Home | History | Annotate | Download | only in etc
History log of /src/distrib/sets/lists/etc/mi
RevisionDateAuthorComments
 1.279  20-Aug-2026  thorpej Add an optional mechanism, enabled by setting rcorder_cache=YES in
/etc/rc.conf, to precompute and cache the list of rc.d scripts that
will actually result in useful boot-time work. This cached list is
then consulted on subsequent boots to reduce the number of scripts
run during boot. This can have a huge impact on boot time on machines
with slow CPUs and/or highly constrained I/O. On the machine that
inspired this change, it reduced the number of scripts visited during
boot from 130 to 45 and reduced the boot time from 13 minutes to 7.

PR bin/60607
 1.278  01-Jul-2026  riastradh unbound: Install a default configuration.

This way, setting unbound=YES is enough to get a working local
recursive resolver listening on 127.0.0.1:53 and [::1]:53.

PR misc/60339: unbound=YES in rc.conf should be enough to get a
recursive resolver

Additionally, this includes the workaround for:

PR bin/60325: unbound emits warning: so-sndbuf 4194304 was not
granted
 1.277  12-Feb-2026  kre Sort.
 1.276  29-Dec-2024  jmmv branches: 1.276.2;
Don't install /etc/rc.d/postfix when MKPOSTFIX=no
 1.275  09-Apr-2024  kre branches: 1.275.2;

Revert previous, we have no /etc/skel/.editrc (currently anyway).
This change looks to have been accidentally included in the big
sets reduction/division.

This should fix the builds.
 1.274  09-Apr-2024  nia Add new sets: base32, debug32, manhtml

- base32 contains (when MKCOMPAT=yes) shared libraries for 32-bit
compatibility, previously included in base

- debug32 contains (when MKCOMPAT=yes) debug symbols and static libraries
containing debug symbols for 32-bit compatiblity, previously included
in debug

- manhtml contains (when MKHTML=yes) the HTML files previously included
in 'man', which are of limited utility without third-party software.

The motivation for this change is to be able to easily exclude sets
from CD-ROM images that go over the size limit without xz compression
(which many NetBSD platforms struggle to extract at acceptable speeds).
 1.273  27-Sep-2023  riastradh /etc/rc.d/cerctl_init: New script for certctl rehash in live images.

This is very limited -- it does not supplant postinstall to rehash
certificates on upgrade; it only runs certctl rehash if
/etc/openssl/certs is an empty directory, as you get in live images
not created with sysinst.

We could also have a more general-purpose way to run postinstall(8)
on first boot of an image, but that has a lot more moving parts to
think about, so let's start with this limited-scope low-risk
approach.

PR install/57629

XXX pullup-10
 1.272  28-Aug-2023  riastradh distrib/sets/lists: certs.conf belongs in etc, not in base.

Oops.
 1.271  03-Feb-2023  mlelstv Add start script to attach iscsi volumes at boot.

The default is to execute the script (iscsid_volumes=YES), so if you have
any volumes defined, you should also start iscsid (iscsid=YES) to avoid
error messages.
 1.270  06-Jun-2022  nia branches: 1.270.2;
build system: Revert all the recent additions of MK[...] knobs that
allow conditionally disabling the building of certain user space
programs in the 'base' set.

There is not enough consensus that this is the right way and a few
people had strong objections, see source-changes-d@.
 1.269  29-May-2022  nia mk: Add a MKPPP flag to exclude pppd(8) and related utilities from
the build
 1.268  28-May-2022  nia mk: Add MKNTP, MKTCPDUMP knobs.
 1.267  25-May-2022  nia mk: Rename the MKMBONE option to MKMROUTING for greater accuracy and
to match the related kernel config option.
 1.266  25-May-2022  nia mk: Allow building base without the MBONE applications by setting
MKMBONE=no in mk.conf
 1.265  26-Jan-2021  martin Rename etc/rc.d/llvmlockdir to lvmlockdir - it has nothing to do with LLVM,
the name probably was a freudian slip of my fingers when I split that
fragment out of another rc.d script.
 1.264  10-Jan-2021  riastradh Various entropy integration improvements.

- New /etc/security check for entropy in daily security report.

- New /etc/rc.d/entropy script runs (after random_seed and rndctl) to
check for entropy at boot -- in rc.conf, you can:

. set `entropy=check' to halt multiuser boot and enter single-user
mode if not enough entropy

. set `entropy=wait' to make multiuser boot wait until enough entropy

Default is to always boot without waiting -- and rely on other
channels like security report to alert the operator if there's a
problem.

- New man page entropy(7) discussing the higher-level concepts and
system integration with cross-references.

- New paragraph in afterboot(8) about entropy citing entropy(7) for
more details.

This change addresses many of the issues discussed in security/55659.
This is a first draft; happy to take improvements to the man pages and
scripted messages to improve clarity.

I considered changing motd to include an entropy warning with a
reference to the entropy(7) man page, but it's a little trickier:
- Not sure it's appropriate for all users to see at login rather than
users who have power to affect the entropy estimate (maybe it is,
just haven't decided).
- We only have a mechanism for changing once at boot; the message would
remain until next boot even if an operator adds enough entropy.
- The mechanism isn't really conducive to making a message appear
conditionally from boot to boot.
 1.263  08-Sep-2020  martin branches: 1.263.2;
Adjust for MOUNTCRITLOCAL -> CRITLOCALMOUNTED rename
 1.262  27-Aug-2020  riastradh Sort and deduplicate set lists.
 1.261  22-Jul-2020  martin Split the local disk availability step into two phases to allow scripts
that pre-populate parts of the system (e.g. a tmpfs based /var) an
easy place to plug in like:

# REQUIRE: mountcritlocal
# BEFORE: MOUNTCRITLOCAL

This also cleans up the existing special handling a bit by separating it
into new scripts. All later scripts now depend on MOUNTCRITLOCAL.
Discussed on tech-userlevel some time ago.
 1.260  15-Jun-2020  christos Rename blacklist -> blocklist
 1.259  15-Sep-2019  brad Add support for legacy ZFS filesystems, specified by mountpoint=legacy
in the ZFS properties of the dataset and a simple man page for
mount_zfs. With this, it is possible to put ZFS filesystems in
/etc/fstab as file system type zfs.

Add a rc.d script that kicks the module ZFS load mostly before
mountall runs simular to what LVM does. This allows for any legacy
mounts to be specified in critical_local_filesystems and allows for
ZFS pools on top of cgd (probably among other things). Introduce a
rc.conf variable called zfs which needs to be set to YES, in the usual
manor of things, to get zvols and ZFS dataset support rather then just
assume that 'zfs mount' does that in mountall. Fix a problem in
mountall if ZFS is not compiled into the system.
 1.258  11-May-2019  maxv branches: 1.258.2;
Add smtoff, an rc.d script that disables Simultaneous Multi-Threading. It
parses the output of cpuctl, and executes "cpuctl offline" for each CPU
that has SmtID!=0.

The default is "smtoff=NO", which means that SMT remains enabled.
 1.257  25-Apr-2019  roy Don't install YP rc.d files with MKYP=no
 1.256  10-Apr-2019  sevan typo, pasto
 1.255  10-Apr-2019  sevan Include npf_boot rc.d scripts which loads an interim config early in boot.
By default /etc/default/npf.boot.conf which can be overriden by /etc/npf.boot.conf.
 1.254  12-Jan-2019  roy Install /etc/wpa_supplicant.conf
 1.253  23-Sep-2018  maxv Remove the userland part of ISDN. The kernel part is untouched for now.
ipppctl was actually an exact copy of pppoectl; there is no functional
change in pppoectl in this commit.
 1.252  29-Jun-2018  roy Remove dhclient from the base system.

Discussed here:
https://mail-index.netbsd.org/tech-userlevel/2018/06/21/msg011233.html
 1.251  17-Feb-2018  uwe branches: 1.251.2; 1.251.4;
Actually install dhcpd6 rc script. Organize CONFIGFILES
alphabetically again while where.

PR 53018
 1.250  09-Jan-2018  christos Merge autofs support from: Tomohiro Kusumi
XXX: Does not work yet
 1.249  18-Jun-2017  christos add racoon
 1.248  09-Jun-2017  christos add cron.
 1.247  21-May-2017  riastradh branches: 1.247.2;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.
 1.246  08-Feb-2017  christos Don't track /etc/nsd/nsd.conf and /etc/unbound/unbound.conf
 1.245  07-Jan-2017  christos branches: 1.245.2;
fix nsd rc.
 1.244  07-Jan-2017  christos add more nsd
 1.243  05-Jan-2017  christos add npfd
 1.242  24-Aug-2016  szptvlfn fix the build ( MKUNBOUND=no ).
 1.241  23-Aug-2016  christos add unbound.conf
 1.240  22-Aug-2016  christos Add missing unbound
 1.239  13-Dec-2015  christos branches: 1.239.2;
add ip6addrctl
 1.238  23-Aug-2015  mrg move the obsolete list files into their respective sets. this means
that if you install a new set and run "postinstall fix obsolete"
the expected things happen.

(hi 12.5 year old me who thought base was better than etc set, which
it really was, but this is better again :-)
 1.237  30-Mar-2015  chopps Add resize_root boot operation. If resize_root=YES in rc.conf then
the system attempts to resize the root file system to fill it's
partition prior to mounting read-write. Useful for things like AMI
file system images. May eventually be used by arm images after
coming up with similar solution for increasing the parition size.
 1.236  21-Mar-2015  jmcneill Process /etc/modules.conf (if present) at startup, before securelevel is
raised, to allow module loading on ports without a module aware bootloader.
 1.235  21-Feb-2015  joerg Add rc script for /sbin/iscsid.
 1.234  25-Jan-2015  christos stuff added by blacklist
 1.233  12-Sep-2014  martin Mark /etc/rc.d/rtsold and /rescue/rtsol as obsolete
 1.232  11-Aug-2013  joerg branches: 1.232.4;
Sort entries in strcmp order.
 1.231  01-May-2013  agc Fix for problematic paths in /etc/daily and /etc/security reported in
PR/47645.

Add a separate file which contains the paths for the pkg_admin and
pkg_info utilities. This is called /etc/pkgpath.conf (to distinguish it
from pkg.conf).

Thanks also to Edgar Fuss for the sanity check.
 1.230  25-Apr-2013  christos add bind.keys
 1.229  24-Feb-2013  jmmv Install a kyua.conf file that sets unprivileged_user to _tests.
 1.228  07-Feb-2012  joerg branches: 1.228.6;
Import the new apropos/whatis.

This code has been developed by Abhinav Upadhyay as part of Google's Summer
of Code 2011. It uses libmandoc to parse man pages and builds a Full
Text Index in a SQLite database. The combination of indexing the full
manual page, filtering out stop words and ranking individual matches
based on the section gives a much improved user experience.

The old makewhatis and friends are kept under MKMAKEMANDB=no for now.
 1.227  17-Dec-2011  tsutsui Add an rc.d(8) script for isibootd(8). Taken from ndbootd(8).
 1.226  23-Nov-2011  tls Load entropy at system boot (only works at securelevel < 1); save
at system shutdown. Disable with random_seed=NO in rc.conf if desired.

Goes to some trouble to never load or save to network filesystems.

Entropy should really be loaded by the boot loader but I am still
sorting out how to pass it to the kernel.
 1.225  06-Sep-2011  riz branches: 1.225.2;
Create and install an rc.d file for devpubd - a daemon to listen
on drvctl and autocreate device nodes in /dev for those which don't have any.
Set the default to "NO" for now.
 1.224  27-May-2011  plunky provide a new 'bluetooth' rc.d script, to handle Bluetooth configuration
in a simpler manner. This replaces btattach, btconfig, bthcid, btdevctl
and sdpd scripts, and also should not require any configuration settings
other than "bluetooth=YES", though the full range of configurations is
still possible.
 1.223  11-Apr-2011  martin Collect all of var/chroot/tcpdump in one set - so we have a chance to
win the checkflist game.
 1.222  11-Apr-2011  martin When run as root, tcpdump will chroot to /var/run/tcpdump - but it can
not look up /etc/protcols in there. So install a copy of /etc/protocols
into the chroot area.
Fixes PR bin/44721.
 1.221  20-Feb-2011  christos fix saslc paths.
 1.220  20-Feb-2011  christos set fixes for SASLC
 1.219  02-Feb-2011  rmind NPF checkpoint:
- Add libnpf(3) - a library to control NPF (configuration, ruleset, etc).
- Add NPF support for ftp-proxy(8).
- Add rc.d script for NPF.
- Convert npfctl(8) to use libnpf(3) and thus make it less depressive.
Note: next clean-up step should be a parser, once dholland@ will finish it.
- Add more documentation.
- Various fixes.
 1.218  13-Jan-2011  kefren branches: 1.218.2;
add ldpd rc script
 1.217  07-Nov-2010  jmmv Adjust file lists after atf-0.12 import
 1.216  05-Feb-2010  roy Move the emergancy terminfo database from /root to /rescue.
 1.215  04-Feb-2010  roy Note .terminfo and .terminfo.db in /root.
 1.214  15-Dec-2009  mrg fix a bunch of issues with MKATF=no.
 1.213  29-Sep-2009  tsarna Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.
 1.212  25-Jul-2009  mbalmer Add new files due recent gpio(4) rework.
 1.211  23-Jun-2009  tron Switch to building Postfix 2.6.2 via "external/ibm-public/postfix".
 1.210  21-Jun-2009  christos add nicknames
 1.209  28-Apr-2009  roy Add an rc.d script for dhcpcd(8)
 1.208  21-Apr-2009  joerg Split fsck during boot into two phases. Check the root file system
first, mount root and run the various disk providers. Add swap and
check the remaining file systems after that.
This breaks the dependency cycle for lvm, which needs writeable /dev.
Depend on rndctl in cgd.
 1.207  02-Feb-2009  joerg branches: 1.207.2;
Merge pkg_install-20090201 and update build system.
 1.206  16-Jan-2009  haad Add lvm script to the lists.
 1.205  04-Jan-2009  he Add etc/rc.d/rndctl. "Hi, apb@!"
 1.204  20-Dec-2008  isaki x68k pow(4) now uses MI sysmon_pswitch framework. suggested by tsutsui@.
- Make MD poffd(8) retire, and use MI powerd(8) instead of it.
- Make /dev/pow1 retire, because nobody holds /dev/pow0 any longer.
Use /dev/pow0 for pow(4) ioctl.
- POWIOCSSIGNAL ioctl which is for poffd(8) is also obsoleted.
 1.203  11-Dec-2008  mishka Import rc.d/httpd script for httpd(8) daemon control.
See rc.conf(5) for options explanation.
 1.202  05-Dec-2008  cube Move etc/rc.d/x{dm,fs} into xetc.tgz.
 1.201  12-Nov-2008  ad Remove LKMs and switch to the module framework, pass 1.

Proposed on tech-kern@.
 1.200  18-Jun-2008  yamt branches: 1.200.2;
merge yamt-pf42 branch.
(import newer pf from OpenBSD 4.2)

ok'ed by peter@. requested by core@
 1.199  24-May-2008  joerg Hook dhcpcd into build.
 1.198  15-Apr-2008  plunky branches: 1.198.2; 1.198.4;
some changes to serial bluetooth host controller interfaces

btuartd(8) should be named btattach(8) for consistency
with other parts of NetBSD

make btattach(8) a single-use tool for less complexity

device specicific initialisation (from btuart(4)) is carried
out prior to activating the line discipline (in btattach(8)),
which simplifies the API somewhat and means that the user
tool and the kernel do not need to be kept in sync.

btuart(4) driver is much reduced; naming is made consistent
and all tsleep() and delay() are removed to userland
 1.197  22-Dec-2007  jmcneill branches: 1.197.2; 1.197.6;
Add example hotkey_button script
 1.196  12-Nov-2007  jmmv Add the atf configuration files

This change adds the directory used by atf to look for its configuration
files.
 1.195  14-Jul-2007  ad branches: 1.195.4;
fixsb has done its job.
 1.194  14-Jul-2007  adrianp Updates for pkg_install-20070714
 1.193  02-Jul-2007  xtraeme Add the /etc/powerd/scripts/sensor_indicator to handle events on
indicator sensors.

