aboutsummaryrefslogtreecommitdiff
path: root/etc/defaults
Commit message (Collapse)AuthorAgeFilesLines
* Move all devfs related files to sbin/devfs/Brad Davis2018-08-223-107/+0
| | | | | | | | | | | This is related to pkgbase as it uses CONFS to properly tag these as config files. Approved by: will (mentor) Differential Revision: https://reviews.freebsd.org/D16785 Notes: svn path=/head/; revision=338204
* Move all bluetooth related config files out of etcBrad Davis2018-08-212-115/+0
| | | | | | | | | | | This helps with pkgbase by switching to CONFS so they are properly tagged as config files. Approved by: will (mentor) Differential Revision: https://reviews.freebsd.org/D16833 Notes: svn path=/head/; revision=338155
* Move all periodic related config and scripts to usr.sbin/periodic/Brad Davis2018-08-112-408/+1
| | | | | | | | | | | | This makes pkgbase easier by tagging these as CONFS so they are properly tagged as config files. Approved by: will (mentor) Sponsored by: Essen Hackathon Differential Revision: https://reviews.freebsd.org/D16553 Notes: svn path=/head/; revision=337648
* Opps, I missed moving a couple of files in r336845.Brad Davis2018-07-281-749/+0
| | | | | | | | Approved by: will (mentor) Differential Revision: https://reviews.freebsd.org/D16466 Notes: svn path=/head/; revision=336847
* Move rc startup scripts from etc/ to sbin/init/Brad Davis2018-07-281-1/+1
| | | | | | | | | | | This keeps most startup scripts as CONFS per discussion on src-committers from back during BSDCan. Approved by: will (mentor) Differential Revision: https://reviews.freebsd.org/D16466 Notes: svn path=/head/; revision=336845
* Allow mounting FUSE filesystems in jailsAlan Somers2018-07-201-0/+1
| | | | | | | | | | Reviewed by: jamie MFC after: 2 weeks Relnotes: yes Differential Revision: https://reviews.freebsd.org/D16371 Notes: svn path=/head/; revision=336565
* Automatically run ntpd as non-root when possible.Ian Lepore2018-07-201-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ntpd needs only a subset of full root privileges to do its job. Specifically it needs the ability to manipulate system time, and to re-bind to a privileged UDP port after interface changes. The mac_ntpd(4) policy module (see r336525) can grant these privs. These changes detect the availability of mac_ntpd(4). If enabled, and if the ntpd configuration is fairly vanilla, it automatically runs ntpd as the non-root user 'ntpd' (uid 123). "Vanilla" means the config doesn't include command line or ntp.conf options changing the location of files or using any files/dirs likely to be inaccessible to user ntpd. Ntpd can still run as non-root when using such options, but the admin must ensure all required files and dirs are accessible, and then set ntpd_user=ntpd in rc.conf. Note that these changes also address PR 199127 by using the command_args technique suggested in the patch. They also tangentially address PR 113552, which is primarily about inconsistent filenames in documentation, but some of the inconsistancy was caused by old code in rc.d/ntpd which is leftover from the intial import from netbsd. There was code to do chroot setup which required the use of the netbsd clockctl(4) device; that code never had any effect on freebsd, because we lack that device and don't build ntpd with the options that would allow using it. PR: 113552 199127 Relnotes: yes Differential Revision: https://reviews.freebsd.org/D16050 Notes: svn path=/head/; revision=336547
* geli attach multiple providersBen Woods2018-06-261-0/+7
| | | | | | | | | | | | | | | | | | | | | | | | | Allow attaching of multiple geli providers at once if they use same passphrase and keyfiles. This is helpful when the providers being attached are not used for boot, and therefore the existing code to first try the cached password when tasting the providers during boot does not apply. Multiple providers with the same passphrase and keyfiles can be attached at the same time during system start-up by adding the following to rc.conf: geli_groups="storage backup" geli_storage_flags="-k /etc/geli/storage.keys" geli_storage_devices="ada0 ada1" geli_backup_flags="-j /etc/geli/backup.passfile -k /etc/geli/backup.keys" geli_backup_devices="ada2 ada3" Reviewed by: wblock, delphij, jilles Approved by: sobomax (src), bcr (doc) Differential Revision: https://reviews.freebsd.org/D12644 Notes: svn path=/head/; revision=335673
