PR misc/57276 from Nan Xiao

Remove redundant word ("to").

actually, an anchor is needed so the period is appended

remove empty anchor text

re-order initial sections in the order a user is likely to be able
to address them. add a section on NPF. attempt to make various things
easier to find.

Fix typo.

adjust layout of afterboot(8) to make things easier to find

capitalization police, etc

branches: 1.76.4;
Various entropy integration improvements.

- New /etc/security check for entropy in daily security report.

- New /etc/rc.d/entropy script runs (after random_seed and rndctl) to
check for entropy at boot -- in rc.conf, you can:

. set `entropy=check' to halt multiuser boot and enter single-user
mode if not enough entropy

. set `entropy=wait' to make multiuser boot wait until enough entropy

Default is to always boot without waiting -- and rely on other
channels like security report to alert the operator if there's a
problem.

- New man page entropy(7) discussing the higher-level concepts and
system integration with cross-references.

- New paragraph in afterboot(8) about entropy citing entropy(7) for
more details.

This change addresses many of the issues discussed in security/55659.
This is a first draft; happy to take improvements to the man pages and
scripted messages to improve clarity.

I considered changing motd to include an entropy warning with a
reference to the entropy(7) man page, but it's a little trickier:
- Not sure it's appropriate for all users to see at login rather than
users who have power to affect the entropy estimate (maybe it is,
just haven't decided).
- We only have a mechanism for changing once at boot; the message would
remain until next boot even if an operator adds enough entropy.
- The mechanism isn't really conducive to making a message appear
conditionally from boot to boot.

bump date

ifconfig up before doing wifi stuff

afterboot.8: If it needs a disclaimer that most people shouldn't do it...

afterboot.8: uname -p, pointed out by various people

afterboot.8: Start the daemons after configuring wpa_supplicant.

afterboot.8: Use wpa_* for everything WiFi, update links

reasoning: ifconfig scan is unreliable while wpa_supplicant is running

afterboot.8: Correct URL directory order

afterboot.8: Use cdn. Don't be arch specific. Requested by leot.

afterboot.8: Mention mdnsd

afterboot.8: Explain devpubd

afterboot.8: Be clearer about exactly when you might need to login as root

afterboot.8: Explain how to install pkgin on a fresh system

afterboot.8: Explain how connecting to open WiFi works with wpa_supplicant

branches: 1.62.2;
servpce -> service

Don't describe wpa supplicant flags now that they aren't needed.

I'm intentionally not describing wpa_cli since it seems to be a worse
user experience than appending with wpa_passphrase.

branches: 1.60.4;
Update wifi guide to reflect dhcpcd no longer invoking wpa_supplicant

Update packages link. suggest https. bump date

Remove workaround for ancient HTML generation code.

branches: 1.57.4;
Sort SEE ALSO.

wpa_supplicant.conf(5) not (8)

document the current easiest way to use WPA for wireless networking.
don't have my laptop here and going by memory so it may be slightly wrong.

Suggest `service xyz start/stop/...' instead of /etc/rc.d/xyz.

From cfkoch.

branches: 1.53.2;
Reference dhcpcd as the sole DHCP client in general man pages.

We'd rather have new users use dhcpcd. hopefully this eliminates some
unnecessary confusion about there being two clients.

branches: 1.52.12;
If you must use Pp with Ed, at least use it afterwards.

Add missing close to display block, and add a paragraph break to
follow other similar blocks.

Prefer dhcpcd(8) over dhclient(8).

Rewrite section on DNS so it makes sense, is true, and is useful.

This may need to be adapted for openresolv too...

branches: 1.48.2;
Use Lk macro instead of Pa when dealing with URLs, to produce links
with HTML output. And while here update some dead URL links.
First part of PR/29238.

branches: 1.47.6;
Move testing instructions from afterboot(8) to tests(7) and change the
former to only provide a link to the latter.

Fix punctuation and update "SEE ALSO" section. From Bug Hunting in
PR misc/40293.

