OpenBSD CVS

CVS log for src/etc/rc


[BACK] Up to [local] / src / etc

Request diff between arbitrary revisions


Default branch: MAIN


Revision 1.575 / (download) - annotate - [select for diffs], Fri May 17 00:33:43 2024 UTC (31 hours, 58 minutes ago) by deraadt
Branch: MAIN
CVS Tags: HEAD
Changes since 1.574: +3 -2 lines
Diff to previous 1.574 (colored)

run the sshd-session link kit also

Revision 1.574 / (download) - annotate - [select for diffs], Tue Apr 2 08:21:04 2024 UTC (6 weeks, 4 days ago) by deraadt
Branch: MAIN
Changes since 1.573: +2 -2 lines
Diff to previous 1.573 (colored)

also relink ssh-agent

Revision 1.573 / (download) - annotate - [select for diffs], Sat Mar 30 07:35:01 2024 UTC (7 weeks ago) by deraadt
Branch: MAIN
Changes since 1.572: +6 -2 lines
Diff to previous 1.572 (colored)

program relinking currently uses a Makefile.relink inside the re-link kit.
For sshd (the only relinked program at the moment), this file is created
in an extremely nasty way.  It'll be better if we have a proper clean
install.sh script, which I've built for sshd.  But let's first commit the
change to /etc/rc which will handle that in the near future.
ok djm

Revision 1.572 / (download) - annotate - [select for diffs], Sun Oct 1 20:15:23 2023 UTC (7 months, 2 weeks ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_7_5_BASE, OPENBSD_7_5, OPENBSD_7_4_BASE, OPENBSD_7_4
Changes since 1.571: +5 -1 lines
Diff to previous 1.571 (colored)

show fingerprint of freshly generated ssh host key on first boot

Print to the console the fingerprint of a newly generated ssh host
key of the preferred type (currently ED25519), typically when booting
for the first time.  This simplifies a secure first ssh connection to
a freshly installed machine.

ok deraadt@ kn@, and various for earlier iterations

Revision 1.571 / (download) - annotate - [select for diffs], Wed Apr 26 14:28:09 2023 UTC (12 months, 3 weeks ago) by phessler
Branch: MAIN
Changes since 1.570: +2 -2 lines
Diff to previous 1.570 (colored)

During boot we have a protective and restrictive pf ruleset during the time
we are running netstart, and then load the pf.conf ruleset after all of the
interfaces are loaded.

Allow in and out IPv6 neighbor advertisement traffic without state during
that time.

suggestions/OK from saschan@
OK sthen@ kn@ florian@ deraadt@

Revision 1.570 / (download) - annotate - [select for diffs], Wed Jan 25 10:53:15 2023 UTC (15 months, 3 weeks ago) by asou
Branch: MAIN
CVS Tags: OPENBSD_7_3_BASE, OPENBSD_7_3
Changes since 1.569: +2 -2 lines
Diff to previous 1.569 (colored)

Delete TAB only line.

Revision 1.569 / (download) - annotate - [select for diffs], Wed Jan 18 20:44:40 2023 UTC (15 months, 4 weeks ago) by deraadt
Branch: MAIN
Changes since 1.568: +17 -2 lines
Diff to previous 1.568 (colored)

process the sshd random-relink kit if it is found.  sshd's text segment
is now garbled, and in the future xonly univirse you'll have poor success
downloading it or libc to know where gadgets are.
ok djm

Revision 1.568 / (download) - annotate - [select for diffs], Wed Dec 28 09:53:33 2022 UTC (16 months, 2 weeks ago) by kn
Branch: MAIN
Changes since 1.567: +3 -1 lines
Diff to previous 1.567 (colored)

Make wait_reorder_libs() honour library_aslr=NO

Otherwise it will unconditionally print an empty line in case relinking
is disabled.

Reported by kettenis
Feedback OK tb
OK florian

Revision 1.567 / (download) - annotate - [select for diffs], Mon Dec 26 20:24:43 2022 UTC (16 months, 3 weeks ago) by kn
Branch: MAIN
Changes since 1.566: +2 -1 lines
Diff to previous 1.566 (colored)

add newline missed in previous

Revision 1.566 / (download) - annotate - [select for diffs], Mon Dec 26 18:57:50 2022 UTC (16 months, 3 weeks ago) by florian
Branch: MAIN
Changes since 1.565: +16 -5 lines
Diff to previous 1.565 (colored)

Re-order libraries in parallel to netstart.

While netstart is busy setting up the network and waiting for a
default route we can already start with reordering libraries since
this does not depend on running network, speeding things up.

Idea & input deraadt
Input & OK kn

Revision 1.565 / (download) - annotate - [select for diffs], Mon Nov 28 14:56:31 2022 UTC (17 months, 2 weeks ago) by cheloha
Branch: MAIN
Changes since 1.564: +6 -4 lines
Diff to previous 1.564 (colored)

rc(8): reorder_libs: print names of relinked libraries

When booting from slow media, the boot can appear to stall at the
"reordering libs" line for quite some time.  For my example, my G4
PowerMac booting from USB 1.1 takes a full minute to reorder the
libraries.

Let's print the name of each library before it is relinked.  This
gives the operator a better sense of what the machine is doing.  In
particular, it signals to the operator that the machine did not hang.

With input from kn@, deraadt@.  Positive feedback from sthen@.

Link: https://marc.info/?l=openbsd-tech&m=165914104421476&w=2

ok kn@

Revision 1.564 / (download) - annotate - [select for diffs], Mon Aug 29 11:51:05 2022 UTC (20 months, 2 weeks ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_7_2_BASE, OPENBSD_7_2
Changes since 1.563: +2 -3 lines
Diff to previous 1.563 (colored)

mount /usr earlier, to satisfy dynamically-linked daemons in /sbin better
(there will be more soon)

Revision 1.563 / (download) - annotate - [select for diffs], Thu Jul 28 16:06:04 2022 UTC (21 months, 2 weeks ago) by miod
Branch: MAIN
Changes since 1.562: +2 -2 lines
Diff to previous 1.562 (colored)

Only attempt to set the yp domainname if not yet set; gets rid of an error
message at shutdown.

tweaks & ok deraadt@

Revision 1.562 / (download) - annotate - [select for diffs], Wed Jul 27 23:06:50 2022 UTC (21 months, 3 weeks ago) by deraadt
Branch: MAIN
Changes since 1.561: +3 -3 lines
Diff to previous 1.561 (colored)

Place ypldap with ypserv, inside the $domainname check, since it also
has the same requirement.

Revision 1.561 / (download) - annotate - [select for diffs], Sun Jul 17 03:17:37 2022 UTC (22 months ago) by deraadt
Branch: MAIN
Changes since 1.560: +1 -2 lines
Diff to previous 1.560 (colored)

/var/run/ypbind.lock doesn't need to be forcefully removed
ok aja

Revision 1.560 / (download) - annotate - [select for diffs], Mon Jul 11 18:19:47 2022 UTC (22 months, 1 week ago) by tobhe
Branch: MAIN
Changes since 1.559: +11 -6 lines
Diff to previous 1.559 (colored)

Generate P-256 ECDH keys for iked instead of reusing 2048 bit RSA keys
from isakmpd.

ok bluhm@

Revision 1.559 / (download) - annotate - [select for diffs], Tue Jun 28 18:46:01 2022 UTC (22 months, 2 weeks ago) by claudio
Branch: MAIN
Changes since 1.558: +2 -2 lines
Diff to previous 1.558 (colored)

Hook up bgplgd. Uses _bgplgd user with id 71:71 add a rc.d script and
all the other rc plumbing.
OK deraadt@

Revision 1.558 / (download) - annotate - [select for diffs], Sun Jun 26 09:36:13 2022 UTC (22 months, 3 weeks ago) by florian
Branch: MAIN
Changes since 1.557: +1 -10 lines
Diff to previous 1.557 (colored)

Wait for autoconf interfaces to come up in netstart(8) instead of
rc(8). This makes tunnel interfaces work that depend on working
autoconf interfaces.
OK deraadt

Revision 1.557 / (download) - annotate - [select for diffs], Sun Jun 26 08:08:23 2022 UTC (22 months, 3 weeks ago) by florian
Branch: MAIN
Changes since 1.556: +6 -5 lines
Diff to previous 1.556 (colored)

Start network auto configuration daemons earlier so that tunnel
interfaces can depend on dhcp or slaac.
dhcpleased needs /var mounted so pull that up, we do not support /var
on nfs.
With & OK deraadt, earlier version OK sthen

Revision 1.556 / (download) - annotate - [select for diffs], Mon Jan 17 04:12:15 2022 UTC (2 years, 4 months ago) by jsg
Branch: MAIN
CVS Tags: OPENBSD_7_1_BASE, OPENBSD_7_1
Changes since 1.555: +2 -2 lines
Diff to previous 1.555 (colored)

filessystems -> filesystems

Revision 1.555 / (download) - annotate - [select for diffs], Thu Nov 11 09:38:14 2021 UTC (2 years, 6 months ago) by claudio
Branch: MAIN
Changes since 1.554: +2 -2 lines
Diff to previous 1.554 (colored)

switch(4) and switchd(8) are retiering. Unhook them from various
configuration files.
OK sthen@ kn@ patrick@

Revision 1.554 / (download) - annotate - [select for diffs], Wed Sep 1 08:15:53 2021 UTC (2 years, 8 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_7_0_BASE, OPENBSD_7_0
Changes since 1.553: +2 -1 lines
Diff to previous 1.553 (colored)

quietly attempt mounting of /var/log early, in case someone creates such
a partition to avoid /var overflow issues
ok benno beck

Revision 1.553 / (download) - annotate - [select for diffs], Wed Jul 28 20:48:36 2021 UTC (2 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.552: +2 -2 lines
Diff to previous 1.552 (colored)

A slightly less precise match on the ifconfig output lines works
better for rdomain or metric tuned interfaces
from leon fischer

Revision 1.552 / (download) - annotate - [select for diffs], Thu Jul 22 18:29:47 2021 UTC (2 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.551: +9 -7 lines
Diff to previous 1.551 (colored)

Only perform the default-route-pause if there are interfaces with the
AUTOCONF flag set.  This removes the delay for even more (strange)
static configs.
ok sthen

Revision 1.551 / (download) - annotate - [select for diffs], Thu Jul 22 18:09:04 2021 UTC (2 years, 9 months ago) by sthen
Branch: MAIN
Changes since 1.550: +3 -2 lines
Diff to previous 1.550 (colored)

small tweak for default route checking, we don't care about the number of
routes, only if at least one exists, so can avoid the subshell and just use
grep -q. ok deraadt

Revision 1.550 / (download) - annotate - [select for diffs], Thu Jul 22 01:53:45 2021 UTC (2 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.549: +11 -5 lines
Diff to previous 1.549 (colored)

After netstart, dhcpleased, and resolved are running, spin up to 10
seconds waiting for a default route (v4 or v6) to exist, this
increases the chance of DNS lookups working earlier.  This is done
before pf is configured, sorry we have good reasons.  Static
configurations are unaffected.  dhclient previously did this kind of
delay, and this is the lightest touch we can come up with which gives
the same effect.
While here, also start relinking earlier.
ok benno florian sthen

Revision 1.549 / (download) - annotate - [select for diffs], Sat Mar 13 21:11:56 2021 UTC (3 years, 2 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_6_9_BASE, OPENBSD_6_9
Changes since 1.548: +5 -5 lines
Diff to previous 1.548 (colored)

because the kernel has been replaced after last boot, run kvm_mkdb
before the first consumer of kvm_bsd.db

Revision 1.548 / (download) - annotate - [select for diffs], Tue Mar 9 07:12:15 2021 UTC (3 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.547: +3 -3 lines
Diff to previous 1.547 (colored)

dhcpleased wants /var (but contains code to handle when it isn't there).
But in the nfs diskless case, we can do better by starting it a little
later.  This disrupts nfs diskless on dynamic addresses a little, if it ever
actually worked with dhclient, but anyone doing that deserves the headache.
ok florian

Revision 1.547 / (download) - annotate - [select for diffs], Fri Feb 26 18:29:16 2021 UTC (3 years, 2 months ago) by kn
Branch: MAIN
Changes since 1.546: +2 -2 lines
Diff to previous 1.546 (colored)

Ship resolvd service, enable it by default

Starting right after unwind.

OK deraadt

Revision 1.546 / (download) - annotate - [select for diffs], Fri Feb 26 17:18:41 2021 UTC (3 years, 2 months ago) by florian
Branch: MAIN
Changes since 1.545: +2 -2 lines
Diff to previous 1.545 (colored)

rc(8) bits for dhcpleased(8).
OK deraadt

Revision 1.545 / (download) - annotate - [select for diffs], Tue Feb 9 21:42:04 2021 UTC (3 years, 3 months ago) by naddy
Branch: MAIN
Changes since 1.544: +2 -2 lines
Diff to previous 1.544 (colored)

rc: ensure that vfs.mounts.nfs check works without NFS

If NFS isn't compiled into the kernel, sysctl -n vfs.mounts.nfs
will produce no numerical output.  Make sure that we always have
a valid arithmetic expression.

Reported by and ok patrick@

Revision 1.544 / (download) - annotate - [select for diffs], Sun Nov 29 20:14:06 2020 UTC (3 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.543: +6 -1 lines
Diff to previous 1.543 (colored)

Add support for !command to mygate, so that netstart has a late opportunity
to perform network configuration (for example, "!route source -ifp em0")
Split mygate and myname manual pages (how did anyone ever believe these
are related), and perform hostname configuration much earlier in rc.
discussed with benno, claudio, jmc, etc etc, last version of !command
parser by tb

Revision 1.543 / (download) - annotate - [select for diffs], Fri Jan 24 06:17:37 2020 UTC (4 years, 3 months ago) by tedu
Branch: MAIN
CVS Tags: OPENBSD_6_8_BASE, OPENBSD_6_8, OPENBSD_6_7_BASE, OPENBSD_6_7
Changes since 1.542: +2 -2 lines
Diff to previous 1.542 (colored)

retire rebound etc bits to the attic

Revision 1.542 / (download) - annotate - [select for diffs], Mon Nov 11 04:55:37 2019 UTC (4 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.541: +7 -5 lines
Diff to previous 1.541 (colored)

move /usr and var remounting (nfs diskless case...) earlier, so that
unwind can be started (silently) before pf is configured (for those
few weirdos who use hostnames in pf.conf...).  Other unidentified concerns
may be improved by this startup re-ordering, so let's give it a try.
discussed with florian.

Revision 1.541 / (download) - annotate - [select for diffs], Sun Nov 10 15:02:36 2019 UTC (4 years, 6 months ago) by naddy
Branch: MAIN
Changes since 1.540: +3 -3 lines
Diff to previous 1.540 (colored)

use $(<file) instead of $(cat file) since this script uses ksh; ok ajacoutot@

Revision 1.540 / (download) - annotate - [select for diffs], Wed Nov 6 16:26:24 2019 UTC (4 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.539: +4 -5 lines
Diff to previous 1.539 (colored)

we have emergency entropy injection code in rc, for if the bootblocks and
other methods failed to inject/churn the rng enough.  Move it up far earlier.
ok naddy sthen kettenis

Revision 1.539 / (download) - annotate - [select for diffs], Sun Oct 6 16:16:19 2019 UTC (4 years, 7 months ago) by sthen
Branch: MAIN
CVS Tags: OPENBSD_6_6_BASE, OPENBSD_6_6
Changes since 1.538: +2 -2 lines
Diff to previous 1.538 (colored)

for now, only mix in sysctl hw.{uuid,serialno,sensors} to /dev/random.
as found the hard way by d.rauschenb@gmail on an old fujitsu siemens
machine, reading all of hw (notable hw.setperf) can have unexpected
side-effects.  ok deraadt

Revision 1.538 / (download) - annotate - [select for diffs], Wed Oct 2 17:15:40 2019 UTC (4 years, 7 months ago) by sthen
Branch: MAIN
Changes since 1.537: +2 -1 lines
Diff to previous 1.537 (colored)

feed "sysctl hw" into /dev/random; a cheap way to feed in sensor data
as a one-shot at boot without more complex kernel work, and also includes
some serial numbers/guids which may add a little more entropy e.g. for
systems where /etc/random.seed may be known (e.g. cloned disk images).
"why not" deraadt@

Revision 1.537 / (download) - annotate - [select for diffs], Fri May 10 13:29:21 2019 UTC (5 years ago) by guenther
Branch: MAIN
Changes since 1.536: +5 -3 lines
Diff to previous 1.536 (colored)

ld.so boot cleanup support:
 - put functions and data which are only used before calling the executable's
   start function into their own page-aligned segments for unmapping
   (only done on amd64, arm64, armv7, powerpc, and sparc64 so far)
 - pass .init_array and .preinit_array functions an addition argument which
   is a callback to get a structure which includes a function that frees
   the boot text and data
 - sometimes delay doing RELRO processing: for a shared-object marked
   DF_1_INITFIRST do it after the object's .init_array, for the executable
   do it after the .preinit_array
 - improve test-ld.so to link against libpthread and trigger its initialization
   late
libc changes to use this will come later

ok kettenis@

Revision 1.536 / (download) - annotate - [select for diffs], Mon Apr 1 11:39:46 2019 UTC (5 years, 1 month ago) by tedu
Branch: MAIN
CVS Tags: OPENBSD_6_5_BASE, OPENBSD_6_5
Changes since 1.535: +3 -3 lines
Diff to previous 1.535 (colored)

revert previous. ifconfig errors may be interesting... to be revisited.

Revision 1.535 / (download) - annotate - [select for diffs], Mon Apr 1 06:59:36 2019 UTC (5 years, 1 month ago) by tedu
Branch: MAIN
Changes since 1.534: +3 -3 lines
Diff to previous 1.534 (colored)

catch/hide errors from ifconfig carp in case there is no carp.
ok deraadt

Revision 1.534 / (download) - annotate - [select for diffs], Sun Feb 24 12:57:14 2019 UTC (5 years, 2 months ago) by kn
Branch: MAIN
Changes since 1.533: +2 -2 lines
Diff to previous 1.533 (colored)

Remove -S from install commands

As of usr.bin/xinstall/install.c revision 1.68, -S is a no-op and
install(1) will always create files safely, thus clean the option usage
from the tree.

Diff from Lauri Tirkkonen <lotheac at iki dot fi>, thanks.

Revision 1.533 / (download) - annotate - [select for diffs], Tue Feb 19 20:41:52 2019 UTC (5 years, 2 months ago) by kn
Branch: MAIN
Changes since 1.532: +6 -8 lines
Diff to previous 1.532 (colored)

Simplify NFS check in reorder_libs()

Loop over df(1)'s output directly, ensure the resulting list of block
devices is unique to avoid later duplicity checks and redundant mount(8)
invocations.

This allows direct bail out on invalid types and simpler saving for later
remount.

OK deraadt

Revision 1.532 / (download) - annotate - [select for diffs], Sat Jan 26 10:59:07 2019 UTC (5 years, 3 months ago) by florian
Branch: MAIN
Changes since 1.531: +2 -2 lines
Diff to previous 1.531 (colored)

rc(8) bits for unwind(8); OK deraadt

Revision 1.531 / (download) - annotate - [select for diffs], Thu Jan 24 05:14:02 2019 UTC (5 years, 3 months ago) by ajacoutot
Branch: MAIN
Changes since 1.530: +1 -2 lines
Diff to previous 1.530 (colored)

Drop the ttyflags message.
suggested by and ok deraadt@ ("I think we never hang there anymore")

Revision 1.530 / (download) - annotate - [select for diffs], Sat Jan 12 17:05:00 2019 UTC (5 years, 4 months ago) by kettenis
Branch: MAIN
Changes since 1.529: +2 -2 lines
Diff to previous 1.529 (colored)

Use acpidump -q to avoid message about ACPI information not being found.
Many arm64 systems use device trees instead of ACPI and acpidump is
expectected to fail on those systems.  And vmm(4) doesn't provide ACPI
information either.

ok deraadt@

Revision 1.529 / (download) - annotate - [select for diffs], Mon Jul 23 11:54:49 2018 UTC (5 years, 9 months ago) by florian
Branch: MAIN
CVS Tags: OPENBSD_6_4_BASE, OPENBSD_6_4
Changes since 1.528: +2 -2 lines
Diff to previous 1.528 (colored)

It's time to switch to rad(8); tested by many.
Remove rtadvd(8) from rc(8).
OK deraadt, phessler

Revision 1.528 / (download) - annotate - [select for diffs], Thu Jul 12 08:20:36 2018 UTC (5 years, 10 months ago) by florian
Branch: MAIN
Changes since 1.527: +2 -2 lines
Diff to previous 1.527 (colored)

rc(8) infrastructure for rad

Revision 1.527 / (download) - annotate - [select for diffs], Wed Jul 11 21:49:37 2018 UTC (5 years, 10 months ago) by sthen
Branch: MAIN
Changes since 1.526: +7 -1 lines
Diff to previous 1.526 (colored)

Explicitly call "/etc/rc.d/vmd stop". This issues graceful shutdown commands
to running VMs (at least for OpenBSD ones), but the stop routine for system
daemons is not usually called at shutdown.

Earlier version with just "vmd stop" ok reyk@ kn@, ajacoutot@ reminded me
to hide the contextless "vmd(ok)" text which looks bad, I did so and wrapped
it with a "stopping VMs" message (it can take some time, especially when you
have multiple VMs, so better to have some clear feedback).

Revision 1.526 / (download) - annotate - [select for diffs], Wed Jul 11 08:31:48 2018 UTC (5 years, 10 months ago) by florian
Branch: MAIN
Changes since 1.525: +2 -9 lines
Diff to previous 1.525 (colored)

Don't hide errors when IPv6 forwarding is not enabled.
OK(failed) phessler
OK deraadt

Revision 1.525 / (download) - annotate - [select for diffs], Sun Feb 18 18:52:02 2018 UTC (6 years, 2 months ago) by rpe
Branch: MAIN
CVS Tags: OPENBSD_6_3_BASE, OPENBSD_6_3
Changes since 1.524: +3 -3 lines
Diff to previous 1.524 (colored)

Remove unecessary line continuation markers after || and &&

Revision 1.524 / (download) - annotate - [select for diffs], Sat Feb 10 05:56:47 2018 UTC (6 years, 3 months ago) by florian
Branch: MAIN
Changes since 1.523: +7 -1 lines
Diff to previous 1.523 (colored)

Load RFC 7217 key material and generate if it does not already exist.

Add soii.key to changelist (pointed out by semarie) and mtree/special
(suggest by Craig Skinner).

OK naddy, sthen, rpe, tb

Revision 1.523 / (download) - annotate - [select for diffs], Thu Nov 9 11:02:10 2017 UTC (6 years, 6 months ago) by tb
Branch: MAIN
Changes since 1.522: +3 -3 lines
Diff to previous 1.522 (colored)

kill trailing whitespace introduced in previous commit

Revision 1.522 / (download) - annotate - [select for diffs], Mon Nov 6 09:04:18 2017 UTC (6 years, 6 months ago) by rpe
Branch: MAIN
Changes since 1.521: +7 -6 lines
Diff to previous 1.521 (colored)

Use a variable for /usr/share/relink

OK tb@

Revision 1.521 / (download) - annotate - [select for diffs], Sun Nov 5 10:29:24 2017 UTC (6 years, 6 months ago) by rpe
Branch: MAIN
Changes since 1.520: +29 -23 lines
Diff to previous 1.520 (colored)

Consolidate lib.so.*.a, ld.so.a and the kernel relink kit into
one location under /usr/share/relink.

Be more specific in src/etc/rc reorder_libs() what filesystems
need r/w remount and ensure that their mount state is restored.

Idea and positive feedback from deraadt@
OK aja@ tb@

Revision 1.520 / (download) - annotate - [select for diffs], Wed Oct 25 10:42:51 2017 UTC (6 years, 6 months ago) by bluhm
Branch: MAIN
Changes since 1.519: +11 -7 lines
Diff to previous 1.519 (colored)

Partially revert rev 1.457 of /etc/rc.  The pipe introduced in
sysctl_conf() spawns a subshell.  This prevents that the new process
limits affect the daemons started during boot.
OK rpe@ halex@

Revision 1.519 / (download) - annotate - [select for diffs], Thu Oct 12 18:14:05 2017 UTC (6 years, 7 months ago) by rpe
Branch: MAIN
Changes since 1.518: +3 -3 lines
Diff to previous 1.518 (colored)

The testprogram for ld.so reordering is executed in tmpdir.
Move tmpdir for reordering library from /tmp to /usr/lib.
This allows to have /tmp mounted noexec.

prompted by reports on misc@
OK deraadt@ tj@ tb@

Revision 1.518 / (download) - annotate - [select for diffs], Tue Oct 10 19:07:50 2017 UTC (6 years, 7 months ago) by rpe
Branch: MAIN
Changes since 1.517: +2 -3 lines
Diff to previous 1.517 (colored)

Move comment line and spacing.

Revision 1.517 / (download) - annotate - [select for diffs], Tue Aug 29 16:56:13 2017 UTC (6 years, 8 months ago) by rpe
Branch: MAIN
CVS Tags: OPENBSD_6_2_BASE, OPENBSD_6_2
Changes since 1.516: +21 -9 lines
Diff to previous 1.516 (colored)

Based on previous work from deraadt, add relinking of ld.so to
reorder_libs() resulting in a unique ld.so on every system start.