* Revert r333493, which was a temporary fix for 11.2-RELEASE, and insteadEdward Tomasz Napierala2018-05-261-1/+1
| | | | | | | | | | | | | | | switch the default kldxref_enable to YES. The reason is that it's required for every image that's being cross-built, as kldxref(8) cannot handle files for non-native architectures. For the one that is not - amd64 - having it on by default doesn't change anything; the script is noop if the linker.hints already exists. MFC after: 2 weeks Sponsored by: DARPA, AFRL Notes: svn path=/head/; revision=334237
* bthidd(8): Add evdev protocol support for bluetooth keyboards and mousesVladimir Kondratyev2018-04-301-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | User-visible changes: "-u" is added to to list of command line options supported by bthidd. Use it to enable evdev support. uinput and evdev modules should be kld-loaded or compiled into the kernel in that case. bthidd_evdev_support rc.conf variable is added to control enabling of evdev support in bthidd startup script. Possible values are: "YES", "NO", "AUTO"(default). Setting bthidd_evdev_support to "AUTO" inserts "-u" option if kernel is compiled with EVDEV_SUPPORT option enabled. Support for consumer HID usage page keyboard events is implemented. Most of them are available only through evdev protocol. kern.evdev.rcpt_mask sysctl is checked, so "sysctl kern.evdev.rcpt_mask=12" should be executed if EVDEV_SUPPORT is compiled into kernel. It is recommended to regenerate bthidd.conf entries with bthidcontrol(8) "Query" command to set user-friendly names of bluetooth devices. Reviewed by: emax, gonzo, wblock (docs), bcr (docs, early version) Differential Revision: https://reviews.freebsd.org/D13456 Notes: svn path=/head/; revision=333113
* Add cfumass rc script, to create a LUN for cfumass(4).Edward Tomasz Napierala2018-04-211-0/+3
| | | | | | | | | | MFC after: 2 weeks Relnotes: yes Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D14844 Notes: svn path=/head/; revision=332857
* Turn devmatch on by default.Warner Losh2018-02-121-1/+1
| | | | | | | | | | | | Turn devmatch on by default. However, use 'start' instead of 'onestart' in the devmatch.conf file so the setting of 'devmatch_enable' is honored. Give an example of what to put in devd.conf if you want to disable just the run-time part of devmatch. Relnotes: yes Notes: svn path=/head/; revision=329154
* Add devmatch rc.d integrationWarner Losh2018-02-121-0/+1
| | | | | | | | | | Create simple script to load modules on demand based on the device identifying information. Sponsored by: Netflix Notes: svn path=/head/; revision=329147
* Teach the resolv startup script to respect its enable flag.Brad Davis2018-01-181-0/+2
| | | | | | | | Reviewed by: will, imp Approved by: imp Notes: svn path=/head/; revision=328136
* bluetooth: Default to discoverable offConrad Meyer2017-11-011-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Try to not expose bluetooth devices to external devices unless the user explicitly configures it, like any other radio/network device. Bluetooth has a long history of security problems and it is probably best to keep it disabled if not needed. Users who do use the bluetooth device should enable "discoverable" in bluetooth.device.conf(5) after this change. Keep in mind that bluetooth addresses can be discovered by passive monitoring or whole address-space scans[0], so a safety conscious user should also disable "connectable" in bluetooth.device.conf(5). [0]: https://www.sans.edu/cyber-research/security-laboratory/article/bluetooth Reviewed by: emax, hselasky Security: maybe Sponsored by: Dell EMC Isilon Differential Revision: https://reviews.freebsd.org/D12831 Notes: svn path=/head/; revision=325287