Update powerd(8).
 1.192  01-Jul-2007  xtraeme Add the /etc/rc.d/envsys script required by envsys2.
 1.191  01-Jul-2007  xtraeme Imported envsys 2, a brief description of the new features:
(Part 4: documentation and configuration files)

* Support for detachable sensors.
* Cleaned up the API for simplicity and efficiency.
* Ability to send capacity/critical/warning events to powerd(8).
* Adapted all the code to the new locking order.
* Compatibility with the old envsys API: the ENVSYS_GTREINFO
and ENVSYS_GTREDATA ioctl(2)s are supported.
* Added support for a 'dictionary based communication channel' between
sysmon_power(9) and powerd(8), that means there is no 32 bytes event
size restriction anymore.
* Binary compatibility with old envstat(8) and powerd(8) via COMPAT_40.
* All drivers with the n^2 gtredata bug were fixed, PR kern/36226.

Tested by:

blymn: smsc(4).
bouyer: ipmi(4), mfi(4).
kefren: ug(4).
njoly: viaenv(4), adt7463.c.
riz: owtemp(4).
xtraeme: acpiacad(4), acpibat(4), acpitz(4), aiboost(4), it(4), lm(4).
 1.190  08-Jun-2007  pavel Remove the remaining sendmail config files (including everything in
/usr/share/sendmail) from the obsolete list. Instead, remove them in the
"sendmail" postinstall item, which is disabled by default, to prevent
losing sendmail configuration on upgrade. Fixes the rest of
PR install/36180.
 1.189  03-Mar-2007  apb Mark dev/MAKEDEV.subr as obsolete
 1.188  26-Feb-2007  apb add etc/MAKEDEV.subr
 1.187  20-Feb-2007  kiyohara Supprot Bluetooth HCI UART (H4) driver and daemon.
 1.186  04-Feb-2007  rpaulo Add /etc/login.conf.
 1.185  04-Feb-2007  elad Add support for per-user /tmp.

Enabled via per_user_tmp in /etc/rc.conf (default off).

See security(8) and rc.conf(5) for more details.

Lots of input from thorpej@ & christos@, thanks!
 1.184  12-Nov-2006  christos branches: 1.184.2; 1.184.4;
put back phones, used by tip
 1.183  12-Nov-2006  christos goodbye uucp
 1.182  07-Oct-2006  rpaulo PR 34692: wpa_supplicant script.
By Jukka Salmi.
 1.181  30-Sep-2006  hubertf Revert previous commit - just keep logfiles around, don't nuke them on
upgrades.
 1.180  28-Sep-2006  hubertf add back aculog & mark as obsolete
 1.179  26-Sep-2006  jmcneill Add acadapter, lid_switch, and sleep_button powerd scripts.
 1.178  18-Sep-2006  hubertf Remove last traces of /var/log/aculog
OK'd by perry@
 1.177  14-Sep-2006  pavel Factor out common settings from /root/.shrc and /etc/skel/.shrc to a
new file /etc/shrc.

As proposed on tech-userlevel.
 1.176  10-Sep-2006  plunky update to bluetooth device attachment:

remove pseudo-device btdev(4) and inherent limitations

add bthub(4) which autoconfigures at bluetooth controllers as they
are enabled. bluetooth devices now attach here.

btdevctl(8) and its cache is updated to handle new semantics

etc/rc.d/btdevctl is updated to configure devices from a list
in /etc/bluetooth/btdevctl.conf
 1.175  31-Aug-2006  hubertf Sync behaviour of sh and ksh dotfiles for new users with those of root.
Addresses PR 32215 by Wouter Schoot
 1.174  13-Aug-2006  plunky rename btcontrol(8) as btdevctl(8) to make it fit with the NetBSD naming
scheme for control programs. This fixes pr 34051.
 1.173  26-Jul-2006  tron branches: 1.173.2;
Bluetooth fixes by Iain Hibbert:
Create "/etc/rc.d/btcontrol" to attach bluetooth devices at boot.
 1.172  26-Jul-2006  tron Bluetooth fixes by Iain Hibbert:
Remove bluetooth.conf(5) and config parsing from libbluetooth(3)
as this is no longer required.
 1.171  11-Jul-2006  peter Fix MKIPFILTER=no.
 1.170  24-Jun-2006  mrg add support for MKISCSI=no.
 1.169  19-Jun-2006  gdamore Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@,
NetBSD Foundation Membership still pending.) This stack was written by
Iain under sponsorship from Itronix Inc.

The stack includes support for rfcomm networking (networking via your
bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets.

Drivers for both PCMCIA and USB bluetooth controllers are included.
 1.168  09-Jun-2006  tron Remove the "sendmail" configuration files and startup scripts from the
list of obsolete files. Resurrect the "sendmail" item which now flags
these files as obsolete unless the "sendmail" package is installed.
 1.167  31-May-2006  tron Resurrect "/etc/mail" and "/etc/mail/aliases". Postfix still uses that
configuration file.
 1.166  30-May-2006  christos Remove sendmail (requested by core@ and security-officer@)
 1.165  30-Apr-2006  rpaulo rc.d/irdaattach
 1.164  30-Apr-2006  rpaulo /etc/rc.d/hostapd
 1.163  16-Mar-2006  jwise branches: 1.163.2;
Some users use pf. Some use ipfilter. Syspkg was designed for situations
like this, where a user may well want to install one of these but not the
other.

To allow syspkg to be used for its intended purpose here, carefully split
out ipfilter and pf from the main {base,comp,man,misc}-net{,util}-* packages

(something which was partially done for ipf, but not done for pf in the
past).

This way, a user can pkg_delete *-{ipf,pf}-*, and not have utilities,
libraries, man pages, examples, or default /etc files for the packet filter
they don't like.
 1.162  08-Feb-2006  agc Add entries for the iSCSI target, and supporting library and manual
pages.
 1.161  14-Sep-2005  lukem Add a note explaining why we don't "obsolete" end-user configuration files.
Inspired by the fallout from the recent named.conf move.

XXX: consider fixing spamd.conf in a similar manner.
 1.160  14-Sep-2005  lukem Don't mark /etc/namedb/named.conf as "obsolete" since that will cause
a file that has end-user configuration to be unconditionally removed.
Instead, remove the entry from the set list, and add a note to UPDATING
reminding users of MKUPDATE=yes to manually rectify the problem in
their DESTDIR.

The "named" fix in postinstall(8) will migrate /etc/namedb/named.conf
to /etc/named.conf if the latter doesn't exist.
(The need for these style of migrations was why I implemented postinstall(8)
in the first place.)
 1.159  30-Aug-2005  tron Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.
 1.158  23-Aug-2005  peter Add new files for pf.boot.conf.
 1.157  04-Aug-2005  peter Add /etc/rc.d/ftpd.
 1.156  27-Jun-2005  peter Remove (pf)spamd. Its right to exist in NetBSD has been questioned since it
appeared and whether it's really part of pf or not is still unclear. Looking
at the other *BSDs it seems that they have left out spamd when importing pf,
and now we do that too. Also, the name conflicted with another more popular
used tool, after the rename to pfspamd it was left with completely unusable
documentation which apparently no-one wanted to fix.

A port of the latest spamd will be imported into pkgsrc soon.

Suggested by several people, no objections on last proposal on tech-userlevel.
 1.155  25-Apr-2005  wiz For obsolete files, make sure that both words behind the pathname contain
"obsolete".
 1.154  17-Apr-2005  lukem Move /etc/postinstall (and the etc.tgz set) to /usr/sbin/postinstall
(and the base.tgz set).
 1.153  04-Mar-2005  kleink branches: 1.153.2;
Add lastlogx.
 1.152  01-Mar-2005  christos Add an xserver config file.
 1.151  27-Feb-2005  christos add ppp in pam.d
 1.150  27-Feb-2005  thorpej Major cleanup of PAM service configuration files.
 1.149  22-Feb-2005  peter Add MKIPFILTER; if set to no, don't build and install the ipf(4) programs,
headers and LKM.

Add MKPF; if set to no, don't build and install the pf(4) programs,
headers, LKM and spamd.

Both options default to yes, so nothing changed in the default build.

Reviewed by lukem.
 1.148  22-Feb-2005  lukem Move etc/release from etc.tgz to base.tgz, since the "build" target
in src/Makefile installs it (thus, being more consistent).
Should fix "./build.sh install=/" installation of /etc/release.
Requested by Hubert Feyrer (amongst others).
 1.147  11-Jan-2005  lukem We unconditionally populate etc/pam.d.
 1.146  10-Jan-2005  christos Add /etc/pam.d files.
 1.145  10-Jan-2005  matt Make sure the postfix files in ./etc/postfix are conditional on postfix
 1.144  18-Nov-2004  wiz branches: 1.144.2;
Put obsolete files in the *-obsolete sets instead of whatever they
were in before they became obsolete (consistency).
 1.143  29-Jun-2004  itojun branches: 1.143.2;
add pf/pflogd
 1.142  22-Jun-2004  itojun additional files for pf
 1.141  18-Apr-2004  dbj enable rc.d fixsb script
initial testing suggests that it is working and I am confident it
will not cause irrevocable damage
 1.140  06-Feb-2004  itohy branches: 1.140.2;
Add /etc/locate.conf
 1.139  31-Jan-2004  christos add identd
 1.138  30-Jan-2004  lukem Add ./etc/mtree/set.<setname> entry for each set.
 1.137  14-Jan-2004  blymn Added veriexec entry.
 1.136  12-Jan-2004  lukem more MKSENDMAIL=no support.
noted by Juan Romero Pardines in private email, and confirmed by me.
 1.135  11-Jan-2004  lukem reformat whitespace
 1.134  11-Jan-2004  tls Install default ssh_known_hosts file with public keys for Project servers.
Hopefully I didn't make too much of a hash of the postinstall support for
this; it currently installs the file if there's none in the destination,
and elsewise notes if the CVS version differs (or is missing) but doesn't
try to fix that.
 1.133  04-Jan-2004  lukem Rename /etc/release-info to /etc/release, to be consistent with other
implementations and Hubert's original intent.
 1.132  04-Jan-2004  lukem Run "cd etc && make install-release-info" at the end of the "build" target.
Based on Hubert Feyrer's suggestion on tech-userlevel@.
 1.131  04-Jan-2004  lukem Support MKCRYPTO=no
 1.130  03-Jan-2004  lukem support MKYP=no
 1.129  03-Jan-2004  lukem support MKSENDMAIL=no (with "sendmail" keyword)
 1.128  29-Dec-2003  lukem Significant overhaul of how the sets are used:

* Add an optional third field to the sets file which is a list of
comma separated keywords that control if the line is printed.
Currently supported keywords
kerberos4 ${MKKERBEROS4} != no
kerberos ${MKKERBEROS} != no
lint ${MKLINT} != no
obsolete ${obsolete} != 0.
In this case, non obsolete files are not printed.
(This will allow future support for builds with variables such as
MKHESIOD and MKYP set to "no".)

* Use sh(1)'s getopts where appropriate, and otherwise cleanup the
various scripts.

* Move defaults for sets.subr from sets.defaults into sets.subr.
Move replicated code for determining stuff such as shlibs type
from various scripts into sets.subr.

* Merge the obsolete.*, krb.*, krb4.* and lint.* into the appropriate
main lists with the relevant third field keyword(s).
 1.127  27-Dec-2003  martin Add etc/rc.d/rtclocaltime.
 1.126  26-Dec-2003  lukem Revert part of previous; etc/rc.d/kdc must be installed even if Kerberos
isn't enabled.
This is how the rc.d system works in conjunction with our current build
and install system; all the rc.d scripts are installed even if the
subsystems they control are not.
 1.125  11-Dec-2003  dyoung Fix the checkflist for builds without Kerberos 4 (MKKERBEROS4=no)
and without Kerberos 4 & 5 (MKKERBEROS=no). Previously checkflist
complained of missing files.

* move kerberos- and kerberos 4-only files into new flists,
distrib/sets/lists/*/krb.*

* make the flist generators grok MKKERBEROS{,4} variables

* fix Makefiles which treat MKKERBEROS=no as MKKERBEROS5=no.
9 out of 10 experts agree that it is ludicrous to build w/
KERBEROS4 and w/o KERBEROS5.

* fix header files, also, which treat MKKERBEROS=no as MKKERBEROS5=no.

* omit some Kerberos-only subdirectories from the build as
MKKERBEROS{,4} indicate

(I acknowledge the sentiment that flists are the wrong way to go,
and that the makefiles should produce the metalog directly. That
sounds to me like the right way to go, but I am not prepared to do
revamp all the makefiles. While my approach is expedient, it fits
painlessly within the current build architecture until we are
delivered from flist purgatory, and it does not postpone our
delivery. Fair enough?)
 1.124  25-Nov-2003  dyoung Finer-grained syspkgs to save space on tiny systems: move
calendar(1)-related and RPC-related files to their own packages.
Move the termcap(5) database to its own package, also.
 1.123  24-Apr-2003  perry add default skel/.logout file
 1.122  20-Apr-2003  thorpej Add a reset_button script.
 1.121  18-Apr-2003  thorpej Add /etc/powerd/scripts/power_button
 1.120  18-Apr-2003  thorpej Add /etc/rc.d/powerd
 1.119  03-Apr-2003  taca Reflect change of cron's log file.
 1.118  24-Mar-2003  atatat Adjust sets lists to account for new sendmail machinery.
 1.117  15-Mar-2003  wiz Add atc_score in place of atc_scores; completes solution of PR 20709.
 1.116  22-Feb-2003  lukem move the obsolete lists from etc to base, as they're more useful there.
suggested by matt green.
 1.115  22-Feb-2003  lukem all:
Use /var/db/obsolete instead of /etc/obsolete

etc/Makefile:
Create separate target "install-obsolete-files" to populate
/var/db/obsolete, instead of using "install-etc-files".

Makefile:
Add do-obsolete target, to run "cd etc && make install-obsolete-files",
and add this to BUILDTARGETS.
This moves the "obsolete files" creation from "distribution" to "build".


Per discussion with Andrew Brown.
 1.114  20-Feb-2003  lukem etc/postinstall
* Improve message display in find_file_in_dirlist()
* do_obsolete(): instead of running distrib/sets/makeobsolete to
temporarily generate the obsolete sets lists, look for them in
${SRC_DIR}/etc/obsolete/* or ${DEST_DIR}/etc/obsolete/*.
The obsolete check now works for "extracted etc.tgz" as the source dir.

etc/Makefile (install-etc-files), distrib/sets/lists/*
* Install obsolete set lists into /etc/obsolete/
* Tweak how pwd_mkdb files are added to METALOG

distrib/sets/makeobsolete
* Don't bother with "_obsolete" suffix on generated file names.
 1.113  16-Jan-2003  martti Back out previous (as discussed with releng). The correct way to set this is:

# echo "myserver" > /var/yp/binding/`domainname`.ypservers
 1.112  16-Jan-2003  martti Script to bind a NIS client to a known server.

$ grep yp /etc/rc.conf
ypbind=YES
ypbind_flags="-ypset"
ypset=YES
ypset_flags="myserver"
 1.111  10-Jan-2003  lukem add etc/rc.d/staticroute. (hi christos!)
 1.110  17-Dec-2002  lukem Move dev/MAKEDEV from base to etc, just like everything else installed
by etc/Makefile::install-etc-files.

(Arguably a bunch of stuff in etc could move to base, but that's a
separate issue).
 1.109  09-Oct-2002  elric Added cgd rc.d script and put it in the appropriate postinstall and
mtree files.
 1.108  05-Oct-2002  grant add /etc/mail/local-host-names, required by sendmail(8).
 1.107  17-Sep-2002  briggs Add ./var/log/wtmpx
 1.106  03-Sep-2002  abs Split raidframe parity checking/rebuild out into raidframeparity, which is
called after quota so we don't end up with fsck and raidframe parity rebuild
taking forever after a crash/reboot.
While we are here check for raid[0-9].conf & raid[1-9][0-9].conf not
raid[0-9].conf & raid[0-9][0-9].conf
 1.105  03-Sep-2002  wiz Add /var/run/utmpx, requested by soren.
 1.104  27-Aug-2002  takemura Added touch panel calibration utility.
 1.103  06-Aug-2002  soren Update for etc/skel removals.
 1.102  30-Jul-2002  wiz Add /etc/rc.d/wdogctl.
 1.101  06-Jul-2002  tv Remove empty "ftpwelcome" entirely. This makes ftpd emit a two-line
extended greeting, which confuses lots of established firewalls.
(Not added to "obsolete" since removing this file is not mandatory.)
 1.100  27-Jun-2002  christos wsmoused additions.
 1.99  03-Jun-2002  jmcneill Move 'mixerctl' rc script from etc-sys-rc to etc-audio-rc.
 1.98  02-Jun-2002  jmcneill Add mixerctl rc.d script.
 1.97  29-Apr-2002  lukem branches: 1.97.2;
Complete the conversion back to the OpenSSH default configuration files of
"/etc/ssh/ssh_config" (from "/etc/ssh/ssh.conf") for ssh(1) and other
userland tools, and "/etc/ssh/sshd_config (from "/etc/ssh/sshd.conf")
for sshd(8).

etc/postinstall will detect this, and if "fix" is given, rename the files.
 1.96  26-Apr-2002  lukem add etc/postinstall
 1.95  22-Apr-2002  minoura Add passwd.conf.
 1.94  11-Mar-2002  itojun move sshd config files to /etc/ssh
 1.93  11-Mar-2002  itojun dig /etc/ssh
 1.92  12-Feb-2002  thorpej Add some missing postifx etc files.
 1.91  11-Feb-2002  martti ipfs allows state information created for NAT entries and rules using
keep state to be locked (modification prevented) and then saved to disk,
allowing for the system to experience a reboot, followed by the restoration
of that information, resulting in connections not being interrupted.

