HardenedBSD/etc
Kris Kennaway 62d90fb793 Overhaul the MACHINE_CPU behaviour:
* Rip out MACHINE_CPU stuff from sys.mk and include a new <bsd.cpu.mk>
  after we pull in /etc/make.conf.  We need to do it afterwards so we can
  react to the user setting of the:

* CPUTYPE variable, which contains the CPU type which the user wants to
  optimize for.  For example, if you want your binaries to only run on an
  i686-class machine (or higher), set this to i686.  If you want to support
  running binaries on a variety of CPU generations, set this to the lowest
  common denominator.  Supported values are listed in make.conf.

* bsd.cpu.mk does the expansion of CPUTYPE into MACHINE_CPU using the
  (hopefully) correct unordered list of CPU types which should be used on
  that CPU.  For example, an AMD k6 CPU wants any of the following:
    k6 k5 i586 i486 i386
  This is still an unordered list so the client makefile logic is simple -
  client makefiles need to test for the various elements of the set in
  decreasing order of priority using ${MACHINE_CPU:M<foo>}, as before.
  The various MACHINE_CPU lists are believed to be correct, but should be
  checked.

* If NO_CPU_CFLAGS is not defined, add relevant gcc compiler optimization
  settings by default (e.g. -karch=k6 for CPUTYPE=k6, etc).  Release
  builders and developers of third-party software need to make sure not to
  enable CPU-specific optimization when generating code intended to be
  portable.  We probably need to move to an /etc/world.conf to allow the
  optimization stuff to be applied separately to world/kernel and external
  compilations, but it's not any worse a problem than it was before.

* Add coverage for the ia64/itanium MACHINE_ARCH/CPUTYPE.

* Add CPUTYPE support for all of the CPU types supported by FreeBSD and gcc
  (only i386, alpha and ia64 first, since those are the minimally-working
  ports.  Other architecture porters, please feel free to add the relevant
  gunk for your platform).

Reviewed by:    jhb, obrien
2001-02-22 11:14:25 +00:00
..
defaults Overhaul the MACHINE_CPU behaviour: 2001-02-22 11:14:25 +00:00
etc.alpha
etc.amd64
etc.i386
isdn
kerberosIV
mail Revamp /etc/mail/Makefile: 2001-02-22 04:17:33 +00:00
mtree Add missing .../cat?/alpha directories. 2001-02-19 15:30:11 +00:00
namedb FreeBSD doesn't run named in a sandbox by default, so change a comment so it 2001-01-16 20:57:18 +00:00
periodic Add 500.queuerun 2001-02-19 07:12:37 +00:00
ppp 120 seconds is not 3 minutes 2001-02-18 02:11:37 +00:00
rc.d - Don't try to send RA to lo0, gifN and faithN. 2001-01-25 13:18:26 +00:00
root
sendmail Add a new make knob, SENDMAIL_MC, which is meant to replace SENDMAIL_CF as 2001-02-22 04:11:52 +00:00
amd.map
apmd.conf
auth.conf
crontab Move the sendmail -q from cron to periodic, as suggested by a few people. 2001-02-19 02:47:42 +00:00
csh.cshrc
csh.login
csh.logout
dhclient.conf
disktab
dm.conf
fbtab
ftpusers
gettytab
group
hosts
hosts.allow
hosts.equiv
hosts.lpd
inetd.conf
locale.alias
login.access
login.conf
MAKEDEV Don't specify root:wheel for tun*, it's the default. 2001-02-03 23:31:31 +00:00
MAKEDEV.local
Makefile Move creation of the sendmail statistics file from the usr.sbin/sendmail 2001-02-22 03:55:08 +00:00
master.passwd
minfree
modems
motd Replace the full path to sysinstall with a standard manual page 2001-01-29 08:22:21 +00:00
netstart
network.subr
networks
newsyslog.conf Log the console output to "/var/log/console.log", not "/var/log/console" 2001-02-17 20:27:58 +00:00
pam.conf o Reinstate Kerberos IV support for sshd when MAKE_KERBEROS4 is 2001-02-03 02:09:20 +00:00
pccard_ether
phones
pim6dd.conf
pim6sd.conf
printcap
profile
protocols
rc Introduce the option of running fsck -y if the initial preen fails. 2001-02-05 04:54:42 +00:00
rc.atm
rc.devfs
rc.diskless1
rc.diskless2
rc.firewall Fix some glaring insecurities in the prototype firewall configurations. 2001-02-20 19:54:31 +00:00
rc.firewall6
rc.initdiskless
rc.isdn
rc.network
rc.network6 - Don't try to send RA to lo0, gifN and faithN. 2001-01-25 13:18:26 +00:00
rc.pccard Fix this to be more consistent with similar constructions elsewhere 2001-01-14 09:29:57 +00:00
rc.resume
rc.serial
rc.shutdown
rc.suspend
rc.syscons
rc.sysctl
remote Add com1-4 as finger friendly shortcuts for /dev/cuaa0-3. Specify a default 2001-02-21 19:45:47 +00:00
rpc
security Show denied secondary bind transfer attempts 2001-02-08 20:31:21 +00:00
services
shells
sysctl.conf
syslog.conf Log the console output to "/var/log/console.log", not "/var/log/console" 2001-02-17 20:27:58 +00:00
termcap.small
usbd.conf