aboutsummaryrefslogtreecommitdiff
path: root/etc
Commit message (Collapse)AuthorAgeFilesLines
* - Add a global option where we can protect processes when swap spaceMarcelo Araujo2016-02-242-1/+26
| | | | | | | | | | | | | | | | | | | | | | | | | is exhausted. How to use: Basically we need to add on rc.conf an another option like: If we want to protect only the main processes. syslogd_oomprotect="YES" If we want to protect all future children of the specified processes. syslogd_oomprotect="ALL" PR: 204741 (based on) Submitted by: eugen@grosbein.net Reviewed by: jhb, allanjude, rpokala and bapt MFC after: 4 weeks Relnotes: Yes Sponsored by: gandi.net Differential Revision: https://reviews.freebsd.org/D5176 Notes: svn path=/head/; revision=295949
* Interpret vnet_interface/vnet.interface as arrayDevin Teske2016-02-121-2/+17
| | | | Notes: svn path=/head/; revision=295555
* Update leapsecond file in non-chroot environments.Cy Schubert2016-02-111-4/+4
| | | | | | | | | PR: 207095 Submitted by: madpilot MFC after: 3 days Notes: svn path=/head/; revision=295495
* Add new rc.conf parameter "jail_reverse_stop"Mark Felder2016-02-102-2/+9
| | | | | | | | | | | | | | | | | | | | | | | | | When a user defines "jail_list" in rc.conf the jails are started in the order defined. Currently the jails are not are stopped in reverse order which may break dependencies between jails/services and prevent a clean shutdown. The new parameter "jail_reverse_stop" will shutdown jails in "jail_list" in reverse order when set to "YES". Please note that this does not affect manual invocation of the jail rc script. If a user runs the command # service jail stop jail1 jail2 jail3 the jails will be stopped in exactly the order specified regardless of jail_reverse_stop being defined in rc.conf. PR: 196152 Approved by: jamie MFC after: 1 week Relnotes: yes Differential Revision: https://reviews.freebsd.org/D5233 Notes: svn path=/head/; revision=295471
* Zero pf rule counters so daily reports make senseKurt Lidl2016-02-091-1/+1
| | | | | | | | | | | | | | Zero pf rule counters so that each daily report lists an absolute number of rejected packets, not the total since the last time the machine rebooted (or the counters were manually cleared). PR: 206467 Submitted by: Rick Adams Approved by: rpaulo (mentor) Differential Revision: https://reviews.freebsd.org/D5172 Notes: svn path=/head/; revision=295452
* Fix typo in a comment; s/redined/redefined/Devin Teske2016-02-061-1/+1
| | | | | | | Thanks to: rpokala Notes: svn path=/head/; revision=295344
* Add comment to explain functionality of codeDevin Teske2016-02-061-0/+1
| | | | | | | Thanks to: rpokala Notes: svn path=/head/; revision=295343
* Allow rc_conf_files to be redefined in rc.conf(5)Devin Teske2016-02-061-0/+12
| | | | | | | | | | | | With this change, it's possible to redefine rc_conf_files (e.g., sysrc rc_conf_files+=/etc/rc.conf.other) and have the boot process pick up settings in extra files. The sysrc(8) tool can be used to query/enumerate/find/manage extra files configured in this manner. Relnotes: yes Notes: svn path=/head/; revision=295342
* Update script for modern `zpool status` output.Alexander Motin2016-02-051-1/+4
| | | | Notes: svn path=/head/; revision=295329
* Add error check to not leak logs with syntax errors in case of failedAlexander Motin2016-02-051-0/+5
| | | | | | | | | `zpool history`. MFC after: 1 month Notes: svn path=/head/; revision=295324
* Fix grammar in error statementDevin Teske2016-02-041-1/+1
| | | | | | | s/consider to migrate to jail.conf/consider migrating to jail.conf/ Notes: svn path=/head/; revision=295269
* Use '^[>+][^+]' instead of '^[>+]' with grep(1) when filtering theMarius Strobl2016-01-291-1/+1
| | | | | | | | | | | | | | diff(1) output between two files in "new_only"-mode. Otherwise, with the default of using unified format a remnant of the header in the output is the result. This is especially irritating when the two files differ but the second one is empty, amounting to the vestige of the header being the only readout. Reported by: Stefan Haemmerl MFC after: 3 days Notes: svn path=/head/; revision=295032