Idea from and OK deraadt@
OK tb@

Revision 1.516 / (download) - annotate - [select for diffs], Mon Aug 28 06:56:54 2017 UTC (6 years, 8 months ago) by ajacoutot
Branch: MAIN
Changes since 1.515: +2 -1 lines
Diff to previous 1.515 (colored)

Display that we are running the upgrade scripts when they exist. On slowish
machines, running sysmerge(8) can take a little while so don't let people
wonder about why the output seems stuck.

ok sthen@ tb@ rpe@

Revision 1.515 / (download) - annotate - [select for diffs], Mon Aug 21 21:24:11 2017 UTC (6 years, 8 months ago) by rpe
Branch: MAIN
Changes since 1.514: +4 -42 lines
Diff to previous 1.514 (colored)

Move the kernel relinking code from /etc/rc into a seperate script
/usr/libexec/reorder_kernel. Requested by ajacoutot@ to be able to
relink the kernel from within syspatch(8).

OK deraadt@ tb@

Revision 1.514 / (download) - annotate - [select for diffs], Sun Aug 20 19:45:37 2017 UTC (6 years, 8 months ago) by rpe
Branch: MAIN
Changes since 1.513: +7 -7 lines
Diff to previous 1.513 (colored)

Simplify the code for stopping daemons listed in pkg_scripts in
reverse order on shutdown.

OK aja@ tb@

Revision 1.513 / (download) - annotate - [select for diffs], Tue Jul 18 19:31:20 2017 UTC (6 years, 10 months ago) by zhuk
Branch: MAIN
Changes since 1.512: +2 -2 lines
Diff to previous 1.512 (colored)

Use a bit better idiom to get most recent version of the library
being reordered.

okay tb@ deraadt@

Revision 1.512 / (download) - annotate - [select for diffs], Tue Jul 18 16:29:44 2017 UTC (6 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.511: +2 -2 lines
Diff to previous 1.511 (colored)

Use numerical sysctl output to check for nfs mounts.

OK tb@

Revision 1.511 / (download) - annotate - [select for diffs], Mon Jul 17 18:52:26 2017 UTC (6 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.510: +5 -4 lines
Diff to previous 1.510 (colored)

Tweak previous.

Revision 1.510 / (download) - annotate - [select for diffs], Mon Jul 17 18:37:42 2017 UTC (6 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.509: +27 -20 lines
Diff to previous 1.509 (colored)

Use a more compact way to compose the initial pf ruleset.

Diff from Klemens Nanni
OK tb@ zhuk@

Revision 1.509 / (download) - annotate - [select for diffs], Mon Jul 17 18:16:14 2017 UTC (6 years, 10 months ago) by tb
Branch: MAIN
Changes since 1.508: +7 -7 lines
Diff to previous 1.508 (colored)

Now that choosing the library versions is much faster, we can do
it after remounting the filesystem containing /usr/lib as rw:
the former is pointless if the latter should happen to fail.

From Klemens Nanni
ok rpe

Revision 1.508 / (download) - annotate - [select for diffs], Mon Jul 17 12:02:53 2017 UTC (6 years, 10 months ago) by tb
Branch: MAIN
Changes since 1.507: +5 -8 lines
Diff to previous 1.507 (colored)

Optimize and simplify the selection of the latest library version in
reorder_libs().

From Klemens Nanni with input from rpe.
ok rpe, zhuk

Revision 1.507 / (download) - annotate - [select for diffs], Tue Jul 4 19:02:11 2017 UTC (6 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.506: +17 -15 lines
Diff to previous 1.506 (colored)

Switch reorder_kernel() from sending emails to logging via syslog
and to write the logfile inside the kernel compile dir.

- turn the whole reorder_kernel function into a subshell {} -> ()
- create kernel compile dir early on
- redirect all stdout/stderr to a logfile inside this dir
- setup ERR trap handler that
  - disables the EXIT trap handler
  - syslogs the error and hints to the logfile
  - additionally sends this message to the console
- setup EXIT trap handler that syslogs success
- wipe only the content instead of the whole kernel compile dir
- reestablish stdout redirection to the log after the wipe
- remove -q option of sha256 to log check result
- run reorder_kernel() in the background

OK deraadt@ tb@

Revision 1.506 / (download) - annotate - [select for diffs], Fri Jun 30 17:06:03 2017 UTC (6 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.505: +24 -18 lines
Diff to previous 1.505 (colored)

Improve reorder_kernel()

- check for and exit if /usr/share is on a nfs mounted filesystem
- add trap handlers that mail the logfile to the admin user
- use $_compile instead of $_compile_dir like in the installer
- use $_compile/$_kernel instead of $_kernel_dir
- remove the now redundant sha256 -h ... after make newinstall
- write stdout/stderr of the background subshell to a logfile

OK tb@ deraadt@

Revision 1.505 / (download) - annotate - [select for diffs], Tue Jun 27 03:42:00 2017 UTC (6 years, 10 months ago) by tedu
Branch: MAIN
Changes since 1.504: +2 -8 lines
Diff to previous 1.504 (colored)

remove some old cruft.

Revision 1.504 / (download) - annotate - [select for diffs], Thu Jun 22 16:03:36 2017 UTC (6 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.503: +5 -5 lines
Diff to previous 1.503 (colored)

Adjust relink procedure to use new targets.  Better use semantics for
users and developers.
diff from rpe, ok tb

Revision 1.503 / (download) - annotate - [select for diffs], Mon Jun 19 22:50:50 2017 UTC (6 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.502: +2 -1 lines
Diff to previous 1.502 (colored)

As early as possible, create a link /bsd.booted to the /bsd kernel we
presume we booted from.  If you boot from another kernel, we cannot help
you later with hibernate, sorry -- The kernel does not get a useable
filename from the bootblocks.

In the bootblocks, detect a live hibernate signature and boot from
/bsd.booted instead.

with yasuoka, lots of discussion with mlarkin, ok tom

Revision 1.502 / (download) - annotate - [select for diffs], Wed Jun 14 21:39:53 2017 UTC (6 years, 11 months ago) by rpe
Branch: MAIN
Changes since 1.501: +35 -1 lines
Diff to previous 1.501 (colored)

Add a new function reorder_kernel() that relinks and installs the
new kernel in the background on system startup. It stores the hash
of the new kernel and sends a notification email to the admin or
root user. If it finds /usr/share/compile.tgz, it removes the
existing compile dir and replaces it with the content of (new)
archive. If the hash of /bsd does not match the stored one, no
relinking happens.

Idea from, joint work with and OK deraadt@
OK tb@ halex@
unnoticed by many

Revision 1.501 / (download) - annotate - [select for diffs], Tue Jun 6 13:59:37 2017 UTC (6 years, 11 months ago) by florian
Branch: MAIN
Changes since 1.500: +4 -2 lines
Diff to previous 1.500 (colored)

start slaacd as early as possible, right after pf and sysctl.conf are
setup.
Input & OK deraadt@

Revision 1.500 / (download) - annotate - [select for diffs], Sat Jun 3 22:59:09 2017 UTC (6 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.499: +3 -1 lines
Diff to previous 1.499 (colored)

We have been running a small awk program before installing the relinked libc.
Perform the same kind of test for relinked libcrypto, using an openssl
sequence (proposed by sthen)

Revision 1.499 / (download) - annotate - [select for diffs], Sat Jun 3 22:33:36 2017 UTC (6 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.498: +2 -1 lines
Diff to previous 1.498 (colored)

Immediately after mounting / read-write, chmod og-rwx the kernel.  Remote
prying eyes were already been hindered at determining kernel addresses, now
local prying eyes are also hindered.
ok tb rpe

Revision 1.498 / (download) - annotate - [select for diffs], Tue May 30 12:04:26 2017 UTC (6 years, 11 months ago) by tb
Branch: MAIN
Changes since 1.497: +7 -4 lines
Diff to previous 1.497 (colored)

Introduce a scary rc.conf(8) knob library_aslr=(YES|NO) to turn off the
reordering of libraries by rc(8). This way machines with very slow disk I/O
have a chance of booting within reasonable time now that libcrypto is also
randomized.

Discussed with various;
input & ok from deraadt ajacoutot

Revision 1.497 / (download) - annotate - [select for diffs], Mon May 29 10:24:06 2017 UTC (6 years, 11 months ago) by florian
Branch: MAIN
Changes since 1.496: +2 -2 lines
Diff to previous 1.496 (colored)

rc.d(8) for slaacd
OK phessler, deraadt

Revision 1.496 / (download) - annotate - [select for diffs], Mon May 29 09:44:01 2017 UTC (6 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.495: +2 -2 lines
Diff to previous 1.495 (colored)

Randomize link-order of libcrypto as we do with libc.  This library
has many small functions without significant local storage, therefore
less tail protection from -fstack-protector-strong to prevent their use
as ROP gadgets.  It is used in security contexts.  Also many functions
dribble pointers onto the stack, allowing discovery of gadgets via the
fixed relative addresses, so let's randomly bias those.
ok tedu jsing

The rc script will soon need a strategy for skipping this step on
machines with poor IO performance.  Or maybe do it less often?  However,
I don't see many more libraries we'll do this with, these are the two
most important ones.

Revision 1.495 / (download) - annotate - [select for diffs], Mon May 1 14:01:47 2017 UTC (7 years ago) by rpe
Branch: MAIN
Changes since 1.494: +27 -17 lines
Diff to previous 1.494 (colored)

Comments and spacing.

Revision 1.494 / (download) - annotate - [select for diffs], Tue Apr 18 23:06:50 2017 UTC (7 years, 1 month ago) by schwarze
Branch: MAIN
Changes since 1.493: +2 -3 lines
Diff to previous 1.493 (colored)

Simplify patching of motd(5), also making it agree better with the
documentation if the first line of the file is blank.
Quirk reported by Anthony Coulter <bsd at anthonycoulter dot name>.
OK rpe@

Revision 1.493 / (download) - annotate - [select for diffs], Sun Feb 26 16:51:18 2017 UTC (7 years, 2 months ago) by matthieu
Branch: MAIN
CVS Tags: OPENBSD_6_1_BASE, OPENBSD_6_1
Changes since 1.492: +2 -2 lines
Diff to previous 1.492 (colored)

Switch to xenodm(1).

Do it now deraadt@

Revision 1.492 / (download) - annotate - [select for diffs], Tue Dec 27 09:17:52 2016 UTC (7 years, 4 months ago) by jca
Branch: MAIN
Changes since 1.491: +2 -2 lines
Diff to previous 1.491 (colored)

Remove user uucp and group news from base.

Revision 1.491 / (download) - annotate - [select for diffs], Fri Nov 4 22:12:46 2016 UTC (7 years, 6 months ago) by rpe
Branch: MAIN
Changes since 1.490: +3 -1 lines
Diff to previous 1.490 (colored)

spacing

Revision 1.490 / (download) - annotate - [select for diffs], Fri Oct 7 05:47:24 2016 UTC (7 years, 7 months ago) by otto
Branch: MAIN
Changes since 1.489: +2 -2 lines
Diff to previous 1.489 (colored)

first set -max limit, then -cur, otherwise if -cur si higher than the current
max, it won't be set. noted by Evgeny Grin; ok millert@

Revision 1.489 / (download) - annotate - [select for diffs], Thu Oct 6 20:20:41 2016 UTC (7 years, 7 months ago) by reyk
Branch: MAIN
Changes since 1.488: +2 -2 lines
Diff to previous 1.488 (colored)

Add switchd

OK deraadt@

Revision 1.488 / (download) - annotate - [select for diffs], Thu Oct 6 19:32:23 2016 UTC (7 years, 7 months ago) by reyk
Branch: MAIN
Changes since 1.487: +3 -3 lines
Diff to previous 1.487 (colored)

Move vmd down as VMs might need the host's dhcpd, httpd etc. on startup.

OK mlarkin@ deraadt@

Revision 1.487 / (download) - annotate - [select for diffs], Tue Sep 27 20:18:34 2016 UTC (7 years, 7 months ago) by rpe
Branch: MAIN
Changes since 1.486: +6 -1 lines
Diff to previous 1.486 (colored)

Run acpidump(8) at system startup and store ACPI tables in the
/var/db/acpi directory. Later sendbug(1) will use this data in
bug reports. That directory is created by mtree.

idea from and OK deraadt
OK kettenis

Revision 1.486 / (download) - annotate - [select for diffs], Sun Jul 10 09:08:18 2016 UTC (7 years, 10 months ago) by rpe
Branch: MAIN
CVS Tags: OPENBSD_6_0_BASE, OPENBSD_6_0
Changes since 1.485: +2 -2 lines
Diff to previous 1.485 (colored)

Fix detection of /usr/lib on NFS.
Found by Frank Scheiner, thanks for reporting this.

OK krw, halex
'cool' deraadt

Revision 1.485 / (download) - annotate - [select for diffs], Sun May 29 15:36:06 2016 UTC (7 years, 11 months ago) by rpe
Branch: MAIN
Changes since 1.484: +12 -8 lines
Diff to previous 1.484 (colored)

Improve error handling in reorder_libs()

- run commands in subshell only if mktemp is successful
- on error just leave the for-loop but set _error=true
- cleanup tmpdirs afterwards
- set _error=true if the ro remount fails
- print appropriate final message depending on $_error

positive feedback from deraadt
OK krw

Revision 1.484 / (download) - annotate - [select for diffs], Fri May 27 17:03:45 2016 UTC (7 years, 11 months ago) by rpe
Branch: MAIN
Changes since 1.483: +4 -7 lines
Diff to previous 1.483 (colored)

No need to show the messages if we skip in case of /usr/lib on nfs.

OK deraadt

Revision 1.483 / (download) - annotate - [select for diffs], Fri May 27 16:49:08 2016 UTC (7 years, 11 months ago) by rpe
Branch: MAIN
Changes since 1.482: +4 -1 lines
Diff to previous 1.482 (colored)

Add function comments.

OK sthen, deraadt

Revision 1.482 / (download) - annotate - [select for diffs], Thu May 26 16:29:51 2016 UTC (7 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.481: +3 -3 lines
Diff to previous 1.481 (colored)

whitespace found during review

Revision 1.481 / (download) - annotate - [select for diffs], Thu May 26 14:59:48 2016 UTC (7 years, 11 months ago) by rpe
Branch: MAIN
Changes since 1.480: +32 -7 lines
Diff to previous 1.480 (colored)

- rename rebuildlibs() to reorder_libs()
- move the info message inside the function
- skip reordering if /usr/lib is on a nfs mounted filesystem
- temporarily remount rw if /usr/lib is on a ro ffs file-system

OK deraadt

Revision 1.480 / (download) - annotate - [select for diffs], Sun May 22 15:16:47 2016 UTC (7 years, 11 months ago) by rpe
Branch: MAIN
Changes since 1.479: +2 -2 lines
Diff to previous 1.479 (colored)

Use the -F flag of install(1) to ensure the file's content is flushed to disk.

OK deraadt

Revision 1.479 / (download) - annotate - [select for diffs], Sat May 14 08:21:40 2016 UTC (8 years ago) by jmc
Branch: MAIN
Changes since 1.478: +2 -2 lines
Diff to previous 1.478 (colored)

unhphenate the world: re-order -> reorder
sthen does not object

Revision 1.478 / (download) - annotate - [select for diffs], Thu May 5 21:52:16 2016 UTC (8 years ago) by sthen
Branch: MAIN
Changes since 1.477: +3 -1 lines
Diff to previous 1.477 (colored)

show what we're doing when reordering libraries, otherwise the text
above it is "starting network", which can make you think something is
broken when your machine is as slow as some of mine.

"Yeah, that's a pretty crappy machine" deraadt@

Revision 1.477 / (download) - annotate - [select for diffs], Wed Apr 27 14:49:11 2016 UTC (8 years ago) by ajacoutot
Branch: MAIN
Changes since 1.476: +16 -7 lines
Diff to previous 1.476 (colored)

We want to run sysmerge(8) a bit earlier in the boot process so that it has a
chance to update the *default* configuration of the important daemons.
Factorize rc.firsttime into a run_upgrade_script() function which takes the
script suffix name as an argument.
i.e. run_upgrade_script sysmerge / run_upgrade_script firsttime

discussed with deraadt@
ok deraadt@ rpe@

Revision 1.476 / (download) - annotate - [select for diffs], Wed Apr 27 09:17:53 2016 UTC (8 years ago) by rpe
Branch: MAIN
Changes since 1.475: +2 -2 lines
Diff to previous 1.475 (colored)

Use 'sort -V' which is actually meant to sort version numbers.

Noted by zhuk@
OK deraadt@

Revision 1.475 / (download) - annotate - [select for diffs], Tue Apr 26 14:56:14 2016 UTC (8 years ago) by deraadt
Branch: MAIN
Changes since 1.474: +32 -1 lines
Diff to previous 1.474 (colored)

Re-link (only the newest) libc.so, placing the objects in a random
order.
with shell script assistance from rpe

Revision 1.474 / (download) - annotate - [select for diffs], Tue Dec 29 19:41:24 2015 UTC (8 years, 4 months ago) by rpe
Branch: MAIN
CVS Tags: OPENBSD_5_9_BASE, OPENBSD_5_9
Changes since 1.473: +4 -8 lines
Diff to previous 1.473 (colored)

Replace single pattern case-blocks with simpler code.

OK halex@

Revision 1.473 / (download) - annotate - [select for diffs], Sun Dec 6 13:51:41 2015 UTC (8 years, 5 months ago) by rpe
Branch: MAIN
Changes since 1.472: +2 -2 lines
Diff to previous 1.472 (colored)

Add missing rc bits for rebound.

rc-wise OK aja@ jasper@

Revision 1.472 / (download) - annotate - [select for diffs], Sat Dec 5 09:55:18 2015 UTC (8 years, 5 months ago) by jasper
Branch: MAIN
Changes since 1.471: +2 -2 lines
Diff to previous 1.471 (colored)

add rcscript for vmd

ok mlarkin@
prompted by deraadt@

Revision 1.471 / (download) - annotate - [select for diffs], Wed Dec 2 20:39:57 2015 UTC (8 years, 5 months ago) by rpe
Branch: MAIN
Changes since 1.470: +2 -2 lines
Diff to previous 1.470 (colored)

Since version 1.467 of /etc/rc, it was no longer possible to add
shlib_dirs using /etc/rc.conf.local.

Fix from Jan Johansson, thanks.

OK krw@, halex@

Revision 1.470 / (download) - annotate - [select for diffs], Fri Nov 27 03:53:28 2015 UTC (8 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.469: +2 -2 lines
Diff to previous 1.469 (colored)

yppasswd went away

Revision 1.469 / (download) - annotate - [select for diffs], Tue Nov 10 20:34:58 2015 UTC (8 years, 6 months ago) by tim
Branch: MAIN
Changes since 1.468: +3 -3 lines
Diff to previous 1.468 (colored)

Fix typos in comments

Revision 1.468 / (download) - annotate - [select for diffs], Sun Nov 1 14:32:51 2015 UTC (8 years, 6 months ago) by rpe
Branch: MAIN
Changes since 1.467: +2 -2 lines
Diff to previous 1.467 (colored)

A missed backticks to $() conversion.

OK krw@

Revision 1.467 / (download) - annotate - [select for diffs], Sun Oct 18 21:33:18 2015 UTC (8 years, 7 months ago) by rpe
Branch: MAIN
Changes since 1.466: +25 -30 lines
Diff to previous 1.466 (colored)

Finish first round of rework of the rc script.

OK krw@ halex@

Revision 1.466 / (download) - annotate - [select for diffs], Sun Oct 18 03:51:11 2015 UTC (8 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.465: +2 -1 lines
Diff to previous 1.465 (colored)

Forcibly delete /var/run/ypbind.lock to prepare for the worst cases.
ok aja

Revision 1.465 / (download) - annotate - [select for diffs], Sat Oct 3 18:57:11 2015 UTC (8 years, 7 months ago) by renato
Branch: MAIN
Changes since 1.464: +2 -2 lines
Diff to previous 1.464 (colored)

Enable eigrpd(8) and eigrpctl(8) in the builds

ok deraadt@

Revision 1.464 / (download) - annotate - [select for diffs], Tue Sep 29 17:40:56 2015 UTC (8 years, 7 months ago) by rpe
Branch: MAIN
Changes since 1.463: +31 -25 lines
Diff to previous 1.463 (colored)

Besides the usual style changes:
- verify that kbd is executable and kbdtype is not empty
- use safer 'print --' to pipe the initial pf ruleset to pfctl
- simplify the ipsecctl if-block

Feedback and OK halex@
OK krw@

Revision 1.463 / (download) - annotate - [select for diffs], Sun Sep 13 13:29:22 2015 UTC (8 years, 8 months ago) by rpe
Branch: MAIN
Changes since 1.462: +23 -23 lines
Diff to previous 1.462 (colored)

- FOO=bar; export FOO -> export FOO=bar
- run domainname only with a non-empty /etc/defaultdomain file
- Make single-user if-block more intuitive, which also matches
  better what the comment actually says

OK halex@, krw@ on a similar diff

Revision 1.462 / (download) - annotate - [select for diffs], Sun Sep 13 09:22:05 2015 UTC (8 years, 8 months ago) by rpe
Branch: MAIN
Changes since 1.461: +14 -43 lines
Diff to previous 1.461 (colored)

Remove setup_X_sockets():
The creation of Unix sockets directories in /tmp for X happens right
after pruning /tmp. So the whole dance of checking for their
existence, ownership or permissions is not necessary. It's safe to
just create them with the right permissions if X is installed.

Changes to do_fsck():
Remove the _flags variable and pass flags to fsck directly with "$@".

Feedback and OK halex@
OK krw@ on a similar diff

Revision 1.461 / (download) - annotate - [select for diffs], Sat Sep 12 14:48:06 2015 UTC (8 years, 8 months ago) by sthen
Branch: MAIN
Changes since 1.460: +2 -2 lines
Diff to previous 1.460 (colored)

Provide an ftpproxy6 rc script. ftp-proxy can only open one listening socket
at a time, so a second instance of the daemon is required.

OK mikeb stsp ajacoutot

Revision 1.460 / (download) - annotate - [select for diffs], Fri Aug 28 18:10:46 2015 UTC (8 years, 8 months ago) by rpe
Branch: MAIN
Changes since 1.459: +21 -19 lines
Diff to previous 1.459 (colored)

Changes for start_daemon():
- use more descriptive variable name

Changes for make_keys():
- use variables for file paths
- key -> keys in message
- take into account the return codes of isakmpd private *and* public
  key generation

OK krw@ halex@

Revision 1.459 / (download) - annotate - [select for diffs], Sat Aug 22 23:32:18 2015 UTC (8 years, 8 months ago) by rpe
Branch: MAIN
Changes since 1.458: +12 -8 lines
Diff to previous 1.458 (colored)

- add usage info
- initialize _ban variable
- style

OK halex@

Revision 1.458 / (download) - annotate - [select for diffs], Sat Aug 22 10:45:59 2015 UTC (8 years, 8 months ago) by rpe
Branch: MAIN
Changes since 1.457: +2 -2 lines
Diff to previous 1.457 (colored)

Restore previous behaviour for wsconsctl_conf().

In wsconsctl.conf configuration variables can contain doublequotes
which are removed by the shell if wsconsctl is used interactively.

In scripts, without using eval, these doublequotes are preserved
and the wsconsctl command complains about "illegal character in
input".

Found by and OK jmc@
With feedback from and OK krw@, halex@

Revision 1.457 / (download) - annotate - [select for diffs], Thu Aug 13 17:24:42 2015 UTC (8 years, 9 months ago) by rpe
Branch: MAIN
Changes since 1.456: +17 -33 lines
Diff to previous 1.456 (colored)

Changes to sysctl_conf(), mixerctl_conf() and wsconsctl_conf():
- no need to check for non-empty *.conf files, stripcom handles that now
- pipe stripcom output directly to while-read-loop
- quote the argument to the *ctl commands
- no need to double shutup mixerctl, -q already means quiet

OK krw@, halex@

Revision 1.456 / (download) - annotate - [select for diffs], Wed Aug 12 17:27:27 2015 UTC (8 years, 9 months ago) by rpe
Branch: MAIN
Changes since 1.455: +31 -37 lines
Diff to previous 1.455 (colored)

Start the rework of the /etc/rc shell script.

