aboutsummaryrefslogtreecommitdiff
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* Be sure to run rc.d/zfs before mountcritremote. This way we can for examplePawel Jakub Dawidek2008-03-191-0/+1
| | | | | | | | | configure devfs rules in /etc/devfs.conf for ZVOLs. Submitted by: Yarema <yds@CoolRat.org> Notes: svn path=/head/; revision=177390
* Do nextboot -D twice during boot. The first time in rc.d/root which ensures ↵Xin LI2008-03-111-1/+1
| | | | | | | | | | | | | | | | that we can remove the file as early as possible, but shut up nextboot at this moment if the operation is failed, because /boot is not necessarily a part of /; the newly added second run is placed in rc.d/mountlate after all filesystems were mounted. Discussed at: -rc@ Suggestions from: brooks, mtm MFC after: 1 month Notes: svn path=/head/; revision=177062
* rootXin LI2008-03-111-0/+6
| | | | Notes: svn path=/head/; revision=177061
* The check for errors from the mount command did not work as intendedMike Makonnen2008-03-062-2/+8
| | | | | | | | | | | because another command (echo) is executed between the mount command and the check. Reported by: Sergey Baturov <sergey@toor.org.ru> MFC after: 2 weeks Notes: svn path=/head/; revision=176873
* The rarpd(8) daemon must be instructed to start on all interfaces or aMike Makonnen2008-03-061-1/+1
| | | | | | | | | | | | specific one. Instruct it to listen on all interfaces so that enabling it in rc.conf(5) works "out of the box." PR: conf/121406 Submited by: trasz MFC after: 1 week Notes: svn path=/head/; revision=176871
* Use the new command file feature of ddb(8) to support setting ddb(4)Brooks Davis2008-03-055-2/+51
| | | | | | | | | | | | scripts at boot. This is currently disabled by default. /etc/ddb.conf contains some potentially reasonable default scripts. PR: conf/119995 Submitted by: Scot Hetzel <swhetzel at gmail dot com> (Earlier version) X-MFC after: textdumps Notes: svn path=/head/; revision=176835
* Fix quoting for the dnsbl example -- m4 misparses quoted strings withGregory Neil Shapiro2008-02-171-1/+1
| | | | | | | | | | | commas due to our deconstruction of the line in cf/feature/dnsbl.m4. PR: 120038 Submitted by: mattijs vreeling MFC after: 1 week Notes: svn path=/head/; revision=176354
* Use better examples (and comment them out for safety).Gregory Neil Shapiro2008-02-171-5/+12
| | | | | | | | | PR: 118837 Submitted by: Matthew Seaman MFC after: 1 week Notes: svn path=/head/; revision=176353
* From the 4 February 2008 update:Doug Barton2008-02-071-3/+8
| | | | | | | IPv6 addresses for 6 of the root name servers! Notes: svn path=/head/; revision=176077
* Eliminate xargs in favor of find -exec {} +Dag-Erling Smørgrav2008-02-031-2/+1
| | | | Notes: svn path=/head/; revision=175906
* Rewrite to consume significantly less memory, by using find -s instead ofDag-Erling Smørgrav2008-02-021-16/+11
| | | | | | | | | | | | | | | | find | sort. As a bonus, this simplifies the logic considerably. Also remove the bogus "overruning the args to ls" comment and the corresponding "-n 20" argument to xargs; the whole point with xargs is precisely that it knows how large the argument list can safely get. Note that the first run of the updated script may hypotheticall produce false positives due to differences between find's and sort's sorting algorithm. I haven't seen this during testing, but others might. MFC after: 2 weeks Notes: svn path=/head/; revision=175890
* When the state of the interface changes rapidly enough (usually due toBrooks Davis2008-02-011-1/+5
| | | | | | | | | | | | | | | | rapid wireless association changes in my experience), there is a race where dhclient is in the process of exiting due to the link going down when the link coming up causes devd to try and start a new one. This results is the link being up, but no dhclient running. Work around this race by checking a second time after a one second delay before refusing to start a dhclient instance due to one already being running. MFC after: 1 week Notes: svn path=/head/; revision=175879
* Add a dummynet_enable knob to go with firewall_enable. If this knobMike Makonnen2008-01-272-0/+9
| | | | | | | | | | | is enabled dummynet(4) is added to the list of required modules. Discussed on: #freebsd-bugbusters (rwatson, trhodes) PR: conf/79196 MFC after: 1 week Notes: svn path=/head/; revision=175722
* Clarify that devfs_system_ruleset should contain a name, not a number.Mike Makonnen2008-01-271-1/+1
| | | | | | | | | Prompted by PR conf/85363 MFC after: 3 days Notes: svn path=/head/; revision=175720
* Generally, anything that runs rc.d scripts internally shouldMike Makonnen2008-01-263-5/+5
| | | | | | | start using the quiet prefix (i.e. quietstart, quietstop, etc...). Notes: svn path=/head/; revision=175686
