Don't install /etc/rc.d/postfix when MKPOSTFIX=no

branches: 1.275.2;

Revert previous, we have no /etc/skel/.editrc (currently anyway).
This change looks to have been accidentally included in the big
sets reduction/division.

This should fix the builds.

Add new sets: base32, debug32, manhtml

- base32 contains (when MKCOMPAT=yes) shared libraries for 32-bit
compatibility, previously included in base

- debug32 contains (when MKCOMPAT=yes) debug symbols and static libraries
containing debug symbols for 32-bit compatiblity, previously included
in debug

- manhtml contains (when MKHTML=yes) the HTML files previously included
in 'man', which are of limited utility without third-party software.

The motivation for this change is to be able to easily exclude sets
from CD-ROM images that go over the size limit without xz compression
(which many NetBSD platforms struggle to extract at acceptable speeds).

/etc/rc.d/cerctl_init: New script for certctl rehash in live images.

This is very limited -- it does not supplant postinstall to rehash
certificates on upgrade; it only runs certctl rehash if
/etc/openssl/certs is an empty directory, as you get in live images
not created with sysinst.

We could also have a more general-purpose way to run postinstall(8)
on first boot of an image, but that has a lot more moving parts to
think about, so let's start with this limited-scope low-risk
approach.

PR install/57629

XXX pullup-10

distrib/sets/lists: certs.conf belongs in etc, not in base.

Oops.

Add start script to attach iscsi volumes at boot.

The default is to execute the script (iscsid_volumes=YES), so if you have
any volumes defined, you should also start iscsid (iscsid=YES) to avoid
error messages.

branches: 1.270.2;
build system: Revert all the recent additions of MK[...] knobs that
allow conditionally disabling the building of certain user space
programs in the 'base' set.

There is not enough consensus that this is the right way and a few
people had strong objections, see source-changes-d@.

mk: Add a MKPPP flag to exclude pppd(8) and related utilities from
the build

mk: Add MKNTP, MKTCPDUMP knobs.

mk: Rename the MKMBONE option to MKMROUTING for greater accuracy and
to match the related kernel config option.

mk: Allow building base without the MBONE applications by setting
MKMBONE=no in mk.conf

Rename etc/rc.d/llvmlockdir to lvmlockdir - it has nothing to do with LLVM,
the name probably was a freudian slip of my fingers when I split that
fragment out of another rc.d script.

Various entropy integration improvements.

- New /etc/security check for entropy in daily security report.

- New /etc/rc.d/entropy script runs (after random_seed and rndctl) to
check for entropy at boot -- in rc.conf, you can:

. set `entropy=check' to halt multiuser boot and enter single-user
mode if not enough entropy

. set `entropy=wait' to make multiuser boot wait until enough entropy

Default is to always boot without waiting -- and rely on other
channels like security report to alert the operator if there's a
problem.

- New man page entropy(7) discussing the higher-level concepts and
system integration with cross-references.

- New paragraph in afterboot(8) about entropy citing entropy(7) for
more details.

This change addresses many of the issues discussed in security/55659.
This is a first draft; happy to take improvements to the man pages and
scripted messages to improve clarity.

I considered changing motd to include an entropy warning with a
reference to the entropy(7) man page, but it's a little trickier:
- Not sure it's appropriate for all users to see at login rather than
users who have power to affect the entropy estimate (maybe it is,
just haven't decided).
- We only have a mechanism for changing once at boot; the message would
remain until next boot even if an operator adds enough entropy.
- The mechanism isn't really conducive to making a message appear
conditionally from boot to boot.

branches: 1.263.2;
Adjust for MOUNTCRITLOCAL -> CRITLOCALMOUNTED rename

Sort and deduplicate set lists.

Split the local disk availability step into two phases to allow scripts
that pre-populate parts of the system (e.g. a tmpfs based /var) an
easy place to plug in like:

# REQUIRE: mountcritlocal
# BEFORE: MOUNTCRITLOCAL

This also cleans up the existing special handling a bit by separating it
into new scripts. All later scripts now depend on MOUNTCRITLOCAL.
Discussed on tech-userlevel some time ago.