* Add support for compressed kernel dumps.Mark Johnston2017-10-251-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using a kernel built with the GZIO config option, dumpon -z can be used to configure gzip compression using the in-kernel copy of zlib. This is useful on systems with large amounts of RAM, which require a correspondingly large dump device. Recovery of compressed dumps is also faster since fewer bytes need to be copied from the dump device. Because we have no way of knowing the final size of a compressed dump until it is written, the kernel will always attempt to dump when compression is configured, regardless of the dump device size. If the dump is aborted because we run out of space, an error is reported on the console. savecore(8) is modified to handle compressed dumps and save them to vmcore.<index>.gz, as it does when given the -z option. A new rc.conf variable, dumpon_flags, is added. Its value is added to the boot-time dumpon(8) invocation that occurs when a dump device is configured in rc.conf. Reviewed by: cem (earlier version) Discussed with: def, rgrimes Relnotes: yes Sponsored by: Dell EMC Isilon Differential Revision: https://reviews.freebsd.org/D11723 Notes: svn path=/head/; revision=324965
* Anticongestion refinements for ntpd rc script. This reverts r324681Cy Schubert2017-10-191-2/+0
| | | | | | | | | | | | | | and checks if ntp leapfile needs fetching before entering into the anticongestion sleep. Unfortunately some ports still use their own sleeps so, this commit doesn't address the complete problem which is compounded by every port that uses its own anticongestion mechanism. Discussed with: asomers Notes: svn path=/head/; revision=324738
* Provide an option to run the anticongestion ntpd leapfile fetch inCy Schubert2017-10-171-0/+2
| | | | | | | | | | | | the background. Original patch submitted by feld@. I added the "optional" bit. Submitted by: feld (original patch) MFC after: 2 weeks Notes: svn path=/head/; revision=324681
* Enhance mdmfs(8) to work with tmpfs(5).Ian Lepore2017-09-291-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Existing scripts and associated config such as rc.initdiskless, rc.d/var, and others, use mdmfs to create memory filesystems. That program accepts a size argument which allows SI suffixes and treats an unsuffixed number as a count of 512 byte sectors. That makes it difficult to convert existing scripts to use tmpfs instead of mdmfs, because tmpfs treats unsuffixed numbers as a count of bytes. The script logic to deal with existing user config that might include suffixed and unsuffixed numbers is... unpleasant. Also, there is no g'tee that tmpfs will be available. It is sometimes configured out of small-resource embedded systems to save memory and flash storage space. These changes enhance mdmfs(8) so that it accepts two new values for the 'md-device' arg: 'tmpfs' and 'auto'. With tmpfs, the program always uses tmpfs(5) (and fails if it's not available). With 'auto' the program prefers tmpfs, but falls back to using md(4) if tmpfs isn't available. It also handles the -s <size> argument so that the mdconfig interpetation of unsuffixed numbers applies when tmpfs is used as well, so that existing user config keeps working after a switch to tmpfs. A new rc setting, mfs_type, is added to etc/defaults/rc.conf to let users force the use of tmpfs or md; the default value is "auto". Differential Revision: https://reviews.freebsd.org/D12301 Notes: svn path=/head/; revision=324107
* Deorbit catman. The tradeoff of disk for performance has long since tippedGordon Tetlow2017-09-131-3/+0
| | | | | | | | | | | | | in favor of just rendering the manpage instead of relying on pre-formatted catpages. Note, this does not impede the ability to use existing catpages, it just removes the utility to generate them. Reviewed by: imp, allanjude Approved by: emaste (mentor) Differential Revision: https://reviews.freebsd.org/D12317 Notes: svn path=/head/; revision=323550
* ipfw_netflow: add +ipfw_netflow_enable="NO" to defaults/rc.conf and documentEmmanuel Vadot2017-07-171-0/+1