Use comma in serialization instead of dot.

Some markup and capitalization nits, from Bug Hunting in PR misc/40062.
While here, give xdm its own subsection instead of awkwardly lumping it
in with the rc.conf section.

Ask the user to enable fetch_pkg_vulnerabilities in /etc/daily.conf right
after installation. Automatic changes from sysinst will come later.

Change two man page references to use the official names.
(I define "official" as the Document Title name and original file name.)

In SEE ALSO, refer to useradd instead of adduser.
(adduser is a man link, but no tool by that name.)

Make some updates (most notably syncing the Postfix section with reality)
inspired by PR misc/39168.

Fix typo, from Shannon -jj Behrens in PR 41375.

branches: 1.38.2; 1.38.4; 1.38.6;
Wording improvements.

- note that local hostname settings might be overriden by dhclient(8)
- add more info about DHCP settings in the network configuration section
- bump date

Move TNF licenses to 2 clause form

branches: 1.35.2; 1.35.4;
Fix reference to sshd_config manpage.

Update URLs after website reorganization. patch by OKANO Takayoshi, from
PR 37070.

Explain how to run the tests in afterboot(8)

Modify the afterboot(8) manual page to explain how to run the tests
installed alongside the system. This is something the user should do
after configuring it to ensure that it works and that it is stable on
his hardware.

branches: 1.32.4; 1.32.6;
Fix my email address in a comment; the old one does not exist any more.

Fix typo in previous.

Link to the pkgsrc guide and pkgsrc(7). Bump date.

branches: 1.29.2; 1.29.4;
sendmail is no more. noted by our anonymous user.

Fixed minor typo.

Use american english and fix a typo.

Excise kerberosIV. Bump date.

Bump date for previous.

PR/30923: Zafer Aydogan: pam too verbose

Make it explicit that by default, you can only login as root on the console.

Approved by christos@.

Remove reference to sushi; pointed out by jmmv.

portmap is dead, refer to rpcbind instead. From YOMURA Masanori in private mail.

Change all .Xr config 8 to .Xr config 1, following the recent move of
config from usr.sbin -> usr.bin.

Reviewed by wiz.

Some more nit fixes.

Remove superfluous "\&".

New sentence, new line.

Two minor improvements.

Drop trailing space.

mounting filesystems with nodev/nosuid wasn't considered that a good idea,
undo.

* Sync in a few changes from OpenBSD's latest version of this file
* Add licence by Marshall M. Midden
* Various minor edits and additions.

branches: 1.13.2; 1.13.4;
More better description of current state of sendmail stuff in more
places. This is intended to make some people a tad happier.

Bump date for previous.

Change the default settings for sendmail.

(1) The stock sendmail.cf will only listen on the loopback interface.
(2) The stock submit.cf specifally connects to "localhost." which
should be less susceptible to being confused or looking confused.
(3) The smtp listener starts by default, if needed. The setting in
/etc/default/rc.conf is still "no", but rc.d/sendmail detects the
default setting and will change it to yes if need is determined.

Need is defined as "nothing else seems to have been changed about the
mail configuration but we'd like locally originated and locally
destined mail to be delivered". If you change, eg, mailer.conf to
point to postfix or some other MTA, sendmail will not start.

branches: 1.10.2;
xref mailer.conf(5) in SEE ALSO

netbsd.org->NetBSD.org

Switch macros to make both work.

Setup -> set up; new sentence, new line; add some commas; change kernel building instructions to include make depend.

mailer.conf uses sendmail by default again. Fix a typo.

fix build.sh usage

g/c the NEXTRELEASE comment tag now that the next version number is decided

Remember the administrator to always configure /etc/mailer.conf, as there
is no default. Approved by wiz.

Mostly fixing Xrs, but some other fixes too.

add afterboot(8) manpage - things to check after the first complete boot

adapted from OpenBSD by Julio Merino in PR misc/16745, with some further
changes by me