Rename blacklist -> blocklist

Add support for legacy ZFS filesystems, specified by mountpoint=legacy
in the ZFS properties of the dataset and a simple man page for
mount_zfs. With this, it is possible to put ZFS filesystems in
/etc/fstab as file system type zfs.

Add a rc.d script that kicks the module ZFS load mostly before
mountall runs simular to what LVM does. This allows for any legacy
mounts to be specified in critical_local_filesystems and allows for
ZFS pools on top of cgd (probably among other things). Introduce a
rc.conf variable called zfs which needs to be set to YES, in the usual
manor of things, to get zvols and ZFS dataset support rather then just
assume that 'zfs mount' does that in mountall. Fix a problem in
mountall if ZFS is not compiled into the system.

branches: 1.258.2;
Add smtoff, an rc.d script that disables Simultaneous Multi-Threading. It
parses the output of cpuctl, and executes "cpuctl offline" for each CPU
that has SmtID!=0.

The default is "smtoff=NO", which means that SMT remains enabled.

Don't install YP rc.d files with MKYP=no

typo, pasto

Include npf_boot rc.d scripts which loads an interim config early in boot.
By default /etc/default/npf.boot.conf which can be overriden by /etc/npf.boot.conf.

Install /etc/wpa_supplicant.conf

Remove the userland part of ISDN. The kernel part is untouched for now.
ipppctl was actually an exact copy of pppoectl; there is no functional
change in pppoectl in this commit.

Remove dhclient from the base system.

Discussed here:
https://mail-index.netbsd.org/tech-userlevel/2018/06/21/msg011233.html

branches: 1.251.2; 1.251.4;
Actually install dhcpd6 rc script. Organize CONFIGFILES
alphabetically again while where.

PR 53018

Merge autofs support from: Tomohiro Kusumi
XXX: Does not work yet

add racoon

add cron.

branches: 1.247.2;
Remove MKCRYPTO option.

Originally, MKCRYPTO was introduced because the United States
classified cryptography as a munition and restricted its export. The
export controls were substantially relaxed fifteen years ago, and are
essentially irrelevant for software with published source code.

In the intervening time, nobody bothered to remove the option after
its motivation -- the US export restriction -- was eliminated. I'm
not aware of any other operating system that has a similar option; I
expect it is mainly out of apathy for churn that we still have it.
Today, cryptography is an essential part of modern computing -- you
can't use the internet responsibly without cryptography.

The position of the TNF board of directors is that TNF makes no
representation that MKCRYPTO=no satisfies any country's cryptography
regulations.

My personal position is that the availability of cryptography is a
basic human right; that any local laws restricting it to a privileged
few are fundamentally immoral; and that it is wrong for developers to
spend effort crippling cryptography to work around such laws.

As proposed on tech-crypto, tech-security, and tech-userlevel to no
objections:

https://mail-index.netbsd.org/tech-crypto/2017/05/06/msg000719.html
https://mail-index.netbsd.org/tech-security/2017/05/06/msg000928.html
https://mail-index.netbsd.org/tech-userlevel/2017/05/06/msg010547.html

P.S. Reviewing all the uses of MKCRYPTO in src revealed a lot of
*bad* crypto that was conditional on it, e.g. DES in telnet... That
should probably be removed too, but on the grounds that it is bad,
not on the grounds that it is (nominally) crypto.

Don't track /etc/nsd/nsd.conf and /etc/unbound/unbound.conf

branches: 1.245.2;
fix nsd rc.

add more nsd

add npfd

fix the build ( MKUNBOUND=no ).

add unbound.conf

Add missing unbound

branches: 1.239.2;
add ip6addrctl

move the obsolete list files into their respective sets. this means
that if you install a new set and run "postinstall fix obsolete"
the expected things happen.

(hi 12.5 year old me who thought base was better than etc set, which
it really was, but this is better again :-)

Add resize_root boot operation. If resize_root=YES in rc.conf then
the system attempts to resize the root file system to fill it's
partition prior to mounting read-write. Useful for things like AMI
file system images. May eventually be used by arm images after
coming up with similar solution for increasing the parition size.

Process /etc/modules.conf (if present) at startup, before securelevel is
raised, to allow module loading on ports without a module aware bootloader.