To activate this feature, set ipfs=YES in /etc/rc.conf
 1.90  31-Jan-2002  lukem - rename etc/rc.d/NETWORK to etc/rc.d/NETWORKIGN
- move entry for etc/rc.d/xntpd from base/obsolete.mi to etc/obsolete.mi
 1.89  10-Dec-2001  martin Add ifwatchd.
 1.88  29-Oct-2001  augustss Add moused.
 1.87  04-Sep-2001  martin Add etc/rc.d/downinterfaces.
 1.86  23-Jun-2001  itojun upgrade to openssh 2.9, around 2001/6/24 (from openbsd usr.bin/ssh).

- authorized_keys2 and known_hosts2 are obsoleted, and integrated
into those without "2".
- file name change, /etc/primes -> /etc/moduli
- cleanups
 1.85  26-May-2001  itojun install /etc/primes for ssh
 1.84  22-May-2001  fredette sunndd has been renamed ndbootd.
 1.83  17-May-2001  fredette Added entries for sunndd.
 1.82  10-Apr-2001  enami dhclient-script was moved to /sbin.
Pointed out by Kimio Ishii <ishii@sm.sony.co.jp>.
 1.81  05-Apr-2001  thorpej Add /etc/rc.d/altqd.
 1.80  05-Apr-2001  wiz Don't install /etc/rc.d/gated any longer, since gated isn't in the
base system.
 1.79  26-Jan-2001  jwise Change a package name.
 1.78  26-Jan-2001  jwise Add pkg names.
 1.77  21-Jan-2001  itojun make it clearer that /etc/rtadvd.conf is optional (normally,
configurations were derived from kernel interface settings).

install rtadvd.conf into /usr/share/exapmles/rtadvd, instead of /etc.

sync with kame.
 1.76  18-Jan-2001  thorpej Add rc.d/racoon.
 1.75  15-Jan-2001  itojun no longer need to ship IPv4-only sendmail.cf.
 1.74  14-Jan-2001  minoura Add etc/rc.d/poffd.
 1.73  07-Jan-2001  ad Add /etc/rc.d/isdnd.
 1.72  30-Oct-2000  thorpej Remove /etc/mail/aliases.db -- see etc/Makefile,v 1.168.
 1.71  16-Oct-2000  simonb Add /etc/skel files.

Part of fix for PR bin/10985.
 1.70  14-Oct-2000  wiz add etc/rc.d/newsyslog
 1.69  01-Oct-2000  lukem move default config files from /etc/default -> /etc/defaults, to be
consistent with what FreeBSD uses /etc/defaults for, and since SVR4
uses /etc/default for another purpose.
as discussed on tech-userlevel, and no objections were made.
 1.68  28-Sep-2000  thorpej Add ssh-related files.
 1.67  26-Aug-2000  lukem add rc.d/securelevel. noted in [install/10896] by Rafal Boni.
 1.66  24-Aug-2000  enami Remove an obsolete rc.wscons.
 1.65  23-Aug-2000  lukem migrate default installation config files from /etc to /etc/default
 1.64  22-Aug-2000  lukem repalce rc.d/fsck.sh with rc.d/fsck
 1.63  06-Aug-2000  thorpej kerberos -> kdc
 1.62  26-Jul-2000  lukem add rc.d/NETWORK, obsolete rc.d/systemfs
 1.61  04-Jul-2000  itojun sync sendmail default configuration file with GENERIC kernel setting.
was: sendmail-IPv6.cf(v4/v6) + sendmail.cf(v4)
now: sendmail-IPv4only.cf(v4) + sendmail.cf(v4/v6)

do we need etc/obsolete.mi?
 1.60  20-Jun-2000  minoura branches: 1.60.2;
Sort.
 1.59  13-Jun-2000  itojun add rc.d/ipsec for ipsec configuration. when enabled, it will inject
/etc/ipsec.conf into "setkey -f". PR 9609.
 1.58  07-Jun-2000  thorpej Update for reality.
 1.57  13-May-2000  lukem remove netstart
 1.56  10-May-2000  thorpej Update for location of aliases/aliases.db.
 1.55  08-May-2000  itojun make default sendmail.cf IPv4-only again.
roll sendmail-IPv6.cf, which does IPv4/v6.
 1.54  06-May-2000  mycroft Finish previous sync.
 1.53  06-May-2000  mycroft Sync (mostly).
 1.52  03-May-2000  itojun correct more sendmail upgrade issue.
 1.51  03-May-2000  itojun sync with sendmail upgrade.
 1.50  02-May-2000  simonb Adjust sets for ntp4.
XXX: Obsolete sets still need to be fixed.
 1.49  01-May-2000  thorpej Add postfix-related files.
 1.48  26-Apr-2000  itojun add zone file for "localhost.". this is included in examples in BIND8,
and is a good thing to have (no outside DNS server will supply this).
 1.47  15-Apr-2000  tsarna Update sets and obsolete lists to reflect death of nfsiod
 1.46  08-Apr-2000  tsarna add /etc/sysctl.conf
 1.45  14-Mar-2000  shin fix DAEMON,LOGIN,SERVERS,sshd in /etc/rc.d.
 1.44  12-Mar-2000  jlam Add /etc/rc.d scripts.
 1.43  01-Mar-2000  itojun change filename for IPv6 loopback address (::1).
many found it ugly, and I found that I've made a mistake in old name.
there needs to be 4 more "0"s!

this commit renames
etc/namedb/0000:0000:0000:0000:0000:0000:000 into etc/namedb/loopback.v6.
(based on recent discussion I did not use cvsmove)
 1.42  28-Jan-2000  fair added ./etc/ntp.conf per PR 4312
 1.41  27-Jan-2000  itojun add reverse lookup table for IPv6 loopback (::1).
ugly...
 1.40  07-Nov-1999  mycroft branches: 1.40.2;
Add /root/.shrc.
 1.39  28-Oct-1999  perry sync to reality
 1.38  21-Jul-1999  mycroft branches: 1.38.2;
Make an aliases.db file when we install the aliases file.
 1.37  04-Jul-1999  fvdl Bring setlists up to date for i386 switch to ELF and ipv6.
 1.36  19-Apr-1999  simonb Add a NetBSD RCS tag to each distrib list file.
 1.35  05-Apr-1999  perry add aculog
 1.34  30-Mar-1999  simonb branches: 1.34.2;
Add /etc/wscons.conf
 1.33  18-Mar-1999  ross ld.so.conf doesn't belong in mi.
 1.32  16-Mar-1999  he Sync to reality. gcov, rc.wscons, queue/list man pages, i386/ieee.h.
 1.31  06-Mar-1999  he Fixing various chaff, sync to current reality:
o mailwrapper, postfix and sendmail
o hello, sup.no.netbsd.org; bye to skarven.itea.unit.no
o innetgr / netgroup
o a few sendmail master config file changes
 1.30  23-Jan-1999  mycroft Catch up with the Joneses.
 1.29  18-Jan-1999  lukem add nsswitch.conf
 1.28  05-Jan-1999  cjs Sync with various changes over the last week or two.
 1.27  19-Nov-1998  tron Include "named.conf" instead of "named.boot".
 1.26  29-Oct-1998  bad /etc/rc.shutdown
 1.25  05-Sep-1998  kleink ./etc/mtree/BSD.{pkg,x11}.dist are gone.
 1.24  15-Jun-1998  lukem sort files
 1.23  02-Feb-1998  mikel add /etc/ld.so.conf, from Steve Allen in PR misc/4892
 1.22  22-Dec-1997  mikel back out last change, /etc/aliases.db now auto-rebuilt by default sendmail.cf
 1.21  18-Dec-1997  mikel add /etc/aliases.db
 1.20  02-Dec-1997  hubertf add etc/mtree/BSD.x11.dist
 1.19  24-Nov-1997  mrg move games score files into etc so we don't clobber them
 1.18  26-Oct-1997  mikel update; from Steve Allen in PR misc/4345, with some additions by myself.
 1.17  30-Sep-1997  is branches: 1.17.2;
/etc/magic -> /usr/share/misc/magic
 1.16  07-Sep-1997  pk remove etc/myname
 1.15  31-Aug-1997  perry sync to reality
 1.14  31-Jul-1997  veego Sync.
 1.13  21-Jun-1997  mikel add /etc/profile
 1.12  30-Apr-1997  pk Synchronize.
 1.11  07-Apr-1997  scottr Update for current reality.
 1.10  14-Mar-1997  thorpej Sync with reality.
 1.9  10-Jan-1997  thorpej Add the new *.conf and rc.lkm files.
 1.8  08-Jan-1997  thorpej Update to reflect current reality.
 1.7  04-Dec-1996  lukem AUTHPRIV syslog messages go to /var/log/authlog instead of /var/log/secure
(in line with other systems)
 1.6  29-Nov-1996  jtk add fdformat, its man pages, and fdc(4) page
 1.5  20-Nov-1996  lukem add /var/log/secure
 1.4  16-Nov-1996  briggs Updates from Steve Allen <wormey@eskimo.com> to match the current world.
 1.3  09-Oct-1996  jtc merge in 1.2 branch
 1.2  27-May-1996  pk sync
 1.1  29-Aug-1994  cgd branches: 1.1.1;
Initial revision
 1.1.1.1  29-Aug-1994  cgd branches: 1.1.1.1.2; 1.1.1.1.8;
distribution sets contents lists
 1.1.1.1.8.1  24-Aug-1996  gwr Move the following files from the base set to the etc set:
./var/cron/log
./var/db/locate.database
./var/log/lastlog
./var/log/lpd-errs
./var/log/maillog
./var/log/messages
./var/log/sendmail.st
./var/log/wtmp
./var/run/utmp
That way they are not overwritten on an upgrade. (Closes PR#2710)
 1.1.1.1.2.2  29-Aug-1994  cgd distribution sets contents lists
 1.1.1.1.2.1  29-Aug-1994  cgd file mi was added on branch netbsd-1-0 on 1994-08-29 15:21:14 +0000
 1.17.2.4  20-Jul-1998  mellon Pull up 1.23 (fvdl)
 1.17.2.3  15-Dec-1997  mellon Pull rev 1.20 up from trunk (veego)
 1.17.2.2  24-Nov-1997  mrg pull up from trunk: move games score files into etc so we don't clobber them
 1.17.2.1  27-Oct-1997  mellon Pull rev 1.18 up from trunk (mikel)
 1.34.2.3  14-Dec-2000  he Pull up revision 1.71 (requested by he):
Add /etc/skel files.
 1.34.2.2  27-Nov-1999  he Pull up revision 1.38 (requested by mycroft):
Create and install $DESTDIR/etc/aliases.db, using
$DESTDIR/etc/sendmail.cf, so that sendmail works "out of the
box".
 1.34.2.1  05-Apr-1999  perry add aculog (sync to 1.35)
 1.38.2.1  27-Dec-1999  wrstuden Pull up to last week's -current.
 1.40.2.2  07-Nov-1999  mycroft Add /root/.shrc.
 1.40.2.1  07-Nov-1999  mycroft file mi was added on branch comdex-fall-1999 on 1999-11-07 07:57:39 +0000
 1.60.2.15  06-Mar-2002  he Apply patch (requested by martti):
Add /etc/rc.d/ipfs.
 1.60.2.14  11-Dec-2001  he Apply patch (requested by itojun):
Upgrade OpenSSH to version 3.0.2.
(Replace etc/primes with etc/moduli.)
 1.60.2.13  27-May-2001  he Pull up revision 1.85 (via patch, requested by itojun):
Install /etc/primes, which is required for Diffie-Hellman Group
Exchange operation.
 1.60.2.12  23-Apr-2001  he Apply patch (requested by dogcow):
/etc/dhclient-script moved to /sbin/dhclient-script.
 1.60.2.11  06-Apr-2001  he Apply patch (requested by he):
Bring into line with reality on the branch.
 1.60.2.10  20-Oct-2000  tv Pullup 1.71 [simonb]:
Use /etc/skel only for skeleton files for useradd.
Fixes PR bin/10985.
 1.60.2.9  02-Oct-2000  lukem pull up rev 1.69 (approved by thorpej):
move default config files from /etc/default -> /etc/defaults, to be
consistent with what FreeBSD uses /etc/defaults for, and since SVR4
uses /etc/default for another purpose.
as discussed on tech-userlevel, and no objections were made.
 1.60.2.8  29-Sep-2000  thorpej Pull up reg. 1.68: ssh-related files
 1.60.2.7  27-Aug-2000  lukem pull up rev 1.67 (approved by thorpej):
add `./etc/rc.d/securelevel', fixing PR [install/10896]
 1.60.2.6  24-Aug-2000  enami Pullup revision 1.66 (approved by thorpej):
Remove an obsolete rc.wscons.
 1.60.2.5  23-Aug-2000  lukem pull up revs 1.64-1.65:
- replace fsck.sh with fsck (using kill -TERM $$ to stop autoboot).
- migrate default installation config files from /etc to /etc/default

approved: thorpej
 1.60.2.4  09-Aug-2000  lukem pull up rev 1.62
approved by thorpej

add rc.d/NETWORK, obsolete rc.d/systemfs
 1.60.2.3  06-Aug-2000  thorpej Pull up rev. 1.63:
kerberos -> kdc
 1.60.2.2  07-Jul-2000  itojun pullup, approved by: releng-1-5
sync sendmail default configuration file with GENERIC kernel setting.

basesrc/distrib/sets/lists/etc/mi 1.60 -> 1.61
basesrc/distrib/sets/lists/misc/mi 1.38 -> 1.39
basesrc/distrib/sets/lists/misc/obsolete.mi 1.7 -> 1.8
 1.60.2.1  20-Jun-2000  itojun file mi was added on branch netbsd-1-5 on 2000-07-07 11:12:35 +0000
 1.97.2.3  30-Nov-2002  he Pull up revision 1.106 (requested by abs in ticket #772):
Split raidframe parity checking/rebuilding out into
raidframeparity, which is called after quota, so we don't
end up with fsck and raidframe parity rebuild taking forever
after a crash/reboot.
While here, check for raid[0-9].conf and raid[1-9][0-9].conf
and not raid[0-9].conf and raid[0-9][0-9].conf
 1.97.2.2  24-Nov-2002  tron Pull up revision 1.108 (requested by grant in ticket #904):
add /etc/mail/local-host-names, required by sendmail(8).
 1.97.2.1  11-Nov-2002  he Pull up revision 1.102 (requested by thorpej in ticket #584):
Add a wdogctl startup/shutdown script.
 1.140.2.1  27-Apr-2004  jdc Pull up revision 1.141 (requested by dbj in ticket #185)

