CVS commit: src/share/man/man5

2010-02-05 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Fri Feb  5 16:32:20 UTC 2010

Modified Files:
src/share/man/man5: daily.conf.5 security.conf.5

Log Message:
Note that pkgdb_dir is deprecated and point to the alternative setting.


To generate a diff of this commit:
cvs rdiff -u -r1.25 -r1.26 src/share/man/man5/daily.conf.5
cvs rdiff -u -r1.35 -r1.36 src/share/man/man5/security.conf.5

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/etc

2010-02-05 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Fri Feb  5 16:29:02 UTC 2010

Modified Files:
src/etc: daily security
src/etc/defaults: daily.conf security.conf

Log Message:
Deprecate the pkgdb_dir settings from daily.conf and security.conf in
favor of the PKG_DBDIR variable in /etc/pkg_install.conf.  The purpose
of this is to only have to define the location of the packages database
in a single place and have all other system components pick it up.

pkgdb_dir is still honored if defined and the scripts will spit out a
warning in that case, asking the administrator to migrate to the
PKG_DBDIR setting.  We can't remove this compatibility workaround until,
at least, after NetBSD 6 is released.


To generate a diff of this commit:
cvs rdiff -u -r1.75 -r1.76 src/etc/daily
cvs rdiff -u -r1.107 -r1.108 src/etc/security
cvs rdiff -u -r1.13 -r1.14 src/etc/defaults/daily.conf
cvs rdiff -u -r1.22 -r1.23 src/etc/defaults/security.conf

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/etc

2010-01-27 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Wed Jan 27 16:22:41 UTC 2010

Modified Files:
src/etc: daily

Log Message:
Reset the umask while refreshing the vulnerabilities database so that it
remains world-readable.  Otherwise, it ends up with 600 permissions which
make it unusable for building pkgsrc packages as non-root.

Problem found by w...@.


To generate a diff of this commit:
cvs rdiff -u -r1.74 -r1.75 src/etc/daily

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/distrib/utils/sysinst

2010-01-27 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Wed Jan 27 11:02:03 UTC 2010

Modified Files:
src/distrib/utils/sysinst: defs.h util.c

Log Message:
Perform in-place replacement of the cypher type instead of renaming the
passwd.conf file to passwd.conf.pre-sysinst file and creating a new one
from scratch:

- This is consistent with all other edits of configuration files performed
  by sysinst.  (E.g. in-place changes of rc.conf.)

- This eases the upgrade of the system to a newer set of files because the
  diffs presented by etcupdate are easier to read.

No objections in tech-inst...@.  Tested installing NetBSD/amd64.


To generate a diff of this commit:
cvs rdiff -u -r1.147 -r1.148 src/distrib/utils/sysinst/defs.h
cvs rdiff -u -r1.162 -r1.163 src/distrib/utils/sysinst/util.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/share/man/man8

2010-01-20 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Wed Jan 20 22:24:18 UTC 2010

Modified Files:
src/share/man/man8: afterboot.8

Log Message:
Ask the user to enable fetch_pkg_vulnerabilities in /etc/daily.conf right
after installation.  Automatic changes from sysinst will come later.


To generate a diff of this commit:
cvs rdiff -u -r1.42 -r1.43 src/share/man/man8/afterboot.8

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/etc

2010-01-20 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Wed Jan 20 22:19:20 UTC 2010

Modified Files:
src/etc: daily
src/etc/defaults: daily.conf

Log Message:
Default fetch_pkg_vulnerabilities to NO and complain if it is set to that
value when packages are found (so that the user knows he is not getting the
vulnerability checks).

Why?  People is complaining.  (And somehow, the argument that NetBSD doesn't
do any network operation by default convinces me that it should continue to
do so.)

But still, I will be adding a question to sysinst to enable/disable this.


To generate a diff of this commit:
cvs rdiff -u -r1.73 -r1.74 src/etc/daily
cvs rdiff -u -r1.12 -r1.13 src/etc/defaults/daily.conf

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/doc

2010-01-19 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Tue Jan 19 22:11:57 UTC 2010

Modified Files:
src/doc: CHANGES

Log Message:
Note the addition of new security checks to daily.conf and security.conf
for packages.


To generate a diff of this commit:
cvs rdiff -u -r1.1345 -r1.1346 src/doc/CHANGES

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/share/man/man5

2010-01-19 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Tue Jan 19 22:08:52 UTC 2010

Modified Files:
src/share/man/man5: daily.conf.5 security.conf.5

Log Message:
Document the new package-related maintenance options and security checks
in daily.conf and security.conf.