Add rc script for /sbin/iscsid.

stuff added by blacklist

Mark /etc/rc.d/rtsold and /rescue/rtsol as obsolete

branches: 1.232.4;
Sort entries in strcmp order.

Fix for problematic paths in /etc/daily and /etc/security reported in
PR/47645.

Add a separate file which contains the paths for the pkg_admin and
pkg_info utilities. This is called /etc/pkgpath.conf (to distinguish it
from pkg.conf).

Thanks also to Edgar Fuss for the sanity check.

add bind.keys

Install a kyua.conf file that sets unprivileged_user to _tests.

branches: 1.228.6;
Import the new apropos/whatis.

This code has been developed by Abhinav Upadhyay as part of Google's Summer
of Code 2011. It uses libmandoc to parse man pages and builds a Full
Text Index in a SQLite database. The combination of indexing the full
manual page, filtering out stop words and ranking individual matches
based on the section gives a much improved user experience.

The old makewhatis and friends are kept under MKMAKEMANDB=no for now.

Add an rc.d(8) script for isibootd(8). Taken from ndbootd(8).

Load entropy at system boot (only works at securelevel < 1); save
at system shutdown. Disable with random_seed=NO in rc.conf if desired.

Goes to some trouble to never load or save to network filesystems.

Entropy should really be loaded by the boot loader but I am still
sorting out how to pass it to the kernel.

branches: 1.225.2;
Create and install an rc.d file for devpubd - a daemon to listen
on drvctl and autocreate device nodes in /dev for those which don't have any.
Set the default to "NO" for now.

provide a new 'bluetooth' rc.d script, to handle Bluetooth configuration
in a simpler manner. This replaces btattach, btconfig, bthcid, btdevctl
and sdpd scripts, and also should not require any configuration settings
other than "bluetooth=YES", though the full range of configurations is
still possible.

Collect all of var/chroot/tcpdump in one set - so we have a chance to
win the checkflist game.

When run as root, tcpdump will chroot to /var/run/tcpdump - but it can
not look up /etc/protcols in there. So install a copy of /etc/protocols
into the chroot area.
Fixes PR bin/44721.

fix saslc paths.

set fixes for SASLC

NPF checkpoint:
- Add libnpf(3) - a library to control NPF (configuration, ruleset, etc).
- Add NPF support for ftp-proxy(8).
- Add rc.d script for NPF.
- Convert npfctl(8) to use libnpf(3) and thus make it less depressive.
Note: next clean-up step should be a parser, once dholland@ will finish it.
- Add more documentation.
- Various fixes.

branches: 1.218.2;
add ldpd rc script

Adjust file lists after atf-0.12 import

Move the emergancy terminfo database from /root to /rescue.

Note .terminfo and .terminfo.db in /root.

fix a bunch of issues with MKATF=no.

Multicast DNS ("Bonjour") support, based on Apple's mDNSResponder.

Add new files due recent gpio(4) rework.

Switch to building Postfix 2.6.2 via "external/ibm-public/postfix".

add nicknames

Add an rc.d script for dhcpcd(8)

Split fsck during boot into two phases. Check the root file system
first, mount root and run the various disk providers. Add swap and
check the remaining file systems after that.
This breaks the dependency cycle for lvm, which needs writeable /dev.
Depend on rndctl in cgd.

branches: 1.207.2;
Merge pkg_install-20090201 and update build system.

Add lvm script to the lists.

Add etc/rc.d/rndctl. "Hi, apb@!"

x68k pow(4) now uses MI sysmon_pswitch framework. suggested by tsutsui@.
- Make MD poffd(8) retire, and use MI powerd(8) instead of it.
- Make /dev/pow1 retire, because nobody holds /dev/pow0 any longer.
Use /dev/pow0 for pow(4) ioctl.
- POWIOCSSIGNAL ioctl which is for poffd(8) is also obsoleted.

Import rc.d/httpd script for httpd(8) daemon control.
See rc.conf(5) for options explanation.

Move etc/rc.d/x{dm,fs} into xetc.tgz.

Remove LKMs and switch to the module framework, pass 1.