| | | | | | | | | | usage in rc.conf(5) Reported by: markj Sponsored by: Gandi.net Notes: svn path=/head/; revision=321072
* Make fsck_y_enable default to passing pass -R to fsck_ffs(8) in additionEdward Tomasz Napierala2017-07-111-1/+1
| | | | | | | | | | | | | | to -y. To me, fsck_y_enable means "try as hard as possible", and without -R, it... well, doesn't. Reviewed by: mckusick Obtained from: CheriBSD MFC after: 2 weeks Sponsored by: DARPA, AFRL Differential Revision: https://reviews.freebsd.org/D11490 Notes: svn path=/head/; revision=320892
* Remove NATM configuration bits and assorted NATM and ATM remnants.Brooks Davis2017-04-251-12/+0
| | | | | | | | | Reported by: ak Reviewed by: ngie (first version) Differential Revision: https://reviews.freebsd.org/D10497 Notes: svn path=/head/; revision=317424
* Add 410.status-mfi, a periodic script for mfi(4) arraysAlan Somers2017-04-141-0/+3
| | | | | | | | | | | PR: 176049 Submitted by: doconnor@gsoft.com.au Reviewed by: scottl, Larry Rosenman <ler@lerctr.org> MFC after: 3 weeks Relnotes: yes Notes: svn path=/head/; revision=316945
* Consolidate random sleeps in periodic scriptsAlan Somers2017-04-011-2/+14
| | | | | | | | | | | | | | | | | | | | | | Multiple periodic scripts sleep for a random amount of time in order to mitigate the thundering herd problem. This is bad, because the sum of multiple uniformly distributed random variables approaches a normal distribution, so the problem isn't mitigated as effectively as it would be with a single sleep. This change creates a single configurable anticongestion sleep. periodic will only sleep if at least one script requires it, and it will never sleep more than once per invocation. It also won't sleep if periodic was run interactively, fixing an unrelated longstanding bug. PR: 217055 PR: 210188 Reviewed by: cy MFC after: 3 weeks Differential Revision: https://reviews.freebsd.org/D10211 Notes: svn path=/head/; revision=316342
* Remove SVR4 (System V Release 4) binary compatibility support.Gleb Smirnoff2017-02-281-1/+0
| | | | | | | | UNIX System V Release 4 is operating system released in 1988. It ceased to exist in early 2000-s. Notes: svn path=/head/; revision=314373
* Add support for encrypted kernel crash dumps.Konrad Witaszczyk2016-12-101-0/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Changes include modifications in kernel crash dump routines, dumpon(8) and savecore(8). A new tool called decryptcore(8) was added. A new DIOCSKERNELDUMP I/O control was added to send a kernel crash dump configuration in the diocskerneldump_arg structure to the kernel. The old DIOCSKERNELDUMP I/O control was renamed to DIOCSKERNELDUMP_FREEBSD11 for backward ABI compatibility. dumpon(8) generates an one-time random symmetric key and encrypts it using an RSA public key in capability mode. Currently only AES-256-CBC is supported but EKCD was designed to implement support for other algorithms in the future. The public key is chosen using the -k flag. The dumpon rc(8) script can do this automatically during startup using the dumppubkey rc.conf(5) variable. Once the keys are calculated dumpon sends them to the kernel via DIOCSKERNELDUMP I/O control. When the kernel receives the DIOCSKERNELDUMP I/O control it generates a random IV and sets up the key schedule for the specified algorithm. Each time the kernel tries to write a crash dump to the dump device, the IV is replaced by a SHA-256 hash of the previous value. This is intended to make a possible differential cryptanalysis harder since it is possible to write multiple crash dumps without reboot by repeating the following commands: # sysctl debug.kdb.enter=1 db> call doadump(0) db> continue # savecore A kernel dump key consists of an algorithm identifier, an IV and an encrypted symmetric key. The kernel dump key size is included in a kernel dump header. The size is an unsigned 32-bit integer and it is aligned to a block size. The header structure has 512 bytes to match the block size so it was required to make a panic string 4 bytes shorter to add a