HardenedBSD/etc
Gregory Neil Shapiro ca8b9ed373 Add two new accounts/groups for sendmail:
smmsp - sendmail 8.12 operates as a set-group-ID binary (instead of
set-user-ID).  This new user/group will be used for command line
submissions.  UID/GID 25 is suggested in the sendmail documentation and has
been adopted by other operating systems such as OpenBSD and Solaris 9.

mailnull - The default value for DefaultUser is now set to the uid and gid
of the first existing user mailnull, sendmail, or daemon that has a
non-zero uid.  If none of these exist, sendmail reverts back to the old
behavior of using uid 1 and gid 1.  Currently FreeBSD uses daemon for
DefaultUser but I would prefer not to use an account used by other
programs, hence the addition of mailnull.  UID/GID 26 has been chosen for
this user.

This was discussed on -arch on October 18-19, 2001.

MFC after:	1 week
2001-11-17 21:24:45 +00:00
..
defaults GVC 10Mbps Ethernet Card 2001-11-15 05:54:25 +00:00
etc.alpha Add an entry for the Zip 250. 2001-08-31 22:49:22 +00:00
etc.amd64
etc.i386 Add an entry for the Zip 250. 2001-08-31 22:49:22 +00:00
etc.ia64 Add /etc files for ia64. 2001-10-06 12:55:50 +00:00
isdn
kerberosIV
mail Do not clobber users hostname.mc file if freebsd.mc changes (likely after an 2001-10-08 22:35:24 +00:00
mtree Change mode for var/db/ipf to 0700 2001-11-17 12:21:29 +00:00
namedb Invoke named with privilege of bind:bind. 2001-08-23 13:34:45 +00:00
periodic After further discussion on -CURRENT, some people (jhb) do not like 2001-11-14 09:30:01 +00:00
ppp
rc.d Avoid unnecessary calls to expr(1) by using standard shell arithmetic 2001-11-14 06:35:43 +00:00
root
sendmail Add missing word in comment. 2001-09-30 12:48:17 +00:00
amd.map
apmd.conf Now properly use logger's facility argument 2001-08-06 15:52:42 +00:00
auth.conf
crontab
csh.cshrc
csh.login
csh.logout
dhclient.conf o Spelling error s/suffient/sufficient/ 2001-10-27 03:14:37 +00:00
disktab Add an entry for the Zip 250. 2001-08-31 22:49:22 +00:00
dm.conf
fbtab
ftpusers
gettytab Add entries for 3wire terminals. (carrier not supplied, so we set nc). 2001-08-31 22:18:50 +00:00
group Add two new accounts/groups for sendmail: 2001-11-17 21:24:45 +00:00
hosts Backout revision 1.9 that added `myname.my.domain' as another alias for 2001-09-29 12:20:08 +00:00
hosts.allow Clear up what the line "ALL : PARANOID : RFC931 20 : deny" means 2001-08-18 14:22:52 +00:00
hosts.equiv
hosts.lpd
inetd.conf Chroot to /tftpboot for tftp. 2001-10-22 01:46:53 +00:00
locale.alias
login.access
login.conf s/password_format/passwd_format/ 2001-09-11 07:01:47 +00:00
MAKEDEV sysinstall complains about creating acd0t* devices while all dists are 2001-11-13 18:07:14 +00:00
MAKEDEV.local
Makefile UUCP removal Phase III. 2001-10-01 06:27:44 +00:00
man.alias Remove aliases not needed for new man version 2001-06-26 00:41:07 +00:00
master.passwd Add two new accounts/groups for sendmail: 2001-11-17 21:24:45 +00:00
minfree
modems
motd Be consistent about how we quote commands that could be entered by the 2001-07-27 12:25:55 +00:00
netconfig
netstart
network.subr Avoid unnecessary calls to expr(1) by using standard shell arithmetic 2001-11-14 06:35:43 +00:00
networks
newsyslog.conf Change maillog to have permissions of 640. Users shouldn't be able to 2001-09-17 01:33:15 +00:00
nls.alias
opieaccess Add commented out example 2001-08-14 23:51:58 +00:00
pam.conf Make rsh(d) more secure (Hah!) by not defaulting PAM to promiscuously 2001-11-10 14:23:07 +00:00
pccard_ether Due to a bug in the ed driver, which leads to hangs when using it with 2001-09-13 06:18:07 +00:00
phones
primes
printcap
profile
protocols Update reference URL. 2001-10-10 18:34:28 +00:00
rc Handle the lack of nfs server or client support in the kernel by 2001-10-19 06:50:52 +00:00
rc.atm Avoid unnecessary calls to expr(1) by using standard shell arithmetic 2001-11-14 06:35:43 +00:00
rc.devfs
rc.diskless1
rc.diskless2 Ensure that /var/log/lastlog exists so that login doesn't complain. 2001-10-17 14:30:19 +00:00
rc.firewall Sync the code that sucks in rc.conf and friends with what's in 2001-08-14 05:50:19 +00:00
rc.firewall6 fix typo. icmptype of destination unreach is not 2 but 1. 2001-08-21 15:05:09 +00:00
rc.initdiskless
rc.isdn
rc.network Avoid unnecessary calls to expr(1) by using standard shell arithmetic 2001-11-14 06:35:43 +00:00
rc.network6 Do more strict checking for an interface. 2001-07-20 18:08:17 +00:00
rc.pccard
rc.resume
rc.serial
rc.shutdown Put in place for using ipfs use on shutdown and startup. 2001-10-20 04:33:02 +00:00
rc.subr
rc.suspend
rc.syscons Make the 'echo' output for blanktime and scrnmap consistent with their 2001-08-31 15:29:24 +00:00
rc.sysctl sysctl(8) doesn't need '-w' to write to sysctl variables anymore. 2001-07-17 22:03:19 +00:00
remote
rpc Add sgi_fam 391002, file alteration monitor. 2001-08-11 09:43:04 +00:00
security Handle the absence of net.inet.ip.fw.verbose_limit better, just like 2001-09-18 00:03:48 +00:00
services Add commented-out/prototype entries for samba's swat configuration tool. 2001-10-03 05:30:56 +00:00
shells
sysctl.conf Enable vmiodirenable by default. Remove incorrect comment from sysctl.conf. 2001-09-26 19:35:04 +00:00
syslog.conf Explain that /var/log/all.log needs to be touched and chmod'd 'ere it 2001-10-28 13:41:30 +00:00
termcap.small Reflect main termcap v1.109 2001-08-15 03:27:52 +00:00
usbd.conf