Proposed on tech-kern@.

branches: 1.200.2;
merge yamt-pf42 branch.
(import newer pf from OpenBSD 4.2)

ok'ed by peter@. requested by core@

Hook dhcpcd into build.

branches: 1.198.2; 1.198.4;
some changes to serial bluetooth host controller interfaces

btuartd(8) should be named btattach(8) for consistency
with other parts of NetBSD

make btattach(8) a single-use tool for less complexity

device specicific initialisation (from btuart(4)) is carried
out prior to activating the line discipline (in btattach(8)),
which simplifies the API somewhat and means that the user
tool and the kernel do not need to be kept in sync.

btuart(4) driver is much reduced; naming is made consistent
and all tsleep() and delay() are removed to userland

branches: 1.197.2; 1.197.6;
Add example hotkey_button script

Add the atf configuration files

This change adds the directory used by atf to look for its configuration
files.

branches: 1.195.4;
fixsb has done its job.

Updates for pkg_install-20070714

Add the /etc/powerd/scripts/sensor_indicator to handle events on
indicator sensors.

Update powerd(8).

Add the /etc/rc.d/envsys script required by envsys2.

Imported envsys 2, a brief description of the new features:
(Part 4: documentation and configuration files)

* Support for detachable sensors.
* Cleaned up the API for simplicity and efficiency.
* Ability to send capacity/critical/warning events to powerd(8).
* Adapted all the code to the new locking order.
* Compatibility with the old envsys API: the ENVSYS_GTREINFO
and ENVSYS_GTREDATA ioctl(2)s are supported.
* Added support for a 'dictionary based communication channel' between
sysmon_power(9) and powerd(8), that means there is no 32 bytes event
size restriction anymore.
* Binary compatibility with old envstat(8) and powerd(8) via COMPAT_40.
* All drivers with the n^2 gtredata bug were fixed, PR kern/36226.

Tested by:

blymn: smsc(4).
bouyer: ipmi(4), mfi(4).
kefren: ug(4).
njoly: viaenv(4), adt7463.c.
riz: owtemp(4).
xtraeme: acpiacad(4), acpibat(4), acpitz(4), aiboost(4), it(4), lm(4).

Remove the remaining sendmail config files (including everything in
/usr/share/sendmail) from the obsolete list. Instead, remove them in the
"sendmail" postinstall item, which is disabled by default, to prevent
losing sendmail configuration on upgrade. Fixes the rest of
PR install/36180.

Mark dev/MAKEDEV.subr as obsolete

add etc/MAKEDEV.subr

Supprot Bluetooth HCI UART (H4) driver and daemon.

Add /etc/login.conf.

Add support for per-user /tmp.

Enabled via per_user_tmp in /etc/rc.conf (default off).

See security(8) and rc.conf(5) for more details.

Lots of input from thorpej@ & christos@, thanks!

branches: 1.184.2; 1.184.4;
put back phones, used by tip

goodbye uucp

PR 34692: wpa_supplicant script.
By Jukka Salmi.

Revert previous commit - just keep logfiles around, don't nuke them on
upgrades.

add back aculog & mark as obsolete

Add acadapter, lid_switch, and sleep_button powerd scripts.

Remove last traces of /var/log/aculog
OK'd by perry@

Factor out common settings from /root/.shrc and /etc/skel/.shrc to a
new file /etc/shrc.

As proposed on tech-userlevel.

update to bluetooth device attachment:

remove pseudo-device btdev(4) and inherent limitations

add bthub(4) which autoconfigures at bluetooth controllers as they
are enabled. bluetooth devices now attach here.

btdevctl(8) and its cache is updated to handle new semantics

etc/rc.d/btdevctl is updated to configure devices from a list
in /etc/bluetooth/btdevctl.conf

Sync behaviour of sh and ksh dotfiles for new users with those of root.
Addresses PR 32215 by Wouter Schoot

rename btcontrol(8) as btdevctl(8) to make it fit with the NetBSD naming
scheme for control programs. This fixes pr 34051.

branches: 1.173.2;
Bluetooth fixes by Iain Hibbert:
Create "/etc/rc.d/btcontrol" to attach bluetooth devices at boot.

Bluetooth fixes by Iain Hibbert:
Remove bluetooth.conf(5) and config parsing from libbluetooth(3)
as this is no longer required.