Fix problems related to superblock upgrade issues which may be
experienced by -current users from 2003.
 1.143.2.1  21-Nov-2004  rtr + sync with -current
 1.144.2.2  18-Nov-2004  wiz Put obsolete files in the *-obsolete sets instead of whatever they
were in before they became obsolete (consistency).
 1.144.2.1  18-Nov-2004  wiz file mi was added on branch rtr-xorg-branch on 2004-11-18 15:34:25 +0000
 1.153.2.6  15-Sep-2005  tron Pull up following revision(s) (requested by lukem in ticket #788):
distrib/sets/lists/etc/mi: revision 1.161
Add a note explaining why we don't "obsolete" end-user configuration files.
Inspired by the fallout from the recent named.conf move.
XXX: consider fixing spamd.conf in a similar manner.
 1.153.2.5  15-Sep-2005  tron Pull up following revision(s) (requested by lukem in ticket #788):
distrib/sets/lists/etc/mi: revision 1.160
UPDATING: revision 1.143 via patch
Don't mark /etc/namedb/named.conf as "obsolete" since that will cause
a file that has end-user configuration to be unconditionally removed.
Instead, remove the entry from the set list, and add a note to UPDATING
reminding users of MKUPDATE=yes to manually rectify the problem in
their DESTDIR.
The "named" fix in postinstall(8) will migrate /etc/namedb/named.conf
to /etc/named.conf if the latter doesn't exist.
(The need for these style of migrations was why I implemented postinstall(8)
in the first place.)
 1.153.2.4  04-Sep-2005  tron Pull up following revision(s) (requested by jwise in ticket #725):
etc/named.conf: revision 1.1
etc/namedb/named.conf: file removal
etc/namedb/Makefile: revision 1.2
etc/Makefile: revision 1.314
distrib/sets/lists/etc/mi: revision 1.159
Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.
 1.153.2.3  02-Sep-2005  tron Pull up following revision(s) (requested by peter in ticket #717):
distrib/sets/lists/man/mi: revision 1.818
distrib/sets/lists/etc/mi: revision 1.158
Add new files for pf.boot.conf.
 1.153.2.2  02-Jul-2005  tron Pull up revision 1.156 (requested by peter in ticket #518):
Remove (pf)spamd. Its right to exist in NetBSD has been questioned since it
appeared and whether it's really part of pf or not is still unclear. Looking
at the other *BSDs it seems that they have left out spamd when importing pf,
and now we do that too. Also, the name conflicted with another more popular
used tool, after the rename to pfspamd it was left with completely unusable
documentation which apparently no-one wanted to fix.
A port of the latest spamd will be imported into pkgsrc soon.
Suggested by several people, no objections on last proposal on tech-userlevel.
 1.153.2.1  20-Apr-2005  tron Pull up revision 1.154 (requested by lukem in ticket #164):
Move /etc/postinstall (and the etc.tgz set) to /usr/sbin/postinstall
(and the base.tgz set).
 1.163.2.1  24-May-2006  tron Merge 2006-05-24 NetBSD-current into the "peter-altq" branch.
 1.173.2.3  14-Sep-2006  riz Pull up following revision(s) (requested by plunky in ticket #161):
sys/dev/bluetooth/btdev.h: revision 1.4
distrib/sets/lists/comp/mi: revision 1.922
usr.sbin/postinstall/postinstall: revision 1.25
sys/netbt/hci_unit.c: revision 1.3
sys/netbt/hci_ioctl.c: revision 1.4
usr.sbin/sdpd/profile.c: revision 1.2
usr.sbin/btdevctl/btdevctl.c: revision 1.2
share/man/man4/Makefile: revision 1.405
distrib/sets/lists/man/mi: revision 1.930
distrib/sets/lists/etc/mi: revision 1.176
usr.sbin/sdpd/profile.c: revision 1.3
usr.sbin/btdevctl/btdevctl.c: revision 1.3
etc/MAKEDEV.tmpl: revision 1.62
distrib/sets/lists/base/mi: revision 1.650
usr.sbin/btdevctl/btdevctl.h: revision 1.2
usr.bin/sdpquery/sdpquery.1: revision 1.4
sys/netbt/rfcomm_session.c: revision 1.2
usr.sbin/btdevctl/btdevctl.8: revision 1.3
usr.bin/sdpquery/search.c: revision 1.2
usr.sbin/sdpd/Makefile: revision 1.2
sys/dev/bluetooth/Makefile: revision 1.3
usr.sbin/btdevctl/cfg.c: file removal
sys/netbt/files.netbt: revision 1.4
usr.sbin/btdevctl/sdp.c: revision 1.1
sys/dev/bluetooth/bthidev.c: revision 1.3
etc/bluetooth/Makefile: revision 1.3
sys/dev/pcmcia/files.pcmcia: revision 1.51
sys/dev/bluetooth/bthidev.c: revision 1.4
sys/dev/bluetooth/bthidev.h: revision 1.3
usr.sbin/btdevctl/dev.c: file removal
sys/dev/bluetooth/files.bluetooth: revision 1.10
sys/arch/i386/conf/GENERIC: revision 1.777
share/man/man4/ubt.4: revision 1.6
share/man/man4/bthub.4: revision 1.3
sys/netbt/hci.h: revision 1.5
sys/arch/i386/conf/GENERIC_LAPTOP: revision 1.202
lib/libsdp/sdp.h: revision 1.2
usr.sbin/btdevctl/print.c: revision 1.1
share/man/man4/bthidev.4: revision 1.5
share/man/man4/btdev.4: file removal
usr.sbin/btdevctl/print.c: revision 1.2
sys/arch/i386/conf/GENERIC_LAPTOP: revision 1.205
usr.sbin/btdevctl/Makefile: revision 1.2
sys/dev/usb/files.usb: revision 1.70
sys/netbt/l2cap_signal.c: revision 1.2
sys/netbt/hci_link.c: revision 1.4
sys/dev/bluetooth/bthub.c: revision 1.3
share/man/man4/btsco.4: revision 1.5
sys/netbt/hci_link.c: revision 1.5
share/man/man4/btdev.4: revision 1.4
sys/dev/bluetooth/btkbd.c: revision 1.3
sys/dev/bluetooth/btdev.c: file removal
sys/netbt/hci_event.c: revision 1.2
sys/dev/bluetooth/btsco.h: revision 1.2
etc/mtree/special: revision 1.101
sys/dev/bluetooth/btsco.c: revision 1.3
sys/conf/majors: revision 1.27
usr.sbin/sdpd/hf.c: revision 1.1
sys/dev/bluetooth/btsco.c: revision 1.4
share/man/man5/rc.conf.5: revision 1.107
sys/dev/bluetooth/btdev.c: revision 1.2
etc/rc.d/btdevctl: revision 1.2
usr.sbin/btdevctl/db.c: revision 1.1
etc/rc.d/btdevctl: revision 1.3
etc/bluetooth/btdevctl.conf: revision 1.1
usr.sbin/btdevctl/hid.c: file removal
sys/arch/i386/conf/GENERIC: revision 1.781
sys/dev/bluetooth/btdev.h: revision 1.3
Make btdev default count explicit
Fix typo in variable name
update to bluetooth device attachment:
remove pseudo-device btdev(4) and inherent limitations
add bthub(4) which autoconfigures at bluetooth controllers as they
are enabled. bluetooth devices now attach here.
btdevctl(8) and its cache is updated to handle new semantics
etc/rc.d/btdevctl is updated to configure devices from a list
in /etc/bluetooth/btdevctl.conf
also include service name in dictionary being sent to kernel.
(this is not used just yet, but it might be in the future and it will
be easier if we dont have to provide code to handle its absence)
clarify the CAVEAT section somewhat
Add service discovery support for the Handsfree profile
Replace static 'FreeBSD' string with operating system name gleaned
from uname(3)
Halt the callout on detach
btsco.c:
- sco_getopt(..., SO_SCO_MTU, ...) expects the address of a uint16_t,
not an int. So change sc_mtu's type to uint16_t.
- Try a little harder to ensure btsco_round_blocksize() does not
return zero. Prevents a subsequent panic in audio_init_ringbuffer().
from scw@
Endian issues:
hci_event.c:
- Convert memo->response.clock_offset to host-endian.
hci_ioctl.c:
- printf format tweak (size_t)
hci_link.c:
- Convert memo->response.clock_offset from host-endian.
- Tweak a DIAGNOSTIC message.
l2cap_signal.c:
- In l2cap_recv_config_req(), rp->scid is little-endian so make sure
we convert from host-endian.
from scw@
hci_link.c:
- In hci_link_free(), do not unlink items from a LIST queue within
a LIST_FOREACH() iterator.
rfcomm_session.c:
- In rfcomm_session_recv_mcc_nsc(), do not unlink items from a LIST
queue within a LIST_FOREACH() iterator.
from scw@
guard against a possible situation where the list of l2cap channels is changed
when the bluetooth code is not expecting it to be. During a disconnect, we can
detach the channel that is being disconnected, but its not really safe to detach
any others.
Print explicit 64-bit types using the format macros from int_fmtio.h.
Unbreaks the build for our LP64 ports, where "long long" typically is
not 64 bits.
 1.173.2.2  07-Sep-2006  tron Pull up following revision(s) (requested by plunky in ticket #81):
usr.sbin/postinstall/postinstall: revision 1.23
distrib/sets/lists/man/mi: revision 1.919
distrib/sets/lists/etc/mi: revision 1.174
usr.sbin/btdevctl/btdevctl.c: revision 1.1
usr.sbin/btdevctl/hid.c: revision 1.1
usr.sbin/Makefile: revision 1.217
usr.sbin/btdevctl/btdevctl.h: revision 1.1
usr.sbin/btdevctl/btdevctl.8: revision 1.1
etc/rc.d/btcontrol: file removal
distrib/sets/lists/comp/mi: revision 1.910
etc/rc.d/Makefile: revision 1.61
usr.sbin/btdevctl/cfg.c: revision 1.1
usr.sbin/btdevctl/dev.c: revision 1.1
share/man/man4/btkbd.4: revision 1.2
share/man/man4/bthidev.4: revision 1.4
usr.sbin/btcontrol/hid.c: file removal
usr.sbin/btdevctl/Makefile: revision 1.1
share/man/man4/btsco.4: revision 1.3
distrib/sets/lists/base/mi: revision 1.644
share/man/man4/btdev.4: revision 1.3
share/man/man4/btms.4: revision 1.2
etc/mtree/special: revision 1.100
share/man/man5/rc.conf.5: revision 1.105
usr.sbin/btcontrol/cfg.c: file removal
etc/rc.d/btdevctl: revision 1.1
etc/defaults/rc.conf: revision 1.80
usr.sbin/btcontrol/btcontrol.h: file removal
usr.sbin/btcontrol/btcontrol.8: file removal
usr.sbin/btcontrol/dev.c: file removal
usr.sbin/btcontrol/btcontrol.c: file removal
usr.sbin/btcontrol/Makefile: file removal
rename btcontrol(8) as btdevctl(8) to make it fit with the NetBSD naming
scheme for control programs. This fixes pr 34051.
 1.173.2.1  02-Sep-2006  riz Pull up following revision(s) (requested by hubertf in ticket #105):
distrib/sets/lists/etc/mi: revision 1.175
etc/skel/dot.profile: revision 1.4
etc/skel/Makefile: revision 1.8
etc/skel/dot.shrc: revision 1.1
Sync behaviour of sh and ksh dotfiles for new users with those of root.
Addresses PR 32215 by Wouter Schoot
Actually install "dot.shrc" to fix the build.
 1.184.4.2  03-Jun-2008  skrll Sync with netbsd-4.
 1.184.4.1  03-Sep-2007  wrstuden Sync w/ NetBSD-4-RC_1
 1.184.2.2  02-Feb-2008  riz Pull up following revision(s) (requested by elad in ticket #1012):
etc/login.conf: revision 1.1
etc/login.conf: revision 1.2
etc/Makefile: revision 1.338
distrib/sets/lists/etc/mi: revision 1.186
Add an commented out login.conf with a simple example based on OpenBSD.
Requested by Elad.
Add login.conf.
Add /usr/pkg/{,s}bin to the default path for the default class for
login.conf.
Add /etc/login.conf.
 1.184.2.1  01-Jul-2007  bouyer Pull up following revision(s) (requested by pavel in ticket #752):
distrib/sets/lists/etc/mi: revision 1.190
distrib/sets/lists/misc/mi: revision 1.145
usr.sbin/postinstall/postinstall: revisions 1.41, 1.42
usr.sbin/postinstall/postinstall.8: revision 1.7

Separate postinstall checks in two groups: enabled and disabled by
default. Only the former checks/fixes are done if no items are given
on the command line. The latter must be requested explicitely.
Intended for "fixes" that are dangerous in some way, because they might
remove files that are still in use, for example.

Make the "sendmail" item disabled by default, it removes sendmail
configuration. Partly addresses PR install/36180.
Proposed on tech-userlevel, review and spelling fixes from lukem@.

Remove the remaining sendmail config files (including everything in
/usr/share/sendmail) from the obsolete list. Instead, remove them in the
"sendmail" postinstall item, which is disabled by default, to prevent
losing sendmail configuration on upgrade. Fixes the rest of
PR install/36180.
 1.195.4.1  09-Jan-2008  matt sync with HEAD
 1.197.6.4  05-Oct-2008  mjf Sync with HEAD.
 1.197.6.3  29-Jun-2008  mjf Sync with HEAD.
 1.197.6.2  02-Jun-2008  mjf Sync with HEAD.
 1.197.6.1  21-Feb-2008  mjf Start where the mjf-devfs branch left off.
 1.197.2.2  18-Feb-2008  mjf Add some devfs code that's been sitting in my local tree for a while.

devfsd(8) is now the first daemon to be started after init(8). It tracks
device insertion (will eventually track removal) and devfs mounts.

Currently, we can mount multiple device file systems and have device
special files pushed into the mounts automatically, though, the device
special files aren't created with the correct major/minor number pairs
yet.