new field to the header structure. If the kernel dump key size in the header is nonzero it is assumed that the kernel dump key is placed after the first header on the dump device and the core dump is encrypted. Separate functions were implemented to write the kernel dump header and the kernel dump key as they need to be unencrypted. The dump_write function encrypts data if the kernel was compiled with the EKCD option. Encrypted kernel textdumps are not supported due to the way they are constructed which makes it impossible to use the CBC mode for encryption. It should be also noted that textdumps don't contain sensitive data by design as a user decides what information should be dumped. savecore(8) writes the kernel dump key to a key.# file if its size in the header is nonzero. # is the number of the current core dump. decryptcore(8) decrypts the core dump using a private RSA key and the kernel dump key. This is performed by a child process in capability mode. If the decryption was not successful the parent process removes a partially decrypted core dump. Description on how to encrypt crash dumps was added to the decryptcore(8), dumpon(8), rc.conf(5) and savecore(8) manual pages. EKCD was tested on amd64 using bhyve and i386, mipsel and sparc64 using QEMU. The feature still has to be tested on arm and arm64 as it wasn't possible to run FreeBSD due to the problems with QEMU emulation and lack of hardware. Designed by: def, pjd Reviewed by: cem, oshogbo, pjd Partial review: delphij, emaste, jhb, kib Approved by: pjd (mentor) Differential Revision: https://reviews.freebsd.org/D4712 Notes: svn path=/head/; revision=309818
* Finish incomplete comments in prior revision. I was going to fix thisWarner Losh2016-12-011-0/+2
| | | | | | | after I tested it, but didn't. Notes: svn path=/head/; revision=309352
* Revert the 'performance' setting to 'NONE' from C2. C2 has issues withWarner Losh2016-12-011-1/+1
| | | | | | | | | | | | | | USB in places, as well as having the potential for reducing performance. Since this is used even when powerd isn't enabled, these two problems can cause on servers. Supermicro X9 motherboards, for example, have problems with the virtual IPMI USB keyboards and mice attaching and detaching repeatedly. Since there are issues on some CPUs with C2, fail safe by defaulting to not altering it. MFC After: 3 days Notes: svn path=/head/; revision=309351
* Many shops still prefer rc.conf(5) based jail configuration(s). In-partDevin Teske2016-10-121-0/+1
| | | | | | | | | | | | | | | | | | | because they can use sysrc in conjunction with ssh and xargs to perform en-masse changes in a large distribution with lots of jails spread over many hosts on a LAN/WAN. Provide a mechanism for disabling the warning eschewed by /etc/rc.d/jail in said situation. If jail_confwarn="NO" is in rc.conf(5) (default "YES") skip the warning that per-jail configurations are obsolete and that the user should migrate to jail.conf(5). Reviewed by: jelischer MFC after: 3 days Sponsored by: FIS Global, Inc. Differential Revision: https://reviews.freebsd.org/D7465 Notes: svn path=/head/; revision=307159
* Restore lost comment from r301295.Cy Schubert2016-07-141-0/+1
| | | | | | | | | | PR: 211027 Reported by: Trond.Endrestol@ximalas.info Pointy hat to: cy@ (me) MFC after: 3 days Notes: svn path=/head/; revision=302798
* Remove more references to mroute6d, which was removed in r298512.Mark Johnston2016-07-141-6/+0
| | | | Notes: svn path=/head/; revision=302796
* Add support for a /etc/defaults/vendor.conf override fileKurt Lidl2016-06-231-0/+6
| | | | | | | | | Reviewed by: stas, imp Approved by: re (gjb) Differential Revision: https://reviews.freebsd.org/D6895 Notes: svn path=/head/; revision=302149
* Fix typo with description for $ipv6_cpe_wanif (upstram -> upstream)Enji Cooper2016-06-081-1/+1
| | | | | | | | | | MFC after: 3 days PR: 210146 Reported by: Sean M. Collins <sean@coreitpro.com> Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=301683
* Turn off blacklistd daemon in defaultsKurt Lidl2016-06-061-1/+1