Fix MKIPFILTER=no.

add support for MKISCSI=no.

Initial import of bluetooth stack on behalf of Iain Hibbert. (plunky@,
NetBSD Foundation Membership still pending.) This stack was written by
Iain under sponsorship from Itronix Inc.

The stack includes support for rfcomm networking (networking via your
bluetooth enabled cell phone), hid devices (keyboards/mice), and headsets.

Drivers for both PCMCIA and USB bluetooth controllers are included.

Remove the "sendmail" configuration files and startup scripts from the
list of obsolete files. Resurrect the "sendmail" item which now flags
these files as obsolete unless the "sendmail" package is installed.

Resurrect "/etc/mail" and "/etc/mail/aliases". Postfix still uses that
configuration file.

Remove sendmail (requested by core@ and security-officer@)

rc.d/irdaattach

/etc/rc.d/hostapd

branches: 1.163.2;
Some users use pf. Some use ipfilter. Syspkg was designed for situations
like this, where a user may well want to install one of these but not the
other.

To allow syspkg to be used for its intended purpose here, carefully split
out ipfilter and pf from the main {base,comp,man,misc}-net{,util}-* packages

(something which was partially done for ipf, but not done for pf in the
past).

This way, a user can pkg_delete *-{ipf,pf}-*, and not have utilities,
libraries, man pages, examples, or default /etc files for the packet filter
they don't like.

Add entries for the iSCSI target, and supporting library and manual
pages.

Add a note explaining why we don't "obsolete" end-user configuration files.
Inspired by the fallout from the recent named.conf move.

XXX: consider fixing spamd.conf in a similar manner.

Don't mark /etc/namedb/named.conf as "obsolete" since that will cause
a file that has end-user configuration to be unconditionally removed.
Instead, remove the entry from the set list, and add a note to UPDATING
reminding users of MKUPDATE=yes to manually rectify the problem in
their DESTDIR.

The "named" fix in postinstall(8) will migrate /etc/namedb/named.conf
to /etc/named.conf if the latter doesn't exist.
(The need for these style of migrations was why I implemented postinstall(8)
in the first place.)

Move "named.conf" example configuration to "/etc" because that is where
named(8) looks for it. You can now really get a caching name server
by simply setting "named=yes" in "/etc/rc.conf" as documented in
The NetBSD Guide. This fixes PR bin/30662 by Christian Hattemer.

Add new files for pf.boot.conf.

Add /etc/rc.d/ftpd.

Remove (pf)spamd. Its right to exist in NetBSD has been questioned since it
appeared and whether it's really part of pf or not is still unclear. Looking
at the other *BSDs it seems that they have left out spamd when importing pf,
and now we do that too. Also, the name conflicted with another more popular
used tool, after the rename to pfspamd it was left with completely unusable
documentation which apparently no-one wanted to fix.

A port of the latest spamd will be imported into pkgsrc soon.

Suggested by several people, no objections on last proposal on tech-userlevel.

For obsolete files, make sure that both words behind the pathname contain
"obsolete".

Move /etc/postinstall (and the etc.tgz set) to /usr/sbin/postinstall
(and the base.tgz set).

branches: 1.153.2;
Add lastlogx.

Add an xserver config file.

add ppp in pam.d

Major cleanup of PAM service configuration files.

Add MKIPFILTER; if set to no, don't build and install the ipf(4) programs,
headers and LKM.

Add MKPF; if set to no, don't build and install the pf(4) programs,
headers, LKM and spamd.

Both options default to yes, so nothing changed in the default build.

Reviewed by lukem.

Move etc/release from etc.tgz to base.tgz, since the "build" target
in src/Makefile installs it (thus, being more consistent).
Should fix "./build.sh install=/" installation of /etc/release.
Requested by Hubert Feyrer (amongst others).

We unconditionally populate etc/pam.d.

Add /etc/pam.d files.

Make sure the postfix files in ./etc/postfix are conditional on postfix

branches: 1.144.2;
Put obsolete files in the *-obsolete sets instead of whatever they
were in before they became obsolete (consistency).

branches: 1.143.2;
add pf/pflogd

additional files for pf

enable rc.d fixsb script
initial testing suggests that it is working and I am confident it
will not cause irrevocable damage

branches: 1.140.2;
Add /etc/locate.conf

add identd

Add ./etc/mtree/set.<setname> entry for each set.

