summaryrefslogtreecommitdiffstats
path: root/etc
AgeCommit message (Collapse)AuthorFilesLines
2021-04-02syncderaadt6-21/+21
2021-04-02don't put ptys onto the ramdisk mediaderaadt6-14/+7
from miod
2021-03-27The ospf6d manpage states that the daemon laks support for multi arearemi1-7/+2
configurations. Fix the example config to only use one area instead of two. Issue brought up and OK danj@ claudio@ doesn't mind
2021-03-25mail(1) cares about whitespacederaadt1-1/+1
2021-03-24Add mouse.tp.tapping example.bru1-1/+3
ok kn@
2021-03-13because the kernel has been replaced after last boot, run kvm_mkdbderaadt1-5/+5
before the first consumer of kvm_bsd.db
2021-03-11grow media a littlederaadt1-4/+4
2021-03-10Import regenerated moduli file.dtucker1-406/+446
2021-03-09dhcpleased wants /var (but contains code to handle when it isn't there).deraadt1-3/+3
But in the nfs diskless case, we can do better by starting it a little later. This disrupts nfs diskless on dynamic addresses a little, if it ever actually worked with dhclient, but anyone doing that deserves the headache. ok florian
2021-03-04Update TAL files to offical versions that include a https:// URL for theclaudio3-0/+3
trust anchor. rpki-client will then use the https:// URL first and fall back to rsync if the https request failed. OK job@ tb@
2021-03-01resolvd and dhcpleased should not be enabled yetderaadt1-3/+3
2021-02-28install rc.d/resolvdderaadt1-2/+2
2021-02-27Add logger(1) support for daemons that are logging to stdout/stderr (mostly fromajacoutot1-5/+9
the go ecosystem). Properly handle failing daemon startup now that we have pipefail. To take advantage of this new feature, just add foo_logger=facility to the daemon rc.d(8) script or in rc.conf.local(8) or use rcctl: rcctl set foo logger daemon.info tweak for checking flags in rcctl(8) from martijn@ "this looks pretty good" deraadt@ ok sthen@
2021-02-26Ship resolvd service, enable it by defaultkn3-3/+15
Starting right after unwind. OK deraadt
2021-02-26Create /var/db/dhcpleased for lease files.florian1-1/+3
OK deraadt@
2021-02-26rc(8) bits for dhcpleased(8).florian4-7/+19
OK deraadt
2021-02-22add 7.0 syspatch pubkeyrobert1-0/+2
2021-02-18add rpki-rtr port 323; ok jobderaadt1-1/+2
2021-02-12syncjsg7-41/+140
2021-02-12create /dev/ drm nodes with the same names as linuxjsg14-14/+39
This was proposed by Emil Velikov to simplify libdrm and will remove the need for some patches in ports. /dev/drm0 -> /dev/dri/card0 /dev/drmR128 -> /dev/dri/renderD128 The previous names will remain for a period of time and will later be removed. Major and minor numbers remain the same. libdrm will not be changed to use the new names until known privsep and sandbox use has been updated to allow the new names. ok deraadt@
2021-02-12do not need 66 keys anymorederaadt4-8/+0
2021-02-09rc: ensure that vfs.mounts.nfs check works without NFSnaddy1-2/+2
If NFS isn't compiled into the kernel, sysctl -n vfs.mounts.nfs will produce no numerical output. Make sure that we always have a valid arithmetic expression. Reported by and ok patrick@
2021-02-087.0 firmware keysthen1-0/+2
2021-02-087.0 packages keynaddy1-0/+2
2021-02-08add future 7.0 base keyderaadt1-0/+2
2021-02-066.9-betaderaadt1-3/+3
2021-02-02Improve the last commentdanj1-4/+4
Remove a trailing white space, don't misspell misconfiguration and use https. ok jmc, claudio
2021-01-23syncderaadt13-52/+156
2021-01-23introduce ujoy(4), a restricted subset of uhid(4) for gamecontrollers.thfr14-14/+32
This includes ujoy_hid_is_collection() to work around limitations of hid_is_collection() until this can be combined without fallout. input, testing with 8bitdo controller, and ok brynet@ PS4 controller testing, fix for hid_is_collection, and ok mglocker@
2021-01-18crank limits to satisfy piggy piggy clangderaadt1-3/+3
2021-01-11Bump default datasize-max and datasize-cur since clang now seems toderaadt1-3/+3
require MORE [...]
2021-01-11Bump default datasize-max and datasize-cur since clang now seems tokettenis1-3/+3
require more than 768M to build itself. ok deraadt@
2021-01-08Bump default datasize-max and datasize-cur since clang now seems tonaddy1-3/+3
require more than 768M to build itself.
2021-01-07add a xenodm login class and bump openfiles to 512 to avoid running outrobert14-14/+70
of file descriptors while running a busy desktop the xenodm login class expands the records from the daemon login class ok aja@, deraadt@, kettenis@, sthen@
2021-01-06Bump default datasize-max and datasize-cur since clang now seems tokettenis1-3/+3
require more than 768M to build itself.
2021-01-03Bump default datasize-max and datasize-cur since clang now seems tokettenis1-3/+3
require more than 768M to build itself.
2021-01-03Add space for ballooning clang.visa2-6/+6
Moreover, this makes default datasize limits consistent mips64-wide.
2020-12-23Allow the provision of dhclient(8) options on 'dhcp' lines in hostname.if(5)krw1-5/+16
files. Usual man page help & ok jmc@
2020-12-21Avoid issuing pointless 'ifconfig <if> up' when processing 'dhcp' inkrw1-3/+4
hostname.if files. dhclient(8) does that itself. Part of the "further script optimizations" promised in r1.200 of netstart. Tested & ok gnezdo@
2020-11-29Fix previous: use correct version of netstart and installer bits.tb1-10/+11
2020-11-29Add support for !command to mygate, so that netstart has a late opportunityderaadt2-20/+27
to perform network configuration (for example, "!route source -ifp em0") Split mygate and myname manual pages (how did anyone ever believe these are related), and perform hostname configuration much earlier in rc. discussed with benno, claudio, jmc, etc etc, last version of !command parser by tb
2020-11-28Prepare for libX11 1.7.0matthieu1-2/+2
2020-11-08no more mobileip;jmc1-3/+3
ok claudio deraadt
2020-11-04Back out last commit.denis1-3/+3
Some devs are not convinced.
2020-11-02acme response challenge location to issue better error codedenis1-3/+3
Notified to me by jmc@ Diff by Matthias Pressfreund <mpfr @ fn de>, thanks
2020-10-28Remove commented-out edns-buffer-size section from the default unbound.conf.sthen1-7/+1
The default in Unbound (and other DNS server software in the recent "DNS flag day") changed to 1232 bytes, this avoids problems due to fragmented packets (fragments can result in blackholes and also enable some attack vectors) so there's now little reason to reduce this from defaults, and increasing it is more of a specialist use case that isn't really needed in this streamlined default config.
2020-10-24regenkettenis1-8/+15
2020-10-24Add /dev/drm[0-3].kettenis1-1/+3
2020-10-20Remove calls for df(1), netstat(1), and the verbose dump(1)danj1-16/+3
With this change, daily(8) only sends email when something looks dubious. Consequently VERBOSESTATUS is now a no-op and may be unset. The code is trivial and riddled with choices that look like personal preferences. The old behavior can be achieved through /etc/daily.local. With schwarze@, tweak kn@, sthen@ OK schwarze@, kn@, jung@
2020-10-08Use find -delete instead of execing rm and rmdir.millert1-5/+5
OK sthen@ denis@