More work to come soon.
 1.197.2.1  22-Dec-2007  mjf file mi was added on branch mjf-devfs on 2008-02-18 22:07:01 +0000
 1.198.4.1  23-Jun-2008  wrstuden Sync w/ -current. 34 merge conflicts to follow.
 1.198.2.2  13-Jun-2008  peter rc.d script for starting ftp proxy.
 1.198.2.1  04-Jun-2008  yamt sync with head
 1.200.2.6  15-Sep-2009  snj Apply patch (requested by tron in ticket #944):
Update Postfix to 2.6.5.
 1.200.2.5  30-May-2009  snj Pull up following revision(s) (requested by joerg in ticket #784):
UPDATING: patch
distrib/sets/lists/base/mi: patch
distrib/sets/lists/etc/mi: patch
distrib/sets/lists/man/mi: patch
external/bsd/pkg_install/Makefile.inc: patch
external/bsd/pkg_install/prepare-import.sh: patch
external/bsd/pkg_install/dist/add/add.h: pkg_install-20090528
external/bsd/pkg_install/dist/add/main.c: pkg_install-20090528
external/bsd/pkg_install/dist/add/perform.c: pkg_install-20090528
external/bsd/pkg_install/dist/add/pkg_add.1: pkg_install-20090528
external/bsd/pkg_install/dist/admin/admin.h: pkg_install-20090528
external/bsd/pkg_install/dist/admin/audit.c: pkg_install-20090528
external/bsd/pkg_install/dist/admin/check.c: pkg_install-20090528
external/bsd/pkg_install/dist/admin/main.c: pkg_install-20090528
external/bsd/pkg_install/dist/admin/pkg_admin.1: pkg_install-20090528
external/bsd/pkg_install/dist/bpm/bpm.1: pkg_install-20090528
external/bsd/pkg_install/dist/create/build.c: pkg_install-20090528
external/bsd/pkg_install/dist/create/create.h: pkg_install-20090528
external/bsd/pkg_install/dist/create/main.c: pkg_install-20090528
external/bsd/pkg_install/dist/create/perform.c: pkg_install-20090528
external/bsd/pkg_install/dist/create/pkg_create.1: pkg_install-20090528
external/bsd/pkg_install/dist/create/pl.c: pkg_install-20090528
external/bsd/pkg_install/dist/create/util.c: pkg_install-20090528
external/bsd/pkg_install/dist/delete/pkg_delete.1: pkg_install-20090528
external/bsd/pkg_install/dist/info/info.h: pkg_install-20090528
external/bsd/pkg_install/dist/info/main.c: pkg_install-20090528
external/bsd/pkg_install/dist/info/perform.c: pkg_install-20090528
external/bsd/pkg_install/dist/info/pkg_info.1: pkg_install-20090528
external/bsd/pkg_install/dist/info/show.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/automatic.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/config.h.in: pkg_install-20090528
external/bsd/pkg_install/dist/lib/conflicts.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/decompress.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/dewey.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/fexec.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/file.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/global.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/iterate.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/lib.h: pkg_install-20090528
external/bsd/pkg_install/dist/lib/lpkg.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/opattern.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkg_io.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkg_summary.5: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkgdb.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/plist.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/str.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/var.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/version.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/version.h: pkg_install-20090528
external/bsd/pkg_install/dist/lib/vulnerabilities-file.c: pkg_install-20090528
external/bsd/pkg_install/dist/admin/audit-packages.sh.in: pkg_install-20090528
external/bsd/pkg_install/dist/admin/download-vulnerability-list.sh.in: pkg_install-20090528
external/bsd/pkg_install/dist/delete/pkg_delete.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/gpgsig.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/license.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/parse-config.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkcs7.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkg_install.conf.5.in: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkg_signature.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/remove.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/xwrapper.c: pkg_install-20090528
external/bsd/pkg_install/dist/x509/pkgsrc.cnf: pkg_install-20090528
external/bsd/pkg_install/dist/x509/pkgsrc.sh: pkg_install-20090528
external/bsd/pkg_install/dist/x509/signing.txt: pkg_install-20090528
external/bsd/pkg_install/lib/Makefile: patch
external/bsd/pkg_install/sbin/Makefile: patch
external/bsd/pkg_install/sbin/Makefile.inc: patch
external/bsd/pkg_install/sbin/pkg_add/Makefile: patch
external/bsd/pkg_install/sbin/pkg_admin/Makefile: patch
external/bsd/pkg_install/sbin/pkg_create/Makefile: patch
external/bsd/pkg_install/sbin/pkg_delete/Makefile: patch
external/bsd/pkg_install/sbin/pkg_info/Makefile: patch
external/bsd/pkg_install/dist/add/extract.c: removed
external/bsd/pkg_install/dist/add/futil.c: removed
external/bsd/pkg_install/dist/add/verify.c: removed
external/bsd/pkg_install/dist/add/verify.h: removed
external/bsd/pkg_install/dist/admin/config.c: removed
external/bsd/pkg_install/dist/audit-packages/AUTHORS: removed
external/bsd/pkg_install/dist/audit-packages/COPYING: removed
external/bsd/pkg_install/dist/audit-packages/README: removed
external/bsd/pkg_install/dist/audit-packages/audit-packages.1.in: removed
external/bsd/pkg_install/dist/audit-packages/audit-packages.c: removed
external/bsd/pkg_install/dist/audit-packages/audit-packages.conf.5.in: removed
external/bsd/pkg_install/dist/audit-packages/audit-packages.conf.in: removed
external/bsd/pkg_install/dist/audit-packages/download-vulnerability-list.1.in: removed
external/bsd/pkg_install/dist/audit-packages/download-vulnerability-list.sh.in: removed
external/bsd/pkg_install/dist/delete/delete.h: removed
external/bsd/pkg_install/dist/delete/main.c: removed
external/bsd/pkg_install/dist/delete/perform.c: removed
external/bsd/pkg_install/dist/lib/ftpio.c: removed
external/bsd/pkg_install/dist/lib/path.c: removed
external/bsd/pkg_install/dist/lib/path.h: removed
external/bsd/pkg_install/dist/lib/pen.c: removed
external/bsd/pkg_install/dist/lib/pexec.c: removed
external/bsd/pkg_install/dist/view/linkfarm.1: removed
external/bsd/pkg_install/dist/view/linkfarm.sh.in: removed
external/bsd/pkg_install/dist/view/pkg_view.1: removed
external/bsd/pkg_install/dist/view/pkg_view.sh.in: removed
external/bsd/pkg_install/sbin/audit-packages/Makefile: removed
external/bsd/pkg_install/sbin/pkg_view/Makefile: removed
Merge pkg_install-20090528 from HEAD.
 1.200.2.4  10-May-2009  snj Pull up following revision(s) (requested by roy in ticket #534):
distrib/sets/lists/etc/mi: revision 1.209
Add an rc.d script for dhcpcd(8)
 1.200.2.3  06-Feb-2009  snj branches: 1.200.2.3.2;
Pull up following revision(s) (requested by apb in ticket #406):
distrib/sets/lists/etc/mi: revision 1.205
Add etc/rc.d/rndctl. "Hi, apb@!"
 1.200.2.2  22-Jan-2009  snj Pull up following revision(s) (requested by rafal in ticket #297):
distrib/sets/lists/etc/mi: revision 1.203
doc/CHANGES: revision 1.1151 via patch
etc/defaults/rc.conf: revision 1.97
etc/mtree/special: revision 1.123
etc/rc.d/Makefile: revision 1.71
etc/rc.d/httpd: revision 1.1
share/man/man5/rc.conf.5: revision 1.123
usr.sbin/postinstall/postinstall: revision 1.80
Import rc.d/httpd script for httpd(8) daemon control.
See rc.conf(5) for options explanation.
 1.200.2.1  06-Dec-2008  snj Pull up following revision(s) (requested by cube in ticket #168):
distrib/sets/lists/etc/mi: revision 1.202
distrib/sets/lists/xetc/mi: revision 1.11
Move etc/rc.d/x{dm,fs} into xetc.tgz.
 1.200.2.3.2.1  30-May-2009  snj branches: 1.200.2.3.2.1.2;
Pull up following revision(s) (requested by joerg in ticket #784):
distrib/sets/lists/base/mi: patch
distrib/sets/lists/etc/mi: patch
distrib/sets/lists/man/mi: patch
external/bsd/pkg_install/Makefile.inc: patch
external/bsd/pkg_install/prepare-import.sh: patch
external/bsd/pkg_install/dist/add/add.h: pkg_install-20090528
external/bsd/pkg_install/dist/add/main.c: pkg_install-20090528
external/bsd/pkg_install/dist/add/perform.c: pkg_install-20090528
external/bsd/pkg_install/dist/add/pkg_add.1: pkg_install-20090528
external/bsd/pkg_install/dist/admin/admin.h: pkg_install-20090528
external/bsd/pkg_install/dist/admin/audit.c: pkg_install-20090528
external/bsd/pkg_install/dist/admin/check.c: pkg_install-20090528
external/bsd/pkg_install/dist/admin/main.c: pkg_install-20090528
external/bsd/pkg_install/dist/admin/pkg_admin.1: pkg_install-20090528
external/bsd/pkg_install/dist/bpm/bpm.1: pkg_install-20090528
external/bsd/pkg_install/dist/create/build.c: pkg_install-20090528
external/bsd/pkg_install/dist/create/create.h: pkg_install-20090528
external/bsd/pkg_install/dist/create/main.c: pkg_install-20090528
external/bsd/pkg_install/dist/create/perform.c: pkg_install-20090528
external/bsd/pkg_install/dist/create/pkg_create.1: pkg_install-20090528
external/bsd/pkg_install/dist/create/pl.c: pkg_install-20090528
external/bsd/pkg_install/dist/create/util.c: pkg_install-20090528
external/bsd/pkg_install/dist/delete/pkg_delete.1: pkg_install-20090528
external/bsd/pkg_install/dist/info/info.h: pkg_install-20090528
external/bsd/pkg_install/dist/info/main.c: pkg_install-20090528
external/bsd/pkg_install/dist/info/perform.c: pkg_install-20090528
external/bsd/pkg_install/dist/info/pkg_info.1: pkg_install-20090528
external/bsd/pkg_install/dist/info/show.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/automatic.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/config.h.in: pkg_install-20090528
external/bsd/pkg_install/dist/lib/conflicts.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/decompress.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/dewey.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/fexec.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/file.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/global.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/iterate.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/lib.h: pkg_install-20090528
external/bsd/pkg_install/dist/lib/lpkg.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/opattern.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkg_io.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkg_summary.5: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkgdb.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/plist.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/str.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/var.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/version.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/version.h: pkg_install-20090528
external/bsd/pkg_install/dist/lib/vulnerabilities-file.c: pkg_install-20090528
external/bsd/pkg_install/dist/admin/audit-packages.sh.in: pkg_install-20090528
external/bsd/pkg_install/dist/admin/download-vulnerability-list.sh.in: pkg_install-20090528
external/bsd/pkg_install/dist/delete/pkg_delete.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/gpgsig.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/license.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/parse-config.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkcs7.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkg_install.conf.5.in: pkg_install-20090528
external/bsd/pkg_install/dist/lib/pkg_signature.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/remove.c: pkg_install-20090528
external/bsd/pkg_install/dist/lib/xwrapper.c: pkg_install-20090528
external/bsd/pkg_install/dist/x509/pkgsrc.cnf: pkg_install-20090528
external/bsd/pkg_install/dist/x509/pkgsrc.sh: pkg_install-20090528
external/bsd/pkg_install/dist/x509/signing.txt: pkg_install-20090528
external/bsd/pkg_install/lib/Makefile: patch
external/bsd/pkg_install/sbin/Makefile: patch
external/bsd/pkg_install/sbin/Makefile.inc: patch
external/bsd/pkg_install/sbin/pkg_add/Makefile: patch
external/bsd/pkg_install/sbin/pkg_admin/Makefile: patch
external/bsd/pkg_install/sbin/pkg_create/Makefile: patch
external/bsd/pkg_install/sbin/pkg_delete/Makefile: patch
external/bsd/pkg_install/sbin/pkg_info/Makefile: patch
external/bsd/pkg_install/dist/add/extract.c: removed
external/bsd/pkg_install/dist/add/futil.c: removed
external/bsd/pkg_install/dist/add/verify.c: removed
external/bsd/pkg_install/dist/add/verify.h: removed
external/bsd/pkg_install/dist/admin/config.c: removed
external/bsd/pkg_install/dist/audit-packages/AUTHORS: removed
external/bsd/pkg_install/dist/audit-packages/COPYING: removed
external/bsd/pkg_install/dist/audit-packages/README: removed
external/bsd/pkg_install/dist/audit-packages/audit-packages.1.in: removed
external/bsd/pkg_install/dist/audit-packages/audit-packages.c: removed
external/bsd/pkg_install/dist/audit-packages/audit-packages.conf.5.in: removed
external/bsd/pkg_install/dist/audit-packages/audit-packages.conf.in: removed
external/bsd/pkg_install/dist/audit-packages/download-vulnerability-list.1.in: removed
external/bsd/pkg_install/dist/audit-packages/download-vulnerability-list.sh.in: removed
external/bsd/pkg_install/dist/delete/delete.h: removed
external/bsd/pkg_install/dist/delete/main.c: removed
external/bsd/pkg_install/dist/delete/perform.c: removed
external/bsd/pkg_install/dist/lib/ftpio.c: removed
external/bsd/pkg_install/dist/lib/path.c: removed
external/bsd/pkg_install/dist/lib/path.h: removed
external/bsd/pkg_install/dist/lib/pen.c: removed
external/bsd/pkg_install/dist/lib/pexec.c: removed
external/bsd/pkg_install/dist/view/linkfarm.1: removed
external/bsd/pkg_install/dist/view/linkfarm.sh.in: removed
external/bsd/pkg_install/dist/view/pkg_view.1: removed
external/bsd/pkg_install/dist/view/pkg_view.sh.in: removed
external/bsd/pkg_install/sbin/audit-packages/Makefile: removed
external/bsd/pkg_install/sbin/pkg_view/Makefile: removed
Merge pkg_install-20090528 from HEAD.
 1.200.2.3.2.1.2.1  21-Apr-2010  matt sync to netbsd-5
 1.207.2.1  13-May-2009  jym Sync with HEAD.

Third (and last) commit. See http://mail-index.netbsd.org/source-changes/2009/05/13/msg221222.html
 1.218.2.2  05-Mar-2011  bouyer Sync with HEAD
 1.218.2.1  08-Feb-2011  bouyer Sync with HEAD
 1.225.2.2  22-May-2014  yamt sync with head.

for a reference, the tree before this commit was tagged
as yamt-pagecache-tag8.