Added veriexec entry.

more MKSENDMAIL=no support.
noted by Juan Romero Pardines in private email, and confirmed by me.

reformat whitespace

Install default ssh_known_hosts file with public keys for Project servers.
Hopefully I didn't make too much of a hash of the postinstall support for
this; it currently installs the file if there's none in the destination,
and elsewise notes if the CVS version differs (or is missing) but doesn't
try to fix that.

Rename /etc/release-info to /etc/release, to be consistent with other
implementations and Hubert's original intent.

Run "cd etc && make install-release-info" at the end of the "build" target.
Based on Hubert Feyrer's suggestion on tech-userlevel@.

Support MKCRYPTO=no

support MKYP=no

support MKSENDMAIL=no (with "sendmail" keyword)

Significant overhaul of how the sets are used:

* Add an optional third field to the sets file which is a list of
comma separated keywords that control if the line is printed.
Currently supported keywords
kerberos4 ${MKKERBEROS4} != no
kerberos ${MKKERBEROS} != no
lint ${MKLINT} != no
obsolete ${obsolete} != 0.
In this case, non obsolete files are not printed.
(This will allow future support for builds with variables such as
MKHESIOD and MKYP set to "no".)

* Use sh(1)'s getopts where appropriate, and otherwise cleanup the
various scripts.

* Move defaults for sets.subr from sets.defaults into sets.subr.
Move replicated code for determining stuff such as shlibs type
from various scripts into sets.subr.

* Merge the obsolete.*, krb.*, krb4.* and lint.* into the appropriate
main lists with the relevant third field keyword(s).

Add etc/rc.d/rtclocaltime.

Revert part of previous; etc/rc.d/kdc must be installed even if Kerberos
isn't enabled.
This is how the rc.d system works in conjunction with our current build
and install system; all the rc.d scripts are installed even if the
subsystems they control are not.

Fix the checkflist for builds without Kerberos 4 (MKKERBEROS4=no)
and without Kerberos 4 & 5 (MKKERBEROS=no). Previously checkflist
complained of missing files.

* move kerberos- and kerberos 4-only files into new flists,
distrib/sets/lists/*/krb.*

* make the flist generators grok MKKERBEROS{,4} variables

* fix Makefiles which treat MKKERBEROS=no as MKKERBEROS5=no.
9 out of 10 experts agree that it is ludicrous to build w/
KERBEROS4 and w/o KERBEROS5.

* fix header files, also, which treat MKKERBEROS=no as MKKERBEROS5=no.

* omit some Kerberos-only subdirectories from the build as
MKKERBEROS{,4} indicate

(I acknowledge the sentiment that flists are the wrong way to go,
and that the makefiles should produce the metalog directly. That
sounds to me like the right way to go, but I am not prepared to do
revamp all the makefiles. While my approach is expedient, it fits
painlessly within the current build architecture until we are
delivered from flist purgatory, and it does not postpone our
delivery. Fair enough?)

Finer-grained syspkgs to save space on tiny systems: move
calendar(1)-related and RPC-related files to their own packages.
Move the termcap(5) database to its own package, also.

add default skel/.logout file

Add a reset_button script.

Add /etc/powerd/scripts/power_button

Add /etc/rc.d/powerd

Reflect change of cron's log file.

Adjust sets lists to account for new sendmail machinery.

Add atc_score in place of atc_scores; completes solution of PR 20709.

move the obsolete lists from etc to base, as they're more useful there.
suggested by matt green.

all:
Use /var/db/obsolete instead of /etc/obsolete

etc/Makefile:
Create separate target "install-obsolete-files" to populate
/var/db/obsolete, instead of using "install-etc-files".

Makefile:
Add do-obsolete target, to run "cd etc && make install-obsolete-files",
and add this to BUILDTARGETS.
This moves the "obsolete files" creation from "distribution" to "build".