| | | | | | | | | | | Reported by: Matteo Riondato ( matteo @ FreeBSD.org ) Reviewed by: rpaulo Approved by: rpaulo Relnotes: YES Sponsored by: The FreeBSD Foundation Notes: svn path=/head/; revision=301515
* Add rc.d script for ypldap(8).Marcelo Araujo2016-06-061-0/+2
| | | | Notes: svn path=/head/; revision=301480
* Enable daily_ntpd_leapfile_enable by default. Otherwise an expiredCy Schubert2016-06-041-2/+1
| | | | | | | | | | | | | leapfile will be ignored and ntpd will behave as if it has no leapfile. While here, remove an extraneous blank line. Suggested by: ache MFC after: 1 week Notes: svn path=/head/; revision=301295
* Add basic blacklist build supportKurt Lidl2016-06-021-0/+2
| | | | | | | | | | | Reviewed by: rpaulo Approved by: rpaulo Relnotes: YES Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D5913 Notes: svn path=/head/; revision=301226
* zfsd(8), the ZFS fault management daemonAlan Somers2016-05-281-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add zfsd, which deals with hard drive faults in ZFS pools. It manages hotspares and replements in drive slots that publish physical paths. cddl/usr.sbin/zfsd Add zfsd(8) and its unit tests cddl/usr.sbin/Makefile Add zfsd to the build lib/libdevdctl A C++ library that helps devd clients process events lib/Makefile share/mk/bsd.libnames.mk share/mk/src.libnames.mk Add libdevdctl to the build. It's a private library, unusable by out-of-tree software. etc/defaults/rc.conf By default, set zfsd_enable to NO etc/mtree/BSD.include.dist Add a directory for libdevdctl's include files etc/mtree/BSD.tests.dist Add a directory for zfsd's unit tests etc/mtree/BSD.var.dist Add /var/db/zfsd/cases, where zfsd stores case files while it's shut down. etc/rc.d/Makefile etc/rc.d/zfsd Add zfsd's rc script sys/cddl/contrib/opensolaris/uts/common/fs/zfs/vdev.c Fix the resource.fs.zfs.statechange message. It had a number of problems: It was only being emitted on a transition to the HEALTHY state. That made it impossible for zfsd to take actions based on drives getting sicker. It compared the new state to vdev_prevstate, which is the state that the vdev had the last time it was opened. That doesn't make sense, because a vdev can change state multiple times without being reopened. vdev_set_state contains logic that will change the device's new state based on various conditions. However, the statechange event was being posted _before_ that logic took effect. Now it's being posted after. Submitted by: gibbs, asomers, mav, allanjude Reviewed by: mav, delphij Relnotes: yes Sponsored by: Spectra Logic Corp, iX Systems Differential Revision: https://reviews.freebsd.org/D6564 Notes: svn path=/head/; revision=300906
* Better document security_show_{success,info,badconfig} in /etc/periodic.confAlan Somers2016-05-211-0/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | periodic(8) already handles the security_show_{success,info,badconfig} variables correctly. However, those variables aren't explicitly set in /etc/defaults/periodic.conf or anywhere else, which suggests to the user that they shouldn't be used. etc/defaults/periodic.conf Explicitly set defaults for security_show_{success,info,badconfig} usr.sbin/periodic/periodic.sh Update usage string usr.sbin/periodic/periodic.8 Minor man page updates One thing I'm _not_ doing is recommending setting security_output to /var/log/security.log or adding that file to /etc/newsyslog.conf, because periodic(8) would create it with default permissions, usually 644, and that's probably a bad idea. Reviewed by: brd MFC after: 4 weeks Sponsored by: Spectra Logic Corp Differential Revision: https://reviews.freebsd.org/D6477 Notes: svn path=/head/; revision=300356
* Make "-S" a default option for mountd.Rick Macklem2016-05-081-1/+1
| | | | | | | | | | | | | | | After a discussion on freebsd-fs@ there seemed to be a consensus that the "-S" option for mountd should become the default. Since the only known issue w.r.t. using "-S" was fixed by r299201, this commit adds "-S" to the default mountd_flags. Discussed on: freebsd-fs PR: 9619, 131342, 206855 MFC after: 2 weeks Relnotes: yes Notes: svn path=/head/; revision=299242