* Fix regression introduced on r293801.Marcelo Araujo2016-01-272-1/+2
| | | | | | | | | | | | The UID/GID 93 is in using by jaber on PORTS, we will use UID/GID 160 for ypldap(8). Reported by: antoine Approved by: bapt (mentor) Differential Revision: https://reviews.freebsd.org/D5062 Notes: svn path=/head/; revision=294896
* Allow specification of fetch options for ntp leap-seconds fetch.Cy Schubert2016-01-272-1/+3
| | | | | | | | MFC after: 1 week X-MFC with: r289421, r293037, r294773 Notes: svn path=/head/; revision=294884
* Add support for automatic leap-second file updates.Cy Schubert2016-01-266-2/+114
| | | | | | | | | | | | | | | | | | | | | | | | The working copy of leapfile resides in /var/dbntpd.leap-seconds.list. /etc/ntp/leap-seconds (periodically updated from ftp://time.nist.gov/pub/ or ftp://tycho.usno.navy.mil/pub/ntp/) contains the master copy should automatic leapfile updates be disabled (default). Automatic leapfile updates are fetched from $ntp_leapfile_sources, defaulting to https://www.ietf.org/timezones/data/leap-seconds.list, within $ntp_leapfile_expiry_days (default 30 days) from leap-seconds file expiry. Automatic updates can be enabled by setting $daily_ntpd_leapfile_enable="YES" in periodic.conf. To avoid congesting the ntp leapfile source the automatic update randomized by default but can be disabled through daily_ntpd_avoid_congestion="NO" in periodic.conf. Suggested by: des Reviewed by: des, roberto, dwmalone, ian, cperciva, glebius, gjb MFC after: 1 week X-MFC with: r289421, r293037 Notes: svn path=/head/; revision=294773
* Allow the (old rc-style) exec_afterstart jail parameters to start numberingJamie Gritton2016-01-251-3/+3
| | | | | | | | | | | at 0, like exec_prestart and the others do. Make param0 optional, i.e. still look for param1. PR: 142973 MFC after: 3 days Notes: svn path=/head/; revision=294749
* Do not generate RSA1 or DSA keys by default.Dag-Erling Smørgrav2016-01-221-2/+2
| | | | Notes: svn path=/head/; revision=294560
* Provide new socket option TCP_CCALGOOPT, which stands for TCP congestionGleb Smirnoff2016-01-221-0/+2
| | | | | | | | | | | | | | | | | | control algorithm options. The argument is variable length and is opaque to TCP, forwarded directly to the algorithm's ctl_output method. Provide new includes directory netinet/cc, where algorithm specific headers can be installed. The new API doesn't yet have any in tree consumers. The original code written by lstewart. Reviewed by: rrs, emax Sponsored by: Netflix Differential Revision: https://reviews.freebsd.org/D711 Notes: svn path=/head/; revision=294540
* Add ldconfig -soft to process the soft float abi libraries and put itWarner Losh2016-01-182-0/+28
| | | | | | | into startup scripts for armv6. It acts much like ldconfig -32 does. Notes: svn path=/head/; revision=294295
* Update mandoc to 20160116Baptiste Daroussin2016-01-151-2/+0
| | | | Notes: svn path=/head/; revision=294113
* Wrap overlong comment lines.Edward Tomasz Napierala2016-01-141-6/+6
| | | | | | | | MFC after: 1 month Sponsored by: The FreeBSD Foundation Notes: svn path=/head/; revision=294022
* Fix the code to retry mount attempt in mountcritlocal if there areEdward Tomasz Napierala2016-01-141-1/+1
| | | | | | | | | | | | any root mount holds. The previous one used a wrong conditional - the "err=$?" assignment resets "$?" to 0. Submitted by: jilles@ MFC after: 1 month Sponsored by: The FreeBSD Foundation Notes: svn path=/head/; revision=294021
* Install /etc/snmpd.config with 0600 permissions.Gleb Smirnoff2016-01-141-4/+5
| | | | | | | | | Noticed by: Pierre Kim Security: SA-16:06.snmpd Pointy hat to: glebius in 2005 Notes: svn path=/head/; revision=293911
* IntegrateEnji Cooper2016-01-131-0/+26