General changes:
- apply a similar 'style' as used in the installer scripts
- improve comments to be more to the point, remove where code is obvious
- document usage of functions if they have arguments
- rename variables where it improves readability
- replace really old-school shell code with more contemporary idioms

Changes to stripcom():
- skip empty files (eleminates tests for this before calling stripcom)
- remove {} around the while-loop, feed file directly
- instead of continue if empty and then print, print only if non-empty
- use the safer "print -r --" instead of plain "echo"
- quote "$_line" on output to prevent globbing

Changes to update_limit():
- use {,-cur,-max} instead of "" -cur -max
- eleminate if-block with reverse test and continue

OK halex@ krw@

Revision 1.455 / (download) - annotate - [select for diffs], Mon Aug 3 04:19:25 2015 UTC (8 years, 9 months ago) by yasuoka
Branch: MAIN
CVS Tags: OPENBSD_5_8_BASE, OPENBSD_5_8
Changes since 1.454: +2 -2 lines
Diff to previous 1.454 (colored)

Place etc/defaults/radiusd.conf and etc/rc.d/radiusd.  Modify etc/rc
to hook the rc script and modify etc/rc.conf to make it disable by
default.  Also add an entry for /etc/radiusd.conf to etc/changelist
and etc/mtree/special.

ok deraadt

Revision 1.454 / (download) - annotate - [select for diffs], Mon Jul 20 06:59:39 2015 UTC (8 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.453: +4 -1 lines
Diff to previous 1.453 (colored)

Disable Strict Bourne shell mode for /etc/rc and /etc/netstart to be
able to use ksh syntax within these scripts. This way init doesn't
need to be changed, which starts /etc/rc using /bin/sh and people
can still use "sh /etc/netstart ifname".

Idea from and OK halex@
OK deraadt@ krw@ guenther@

Revision 1.453 / (download) - annotate - [select for diffs], Sun Jul 19 04:44:36 2015 UTC (8 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.452: +5 -5 lines
Diff to previous 1.452 (colored)

Replace test command with [].

OK halex@ krw@

Revision 1.452 / (download) - annotate - [select for diffs], Sat Jul 18 21:12:40 2015 UTC (8 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.451: +9 -17 lines
Diff to previous 1.451 (colored)

Put the opening curley brackets on the same line as the function name.

OK krw@ halex@

Revision 1.451 / (download) - annotate - [select for diffs], Sat Jul 18 00:37:23 2015 UTC (8 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.450: +12 -12 lines
Diff to previous 1.450 (colored)

- remove trailing blanks introduced in previous commit
- no space in redirections like </foo or >$bar
- few other minor whitespaces

OK krw@

Revision 1.450 / (download) - annotate - [select for diffs], Sat Jul 18 00:03:34 2015 UTC (8 years, 10 months ago) by rpe
Branch: MAIN
Changes since 1.449: +50 -38 lines
Diff to previous 1.449 (colored)

Improve comments
- Add comments for functions
- Start comments with capital letters
- End comments with a full stop
- Allow comments to extend up to column 80

OK krw@

Revision 1.449 / (download) - annotate - [select for diffs], Sat May 2 09:35:44 2015 UTC (9 years ago) by ajacoutot
Branch: MAIN
Changes since 1.448: +5 -5 lines
Diff to previous 1.448 (colored)

Drop pf_rules and ipsec_rules from rc.conf(5); it shouldn't have been made
tweakable: there's no real point and these files support the 'include' option so
one can always get its config from whatever path... especially useful when
testing a new ruleset.

man page inputs from schwarze@
ok halex@ schwarze@ rpe@ deraadt@

Revision 1.448 / (download) - annotate - [select for diffs], Wed Mar 11 14:48:58 2015 UTC (9 years, 2 months ago) by krw
Branch: MAIN
Changes since 1.447: +2 -2 lines
Diff to previous 1.447 (colored)

'rc.firstime' -> 'rc.firsttime' in comment.

Diff from Navan Carson via tech@

Revision 1.447 / (download) - annotate - [select for diffs], Thu Jan 22 19:00:24 2015 UTC (9 years, 3 months ago) by krw
Branch: MAIN
CVS Tags: OPENBSD_5_7_BASE, OPENBSD_5_7
Changes since 1.446: +5 -5 lines
Diff to previous 1.446 (colored)

Use /etc/services names in all the default pf rules (most already
did). This allows any local changes to /etc/services to be effective
if all you have is the default.

Issue pointed out by Brian S. Vangsgaard on bugs@. Thanks!

ok phessler@ deraadt@

Revision 1.446 / (download) - annotate - [select for diffs], Wed Dec 3 20:13:49 2014 UTC (9 years, 5 months ago) by florian
Branch: MAIN
Changes since 1.445: +2 -4 lines
Diff to previous 1.445 (colored)

Unhook rtsol(8) and rtsold(8) from the build.
OK deraadt@

Revision 1.445 / (download) - annotate - [select for diffs], Sun Nov 30 18:06:45 2014 UTC (9 years, 5 months ago) by dcoppa
Branch: MAIN
Changes since 1.444: +2 -2 lines
Diff to previous 1.444 (colored)


Fix comment: We don't use RC4 anymore, it's better to be more
generic.

ok miod@

Revision 1.444 / (download) - annotate - [select for diffs], Mon Nov 17 18:19:08 2014 UTC (9 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.443: +4 -4 lines
Diff to previous 1.443 (colored)

Make /var/tmp a symbolic link to /tmp.  The creation of /var/tmp in the
often space-constrained /var filesystem was a historical mistake.  There
are big implications for the daemons which assume they won't run out of
space, and this is a first step towards trying to improve the situation.

Move /tmp to the same 7-day expiration rules that /var/tmp had.
vi.recover works just as well as before, except on memory filesystems;
indicating that vi should be repaired to write files into homedirs or
something.

done with rpe
ok many

Revision 1.443 / (download) - annotate - [select for diffs], Wed Nov 5 17:07:59 2014 UTC (9 years, 6 months ago) by millert
Branch: MAIN
Changes since 1.442: +3 -3 lines
Diff to previous 1.442 (colored)

When clearing /tmp, use "-maxdepth -1" instead of "-type d -prune".
This is easier to understand and fixes a bug where the "-type d -prune"
was misplaced as noticed by pirofti@.  OK deraadt@

Revision 1.442 / (download) - annotate - [select for diffs], Mon Sep 15 22:28:58 2014 UTC (9 years, 8 months ago) by matthieu
Branch: MAIN
Changes since 1.441: +2 -2 lines
Diff to previous 1.441 (colored)

Remove sendmail tentacles. ok krw@ ajacoutot@

Revision 1.441 / (download) - annotate - [select for diffs], Tue Aug 26 19:33:48 2014 UTC (9 years, 8 months ago) by robert
Branch: MAIN
Changes since 1.440: +2 -2 lines
Diff to previous 1.440 (colored)

usr.sbin

Revision 1.440 / (download) - annotate - [select for diffs], Fri Aug 22 19:19:25 2014 UTC (9 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.439: +2 -15 lines
Diff to previous 1.439 (colored)

disable use of bind in base; in the base use nsd/unbound instead.
a proper & complete bind port will show up.
discussed with many for years

Revision 1.439 / (download) - annotate - [select for diffs], Sun Aug 17 14:43:34 2014 UTC (9 years, 9 months ago) by ajacoutot
Branch: MAIN
Changes since 1.438: +2 -2 lines
Diff to previous 1.438 (colored)

Execute /etc/netstart using sh(1) instead of sourcing it.
Committing early to make sure we have time to fix any side-effect.

ok deraadt@

Revision 1.438 / (download) - annotate - [select for diffs], Mon Aug 4 20:17:09 2014 UTC (9 years, 9 months ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_5_6_BASE, OPENBSD_5_6
Changes since 1.437: +2 -2 lines
Diff to previous 1.437 (colored)

enable httpd; ok deraadt@

Revision 1.437 / (download) - annotate - [select for diffs], Sat Jul 19 21:27:16 2014 UTC (9 years, 10 months ago) by bluhm
Branch: MAIN
Changes since 1.436: +7 -2 lines
Diff to previous 1.436 (colored)

Print a warning message if the files with the random seed are not
writeable during shutdown.  This prevents ugly error messages when
the machine is rebooted from singe-user without mounting the file
systems read-write.
suggested by deraadt@

Revision 1.436 / (download) - annotate - [select for diffs], Fri Jul 18 18:17:28 2014 UTC (9 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.435: +2 -2 lines
Diff to previous 1.435 (colored)

ugly ugly whitespace

Revision 1.435 / (download) - annotate - [select for diffs], Thu Jul 17 15:08:29 2014 UTC (9 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.434: +2 -2 lines
Diff to previous 1.434 (colored)

sh netstart, instead of using .
We don't want any of the variables created inside netstart to infect the
rc script.
ok claudio sthen aja

Revision 1.434 / (download) - annotate - [select for diffs], Mon Jul 14 10:10:44 2014 UTC (9 years, 10 months ago) by ajacoutot
Branch: MAIN
Changes since 1.433: +1 -3 lines
Diff to previous 1.433 (colored)

quiet /etc/rc.shutdown, it may not exist.

ok deraadt@

Revision 1.433 / (download) - annotate - [select for diffs], Mon Jul 14 09:44:45 2014 UTC (9 years, 10 months ago) by ajacoutot
Branch: MAIN
Changes since 1.432: +2 -2 lines
Diff to previous 1.432 (colored)

This isn't C.

Revision 1.432 / (download) - annotate - [select for diffs], Mon Jul 14 09:44:07 2014 UTC (9 years, 10 months ago) by ajacoutot
Branch: MAIN
Changes since 1.431: +5 -2 lines
Diff to previous 1.431 (colored)

Only set kern.securelevel=1 if it was not lowered nor bumped by
rc.securelevel,

with deraadt@

Revision 1.431 / (download) - annotate - [select for diffs], Mon Jul 14 09:04:02 2014 UTC (9 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.430: +5 -11 lines
Diff to previous 1.430 (colored)

rc.{local,securelevel,shutdown} become examples.  If versions of them
are created in /etc, they are executed (they used to be sourced) to
avoid polluting the rc variable space.  The powerdown= and securelevel=
features are removed; they are likely only used by 2 people.  the
secureleve is now always raised; this is the only sensible default.
ok ajacoutot

Revision 1.430 / (download) - annotate - [select for diffs], Mon Jul 14 03:45:55 2014 UTC (9 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.429: +2 -2 lines
Diff to previous 1.429 (colored)

check for existance of rc.shutdown, before sourcing it

Revision 1.429 / (download) - annotate - [select for diffs], Sun Jul 13 12:12:30 2014 UTC (9 years, 10 months ago) by claudio
Branch: MAIN
Changes since 1.428: +43 -32 lines
Diff to previous 1.428 (colored)

rc bits for iscsid. Start iscsid as early as possible. Use the new -N
flag for fsck and mount to check and mount the iscsi file systems (marked
with option net) right after the mount -a.
"Get it in" deraadt@
rpe@ is OK with this going in but it may need further changes

Revision 1.428 / (download) - annotate - [select for diffs], Sat Jul 12 10:14:03 2014 UTC (9 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.427: +6 -3 lines
Diff to previous 1.427 (colored)

Make rc.conf a parsed configuration file and stop sourcing it as a shell
script.
From now on rc.conf has a fixed syntax (key=val) and it is not allowed
to add anything to it besides the supported syntax, it all going to be
ignored.

discussed with and help from deraadt@ and halex@

Revision 1.427 / (download) - annotate - [select for diffs], Fri Apr 25 17:59:53 2014 UTC (10 years ago) by bluhm
Branch: MAIN
Changes since 1.426: +9 -11 lines
Diff to previous 1.426 (colored)

Redirecting stderr to /dev/null suppresses all errors.  Instead use
the new status=none feature to make dd quiet.
OK halex@

Revision 1.426 / (download) - annotate - [select for diffs], Thu Apr 24 15:05:10 2014 UTC (10 years ago) by tedu
Branch: MAIN
Changes since 1.425: +2 -2 lines
Diff to previous 1.425 (colored)

rm rwhod tentacles

Revision 1.425 / (download) - annotate - [select for diffs], Wed Apr 23 09:56:56 2014 UTC (10 years ago) by ajacoutot
Branch: MAIN
Changes since 1.424: +2 -3 lines
Diff to previous 1.424 (colored)

Remove krb5 bits from rc(8).

ok reyk@

Revision 1.424 / (download) - annotate - [select for diffs], Sat Apr 19 16:07:09 2014 UTC (10 years, 1 month ago) by henning
Branch: MAIN
Changes since 1.423: +3 -2 lines
Diff to previous 1.423 (colored)

use "!received-on any" to absolutely ensure that we're not forwarding
carp, rpc or nfs traffic in the initial ruleset active during network
startup for a short time (or a much longer time if /etc/pf.conf is
screwed up). ok phessler

Revision 1.423 / (download) - annotate - [select for diffs], Sat Mar 15 22:13:36 2014 UTC (10 years, 2 months ago) by sthen
Branch: MAIN
Changes since 1.422: +3 -3 lines
Diff to previous 1.422 (colored)

Enable Unbound in base, ok deraadt@

Revision 1.422 / (download) - annotate - [select for diffs], Thu Mar 13 10:11:01 2014 UTC (10 years, 2 months ago) by florian
Branch: MAIN
Changes since 1.421: +2 -2 lines
Diff to previous 1.421 (colored)

Unhook httpd(8) from build; etc bits
OK krw@, gilles@, lteo@, tedu@, todd@, benno@, sthen@
"The time is right." and much help getting the show on
the road deraadt@

Revision 1.421 / (download) - annotate - [select for diffs], Wed Feb 19 21:47:15 2014 UTC (10 years, 2 months ago) by schwarze
Branch: MAIN
CVS Tags: OPENBSD_5_5_BASE, OPENBSD_5_5
Changes since 1.420: +2 -1 lines
Diff to previous 1.420 (colored)

Ignore blank characters at the end of ${pkg_scripts} in order
to refrain from trying to execute /etc/rc.d/ in that case.
Problem noticed by jasper@.

Opinions on this patch vary: "much nicer, ok" sthen@
"good god, what horrible shell voodoo, ok" ajacoutot@

Revision 1.420 / (download) - annotate - [select for diffs], Sun Jan 19 09:39:04 2014 UTC (10 years, 4 months ago) by claudio
Branch: MAIN
Changes since 1.419: +5 -1 lines
Diff to previous 1.419 (colored)

Extend the initial pf ruleset to explicitly allow dhcp / bootp and dhcpv6.
Our dhclient only uses the bpf tap for broadcast packets (which bypass
pf) but lease renewals will use a regular socket and are blocked without
this change.  Rules are written so that accidential forwarding of packets
is not possible.
Diff from brad@, OK henning@, benno@, mikeb@

Revision 1.419 / (download) - annotate - [select for diffs], Fri Jan 3 23:24:19 2014 UTC (10 years, 4 months ago) by millert
Branch: MAIN
Changes since 1.418: +3 -6 lines
Diff to previous 1.418 (colored)

Use kern.securelevel to determine whether or not we are in single
user mode now that init no longer raises securelevel during reboot.
OK deraadt@

Revision 1.418 / (download) - annotate - [select for diffs], Sat Dec 28 01:00:18 2013 UTC (10 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.417: +4 -2 lines
Diff to previous 1.417 (colored)

document a hack we want fixed later

Revision 1.417 / (download) - annotate - [select for diffs], Fri Dec 27 23:43:39 2013 UTC (10 years, 4 months ago) by rpe
Branch: MAIN
Changes since 1.416: +4 -3 lines
Diff to previous 1.416 (colored)

- add chmod of seedfile in /etc
- use its return code for single/multiuser detection

ok deraadt

Revision 1.416 / (download) - annotate - [select for diffs], Fri Dec 27 23:40:29 2013 UTC (10 years, 4 months ago) by rpe
Branch: MAIN
Changes since 1.415: +3 -3 lines
Diff to previous 1.415 (colored)

re-use random_seed in shutdown section

ok deraadt

Revision 1.415 / (download) - annotate - [select for diffs], Fri Dec 27 22:34:40 2013 UTC (10 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.414: +4 -1 lines
Diff to previous 1.414 (colored)

create a seed file for the bootloader in /etc/random.seed

Revision 1.414 / (download) - annotate - [select for diffs], Fri Dec 27 22:33:27 2013 UTC (10 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.413: +8 -11 lines
Diff to previous 1.413 (colored)

nest random_seed() contents into a single redirection
idea from rpe

Revision 1.413 / (download) - annotate - [select for diffs], Fri Dec 27 22:15:40 2013 UTC (10 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.412: +23 -23 lines
Diff to previous 1.412 (colored)

re-do shutdown operations.  Run the scripts if we may; take down carp
unconditionally, and then do the optional powerdown
discussed at length with rpe

Revision 1.412 / (download) - annotate - [select for diffs], Fri Dec 27 04:21:48 2013 UTC (10 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.411: +2 -2 lines
Diff to previous 1.411 (colored)

when forcing a re-key, might as well toss in dmesg as additional seed
material

Revision 1.411 / (download) - annotate - [select for diffs], Fri Dec 27 04:21:03 2013 UTC (10 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.410: +5 -5 lines
Diff to previous 1.410 (colored)

all the random devices have been the same for a while; so let us avoid
being obtuse and use /dev/random

Revision 1.410 / (download) - annotate - [select for diffs], Thu Dec 26 18:05:31 2013 UTC (10 years, 4 months ago) by espie
Branch: MAIN
Changes since 1.409: +6 -2 lines
Diff to previous 1.409 (colored)

make absence of pkg_scripts non silent, after nits from theo and halex.
okay rpe@, kirby@

Revision 1.409 / (download) - annotate - [select for diffs], Tue Dec 17 09:19:45 2013 UTC (10 years, 5 months ago) by halex
Branch: MAIN
Changes since 1.408: +1 -5 lines
Diff to previous 1.408 (colored)

Run spamd-setup from within /etc/rc.d/spamd, and take $spamd_black
into consideration.
Diff from Maurice Janssen, thanks!

ok rpe@ giovanni@

Revision 1.408 / (download) - annotate - [select for diffs], Sun Dec 15 17:40:45 2013 UTC (10 years, 5 months ago) by tedu
Branch: MAIN
Changes since 1.407: +2 -2 lines
Diff to previous 1.407 (colored)

remove popa3d etc tendrils

Revision 1.407 / (download) - annotate - [select for diffs], Fri Aug 9 16:24:54 2013 UTC (10 years, 9 months ago) by ajacoutot
Branch: MAIN
Changes since 1.406: +5 -4 lines
Diff to previous 1.406 (colored)

Add rc.d(8) scripts for ipropd-master and ipropd-slave.

ok deraadt@

Revision 1.406 / (download) - annotate - [select for diffs], Sat Jun 1 14:06:20 2013 UTC (10 years, 11 months ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_5_4_BASE, OPENBSD_5_4
Changes since 1.405: +2 -2 lines
Diff to previous 1.405 (colored)

hook up slowcgi to the tree, including /etc glue and a sample configuration
snippet; ok florian@

Revision 1.405 / (download) - annotate - [select for diffs], Sun Nov 18 18:29:10 2012 UTC (11 years, 6 months ago) by ajacoutot
Branch: MAIN
CVS Tags: OPENBSD_5_3_BASE, OPENBSD_5_3
Changes since 1.404: +2 -2 lines
Diff to previous 1.404 (colored)

Remove pointless local declaration.

ok halex@

Revision 1.404 / (download) - annotate - [select for diffs], Sun Nov 4 21:47:22 2012 UTC (11 years, 6 months ago) by kettenis
Branch: MAIN
Changes since 1.403: +2 -2 lines
Diff to previous 1.403 (colored)

Start ldomd(8).

Revision 1.403 / (download) - annotate - [select for diffs], Thu Sep 20 12:51:43 2012 UTC (11 years, 7 months ago) by yasuoka
Branch: MAIN
Changes since 1.402: +2 -2 lines
Diff to previous 1.402 (colored)

Enable npppd and npppctl in default build.  Add npppd to rc and
install sample configs to /etc/.

ok claudio deraadt henning mcbride

Revision 1.402 / (download) - annotate - [select for diffs], Sun Aug 26 19:25:19 2012 UTC (11 years, 8 months ago) by ajacoutot
Branch: MAIN
Changes since 1.401: +4 -5 lines
Diff to previous 1.401 (colored)

Hook up nginx to rc(8).

ok deraadt@ robert@

Revision 1.401 / (download) - annotate - [select for diffs], Mon Aug 20 12:37:52 2012 UTC (11 years, 9 months ago) by dlg
Branch: MAIN
Changes since 1.400: +3 -2 lines
Diff to previous 1.400 (colored)

wire up the bits for tftp-proxy, which is called tftpproxy from rc.d's
point of view.

mostly ok sthen@ ajacoutot@, who were discussing the feng shui of the
start_daemons chunk

Revision 1.400 / (download) - annotate - [select for diffs], Fri Apr 6 15:11:30 2012 UTC (12 years, 1 month ago) by jsing
Branch: MAIN
CVS Tags: OPENBSD_5_2_BASE, OPENBSD_5_2
Changes since 1.399: +0 -10 lines
Diff to previous 1.399 (colored)

tedu the raidctl.

ok deraadt@

Revision 1.399 / (download) - annotate - [select for diffs], Sat Mar 10 10:37:13 2012 UTC (12 years, 2 months ago) by dlg
Branch: MAIN
Changes since 1.398: +3 -3 lines
Diff to previous 1.398 (colored)

ypbind likes a ypserv to talk to, and ypldap pretends to be ypserv.
this diff starts ypldap before ypbind instead of after.

ok deraadt@ ajacoutot@

Revision 1.398 / (download) - annotate - [select for diffs], Mon Mar 5 19:56:43 2012 UTC (12 years, 2 months ago) by dlg
Branch: MAIN
Changes since 1.397: +2 -2 lines
Diff to previous 1.397 (colored)

add tftpd to the network daemons list just after ftpd and ftpproxy.

reminded by mikeb@
ok sthen@

Revision 1.397 / (download) - annotate - [select for diffs], Fri Dec 9 14:52:26 2011 UTC (12 years, 5 months ago) by ratchov
Branch: MAIN
CVS Tags: OPENBSD_5_1_BASE, OPENBSD_5_1
Changes since 1.396: +2 -2 lines
Diff to previous 1.396 (colored)

Handle aucat -> sndiod name change, and enable sndiod by default. Mostly
from ajacoutot@.

ok deraadt ajacoutot

Revision 1.396 / (download) - annotate - [select for diffs], Thu Oct 13 07:54:06 2011 UTC (12 years, 7 months ago) by ajacoutot
Branch: MAIN
Changes since 1.395: +5 -4 lines
Diff to previous 1.395 (colored)

Start ldapd(8) earlier so that ypldap(8) can properly run (an LDAP
server _must_ be running and accessible before ypldap is started).

Add a proper pexp in the ypldap rc script.

discussed with pyr@ robert@ deraadt@
ok deraadt@

Revision 1.395 / (download) - annotate - [select for diffs], Fri Oct 7 16:36:26 2011 UTC (12 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.394: +6 -1 lines
Diff to previous 1.394 (colored)

The new ypbind changes requires that the domainname be set before
rc.conf is run.  There's no real downside.
ok aja

Revision 1.394 / (download) - annotate - [select for diffs], Thu Oct 6 20:49:25 2011 UTC (12 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.393: +1 -6 lines
Diff to previous 1.393 (colored)

ccd goes to the attic
discussed with jsing and millert

Revision 1.393 / (download) - annotate - [select for diffs], Fri Sep 16 10:11:20 2011 UTC (12 years, 8 months ago) by robert
Branch: MAIN
Changes since 1.392: +2 -2 lines
Diff to previous 1.392 (colored)

Add a script for popa3d to support running it outside of inetd.

