.
This commit is contained in:
Sharad Ahlawat
@ -28,6 +28,8 @@ kern.geom.label.gptid.enable="0"
|
||||
# Increase dmesg buffer to fit longer boot output.
|
||||
kern.msgbufsize="524288"
|
||||
|
||||
kern.ipc.maxmbufmem=150608778240
|
||||
|
||||
kern.racct.enable=1
|
||||
|
||||
# ZFS root boot config
|
||||
@ -96,6 +98,7 @@ vfs.zfs.vdev.cache.size=134217728
|
||||
vfs.zfs.vdev.cache.max=134217728
|
||||
|
||||
# https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=185487
|
||||
# https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=210686
|
||||
# https://forums.freebsd.org/threads/updating-bsd-from-10-to-11-ahci-ssd-issue.59923/
|
||||
# https://lists.freebsd.org/pipermail/freebsd-bugs/2013-April/052301.html
|
||||
# my 8TB's don't support NCQ TRIM
|
||||
|
||||
@ -1,2 +0,0 @@
|
||||
00 08,12,16,20 * * * /root/FreeBSD/scripts/zfs_health.sh
|
||||
00 2 * * 0 /usr/local/sbin/zfSnap -d -s -S -a 2w -p weekly_ -r zroot ship data base
|
||||
@ -33,3 +33,23 @@ target iqn.nas.ahlawat.com:f13 {
|
||||
size 128G
|
||||
}
|
||||
}
|
||||
|
||||
target iqn.nas.ahlawat.com:f12p {
|
||||
# auth-group no-authentication
|
||||
portal-group pg0
|
||||
chap user secretsecret
|
||||
lun 0 {
|
||||
path /dev/zvol/ship/raw/FreeBSD12p
|
||||
size 128G
|
||||
}
|
||||
}
|
||||
|
||||
target iqn.nas.ahlawat.com:f13p {
|
||||
# auth-group no-authentication
|
||||
portal-group pg0
|
||||
chap user secretsecret
|
||||
lun 0 {
|
||||
path /dev/zvol/ship/raw/FreeBSD13p
|
||||
size 128G
|
||||
}
|
||||
}
|
||||
|
||||
@ -13,7 +13,7 @@
|
||||
# references must include a dollar sign '$' in front of the
|
||||
# name to be expanded properly.
|
||||
#
|
||||
# $FreeBSD: releng/12.1/sbin/devfs/devfs.rules 338204 2018-08-22 15:55:23Z brd $
|
||||
# $FreeBSD: releng/12.2/sbin/devfs/devfs.rules 338204 2018-08-22 15:55:23Z brd $
|
||||
#
|
||||
|
||||
# Very basic and secure ruleset: Hide everything.
|
||||
@ -87,12 +87,13 @@ add include $devfsrules_unhide_login
|
||||
add path fuse unhide
|
||||
add path zfs unhide
|
||||
|
||||
# members of group uucp can access all usb and tty devices
|
||||
[usbrules=100]
|
||||
add path 'usbctl' mode 660 group uucp
|
||||
add path 'usb/*' mode 660 group uucp
|
||||
add path 'ttyU*' mode 660 group uucp
|
||||
|
||||
[serial_usb_rules=1000]
|
||||
[serial_usb_rules=150]
|
||||
add include $devfsrules_jail
|
||||
add path 'cuau*' unhide
|
||||
add path 'cuaU*' unhide
|
||||
@ -101,7 +102,7 @@ add path 'ttyU*' unhide
|
||||
add path 'usb*' unhide
|
||||
add path 'usb/*' unhide
|
||||
|
||||
[devfs_rules_bhyve_jail=2000]
|
||||
[devfs_rules_bhyve_jail=200]
|
||||
add include $devfsrules_jail
|
||||
add path vmm unhide
|
||||
add path vmm/* unhide
|
||||
@ -111,6 +112,6 @@ add path tap* unhide
|
||||
add path zvol/ship/raw/* unhide
|
||||
add path nmdm* unhide
|
||||
|
||||
[devfs_rules_tun_jail=3000]
|
||||
[devfs_rules_tun_jail=300]