| | | | | | | | | | | | | | | | | | | | | | | tools/regression/geom_{concat,eli,gate,mirror,nop,raid3,shsec,stripe,uzip} in to the FreeBSD test suite as tests/sys/geom/class/{concat,eli,gate,mirror,nop,raid3,shsec,stripe,uzip} The tools/regression/geom and tools/regression/geom_part testcases are being left alone because both test sets are both currently broken. The majority of this work was done on ^/user/ngie/more-tests2 . The differences are as follows: - tests/sys/geom/class/Makefile.inc is not present; it was inlined into the class's Makefiles for explicitness. - The testcases officially require root via kyua - The geom_gate(4) tests don't use the pidfile changes proposed in https://reviews.freebsd.org/D4836 . MFC after: 1 month Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=293821
* ypldap(8) is a feature ready to be used to translate nis(8) database to ldap(3).Marcelo Araujo2016-01-131-0/+1
| | | | | | | | | | | | | | | | | | This commit, fix a core dump on ypldap(8) related with memory allocation. Also an example of how to set the ypldap.conf(5) properly is added to examples files. A new user _ypldap is required to be able to run ypldap(8) as well as in a chroot mode. Reviewed by: rodrigc (mentor), bjk Approved by: bapt (mentor) Relnotes: Yes Sponsored by: gandi.net Differential Revision: https://reviews.freebsd.org/D4744 Notes: svn path=/head/; revision=293801
* Try a little harder to remove firstboot and firstboot-reboot files inWarner Losh2016-01-061-2/+8
| | | | | | | | | | case they accidentally get created as directories or with flags that prevent their removal. While I wouldn't normally go the extra mile here and let the normal unix rules prevail, the effects of failure are large enough that extra care is warranted. Notes: svn path=/head/; revision=293240
* "source routing" in rpcbindAlan Somers2016-01-061-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix a bug in rpcbind for multihomed hosts. If the server had interfaces on two separate subnets, and a client on the first subnet contacted rpcbind at the address on the second subnet, rpcbind would advertise addresses on the first subnet. This is a bug, because it should prefer to advertise the address where it was contacted. The requested service might be firewalled off from the address on the first subnet, for example. usr.sbin/rpcbind/check_bound.c If the address on which a request was received is known, pass that to addrmerge as the clnt_uaddr parameter. That is what addrmerge's comment indicates the parameter is supposed to mean. The previous behavior is that clnt_uaddr would contain the address from which the client sent the request. usr.sbin/rpcbind/util.c Modify addrmerge to prefer to use an IP that is equal to clnt_uaddr, if one is found. Refactor the relevant portion of the function for clarity, and to reduce the number of ifdefs. etc/mtree/BSD.tests.dist usr.sbin/rpcbind/tests/Makefile usr.sbin/rpcbind/tests/addrmerge_test.c Add unit tests for usr.sbin/rpcbind/util.c:addrmerge. usr.sbin/rpcbind/check_bound.c usr.sbin/rpcbind/rpcbind.h usr.sbin/rpcbind/util.c Constify some function arguments Reviewed by: imp MFC after: 4 weeks Sponsored by: Spectra Logic Corp Differential Revision: https://reviews.freebsd.org/D4690 Notes: svn path=/head/; revision=293229
* Use the more proper -f. Leave /bin/rm in place since that's whatWarner Losh2016-01-051-2/+2
| | | | | | | other rc scripts have, though it isn't strictly necessary. Notes: svn path=/head/; revision=293227
* Use /bin/rm to remove /firstboot*. Otherwise rm -i alias is pickedWarner Losh2016-01-031-2/+5
| | | | | | | | | | | | up and can cause issues on boot with the prompts. Fix the read-only root case with horrible kludge of mounting rw removing the files, then mounting ro. But since that's no more horrible than the kludge of using marker files in /. With this change, NanoBSD configs can safely use /firstboot + growfs to produce minimal images that grow to the size of the card. Notes: svn path=/head/; revision=293115
* Add libsoft to the tree, just like lib32.Warner Losh2016-01-033-0/+25
| | | | Notes: svn path=/head/; revision=293068
* Update leap-seconds to latest. This will satisfy the ntpd leap-secondCy Schubert2016-01-011-116/+218
| | | | | | | | | | version check. Obtained from: ftp://tycho.usno.navy.mil/pub/ntp/. See also: http://www.iers.org/SharedDocs/News/EN/BulletinC.html Notes: svn path=/head/; revision=293037