this commit was splitted into small chunks to avoid
a limitation of cvs. ("Protocol error: too many arguments")
 1.225.2.1  17-Apr-2012  yamt sync with head
 1.228.6.3  19-Aug-2014  tls Rebase to HEAD as of a few days ago.
 1.228.6.2  23-Jun-2013  tls resync from head
 1.228.6.1  25-Feb-2013  tls resync with head
 1.232.4.3  06-Aug-2015  snj Pull up following revision(s) (requested by skrll in ticket #909):
distrib/sets/lists/etc/mi: revision 1.237
distrib/sets/lists/tests/mi: revision 1.613
distrib/utils/embedded/conf/armv7.conf: revisions 1.1, 1.2
distrib/utils/embedded/conf/beagleboard.conf: delete
distrib/utils/embedded/conf/evbarm.conf: revisions 1.21, 1.22
distrib/utils/embedded/conf/rpi.conf: revisions 1.28, 1.29
distrib/utils/embedded/conf/rpi_inst.conf: revisions 1.7, 1.8
distrib/utils/embedded/conf/usermode.conf: revision 1.5
distrib/utils/embedded/conf/x86.conf: revision 1.5
distrib/utils/embedded/files/resize_disklabel: revision 1.1
distrib/utils/embedded/mkimage: revisions 1.49, 1.55-1.59
etc/defaults/rc.conf: revision 1.133
etc/etc.evbarm/Makefile.inc: revisions 1.72, 1.76
etc/rc.d/Makefile: revision 1.93 via patch
etc/rc.d/resize_root: revisions 1.1-1.3
etc/rc.d/root: revision 1.5
sbin/resize_ffs/Makefile: revision 1.5
sbin/resize_ffs/resize_ffs.8: revisions 1.14-1.16
sbin/resize_ffs/resize_ffs.c: revisions 1.39-1.44
share/man/man5/rc.conf.5: revision 1.158, 1.159
tests/sbin/resize_ffs/Makefile: revision 1.4
tests/sbin/resize_ffs/common.sh: revision 1.14
tests/sbin/resize_ffs/t_check.sh: revision 1.1
tests/sbin/resize_ffs/t_grow.sh: revision 1.9
tests/sbin/resize_ffs/t_grow_swapped.sh: revision 1.3
tests/sbin/resize_ffs/t_shrink.sh: revision 1.8
tests/sbin/resize_ffs/t_shrink_swapped.sh: revision 1.2
fix image building:
- round up the total size of the disk image
- fix fdisk offset for netbsd ffs images
--
Make get_dev_size work on regular files too.
--
Use `!= -1' instead of `== 0' out of paranoia.
--
- Add -c to check to see if grow/shrink is required
- Divide by DEV_BSIZE when returning size of file.
- Update manpage
--
New sentence, new line. Sort option descriptions.
--
Add resize_root boot operation. If resize_root=YES in rc.conf then
the system attempts to resize the root file system to fill it's
partition prior to mounting read-write. Useful for things like AMI
file system images. May eventually be used by arm images after
coming up with similar solution for increasing the parition size.
--
- Add new tests for -c check flag in resize_ffs
--
Bump date for previous.
it's -> its
--
Handle case in grow() where last cylinder group is too small for ufs2.
Align with code in shrink().
--
factor out geometry calculation and use this also in CheckOnly mode.
be a bit more verbose in Verbose mode.
--
Add support for auto-growing the root partition. Enable it for rpi.img.
--
initialize resize before pulling in board config
--
add KEYWORD: interactive, honour resize_root_flags and
resize_root_postcmd rc vars
--
if the -p flag is specified, display a progress bar while growing the
file-system
--
show resize_ffs progress bar when resizing root partition
--
fix typo in previous; pass -y unconditionally to resize_ffs, not -p
--
Rename beagleboard.img to armv7.img. The new image includes the same
kernels as beagleboard.img plus support for Raspberry Pi 2, ODROID-C1,
Cubieboard2, Cubietruck, Hummingbird A31, and Banana Pi.
--
Properly spell X' name. From X(7):
The X.Org Foundation requests that the following names be
used when
referring to this software:
X
X Window System
X Version 11
X Window System, Version 11
X11
--
Add some documentation:
Tell what this does, and what it expects from conf files
--
Cleanup: make_filesystems is not used any longer, purge remains
--
More cleanup:
Instead of first overwriting the *_evbarm functions with own code,
and then calling them from the regular functions, directly put the
code into the regular functions.
No more functions from evbarm.conf are used now.
Some variables are still used!
--
define TOOL_MKUBOOTIMAGE for mkimage
--
fix mkubootimage
 1.232.4.2  30-Apr-2015  riz Pull up blacklistd(8), requested by christos in ticket #711:
crypto/external/bsd/openssh/dist/moduli-gen/Makefile up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli-gen.sh up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli.1024 up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli.1536 up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli.2048 up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli.3072 up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli.4096 up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli.6144 up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli.7680 up to 1.1.1.1
crypto/external/bsd/openssh/dist/moduli-gen/moduli.8192 up to 1.1.1.1
crypto/external/bsd/openssh/dist/bcrypt_pbkdf.c up to 1.2
crypto/external/bsd/openssh/dist/kexc25519.c up to 1.3
crypto/external/bsd/openssh/dist/smult_curve25519_ref.c up to 1.3
crypto/external/bsd/openssh/dist/bitmap.c up to 1.2 plus patch
crypto/external/bsd/openssh/dist/PROTOCOL.chacha20poly1305 up to 1.1.1.1
crypto/external/bsd/openssh/dist/PROTOCOL.key up to 1.1.1.1
crypto/external/bsd/openssh/dist/blf.h up to 1.1
crypto/external/bsd/openssh/dist/blocks.c up to 1.3
crypto/external/bsd/openssh/dist/blowfish.c up to 1.2
crypto/external/bsd/openssh/dist/chacha.c up to 1.3
crypto/external/bsd/openssh/dist/chacha.h up to 1.1.1.1
crypto/external/bsd/openssh/dist/cipher-aesctr.c up to 1.1.1.2
crypto/external/bsd/openssh/dist/cipher-aesctr.h up to 1.1.1.1
crypto/external/bsd/openssh/dist/cipher-chachapoly.c up to 1.3
crypto/external/bsd/openssh/dist/cipher-chachapoly.h up to 1.1.1.1
crypto/external/bsd/openssh/dist/crypto_api.h up to 1.1.1.1
crypto/external/bsd/openssh/dist/digest-libc.c up to 1.3
crypto/external/bsd/openssh/dist/digest-openssl.c up to 1.3
crypto/external/bsd/openssh/dist/digest.h up to 1.1.1.2
crypto/external/bsd/openssh/dist/ed25519.c up to 1.3
crypto/external/bsd/openssh/dist/fe25519.c up to 1.3
crypto/external/bsd/openssh/dist/fe25519.h up to 1.1.1.1
crypto/external/bsd/openssh/dist/ge25519.c up to 1.3
crypto/external/bsd/openssh/dist/ge25519.h up to 1.1.1.2
crypto/external/bsd/openssh/dist/ge25519_base.data up to 1.1.1.1
crypto/external/bsd/openssh/dist/hash.c up to 1.3
crypto/external/bsd/openssh/dist/hmac.c up to 1.3
crypto/external/bsd/openssh/dist/hmac.h up to 1.1.1.1
crypto/external/bsd/openssh/dist/kexc25519c.c up to 1.3
crypto/external/bsd/openssh/dist/kexc25519s.c up to 1.3
crypto/external/bsd/openssh/dist/poly1305.c up to 1.3
crypto/external/bsd/openssh/dist/poly1305.h up to 1.1.1.1
crypto/external/bsd/openssh/dist/rijndael.c up to 1.1.1.2
crypto/external/bsd/openssh/dist/rijndael.h up to 1.1.1.1
crypto/external/bsd/openssh/dist/sc25519.c up to 1.3
crypto/external/bsd/openssh/dist/sc25519.h up to 1.1.1.1
crypto/external/bsd/openssh/dist/ssh-ed25519.c up to 1.3
crypto/external/bsd/openssh/dist/sshbuf-getput-basic.c up to 1.3
crypto/external/bsd/openssh/dist/sshbuf-getput-crypto.c up to 1.3
crypto/external/bsd/openssh/dist/sshbuf-misc.c up to 1.3
crypto/external/bsd/openssh/dist/sshbuf.c up to 1.3
crypto/external/bsd/openssh/dist/sshbuf.h up to 1.4
crypto/external/bsd/openssh/dist/ssherr.c up to 1.3
crypto/external/bsd/openssh/dist/ssherr.h up to 1.1.1.2
crypto/external/bsd/openssh/dist/sshkey.c up to 1.3
crypto/external/bsd/openssh/dist/sshkey.h up to 1.1.1.2
crypto/external/bsd/openssh/dist/verify.c up to 1.3
crypto/external/bsd/openssh/dist/opacket.c up to 1.2
crypto/external/bsd/openssh/dist/umac128.c up to 1.1
crypto/external/bsd/openssh/dist/pfilter.c up to 1.2
crypto/external/bsd/openssh/dist/pfilter.h up to 1.1
crypto/external/bsd/openssh/dist/bitmap.h up to 1.2
crypto/external/bsd/openssh/dist/opacket.h up to 1.2
crypto/external/bsd/openssh/dist/ssh_api.c up to 1.2
crypto/external/bsd/openssh/dist/ssh_api.h up to 1.2
crypto/external/bsd/openssh/dist/auth2-jpake.c delete
crypto/external/bsd/openssh/dist/compress.c delete
crypto/external/bsd/openssh/dist/compress.h delete
crypto/external/bsd/openssh/dist/jpake.c delete
crypto/external/bsd/openssh/dist/jpake.h delete
crypto/external/bsd/openssh/dist/schnorr.c delete
crypto/external/bsd/openssh/dist/schnorr.h delete
crypto/external/bsd/openssh/dist/strtonum.c 1.1
crypto/external/bsd/openssh/Makefile.inc up to 1.8
crypto/external/bsd/openssh/bin/Makefile.inc up to 1.3
crypto/external/bsd/openssh/bin/ssh-keyscan/Makefile up to 1.2
crypto/external/bsd/openssh/bin/sshd/Makefile up to 1.12
crypto/external/bsd/openssh/dist/PROTOCOL up to 1.5
crypto/external/bsd/openssh/dist/PROTOCOL.krl up to 1.1.1.2
crypto/external/bsd/openssh/dist/addrmatch.c up to 1.8
crypto/external/bsd/openssh/dist/atomicio.c up to 1.6
crypto/external/bsd/openssh/dist/auth-bsdauth.c up to 1.4
crypto/external/bsd/openssh/dist/auth-chall.c up to 1.6
crypto/external/bsd/openssh/dist/auth-krb5.c up to 1.7
crypto/external/bsd/openssh/dist/auth-options.c up to 1.9
crypto/external/bsd/openssh/dist/auth-options.h up to 1.6
crypto/external/bsd/openssh/dist/auth-passwd.c up to 1.4
crypto/external/bsd/openssh/dist/auth-rh-rsa.c up to 1.6
crypto/external/bsd/openssh/dist/auth-rhosts.c up to 1.5
crypto/external/bsd/openssh/dist/auth-rsa.c up to 1.10
crypto/external/bsd/openssh/dist/auth.c up to 1.12
crypto/external/bsd/openssh/dist/auth.h up to 1.10
crypto/external/bsd/openssh/dist/auth1.c up to 1.11
crypto/external/bsd/openssh/dist/auth2-chall.c up to 1.7
crypto/external/bsd/openssh/dist/auth2-gss.c up to 1.8
crypto/external/bsd/openssh/dist/auth2-hostbased.c up to 1.7
crypto/external/bsd/openssh/dist/auth2-kbdint.c up to 1.5
crypto/external/bsd/openssh/dist/auth2-krb5.c up to 1.4
crypto/external/bsd/openssh/dist/auth2-none.c up to 1.5
crypto/external/bsd/openssh/dist/auth2-passwd.c up to 1.5
crypto/external/bsd/openssh/dist/auth2-pubkey.c up to 1.11
crypto/external/bsd/openssh/dist/auth2.c up to 1.11
crypto/external/bsd/openssh/dist/authfd.c up to 1.8
crypto/external/bsd/openssh/dist/authfd.h up to 1.5
crypto/external/bsd/openssh/dist/authfile.c up to 1.10
crypto/external/bsd/openssh/dist/authfile.h up to 1.6
crypto/external/bsd/openssh/dist/bufaux.c up to 1.7
crypto/external/bsd/openssh/dist/bufbn.c up to 1.5
crypto/external/bsd/openssh/dist/bufec.c up to 1.5
crypto/external/bsd/openssh/dist/buffer.c up to 1.6
crypto/external/bsd/openssh/dist/buffer.h up to 1.7
crypto/external/bsd/openssh/dist/canohost.c up to 1.8
crypto/external/bsd/openssh/dist/channels.c up to 1.13
crypto/external/bsd/openssh/dist/channels.h up to 1.10
crypto/external/bsd/openssh/dist/cipher-3des1.c up to 1.7
crypto/external/bsd/openssh/dist/cipher-bf1.c up to 1.6
crypto/external/bsd/openssh/dist/cipher.c up to 1.7
crypto/external/bsd/openssh/dist/cipher.h up to 1.7
crypto/external/bsd/openssh/dist/clientloop.c up to 1.13
crypto/external/bsd/openssh/dist/compat.c up to 1.9
crypto/external/bsd/openssh/dist/compat.h up to 1.6
crypto/external/bsd/openssh/dist/deattack.c up to 1.4
crypto/external/bsd/openssh/dist/deattack.h up to 1.4
crypto/external/bsd/openssh/dist/dh.c up to 1.8
crypto/external/bsd/openssh/dist/dh.h up to 1.4
crypto/external/bsd/openssh/dist/dispatch.c up to 1.5
crypto/external/bsd/openssh/dist/dispatch.h up to 1.4
crypto/external/bsd/openssh/dist/dns.c up to 1.11
crypto/external/bsd/openssh/dist/dns.h up to 1.6
crypto/external/bsd/openssh/dist/groupaccess.c up to 1.5
crypto/external/bsd/openssh/dist/gss-genr.c up to 1.7
crypto/external/bsd/openssh/dist/gss-serv-krb5.c up to 1.8
crypto/external/bsd/openssh/dist/gss-serv.c up to 1.7
crypto/external/bsd/openssh/dist/hostfile.c up to 1.7
crypto/external/bsd/openssh/dist/hostfile.h up to 1.7
crypto/external/bsd/openssh/dist/includes.h up to 1.4
crypto/external/bsd/openssh/dist/kex.c up to 1.10
crypto/external/bsd/openssh/dist/kex.h up to 1.9
crypto/external/bsd/openssh/dist/kexdh.c up to 1.4
crypto/external/bsd/openssh/dist/kexdhc.c up to 1.6
crypto/external/bsd/openssh/dist/kexdhs.c up to 1.8
crypto/external/bsd/openssh/dist/kexecdh.c up to 1.5
crypto/external/bsd/openssh/dist/kexecdhc.c up to 1.5
crypto/external/bsd/openssh/dist/kexecdhs.c up to 1.5
crypto/external/bsd/openssh/dist/kexgex.c up to 1.4
crypto/external/bsd/openssh/dist/kexgexc.c up to 1.6
crypto/external/bsd/openssh/dist/kexgexs.c up to 1.8
crypto/external/bsd/openssh/dist/key.c up to 1.16
crypto/external/bsd/openssh/dist/key.h up to 1.9
crypto/external/bsd/openssh/dist/krl.c up to 1.5
crypto/external/bsd/openssh/dist/krl.h up to 1.1.1.2
crypto/external/bsd/openssh/dist/mac.c up to 1.11
crypto/external/bsd/openssh/dist/mac.h up to 1.5
crypto/external/bsd/openssh/dist/match.c up to 1.5
crypto/external/bsd/openssh/dist/misc.c up to 1.10
crypto/external/bsd/openssh/dist/misc.h up to 1.9 plus patch
crypto/external/bsd/openssh/dist/moduli.c up to 1.8
crypto/external/bsd/openssh/dist/monitor.c up to 1.14
crypto/external/bsd/openssh/dist/monitor.h up to 1.7
crypto/external/bsd/openssh/dist/monitor_fdpass.c up to 1.5
crypto/external/bsd/openssh/dist/monitor_mm.c up to 1.6
crypto/external/bsd/openssh/dist/monitor_mm.h up to 1.4
crypto/external/bsd/openssh/dist/monitor_wrap.c up to 1.11
crypto/external/bsd/openssh/dist/monitor_wrap.h up to 1.8
crypto/external/bsd/openssh/dist/msg.c up to 1.4
crypto/external/bsd/openssh/dist/msg.h up to 1.4
crypto/external/bsd/openssh/dist/mux.c up to 1.11
crypto/external/bsd/openssh/dist/myproposal.h up to 1.10
crypto/external/bsd/openssh/dist/namespace.h up to 1.5
crypto/external/bsd/openssh/dist/packet.c up to 1.18
crypto/external/bsd/openssh/dist/packet.h up to 1.11
crypto/external/bsd/openssh/dist/pathnames.h up to 1.9
crypto/external/bsd/openssh/dist/pkcs11.h up to 1.4
crypto/external/bsd/openssh/dist/progressmeter.c up to 1.7
crypto/external/bsd/openssh/dist/progressmeter.h up to 1.4
crypto/external/bsd/openssh/dist/reallocarray.c new
crypto/external/bsd/openssh/dist/readconf.c up to 1.13
crypto/external/bsd/openssh/dist/readconf.h up to 1.12
crypto/external/bsd/openssh/dist/readpass.c up to 1.6
crypto/external/bsd/openssh/dist/roaming_client.c up to 1.7
crypto/external/bsd/openssh/dist/roaming_common.c up to 1.9
crypto/external/bsd/openssh/dist/roaming_dummy.c up to 1.4
crypto/external/bsd/openssh/dist/rsa.c up to 1.5
crypto/external/bsd/openssh/dist/rsa.h up to 1.4
crypto/external/bsd/openssh/dist/sandbox-systrace.c up to 1.1.1.5
crypto/external/bsd/openssh/dist/scp.1 up to 1.9
crypto/external/bsd/openssh/dist/scp.c up to 1.11
crypto/external/bsd/openssh/dist/servconf.c up to 1.17
crypto/external/bsd/openssh/dist/servconf.h up to 1.11
crypto/external/bsd/openssh/dist/serverloop.c up to 1.12
crypto/external/bsd/openssh/dist/session.c up to 1.14
crypto/external/bsd/openssh/dist/session.h up to 1.4
crypto/external/bsd/openssh/dist/sftp-client.c up to 1.13
crypto/external/bsd/openssh/dist/sftp-client.h up to 1.7
crypto/external/bsd/openssh/dist/sftp-common.c up to 1.7
crypto/external/bsd/openssh/dist/sftp-common.h up to 1.5
crypto/external/bsd/openssh/dist/sftp-glob.c up to 1.8
crypto/external/bsd/openssh/dist/sftp-server.8 up to 1.9
crypto/external/bsd/openssh/dist/sftp-server.c up to 1.11
crypto/external/bsd/openssh/dist/sftp.1 up to 1.11
crypto/external/bsd/openssh/dist/sftp.c up to 1.15
crypto/external/bsd/openssh/dist/ssh-add.1 up to 1.9
crypto/external/bsd/openssh/dist/ssh-add.c up to 1.10
crypto/external/bsd/openssh/dist/ssh-agent.1 up to 1.8
crypto/external/bsd/openssh/dist/ssh-agent.c up to 1.14
crypto/external/bsd/openssh/dist/ssh-dss.c up to 1.7
crypto/external/bsd/openssh/dist/ssh-ecdsa.c up to 1.6
crypto/external/bsd/openssh/dist/ssh-gss.h up to 1.5
crypto/external/bsd/openssh/dist/ssh-keygen.1 up to 1.13
crypto/external/bsd/openssh/dist/ssh-keygen.c up to 1.16
crypto/external/bsd/openssh/dist/ssh-keyscan.1 up to 1.10
crypto/external/bsd/openssh/dist/ssh-keyscan.c up to 1.13
crypto/external/bsd/openssh/dist/ssh-keysign.8 up to 1.9
crypto/external/bsd/openssh/dist/ssh-keysign.c up to 1.8
crypto/external/bsd/openssh/dist/ssh-pkcs11-client.c up to 1.6
crypto/external/bsd/openssh/dist/ssh-pkcs11-helper.c up to 1.8
crypto/external/bsd/openssh/dist/ssh-pkcs11.c up to 1.7
crypto/external/bsd/openssh/dist/ssh-pkcs11.h up to 1.4
crypto/external/bsd/openssh/dist/ssh-rsa.c up to 1.7
crypto/external/bsd/openssh/dist/ssh.1 up to 1.14
crypto/external/bsd/openssh/dist/ssh.c up to 1.16
crypto/external/bsd/openssh/dist/ssh2.h up to 1.6
crypto/external/bsd/openssh/dist/ssh_config up to 1.8
crypto/external/bsd/openssh/dist/ssh_config.5 up to 1.13
crypto/external/bsd/openssh/dist/sshconnect.c up to 1.11
crypto/external/bsd/openssh/dist/sshconnect.h up to 1.6
crypto/external/bsd/openssh/dist/sshconnect1.c up to 1.6
crypto/external/bsd/openssh/dist/sshconnect2.c up to 1.19
crypto/external/bsd/openssh/dist/sshd.8 up to 1.13
crypto/external/bsd/openssh/dist/sshd.c up to 1.18
crypto/external/bsd/openssh/dist/sshd_config up to 1.13
crypto/external/bsd/openssh/dist/sshd_config.5 up to 1.17
crypto/external/bsd/openssh/dist/sshlogin.c up to 1.6
crypto/external/bsd/openssh/dist/sshpty.c up to 1.4
crypto/external/bsd/openssh/dist/uidswap.c up to 1.4
crypto/external/bsd/openssh/dist/umac.c up to 1.9
crypto/external/bsd/openssh/dist/version.h up to 1.14
crypto/external/bsd/openssh/dist/xmalloc.c up to 1.5
crypto/external/bsd/openssh/lib/Makefile up to 1.17 plus patch
crypto/external/bsd/openssh/lib/shlib_version up to 1.13
distrib/sets/lists/base/ad.aarch64 patch
distrib/sets/lists/base/ad.arm patch
distrib/sets/lists/base/ad.mips patch
distrib/sets/lists/base/ad.powerpc patch
distrib/sets/lists/base/md.amd64 patch
distrib/sets/lists/base/md.sparc64 patch
distrib/sets/lists/base/mi patch
distrib/sets/lists/base/shl.mi patch
distrib/sets/lists/comp/ad.aarch64 patch
distrib/sets/lists/comp/ad.arm patch
distrib/sets/lists/comp/ad.mips patch
distrib/sets/lists/comp/ad.powerpc patch
distrib/sets/lists/comp/md.amd64 patch
distrib/sets/lists/comp/md.sparc64 patch
distrib/sets/lists/comp/mi patch
distrib/sets/lists/comp/shl.mi patch
distrib/sets/lists/debug/ad.aarch64 patch
distrib/sets/lists/debug/ad.arm patch
distrib/sets/lists/debug/ad.mips patch
distrib/sets/lists/debug/ad.powerpc patch
distrib/sets/lists/debug/md.amd64 patch
distrib/sets/lists/debug/md.sparc64 patch
distrib/sets/lists/debug/shl.mi patch
distrib/sets/lists/etc/mi patch
distrib/sets/lists/man/mi patch
etc/defaults/rc.conf 1.130
etc/mtree/NetBSD.dist.base 1.142
external/bsd/Makefile up to 1.48
external/bsd/blacklist/bin/Makefile up to 1.11 plus patch
external/bsd/blacklist/bin/blacklistctl.8 up to 1.6
external/bsd/blacklist/bin/blacklistctl.c up to 1.17
external/bsd/blacklist/bin/blacklistd.8 up to 1.10
external/bsd/blacklist/bin/blacklistd.c up to 1.32
external/bsd/blacklist/bin/blacklistd.conf.5 up to 1.2
external/bsd/blacklist/bin/conf.c up to 1.18
external/bsd/blacklist/bin/conf.h up to 1.6
external/bsd/blacklist/bin/internal.c up to 1.5
external/bsd/blacklist/bin/internal.h up to 1.12
external/bsd/blacklist/bin/run.c up to 1.12
external/bsd/blacklist/bin/run.h up to 1.5
external/bsd/blacklist/bin/state.c up to 1.15
external/bsd/blacklist/bin/state.h up to 1.5
external/bsd/blacklist/bin/support.c up to 1.6
external/bsd/blacklist/bin/support.h up to 1.5
external/bsd/blacklist/etc/rc.d/Makefile up to 1.1
external/bsd/blacklist/etc/rc.d/blacklistd up to 1.1
external/bsd/blacklist/etc/Makefile up to 1.3
external/bsd/blacklist/etc/blacklistd.conf up to 1.3
external/bsd/blacklist/etc/npf.conf up to 1.1
external/bsd/blacklist/Makefile up to 1.2
external/bsd/blacklist/Makefile.inc up to 1.3
external/bsd/blacklist/README up to 1.7
external/bsd/blacklist/TODO up to 1.7
external/bsd/blacklist/diff/ftpd.diff up to 1.1
external/bsd/blacklist/diff/named.diff up to 1.6
external/bsd/blacklist/diff/ssh.diff up to 1.6
external/bsd/blacklist/include/Makefile up to 1.1
external/bsd/blacklist/include/bl.h up to 1.12
external/bsd/blacklist/include/blacklist.h up to 1.3
external/bsd/blacklist/include/config.h new
external/bsd/blacklist/lib/Makefile up to 1.3
external/bsd/blacklist/lib/bl.c up to 1.24
external/bsd/blacklist/lib/blacklist.c up to 1.5
external/bsd/blacklist/lib/libblacklist.3 up to 1.3
external/bsd/blacklist/lib/shlib_version up to 1.1
external/bsd/blacklist/libexec/Makefile up to 1.1
external/bsd/blacklist/libexec/blacklistd-helper up to 1.4
external/bsd/blacklist/port/m4/.cvsignore up to 1.1
external/bsd/blacklist/port/Makefile.am up to 1.4
external/bsd/blacklist/port/_strtoi.h up to 1.1
external/bsd/blacklist/port/clock_gettime.c up to 1.2
external/bsd/blacklist/port/configure.ac up to 1.7
external/bsd/blacklist/port/fgetln.c up to 1.1
external/bsd/blacklist/port/fparseln.c up to 1.1
external/bsd/blacklist/port/getprogname.c up to 1.4
external/bsd/blacklist/port/pidfile.c up to 1.1
external/bsd/blacklist/port/popenve.c up to 1.2
external/bsd/blacklist/port/port.h up to 1.6
external/bsd/blacklist/port/sockaddr_snprintf.c up to 1.9
external/bsd/blacklist/port/strlcat.c up to 1.2
external/bsd/blacklist/port/strlcpy.c up to 1.2
external/bsd/blacklist/port/strtoi.c up to 1.3
external/bsd/blacklist/test/Makefile up to 1.2
external/bsd/blacklist/test/cltest.c up to 1.6
external/bsd/blacklist/test/srvtest.c up to 1.9
lib/libpam/modules/pam_ssh/pam_ssh.c up to 1.23
libexec/ftpd/pfilter.c up to 1.1
libexec/ftpd/pfilter.h up to 1.1
libexec/ftpd/Makefile up to 1.64
libexec/ftpd/ftpd.c up to 1.201