Per discussion with Andrew Brown.

etc/postinstall
* Improve message display in find_file_in_dirlist()
* do_obsolete(): instead of running distrib/sets/makeobsolete to
temporarily generate the obsolete sets lists, look for them in
${SRC_DIR}/etc/obsolete/* or ${DEST_DIR}/etc/obsolete/*.
The obsolete check now works for "extracted etc.tgz" as the source dir.

etc/Makefile (install-etc-files), distrib/sets/lists/*
* Install obsolete set lists into /etc/obsolete/
* Tweak how pwd_mkdb files are added to METALOG

distrib/sets/makeobsolete
* Don't bother with "_obsolete" suffix on generated file names.

Back out previous (as discussed with releng). The correct way to set this is:

# echo "myserver" > /var/yp/binding/`domainname`.ypservers

Script to bind a NIS client to a known server.

$ grep yp /etc/rc.conf
ypbind=YES
ypbind_flags="-ypset"
ypset=YES
ypset_flags="myserver"

add etc/rc.d/staticroute. (hi christos!)

Move dev/MAKEDEV from base to etc, just like everything else installed
by etc/Makefile::install-etc-files.

(Arguably a bunch of stuff in etc could move to base, but that's a
separate issue).

Added cgd rc.d script and put it in the appropriate postinstall and
mtree files.

add /etc/mail/local-host-names, required by sendmail(8).

Add ./var/log/wtmpx

Split raidframe parity checking/rebuild out into raidframeparity, which is
called after quota so we don't end up with fsck and raidframe parity rebuild
taking forever after a crash/reboot.
While we are here check for raid[0-9].conf & raid[1-9][0-9].conf not
raid[0-9].conf & raid[0-9][0-9].conf

Add /var/run/utmpx, requested by soren.

Added touch panel calibration utility.

Update for etc/skel removals.

Add /etc/rc.d/wdogctl.

Remove empty "ftpwelcome" entirely. This makes ftpd emit a two-line
extended greeting, which confuses lots of established firewalls.
(Not added to "obsolete" since removing this file is not mandatory.)

wsmoused additions.

Move 'mixerctl' rc script from etc-sys-rc to etc-audio-rc.

Add mixerctl rc.d script.

branches: 1.97.2;
Complete the conversion back to the OpenSSH default configuration files of
"/etc/ssh/ssh_config" (from "/etc/ssh/ssh.conf") for ssh(1) and other
userland tools, and "/etc/ssh/sshd_config (from "/etc/ssh/sshd.conf")
for sshd(8).

etc/postinstall will detect this, and if "fix" is given, rename the files.

add etc/postinstall

Add passwd.conf.

move sshd config files to /etc/ssh

dig /etc/ssh

Add some missing postifx etc files.

ipfs allows state information created for NAT entries and rules using
keep state to be locked (modification prevented) and then saved to disk,
allowing for the system to experience a reboot, followed by the restoration
of that information, resulting in connections not being interrupted.

To activate this feature, set ipfs=YES in /etc/rc.conf

- rename etc/rc.d/NETWORK to etc/rc.d/NETWORKIGN
- move entry for etc/rc.d/xntpd from base/obsolete.mi to etc/obsolete.mi

Add ifwatchd.

Add moused.

Add etc/rc.d/downinterfaces.

upgrade to openssh 2.9, around 2001/6/24 (from openbsd usr.bin/ssh).

- authorized_keys2 and known_hosts2 are obsoleted, and integrated
into those without "2".
- file name change, /etc/primes -> /etc/moduli
- cleanups

install /etc/primes for ssh

sunndd has been renamed ndbootd.

Added entries for sunndd.

dhclient-script was moved to /sbin.
Pointed out by Kimio Ishii <ishii@sm.sony.co.jp>.

Add /etc/rc.d/altqd.

Don't install /etc/rc.d/gated any longer, since gated isn't in the
base system.

Change a package name.

Add pkg names.

make it clearer that /etc/rtadvd.conf is optional (normally,
configurations were derived from kernel interface settings).

install rtadvd.conf into /usr/share/exapmles/rtadvd, instead of /etc.

sync with kame.

Add rc.d/racoon.

no longer need to ship IPv4-only sendmail.cf.

Add etc/rc.d/poffd.

Add /etc/rc.d/isdnd.

Remove /etc/mail/aliases.db -- see etc/Makefile,v 1.168.

