tedu
3d5ec16db0
the kvm.db is now kmem owned. noticed by Steven Roberts
10 years ago
ajacoutot
7c7337bc31
Remove sendmail queue directories.
ok matthieu@
10 years ago
ajacoutot
83e7c629b9
More sendmail removal.
ok matthieu@
10 years ago
ajacoutot
9842e10cd1
Add httpd.conf.
10 years ago
deraadt
05894e184c
match current permissions
10 years ago
deraadt
0b9011095e
add optional keywords all over the place, and some missing files.
likely to be more changes here to match the new layout.
ok ingo aja
10 years ago
millert
08e366a469
Add ed25519 ssh host keys to /etc/mtree/special.
From inframare at arachnogoat dot com; OK deraadt@ sthen@
10 years ago
halex
7ff02e8812
remove /usr/src. avoids useless whining from daily security mail.
ok landry@ ajacoutot@
10 years ago
dcoppa
9a6537b480
tedu ~/.klogin
10 years ago
reyk
43494a61b1
Remove kerberosV, it is not special anymore.
ok henning@
10 years ago
reyk
e6ebb39335
Remove kerberosV from etc/
ok deraadt@ guenther@
10 years ago
ajacoutot
2238e58bfc
Bye bye *hosts.equiv.
ok deraadt@
10 years ago
sthen
f5ca212c7d
Stop security(8) whining about /etc/nsd.conf which has moved, pointed out
by Bjorn Ketelaars. Check that the /var/nsd/etc directory is protected
instead, it may contain zone-transfer keys etc.
11 years ago
ajacoutot
65f2789cd0
Proper indent.
11 years ago
ajacoutot
04cad6151e
Add /var/kerberosV to hier(7)+mtree.
Make sure the directory, DB and master keys have secure permissions.
ok dcoppa@ robert@ beck@
11 years ago
ajacoutot
966d9d4e41
Sort the npppd entries.
ok schwarze@ giovanni@ sthen@
11 years ago
giovanni
3b625a67be
Tell security(8) how to check npppd(8) configuration files
12 years ago
ajacoutot
dd2c1227ad
Missed in previous: ypldap.conf(5) is installed now, remove optional.
ok deraadt@
13 years ago
schwarze
ce5534d329
Remove yet another mention of /etc/security that i missed (doh).
Also pointed out by Mattieu Baptiste <mattieu dot b at gmail dot com>, thanks.
13 years ago
schwarze
54d47ad369
UUCP is no longer contained in the base system, so its home directory
does not require special permissions. The security(8) scripts hates
group-writeable home directories, so remove the needless permissions.
Issue noticed by Andrew Fresh <andrew at afresh1 dot com>.
If i understand naddy@ correctly, this is unlikely to harm even UUCP users.
"Just remove the group writeable bit" deraadt@.
13 years ago
david
dd75794eda
add ldapd.conf; ok sthen@
14 years ago
david
e37a14dd0b
update location of host.random: it moved from /etc to /var/db in 1999...
14 years ago
jakob
f5152e9a3d
add nsd.conf; ok deraadt
14 years ago
naddy
76c47babcc
add ssh_host_ecdsa_key to /etc; from Mattieu Baptiste <mattieu.b@gmail.com>
ok deraadt@
14 years ago
jsg
c64c4eb017
switch iked pki files to /etc/iked, discussed with reyk.
14 years ago
reyk
22d0cb2081
add iked.conf default configuration file example.
ok jsg@
14 years ago
claudio
e9c0134a9a
add ldpd.conf to changelist and mtree/special
15 years ago
ajacoutot
e64f15e172
Add entry for ypldap.conf (may contain a password).
ok pyr@
15 years ago
schwarze
bc9cb7a339
revert previous, requested by kettenis@ and deraadt@
15 years ago
schwarze
777cc77bd8
remove the empty script /etc/monthly
in preparation for improvements in /etc/daily and /etc/weekly
using feedback and suggestions from jmc@ and sthen@
ok jmc@, and sthen@ agreed with the general direction
15 years ago
jacekm
8f8cd51cc5
add secrets.db; ok gilles@
16 years ago
jacekm
ed9222e821
add smtpd files and dirs; ok gilles@
16 years ago
miod
061cd7baf3
Remove /dev/drum and related code.
16 years ago
reyk
0e104c7690
enable snmpd in the build
approved by deraadt@, ok thib@
17 years ago
reyk
d7d68e3694
hoststated.conf got renamed to relayd.conf
From Daniel Ouellet (daniel at presscom dot net)
17 years ago
merdely
86d88e353e
Change chio.conf's group ownership to operator and mode to 644.
At this time, there is no sensitive information in that file.
ok beck@, millert@, jdixon@, deraadt@
17 years ago
norby
62f29e324b
Add a sample configuration file for the newly imported ospf6d(8) daemon.
ok dlg@
17 years ago
david
3d84c5f83e
+hoststated.conf
17 years ago
david
cadbe485a3
spamd.conf lives in /etc/mail now; ok millert@ beck@
18 years ago
david
1c3a2cf009
+sasyncd.conf; ok henning@
18 years ago
norby
2abfa3abd6
Add the _ripd user and startup stuff.
ok claudio@
18 years ago
aanriot
84508b1c46
add chio.conf bits.
ok beck@
18 years ago
david
67a990cd93
fix location of dvmrpd.conf; ok norby@
18 years ago
norby
7f4589e266
add all the goo to hook dvmrp into the system
ok derradt@
18 years ago
david
1c3c99e9c1
+ hostapd.conf, ipsec.conf, sudoers
19 years ago
david
39048804a7
/etc/crontab must be mode 0600; ok millert@
19 years ago
deraadt
91cdfa9525
no acpi here either
19 years ago
tholo
3cf53df36d
Start on a basic ACPI framework -- does not do much more than read out the
ACPI tables into kernel memory and attach ACPI and HPET timers currently.
In order to test this code, enabling the devices in GENERIC as well as
the ACPI_ENABLE option is needed. This code does not do any thermal
control yet, so this should be done with care depending on the platform.
In the tree so more people can contribute to making this more fully
featured.
Ok niklas@ grange@ tedu@
19 years ago
henning
8b2492b4e7
ospfd.conf mode 0600, requested by norby
20 years ago
henning
eabcde3945
ospfd.conf, noticed by bernd
20 years ago