Add blacklistd(8), a daemon to block and release network ports
on demand to mitigate abuse, and related changes to system daemons
to support it.
[christos, ticket #711]
 1.232.4.1  26-Mar-2015  martin Pull up following revision(s) (requested by jmcneill in ticket #635):
etc/rc.d/Makefile: revision 1.92
distrib/sets/lists/man/mi: revision 1.1497
share/man/man5/Makefile: revision 1.71
etc/defaults/rc.conf: revision 1.132
etc/rc.d/modules: revision 1.1
usr.sbin/postinstall/postinstall: revision 1.190
distrib/sets/lists/etc/mi: revision 1.236
etc/mtree/special: revision 1.152
share/man/man5/modules.conf.5: revision 1.1
Process /etc/modules.conf (if present) at startup, before securelevel is
raised, to allow module loading on ports without a module aware bootloader.
 1.239.2.2  20-Mar-2017  pgoyette Sync with HEAD
 1.239.2.1  07-Jan-2017  pgoyette Sync with HEAD. (Note that most of these changes are simply $NetBSD$
tag issues.)
 1.245.2.1  21-Apr-2017  bouyer Sync with HEAD
 1.247.2.1  14-May-2019  martin Pull up following revision(s) (requested by maxv in ticket #1265):
etc/rc.d/smtoff: revision 1.1
etc/rc.d/smtoff: revision 1.2
distrib/sets/lists/etc/mi: revision 1.258
etc/rc.d/smtoff: revision 1.3
etc/rc.d/smtoff: revision 1.4
etc/defaults/rc.conf: revision 1.148
etc/rc.d/Makefile: revision 1.103
usr.sbin/postinstall/postinstall: revision 1.226
etc/rc.d/Makefile: revision 1.104
etc/mtree/special: revision 1.167
share/man/man5/rc.conf.5: revision 1.180

Add smtoff, an rc.d script that disables Simultaneous Multi-Threading. It
parses the output of cpuctl, and executes "cpuctl offline" for each CPU
that has SmtID!=0.

The default is "smtoff=NO", which means that SMT remains enabled.
Restructure code a little.

Use quoting everywhere possibly useful (always the right way, except
in the few cases where it is wrong...)

Avoid using cut & grep (from /usr/bin) so script could run before /usr
is mounted (pity cpuctl is in /usr/sbin ...).

Use sysctl -n rather than attempting to parse its output.
install rc.d

No change... Previous log message should have said:
Install rc.d/smtoff

I should know better! Don't rely upon the way the shell implements
pipes. Skip the "error" printf from GetSmtId() as there is no easy
portable way to avoid it occurring (there are complicated ways) - but
we don't need it, there is no logical difference between "error" and ""
so just use the latter (if we get an ID, good, if there is nothing, then
there is none - saying 'error' does not mean anything.)

Remove comment, since there is no parsing anymore.
 1.251.4.2  13-Apr-2020  martin Mostly merge changes from HEAD upto 20200411
 1.251.4.1  10-Jun-2019  christos Sync with HEAD
 1.251.2.3  18-Jan-2019  pgoyette Synch with HEAD
 1.251.2.2  30-Sep-2018  pgoyette Ssync with HEAD
 1.251.2.1  28-Jul-2018  pgoyette Sync with HEAD
 1.258.2.1  27-Sep-2019  martin Pull up following revision(s) (requested by brad in ticket #250):

external/cddl/osnet/sbin/zfs/mount_zfs.8: revision 1.2
external/cddl/osnet/sbin/zfs/mount_zfs.8: revision 1.3
external/cddl/osnet/sbin/zfs/mount_zfs.8: revision 1.4
external/cddl/osnet/sbin/zfs/mount_zfs.8: revision 1.5
distrib/sets/lists/man/mi: revision 1.1652
distrib/sets/lists/man/mi: revision 1.1653
distrib/sets/lists/etc/mi: revision 1.259
etc/rc.d/mountall: revision 1.11
external/cddl/osnet/sbin/zfs/Makefile: revision 1.5
external/cddl/osnet/dist/cmd/zfs/zfs_main.c: revision 1.7
etc/rc.d/Makefile: revision 1.105
distrib/sets/lists/base/mi: revision 1.1217
etc/rc.d/Makefile: revision 1.106
etc/rc.d/zfs: revision 1.1
etc/defaults/rc.conf: revision 1.152
external/cddl/osnet/sbin/zfs/mount_zfs.8: revision 1.1

Add support for legacy ZFS filesystems, specified by mountpoint=legacy
in the ZFS properties of the dataset and a simple man page for
mount_zfs. With this, it is possible to put ZFS filesystems in
/etc/fstab as file system type zfs.

Add a rc.d script that kicks the module ZFS load mostly before
mountall runs simular to what LVM does. This allows for any legacy
mounts to be specified in critical_local_filesystems and allows for
ZFS pools on top of cgd (probably among other things). Introduce a
rc.conf variable called zfs which needs to be set to YES, in the usual
manor of things, to get zvols and ZFS dataset support rather then just
assume that 'zfs mount' does that in mountall. Fix a problem in
mountall if ZFS is not compiled into the system.
mount_zfs.8: add xref to fstab(5)

Use more markup.

Include mount_zfs man pages only for MKZFS builds.

Moved zfs out of MKX11 block.

Fix build failure without X11.

Add a copyright to the man page and a bit of history.
Use Pa macro for path
new sentence, new line
 1.263.2.1  03-Apr-2021  thorpej Sync with HEAD.
 1.270.2.2  02-Oct-2023  martin Pull up following revision(s) (requested by riastradh in ticket #381):

distrib/utils/embedded/conf/evbarm.conf: revision 1.42
distrib/sets/lists/etc/mi: revision 1.273
etc/rc.d/Makefile: revision 1.118
distrib/utils/embedded/conf/usermode.conf: revision 1.7
etc/rc.d/certctl_init: revision 1.1
distrib/evbarm/liveimage/armimage/rc.conf.armimage: revision 1.2
etc/defaults/rc.conf: revision 1.166
distrib/amd64/liveimage/emuimage/rc.conf.emuimage: revision 1.3
distrib/utils/embedded/conf/x86.conf: revision 1.11
distrib/utils/embedded/conf/evbmips.conf: revision 1.4

/etc/rc.d/cerctl_init: New script for certctl rehash in live images.

This is very limited -- it does not supplant postinstall to rehash
certificates on upgrade; it only runs certctl rehash if
/etc/openssl/certs is an empty directory, as you get in live images
not created with sysinst.

We could also have a more general-purpose way to run postinstall(8)
on first boot of an image, but that has a lot more moving parts to
think about, so let's start with this limited-scope low-risk
approach.

PR install/57629

/etc/rc.d/certctl_init: Default off.
Otherwise in systems without certctl_init=YES, such as systems
installed with sysinst(8) where it's unnecessary because the rehash
has already happened at install time, you'll get spurious warnings.
 1.270.2.1  04-Sep-2023  martin Pull up following revision(s) (requested by riastradh in ticket #343):