Add /etc/skel files.

Part of fix for PR bin/10985.

add etc/rc.d/newsyslog

move default config files from /etc/default -> /etc/defaults, to be
consistent with what FreeBSD uses /etc/defaults for, and since SVR4
uses /etc/default for another purpose.
as discussed on tech-userlevel, and no objections were made.

Add ssh-related files.

add rc.d/securelevel. noted in [install/10896] by Rafal Boni.

Remove an obsolete rc.wscons.

migrate default installation config files from /etc to /etc/default

repalce rc.d/fsck.sh with rc.d/fsck

kerberos -> kdc

add rc.d/NETWORK, obsolete rc.d/systemfs

sync sendmail default configuration file with GENERIC kernel setting.
was: sendmail-IPv6.cf(v4/v6) + sendmail.cf(v4)
now: sendmail-IPv4only.cf(v4) + sendmail.cf(v4/v6)

do we need etc/obsolete.mi?

branches: 1.60.2;
Sort.

add rc.d/ipsec for ipsec configuration. when enabled, it will inject
/etc/ipsec.conf into "setkey -f". PR 9609.

Update for reality.

remove netstart

Update for location of aliases/aliases.db.

make default sendmail.cf IPv4-only again.
roll sendmail-IPv6.cf, which does IPv4/v6.

Finish previous sync.

Sync (mostly).

correct more sendmail upgrade issue.

sync with sendmail upgrade.

Adjust sets for ntp4.
XXX: Obsolete sets still need to be fixed.

Add postfix-related files.

add zone file for "localhost.". this is included in examples in BIND8,
and is a good thing to have (no outside DNS server will supply this).

Update sets and obsolete lists to reflect death of nfsiod

add /etc/sysctl.conf

fix DAEMON,LOGIN,SERVERS,sshd in /etc/rc.d.

Add /etc/rc.d scripts.

change filename for IPv6 loopback address (::1).
many found it ugly, and I found that I've made a mistake in old name.
there needs to be 4 more "0"s!

this commit renames
etc/namedb/0000:0000:0000:0000:0000:0000:000 into etc/namedb/loopback.v6.
(based on recent discussion I did not use cvsmove)

added ./etc/ntp.conf per PR 4312

add reverse lookup table for IPv6 loopback (::1).
ugly...

branches: 1.40.2;
Add /root/.shrc.

sync to reality

branches: 1.38.2;
Make an aliases.db file when we install the aliases file.

Bring setlists up to date for i386 switch to ELF and ipv6.

Add a NetBSD RCS tag to each distrib list file.

add aculog

branches: 1.34.2;
Add /etc/wscons.conf

ld.so.conf doesn't belong in mi.

Sync to reality. gcov, rc.wscons, queue/list man pages, i386/ieee.h.

Fixing various chaff, sync to current reality:
o mailwrapper, postfix and sendmail
o hello, sup.no.netbsd.org; bye to skarven.itea.unit.no
o innetgr / netgroup
o a few sendmail master config file changes

Catch up with the Joneses.

add nsswitch.conf

Sync with various changes over the last week or two.

Include "named.conf" instead of "named.boot".

/etc/rc.shutdown

./etc/mtree/BSD.{pkg,x11}.dist are gone.

sort files

add /etc/ld.so.conf, from Steve Allen in PR misc/4892

back out last change, /etc/aliases.db now auto-rebuilt by default sendmail.cf

add /etc/aliases.db

add etc/mtree/BSD.x11.dist

move games score files into etc so we don't clobber them

update; from Steve Allen in PR misc/4345, with some additions by myself.

branches: 1.17.2;
/etc/magic -> /usr/share/misc/magic

remove etc/myname

sync to reality

Sync.

add /etc/profile

Synchronize.

Update for current reality.

Sync with reality.

Add the new *.conf and rc.lkm files.

Update to reflect current reality.

AUTHPRIV syslog messages go to /var/log/authlog instead of /var/log/secure
(in line with other systems)

add fdformat, its man pages, and fdc(4) page

add /var/log/secure

Updates from Steve Allen <wormey@eskimo.com> to match the current world.

merge in 1.2 branch

sync

branches: 1.1.1;
Initial revision