Revision 1.392 / (download) - annotate - [select for diffs], Thu Jul 28 19:09:16 2011 UTC (12 years, 9 months ago) by halex
Branch: MAIN
CVS Tags: OPENBSD_5_0_BASE, OPENBSD_5_0
Changes since 1.391: +2 -2 lines
Diff to previous 1.391 (colored)

supress empty rc.firsttime email and add hostname to the subject line

ok deraadt krw

Revision 1.391 / (download) - annotate - [select for diffs], Wed Jul 20 10:00:13 2011 UTC (12 years, 10 months ago) by halex
Branch: MAIN
Changes since 1.390: +2 -2 lines
Diff to previous 1.390 (colored)

remove an unneeded trailing semicolon

Revision 1.390 / (download) - annotate - [select for diffs], Wed Jul 20 09:56:00 2011 UTC (12 years, 10 months ago) by halex
Branch: MAIN
Changes since 1.389: +16 -25 lines
Diff to previous 1.389 (colored)

cleanup of fill_baddynamic()

ok krw@

Revision 1.389 / (download) - annotate - [select for diffs], Tue Jul 19 13:50:49 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.388: +4 -15 lines
Diff to previous 1.388 (colored)

random seed handling can now be done fairly early, well, as soon as
we are beyond the nfs diskless /var and /usr mounting.  Issue also
spotted by Hugo Villeneuve, attempt at repair by me.  Let's see how it
works out in practice...
looked at by krw, too

Revision 1.388 / (download) - annotate - [select for diffs], Tue Jul 19 13:49:07 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.387: +20 -19 lines
Diff to previous 1.387 (colored)

Now that fill_baddynamic() is being called much earlier, it cannot use
grep in a NFS diskless environment.  Found and fixed by Hugo Villeneuve

Revision 1.387 / (download) - annotate - [select for diffs], Mon Jul 18 21:01:23 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.386: +3 -3 lines
Diff to previous 1.386 (colored)

put aucat with network daemons for now, until a better solution is found

Revision 1.386 / (download) - annotate - [select for diffs], Mon Jul 18 17:05:29 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.385: +3 -3 lines
Diff to previous 1.385 (colored)

move aucat very early, to cope with pkgs; ok aja

Revision 1.385 / (download) - annotate - [select for diffs], Mon Jul 11 17:20:09 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.384: +3 -3 lines
Diff to previous 1.384 (colored)

there is a usage case where ypldap can be used without the local
domainname being set.  adjust the scripts to start it in that way.
discussed with pyr

Revision 1.384 / (download) - annotate - [select for diffs], Sat Jul 9 01:30:27 2011 UTC (12 years, 10 months ago) by halex
Branch: MAIN
Changes since 1.383: +3 -3 lines
Diff to previous 1.383 (colored)

tee the output from rc.firsttime to /dev/tty before passing it to mail(1)
so we can enjoy it on the screen as well

ok deraadt@

Revision 1.383 / (download) - annotate - [select for diffs], Fri Jul 8 22:20:05 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.382: +3 -3 lines
Diff to previous 1.382 (colored)

re-add ospfd/ospf6d support which got lost, and build scripts for them

Revision 1.382 / (download) - annotate - [select for diffs], Fri Jul 8 22:03:56 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.381: +2 -3 lines
Diff to previous 1.381 (colored)

early daemons fit on a line

Revision 1.381 / (download) - annotate - [select for diffs], Fri Jul 8 21:42:52 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.380: +2 -11 lines
Diff to previous 1.380 (colored)

move the pflog0 setup to the pflogd script and only
do that if pf is actually enabled (rely on pfctl -si)

requested by deraadt@

Revision 1.380 / (download) - annotate - [select for diffs], Fri Jul 8 16:20:13 2011 UTC (12 years, 10 months ago) by ajacoutot
Branch: MAIN
Changes since 1.379: +7 -7 lines
Diff to previous 1.379 (colored)

Forgot to commit that part yesterday, spotted by sthen@

Revision 1.379 / (download) - annotate - [select for diffs], Fri Jul 8 09:48:18 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.378: +12 -44 lines
Diff to previous 1.378 (colored)

simplify, shorten, and "subtly and cleverly" rearrange some daemon
startups according to rules that some of us understand.  it may come of
sounding cocky, but any step beyond that would end up with a dependency
graph which will never happen.  this file is now ~60% of the length a
week ago.
ok guenther, robert, aja and people who will not test it until it is in

Revision 1.378 / (download) - annotate - [select for diffs], Fri Jul 8 04:54:12 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.377: +4 -3 lines
Diff to previous 1.377 (colored)

fix boot output and make sure spamlogd is only started when needed

Revision 1.377 / (download) - annotate - [select for diffs], Fri Jul 8 02:15:34 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.376: +6 -15 lines
Diff to previous 1.376 (colored)

Switch amd and spamlogd to rc scripts and make sure that the
rc_pre() functions are returning correctly. This change
also simplyfies the changes because false || return 1 can be replaced
with false if that's the last call. thanks halex@!

Revision 1.376 / (download) - annotate - [select for diffs], Fri Jul 8 02:02:02 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.375: +10 -18 lines
Diff to previous 1.375 (colored)

Small bits of fluff before the final re-organization
ok halex

Revision 1.375 / (download) - annotate - [select for diffs], Fri Jul 8 01:43:59 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.374: +1 -20 lines
Diff to previous 1.374 (colored)

ARGH!  the third part: socket handling cleanup

Revision 1.374 / (download) - annotate - [select for diffs], Fri Jul 8 01:43:09 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.373: +1 -35 lines
Diff to previous 1.373 (colored)

Oops, the second half of moving the key chunks

Revision 1.373 / (download) - annotate - [select for diffs], Fri Jul 8 01:41:25 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.372: +68 -1 lines
Diff to previous 1.372 (colored)

Move various bits of key generation in rc into one function, which we
can run surprisingly early.  Move the X socket directory creation code
into a function too.
robert liked it

Revision 1.372 / (download) - annotate - [select for diffs], Fri Jul 8 00:54:04 2011 UTC (12 years, 10 months ago) by ajacoutot
Branch: MAIN
Changes since 1.371: +2 -12 lines
Diff to previous 1.371 (colored)

Add the nfs startup scripts.

ok robert@

Revision 1.371 / (download) - annotate - [select for diffs], Fri Jul 8 00:51:52 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.370: +3 -8 lines
Diff to previous 1.370 (colored)

Give up on btd(8) startup until it can prove itself

Revision 1.370 / (download) - annotate - [select for diffs], Fri Jul 8 00:50:09 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.369: +2 -4 lines
Diff to previous 1.369 (colored)

switch pflogd to rc.d

Revision 1.369 / (download) - annotate - [select for diffs], Fri Jul 8 00:17:15 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.368: +2 -2 lines
Diff to previous 1.368 (colored)

only start spamlogd if spamd_flags != NO and spamd_black = NO
spotted by halex@

Revision 1.368 / (download) - annotate - [select for diffs], Fri Jul 8 00:15:19 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.367: +2 -2 lines
Diff to previous 1.367 (colored)

make rc_daemons use start_daemon instead of calling the script directly

Revision 1.367 / (download) - annotate - [select for diffs], Thu Jul 7 23:53:05 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.366: +4 -2 lines
Diff to previous 1.366 (colored)

oops, the netstart for pfsync *MUST* have the conditional

Revision 1.366 / (download) - annotate - [select for diffs], Thu Jul 7 23:47:22 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.365: +1 -9 lines
Diff to previous 1.365 (colored)

disable the afs enable stuff.  when nnpfs is re-enabled, that can be added
at the right place.

Revision 1.365 / (download) - annotate - [select for diffs], Thu Jul 7 23:29:45 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.364: +10 -16 lines
Diff to previous 1.364 (colored)

add scripts for aucat and spamd and switch rc to use them

Revision 1.364 / (download) - annotate - [select for diffs], Thu Jul 7 23:09:46 2011 UTC (12 years, 10 months ago) by guenther
Branch: MAIN
Changes since 1.363: +2 -3 lines
Diff to previous 1.363 (colored)

Eliminate some $? tests by rolling the command into the condition

ok halex@

Revision 1.363 / (download) - annotate - [select for diffs], Thu Jul 7 22:57:29 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.362: +2 -2 lines
Diff to previous 1.362 (colored)

oops, removed one absolute path which is needed

Revision 1.362 / (download) - annotate - [select for diffs], Thu Jul 7 22:53:39 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.361: +2 -6 lines
Diff to previous 1.361 (colored)

kvm_mkdb and dev_mkdb have been reliable for years, so we can run them
silently now.
ok guenther

Revision 1.361 / (download) - annotate - [select for diffs], Thu Jul 7 22:47:30 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.360: +2 -4 lines
Diff to previous 1.360 (colored)

We don't need a conditional around the pfsync start.

(As a reminder to others who spot this weirdness later and get
confused like I did:  netstart never starts pfsync automatically,
because it would screw the states.  That is why there is this 2nd
manual netstart run for pfsync)

ok mpf

Revision 1.360 / (download) - annotate - [select for diffs], Thu Jul 7 22:30:37 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.359: +4 -8 lines
Diff to previous 1.359 (colored)

add a script for btd and replace the rc parts

Revision 1.359 / (download) - annotate - [select for diffs], Thu Jul 7 22:23:56 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.358: +2 -9 lines
Diff to previous 1.358 (colored)

add wsmoused script and switch xdm and wsmoused in rc

Revision 1.358 / (download) - annotate - [select for diffs], Thu Jul 7 21:00:59 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.357: +3 -3 lines
Diff to previous 1.357 (colored)

timed's time is up.  use ntpd(8).  Even our own fossil developers
switched a while back.
ok miod, kettenis

Revision 1.357 / (download) - annotate - [select for diffs], Thu Jul 7 20:54:05 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.356: +11 -9 lines
Diff to previous 1.356 (colored)

Move various "console-ish" services into a new start_daemon block near
the bottom, after checking that they are OK with being there.
ok ajacoutot

Revision 1.356 / (download) - annotate - [select for diffs], Thu Jul 7 18:40:00 2011 UTC (12 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.355: +8 -8 lines
Diff to previous 1.355 (colored)

Do not use absolute paths for things on our (very simple safe) path.

Revision 1.355 / (download) - annotate - [select for diffs], Thu Jul 7 18:36:03 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.354: +8 -48 lines
Diff to previous 1.354 (colored)

move portmap, yp* and kerberos services to rc.d scripts

Revision 1.354 / (download) - annotate - [select for diffs], Thu Jul 7 02:16:58 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.353: +2 -2 lines
Diff to previous 1.353 (colored)

remove superfluous semicolon from start_daemon()

Revision 1.353 / (download) - annotate - [select for diffs], Wed Jul 6 18:55:36 2011 UTC (12 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.352: +32 -201 lines
Diff to previous 1.352 (colored)

Add rc.d(8) script for the system daemons that are restartable.
From now on rc(8) is going to call these scripts to start them up on boot
in the same order than before.
In addition the inetd and rwhod variables in rc.conf are deprecated so that
inetd_flags and rwhod_flags should be used. The old flags are still going
to be used for some time to allow users to switch.
There are more rc modifications to come later so let's put this in so
we can base more work on this.
It is important to mention that you can still keep using rc.local just
like the way you did before, and we have no intention to remove that either.

I'd also like to thank ajacoutot@, halex@, sthen@ and schwarze@ for working
on this with me.

Revision 1.352 / (download) - annotate - [select for diffs], Fri Apr 22 06:08:14 2011 UTC (13 years ago) by ajacoutot
Branch: MAIN
Changes since 1.351: +21 -2 lines
Diff to previous 1.351 (colored)

Move the rc.d(8) bits from rc.{local,shutdown} directly into /etc/rc.
By default, rc.{local,shutdown} don't output anything anymore.

original idea from schwarze@
discussed with deraadt@ and no objection from millert@
ok schwarze@ robert@

Revision 1.351 / (download) - annotate - [select for diffs], Sat Apr 16 05:53:18 2011 UTC (13 years, 1 month ago) by ajacoutot
Branch: MAIN
Changes since 1.350: +2 -2 lines
Diff to previous 1.350 (colored)

Output 'starting standard daemons:' to be consistent with the rest.

ok deraadt@

Revision 1.350 / (download) - annotate - [select for diffs], Wed Mar 23 15:22:10 2011 UTC (13 years, 1 month ago) by stevesk
Branch: MAIN
Changes since 1.349: +2 -33 lines
Diff to previous 1.349 (colored)

use ssh-keygen -A; ok deraadt

Revision 1.349 / (download) - annotate - [select for diffs], Thu Mar 17 16:43:51 2011 UTC (13 years, 2 months ago) by robert
Branch: MAIN
Changes since 1.348: +2 -1 lines
Diff to previous 1.348 (colored)

- introduce the INRC environment variable so that rc.subr(8) knows if it
  gets called from rc.local or rc.shutdown
- notify the user if a given operation was successfull or not by appending
  the (ok) or (failed) strings to the end of the daemon name
- hide stdout and stdin unless RC_DEBUG=1 is set, otherwise all the function
  names will be printed out and all output sent to stdin or stdout
- since from now on rc.subr is taking care of printing out the daemon names
  on startup, we don't need to do this from rc.{local,shutdown} anymore

brainkilling work done by me and ajacoutot@, ok ajacoutot@

Revision 1.348 / (download) - annotate - [select for diffs], Fri Jan 14 00:05:42 2011 UTC (13 years, 4 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_9_BASE, OPENBSD_4_9
Changes since 1.347: +2 -1 lines
Diff to previous 1.347 (colored)

in the most trivial way, request that the kernel arc4random re-key after
we run netstart
ok tedu, djm liked it too

Revision 1.347 / (download) - annotate - [select for diffs], Mon Jan 10 06:44:49 2011 UTC (13 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.346: +5 -5 lines
Diff to previous 1.346 (colored)

talk to /dev/arandom as a single read or write.
in particular a single write will result in a single re-key event,
rather than 64 writes causing 64 re-keys -- wasting the kernel's time.
ok guenther

Revision 1.346 / (download) - annotate - [select for diffs], Wed Dec 22 18:13:14 2010 UTC (13 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.345: +5 -7 lines
Diff to previous 1.345 (colored)

Consistantly use /dev/arandom for feeding entropy to the kernel.
ok kjell otto miod

Revision 1.345 / (download) - annotate - [select for diffs], Mon Nov 8 19:44:36 2010 UTC (13 years, 6 months ago) by ajacoutot
Branch: MAIN
Changes since 1.344: +2 -2 lines
Diff to previous 1.344 (colored)

Don't print 'Null message body; hope that's ok' in the rc output if the
call to rc.firstime doesn't output anything to mail(1).

ok deraadt@ halex@

Revision 1.344 / (download) - annotate - [select for diffs], Tue Nov 2 18:59:12 2010 UTC (13 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.343: +4 -4 lines
Diff to previous 1.343 (colored)

delete excessive ; use

Revision 1.343 / (download) - annotate - [select for diffs], Tue Oct 26 20:56:03 2010 UTC (13 years, 6 months ago) by robert
Branch: MAIN
Changes since 1.342: +4 -4 lines
Diff to previous 1.342 (colored)

Add a simple 'rc' system to base in order to start/stop/restart/reload
services installed by the ports system (for now).
It only uses pgrep/pkill to handle these processes. A manual page will
come later.

'put it in' deraadt@

Revision 1.342 / (download) - annotate - [select for diffs], Fri Oct 1 20:51:32 2010 UTC (13 years, 7 months ago) by jakob
Branch: MAIN
Changes since 1.341: +9 -1 lines
Diff to previous 1.341 (colored)

start nsd(8); ok deraadt

Revision 1.341 / (download) - annotate - [select for diffs], Mon Sep 6 17:10:19 2010 UTC (13 years, 8 months ago) by naddy
Branch: MAIN
Changes since 1.340: +9 -1 lines
Diff to previous 1.340 (colored)

add ssh_host_ecdsa_key to /etc; from Mattieu Baptiste <mattieu.b@gmail.com>
ok deraadt@

Revision 1.340 / (download) - annotate - [select for diffs], Tue Jul 27 08:37:33 2010 UTC (13 years, 9 months ago) by martinh
Branch: MAIN
CVS Tags: OPENBSD_4_8_BASE, OPENBSD_4_8
Changes since 1.339: +5 -1 lines
Diff to previous 1.339 (colored)

Add ldapd to rc and rc.conf. Enable it at boot with ldapd_flags=.

ok deraadt@ gilles@

Revision 1.339 / (download) - annotate - [select for diffs], Tue Jul 13 12:28:13 2010 UTC (13 years, 10 months ago) by sthen
Branch: MAIN
Changes since 1.338: +3 -2 lines
Diff to previous 1.338 (colored)

When cleaning /tmp at boot, run the slower find unconditionally.
Previously if the quick rm -rf failed, find was not run, so some files
were not removed. Looks good to tedu@.

Revision 1.338 / (download) - annotate - [select for diffs], Mon Jun 28 20:16:21 2010 UTC (13 years, 10 months ago) by reyk
Branch: MAIN
Changes since 1.337: +15 -1 lines
Diff to previous 1.337 (colored)

Add iked to rc/rc.conf, you can enable it on boot with the iked_flags= var.
Also copy the generated RSA key for isakmpd into the iked directory;  this
way we share the same RSA key by default.

ok deraadt@ jsg@

Revision 1.337 / (download) - annotate - [select for diffs], Sun Apr 25 10:10:51 2010 UTC (14 years ago) by michele
Branch: MAIN
Changes since 1.336: +5 -1 lines
Diff to previous 1.336 (colored)

Add ldpd(8) to /etc/rc* files.
It needs to be started before the routing daemons.
In this way every new prefix learnt by them already has a label associated.

discussed with and ok'ed by claudio@

Revision 1.336 / (download) - annotate - [select for diffs], Fri Apr 23 06:29:36 2010 UTC (14 years ago) by ratchov
Branch: MAIN
Changes since 1.335: +5 -1 lines
Diff to previous 1.335 (colored)

start ``aucat -l'' from /etc/rc, unless aucat_flags=NO, which is
the default setting in rc.conf.

ok deraadt

Revision 1.335 / (download) - annotate - [select for diffs], Mon Jan 4 18:03:30 2010 UTC (14 years, 4 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_7_BASE, OPENBSD_4_7
Changes since 1.334: +8 -1 lines
Diff to previous 1.334 (colored)

If a /etc/rc.firsttime file exists, run it just once, mailing the output to
root.  If anyone wants to use this in a siteXX.tgz file, please be sure to
*concatenate* to the file -- not replace it -- since the installer is going
to be using this file itself.
discussed with todd and halex

Revision 1.334 / (download) - annotate - [select for diffs], Fri Dec 4 21:58:41 2009 UTC (14 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.333: +2 -2 lines
Diff to previous 1.333 (colored)

use mv -f to avoid stopping during wrongly mounted root; sbeyer@reactor.de

Revision 1.333 / (download) - annotate - [select for diffs], Mon Nov 23 12:14:25 2009 UTC (14 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.332: +18 -18 lines
Diff to previous 1.332 (colored)

Move ipsec key creation before isakmpd, and sshd to become the first
of the network daemons so that it can be used if another daemon stops
in its tracks.
ok claudio markus sthen

Revision 1.332 / (download) - annotate - [select for diffs], Wed Aug 12 13:21:15 2009 UTC (14 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.331: +2 -3 lines
Diff to previous 1.331 (colored)

change some defaults inside amd itself, so that the rc scripts no longer
have to pass those options.  this makes amd much easier to restart by
hand (though it still remains a nasty daemon do that with)
ok millert

Revision 1.331 / (download) - annotate - [select for diffs], Fri Aug 7 22:27:47 2009 UTC (14 years, 9 months ago) by sthen
Branch: MAIN
Changes since 1.330: +4 -4 lines
Diff to previous 1.330 (colored)

- specifically match carp+([0-9]):, not just carp*:. avoids spurious
attempts to "ifconfig carp down" noticed by david@.

- use non-descriptive variables names rather than $if/$junk to encourage
people reading the code to think what it's doing; many of the output lines
are not interface names.

ok david@

Revision 1.330 / (download) - annotate - [select for diffs], Wed Aug 5 02:06:21 2009 UTC (14 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.329: +2 -2 lines
Diff to previous 1.329 (colored)

correct indent

Revision 1.329 / (download) - annotate - [select for diffs], Tue Aug 4 15:16:45 2009 UTC (14 years, 9 months ago) by sthen
Branch: MAIN
Changes since 1.328: +5 -4 lines
Diff to previous 1.328 (colored)

Don't use grep/cut during shutdown, /usr might not be mounted.
Spotted by deraadt@. These were used to bring down carp ifaces
cleanly; replace with shell features.

ok deraadt@, henning@. "Much mo' better" blambert@.

Revision 1.328 / (download) - annotate - [select for diffs], Tue Jun 30 15:30:24 2009 UTC (14 years, 10 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_4_6_BASE, OPENBSD_4_6
Changes since 1.327: +4 -4 lines
Diff to previous 1.327 (colored)

extra spaces found during inspection of other goo

Revision 1.327 / (download) - annotate - [select for diffs], Tue Jun 30 15:23:51 2009 UTC (14 years, 10 months ago) by robert
Branch: MAIN
Changes since 1.326: +5 -1 lines
Diff to previous 1.326 (colored)

Make syslogd create a socket in /var/www/dev when httpd is enabled in order
to make logging to syslog work with php for example.

ok deraadt@, henning@

Revision 1.326 / (download) - annotate - [select for diffs], Wed Jun 3 14:45:39 2009 UTC (14 years, 11 months ago) by jj
Branch: MAIN
Changes since 1.325: +3 -3 lines
Diff to previous 1.325 (colored)

Arla client rename from xfs to nnpfs for later upgrades. Tested on various arches. ok todd@ beck@

Revision 1.325 / (download) - annotate - [select for diffs], Sun May 31 20:57:12 2009 UTC (14 years, 11 months ago) by halex
Branch: MAIN
Changes since 1.324: +2 -2 lines
Diff to previous 1.324 (colored)

Make sure xdm is installed before trying to run it

ok deraadt@

Revision 1.324 / (download) - annotate - [select for diffs], Fri Apr 17 17:17:03 2009 UTC (15 years, 1 month ago) by henning
Branch: MAIN
Changes since 1.323: +2 -2 lines
Diff to previous 1.323 (colored)

a scrub was hiding here when nfs was enabled. since we want the no-df
behaviour here replace by an explicit set reassemble yes no-df.
noticed by Valery Masiutsin <val.masutin at gmail dot com>

Revision 1.323 / (download) - annotate - [select for diffs], Mon Mar 16 23:18:45 2009 UTC (15 years, 2 months ago) by jacekm
Branch: MAIN
Changes since 1.322: +5 -1 lines
Diff to previous 1.322 (colored)

support for smtpd(8); ok gilles@

Revision 1.322 / (download) - annotate - [select for diffs], Wed Mar 4 05:29:09 2009 UTC (15 years, 2 months ago) by mcbride
Branch: MAIN
Changes since 1.321: +2 -2 lines
Diff to previous 1.321 (colored)

Don't synchronise carp states in default PF ruleset, these get created
on each host and end up conflicting, so they never sync anyways.

ok dlg henning

Revision 1.321 / (download) - annotate - [select for diffs], Thu Dec 11 15:44:00 2008 UTC (15 years, 5 months ago) by naddy
Branch: MAIN
CVS Tags: OPENBSD_4_5_BASE, OPENBSD_4_5
Changes since 1.320: +2 -2 lines
Diff to previous 1.320 (colored)

Bump size of isakmpd RSA host key up to 2048 bits to match the
SSH2-RSA size; ok hshoexer@, no objection from miod@

Revision 1.320 / (download) - annotate - [select for diffs], Thu Nov 27 00:52:06 2008 UTC (15 years, 5 months ago) by uwe
Branch: MAIN
Changes since 1.319: +8 -1 lines
Diff to previous 1.319 (colored)

Add bt=YES to /etc/rc.conf.local to start the daemon

Revision 1.319 / (download) - annotate - [select for diffs], Fri Oct 3 14:25:11 2008 UTC (15 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.318: +2 -2 lines
Diff to previous 1.318 (colored)

New option -D to daemonize spamd-setup for early bootup use.  This avoids
spamd-setup hanging if there are various (network?) issues and the system
not proceeding to multiuser so that this can be debugged.  We do not use
& for startup in /etc/rc because this makes the spamd-setup a child of the
rc scripts after bootup (that is gross)
Problem reported in PR 5864, change discussed with beck, ok millert

Revision 1.318 / (download) - annotate - [select for diffs], Wed Jul 9 20:23:47 2008 UTC (15 years, 10 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_4_BASE, OPENBSD_4_4
Changes since 1.317: +33 -1 lines
Diff to previous 1.317 (colored)

automatically populate net.inet.(tcp|udp).baddynamic with the
contents of /etc/services so as to avoid randomly allocating
source ports that correspond to well-known services. Auto-filling
of the baddynamic tables is performed before reading sysctl.conf,
so it is still possible to add or subtract ports, or override the
autofilling entirely there.

Note that this requires a new kernel and /sbin/sysctl.

feedback markus@ ok markus@ deraadt@ millert@

Revision 1.317 / (download) - annotate - [select for diffs], Sun Jun 15 04:49:34 2008 UTC (15 years, 11 months ago) by sturm
Branch: MAIN
Changes since 1.316: +2 -1 lines
Diff to previous 1.316 (colored)

start rpc.statd together with rpc.lockd

"just get it in" deraadt

Revision 1.316 / (download) - annotate - [select for diffs], Mon Jun 9 22:21:49 2008 UTC (15 years, 11 months ago) by mbalmer
Branch: MAIN
Changes since 1.315: +3 -3 lines
Diff to previous 1.315 (colored)

Replace nmeattach (which will be removed) with ldattach.

Revision 1.315 / (download) - annotate - [select for diffs], Sun Jun 8 03:03:37 2008 UTC (15 years, 11 months ago) by jdixon
Branch: MAIN
Changes since 1.314: +2 -5 lines
Diff to previous 1.314 (colored)

Deprecate /etc/dhcpd.interfaces.  This is made unnecessary by dhcpd_flags.

ok deraadt@ beck@ reyk@ phessler@

Revision 1.314 / (download) - annotate - [select for diffs], Mon Jun 2 16:33:39 2008 UTC (15 years, 11 months ago) by jasper
Branch: MAIN
Changes since 1.313: +2 -2 lines
Diff to previous 1.313 (colored)

- add a full stop for consistency

ok deraadt@ dlg@

Revision 1.313 / (download) - annotate - [select for diffs], Wed May 7 11:58:14 2008 UTC (16 years ago) by claudio
Branch: MAIN
Changes since 1.312: +1 -5 lines
Diff to previous 1.312 (colored)

routed is no longer, use ripd instead.