To generate a diff of this commit:
cvs rdiff -u -r1.24 -r1.25 src/share/man/man5/daily.conf.5
cvs rdiff -u -r1.33 -r1.34 src/share/man/man5/security.conf.5

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/etc

2010-01-19 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Tue Jan 19 22:08:11 UTC 2010

Modified Files:
src/etc: daily security
src/etc/defaults: daily.conf security.conf

Log Message:
Add the fetch_pkg_vulnerabilities option to the daily script to keep the
packages vulnerability database up to date.  This will only fetch the
file from the server if it has changed since the last run.

Add the check_pkg_vulnerabilities and check_pkg_signatures options to the
security script to check that the installed packages are sane.

All of these options are enabled by default but they will only run if
there is, at least, one installed package.


To generate a diff of this commit:
cvs rdiff -u -r1.72 -r1.73 src/etc/daily
cvs rdiff -u -r1.106 -r1.107 src/etc/security
cvs rdiff -u -r1.11 -r1.12 src/etc/defaults/daily.conf
cvs rdiff -u -r1.21 -r1.22 src/etc/defaults/security.conf

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/doc

2010-01-18 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Mon Jan 18 23:41:47 UTC 2010

Modified Files:
src/doc: CHANGES

Log Message:
Document the addition of new-style kernel modules support in macppc and shark.


To generate a diff of this commit:
cvs rdiff -u -r1.1344 -r1.1345 src/doc/CHANGES

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch

2010-01-18 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Mon Jan 18 23:40:07 UTC 2010

Modified Files:
src/sys/arch/macppc/conf: GENERIC
src/sys/arch/shark/conf: GENERIC

Log Message:
Enable 'options MODULAR' in macppc and shark GENERIC kernels now that the
modules work.


To generate a diff of this commit:
cvs rdiff -u -r1.277 -r1.278 src/sys/arch/macppc/conf/GENERIC
cvs rdiff -u -r1.86 -r1.87 src/sys/arch/shark/conf/GENERIC

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/share/mk

2010-01-18 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Mon Jan 18 23:39:08 UTC 2010

Modified Files:
src/share/mk: bsd.kmodule.mk

Log Message:
Generate long calls in modules for arm32 and powerpc to avoid unsupported
relocations by the module loader in the kernel.  This makes modules work
in, at least, shark and macppc respectively.

This is obviously a workaround that results in slower code, but at least
makes modules work.  I'm adding a comment detailing what the real solution
would be so that the whole thing can be revisited in the future.  (Read:
I don't have time now to dig the details of how to implement trampoline
generation.)

(Based on the old bsd.kmod.mk file, I understand that hppa needs this
workaround too, but I can't check this platform.)


To generate a diff of this commit:
cvs rdiff -u -r1.23 -r1.24 src/share/mk/bsd.kmodule.mk

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/powerpc/powerpc

2010-01-18 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Mon Jan 18 23:35:51 UTC 2010

Modified Files:
src/sys/arch/powerpc/powerpc: kobj_machdep.c powerpc_machdep.c

Log Message:
Define kobj_machdep and module_init_md empty functions so that powerpc
kernels (at least macppc) with 'options MODULAR' can be built.


To generate a diff of this commit:
cvs rdiff -u -r1.2 -r1.3 src/sys/arch/powerpc/powerpc/kobj_machdep.c
cvs rdiff -u -r1.41 -r1.42 src/sys/arch/powerpc/powerpc/powerpc_machdep.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/sys/arch/arm/arm32

2010-01-18 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Mon Jan 18 23:04:30 UTC 2010

Modified Files:
src/sys/arch/arm/arm32: arm32_machdep.c

Log Message:
Define an empty module_init_md function so that kernels with 'options
MODULAR' can be built (at least in shark).  Still not working due to
some relocations resolving to too far away symbols though.


To generate a diff of this commit:
cvs rdiff -u -r1.71 -r1.72 src/sys/arch/arm/arm32/arm32_machdep.c

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.



CVS commit: src/share/man/man4

2010-01-11 Thread Julio M. Merino Vidal
Module Name:src
Committed By:   jmmv
Date:   Tue Jan 12 00:04:30 UTC 2010

Modified Files:
src/share/man/man4: btbc.4

Log Message:
Drop unnecessary trailing commas.


To generate a diff of this commit:
cvs rdiff -u -r1.3 -r1.4 src/share/man/man4/btbc.4

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.