|
||||
add include $devfsrules_jail
|
||||
add path tun* unhide
|
||||
|
||||
@ -13,7 +13,7 @@
|
||||
# For a more detailed explanation of all the periodic.conf variables, please
|
||||
# refer to the periodic.conf(5) manual page.
|
||||
#
|
||||
# $FreeBSD: releng/12.1/usr.sbin/periodic/periodic.conf 337648 2018-08-11 17:11:08Z brd $
|
||||
# $FreeBSD: releng/12.2/usr.sbin/periodic/periodic.conf 337648 2018-08-11 17:11:08Z brd $
|
||||
#
|
||||
|
||||
# What files override these defaults ?
|
||||
|
||||
@ -1,3 +1,6 @@
|
||||
V4: / -network=192.168.10.0 -mask=255.255.255.0
|
||||
/mnt/ship/pxe/FreeBSD11 -alldirs -maproot=root
|
||||
/mnt/ship/pxe/FreeBSD12 -alldirs -maproot=root
|
||||
/mnt/ship/pxe/FreeBSD13 -alldirs -maproot=root
|
||||
/mnt/ship/pxe/FreeBSD12p -alldirs -maproot=root
|
||||
/mnt/ship/pxe/FreeBSD13p -alldirs -maproot=root
|
||||
|
||||
@ -1,4 +1,4 @@
|
||||
# $FreeBSD: releng/12.1/usr.sbin/freebsd-update/freebsd-update.conf 337338 2018-08-04 22:25:41Z brd $
|
||||
# $FreeBSD: releng/12.2/usr.sbin/freebsd-update/freebsd-update.conf 337338 2018-08-04 22:25:41Z brd $
|
||||
|
||||
# Trusted keyprint. Changing this is a Bad Idea unless you've received
|
||||
# a PGP-signed email from <security-officer@FreeBSD.org> telling you to
|
||||
|
||||
@ -1,11 +1,12 @@
|
||||
# Device Mountpoint FStype Options Dump Pass#
|
||||
/dev/ada2p3 none swap sw 0 0
|
||||
/dev/ada3p3 none swap sw 0 0
|
||||
#/dev/zvol/zroot/swapvol none swap sw 0 0
|
||||
#/dev/ada2p3 none swap sw 0 0
|
||||
#/dev/ada3p3 none swap sw 0 0
|
||||
#/dev/da0p1 none swap sw 0 0
|
||||
/dev/da1p1 none swap sw 0 0
|
||||
/dev/da2p1 none swap sw 0 0
|
||||
/dev/da3p1 none swap sw 0 0
|
||||
/dev/da4p1 none swap sw 0 0
|
||||
#/dev/da1p1 none swap sw 0 0
|
||||
#/dev/da2p1 none swap sw 0 0
|
||||
#/dev/da3p1 none swap sw 0 0
|
||||
#/dev/da4p1 none swap sw 0 0
|
||||
#/dev/da5p1 none swap sw 0 0
|
||||
#/dev/da6p1 none swap sw 0 0
|
||||
#/dev/da7p1 none swap sw 0 0
|
||||
|
||||
@ -7,7 +7,7 @@
|
||||
# This file controls resource limits, accounting limits and
|
||||
# default user environment settings.
|
||||
#
|
||||
# $FreeBSD: releng/12.1/usr.bin/login/login.conf 338399 2018-08-30 15:52:03Z brd $
|
||||
# $FreeBSD: releng/12.2/usr.bin/login/login.conf 357789 2020-02-12 02:04:03Z kevans $
|
||||
#
|
||||
|
||||
# Default settings effectively disable resource limits, see the
|
||||
@ -26,7 +26,8 @@ default:\
|
||||
:passwd_format=sha512:\
|
||||
:copyright=/etc/COPYRIGHT:\
|
||||
:welcome=/etc/motd:\
|
||||
:setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\
|
||||
:setenv=BLOCKSIZE=K:\
|
||||
:mail=/var/mail/$:\
|
||||
:path=/sbin /bin /usr/sbin /usr/bin /usr/local/sbin /usr/local/bin ~/bin:\
|
||||
:nologin=/var/run/nologin:\
|
||||
:cputime=unlimited:\
|
||||
@ -63,6 +64,7 @@ xuser:\
|
||||
staff:\
|
||||
:tc=default:
|
||||
daemon:\
|
||||
:mail@:\
|
||||
:memorylocked=128M:\
|
||||
:tc=default:
|
||||
news:\
|
||||
@ -123,7 +125,8 @@ russian|Russian Users Accounts:\
|
||||
#standard:\
|
||||
# :copyright=/etc/COPYRIGHT:\
|
||||
# :welcome=/etc/motd:\
|
||||
# :setenv=MAIL=/var/mail/$,BLOCKSIZE=K:\
|
||||
# :setenv=BLOCKSIZE=K:\
|
||||
# :mail=/var/mail/$:\
|
||||
# :path=~/bin /bin /usr/bin /usr/local/bin:\
|
||||
# :manpath=/usr/share/man /usr/local/man:\
|
||||
# :nologin=/var/run/nologin:\
|
||||
|
||||
@ -1,5 +1,5 @@
|
||||
#
|
||||
# $FreeBSD: releng/12.1/usr.sbin/ntp/ntpd/ntp.conf 337649 2018-08-11 17:42:42Z brd $
|
||||
# $FreeBSD: releng/12.2/usr.sbin/ntp/ntpd/ntp.conf 352865 2019-09-29 03:36:50Z cy $
|
||||
#
|
||||
# Default NTP servers for the FreeBSD operating system.
|
||||
#
|
||||
@ -103,3 +103,11 @@ restrict ::1
|
||||
# Use either leapfile in /etc/ntp or periodically updated leapfile in /var/db.
|
||||
#leapfile "/etc/ntp/leap-seconds"
|
||||
leapfile "/var/db/ntpd.leap-seconds.list"
|
||||
|
||||
# Specify the number of megabytes of memory that should be allocated and
|
||||
# locked. -1 (default) means "do not lock the process into memory".
|
||||
# 0 means "lock whatever memory the process wants into memory". Any other
|
||||
# number means to lock up to that number of megabytes into memory.
|
||||
# 0 may result in a segfault when ASLR with stack gap randomization
|
||||
# is enabled.
|
||||
#rlimit memlock 32
|
||||
|
||||
@ -1,11 +1,7 @@
|
||||
# $FreeBSD: releng/12.1/bin/sh/profile 337849 2018-08-15 14:41:24Z brd $
|
||||
# $FreeBSD: releng/12.2/bin/sh/profile 363525 2020-07-25 11:57:39Z pstef $
|
||||
#
|
||||
# System-wide .profile file for sh(1).
|
||||
#
|
||||
# Uncomment this to give you the default 4.2 behavior, where disk
|
||||
# information is shown in K-Blocks
|
||||
# BLOCKSIZE=K; export BLOCKSIZE
|
||||
#
|
||||
# For the setting of languages and character sets please see
|
||||
# login.conf(5) and in particular the charset and lang options.
|
||||
# For full locales list check /usr/share/locale/*
|
||||
|
||||
@ -32,13 +32,13 @@ firewall_logif="YES"
|
||||
|
||||
# interfaces
|
||||
cloned_interfaces_sticky="YES"
|
||||
cloned_interfaces="lagg0 bridge1 bridge2 bridge5 bridge9 bridge10"
|
||||
cloned_interfaces="lagg0 bridge1 bridge2 bridge5 bridge9 bridge10 bridge48"
|
||||
|
||||
ifconfig_lagg0="laggproto lacp laggport igb0 laggport igb1 up"
|
||||
ifconfig_igb0="up -rxcsum -rxcsum6 -txcsum -txcsum6 -lro -tso -vlanhwtso"
|
||||
ifconfig_igb1="up -rxcsum -rxcsum6 -txcsum -txcsum6 -lro -tso -vlanhwtso"
|
||||
|
||||
vlans_lagg0="1 2 5 9 10"
|
||||
vlans_lagg0="1 2 5 9 10 48"
|
||||
|
||||
ipv6_activate_all_interfaces="YES"
|
||||
rtsold_enable="YES"
|
||||
@ -53,12 +53,15 @@ ifconfig_lagg0_9="inet 192.168.200.10/24"
|
||||
ifconfig_lagg0_9_ipv6="inet6 fd09::10/64 auto_linklocal accept_rtadv"
|
||||
ifconfig_lagg0_10="inet 192.168.10.10/24"
|
||||
ifconfig_lagg0_10_ipv6="inet6 fd0a::10/64 auto_linklocal accept_rtadv"
|
||||
ifconfig_lagg0_48="inet 192.168.48.10/24"
|
||||
ifconfig_lagg0_48_ipv6="inet6 2001:470:f835::10/64 auto_linklocal accept_rtadv"
|
||||
|
||||
ifconfig_bridge1="addm lagg0.1 up"
|
||||
ifconfig_bridge2="addm lagg0.2 up"
|
||||
ifconfig_bridge5="addm lagg0.5 up"
|