* Generally, anything that runs rc.d scripts internally shouldMike Makonnen2008-01-261-5/+5
| | | | | | | start using the quiet prefix (i.e. quietstart, quietstop, etc...). Notes: svn path=/head/; revision=175683
* Use 'quietstart' so as not to get spammed with informational diagnostics.Mike Makonnen2008-01-261-24/+26
| | | | Notes: svn path=/head/; revision=175682
* Re-implement: do not silently fail when a command is not carriedMike Makonnen2008-01-263-3/+18
| | | | | | | | | | | | | | | | | | out because the rc.conf(5) variable was not enabled. Display a message that the command wasn't run and offer suggestions on what the user can do. Implement a quiet prefix, which will disable some diagnostics. The fast prefix also implies quiet. During boot we use either fast or quiet. For shutdown we already use 'faststop'. So, this informational message should only appear during interactive use. An additional benefit of having a quiet prefix is that we can start putting some of our diagnostic messages behind this knob and start "de-cluttering" the console during boot and shutdown. Notes: svn path=/head/; revision=175676
* Backout previous commit. It's going to clutter the consoleMike Makonnen2008-01-251-3/+0
| | | | | | | | | | | | | during boot and shutdown. I think I'll hide it behind autoboot or maybe take brooks@ suggestion and implement a different command prefix for booting/shutdown purposes, but in any case it needs more thought and attention. Noticed by: ceri Pointyhat to: mtm Notes: svn path=/head/; revision=175662
* If the rc.conf(5) variable for a script is not enabled do not failMike Makonnen2008-01-251-0/+3
| | | | | | | | | | | silently. Display a message that the command wasn't run and make possible suggestions for what to do. PR: conf/118770 MFC after: 1 week Notes: svn path=/head/; revision=175660
* Rev. 1.6 made it impossible to use rc.d/kerberos with the krb5 port.Mike Makonnen2008-01-252-2/+1
| | | | | | | | | | | Re-implement the change so that the script once again works with the krb5 port. Submitted by: kensmith (slightly modified) MFC after: 3 days Notes: svn path=/head/; revision=175656
* Shorter equivalent of the command.Ruslan Ermilov2008-01-241-1/+1
| | | | Notes: svn path=/head/; revision=175618
* Improve kernel NAT support in rc.firewallRong-En Fan2008-01-212-1/+10
| | | | | | | | | | | | | - Allow IP in firewall_nat_interface, just like natd_interface - Allow additional configuration parameters passed to ipfw via firewall_nat_flags - Document firewall_nat_* in defaults/rc.conf Tested by: Albert B. Wang <abwang at gmail.com> MFC after: 1 month Notes: svn path=/head/; revision=175522
* Add warning about this script dealing with untrusted data.Simon L. B. Nielsen2008-01-131-0/+6
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=175293
* o From the Problem Report: the TCP_DROP_SYNFIN kernel option is nowMaxim Konovalov2008-01-121-2/+0
| | | | | | | | | | | | included in the kernel by default. Remove reference to this option from defaults/rc.conf and rc.conf(5). PR: conf/119098 Submitted by: Beat Gaetzi MFC after: 1 week Notes: svn path=/head/; revision=175251
* o Correct an info about "Firewalls and Internet Security" book: name,Maxim Konovalov2008-01-122-14/+12
| | | | | | | | | | authors list, ISBN, URLs. PR: conf/119590 MFC after: 1 week Notes: svn path=/head/; revision=175244
* Remove from the default empty zone list zones that, unlike the others,Doug Barton2008-01-111-8/+0
| | | | | | | could theoretically be allocated one day. Notes: svn path=/head/; revision=175236
* A new configuration variable, daily_status_mail_rejects_shorten, allowsDiomidis Spinellis2008-01-082-1/+9
| | | | | | | | | | | the rejected mail reports to tally the rejects per blacklist without providing details about individual sender hosts. The default configuration keeps the reports in their original form. MFC after: 1 week Notes: svn path=/head/; revision=175153
* Update pkg_version_index to INDEX-8Doug Barton2007-12-201-1/+1
| | | | Notes: svn path=/head/; revision=174817
* Only pass paths to directories or config files that exist for ldconfig forJohn Baldwin2007-12-131-2/+8
| | | | | | | | | 32-bit binaries. MFC after: 3 days Notes: svn path=/head/; revision=174567
* Add an empty stop_cmd to the remaining scripts that don't startDoug Barton2007-12-084-0/+4
| | | | | | | daemons and don't already have one. Notes: svn path=/head/; revision=174464
* Remove a meaningless KEYWORDDoug Barton2007-12-081-1/+1
| | | | Notes: svn path=/head/; revision=174461
* Remove the bootconf.sh script. It was never used on FreeBSD, and wasDoug Barton2007-12-081-81/+0
| | | | | | | removed from the Makefile in version 1.5 (2002/09/02) but never GC'ed. Notes: svn path=/head/; revision=174459