* Let old-style (shell-based) jail configuration handle jail names thatJamie Gritton2015-12-261-62/+68
| | | | | | | | | | | | | | | | contain characters not allowed in a shell variable (such as "-"). These will be replaced by an underscore in jail config variables, e.g. for jail "foo-bar" you would set "jail_foo_bar_hostname". This is separate from the current code that changes the jail names if they contain "." or "/". It also doesn't apply to jails defined in a jail.conf file. PR: 191181 MFC after: 5 days Notes: svn path=/head/; revision=292759
* Enhance rc.d/netwait script to wait for late-attaching interfaces such asIan Lepore2015-12-263-59/+76
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | USB NICs. USB network hardware may not be enumerated and available when the rc.d networking scripts run. Eventually the USB attachment completes and devd events cause the network initialization to happen, but by then other rc.d scripts have already failed, because services which depend on NETWORKING (such as mountcritremote) may end up running before the network is actually ready. There is an existing netwait script, but because it is dependent on NETWORKING it runs too late to prevent failure of some other rc scripts. This change flips the order so that NETWORKING depends on netwait, and netwait now depends on devd and routing (the former is needed to make interfaces appear, and the latter is needed to run the ping tests in netwait). The netwait script used to be oriented primarily towards "as soon as any host is reachable the network is fully functional", so you gave it a list of IPs to try and you could optionally name an interface and it would wait for carrier on that interface. That functionality still works the same, but now you can provide a list of interfaces to wait for and it waits until each one of them is available. The ping logic still completes as soon as the first IP on the list responds. These changes were submitted by Brenden Molloy <brendan+freebsd@bbqsrc.net> in PR 205186, and lightly modified by me to allow a list of interfaces instead of just one. PR: 205186 Differential Revision: https://reviews.freebsd.org/D4608 (timeout w/o review) Notes: svn path=/head/; revision=292752
* Upgrade our copies of clang and llvm to 3.7.1 release. This is aDimitry Andric2015-12-252-2/+2
| | | | | | | | | | bugfix-only release, with no new features. Please note that from 3.5.0 onwards, clang and llvm require C++11 support to build; see UPDATING for more information. Notes: svn path=/head/; revision=292735
* Replace all whitespaces between port name and number with tabs,Jeremie Le Hen2015-12-241-139/+139
| | | | Notes: svn path=/head/; revision=292694
* Integrate tools/regression/mac/mac_bsdextended andEnji Cooper2015-12-211-0/+6
| | | | | | | | | | | tools/regression/mac/mac_portacl into the FreeBSD test suite as tests/sys/mac/bsdextended and tests/sys/mac/portacl, respectively MFC after: 1 month Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=292570
* Add port for IRC over TLS/SSL, as noted in RFC 7194.Jeremie Le Hen2015-12-211-0/+1
| | | | | | | | | PR: 192505 Submitted by: loic.blot@unix-experience.fr MFC after: 3 days Notes: svn path=/head/; revision=292564
* Fix whitespace issues in BSD.usr.dist introduced in r291455Enji Cooper2015-12-191-2/+2
| | | | | | | Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=292480
* Integrate tools/regression/lib/libc/nss into the FreeBSD test suite asEnji Cooper2015-12-161-0/+2
| | | | | | | | | | | | | | | | | | | | lib/libc/tests/nss - Convert the testcases to ATF - Do some style(9) cleanups: -- Sort headers -- Apply indentation fixes -- Remove superfluous parentheses - Explicitly print out debug printfs for use with `kyua {debug,report}`; for items that were overly noisy, they've been put behind #ifdef DEBUG conditionals - Fix some format strings MFC after: 1 week Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=292323
* Integrate tools/regression/lib/libc/resolv into the FreeBSD test suite asEnji Cooper2015-12-161-0/+2