Revision 1.312 / (download) - annotate - [select for diffs], Wed Feb 27 20:27:38 2008 UTC (16 years, 2 months ago) by djm
Branch: MAIN
CVS Tags: OPENBSD_4_3_BASE, OPENBSD_4_3
Changes since 1.311: +22 -10 lines
Diff to previous 1.311 (colored)

Try to load host.random before starting the network, no network
randomisations (among other things) benefit from it. We still try again
after /var has been definitely mounted in case it is on NFS;
ok deraadt@

Revision 1.311 / (download) - annotate - [select for diffs], Thu Jan 31 14:18:03 2008 UTC (16 years, 3 months ago) by reyk
Branch: MAIN
Changes since 1.310: +5 -1 lines
Diff to previous 1.310 (colored)

enable snmpd in the build

approved by deraadt@, ok thib@

Revision 1.310 / (download) - annotate - [select for diffs], Wed Jan 16 14:19:28 2008 UTC (16 years, 4 months ago) by sthen
Branch: MAIN
Changes since 1.309: +5 -3 lines
Diff to previous 1.309 (colored)

create pflog0 whenever pf is enabled, not just when pflogd_flags!=NO
fixes spamlogd with pflogd disabled.

ok henning

Revision 1.309 / (download) - annotate - [select for diffs], Wed Jan 9 21:38:19 2008 UTC (16 years, 4 months ago) by mpf
Branch: MAIN
Changes since 1.308: +6 -2 lines
Diff to previous 1.308 (colored)

Do not bring up pfsync(4) before the working ruleset
has been loaded. Otherwise, states that are received during the
initial bulk update mismatch the correct pf-checksum and
do not attach to the rules.
Problem identified by david@. Fix done in collaboration.
OK henning@

Revision 1.308 / (download) - annotate - [select for diffs], Fri Dec 7 17:13:35 2007 UTC (16 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.307: +3 -3 lines
Diff to previous 1.307 (colored)

hoststated gets renamed to relayd.  easier to type, and actually says
what the daemon does - it is a relayer that pays attention to the status
of pools of hosts; not a status checkers that happens to do some relaying

Revision 1.307 / (download) - annotate - [select for diffs], Sun Nov 11 16:12:11 2007 UTC (16 years, 6 months ago) by jmc
Branch: MAIN
Changes since 1.306: +2 -2 lines
Diff to previous 1.306 (colored)

-w flag for wsconsctl is deprecated; from Tim van der Molen

Revision 1.306 / (download) - annotate - [select for diffs], Mon Oct 15 20:58:10 2007 UTC (16 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.305: +3 -3 lines
Diff to previous 1.305 (colored)

permit tcp 111/2049 at boot too, for tcp nfs mounts; Jim Rees

Revision 1.305 / (download) - annotate - [select for diffs], Mon Oct 8 11:29:58 2007 UTC (16 years, 7 months ago) by norby
Branch: MAIN
Changes since 1.304: +5 -1 lines
Diff to previous 1.304 (colored)

Add the user _ospf6d otherwise the newly imported ospf6d daemon will not
start.

ok dlg@

Revision 1.304 / (download) - annotate - [select for diffs], Wed Apr 25 14:12:05 2007 UTC (17 years ago) by espie
Branch: MAIN
CVS Tags: OPENBSD_4_2_BASE, OPENBSD_4_2
Changes since 1.303: +4 -10 lines
Diff to previous 1.303 (colored)

shutdown existing carp interfaces based on ifconfig output, not static
/etc/*.if files.

okay reyk@, deraadt@, krw@...

Revision 1.303 / (download) - annotate - [select for diffs], Sat Apr 14 11:54:00 2007 UTC (17 years, 1 month ago) by grunk
Branch: MAIN
Changes since 1.302: +2 -2 lines
Diff to previous 1.302 (colored)

introduce {fsck,mount}_vnd tools to be able to describe vnd images
in /etc/fstab instead of using some weird homegrown scripts.
No support for boot time mounting yet, so "noauto" is still needed.

original idea from david@
help and discussion todd@ bluhm@ beck@, manpage help jmc@
ok simon@ tedu@ bluhm@ todd@, "looks good" thib@

Revision 1.302 / (download) - annotate - [select for diffs], Wed Mar 14 20:47:17 2007 UTC (17 years, 2 months ago) by ckuethe
Branch: MAIN
Changes since 1.301: +5 -1 lines
Diff to previous 1.301 (colored)

Allow nmeaattach to start a sensor before starting ntpd. Many modern
receivers can cold start in the time it takes the boot process to get
close to starting ntpd. Even if the gps is not ready or the fix is not
valid, at least the sensor has been created; ntpd won't have to wait
a few minutes before scanning for the sensor. This makes using GPS as
the sole source of time a bit easier.

ok deraadt

Revision 1.301 / (download) - annotate - [select for diffs], Tue Feb 27 16:24:29 2007 UTC (17 years, 2 months ago) by beck
Branch: MAIN
CVS Tags: OPENBSD_4_1_BASE, OPENBSD_4_1
Changes since 1.300: +2 -2 lines
Diff to previous 1.300 (colored)

catch second instance of spamd_grey - thanks millert and jmc

Revision 1.300 / (download) - annotate - [select for diffs], Tue Feb 27 16:21:29 2007 UTC (17 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.299: +2 -2 lines
Diff to previous 1.299 (colored)

spamd_grey=YES should really be spamd_black=NO
as disscussed with jmc and millert.
ok millert@

Revision 1.299 / (download) - annotate - [select for diffs], Tue Feb 27 02:10:58 2007 UTC (17 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.298: +3 -3 lines
Diff to previous 1.298 (colored)

Flag day for spamd -
1) config files move to /etc/mail
2) -g option goes away in spamd-setup and spamd - greylisting is now the default
3) option change to spamd, -b addr becomes -l addr.
4) -b option in spamd-setup and spamd to turn on old blacklisting mode.

Man page shortly to be flensed to make this easier to explain
ok deraadt@ millert@

Revision 1.298 / (download) - annotate - [select for diffs], Fri Feb 2 14:51:19 2007 UTC (17 years, 3 months ago) by ajacoutot
Branch: MAIN
Changes since 1.297: +5 -2 lines
Diff to previous 1.297 (colored)

- add a new "accounting" variable (default to NO) to enable accouting
(if the file /var/account/acct does not exist it will be created)

ok mk@

Revision 1.297 / (download) - annotate - [select for diffs], Wed Jan 31 08:32:16 2007 UTC (17 years, 3 months ago) by pyr
Branch: MAIN
Changes since 1.296: +5 -1 lines
Diff to previous 1.296 (colored)

link hoststated to the builds.
ok miod@, henning@

Revision 1.296 / (download) - annotate - [select for diffs], Sat Jan 6 12:00:06 2007 UTC (17 years, 4 months ago) by matthieu
Branch: MAIN
Changes since 1.295: +1 -5 lines
Diff to previous 1.295 (colored)

remove acpid references. ok gwk@, steven@, grange@ and janus@.

Revision 1.295 / (download) - annotate - [select for diffs], Tue Nov 28 23:44:35 2006 UTC (17 years, 5 months ago) by mcbride
Branch: MAIN
Changes since 1.294: +2 -2 lines
Diff to previous 1.294 (colored)

Move isakmpd's auto-generated public key, local.pub, into /etc/isakmpd
This makes it readable by unprivileged uses, simplifying configuration,
and there is no reason for it to be secret.

ok msf deraadt hshoexer

Revision 1.294 / (download) - annotate - [select for diffs], Thu Nov 16 13:07:11 2006 UTC (17 years, 6 months ago) by henning
Branch: MAIN
Changes since 1.293: +2 -1 lines
Diff to previous 1.293 (colored)

when pf and pflogd are enabled, do a "ifconfig pflog0 create" early.
rc checks pflog0 existance before starting pflogd0, pbly to not print an
error message on pflog-less kernels... ugh. ok mcbride

Revision 1.293 / (download) - annotate - [select for diffs], Mon Nov 6 21:55:52 2006 UTC (17 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.292: +6 -6 lines
Diff to previous 1.292 (colored)

duh -- on first boot, do not build the host.random file twice; ok djm

Revision 1.292 / (download) - annotate - [select for diffs], Sun Oct 29 18:58:57 2006 UTC (17 years, 6 months ago) by norby
Branch: MAIN
Changes since 1.291: +5 -1 lines
Diff to previous 1.291 (colored)

Add the _ripd user and startup stuff.

ok claudio@

Revision 1.291 / (download) - annotate - [select for diffs], Wed Sep 27 19:54:36 2006 UTC (17 years, 7 months ago) by mpf
Branch: MAIN
Changes since 1.290: +5 -1 lines
Diff to previous 1.290 (colored)

Add ifstated(8) startup bits.
OK deraadt@, henning@, mcbride@

Revision 1.290 / (download) - annotate - [select for diffs], Fri Sep 1 01:18:02 2006 UTC (17 years, 8 months ago) by mpf
Branch: MAIN
CVS Tags: OPENBSD_4_0_BASE, OPENBSD_4_0
Changes since 1.289: +8 -5 lines
Diff to previous 1.289 (colored)

Switch boot order: isakmpd starts before sasyncd.
If a user is running sasyncd, start isakmpd with -S.
In this mode isakmpd starts off passsive and doesn't
delete SA's on shutdown.
OK ho@, hshoexer@, deraadt@

Revision 1.289 / (download) - annotate - [select for diffs], Tue Aug 29 17:26:55 2006 UTC (17 years, 8 months ago) by henning
Branch: MAIN
Changes since 1.288: +3 -3 lines
Diff to previous 1.288 (colored)

increase the carp demotion counter by 128 instead of 1 while rc runs.
you do not want a machine that is in the middle of rc and does not have
all network daemons (that possibly increase the carp demotion counter
further) to become master just because the other one lost 2 bgp sessions
or similar for other daemons (esp sasyncd) and as such has a demotion
count of >1.
ok mcbride mpf deraadt

Revision 1.288 / (download) - annotate - [select for diffs], Fri Aug 4 11:43:43 2006 UTC (17 years, 9 months ago) by markus
Branch: MAIN
Changes since 1.287: +3 -50 lines
Diff to previous 1.287 (colored)

remove redundant comments; noted by mpf; ok deraadt, millert

Revision 1.287 / (download) - annotate - [select for diffs], Fri Jun 2 21:32:50 2006 UTC (17 years, 11 months ago) by mcbride
Branch: MAIN
Changes since 1.286: +7 -1 lines
Diff to previous 1.286 (colored)

Add sasyncd to rc / rc.conf.

ok deraadt@ cloder@

Revision 1.286 / (download) - annotate - [select for diffs], Fri Jun 2 19:59:35 2006 UTC (17 years, 11 months ago) by mcbride
Branch: MAIN
Changes since 1.285: +6 -1 lines
Diff to previous 1.285 (colored)

Carp demotion interlock. Prevents carp from preempting until the system is
booted, allowing for daemons to sync with peers before we take over.

ok deraadt@ mpf@ moritz@

Revision 1.285 / (download) - annotate - [select for diffs], Thu Jun 1 21:37:43 2006 UTC (17 years, 11 months ago) by norby
Branch: MAIN
Changes since 1.284: +5 -1 lines
Diff to previous 1.284 (colored)

Hook dhcrelay(8) into the startup process.

ok henning@

Revision 1.284 / (download) - annotate - [select for diffs], Thu Jun 1 16:43:23 2006 UTC (17 years, 11 months ago) by norby
Branch: MAIN
Changes since 1.283: +5 -1 lines
Diff to previous 1.283 (colored)

add all the goo to hook dvmrp into the system

ok derradt@

Revision 1.283 / (download) - annotate - [select for diffs], Mon May 29 16:49:42 2006 UTC (17 years, 11 months ago) by avsm
Branch: MAIN
Changes since 1.282: +1 -1 lines
Diff to previous 1.282 (colored)

revert vfs.nfs.privport sysctl, broke a few architectures
requested by deraadt@

Revision 1.282 / (download) - annotate - [select for diffs], Sun May 28 23:29:32 2006 UTC (17 years, 11 months ago) by avsm
Branch: MAIN
Changes since 1.281: +2 -2 lines
Diff to previous 1.281 (colored)

Add support for NFS mounts to be from non-reserved ports:

- new sysctl vfs.nfs.privport to require NFS mount requests to be on
reserved ports when set to 1 (the default).
- mountd now automatically sets the sysctl depending on the -n flag.
- add mountd_flags to rc.conf to enable the -n flag at boot.
deraadt@ ok

Revision 1.281 / (download) - annotate - [select for diffs], Mon Mar 27 16:53:10 2006 UTC (18 years, 1 month ago) by reyk
Branch: MAIN
Changes since 1.280: +5 -1 lines
Diff to previous 1.280 (colored)

add hostapd to rc/rc.conf glue

suggested and ok by kettenis@

Revision 1.280 / (download) - annotate - [select for diffs], Wed Mar 22 15:57:55 2006 UTC (18 years, 2 months ago) by hshoexer
Branch: MAIN
Changes since 1.279: +10 -1 lines
Diff to previous 1.279 (colored)

As the isakmpd fifo race is fixed, hook ipsecctl to rc.

ok naddy@ todd@

Revision 1.279 / (download) - annotate - [select for diffs], Tue Mar 14 22:48:46 2006 UTC (18 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.278: +3 -3 lines
Diff to previous 1.278 (colored)

move wsconsctl up earlier, so that any key changes made can be used
to (for instance) interrupt dhclient with a ^C instead of a 'CAPS-LOCK C'
from e@molioner.dk checked by matthieu

Revision 1.278 / (download) - annotate - [select for diffs], Sun Mar 12 20:07:48 2006 UTC (18 years, 2 months ago) by otto
Branch: MAIN
Changes since 1.277: +4 -4 lines
Diff to previous 1.277 (colored)

Use the new -s flag to mount the /usr and /var partitions. Avoids
doubly mounted mfs partitions. Also, at the end of the mount dance,
try mount all partitions, not just nfs partitions. Handles a case
where local paritition mounted inside a nfs partition where not
mounted by rc (/usr on nfs with a local /usr/obj, for example).
ok deraadt@ henning@

Revision 1.277 / (download) - annotate - [select for diffs], Thu Jan 12 21:54:15 2006 UTC (18 years, 4 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_3_9_BASE, OPENBSD_3_9
Changes since 1.276: +3 -3 lines
Diff to previous 1.276 (colored)

configure mixers late; obsd@enop.org 4970

Revision 1.276 / (download) - annotate - [select for diffs], Wed Nov 30 16:04:33 2005 UTC (18 years, 5 months ago) by tom
Branch: MAIN
Changes since 1.275: +2 -2 lines
Diff to previous 1.275 (colored)

Change "starting rpc daemons" to "starting initial daemons" as we
also start ntpd at this time.

discussed with jmc@; ok deraadt@

Revision 1.275 / (download) - annotate - [select for diffs], Wed Nov 16 09:19:36 2005 UTC (18 years, 6 months ago) by camield
Branch: MAIN
Changes since 1.274: +5 -1 lines
Diff to previous 1.274 (colored)

add new ftp-proxy startup bits

ok henning beck

Revision 1.274 / (download) - annotate - [select for diffs], Mon Oct 31 10:32:47 2005 UTC (18 years, 6 months ago) by henning
Branch: MAIN
Changes since 1.273: +5 -1 lines
Diff to previous 1.273 (colored)

add bits for watchdogd startup, PR4540 Michael Knudsen <e@molioner.dk>
but I put it at a different place, watchdogd is really not a network daemon

Revision 1.273 / (download) - annotate - [select for diffs], Thu Sep 22 23:57:31 2005 UTC (18 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.272: +7 -4 lines
Diff to previous 1.272 (colored)

split ypserv & ypbind startup; ypserv does not depend on you being a
client; from amh@POBOX.COM

Revision 1.272 / (download) - annotate - [select for diffs], Mon Sep 19 15:47:45 2005 UTC (18 years, 8 months ago) by fgsch
Branch: MAIN
Changes since 1.271: +2 -2 lines
Diff to previous 1.271 (colored)

change printed line from `printer' to `lpd'; deraadt@ ok.

Revision 1.271 / (download) - annotate - [select for diffs], Mon Jul 25 19:18:44 2005 UTC (18 years, 9 months ago) by mcbride
Branch: MAIN
CVS Tags: OPENBSD_3_8_BASE, OPENBSD_3_8
Changes since 1.270: +2 -2 lines
Diff to previous 1.270 (colored)

Fix the test for successful ifconfig of carp interface on shutdown, makes
graceful shutdown work correctly.

ok mpf@ deraadt@ a long time ago, committed to local repository by accident.

Revision 1.270 / (download) - annotate - [select for diffs], Sun Jun 19 16:55:10 2005 UTC (18 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.269: +2 -3 lines
Diff to previous 1.269 (colored)

ntpd -s by default is just a pause if there is no net

Revision 1.269 / (download) - annotate - [select for diffs], Tue Jun 14 22:49:06 2005 UTC (18 years, 11 months ago) by dhartmei
Branch: MAIN
Changes since 1.268: +3 -2 lines
Diff to previous 1.268 (colored)

split the dummy ruleset pfctl -f - -e into separate -f - and -e.
relevant when the dummy ruleset can't be loaded, we still want to enable
pf, otherwise the real ruleset (even if that does load correctly) won't
be active. might happen on a non-GENERIC kernel or after an update (before
/etc is manually updated). reported by Jim Rees. ok frantzen@

Revision 1.268 / (download) - annotate - [select for diffs], Thu Jun 2 20:09:38 2005 UTC (18 years, 11 months ago) by tholo
Branch: MAIN
Changes since 1.267: +5 -1 lines
Diff to previous 1.267 (colored)

Start on a basic ACPI framework -- does not do much more than read out the
ACPI tables into kernel memory and attach ACPI and HPET timers currently.

In order to test this code, enabling the devices in GENERIC as well as
the ACPI_ENABLE option is needed.  This code does not do any thermal
control yet, so this should be done with care depending on the platform.

In the tree so more people can contribute to making this more fully
featured.

Ok niklas@ grange@ tedu@

Revision 1.267 / (download) - annotate - [select for diffs], Thu May 19 01:58:49 2005 UTC (19 years ago) by millert
Branch: MAIN
Changes since 1.266: +24 -21 lines
Diff to previous 1.266 (colored)

o change wsconsctl.conf subshell into a function
o move test for foo.conf into the foo_conf function proper

Revision 1.266 / (download) - annotate - [select for diffs], Wed May 18 16:43:51 2005 UTC (19 years ago) by millert
Branch: MAIN
Changes since 1.265: +46 -46 lines
Diff to previous 1.265 (colored)

Make test(1) usage consistent when testing a variable that may not be set.
OK deraadt@

Revision 1.265 / (download) - annotate - [select for diffs], Wed May 18 13:44:35 2005 UTC (19 years ago) by millert
Branch: MAIN
Changes since 1.264: +60 -17 lines
Diff to previous 1.264 (colored)

o move sysctl and mixerctl parsing into a subroutine instead of a subshell
o update resource limits if kern.maxproc or kern.maxfiles is changed

Revision 1.264 / (download) - annotate - [select for diffs], Sat Apr 9 14:15:18 2005 UTC (19 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.263: +5 -1 lines
Diff to previous 1.263 (colored)

if, at boot time, a /etc/resolv.conf.save is found, assume this is from
a dhclient that crashed so hard it was unable to swap the file back,
and hence, finish that job.  i convinced krw and henning that this is
right right place (not in netstart)

Revision 1.263 / (download) - annotate - [select for diffs], Fri Apr 1 05:37:35 2005 UTC (19 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.262: +3 -3 lines
Diff to previous 1.262 (colored)

OK, this is an insane commit.  Comes from johnb@ugrad.cs.ualberta.ca, pr 3589.
somehow he got his YP and DNS screwed up and nslookup $h was dealing with h = ""
which was doing nslookup "", which is bad and hangs boots.  be more careful
by doing echo $h | nslookup instead.

Revision 1.262 / (download) - annotate - [select for diffs], Tue Mar 22 22:24:38 2005 UTC (19 years, 2 months ago) by henning
Branch: MAIN
Changes since 1.261: +5 -1 lines
Diff to previous 1.261 (colored)

add ospfd, ok theo
From: Jason Crawford <jasonrcrawford@gmail.com>, whitespace fixes me

Revision 1.261 / (download) - annotate - [select for diffs], Wed Jan 19 20:52:29 2005 UTC (19 years, 4 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_3_7_BASE, OPENBSD_3_7
Changes since 1.260: +5 -3 lines
Diff to previous 1.260 (colored)

Only try to run pflogd if pflog0 exists; from mpech@
OK deraadt@ and fgsch@

Revision 1.260 / (download) - annotate - [select for diffs], Mon Nov 22 09:26:23 2004 UTC (19 years, 5 months ago) by jsg
Branch: MAIN
Changes since 1.259: +12 -1 lines
Diff to previous 1.259 (colored)

Add support for setting mixerctl values in a sysctl.conf like manner
via mixerctl.conf.
ok deraadt@, earlier version ok henning@

Revision 1.259 / (download) - annotate - [select for diffs], Wed Nov 3 18:04:46 2004 UTC (19 years, 6 months ago) by henning
Branch: MAIN
Changes since 1.258: +2 -2 lines
Diff to previous 1.258 (colored)

introduce spamlogd_flags to make it easier to e. g. bind spamlogd
to an interface; no change in default config
from Toni Mueller <support@oeko.net>, ja ja ja ja bob

Revision 1.258 / (download) - annotate - [select for diffs], Fri Oct 22 00:59:09 2004 UTC (19 years, 7 months ago) by itojun
Branch: MAIN
Changes since 1.257: +3 -1 lines
Diff to previous 1.257 (colored)

default pf rule too restrictive for IPv6 (need to allow NS/NA).  deraadt ok

Revision 1.257 / (download) - annotate - [select for diffs], Tue Oct 19 06:45:36 2004 UTC (19 years, 7 months ago) by grange
Branch: MAIN
Changes since 1.256: +5 -3 lines
Diff to previous 1.256 (colored)

Use inet6 pf rules only for inet6-capable setups, first spotted
by form@pdp-11.org.ru.

ok todd@ henning@

Revision 1.256 / (download) - annotate - [select for diffs], Mon Sep 27 16:08:26 2004 UTC (19 years, 7 months ago) by henning
Branch: MAIN
Changes since 1.255: +3 -3 lines
Diff to previous 1.255 (colored)

kill double whitespace, PR3934, for rea this time and without unrelated
changes

Revision 1.255 / (download) - annotate - [select for diffs], Mon Sep 27 16:06:20 2004 UTC (19 years, 7 months ago) by henning
Branch: MAIN
Changes since 1.254: +20 -19 lines
Diff to previous 1.254 (colored)

ooopppssss, backout last, lots of unrelated changes creeped in, noticed
by jmc

Revision 1.254 / (download) - annotate - [select for diffs], Mon Sep 27 08:43:51 2004 UTC (19 years, 7 months ago) by henning
Branch: MAIN
Changes since 1.253: +20 -21 lines
Diff to previous 1.253 (colored)

double whitespace, one from PR3934

Revision 1.253 / (download) - annotate - [select for diffs], Sat Sep 18 20:17:37 2004 UTC (19 years, 8 months ago) by henning
Branch: MAIN
Changes since 1.252: +3 -2 lines
Diff to previous 1.252 (colored)

unconditionally add -s to ntpd_flags in rc and suggest "" for normal
use in the comment in rc.conf again, idea & ok theo

Revision 1.252 / (download) - annotate - [select for diffs], Fri Sep 17 21:50:30 2004 UTC (19 years, 8 months ago) by mcbride
Branch: MAIN
Changes since 1.251: +5 -5 lines
Diff to previous 1.251 (colored)

Set up alternate keyboard encoding earlier in rc.

ok miod@ henning@ deraadt@

Revision 1.251 / (download) - annotate - [select for diffs], Sat Aug 21 08:17:28 2004 UTC (19 years, 9 months ago) by hshoexer
Branch: MAIN
CVS Tags: OPENBSD_3_6_BASE, OPENBSD_3_6
Changes since 1.250: +3 -4 lines
Diff to previous 1.250 (colored)

no need anymore to require isamkpd.policy for isakmpd startup
ok ho@ henning@

Revision 1.250 / (download) - annotate - [select for diffs], Sat Aug 7 00:50:25 2004 UTC (19 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.249: +3 -1 lines
Diff to previous 1.249 (colored)

permit icmp6-type routersol out, and icmp6-type routeradv in, at boot time

Revision 1.249 / (download) - annotate - [select for diffs], Tue Jul 6 04:05:27 2004 UTC (19 years, 10 months ago) by henning
Branch: MAIN
Changes since 1.248: +6 -2 lines
Diff to previous 1.248 (colored)

eh, actually add the startup code for ntpd

Revision 1.248 / (download) - annotate - [select for diffs], Fri Jun 4 04:26:41 2004 UTC (19 years, 11 months ago) by grange
Branch: MAIN
Changes since 1.247: +5 -1 lines
Diff to previous 1.247 (colored)

hotplugd startup.

ok deraadt@

Revision 1.247 / (download) - annotate - [select for diffs], Sun May 16 15:45:46 2004 UTC (20 years ago) by henning
Branch: MAIN
Changes since 1.246: +2 -3 lines
Diff to previous 1.246 (colored)

dhclient doesn't write a pid file any more; do remove the code that
deals with it at startup; noticed by wilfried, millert ok

Revision 1.246 / (download) - annotate - [select for diffs], Sun May 16 04:31:01 2004 UTC (20 years ago) by mcbride
Branch: MAIN
Changes since 1.245: +6 -4 lines
Diff to previous 1.245 (colored)

Bring down carp interfaces gracefully even if powerdown=YES in rc.shutdown.

