting log file is atomically replaced with a new file (such as during log rotation). - Simplify accounting log rotation a bit. There is no need to re-run accton(8) after renaming the new log file to it's real name. PR: kern/167321 Tested by: Jeremy Chadwick Notes: svn path=/head/; revision=234927
* Upgrade our copy of llvm/clang to trunk r154661, in preparation of theDimitry Andric2012-04-161-1/+1
| | | | | | | | | | upcoming 3.1 release (expected in a few weeks). Preliminary release notes can be found at: <http://llvm.org/docs/ReleaseNotes.html> MFC after: 2 weeks Notes: svn path=/head/; revision=234353
* - remove the length shortening on the pathEitan Adler2012-04-111-6/+5
| | | | | | | | | | | | | - make the default prompt a bit more like scp - make the user show as root even when using 'su' instead of 'su -' - the key bindings didn't hurt anything but likely hide a bug - merge history instead of overwriting it Submitted by: gavin, joel Approved by: cperciva Notes: svn path=/head/; revision=234133
* - Add rc.d script for kfd, kerberos forwarded tickets daemon.Stanislav Sedov2012-04-103-0/+22
| | | | Notes: svn path=/head/; revision=234093
* Add MySQL port 3306Ivan Voras2012-03-261-0/+2
| | | | | | | | Obtained from: http://www.iana.org/assignments/port-numbers MFC after: 1 week Notes: svn path=/head/; revision=233506
* Fix build by adding new directory to mtree in r233429Eitan Adler2012-03-241-0/+2
| | | | | | | | | Submitted by: flo Approved by: cperciva MFC after: 1 week Notes: svn path=/head/; revision=233435
* - Make the default values for tcsh more user friendlyEitan Adler2012-03-241-6/+18
| | | | | | | | | | | | - Add an examples file with many of the not accepted suggestions from the discussion PR: conf/160689 Reviewed by: many Discussed on: current Approved by: cperciva Notes: svn path=/head/; revision=233429
* Clean up of fs/fifofs include directory after fifo.h removal.Sergey Kandaurov2012-03-231-2/+0
| | | | | | | Glanced by: kib Notes: svn path=/head/; revision=233346
* - Update FreeBSD Heimdal distribution to version 1.5.1. This also bringsStanislav Sedov2012-03-221-0/+2
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | several new kerberos related libraries and applications to FreeBSD: o kgetcred(1) allows one to manually get a ticket for a particular service. o kf(1) securily forwards ticket to another host through an authenticated and encrypted stream. o kcc(1) is an umbrella program around klist(1), kswitch(1), kgetcred(1) and other user kerberos operations. klist and kswitch are just symlinks to kcc(1) now. o kswitch(1) allows you to easily switch between kerberos credentials if you're running KCM. o hxtool(1) is a certificate management tool to use with PKINIT. o string2key(1) maps a password into key. o kdigest(8) is a userland tool to access the KDC's digest interface. o kimpersonate(8) creates a "fake" ticket for a service. We also now install manpages for some lirbaries that were not installed before, libheimntlm and libhx509. - The new HEIMDAL version no longer supports Kerberos 4. All users are recommended to switch to Kerberos 5. - Weak ciphers are now disabled by default. To enable DES support (used by telnet(8)), use "allow_weak_crypto" option in krb5.conf. - libtelnet, pam_ksu and pam_krb5 are now compiled with error on warnings disabled due to the function they use (krb5_get_err_text(3)) being deprecated. I plan to work on this next. - Heimdal's KDC now require sqlite to operate. We use the bundled version and install it as libheimsqlite. If some other FreeBSD components will require it in the future we can rename it to libbsdsqlite and use for these components as well. - This is not a latest Heimdal version, the new one was released while I was working on the update. I will update it to 1.5.2 soon, as it fixes some important bugs and security issues. Notes: svn path=/head/; revision=233294
| * - Import Heimdal 1.5 distribution.vendor/heimdal/1.5Stanislav Sedov2011-10-054-49/+140
| | | | | | | | | | Notes: svn path=/vendor-crypto/heimdal/dist/; revision=226031 svn path=/vendor-crypto/heimdal/1.5/; revision=226033; tag=vendor/heimdal/1.5
| * - Flatten the vendor heimdal tree.Stanislav Sedov2011-09-293-0/+692
| | | | Notes: svn path=/vendor-crypto/heimdal/dist/; revision=225864
* Rotate auth.log and messages at the beginning of a year. Otherwise,Gleb Smirnoff2012-03-191-2/+2
| | | | | | | | daily security checks 800.loginfail and 900.tcpwrap may produce false positive alerts. Notes: svn path=/head/; revision=233167
* Regenerate usb.conf to use new -n option when doing kldload.Hans Petter Selasky2012-03-181-539/+539
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=233111
* Unhide /dev/zfs in devfsrules_jail.Martin Matuska2012-03-161-0/+1
| | | | | | | | | | The /dev/zfs device is required for managing jailed ZFS datasets. Discussed with: pjd, jamie MFC after: 1 week Notes: svn path=/head/; revision=233048
* Make init(8) slightly more robust when /dev/console is missing.Ed Schouten2012-03-141-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | If the environment doesn't offer a working /dev/console, the existing version of init(8) will simply refuse running rc(8) scripts. This means you'll only have a system running init(8) and nothing else. Change the code to do the following: - Open /dev/console like we used to do, but make it more robust to use O_NONBLOCK to prevent blocking on a carrier. - If this fails, use /dev/null as stdin and /var/log/init.log as stdout and stderr. - If even this fails, use /dev/null as stdin, stdout and stderr. So why us this useful? Well, if you remove the `getpid() == 1' check in main(), you can now use init(8) inside jails to properly execute rc(8). It still requires some polishing, as existing tools assume init(8) has PID 1. Also it is now possible to use use init(8) on `headless' devices that don't even have a serial boot console. Notes: svn path=/head/; revision=232977
* Hide stty(1) errors.Ed Schouten2012-03-142-2/+2
| | | | | | | | | | | | | | | If rc(8) is executed without using a TTY, this error appears at the beginning: stty: stdin isn't a terminal Because this is to be expected and of course not harmful, it is better to simply hide the error message. MFC after: 1 week Notes: svn path=/head/; revision=232976
* Rather than printing the output from route add for all FIBs just print themBjoern A. Zeeb2012-03-041-16/+30
| | | | | | | | | | | | for the default FIB followed by a statement with a list of FIB numbers for all the other FIBs we install the routes for. Request by: kib (to make it less noisy) Tested by: kib MFC after: 3 days Notes: svn path=/head/; revision=232515
* Reapply 227753 (xlocale cleanup), plus some fixes so that it passes buildDavid Chisnall2012-03-041-0/+2
| | | | | | | | | universe with gcc. Approved by: dim (mentor) Notes: svn path=/head/; revision=232498
* Add backlight control to ATI-graphics PowerBooks and iBooks.Justin Hibbits2012-02-261-0/+20
| | | | | | | | Approved by: nwhitehorn (mentor) MFC after: 1 week Notes: svn path=/head/; revision=232177
generated by cgit v1.2.3 (git 2.25.1) at 2024-10-22 02:36:52 +0000