external/mpl/mozilla-certdata/dist/certdata.txt: revision 1.1.1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_Assured_ID_Root_G3.pem: revision 1.1
distrib/sets/lists/man/mi: revision 1.1764
external/mpl/mozilla-certdata/share/certs/ACCVRAIZ1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/TUBITAK_Kamu_SM_SSL_Kok_Sertifikasi_-_Surum_1.pem: revision 1.1
tests/usr.sbin/certctl/certs4/DigiCert_Global_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Sectigo_Public_Server_Authentication_Root_R46.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GlobalSign_Secure_Mail_Root_E45.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SSL.com_Root_Certification_Authority_ECC.pem: revision 1.1
tests/usr.sbin/certctl/certs3/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.1.pem: revision 1.1
tests/usr.sbin/certctl/certs2/GTS_Root_R1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/BJCA_Global_Root_CA1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Izenpe.com.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Amazon_Root_CA_2.pem: revision 1.1
tests/usr.sbin/certctl/certs4/Makefile: revision 1.1
external/mpl/mozilla-certdata/share/certs/Global_Chambersign_Root_-_2008.pem: revision 1.1
distrib/sets/lists/etc/mi: revision 1.272
external/mpl/mozilla-certdata/share/certs/ISRG_Root_X1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/TunTrust_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/D-TRUST_BR_Root_CA_1_2020.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SSL.com_Root_Certification_Authority_RSA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Certum_EC-384_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Security_Communication_RootCA3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/IdenTrust_Public_Sector_Root_CA_1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority_-_EC1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_Global_Root_G2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GlobalSign_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SZAFIR_ROOT_CA2.pem: revision 1.1
tests/usr.sbin/certctl/t_certctl.sh: revision 1.1
external/mpl/mozilla-certdata/share/certs/UCA_Global_G2_Root.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/HARICA_Client_ECC_Root_CA_2021.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/COMODO_ECC_Certification_Authority.pem: revision 1.1
tests/usr.sbin/certctl/t_certctl.sh: revision 1.2
tests/usr.sbin/certctl/certs1/DigiCert_Global_Root_CA.pem: revision 1.1
tests/usr.sbin/certctl/t_certctl.sh: revision 1.3
external/mpl/mozilla-certdata/Makefile: revision 1.1
external/mpl/mozilla-certdata/share/certs/DIGITALSIGN_GLOBAL_ROOT_RSA_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GTS_Root_R2.pem: revision 1.1
usr.sbin/certctl/certctl.sh: revision 1.1
tests/usr.sbin/certctl/t_certctl.sh: revision 1.4
external/mpl/mozilla-certdata/share/certs/Verisign_Class_1_Public_Primary_Certification_Authority_-_G3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SwissSign_Silver_CA_-_G2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Starfield_Class_2_CA.pem: revision 1.1
usr.sbin/certctl/certctl.sh: revision 1.2
tests/usr.sbin/certctl/t_certctl.sh: revision 1.5
usr.sbin/certctl/certctl.sh: revision 1.3
tests/usr.sbin/certctl/t_certctl.sh: revision 1.6
usr.sbin/certctl/certctl.sh: revision 1.4
tests/usr.sbin/certctl/t_certctl.sh: revision 1.7
external/mpl/mozilla-certdata/share/certs/Hellenic_Academic_and_Research_Institutions_RootCA_2015.pem: revision 1.1
tests/usr.sbin/certctl/t_certctl.sh: revision 1.8
external/mpl/mozilla-certdata/share/certs/Sectigo_Public_Server_Authentication_Root_E46.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Hongkong_Post_Root_CA_3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority_-_G4.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Security_Communication_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Go_Daddy_Root_Certificate_Authority_-_G2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/ANF_Secure_Server_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Symantec_Class_1_Public_Primary_Certification_Authority_-_G6.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Chambers_of_Commerce_Root_-_2008.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Go_Daddy_Class_2_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/USERTrust_RSA_Certification_Authority.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P384_Certification_Authority.pem: revision 1.1
external/mpl/mozilla-certdata/share/certdata.awk: revision 1.1
external/mpl/mozilla-certdata/share/certs/HARICA_TLS_ECC_Root_CA_2021.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Atos_TrustedRoot_Root_CA_ECC_G2_2020.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Sectigo_Public_Email_Protection_Root_R46.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/TrustCor_ECA-1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GlobalSign_ECC_Root_CA_-_R5.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SSL.com_TLS_ECC_Root_CA_2022.pem: revision 1.1
usr.sbin/Makefile: revision 1.292
external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/CA_Disig_Root_R2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/emSign_Root_CA_-_C1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GlobalSign_Root_CA_-_R6.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_Trusted_Root_G4.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Atos_TrustedRoot_Root_CA_RSA_G2_2020.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/vTrus_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/T-TeleSec_GlobalRoot_Class_2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GlobalSign_Root_R46.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/TrustCor_RootCert_CA-2.pem: revision 1.1
etc/mtree/special: revision 1.176
external/mpl/mozilla-certdata/share/certs/USERTrust_ECC_Certification_Authority.pem: revision 1.1
etc/mtree/special: revision 1.177
etc/mtree/special: revision 1.178
external/mpl/mozilla-certdata/share/certs/AffirmTrust_Premium_ECC.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/vTrus_ECC_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_TLS_ECC_P384_Root_G5.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/NAVER_Global_Root_Certification_Authority.pem: revision 1.1
external/mpl/mozilla-certdata/share/server.trust: revision 1.1
external/mpl/mozilla-certdata/share/certs/SecureTrust_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/code.trust: revision 1.1
external/mpl/mozilla-certdata/share/certs/SSL.com_TLS_RSA_Root_CA_2022.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Amazon_Root_CA_4.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_TLS_RSA4096_Root_G5.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_Assured_ID_Root_G2.pem: revision 1.1
tests/usr.sbin/certctl/certs1/Makefile: revision 1.1
external/mpl/mozilla-certdata/share/certs/Sectigo_Public_Email_Protection_Root_E46.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/TWCA_Global_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_SMIME_RSA4096_Root_G5.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SSL.com_Client_ECC_Root_CA_2022.pem: revision 1.1
share/man/man7/hier.7: revision 1.141
external/mpl/mozilla-certdata/share/certs/Certigna.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/certSIGN_Root_CA_G2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Certigna_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Amazon_Root_CA_1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Entrust.net_Premium_2048_Secure_Server_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GTS_Root_R4.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/T-TeleSec_GlobalRoot_Class_3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Telia_Root_CA_v2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/QuoVadis_Root_CA_3_G3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/emSign_ECC_Root_CA_-_G3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Security_Communication_RootCA2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/TWCA_Root_Certification_Authority.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Buypass_Class_2_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/emSign_ECC_Root_CA_-_C3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SSL.com_EV_Root_Certification_Authority_RSA_R2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GTS_Root_R1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SSL.com_Client_RSA_Root_CA_2022.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_Assured_ID_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/HiPKI_Root_CA_-_G1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Starfield_Root_Certificate_Authority_-_G2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SwissSign_Gold_CA_-_G2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/OISTE_WISeKey_Global_Root_GB_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/AffirmTrust_Networking.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.1.pem: revision 1.1
tests/usr.sbin/certctl/Makefile.inc: revision 1.1
external/mpl/mozilla-certdata/share/certs/COMODO_RSA_Certification_Authority.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Certum_Trusted_Network_CA_2.pem: revision 1.1
tests/usr.sbin/certctl/certs2/GlobalSign_Root_CA_-_R3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/OISTE_WISeKey_Global_Root_GC_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/D-TRUST_Root_Class_3_CA_2_EV_2009.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/AffirmTrust_Commercial.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Buypass_Class_3_Root_CA.pem: revision 1.1
distrib/sets/lists/tests/mi: revision 1.1292
external/mpl/mozilla-certdata/share/certs/UCA_Extended_Validation_Root.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Trustwave_Global_ECC_P256_Certification_Authority.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Certum_Trusted_Network_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/QuoVadis_Root_CA_2.pem: revision 1.1
external/mpl/mozilla-certdata/share/email.trust: revision 1.1
external/mpl/mozilla-certdata/share/certs/Atos_TrustedRoot_2011.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Certum_Trusted_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/D-TRUST_EV_Root_CA_1_2020.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/ePKI_Root_Certification_Authority.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DIGITALSIGN_GLOBAL_ROOT_ECDSA_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GlobalSign_ECC_Root_CA_-_R4.pem: revision 1.1
tests/usr.sbin/certctl/certs2/Makefile: revision 1.1
tests/usr.sbin/Makefile: revision 1.8
external/mpl/mozilla-certdata/share/certs/Trustwave_Global_Certification_Authority.pem: revision 1.1
tests/usr.sbin/certctl/Makefile: revision 1.1
external/mpl/mozilla-certdata/share/certs/Verisign_Class_2_Public_Primary_Certification_Authority_-_G3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/IdenTrust_Commercial_Root_CA_1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_SMIME_ECC_P384_Root_G5.pem: revision 1.1
tests/usr.sbin/certctl/certs1/Explicitly_Distrust_DigiNotar_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/TrustCor_RootCert_CA-1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Staat_der_Nederlanden_Root_CA_-_G3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Symantec_Class_2_Public_Primary_Certification_Authority_-_G6.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/QuoVadis_Root_CA_3.pem: revision 1.1
external/mpl/mozilla-certdata/share/Makefile: revision 1.1
external/mpl/mozilla-certdata/share/Makefile: revision 1.2
external/mpl/mozilla-certdata/share/certs/Microsec_e-Szigno_Root_CA_2009.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/BJCA_Global_Root_CA2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/HARICA_Client_RSA_Root_CA_2021.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GDCA_TrustAUTH_R5_ROOT.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Amazon_Root_CA_3.pem: revision 1.1
tests/usr.sbin/certctl/certs4/AC_RAIZ_FNMT-RCM.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/ISRG_Root_X2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_Global_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/D-TRUST_Root_CA_3_2013.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Microsoft_RSA_Root_Certificate_Authority_2017.pem: revision 1.1
etc/mtree/NetBSD.dist.base: revision 1.252
external/mpl/mozilla-certdata/share/certs/CFCA_EV_ROOT.pem: revision 1.1
etc/mtree/NetBSD.dist.base: revision 1.253
external/mpl/mozilla-certdata/share/certs/Starfield_Services_Root_Certificate_Authority_-_G2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_Global_Root_G3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/emSign_Root_CA_-_G1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Microsoft_ECC_Root_Certificate_Authority_2017.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Explicitly_Distrust_DigiNotar_Root_CA.pem: revision 1.1
usr.sbin/certctl/Makefile: revision 1.1
external/mpl/mozilla-certdata/share/certs/Security_Communication_ECC_RootCA1.pem: revision 1.1
usr.sbin/certctl/Makefile: revision 1.2
usr.sbin/certctl/Makefile: revision 1.3
external/mpl/mozilla-certdata/share/certs/GTS_Root_R3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/AC_RAIZ_FNMT-RCM_SERVIDORES_SEGUROS.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/e-Szigno_Root_CA_2017.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/certSIGN_ROOT_CA.pem: revision 1.1
doc/3RDPARTY: revision 1.1949
external/mpl/mozilla-certdata/share/certs/Certainly_Root_R1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/TeliaSonera_Root_CA_v1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/HARICA_TLS_RSA_Root_CA_2021.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/NetLock_Arany_Class_Gold.pem: revision 1.1
usr.sbin/postinstall/postinstall.in: revision 1.53
usr.sbin/postinstall/postinstall.in: revision 1.54
tests/usr.sbin/certctl/certs3/Autoridad_de_Certificacion_Firmaprofesional_CIF_A62634068.pem: revision 1.1
etc/Makefile: revision 1.467
usr.sbin/postinstall/postinstall.in: revision 1.55
tests/usr.sbin/certctl/certs3/Makefile: revision 1.1
external/mpl/mozilla-certdata/share/certs/GLOBALTRUST_2020.pem: revision 1.1
etc/mtree/NetBSD.dist.tests: revision 1.200
external/mpl/mozilla-certdata/share/certs/QuoVadis_Root_CA_1_G3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GlobalSign_Root_CA_-_R3.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Actalis_Authentication_Root_CA.pem: revision 1.1
distrib/sets/lists/base/mi: revision 1.1326
distrib/sets/lists/base/mi: revision 1.1327
external/mpl/mozilla-certdata/share/certs/SecureSign_RootCA11.pem: revision 1.1
distrib/sets/lists/base/mi: revision 1.1328
external/mpl/mozilla-certdata/share/certs/Comodo_AAA_Services_root.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Entrust_Root_Certification_Authority_-_G2.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/QuoVadis_Root_CA_2_G3.pem: revision 1.1
distrib/sets/lists/base/mi: revision 1.1329
external/mpl/mozilla-certdata/share/certs/COMODO_Certification_Authority.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Certum_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/DigiCert_High_Assurance_EV_Root_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GlobalSign_Secure_Mail_Root_R45.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Secure_Global_CA.pem: revision 1.1
usr.sbin/certctl/certctl.8: revision 1.1
external/mpl/mozilla-certdata/share/certs/XRamp_Global_CA_Root.pem: revision 1.1
external/mpl/Makefile: revision 1.5
usr.sbin/certctl/certctl.8: revision 1.2
external/mpl/mozilla-certdata/share/certs/D-TRUST_Root_Class_3_CA_2_2009.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Baltimore_CyberTrust_Root.pem: revision 1.1
usr.sbin/certctl/certs.conf: revision 1.1
external/mpl/mozilla-certdata/share/certs/LAWtrust_Root_CA2_4096.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/AC_RAIZ_FNMT-RCM.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Atos_TrustedRoot_Root_CA_ECC_TLS_2021.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/OISTE_WISeKey_Global_Root_GA_CA.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Certainly_Root_E1.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/GlobalSign_Root_E46.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/Atos_TrustedRoot_Root_CA_RSA_TLS_2021.pem: revision 1.1
external/mpl/mozilla-certdata/share/certs/SSL.com_EV_Root_Certification_Authority_ECC.pem: revision 1.1

certctl(8): New tool for managing OpenSSL CA certificates.
Same command-line syntax as FreeBSD, clearer semantics about which
parts are config and which parts are cache.

mozilla-certdata: Record in doc/3RDPARTY.

mozilla-certdata: Makefile infrastructure.

mozilla-certdata: regen
(actually, just `gen', this first time)

mozilla-certdata: Connect it up to the build.

postinstall(8): Add opensslcerts item to regen /etc/openssl/certs.

Works only with destdir /, since it relies on running openssl(1),
which is not available as a tool or required in the cross-build
environment.

certctl(8): Add xfail test for missing certs.conf.

Command should fail, i.e., exit with nonzero status, but it exits
with zero instead.
certctl(8): Exit nonzero on missing certs.conf.
certctl(8): Test prepopulated /etc/openssl/certs.

This is the scenario when you have previously populated
/etc/openssl/certs manually, or with a package like mozilla-rootcerts
or mozilla-rootcerts-openssl, and you update to a version of NetBSD
with certctl(8). In this case, certctl(8) should avoid destroying
your work.

While here, also test some related but less likely edge cases:
- nonexistent
- symlink
- regular file

certctl(8): Avoid clobbering prepopulated /etc/openssl/certs.

Also avoid clobbering some other edge cases like symlinks or
non-directories there.

This way, we have the following transitions on system updates:
- If /etc/openssl/certs is empty (as in default NetBSD<10 installs):
quietly populated on rehash.
- If /etc/openssl/certs is nonempty (you've added things to it,
e.g. by hand or with mozilla-rootcerts) and has never been managed
by certctl(8): left alone on rehash, with an error message to
explain what you need to do.
- If /etc/openssl/certs has been managed by certctl(8): quietly
updated on rehash.

Note: This means current installations made since certctl(8) was
added will be treated like /etc/openssl/certs is nonempty and has
never been managed by certctl(8). To work around this, you can just
delete /etc/openssl/certs and rerun `certctl rehash'.
postinstall(8): Fail if `certctl rehash' fails.

Not using `set -e' here, evidently (maybe we should), so the separate
return 0 suppressed the error.
distrib/sets/lists: certs.conf belongs in etc, not in base.
Oops.

certctl(8): Set certs.conf 644 and add it to etc/mtree/special.
Now that we have /etc/openssl/certs.conf mentioned here, also
list /etc/openssl.

hier(7): Document /etc/openssl.

certctl(8): Minor man page clarifications.
- Specify exactly what /etc/openssl/certs gets populated with.
- Change HTTPS to TLS.
- Specify the permitted character class in certs.conf.
(Maybe more conservative than strictly needed; but let's stay on
the safe side.)

certctl(8): Fix some bugs with evil pathnames.

certctl(8): Fix quoting and whitespace style in evilpath test.

No functional change intended.

etc/mtree/special: Fix spaces/tabs.
No functional change intended.

mozilla-certdata: Install relative symlinks.
Slightly more compact this way, and you can examine them in a destdir
without chrooting. Not terribly important, but a minor convenience.

certctl(8): Test more evil pathnames.

certctl(8): Install certs.conf in /usr/share/examples too.
This way postinstall(8) can refer to the default one when you've done
an upgrade without etcupdate or similar to pull in new config files
from etc.tgz.

Not great -- we should do this systematically for all config files in
/etc, but this one-off hack is less risky for 10.
postinstall(8): Handle various certs.conf scenarios gracefully.

Tested the following scenarios:
1. fresh install
empty /etc/openssl/certs
default /etc/openssl/certs.conf
- opensslcertsconf
[x] check: pass
[x] fix: pass -- nothing
- opensslcertsrehash
[x] check: fail -- needs rehash
[x] fix: pass -- quietly rehash successfully (go to 4)
2. fresh upgrade
empty /etc/openssl/certs
no /etc/openssl/certs.conf
- opensslcertsconf
[x] check: fail -- complain missing /etc/openssl/certs.conf
[x] fix: pass -- install default /etc/openssl/certs.conf (go to 1)
- opensslcertsrehash
[x] check: fail -- complain missing /etc/openssl/certs.conf
- [x] fix: fail -- complain missing /etc/openssl/certs.conf
3. upgrade from certctl, changes to certs
certctl-managed /etc/openssl/certs
default /etc/openssl/certs.conf
- opensslcertsconf
[x] check: pass
[x] fix: pass -- nothing
- opensslcertsrehash
[x] check: fail -- needs rehash
[x] fix: pass -- quietly rehash successfully (go to 4)
4. upgrade from certctl, no changes to certs
certctl-managed /etc/openssl/certs
default /etc/openssl/certs.conf
- opensslcertsconf
[x] check: pass
[x] fix: pass -- nothing
- opensslcertsrehash
[x] check: pass
[x] fix: pass -- quietly rehash successfully (go to 4)
5. upgrade from mozilla-rootcerts
populated /etc/openssl/certs
no /etc/openssl/certs.conf
- opensslcertsconf:
[x] check: fail -- complain missing /etc/openssl/certs.conf
[x] fix: pass -- install manual /etc/openssl/certs.conf (go to 7)
- opensslcertsrehash:
[x] check: fail -- complain missing /etc/openssl/certs.conf
[x] fix: fail -- complain missing /etc/openssl/certs.conf
6. upgrade from mozilla-rootcerts with etcupdate naively
populated /etc/openssl/certs
default /etc/openssl/certs.conf
- opensslcertsconf:
[x] check: pass
[x] fix: pass -- nothing
- opensslcertsrehash:
[x] check: fail -- complain mismatched certs/ and certs.conf
[x] fix: fail -- complain mismatched certs/ and certs.conf
7. upgrade from mozilla-rootcerts with etcupdate manually
populated /etc/openssl/certs
manual /etc/openssl/certs.conf
- opensslcertsconf:
[x] check: pass
[x] fix: pass -- nothing
- opensslcertsrehash:
[x] check: pass
[x] fix: pass -- skip rehash because manual (go to 7)

XXX Someone should draft automatic tests for postinstall. It has a
very good track record, but it sure would be nice to automate this
testing rather than redo it each time I make a tiny change.
 1.275.2.1  02-Aug-2025  perseant Sync with HEAD
 1.276.2.1  03-Jul-2026  martin Pull up following revision(s) (requested by riastradh in ticket #360):

share/man/man8/afterboot.8: revision 1.84
etc/unbound/unbound.conf: revision 1.1
share/man/man5/rc.conf.5: revision 1.195
distrib/sets/lists/etc/mi: revision 1.278
etc/defaults/rc.conf: revision 1.168
etc/unbound/Makefile: revision 1.1
external/bsd/unbound/etc/rc.d/unbound: revision 1.3
etc/Makefile: revision 1.477

unbound: Install a default configuration.

This way, setting unbound=YES is enough to get a working local
recursive resolver listening on 127.0.0.1:53 and [::1]:53.

PR misc/60339: unbound=YES in rc.conf should be enough to get a
recursive resolver

Additionally, this includes the workaround for:
PR bin/60325: unbound emits warning: so-sndbuf 4194304 was not
granted

RSS XML Feed