ok krw@ deraadt@

Revision 1.245 / (download) - annotate - [select for diffs], Wed Apr 28 01:01:27 2004 UTC (20 years ago) by deraadt
Branch: MAIN
Changes since 1.244: +2 -2 lines
Diff to previous 1.244 (colored)

spacing

Revision 1.244 / (download) - annotate - [select for diffs], Tue Apr 27 22:51:28 2004 UTC (20 years ago) by markus
Branch: MAIN
Changes since 1.243: +14 -1 lines
Diff to previous 1.243 (colored)

generate a isakmpd (host) key; ok henning, deraadt, cedric

Revision 1.243 / (download) - annotate - [select for diffs], Mon Apr 26 02:00:57 2004 UTC (20 years ago) by deraadt
Branch: MAIN
Changes since 1.242: +5 -2 lines
Diff to previous 1.242 (colored)

double check that the carp* interfaces exist before knocking them down,
mcbride and i think this diff looks good but do not feel like doing the
250 meter walk to go test it

Revision 1.242 / (download) - annotate - [select for diffs], Tue Mar 30 16:59:25 2004 UTC (20 years, 1 month ago) by otto
Branch: MAIN
Changes since 1.241: +2 -2 lines
Diff to previous 1.241 (colored)

Allow spamd_flags banner to contain spaces. Resolves PR 3720.
ok beck@ millert@

Revision 1.241 / (download) - annotate - [select for diffs], Mon Mar 22 15:02:35 2004 UTC (20 years, 2 months ago) by cedric
Branch: MAIN
CVS Tags: OPENBSD_3_5_BASE, OPENBSD_3_5
Changes since 1.240: +2 -2 lines
Diff to previous 1.240 (colored)

Fix CARP shutdown. ok deraadt

Revision 1.240 / (download) - annotate - [select for diffs], Mon Mar 22 04:34:42 2004 UTC (20 years, 2 months ago) by mcbride
Branch: MAIN
Changes since 1.239: +11 -1 lines
Diff to previous 1.239 (colored)

Pass pfsync and carp traffic in the boot-time pf configuration.
Bring carp interfaces down at shutdown, to make a graceful exit if we're master.

ok deraadt@

Revision 1.239 / (download) - annotate - [select for diffs], Fri Mar 5 23:54:47 2004 UTC (20 years, 2 months ago) by henning
Branch: MAIN
Changes since 1.238: +5 -1 lines
Diff to previous 1.238 (colored)

add the goo for bgpd, theo ok

Revision 1.238 / (download) - annotate - [select for diffs], Wed Mar 3 01:06:44 2004 UTC (20 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.237: +13 -13 lines
Diff to previous 1.237 (colored)

move spamd to a better place; ok henning beck

Revision 1.237 / (download) - annotate - [select for diffs], Tue Mar 2 16:11:10 2004 UTC (20 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.236: +4 -4 lines
Diff to previous 1.236 (colored)

A better place for sshd; pointed out by millert

Revision 1.236 / (download) - annotate - [select for diffs], Tue Mar 2 15:56:28 2004 UTC (20 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.235: +5 -5 lines
Diff to previous 1.235 (colored)

start sshd earlier, ok from various

Revision 1.235 / (download) - annotate - [select for diffs], Thu Feb 26 07:33:08 2004 UTC (20 years, 2 months ago) by beck
Branch: MAIN
Changes since 1.234: +8 -1 lines
Diff to previous 1.234 (colored)

add support for spamd greylisting with spamd -g and spamlogd to rc/rc.conf

Revision 1.234 / (download) - annotate - [select for diffs], Wed Feb 25 08:42:38 2004 UTC (20 years, 2 months ago) by jmc
Branch: MAIN
Changes since 1.233: +3 -3 lines
Diff to previous 1.233 (colored)

remove -w option to sysctl;

diffs from Paul de Weerd;
ok deraadt@

Revision 1.233 / (download) - annotate - [select for diffs], Wed Feb 11 23:17:32 2004 UTC (20 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.232: +5 -4 lines
Diff to previous 1.232 (colored)

simplify afs startup so all you have to do is say "YES" to get basic
AFS functionality (enough to to pkg_add's)

Revision 1.232 / (download) - annotate - [select for diffs], Fri Jan 23 22:11:40 2004 UTC (20 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.231: +2 -2 lines
Diff to previous 1.231 (colored)

permit rpc.yppasswdd run to be blocked, and block by default; ok henning tedu

Revision 1.231 / (download) - annotate - [select for diffs], Mon Dec 29 23:16:45 2003 UTC (20 years, 4 months ago) by millert
Branch: MAIN
Changes since 1.230: +5 -5 lines
Diff to previous 1.230 (colored)

Move vi.recover invocation until after after ldconf is run.  Fixes
a problem when postfix w/ sasl & tls is used instead of sendmail
and perl is dynamically linked anyway.  Closes PR 3605.
OK deraadt@ and drahn@

Revision 1.230 / (download) - annotate - [select for diffs], Fri Dec 5 00:52:16 2003 UTC (20 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.229: +3 -3 lines
Diff to previous 1.229 (colored)

spacing

Revision 1.229 / (download) - annotate - [select for diffs], Tue Nov 18 16:37:34 2003 UTC (20 years, 6 months ago) by henning
Branch: MAIN
Changes since 1.228: +5 -1 lines
Diff to previous 1.228 (colored)

sensorsd startup via rc/rc.conf
ok millert@

Revision 1.228 / (download) - annotate - [select for diffs], Tue Jul 29 17:52:17 2003 UTC (20 years, 9 months ago) by henning
Branch: MAIN
CVS Tags: OPENBSD_3_4_BASE, OPENBSD_3_4
Changes since 1.227: +2 -1 lines
Diff to previous 1.227 (colored)

"pass on lo0" in the intermediate pf ruleset loaded during boot.
solves PR3376 by matthew.gream@pobox.com, fix slightly different

ok mcbride@ deraadt@

Revision 1.227 / (download) - annotate - [select for diffs], Wed May 14 18:41:06 2003 UTC (21 years ago) by ian
Branch: MAIN
Changes since 1.226: +3 -6 lines
Diff to previous 1.226 (colored)

No more gated. ok krw@, deraadt@, commments from David Krause, jakob@.

Revision 1.226 / (download) - annotate - [select for diffs], Tue Apr 8 01:53:43 2003 UTC (21 years, 1 month ago) by millert
Branch: MAIN
Changes since 1.225: +2 -2 lines
Diff to previous 1.225 (colored)

fix another non-POSIX chown; Chuck Yerkes

Revision 1.225 / (download) - annotate - [select for diffs], Sun Mar 23 18:45:34 2003 UTC (21 years, 2 months ago) by marc
Branch: MAIN
CVS Tags: OPENBSD_3_3_BASE, OPENBSD_3_3
Changes since 1.224: +3 -3 lines
Diff to previous 1.224 (colored)


Fix operational typo.   Bug reported by William Yodlowsky
bsd at openbsd dot rutgers dot edu.   OK millert@, others.

Revision 1.224 / (download) - annotate - [select for diffs], Fri Mar 21 20:33:24 2003 UTC (21 years, 2 months ago) by todd
Branch: MAIN
Changes since 1.223: +2 -2 lines
Diff to previous 1.223 (colored)

grammar; ok miod@

Revision 1.223 / (download) - annotate - [select for diffs], Thu Mar 20 16:04:37 2003 UTC (21 years, 2 months ago) by sturm
Branch: MAIN
Changes since 1.222: +2 -2 lines
Diff to previous 1.222 (colored)

enclose X${lpd_flags} in quotation marks, as it could carry more than
one argument.

OK miod@, millert@, henning@, markus@, fries@, tdeval@

Revision 1.222 / (download) - annotate - [select for diffs], Mon Mar 10 01:05:28 2003 UTC (21 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.221: +2 -2 lines
Diff to previous 1.221 (colored)

commented hourly spamd-setup run

Revision 1.221 / (download) - annotate - [select for diffs], Tue Mar 4 23:37:15 2003 UTC (21 years, 2 months ago) by jakob
Branch: MAIN
Changes since 1.220: +11 -11 lines
Diff to previous 1.220 (colored)

only generate shared secret for rndc if named will be started.
tested by grange@, ok millert@

Revision 1.220 / (download) - annotate - [select for diffs], Tue Mar 4 22:45:53 2003 UTC (21 years, 2 months ago) by jakob
Branch: MAIN
Changes since 1.219: +5 -11 lines
Diff to previous 1.219 (colored)

remove support for named_chroot and named_user; always run named as user
named and chrooted to /var/named. ok deraadt@

Revision 1.219 / (download) - annotate - [select for diffs], Tue Mar 4 18:42:52 2003 UTC (21 years, 2 months ago) by danh
Branch: MAIN
Changes since 1.218: +4 -4 lines
Diff to previous 1.218 (colored)

make sure both /etc/rndc.key and /var/named/etc/rndc.key exist, and are
the same.

ok jakob@, deraadt@

Revision 1.218 / (download) - annotate - [select for diffs], Fri Feb 14 16:00:58 2003 UTC (21 years, 3 months ago) by cedric
Branch: MAIN
Changes since 1.217: +2 -1 lines
Diff to previous 1.217 (colored)

Fix NFS diskless boot when PF is used.
From dhartmei@ e-mail, ok henning@

Revision 1.217 / (download) - annotate - [select for diffs], Mon Jan 20 22:42:01 2003 UTC (21 years, 4 months ago) by jakob
Branch: MAIN
Changes since 1.216: +11 -1 lines
Diff to previous 1.216 (colored)

generated shared secret for rndc/bind9; ok millert@

Revision 1.216 / (download) - annotate - [select for diffs], Mon Jan 20 20:42:28 2003 UTC (21 years, 4 months ago) by millert
Branch: MAIN
Changes since 1.215: +6 -1 lines
Diff to previous 1.215 (colored)

Add a /var/empty/dev/log socket for things that chroot to /var/empty.

Revision 1.215 / (download) - annotate - [select for diffs], Wed Jan 15 09:25:46 2003 UTC (21 years, 4 months ago) by camield
Branch: MAIN
Changes since 1.214: +2 -1 lines
Diff to previous 1.214 (colored)

Allow outbound ping in initial pf rules.

dhclient needs this to validate old (but valid) leases in
/var/db/dhclient.leases in case it needs to fall back to such a
lease.  (the dhcp server can be down or not responding)

Reported by Chris Jepeway.

"makes sense"  henning dhartmei

Revision 1.214 / (download) - annotate - [select for diffs], Mon Jan 6 20:40:39 2003 UTC (21 years, 4 months ago) by marc
Branch: MAIN
Changes since 1.213: +7 -3 lines
Diff to previous 1.213 (colored)


Handle wsconsctl.conf entries that contain spaces, e.g.
keyboard.map+="keysym Caps_Lock = Control_L"
OK fgs@

Revision 1.213 / (download) - annotate - [select for diffs], Fri Jan 3 18:39:58 2003 UTC (21 years, 4 months ago) by miod
Branch: MAIN
Changes since 1.212: +1 -5 lines
Diff to previous 1.212 (colored)

Remove screenblank section; reported by Andrey Matveev.

Revision 1.212 / (download) - annotate - [select for diffs], Fri Dec 27 01:30:19 2002 UTC (21 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.211: +6 -1 lines
Diff to previous 1.211 (colored)

spamd startup stuff

Revision 1.211 / (download) - annotate - [select for diffs], Tue Dec 24 15:53:17 2002 UTC (21 years, 4 months ago) by mcbride
Branch: MAIN
Changes since 1.210: +2 -2 lines
Diff to previous 1.210 (colored)

Simpler default block.

ok deraadt@

Revision 1.210 / (download) - annotate - [select for diffs], Fri Dec 13 10:20:25 2002 UTC (21 years, 5 months ago) by henning
Branch: MAIN
Changes since 1.209: +3 -3 lines
Diff to previous 1.209 (colored)

kill whitespace at EOL; David Krause

Revision 1.209 / (download) - annotate - [select for diffs], Sat Nov 23 18:29:21 2002 UTC (21 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.208: +1 -7 lines
Diff to previous 1.208 (colored)

no more altqd use

Revision 1.208 / (download) - annotate - [select for diffs], Thu Nov 14 09:02:28 2002 UTC (21 years, 6 months ago) by camield
Branch: MAIN
Changes since 1.207: +2 -1 lines
Diff to previous 1.207 (colored)

Allow host to do dns lookups in the initial ruleset.  This way, pfctl
can properly boot rulesets with dns addresses in it.

Revision 1.207 / (download) - annotate - [select for diffs], Mon Oct 14 07:34:25 2002 UTC (21 years, 7 months ago) by mpech
Branch: MAIN
Changes since 1.206: +2 -2 lines
Diff to previous 1.206 (colored)

use stripcom(), not awk. Spotted by form@.

millert@ ok

Revision 1.206 / (download) - annotate - [select for diffs], Sun Oct 6 19:09:20 2002 UTC (21 years, 7 months ago) by krw
Branch: MAIN
Changes since 1.205: +1 -8 lines
Diff to previous 1.205 (colored)

Remove more remnants of smtpfwdd. ok deraadt@.

Revision 1.205 / (download) - annotate - [select for diffs], Thu Sep 12 18:21:48 2002 UTC (21 years, 8 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_3_2_BASE, OPENBSD_3_2
Changes since 1.204: +1 -8 lines
Diff to previous 1.204 (colored)

We no longer need to install copies of /dev/null and /etc/localtime
in named's chroot jail.  These things are now dealt with before
named chroots.

Revision 1.204 / (download) - annotate - [select for diffs], Fri Sep 6 21:30:22 2002 UTC (21 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.203: +1 -8 lines
Diff to previous 1.203 (colored)

more photuris bits by bye bye

Revision 1.203 / (download) - annotate - [select for diffs], Tue Aug 20 08:42:59 2002 UTC (21 years, 9 months ago) by hugh
Branch: MAIN
Changes since 1.202: +20 -19 lines
Diff to previous 1.202 (colored)

Prevent possible races by moving .X11 fixups to before the system
goes multiuser. In consultation with dynamo; cleared by millert.

Revision 1.202 / (download) - annotate - [select for diffs], Sat Jul 27 22:11:58 2002 UTC (21 years, 9 months ago) by matthieu
Branch: MAIN
Changes since 1.201: +19 -1 lines
Diff to previous 1.201 (colored)

Create directories for X11 unix socket at boot time. This removes the
need for root privileges for processes that create the sockets later.
ok deraadt@

Revision 1.201 / (download) - annotate - [select for diffs], Sat Jul 27 04:10:01 2002 UTC (21 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.200: +2 -2 lines
Diff to previous 1.200 (colored)

echo before running sshd; mcbride@countersiege.com

Revision 1.200 / (download) - annotate - [select for diffs], Thu Jul 11 08:27:24 2002 UTC (21 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.199: +1 -4 lines
Diff to previous 1.199 (colored)

www space no longer needs a dev/crypto

Revision 1.199 / (download) - annotate - [select for diffs], Tue Jul 9 16:55:10 2002 UTC (21 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.198: +4 -1 lines
Diff to previous 1.198 (colored)

toss a /dev/crypto copy into /var/www/dev; millert ok

Revision 1.198 / (download) - annotate - [select for diffs], Tue Jun 11 04:51:39 2002 UTC (21 years, 11 months ago) by dhartmei
Branch: MAIN
Changes since 1.197: +3 -6 lines
Diff to previous 1.197 (colored)

pfctl -f instead of -N/-R, ok deraadt@

Revision 1.197 / (download) - annotate - [select for diffs], Sun Jun 9 21:15:54 2002 UTC (21 years, 11 months ago) by hin
Branch: MAIN
Changes since 1.196: +1 -16 lines
Diff to previous 1.196 (colored)

Remove startup stuff for Kerberos 4 servers.

ok deraadt@

Revision 1.196 / (download) - annotate - [select for diffs], Fri Jun 7 08:54:48 2002 UTC (21 years, 11 months ago) by beck
Branch: MAIN
Changes since 1.195: +3 -1 lines
Diff to previous 1.195 (colored)

clear /var/authpf on bootup - ensure we don't kill things we shouldn't

Revision 1.195 / (download) - annotate - [select for diffs], Thu May 23 20:47:57 2002 UTC (22 years ago) by dhartmei
Branch: MAIN
Changes since 1.194: +2 -2 lines
Diff to previous 1.194 (colored)

Sigh, add the rule in the right place (not just when NFS is used).
From Dries Schellekens

Revision 1.194 / (download) - annotate - [select for diffs], Thu May 23 19:38:18 2002 UTC (22 years ago) by dhartmei
Branch: MAIN
Changes since 1.193: +2 -1 lines
Diff to previous 1.193 (colored)

Allow incoming ssh connections in the initial temporary rule set that's
active before /etc/pf.conf is loaded, just in case loading fails (and
leaves the inital set active). ok deraadt@

Revision 1.193 / (download) - annotate - [select for diffs], Mon Feb 25 03:30:46 2002 UTC (22 years, 2 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_3_1_BASE, OPENBSD_3_1
Changes since 1.192: +2 -2 lines
Diff to previous 1.192 (colored)

be silent on kernels which lack nfs; d.doroshenko@omnitel.net

Revision 1.192 / (download) - annotate - [select for diffs], Thu Feb 21 04:18:42 2002 UTC (22 years, 3 months ago) by millert
Branch: MAIN
Changes since 1.191: +2 -2 lines
Diff to previous 1.191 (colored)

If there is a /var/run/dhclient.pid file, stash its contents and
restore it after cleaning out /var/run.  Since we don't have /usr
yet our options are limited here.
Without this change /var/run/dhclient.pid will be removed after
dhclient is started from /etc/netstart.

Revision 1.191 / (download) - annotate - [select for diffs], Tue Feb 19 02:21:16 2002 UTC (22 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.190: +2 -2 lines
Diff to previous 1.190 (colored)

quiet raid check

Revision 1.190 / (download) - annotate - [select for diffs], Sun Feb 17 20:26:03 2002 UTC (22 years, 3 months ago) by tdeval
Branch: MAIN
Changes since 1.189: +4 -2 lines
Diff to previous 1.189 (colored)

raid(4) parity check simplification

Revision 1.189 / (download) - annotate - [select for diffs], Sat Feb 9 17:37:34 2002 UTC (22 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.188: +7 -7 lines
Diff to previous 1.188 (colored)

move ssh config files to /etc/ssh

Revision 1.188 / (download) - annotate - [select for diffs], Tue Jan 8 12:04:43 2002 UTC (22 years, 4 months ago) by tholo
Branch: MAIN
Changes since 1.187: +2 -2 lines
Diff to previous 1.187 (colored)

Permit flags to be set for savecore, e.g. to compress core dumps
ok millert@ fgsch@

Revision 1.187 / (download) - annotate - [select for diffs], Sun Dec 30 16:34:50 2001 UTC (22 years, 4 months ago) by markus
Branch: MAIN
Changes since 1.186: +2 -2 lines
Diff to previous 1.186 (colored)

print "RSA1" for protocol v1

Revision 1.186 / (download) - annotate - [select for diffs], Mon Oct 29 18:17:03 2001 UTC (22 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.185: +4 -4 lines
Diff to previous 1.185 (colored)

handle pflogd_flags better; openbsd@davidkrause.com

Revision 1.185 / (download) - annotate - [select for diffs], Tue Oct 9 18:44:17 2001 UTC (22 years, 7 months ago) by angelos
Branch: MAIN
CVS Tags: OPENBSD_3_0_BASE, OPENBSD_3_0
Changes since 1.184: +3 -3 lines
Diff to previous 1.184 (colored)

isakmpd can work without an isakmpd.conf, but not without an
isakmpd.policy -- change startup conditions accordingly.

Revision 1.184 / (download) - annotate - [select for diffs], Fri Sep 21 05:51:13 2001 UTC (22 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.183: +15 -7 lines
Diff to previous 1.183 (colored)

start pflogd in a different place; do not block NFS in diskless situations; danh & cedric@wireless-networks.com

Revision 1.183 / (download) - annotate - [select for diffs], Wed Sep 19 16:27:47 2001 UTC (22 years, 8 months ago) by todd
Branch: MAIN
Changes since 1.182: +3 -3 lines
Diff to previous 1.182 (colored)

re-order shlib_dirs, now X11R6/lib, local/lib, then custom libdirs
concept originally from Joshua Stein <jcs@rt.fm>, thanks!
markus@, espie@ ok; based on useful discussion from fgsch@, espie@, heko@

Revision 1.182 / (download) - annotate - [select for diffs], Wed Aug 22 16:13:14 2001 UTC (22 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.181: +2 -2 lines
Diff to previous 1.181 (colored)

pflogd_flags; mbing@nfr.net

Revision 1.181 / (download) - annotate - [select for diffs], Wed Aug 22 07:11:17 2001 UTC (22 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.180: +2 -1 lines
Diff to previous 1.180 (colored)

oops, forgot to up pflog0; mbing@nfr.net

Revision 1.180 / (download) - annotate - [select for diffs], Tue Aug 21 22:29:52 2001 UTC (22 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.179: +5 -1 lines
Diff to previous 1.179 (colored)

start pflogd at the right place, I think

Revision 1.179 / (download) - annotate - [select for diffs], Fri Aug 17 22:00:11 2001 UTC (22 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.178: +7 -1 lines
Diff to previous 1.178 (colored)

altqd startup stuff

Revision 1.178 / (download) - annotate - [select for diffs], Wed Jul 4 06:34:19 2001 UTC (22 years, 10 months ago) by mickey
Branch: MAIN
Changes since 1.177: +12 -1 lines
Diff to previous 1.177 (colored)

wsconsctl.conf support, wsconsctl accepts saner var names now; raadtified

Revision 1.177 / (download) - annotate - [select for diffs], Tue Jul 3 03:28:19 2001 UTC (22 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.176: +4 -1 lines
Diff to previous 1.176 (colored)

pull in rc.conf early so that pf(1) startup is right; tested by jasoni, comments from millert

Revision 1.176 / (download) - annotate - [select for diffs], Sun Jul 1 08:38:59 2001 UTC (22 years, 10 months ago) by kjell
Branch: MAIN
Changes since 1.175: +14 -1 lines
Diff to previous 1.175 (colored)

Initialization infrastruture for pf. Based on initial patches
by ian@, and much input and mangling from theo.

Revision 1.175 / (download) - annotate - [select for diffs], Wed Jun 27 03:34:08 2001 UTC (22 years, 10 months ago) by hin
Branch: MAIN
Changes since 1.174: +21 -6 lines
Diff to previous 1.174 (colored)

KerberosV support.

Kerberos related cleanup.

Revision 1.174 / (download) - annotate - [select for diffs], Fri Jun 22 14:46:42 2001 UTC (22 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.173: +2 -2 lines
Diff to previous 1.173 (colored)

bail YP if no domainname; dima@unixfreak.org

Revision 1.173 / (download) - annotate - [select for diffs], Tue Jun 12 06:36:03 2001 UTC (22 years, 11 months ago) by fgsch
Branch: MAIN
Changes since 1.172: +3 -3 lines
Diff to previous 1.172 (colored)

Use lpd_flags instead of lpd, thus allowing to pass parameters to lpd;
patch from Yozo TODA <yozo@imit.chiba-u.ac.jp>, deraadt@ ok.

Revision 1.172 / (download) - annotate - [select for diffs], Sat Jun 2 03:06:29 2001 UTC (22 years, 11 months ago) by miod
Branch: MAIN
Changes since 1.171: +4 -2 lines
Diff to previous 1.171 (colored)

With recent changes to swapctl(8), replace the invocation of swapon
with two swapctl invocations.
Swap on block devices is enabled before fscking filesystems, swap on
files is enabled after all filesystems (including remote) are mounted.

Revision 1.171 / (download) - annotate - [select for diffs], Wed May 30 02:11:09 2001 UTC (22 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.170: +1 -5 lines
Diff to previous 1.170 (colored)

Remove ipf.  Darren Reed has interpreted his (old, new, whichever)
licence in a way that makes ipf not free according to the rules we
established over 5 years ago, at www.openbsd.org/goals.html (and those
same basic rules govern the other *BSD projects too).  Specifically,
Darren says that modified versions are not permitted.  But software
which OpenBSD uses and redistributes must be free to all (be they
people or companies), for any purpose they wish to use it, including
modification, use, peeing on, or even integration into baby mulching
machines or atomic bombs to be dropped on Australia.  Furthermore, we
know of a number of companies using ipf with modification like us, who
are now in the same situation, and we hope that some of them will work
with us to fill this gap that now exists in OpenBSD (temporarily, we
hope).