| | | | | | | | | | | | lib/libc/tests/resolv Convert the testcases to ATF MFC after: 1 week Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=292317
* Skip unavailable pools when running zfs pool scrubsKurt Lidl2015-12-161-0/+4
| | | | | | | | Approved by: rpaulo (mentor) Differential Revision: https://reviews.freebsd.org/D4588 Notes: svn path=/head/; revision=292313
* Start support for the RISC-V 64-bit architecture developed by UC Berkeley.Ruslan Bukin2015-12-111-0/+51
| | | | | | | | | | | | | | | | | | RISC-V is a new ISA designed to support computer research and education, and is now become a standard open architecture for industry implementations. This is a minimal set of changes required to run 'make kernel-toolchain' using external (GNU) toolchain. The FreeBSD/RISC-V project home: https://wiki.freebsd.org/riscv. Reviewed by: andrew, bdrewery, emaste, imp Sponsored by: DARPA, AFRL Sponsored by: HEIF5 Differential Revision: https://reviews.freebsd.org/D4445 Notes: svn path=/head/; revision=292124
* rc.subr: Check for running daemons before a custom start_cmd is executed.Jilles Tjoelker2015-12-041-8/+8
| | | | | | | | | | | | | | | | | | | | Currently rc scripts implementing their own start_cmd do not enjoy the benefits of rc.subr's own check for rc_pid. This leads to around a third of ports with such a start_cmd not to check for the process at all and two thirds of ports to re-implement this check (sometimes wrongly). This patch moves the check for rc_pid to before ${rc_arg}_cmd is executed. Submitted by: Dirk Engling Reviewed by: feld MFC after: 1 week Relnotes: yes Differential Revision: https://reviews.freebsd.org/D4156 Notes: svn path=/head/; revision=291770
* Regenerate usb.conf .Hans Petter Selasky2015-12-031-12/+228
| | | | | | | MFC after: 1 week Notes: svn path=/head/; revision=291703
* Modify the rctl rc script to add multiple rules in a single run.Edward Tomasz Napierala2015-12-011-2/+2
| | | | | | | | MFC after: 1 month Sponsored by: The FreeBSD Foundation Notes: svn path=/head/; revision=291596
* Load our configuration before setting defaults, so local_unbound_workdirDag-Erling Smørgrav2015-12-011-2/+2
| | | | | | | | | | | actually has an effect. PR: 204931 Submitted by: Eugene Grosbein <eugen@grosbein.net> MFC after: 1 week Notes: svn path=/head/; revision=291582
* Revert r290840Enji Cooper2015-12-011-1/+1
| | | | | | | | | | | | | This request by the submitter was valid, but unfortunately there is a good deal of concern over breakage when DESTDIR != / or "", i.e. with release media. Making this change correct for all cases would make it markedly more complex than need be Requested by: bdrewery, ian, imp PR: 76362 Notes: svn path=/head/; revision=291568
* META MODE: Update dependencies with 'the-lot' and add missing directories.Bryan Drewery2015-12-012-0/+22
| | | | | | | | | | | | | | | | | This is not properly respecting WITHOUT or ARCH dependencies in target/. Doing so requires a massive effort to rework targets/ to do so. A better approach will be to either include the SUBDIR Makefiles directly and map to DIRDEPS or just dynamically lookup the SUBDIR. These lose the benefit of having a userland/lib, userland/libexec, etc, though and results in a massive package. The current implementation of targets/ is very unmaintainable. Currently rescue/rescue and sys/modules are still not connected. Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=291563
* Add support for the new "-manage-gids" option for the nfsuserd daemonRick Macklem2015-11-303-1/+15
| | | | | | | | | | | | | to the rc scripts. With these changes, setting nfs_server_managegids="YES" in /etc/rc.conf will enable this capability. Suggested by: jpaetzel Tested by: jpaetzel Reviewed by: rc (pending) MFC after: 2 weeks Notes: svn path=/head/; revision=291536
* Add lib80211 to include path.Adrian Chadd2015-11-301-0/+2
| | | | | | | (This commit was missing from my lib80211 commit.) Notes: svn path=/head/; revision=291465
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-01 17:46:33 +0000