* Add a savecore_enable variable support for the savecore rc scriptBaptiste Daroussin2016-04-291-0/+1
| | | | | | | | | | | By default set to 'YES' so it does not change the current behaviour for users, this variable allows to decide to not extract crach dumps from the dump device at boot time by setting it to "NO" in rc.conf. Sponsored by: Gandi.net Notes: svn path=/head/; revision=298784
* DIRDEPS_BUILD: Fix staging of share/sendmail and share/examples.Bryan Drewery2016-03-112-1/+11
| | | | | | | Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=296695
* etc/defaults/rc.conf: fix a typo (wlanddebug -> wlandebug)Andriy Voskoboinyk2016-02-281-1/+1
| | | | | | | | Approved by: adrian (mentor) Differential Revision: https://reviews.freebsd.org/D5480 Notes: svn path=/head/; revision=296173
* Convert casperd(8) daemon to the libcasper.Mariusz Zaborski2016-02-251-1/+0
| | | | | | | | | | | | | | | | | | | | | | | After calling the cap_init(3) function Casper will fork from it's original process, using pdfork(2). Forking from a process has a lot of advantages: 1. We have the same cwd as the original process. 2. The same uid, gid and groups. 3. The same MAC labels. 4. The same descriptor table. 5. The same routing table. 6. The same umask. 7. The same cpuset(1). From now services are also in form of libraries. We also removed libcapsicum at all and converts existing program using Casper to new architecture. Discussed with: pjd, jonathan, ed, drysdale@google.com, emaste Partially reviewed by: drysdale@google.com, bdrewery Approved by: pjd (mentor) Differential Revision: https://reviews.freebsd.org/D4277 Notes: svn path=/head/; revision=296047
* - Add a global option where we can protect processes when swap spaceMarcelo Araujo2016-02-241-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | is exhausted. How to use: Basically we need to add on rc.conf an another option like: If we want to protect only the main processes. syslogd_oomprotect="YES" If we want to protect all future children of the specified processes. syslogd_oomprotect="ALL" PR: 204741 (based on) Submitted by: eugen@grosbein.net Reviewed by: jhb, allanjude, rpokala and bapt MFC after: 4 weeks Relnotes: Yes Sponsored by: gandi.net Differential Revision: https://reviews.freebsd.org/D5176 Notes: svn path=/head/; revision=295949
* Add new rc.conf parameter "jail_reverse_stop"Mark Felder2016-02-101-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | When a user defines "jail_list" in rc.conf the jails are started in the order defined. Currently the jails are not are stopped in reverse order which may break dependencies between jails/services and prevent a clean shutdown. The new parameter "jail_reverse_stop" will shutdown jails in "jail_list" in reverse order when set to "YES". Please note that this does not affect manual invocation of the jail rc script. If a user runs the command # service jail stop jail1 jail2 jail3 the jails will be stopped in exactly the order specified regardless of jail_reverse_stop being defined in rc.conf. PR: 196152 Approved by: jamie MFC after: 1 week Relnotes: yes Differential Revision: https://reviews.freebsd.org/D5233 Notes: svn path=/head/; revision=295471
* Fix typo in a comment; s/redined/redefined/Devin Teske2016-02-061-1/+1
| | | | | | | Thanks to: rpokala Notes: svn path=/head/; revision=295344
* Add comment to explain functionality of codeDevin Teske2016-02-061-0/+1
| | | | | | | Thanks to: rpokala Notes: svn path=/head/; revision=295343
* Allow rc_conf_files to be redefined in rc.conf(5)Devin Teske2016-02-061-0/+12
| | | | | | | | | | | | With this change, it's possible to redefine rc_conf_files (e.g., sysrc rc_conf_files+=/etc/rc.conf.other) and have the boot process pick up settings in extra files. The sysrc(8) tool can be used to query/enumerate/find/manage extra files configured in this manner. Relnotes: yes Notes: svn path=/head/; revision=295342
generated by cgit v1.3 (git 2.53.0) at 2026-03-27 02:49:11 +0000