HardenedBSD/libexec/rc/rc.d
Pawel Biernacki 9ef9175912 [pf] /etc/rc.d/pf should REQUIRE routing
When a system with pf_enable="YES" in /etc/rc.conf uses hostnames in
/etc/pf.conf, these hostnames cannot be resolved via external nameservers
because the default route is not yet set. This results in an empty
(all open) ruleset.

Since r195026 already put netif back to REQUIRE, this change does not affect
the issue that the firewall should rather have been setup before any
network traffic can occur.

PR:		211928
Submitted by:	Robert Schulze
Reported by:	Robert Schulze
Tested by:	Mateusz Kwiatkowski
No objections from:	kp
MFC after:	3 days
2020-10-08 11:45:10 +00:00
..
accounting Limit access to system accounting files. 2019-07-13 16:07:38 +00:00
addswap
adjkerntz
apm
apmd
archdep Remove iBCS2, part1: userspace 2018-12-19 21:56:54 +00:00
auditd auditd_stop: wait_for_pids instead of sleeping 2020-02-06 08:32:30 +00:00
auditdistd
automount
automountd
autounmountd
bgfsck
blacklistd
bluetooth
bootparams
bridge
bsnmpd
bthidd Revert r346017 pending compiled-in zfs fix 2019-04-10 07:51:13 +00:00
ccd
cfumass Revert r346017 pending compiled-in zfs fix 2019-04-10 07:51:13 +00:00
cleanvar
cleartmp
cron
ctld
DAEMON
ddb
defaultroute
devd
devfs
devmatch Move the devmatch rc.d script before netif in the boot process. 2020-05-16 18:37:48 +00:00
dhclient
dmesg
dumpon
FILESYSTEMS
fsck Add fsck_flags config option 2020-03-18 13:09:47 +00:00
ftp-proxy
ftpd
gbde
geli
geli2
gptboot
growfs fix the article to be correct... 2019-09-16 22:48:40 +00:00
gssd
hastd
hcsecd
hostapd Allow the hostapd program to be specified. This allows users to use 2019-06-17 20:11:02 +00:00
hostid
hostid_save
hostname
inetd
iovctl
ip6addrctl
ipfilter When booting a system with WITHOUT_IPFILTER the following errors 2020-08-11 23:36:38 +00:00
ipfs
ipfw Remove excess spaces from rc.d scripts 2020-07-13 13:44:54 +00:00
ipfw_netflow
ipmon When booting a system with WITHOUT_IPFILTER the following errors 2020-08-11 23:36:38 +00:00
ipnat When booting a system with WITHOUT_IPFILTER the following errors 2020-08-11 23:36:38 +00:00
ippool Load ipfilter, ipnat, and ippool rules, and start ipmon in a vnet jail. 2020-07-23 17:39:45 +00:00
ipropd_master
ipropd_slave
ipsec Add ipsec.ko to required_modules for rc.d/ipsec script. 2019-05-06 08:30:53 +00:00
iscsictl
iscsid
jail add ability to set watchdog timeout for a shutdown 2019-10-03 11:23:10 +00:00
kadmind
kdc
keyserv
kfd
kld Revert r346017 pending compiled-in zfs fix 2019-04-10 07:51:13 +00:00
kldxref
kpasswdd
ldconfig ldconfig: remove i386 aout invocation 2020-06-23 15:36:05 +00:00
linux Make the linux rc script use linrdlnk by default. 2020-07-04 18:01:29 +00:00
local /etc/rc.d/local: Fix typo in description 2019-06-10 13:34:18 +00:00
local_unbound Run unbound-anchor when root.key is empty, not just when it is absent. 2018-11-01 14:24:12 +00:00
localpkg Rename etc/rc.d/abi to etc/rc.d/linux; after moving out the SysV IPC stuff 2019-10-02 11:40:40 +00:00
lockd
LOGIN
lpd
Makefile As of r364746 (OpenZFS import) existing ZPOOLs are not imported 2020-08-26 13:13:57 +00:00
mdconfig Revert r346017 pending compiled-in zfs fix 2019-04-10 07:51:13 +00:00
mdconfig2 Revert r346017 pending compiled-in zfs fix 2019-04-10 07:51:13 +00:00
mixer
motd motd: Generate from template to /var/run 2019-07-20 20:56:31 +00:00
mountcritlocal To avoid breakage for those who build/install without ZFS only 2020-08-26 20:30:00 +00:00
mountcritremote Revert r346017 pending compiled-in zfs fix 2019-04-10 07:51:13 +00:00
mountd
mountlate Remove excess spaces from rc.d scripts 2020-07-13 13:44:54 +00:00
moused
msgs
natd
netif When booting a system with WITHOUT_IPFILTER the following errors 2020-08-11 23:36:38 +00:00
netoptions Run netoptions startup script in vnet jails. 2020-01-08 23:34:50 +00:00
netwait When booting a system with WITHOUT_IPFILTER the following errors 2020-08-11 23:36:38 +00:00
NETWORKING
newsyslog
nfscbd
nfsclient
nfsd Add support for a virtual hostname to nfsd 2019-02-16 00:15:54 +00:00
nfsuserd
nisdomain
nscd
ntpd Allow opt-out of automatic ntpd leapfile checking/fetching. 2019-11-25 19:59:53 +00:00
ntpdate
opensm
os-release Create /etc/os-release file. 2019-11-20 23:45:31 +00:00
othermta
pf [pf] /etc/rc.d/pf should REQUIRE routing 2020-10-08 11:45:10 +00:00
pflog
pfsync
power_profile
powerd
ppp
pppoed
pwcheck
quota
random save-entropy(8), rc.d/random: Set nodump flag 2019-05-22 21:47:17 +00:00
rarpd
rctl
resolv
rfcomm_pppd_server
root
route6d
routed Make ICMP redirect processing depend on routing daemon. 2020-03-23 15:27:10 +00:00
routing Make ICMP redirect processing depend on routing daemon. 2020-03-23 15:27:10 +00:00
rpcbind
rtadvd
rtsold
rwho
savecore
sdpd
securelevel When booting a system with WITHOUT_IPFILTER the following errors 2020-08-11 23:36:38 +00:00
sendmail
serial
SERVERS Rename etc/rc.d/abi to etc/rc.d/linux; after moving out the SysV IPC stuff 2019-10-02 11:40:40 +00:00
sppp
sshd sshd: Warn about missing ssh-keygen only when necessary 2020-04-15 14:07:33 +00:00
statd
static_arp
static_ndp
stf
swap
swaplate
syscons Revert r346017 pending compiled-in zfs fix 2019-04-10 07:51:13 +00:00
sysctl
syslogd
sysvipc Move the SysV IPC stuff out of the 'abi' rc script, into a new one: 2019-09-28 09:12:41 +00:00
tmp Revert that! 2020-07-19 23:56:19 +00:00
ubthidhci
ugidfw
utx
var
virecover
watchdogd add ability to set watchdog timeout for a shutdown 2019-10-03 11:23:10 +00:00
wpa_supplicant
ypbind
ypldap
yppasswdd
ypserv
ypset
ypupdated
ypxfrd
zfs As of r364746 (OpenZFS import) existing ZPOOLs are not imported 2020-08-26 13:13:57 +00:00
zfsbe loader: zfs should support bootonce an nextboot 2020-09-21 09:01:10 +00:00
zfsd
zpool Declare dependency relationship once instead of twice for zpool 2020-09-05 00:45:46 +00:00
zvol Make zpool on GELI work again. 2020-09-04 23:36:43 +00:00