Revision 1.170 / (download) - annotate - [select for diffs], Tue May 15 21:28:43 2001 UTC (23 years ago) by deraadt
Branch: MAIN
Changes since 1.169: +3 -3 lines
Diff to previous 1.169 (colored)

swapon -a before fsck is run

Revision 1.169 / (download) - annotate - [select for diffs], Thu May 3 21:56:57 2001 UTC (23 years ago) by deraadt
Branch: MAIN
Changes since 1.168: +2 -2 lines
Diff to previous 1.168 (colored)

oops

Revision 1.168 / (download) - annotate - [select for diffs], Wed May 2 02:41:26 2001 UTC (23 years ago) by deraadt
Branch: MAIN
Changes since 1.167: +3 -3 lines
Diff to previous 1.167 (colored)

wsmoused support; missed 2.9 -- bad aaron; heko@saitti.net

Revision 1.167 / (download) - annotate - [select for diffs], Thu Apr 19 04:00:15 2001 UTC (23 years, 1 month ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_9_BASE, OPENBSD_2_9
Changes since 1.166: +3 -3 lines
Diff to previous 1.166 (colored)

permit passing sshd flags; djm

Revision 1.166 / (download) - annotate - [select for diffs], Sun Apr 1 19:39:54 2001 UTC (23 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.165: +1 -6 lines
Diff to previous 1.165 (colored)

wscons rc files are not nicely MI clean, so when some nice diffs are shown around, they can go back in

Revision 1.165 / (download) - annotate - [select for diffs], Fri Mar 2 06:22:39 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.164: +2 -5 lines
Diff to previous 1.164 (colored)

amd now crates autodir by itself

Revision 1.164 / (download) - annotate - [select for diffs], Fri Feb 23 06:50:10 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.163: +4 -1 lines
Diff to previous 1.163 (colored)

I tried to figure out how to have tmp_mnt get created automatically
inside amd source code.  I could not figure out.  So here it goes,
until some rocket scientist points out how to do it in the real source.

Revision 1.163 / (download) - annotate - [select for diffs], Thu Feb 22 08:03:22 2001 UTC (23 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.162: +11 -3 lines
Diff to previous 1.162 (colored)

generate all 3 keys, use -t xxx

Revision 1.162 / (download) - annotate - [select for diffs], Sat Feb 10 18:03:16 2001 UTC (23 years, 3 months ago) by mickey
Branch: MAIN
Changes since 1.161: +6 -1 lines
Diff to previous 1.161 (colored)

install wscons.conf and rc.wscons on alpha/hppa/i386/powerpc and call it from rc

Revision 1.161 / (download) - annotate - [select for diffs], Tue Jan 16 04:08:35 2001 UTC (23 years, 4 months ago) by angelos
Branch: MAIN
Changes since 1.160: +2 -2 lines
Diff to previous 1.160 (colored)

Check whether /etc/inetd.conf exists before starting inetd (chuck@snew.com)

Revision 1.160 / (download) - annotate - [select for diffs], Sat Dec 30 07:59:27 2000 UTC (23 years, 4 months ago) by angelos
Branch: MAIN
Changes since 1.159: +2 -2 lines
Diff to previous 1.159 (colored)

Back-out use of apachectl to start httpd:
 1) It's one more dependency in /etc/rc
 2) It's one more script that starts from /etc/rc (slowdown)
 3) We're only going to be starting httpd in /etc/rc anyway (no other
    weird operations), so there's no reason to force a change in rc.conf
 4) apachectl(8) doesn't mention "startssl" directive
 5) Admins can use apachectl to manage httpd regardless of how the
   latter was started

Thanks to fgs@ for yelling about this :-)

Revision 1.159 / (download) - annotate - [select for diffs], Sat Dec 30 06:51:09 2000 UTC (23 years, 4 months ago) by angelos
Branch: MAIN
Changes since 1.158: +2 -2 lines
Diff to previous 1.158 (colored)

Use apachectl to start httpd, rather than directly call httpd in
/etc/rc (PR 1476)

Revision 1.158 / (download) - annotate - [select for diffs], Sat Dec 30 06:35:17 2000 UTC (23 years, 4 months ago) by angelos
Branch: MAIN
Changes since 1.157: +2 -1 lines
Diff to previous 1.157 (colored)

Initialize RAID parity as needed (PR 1529)

Revision 1.157 / (download) - annotate - [select for diffs], Fri Oct 27 06:36:35 2000 UTC (23 years, 6 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_8_BASE, OPENBSD_2_8
Changes since 1.156: +6 -1 lines
Diff to previous 1.156 (colored)

after seeding from the host.random file, immediately reset the seed file, so
that if a shutdown-less reboot occurs, the next re-seed is not a repeat

Revision 1.156 / (download) - annotate - [select for diffs], Wed Oct 18 21:28:54 2000 UTC (23 years, 7 months ago) by mickey
Branch: MAIN
Changes since 1.155: +2 -2 lines
Diff to previous 1.155 (colored)

grammar in comment

Revision 1.155 / (download) - annotate - [select for diffs], Mon Oct 9 18:07:59 2000 UTC (23 years, 7 months ago) by aaron
Branch: MAIN
Changes since 1.154: +5 -5 lines
Diff to previous 1.154 (colored)

moused will now co-exist with X

Revision 1.154 / (download) - annotate - [select for diffs], Sat Oct 7 00:03:52 2000 UTC (23 years, 7 months ago) by millert
Branch: MAIN
Changes since 1.153: +5 -4 lines
Diff to previous 1.153 (colored)

If /etc/mailer.conf specifies a mailer other than sendmail, there
may be no /etc/mail/sendmail.cf so don't include that in the check
for whether or not to run /usr/sbin/sendmail.  Instead, check for
the existence of /etc/mailer.conf.  Pointed out by Theo.

Revision 1.153 / (download) - annotate - [select for diffs], Wed Sep 6 17:19:27 2000 UTC (23 years, 8 months ago) by millert
Branch: MAIN
Changes since 1.152: +2 -2 lines
Diff to previous 1.152 (colored)

When starting up sendmail in the background, redirect stderr to
/dev/null too.  Otherwise, if there is a name resolution problem
the rc files may finish before sendmail forks into a daemon and it
will complain about EBADF on stderr (since init revoked it).
From a discussion between Theo and myself.

Revision 1.152 / (download) - annotate - [select for diffs], Fri Sep 1 06:56:48 2000 UTC (23 years, 8 months ago) by aaron
Branch: MAIN
Changes since 1.151: +5 -1 lines
Diff to previous 1.151 (colored)

Initialization script stuff for moused.

Revision 1.151 / (download) - annotate - [select for diffs], Mon Aug 28 02:30:35 2000 UTC (23 years, 8 months ago) by brad
Branch: MAIN
Changes since 1.150: +2 -2 lines
Diff to previous 1.150 (colored)

explicit path to gated so that it will load as expected

Revision 1.150 / (download) - annotate - [select for diffs], Fri Aug 25 16:14:12 2000 UTC (23 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.149: +4 -9 lines
Diff to previous 1.149 (colored)

ssh always installed, no more static lib case

Revision 1.149 / (download) - annotate - [select for diffs], Sat Aug 5 06:38:55 2000 UTC (23 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.148: +13 -13 lines
Diff to previous 1.148 (colored)

host.random whacking must be after /var is mounted, obviously

Revision 1.148 / (download) - annotate - [select for diffs], Thu Jul 13 16:26:13 2000 UTC (23 years, 10 months ago) by millert
Branch: MAIN
Changes since 1.147: +2 -2 lines
Diff to previous 1.147 (colored)

timed & rdate start before securelevel is set so no need to check
$securelevel; noted by ho@

Revision 1.147 / (download) - annotate - [select for diffs], Thu Jul 13 13:15:36 2000 UTC (23 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.146: +3 -4 lines
Diff to previous 1.146 (colored)

rtadvd.conf is not required, actually

Revision 1.146 / (download) - annotate - [select for diffs], Tue Jul 11 22:30:56 2000 UTC (23 years, 10 months ago) by matt
Branch: MAIN
Changes since 1.145: +6 -1 lines
Diff to previous 1.145 (colored)

- Move ntpd out of rc.securelevel
- Add ntpdate and rdate rc knobs

Approved-And-Assisted-By: millert

Revision 1.145 / (download) - annotate - [select for diffs], Thu Jul 6 13:24:49 2000 UTC (23 years, 10 months ago) by itojun
Branch: MAIN
Changes since 1.144: +1 -5 lines
Diff to previous 1.144 (colored)

remove ip6defaultif, this is just for IPv6 specification pedants

Revision 1.144 / (download) - annotate - [select for diffs], Wed Jul 5 17:15:51 2000 UTC (23 years, 10 months ago) by millert
Branch: MAIN
Changes since 1.143: +2 -2 lines
Diff to previous 1.143 (colored)

Start sendmail in the background so it doesn't cause blockage
on reboot timing out on DNS problems.

Revision 1.143 / (download) - annotate - [select for diffs], Sun Jul 2 21:24:00 2000 UTC (23 years, 10 months ago) by espie
Branch: MAIN
Changes since 1.142: +3 -1 lines
Diff to previous 1.142 (colored)

Clean-up after httpd

Revision 1.142 / (download) - annotate - [select for diffs], Sun Jun 18 22:58:42 2000 UTC (23 years, 11 months ago) by todd
Branch: MAIN
Changes since 1.141: +1 -17 lines
Diff to previous 1.141 (colored)

ifaliases goes away.
- new installs wont have existing ifaliases
- updates dont touch /etc
- manual updates of /etc/ should know what they're doing anyway

fwiw, see hostname.if(5) alias functionality has moved here for better
overall network configurability

Revision 1.141 / (download) - annotate - [select for diffs], Wed Jun 14 15:50:55 2000 UTC (23 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.140: +3 -3 lines
Diff to previous 1.140 (colored)

avoid a few extra processes; d.doroshenko@omnitel.net

Revision 1.140 / (download) - annotate - [select for diffs], Tue Jun 13 18:29:48 2000 UTC (23 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.139: +3 -3 lines
Diff to previous 1.139 (colored)

normalize test vs [; form

Revision 1.139 / (download) - annotate - [select for diffs], Fri May 19 16:53:17 2000 UTC (24 years ago) by mickey
Branch: MAIN
Changes since 1.138: +1 -7 lines
Diff to previous 1.138 (colored)

nfsiod/nfs_client, bye bye
add commented out entry into sysctl.conf for vfs.nfs.iothreads

Revision 1.138 / (download) - annotate - [select for diffs], Mon May 15 18:24:42 2000 UTC (24 years ago) by hin
Branch: MAIN
Changes since 1.137: +2 -2 lines
Diff to previous 1.137 (colored)

Fix SBINDIR path the right way

Revision 1.137 / (download) - annotate - [select for diffs], Fri May 12 06:10:26 2000 UTC (24 years ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_7_BASE, OPENBSD_2_7
Changes since 1.136: +2 -2 lines
Diff to previous 1.136 (colored)

work around kerberos SBINDIR being misdefined; hin

Revision 1.136 / (download) - annotate - [select for diffs], Wed May 3 02:40:16 2000 UTC (24 years ago) by deraadt
Branch: MAIN
Changes since 1.135: +2 -2 lines
Diff to previous 1.135 (colored)

hmm... simplify this

Revision 1.135 / (download) - annotate - [select for diffs], Sun Apr 30 23:17:05 2000 UTC (24 years ago) by ericj
Branch: MAIN
Changes since 1.134: +2 -2 lines
Diff to previous 1.134 (colored)

fix PR #1169; itojun@ OK

Revision 1.134 / (download) - annotate - [select for diffs], Thu Apr 27 07:06:36 2000 UTC (24 years ago) by deraadt
Branch: MAIN
Changes since 1.133: +3 -3 lines
Diff to previous 1.133 (colored)

ssh_host_dsa_key not ssh_dsa_host_key

Revision 1.133 / (download) - annotate - [select for diffs], Wed Apr 26 22:34:54 2000 UTC (24 years ago) by deraadt
Branch: MAIN
Changes since 1.132: +15 -10 lines
Diff to previous 1.132 (colored)

build DSA keys automatically at boot time

Revision 1.132 / (download) - annotate - [select for diffs], Thu Apr 6 18:26:04 2000 UTC (24 years, 1 month ago) by millert
Branch: MAIN
Changes since 1.131: +3 -3 lines
Diff to previous 1.131 (colored)

Enable sendmail 8.10.0.  Things like sendmail.* and aliases now live
in /etc/mail.

Revision 1.131 / (download) - annotate - [select for diffs], Sun Mar 5 16:55:22 2000 UTC (24 years, 2 months ago) by millert
Branch: MAIN
Changes since 1.130: +23 -11 lines
Diff to previous 1.130 (colored)

Adda a stripcom function to strip comments (and leading whitespace,
depending on IFS).  This replaces the ed and sed code previously
used to do this.

Revision 1.130 / (download) - annotate - [select for diffs], Mon Feb 28 17:28:35 2000 UTC (24 years, 2 months ago) by itojun
Branch: MAIN
Changes since 1.129: +5 -1 lines
Diff to previous 1.129 (colored)

add ip6defaultif, which configures default outgoing interface
when no neighboring router is found (rare case).  this is to conform
strictly to the ND spec.  it is safe to leave it empty.

Revision 1.129 / (download) - annotate - [select for diffs], Sun Jan 30 02:45:51 2000 UTC (24 years, 3 months ago) by millert
Branch: MAIN
Changes since 1.128: +10 -3 lines
Diff to previous 1.128 (colored)

Use ed, not sed, for pulling the interesting bits out of /etc/sysctl.conf.

Revision 1.128 / (download) - annotate - [select for diffs], Sun Jan 30 02:17:00 2000 UTC (24 years, 3 months ago) by mickey
Branch: MAIN
Changes since 1.127: +3 -3 lines
Diff to previous 1.127 (colored)

let sed do all the work, do not invoke extra grep; millert@ ok

Revision 1.127 / (download) - annotate - [select for diffs], Sun Jan 2 14:25:07 2000 UTC (24 years, 4 months ago) by itojun
Branch: MAIN
Changes since 1.126: +27 -1 lines
Diff to previous 1.126 (colored)

add following IPv6 configs: rtadvd_flags route6d_flags rtsold_flags

Revision 1.126 / (download) - annotate - [select for diffs], Sat Jan 1 22:45:35 2000 UTC (24 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.125: +12 -12 lines
Diff to previous 1.125 (colored)

process sysctl.conf way earlier

Revision 1.125 / (download) - annotate - [select for diffs], Tue Nov 23 02:20:14 1999 UTC (24 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.124: +3 -3 lines
Diff to previous 1.124 (colored)

isakmpd is elsewhere; evanc@concer.to

Revision 1.124 / (download) - annotate - [select for diffs], Thu Nov 11 22:28:43 1999 UTC (24 years, 6 months ago) by fgsch
Branch: MAIN
Changes since 1.123: +5 -1 lines
Diff to previous 1.123 (colored)

Allow identd to be used w/o inetd.

Revision 1.123 / (download) - annotate - [select for diffs], Mon Oct 18 01:46:24 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_6_BASE, OPENBSD_2_6
Changes since 1.122: +4 -6 lines
Diff to previous 1.122 (colored)

ssh startup fix; millert

Revision 1.122 / (download) - annotate - [select for diffs], Fri Oct 15 19:51:29 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.121: +9 -6 lines
Diff to previous 1.121 (colored)

oops, got shared library part wrong

Revision 1.121 / (download) - annotate - [select for diffs], Mon Oct 11 20:09:53 1999 UTC (24 years, 7 months ago) by millert
Branch: MAIN
Changes since 1.120: +3 -42 lines
Diff to previous 1.120 (colored)

Run /usr/libexec/vi.recover (now a perl script) to preserve vi backup files.

Revision 1.120 / (download) - annotate - [select for diffs], Thu Oct 7 05:11:19 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.119: +2 -2 lines
Diff to previous 1.119 (colored)

check for executability of ssh-keygen

Revision 1.119 / (download) - annotate - [select for diffs], Thu Oct 7 04:41:07 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.118: +8 -3 lines
Diff to previous 1.118 (colored)

if sshd startup fails due to rsa not being there, start up
/usr/local/sbin/sshd instead, if it is there.

Revision 1.118 / (download) - annotate - [select for diffs], Wed Oct 6 04:41:46 1999 UTC (24 years, 7 months ago) by millert
Branch: MAIN
Changes since 1.117: +5 -5 lines
Diff to previous 1.117 (colored)

Don't complain that /var/tmp/vi.recover is not owned by root
when it doesn't exist.

Revision 1.117 / (download) - annotate - [select for diffs], Sun Oct 3 04:22:42 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.116: +2 -2 lines
Diff to previous 1.116 (colored)

silence the chmod

Revision 1.116 / (download) - annotate - [select for diffs], Thu Sep 30 13:10:20 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.115: +5 -5 lines
Diff to previous 1.115 (colored)

last i checked, screenblank was not a network daemon

Revision 1.115 / (download) - annotate - [select for diffs], Wed Sep 29 06:46:04 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.114: +17 -17 lines
Diff to previous 1.114 (colored)

do ldconfig before all ssh; because they need /usr/local/lib for searching

Revision 1.114 / (download) - annotate - [select for diffs], Tue Sep 28 07:20:01 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.113: +16 -1 lines
Diff to previous 1.113 (colored)

start ssh as part of base system; if no host key, build it upon boot

Revision 1.113 / (download) - annotate - [select for diffs], Mon Sep 27 23:41:18 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.112: +2 -2 lines
Diff to previous 1.112 (colored)

oops

Revision 1.112 / (download) - annotate - [select for diffs], Mon Sep 27 23:40:25 1999 UTC (24 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.111: +4 -2 lines
Diff to previous 1.111 (colored)

stir arandom, too; provos

Revision 1.111 / (download) - annotate - [select for diffs], Sat Sep 4 22:20:20 1999 UTC (24 years, 8 months ago) by millert
Branch: MAIN
Changes since 1.110: +25 -26 lines
Diff to previous 1.110 (colored)

Actually, vi file recivery was not happening on reboot due to a
mistaken assumption.  Noted by dynamo@ime.net.  Fixed by moving the
check for meta character expansion to be inside the two for loops.
They are expanded by simple assignment.

Revision 1.110 / (download) - annotate - [select for diffs], Sat Sep 4 21:30:49 1999 UTC (24 years, 8 months ago) by millert
Branch: MAIN
Changes since 1.109: +38 -34 lines
Diff to previous 1.109 (colored)

Ignore /var/tmp/vi.recover if it is a symlink or owned by non-root.
Probably just paranoia (since /var/tmp/vi.recover is created the
first time the machine is booted) but it can't hurt.

Revision 1.109 / (download) - annotate - [select for diffs], Sat Sep 4 21:07:23 1999 UTC (24 years, 8 months ago) by millert
Branch: MAIN
Changes since 1.108: +10 -5 lines
Diff to previous 1.108 (colored)

Check to make sure vi recovery files are normal files before trying
to read from them (this is a user-writable directory so it is
possible to play games).  Fixes a possible DOS noted by dynamo@ime.net.
If it's not a regular file, we delete it.

Revision 1.108 / (download) - annotate - [select for diffs], Fri Sep 3 18:11:48 1999 UTC (24 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.107: +17 -1 lines
Diff to previous 1.107 (colored)

have shutdown code run /etc/rc with arg of "shutdown"; rc.shutdown becomes  completely admin-editable

Revision 1.107 / (download) - annotate - [select for diffs], Tue Aug 31 03:47:16 1999 UTC (24 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.106: +3 -3 lines
Diff to previous 1.106 (colored)

start amd in /etc/amd; so that if ${amd_master} contains map names, and we
don't want them fetched from YP, it will find them in the current directory.

Revision 1.106 / (download) - annotate - [select for diffs], Thu Aug 19 13:58:07 1999 UTC (24 years, 9 months ago) by kstailey
Branch: MAIN
Changes since 1.105: +3 -3 lines
Diff to previous 1.105 (colored)

s/nvi/vi/

Revision 1.105 / (download) - annotate - [select for diffs], Thu Aug 5 08:12:10 1999 UTC (24 years, 9 months ago) by millert
Branch: MAIN
Changes since 1.104: +2 -2 lines
Diff to previous 1.104 (colored)

typo; -eq not -ne

Revision 1.104 / (download) - annotate - [select for diffs], Thu Aug 5 08:10:06 1999 UTC (24 years, 9 months ago) by millert
Branch: MAIN
Changes since 1.103: +2 -2 lines
Diff to previous 1.103 (colored)

Use 10 X's for sheeer, raving, paranoia

Revision 1.103 / (download) - annotate - [select for diffs], Thu Aug 5 08:04:25 1999 UTC (24 years, 9 months ago) by millert
Branch: MAIN
Changes since 1.102: +2 -2 lines
Diff to previous 1.102 (colored)

Use -execdir not -exec in find; deraadt@

Revision 1.102 / (download) - annotate - [select for diffs], Wed Aug 4 17:07:27 1999 UTC (24 years, 9 months ago) by millert
Branch: MAIN
Changes since 1.101: +9 -8 lines
Diff to previous 1.101 (colored)

Use mktemp(1) for motd /tmp file during boot.  This fixes a potential
problem noted by hugh@openbsd.org whereby a user could create the
well-known /tmp/_motd file and use chflags to make it unremovable.
Then at the next reboot the user's /tmp/_motd would end up in the
system motd.

Revision 1.101 / (download) - annotate - [select for diffs], Tue Aug 3 22:52:42 1999 UTC (24 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.100: +3 -2 lines
Diff to previous 1.100 (colored)

chmod/chown all the ptys

Revision 1.100 / (download) - annotate - [select for diffs], Thu Jul 15 14:31:52 1999 UTC (24 years, 10 months ago) by provos
Branch: MAIN
Changes since 1.99: +9 -5 lines
Diff to previous 1.99 (colored)

move /etc/host.random to /var/db for readonly /, save the entropy state
into /var/db/host.random at shutdown time, so we can make use of it
during reboot to seed our random pool. ok millert@ angelos@ niklas@

Revision 1.99 / (download) - annotate - [select for diffs], Sun May 30 23:20:52 1999 UTC (24 years, 11 months ago) by millert
Branch: MAIN
Changes since 1.98: +3 -3 lines
Diff to previous 1.98 (colored)

Fix typo, '=' not '=='; marc@snafu.org

Revision 1.98 / (download) - annotate - [select for diffs], Wed May 26 08:40:00 1999 UTC (24 years, 11 months ago) by jakob
Branch: MAIN
Changes since 1.97: +8 -1 lines
Diff to previous 1.97 (colored)

Configure raid devices at boot (from NetBSD, ok by niklas@).

Revision 1.97 / (download) - annotate - [select for diffs], Mon May 24 18:00:05 1999 UTC (25 years ago) by millert
Branch: MAIN
Changes since 1.96: +4 -5 lines
Diff to previous 1.96 (colored)

Add shlib_dirs variable so users can add to the directories cached
in /var/run/ld.so.hints

Revision 1.96 / (download) - annotate - [select for diffs], Wed Apr 21 20:18:02 1999 UTC (25 years, 1 month ago) by alex
Branch: MAIN
Changes since 1.95: +4 -1 lines
Diff to previous 1.95 (colored)

Save a copy of the boot messages in /var/run/dmesg.boot.

Revision 1.95 / (download) - annotate - [select for diffs], Mon Dec 28 06:58:30 1998 UTC (25 years, 4 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_5_BASE, OPENBSD_2_5
Changes since 1.94: +5 -2 lines
Diff to previous 1.94 (colored)

split database line up nicely; krw@tcn.net

Revision 1.94 / (download) - annotate - [select for diffs], Mon Dec 21 03:33:43 1998 UTC (25 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.93: +8 -1 lines
Diff to previous 1.93 (colored)

isakmpd startup stuff

Revision 1.93 / (download) - annotate - [select for diffs], Wed Nov 11 09:22:49 1998 UTC (25 years, 6 months ago) by downsj
Branch: MAIN
Changes since 1.92: +5 -1 lines
Diff to previous 1.92 (colored)

Add option for running ftpd out of rc.

Revision 1.92 / (download) - annotate - [select for diffs], Tue Nov 3 05:10:41 1998 UTC (25 years, 6 months ago) by downsj
Branch: MAIN
Changes since 1.91: +2 -2 lines
Diff to previous 1.91 (colored)

Actually use $xdm_flags.

Revision 1.91 / (download) - annotate - [select for diffs], Wed Oct 28 17:47:00 1998 UTC (25 years, 6 months ago) by art
Branch: MAIN
Changes since 1.90: +2 -2 lines
Diff to previous 1.90 (colored)

use xfs, not afs when mounting afs. Making mount_afs work correctly is too hard.

Revision 1.90 / (download) - annotate - [select for diffs], Mon Oct 12 03:02:57 1998 UTC (25 years, 7 months ago) by art
Branch: MAIN
CVS Tags: OPENBSD_2_4_BASE, OPENBSD_2_4
Changes since 1.89: +9 -1 lines
Diff to previous 1.89 (colored)

startup code for AFS

Revision 1.89 / (download) - annotate - [select for diffs], Sat Sep 19 02:31:51 1998 UTC (25 years, 8 months ago) by todd
Branch: MAIN
Changes since 1.88: +17 -17 lines
Diff to previous 1.88 (colored)

shift ifaliases. one more daemon can bind to specific ifaliases.