* Remove spurious # marks to be more consistent with existing style.Doug Barton2007-12-084-4/+0
| | | | Notes: svn path=/head/; revision=174458
* Remove empty REQUIRE lineDoug Barton2007-12-081-1/+0
| | | | Notes: svn path=/head/; revision=174457
* Remove $NetBSD$ CVS tags. We no longer attempt to synch our rc.d filesDoug Barton2007-12-0855-55/+0
| | | | | | | | with theirs, so this information doesn't need to be in the live file. Having it in our CVS history is enough. Notes: svn path=/head/; revision=174438
* Add /root/, /.cshrc, and /.profile to the default UpdateIfUnmodifiedColin Percival2007-11-281-1/+1
| | | | | | | | | | directive. Users get irritated if FreeBSD Update steps on these while upgrading to a new release. MFC after: 3 days Notes: svn path=/head/; revision=174057
* Don't delete files in the X11 socket directories under /tmp (.X11-unix,John Baldwin2007-11-281-1/+3
| | | | | | | | | | | | .ICE-unix, .font-unix, .XIM-unix) when purging files from /tmp via the daily 100.clean-tmps job. If you are logged into an X session longer than the timeout period (default of 3 days), then this job can delete the X11 sockets out from under the session without this fix. MFC after: 3 days Notes: svn path=/head/; revision=174028
* Update the shlib version for libgssapi_krb5. This file needs to be updatedJohn Baldwin2007-11-271-1/+1
| | | | | | | | | anytime that library version is bumped. XXX: I wonder if this breaks any 6.x binaries using Kerberos5 via GSSAPI. Notes: svn path=/head/; revision=173998
* Also check setuid executables on ZFS.Ruslan Ermilov2007-11-231-1/+1
| | | | Notes: svn path=/head/; revision=173873
* Bump up the number of ttys supported by pty(4) to 512 by making use ofJohn Baldwin2007-11-196-0/+1536
| | | | | | | | | | [pt]ty[lmnoLMNO][0-9a-v]. MFC after: 3 days Reviewed by: rwatson Notes: svn path=/head/; revision=173755
* Add ttys lines for pts/0-pts/255.Robert Watson2007-11-156-0/+1536
| | | | | | | MFC after: 3 days Notes: svn path=/head/; revision=173638
* Add reload functionality.Henrik Brix Andersen2007-11-141-1/+3
| | | | | | | | PR: conf/116659 Approved by: sam, erwin (mentor) Notes: svn path=/head/; revision=173616
* Add support for "freebsd-update -r newrelease upgrade" -- binaryColin Percival2007-11-121-1/+11
| | | | | | | | | | | | | | | | | | | | | | upgrading to new releases. Important parts of this code include * automatically determining which optional components (e.g., src, info, proflibs) are installed. * merging changes in files which are modified locally and have changed between the currently running and new release. * prompting the user to rebuild all 3rd party software before deleting old shared libraries. Yes, this is compatible with "freebsd-update rollback" -- you can test a new -BETA and roll back to the old release if you don't like it. Subject to re@ approval, this will be MFCed before 7.0-BETA3 and 6.3-RC1. MFC after: 2 days Notes: svn path=/head/; revision=173564
* Update pf examples from OpenBSD to catch up with new stateful defaults andMax Laier2007-11-112-84/+1
| | | | | | | other syntax changes. Move pf.conf from /etc to examples, too. Notes: svn path=/head/; revision=173536
* spaces are preferred to tabsSam Leffler2007-11-101-4/+4
| | | | | | | Noted by: simon Notes: svn path=/head/; revision=173532
* add wpa_supplicant + hostapd directories to examplesSam Leffler2007-11-101-0/+4
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=173527
* Link wpi(4) into the build.Benjamin Close2007-11-081-0/+2
| | | | | | | | | | | | | This includes: o mtree (for legal/intel_wpi) o manpage for i386/amd64 archs o module for i386/amd64 archs o NOTES for i386/amd64 archs Approved by: mlaier (comentor) Notes: svn path=/head/; revision=173491
* Another vestige of OLDCARD that needs to be retired.Warner Losh2007-11-082-2356/+1
| | | | | | | Prodded by: jhb@ Notes: svn path=/head/; revision=173465
* Change wpa_supplicant to down the interface at the start of the init routine.Andrew Thompson2007-11-051-3/+0
| | | | | | | | | | | | | | | | | | | | | wpa_supplicant expects that it has exclusive access to the net80211 state so when its starts poking in the WEP/WPA settings and the card is already scanning it can cause net80211 to try and associate incorrectly with a protected AP. This is an inconvenience for firmware based cards such as iwi where it can be sent an auth instruction with incomplete security info and cause a firmware error. Remove the 'ifconfig up' from network.subr since wpa_supplicant will immediately down the interface again. Reported by: Guy Helmer (and others) Reviewed by: sam, brooks, avatar MFC after: 3 days Notes: svn path=/head/; revision=173355