Revision 1.88 / (download) - annotate - [select for diffs], Fri Aug 28 04:42:38 1998 UTC (25 years, 8 months ago) by millert
Branch: MAIN
Changes since 1.87: +2 -2 lines
Diff to previous 1.87 (colored)

When running kvm_mkdb, don't specify /bsd so we can use /dev/ksyms if it exists and is configured

Revision 1.87 / (download) - annotate - [select for diffs], Tue Aug 25 18:19:40 1998 UTC (25 years, 8 months ago) by marc
Branch: MAIN
Changes since 1.86: +9 -1 lines
Diff to previous 1.86 (colored)

put back recent change (apmd flags) that was accidently removed

Revision 1.86 / (download) - annotate - [select for diffs], Wed Aug 19 04:25:46 1998 UTC (25 years, 9 months ago) by form
Branch: MAIN
Changes since 1.85: +11 -9 lines
Diff to previous 1.85 (colored)

dhcpd: start from rc, controlled by rc.conf; sample config files

Revision 1.85 / (download) - annotate - [select for diffs], Tue Aug 18 23:54:41 1998 UTC (25 years, 9 months ago) by marc
Branch: MAIN
Changes since 1.84: +5 -4 lines
Diff to previous 1.84 (colored)

allow flags to be passed to apmd at millert's request

Revision 1.84 / (download) - annotate - [select for diffs], Tue Aug 18 23:11:15 1998 UTC (25 years, 9 months ago) by marc
Branch: MAIN
Changes since 1.83: +8 -1 lines
Diff to previous 1.83 (colored)

start apmd in rc, controlled by rc.conf

Revision 1.83 / (download) - annotate - [select for diffs], Fri Jul 24 18:01:25 1998 UTC (25 years, 10 months ago) by millert
Branch: MAIN
Changes since 1.82: +5 -1 lines
Diff to previous 1.82 (colored)

update /var/named/etc/localtime when /etc/localtime changes

Revision 1.82 / (download) - annotate - [select for diffs], Mon Jul 13 23:24:57 1998 UTC (25 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.81: +2 -2 lines
Diff to previous 1.81 (colored)

quiet that dd

Revision 1.81 / (download) - annotate - [select for diffs], Mon Jul 13 03:38:54 1998 UTC (25 years, 10 months ago) by millert
Branch: MAIN
Changes since 1.80: +4 -1 lines
Diff to previous 1.80 (colored)

Create /var/named/dev/null if it is not there and we are running named chroot'd.  It would be cleaner to simply do this at install time but this way people who are tracking sources get the correct behavior too.

Revision 1.80 / (download) - annotate - [select for diffs], Sat Jul 11 08:41:34 1998 UTC (25 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.79: +2 -2 lines
Diff to previous 1.79 (colored)

change last route to route -n

Revision 1.79 / (download) - annotate - [select for diffs], Sun Jul 5 02:50:08 1998 UTC (25 years, 10 months ago) by todd
Branch: MAIN
Changes since 1.78: +2 -2 lines
Diff to previous 1.78 (colored)

yet another typo

Revision 1.78 / (download) - annotate - [select for diffs], Sat Jul 4 23:35:42 1998 UTC (25 years, 10 months ago) by todd
Branch: MAIN
Changes since 1.77: +2 -2 lines
Diff to previous 1.77 (colored)

fix a typo

Revision 1.77 / (download) - annotate - [select for diffs], Fri Jul 3 03:48:16 1998 UTC (25 years, 10 months ago) by angelos
Branch: MAIN
Changes since 1.76: +7 -1 lines
Diff to previous 1.76 (colored)

Generate an /etc/host.random if it doesn't exist; 64KB, perms 600.

Revision 1.76 / (download) - annotate - [select for diffs], Sat Jun 13 03:38:15 1998 UTC (25 years, 11 months ago) by millert
Branch: MAIN
Changes since 1.75: +2 -2 lines
Diff to previous 1.75 (colored)

don't make /var/named/dev/log if named_flags == NO

Revision 1.75 / (download) - annotate - [select for diffs], Wed Jun 3 17:12:03 1998 UTC (25 years, 11 months ago) by millert
Branch: MAIN
Changes since 1.74: +3 -3 lines
Diff to previous 1.74 (colored)

to turn of named chroot set to be empty, not 'NO'

Revision 1.74 / (download) - annotate - [select for diffs], Wed Jun 3 16:04:07 1998 UTC (25 years, 11 months ago) by millert
Branch: MAIN
Changes since 1.73: +12 -2 lines
Diff to previous 1.73 (colored)

Add named_user and named_chroot variables to simplify chroot'd named
setup.

Revision 1.73 / (download) - annotate - [select for diffs], Thu May 14 23:58:01 1998 UTC (26 years ago) by millert
Branch: MAIN
Changes since 1.72: +5 -5 lines
Diff to previous 1.72 (colored)

move cron to the end so users cannot run cron jobs before the system is all the way up

Revision 1.72 / (download) - annotate - [select for diffs], Wed May 13 21:10:03 1998 UTC (26 years ago) by deraadt
Branch: MAIN
Changes since 1.71: +5 -5 lines
Diff to previous 1.71 (colored)

test -> [

Revision 1.71 / (download) - annotate - [select for diffs], Tue Apr 7 06:11:52 1998 UTC (26 years, 1 month ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_3_BASE, OPENBSD_2_3
Changes since 1.70: +7 -1 lines
Diff to previous 1.70 (colored)

add xdm control to /etc/rc.conf; X11 docs need updating

Revision 1.70 / (download) - annotate - [select for diffs], Wed Mar 25 23:07:21 1998 UTC (26 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.69: +1 -2 lines
Diff to previous 1.69 (colored)

savecore prints a message; no need to print another

Revision 1.69 / (download) - annotate - [select for diffs], Wed Mar 25 07:25:20 1998 UTC (26 years, 2 months ago) by deraadt
Branch: MAIN
Changes since 1.68: +5 -1 lines
Diff to previous 1.68 (colored)

httpd is now in the tree, and an rc.conf flag turns it on

Revision 1.68 / (download) - annotate - [select for diffs], Wed Mar 11 18:08:09 1998 UTC (26 years, 2 months ago) by millert
Branch: MAIN
Changes since 1.67: +3 -3 lines
Diff to previous 1.67 (colored)

Kill whitespace at eol.

Revision 1.67 / (download) - annotate - [select for diffs], Thu Feb 26 18:50:52 1998 UTC (26 years, 2 months ago) by millert
Branch: MAIN
Changes since 1.66: +8 -8 lines
Diff to previous 1.66 (colored)

Replace "test -r" with -s and -e as -r always returns true for root?!?!

Revision 1.66 / (download) - annotate - [select for diffs], Wed Feb 18 14:05:27 1998 UTC (26 years, 3 months ago) by art
Branch: MAIN
Changes since 1.65: +10 -2 lines
Diff to previous 1.65 (colored)

add an option for kerberos slave servers.

Revision 1.65 / (download) - annotate - [select for diffs], Fri Feb 13 06:35:25 1998 UTC (26 years, 3 months ago) by marc
Branch: MAIN
Changes since 1.64: +2 -2 lines
Diff to previous 1.64 (colored)

fix typo

Revision 1.64 / (download) - annotate - [select for diffs], Wed Feb 11 02:28:10 1998 UTC (26 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.63: +2 -2 lines
Diff to previous 1.63 (colored)

syslogd gets a new -a argument: specify additional AF_UNIX log devices
syslogd should create & listen to. As in "syslogd -a /chroot/dev/log",
I'm sure you get the idea.

Revision 1.63 / (download) - annotate - [select for diffs], Sat Feb 7 21:17:37 1998 UTC (26 years, 3 months ago) by beck
Branch: MAIN
Changes since 1.62: +8 -1 lines
Diff to previous 1.62 (colored)

	Flags and startup for smtpd/smtpfwdd - not enabled by default.

Revision 1.62 / (download) - annotate - [select for diffs], Fri Feb 6 00:06:00 1998 UTC (26 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.61: +2 -1 lines
Diff to previous 1.61 (colored)

typo

Revision 1.61 / (download) - annotate - [select for diffs], Thu Feb 5 09:54:36 1998 UTC (26 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.60: +11 -5 lines
Diff to previous 1.60 (colored)

introduce /etc/sysctl.conf containing sysctl variables to change at boot time

Revision 1.60 / (download) - annotate - [select for diffs], Fri Jan 23 08:38:31 1998 UTC (26 years, 4 months ago) by art
Branch: MAIN
Changes since 1.59: +3 -3 lines
Diff to previous 1.59 (colored)

correct path to the kerberos servers.

Revision 1.59 / (download) - annotate - [select for diffs], Wed Jan 21 23:35:56 1998 UTC (26 years, 4 months ago) by downsj
Branch: MAIN
Changes since 1.58: +2 -2 lines
Diff to previous 1.58 (colored)

Add ${nfsiod_flags}

Revision 1.58 / (download) - annotate - [select for diffs], Sun Dec 21 06:40:50 1997 UTC (26 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.57: +9 -10 lines
Diff to previous 1.57 (colored)

sigh; move syslog up nearer the top.  Any failures from this?

Revision 1.57 / (download) - annotate - [select for diffs], Fri Dec 12 23:02:26 1997 UTC (26 years, 5 months ago) by niklas
Branch: MAIN
Changes since 1.56: +2 -1 lines
Diff to previous 1.56 (colored)

Diskless root mounts were ro too long

Revision 1.56 / (download) - annotate - [select for diffs], Sun Nov 23 11:54:16 1997 UTC (26 years, 6 months ago) by maja
Branch: MAIN
Changes since 1.55: +8 -1 lines
Diff to previous 1.55 (colored)

Add support for mopd. -moj

Revision 1.55 / (download) - annotate - [select for diffs], Wed Nov 19 23:44:21 1997 UTC (26 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.54: +7 -7 lines
Diff to previous 1.54 (colored)

clean /var earlier

Revision 1.54 / (download) - annotate - [select for diffs], Sat Nov 8 20:45:33 1997 UTC (26 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.53: +7 -8 lines
Diff to previous 1.53 (colored)

start named earlier; this is an experiment

Revision 1.53 / (download) - annotate - [select for diffs], Tue Nov 4 09:15:31 1997 UTC (26 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.52: +2 -2 lines
Diff to previous 1.52 (colored)

kill spaces at ends of lines; m4

Revision 1.52 / (download) - annotate - [select for diffs], Tue Nov 4 08:39:33 1997 UTC (26 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.51: +14 -14 lines
Diff to previous 1.51 (colored)

things come from rc.conf not netstart nowadays

Revision 1.51 / (download) - annotate - [select for diffs], Wed Oct 15 16:28:29 1997 UTC (26 years, 7 months ago) by millert
Branch: MAIN
CVS Tags: OPENBSD_2_2_BASE, OPENBSD_2_2
Changes since 1.50: +21 -2 lines
Diff to previous 1.50 (colored)

Add rest of stuff from nvi's recover script.

Revision 1.50 / (download) - annotate - [select for diffs], Tue Sep 30 04:54:50 1997 UTC (26 years, 7 months ago) by millert
Branch: MAIN
Changes since 1.49: +9 -1 lines
Diff to previous 1.49 (colored)

Make /var/tmp/vi.recover if it does not exist.

Revision 1.49 / (download) - annotate - [select for diffs], Fri Sep 26 18:43:45 1997 UTC (26 years, 7 months ago) by millert
Branch: MAIN
Changes since 1.48: +9 -9 lines
Diff to previous 1.48 (colored)

Clear /tmp before running /etc/rc.securelevel.  Brian Candler <btc@demon.net>

Revision 1.48 / (download) - annotate - [select for diffs], Sat Sep 20 07:40:40 1997 UTC (26 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.47: +2 -1 lines
Diff to previous 1.47 (colored)

re-attempt nfs mounts after named is started...

Revision 1.47 / (download) - annotate - [select for diffs], Wed Sep 17 09:37:11 1997 UTC (26 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.46: +2 -2 lines
Diff to previous 1.46 (colored)

little missing space, argh

Revision 1.46 / (download) - annotate - [select for diffs], Sun Sep 14 10:35:40 1997 UTC (26 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.45: +3 -2 lines
Diff to previous 1.45 (colored)

only start mountd if a non-commented line is in exports; decreased vulnerabilty in common cases

Revision 1.45 / (download) - annotate - [select for diffs], Tue Sep 2 14:49:25 1997 UTC (26 years, 8 months ago) by kstailey
Branch: MAIN
Changes since 1.44: +3 -3 lines
Diff to previous 1.44 (colored)

The /etc/photurisd directory is created by /usr/src/Makefile's "beforeinstall"
target.  It does not represent a desire to run photurisd.  Changed photurisd
startup to look for /etc/photurisd/photurisd.conf file.

Revision 1.44 / (download) - annotate - [select for diffs], Mon Aug 25 20:50:38 1997 UTC (26 years, 8 months ago) by millert
Branch: MAIN
Changes since 1.43: +2 -2 lines
Diff to previous 1.43 (colored)

Explicately pass -host flag to route(8) to avoid confusion with networks.

Revision 1.43 / (download) - annotate - [select for diffs], Sat Aug 23 15:01:24 1997 UTC (26 years, 9 months ago) by mickey
Branch: MAIN
Changes since 1.42: +2 -2 lines
Diff to previous 1.42 (colored)

echo on ipmon startup

Revision 1.42 / (download) - annotate - [select for diffs], Tue Aug 19 21:55:14 1997 UTC (26 years, 9 months ago) by niklas
Branch: MAIN
Changes since 1.41: +5 -2 lines
Diff to previous 1.41 (colored)

Add hook for rpc.lockd, make nfsd flags settable in netstart

Revision 1.41 / (download) - annotate - [select for diffs], Thu Jul 31 02:23:45 1997 UTC (26 years, 9 months ago) by downsj
Branch: MAIN
Changes since 1.40: +7 -5 lines
Diff to previous 1.40 (colored)

Make quotas optional; wedged into netstart for the time being.
/etc/rc.conf, anyone?

Revision 1.40 / (download) - annotate - [select for diffs], Fri Jul 25 00:06:02 1997 UTC (26 years, 10 months ago) by provos
Branch: MAIN
Changes since 1.39: +8 -8 lines
Diff to previous 1.39 (colored)

earlier start of keymanagement

Revision 1.39 / (download) - annotate - [select for diffs], Tue Jul 22 17:11:56 1997 UTC (26 years, 10 months ago) by kstailey
Branch: MAIN
Changes since 1.38: +2 -2 lines
Diff to previous 1.38 (colored)

now that ipmon daemon(3)s, remove ampersand

Revision 1.38 / (download) - annotate - [select for diffs], Tue Jul 22 10:02:47 1997 UTC (26 years, 10 months ago) by provos
Branch: MAIN
Changes since 1.37: +8 -1 lines
Diff to previous 1.37 (colored)

start the photuris daemon per default. hilfe.

Revision 1.37 / (download) - annotate - [select for diffs], Fri Jun 20 13:01:34 1997 UTC (26 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.36: +5 -1 lines
Diff to previous 1.36 (colored)

if screenblank exists, start it

Revision 1.36 / (download) - annotate - [select for diffs], Tue Jun 17 13:13:47 1997 UTC (26 years, 11 months ago) by niklas
Branch: MAIN
Changes since 1.35: +1 -1 lines
Diff to previous 1.35 (colored)

Put in hooks to start ypserv with flags

Revision 1.35 / (download) - annotate - [select for diffs], Tue Jun 17 10:20:05 1997 UTC (26 years, 11 months ago) by niklas
Branch: MAIN
Changes since 1.34: +3 -2 lines
Diff to previous 1.34 (colored)

Put in hooks to start rpc.yppasswdd with flags

Revision 1.34 / (download) - annotate - [select for diffs], Tue Apr 22 23:04:57 1997 UTC (27 years, 1 month ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_1_BASE, OPENBSD_2_1
Changes since 1.33: +13 -13 lines
Diff to previous 1.33 (colored)

move motd generation to avoid user races; kashmir@umiacs.umd.edu

Revision 1.33 / (download) - annotate - [select for diffs], Wed Apr 16 05:48:27 1997 UTC (27 years, 1 month ago) by millert
Branch: MAIN
Changes since 1.32: +3 -2 lines
Diff to previous 1.32 (colored)

Don't source /etc/rc.securelevel if it doesn't exist and be
more verbose when upping the securelevel.

Revision 1.32 / (download) - annotate - [select for diffs], Tue Apr 15 09:26:47 1997 UTC (27 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.31: +6 -1 lines
Diff to previous 1.31 (colored)

split rc.local, creating rc.securelevel. Read the comments. If you believe
in securelevels, follow them religiously. Problem found by millert...

Revision 1.31 / (download) - annotate - [select for diffs], Fri Feb 28 07:53:33 1997 UTC (27 years, 2 months ago) by millert
Branch: MAIN
Changes since 1.30: +2 -2 lines
Diff to previous 1.30 (colored)

fsck now raises datasize limit itself.

Revision 1.30 / (download) - annotate - [select for diffs], Wed Feb 19 03:59:14 1997 UTC (27 years, 3 months ago) by tholo
Branch: MAIN
Changes since 1.29: +4 -2 lines
Diff to previous 1.29 (colored)

Start kadmind if kerberos server

Revision 1.29 / (download) - annotate - [select for diffs], Mon Feb 3 12:04:44 1997 UTC (27 years, 3 months ago) by deraadt
Branch: MAIN
Changes since 1.28: +17 -1 lines
Diff to previous 1.28 (colored)

do ifaliases after /usr/bin exists in nfs diskless env; pr#77, matthieu@laas.fr

Revision 1.28 / (download) - annotate - [select for diffs], Sun Dec 22 20:14:09 1996 UTC (27 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.27: +2 -2 lines
Diff to previous 1.27 (colored)

crank ulimit -d for fsck run (someone with a 19GB ccd ran into a problem)

Revision 1.27 / (download) - annotate - [select for diffs], Sat Dec 7 12:19:00 1996 UTC (27 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.26: +2 -2 lines
Diff to previous 1.26 (colored)

ypserv w/o -d is OK

Revision 1.25.2.1 / (download) - annotate - [select for diffs], Fri Oct 11 23:00:18 1996 UTC (27 years, 7 months ago) by deraadt
Branch: OPENBSD_2_0
Changes since 1.25: +9 -2 lines
Diff to previous 1.25 (colored) next main 1.26 (colored)

pullup

Revision 1.26 / (download) - annotate - [select for diffs], Wed Oct 9 07:13:30 1996 UTC (27 years, 7 months ago) by deraadt
Branch: MAIN
Changes since 1.25: +9 -2 lines
Diff to previous 1.25 (colored)

bit more careful ldconfig

Revision 1.25 / (download) - annotate - [select for diffs], Mon Sep 23 13:06:36 1996 UTC (27 years, 8 months ago) by deraadt
Branch: MAIN
CVS Tags: OPENBSD_2_0_BASE
Branch point for: OPENBSD_2_0
Changes since 1.24: +5 -1 lines
Diff to previous 1.24 (colored)

rfc1323 variable

Revision 1.24 / (download) - annotate - [select for diffs], Sat Sep 7 20:45:24 1996 UTC (27 years, 8 months ago) by millert
Branch: MAIN
Changes since 1.23: +5 -2 lines
Diff to previous 1.23 (colored)

typo + comment

Revision 1.23 / (download) - annotate - [select for diffs], Wed Sep 4 10:25:53 1996 UTC (27 years, 8 months ago) by deraadt
Branch: MAIN
Changes since 1.22: +11 -4 lines
Diff to previous 1.22 (colored)

control portmap, inetd, and lpd from netstart; idea from tqbf@enteract.com

Revision 1.22 / (download) - annotate - [select for diffs], Sat Jul 27 01:39:04 1996 UTC (27 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.21: +2 -2 lines
Diff to previous 1.21 (colored)

syslogd: -s goes away, becomes default. -u becomes insecure mode

Revision 1.21 / (download) - annotate - [select for diffs], Thu Jul 25 22:04:46 1996 UTC (27 years, 9 months ago) by deraadt
Branch: MAIN
Changes since 1.20: +5 -3 lines
Diff to previous 1.20 (colored)

ypserv, ypbind, then rpc.yppasswdd

Revision 1.20 / (download) - annotate - [select for diffs], Thu Jul 18 09:57:37 1996 UTC (27 years, 10 months ago) by downsj
Branch: MAIN
Changes since 1.19: +2 -2 lines
Diff to previous 1.19 (colored)

daily: disable the fscks by default.
rc: add /usr/local/lib to ldconfig.

Revision 1.19 / (download) - annotate - [select for diffs], Fri Jul 5 02:18:43 1996 UTC (27 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.18: +3 -3 lines
Diff to previous 1.18 (colored)

start ypbind after ypserv

Revision 1.18 / (download) - annotate - [select for diffs], Fri Jun 28 01:53:53 1996 UTC (27 years, 10 months ago) by deraadt
Branch: MAIN
Changes since 1.17: +2 -2 lines
Diff to previous 1.17 (colored)

syslogd -s by default

Revision 1.17 / (download) - annotate - [select for diffs], Tue Jun 18 15:30:01 1996 UTC (27 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.16: +29 -11 lines
Diff to previous 1.16 (colored)

move std stuff from rc.local to rc

Revision 1.16 / (download) - annotate - [select for diffs], Wed Jun 12 09:13:20 1996 UTC (27 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.15: +2 -2 lines
Diff to previous 1.15 (colored)

no ypxfrd

Revision 1.15 / (download) - annotate - [select for diffs], Wed Jun 12 09:02:59 1996 UTC (27 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.14: +2 -2 lines
Diff to previous 1.14 (colored)

fix test for yp in resolv.conf

Revision 1.14 / (download) - annotate - [select for diffs], Tue Jun 11 03:25:10 1996 UTC (27 years, 11 months ago) by tholo
Branch: MAIN
Changes since 1.13: +1 -2 lines
Diff to previous 1.13 (colored)

Kernel-implementation of update(8) my me

Revision 1.13 / (download) - annotate - [select for diffs], Mon Jun 10 07:15:17 1996 UTC (27 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.12: +2 -2 lines
Diff to previous 1.12 (colored)

fix rpc.yppasswdd conditional

Revision 1.12 / (download) - annotate - [select for diffs], Thu May 30 09:37:34 1996 UTC (27 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.11: +5 -1 lines
Diff to previous 1.11 (colored)

use kbd command on /etc/kbdtype if applicable

Revision 1.11 / (download) - annotate - [select for diffs], Sun May 26 10:25:27 1996 UTC (27 years, 11 months ago) by deraadt
Branch: MAIN
Changes since 1.10: +1 -2 lines
Diff to previous 1.10 (colored)

sync & label

Revision 1.10 / (download) - annotate - [select for diffs], Fri May 3 11:46:34 1996 UTC (28 years ago) by deraadt
Branch: MAIN
Changes since 1.9: +3 -3 lines
Diff to previous 1.9 (colored)

pretty comments, run ypxfrd with ypserv

Revision 1.9 / (download) - annotate - [select for diffs], Mon Apr 29 08:05:34 1996 UTC (28 years ago) by deraadt
Branch: MAIN
Changes since 1.8: +1 -1 lines
Diff to previous 1.8 (colored)

yp depends on /var/yp/bindings, not only /var/yp

Revision 1.8 / (download) - annotate - [select for diffs], Mon Apr 29 08:02:59 1996 UTC (28 years ago) by deraadt
Branch: MAIN
Changes since 1.7: +23 -9 lines
Diff to previous 1.7 (colored)

intuit whether ypbind, ypserv, and rpc.yppasswdd should run

Revision 1.7 / (download) - annotate - [select for diffs], Wed Apr 24 12:43:24 1996 UTC (28 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.6: +8 -0 lines
Diff to previous 1.6 (colored)

start ypserv & rpc.yppasswdd automatically

Revision 1.6 / (download) - annotate - [select for diffs], Tue Apr 23 03:18:34 1996 UTC (28 years, 1 month ago) by deraadt
Branch: MAIN
Changes since 1.5: +3 -2 lines
Diff to previous 1.5 (colored)

sync with netbsd 960418

Revision 1.5 / (download) - annotate - [select for diffs], Tue Jan 9 09:29:24 1996 UTC (28 years, 4 months ago) by dm
Branch: MAIN
Changes since 1.4: +4 -0 lines
Diff to previous 1.4 (colored)

added IP filter to netstat/rc and put examples in /usr/share/ipf

Revision 1.4 / (download) - annotate - [select for diffs], Sat Dec 30 23:38:18 1995 UTC (28 years, 4 months ago) by deraadt
Branch: MAIN
Changes since 1.3: +7 -1 lines
Diff to previous 1.3 (colored)

from netbsd: start mrouted like routed

Revision 1.3 / (download) - annotate - [select for diffs], Sat Dec 16 04:51:00 1995 UTC (28 years, 5 months ago) by deraadt
Branch: MAIN
Changes since 1.2: +1 -1 lines
Diff to previous 1.2 (colored)

document where syslogd -s would be used

Revision 1.2 / (download) - annotate - [select for diffs], Wed Nov 22 09:58:39 1995 UTC (28 years, 6 months ago) by deraadt
Branch: MAIN
Changes since 1.1: +1 -1 lines
Diff to previous 1.1 (colored)

kernel is called /bsd

Revision 1.1.1.1 / (download) - annotate - [select for diffs] (vendor branch), Wed Oct 18 08:37:57 1995 UTC (28 years, 7 months ago) by deraadt
CVS Tags: netbsd_1_1
Changes since 1.1: +0 -0 lines
Diff to previous 1.1 (colored)

initial import of NetBSD tree

Revision 1.1 / (download) - annotate - [select for diffs], Wed Oct 18 08:37:57 1995 UTC (28 years, 7 months ago) by deraadt
Branch: MAIN

Initial revision

This form allows you to request diff's between any two revisions of a file. You may select a symbolic revision name using the selection box or you may type in a numeric name using the type-in text box.