||||
ifconfig_bridge9="addm lagg0.9 up"
|
||||
ifconfig_bridge10="addm lagg0.10 up"
|
||||
ifconfig_bridge48="addm lagg0.48 up"
|
||||
|
||||
# adding IP to bridges does not work
|
||||
#ifconfig_bridge1="inet 192.168.0.10/24"
|
||||
|
||||
@ -1 +0,0 @@
|
||||
ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDAGJkR8PJBp68y44o4H44HueSGYbyg1+8VJP43YEj4M7ssKagMTH5QQEifU1gepdLgoK7mr+9yLpNXUlzT56FOcpQ3cyjPtp58N3384FrewAgiyA2dqwSxN/UsPXXA5F88HxcuhKXfEZgugC92W3LL8/U8dC/nSwj1hFVjWf75OpXqTjJFaBKhVYDjo75OfkzIwWQLmrFO/VF9TmA41eRn/yXZs+S504iVV+0dK6MgkN5FJoPj+XsKNr1pgQTIn63AtdLB2wW4gafWTQI6SMBYUPkfcrFdLR73+g2+IOSiLdB37us2XXtwHw1shJwLlz0j+1EVjZjOFAWILDNwrzJt ahlawat@ahlawat.com
|
||||
@ -1,35 +0,0 @@
|
||||
portal-group pg0 {
|
||||
discovery-auth-group no-authentication
|
||||
listen 0.0.0.0
|
||||
listen [::]
|
||||
}
|
||||
|
||||
target iqn.nas.ahlawat.com:f11 {
|
||||
# auth-group no-authentication
|
||||
portal-group pg0
|
||||
chap user secretsecret
|
||||
lun 0 {
|
||||
path /dev/zvol/ship/raw/FreeBSD11
|
||||
size 128G
|
||||
}
|
||||
}
|
||||
|
||||
target iqn.nas.ahlawat.com:f12 {
|
||||
# auth-group no-authentication
|
||||
portal-group pg0
|
||||
chap user secretsecret
|
||||
lun 0 {
|
||||
path /dev/zvol/ship/raw/FreeBSD12
|
||||
size 128G
|
||||
}
|
||||
}
|
||||
|
||||
target iqn.nas.ahlawat.com:f13 {
|
||||
# auth-group no-authentication
|
||||
portal-group pg0
|
||||
chap user secretsecret
|
||||
lun 0 {
|
||||
path /dev/zvol/ship/raw/FreeBSD13
|
||||
size 128G
|
||||
}
|
||||
}
|
||||
@ -1,3 +0,0 @@
|
||||
/mnt/ship/pxe/FreeBSD11 -alldirs -maproot=root
|
||||
/mnt/ship/pxe/FreeBSD12 -alldirs -maproot=root
|
||||
/mnt/ship/pxe/FreeBSD13 -alldirs -maproot=root
|
||||
@ -1,3 +0,0 @@
|
||||
# Device Mountpoint FStype Options Dump Pass#
|
||||
192.168.10.10:/mnt/ship/pxe/FreeBSD11 / nfs rw 0 0
|
||||
fdescfs /dev/fd fdescfs rw 0 0
|
||||
@ -1,3 +0,0 @@
|
||||
# Device Mountpoint FStype Options Dump Pass#
|
||||
192.168.10.10:/mnt/ship/pxe/FreeBSD12 / nfs rw 0 0
|
||||
fdescfs /dev/fd fdescfs rw 0 0
|
||||
@ -1,3 +0,0 @@
|
||||
# Device Mountpoint FStype Options Dump Pass#
|
||||
192.168.10.10:/mnt/ship/pxe/FreeBSD12p / nfs rw 0 0
|
||||
fdescfs /dev/fd fdescfs rw 0 0
|
||||
@ -1,3 +0,0 @@
|
||||
# Device Mountpoint FStype Options Dump Pass#
|
||||
192.168.10.10:/mnt/ship/pxe/FreeBSD13 / nfs rw 0 0
|
||||
fdescfs /dev/fd fdescfs rw 0 0
|
||||
@ -1,3 +0,0 @@
|
||||
# Device Mountpoint FStype Options Dump Pass#
|
||||
192.168.10.10:/mnt/ship/pxe/FreeBSD13p / nfs rw 0 0
|
||||
fdescfs /dev/fd fdescfs rw 0 0
|
||||
@ -1,7 +0,0 @@
|
||||
t0 {
|
||||
TargetAddress = 192.168.10.10
|
||||
TargetName = iqn.nas.ahlawat.com:f11
|
||||
AuthMethod = CHAP
|
||||
chapIName = user
|
||||
chapSecret = secretsecret
|
||||
}
|
||||
@ -1,7 +0,0 @@
|
||||
t0 {
|
||||
TargetAddress = 192.168.10.10
|
||||
TargetName = iqn.nas.ahlawat.com:f12
|
||||
AuthMethod = CHAP
|
||||
chapIName = user
|
||||
chapSecret = secretsecret
|
||||
}
|
||||
@ -1,7 +0,0 @@
|
||||
t0 {
|
||||
TargetAddress = 192.168.10.10
|
||||
TargetName = iqn.nas.ahlawat.com:f12p
|
||||
AuthMethod = CHAP
|
||||
chapIName = user
|
||||
chapSecret = secretsecret
|
||||
}
|
||||
@ -1,7 +0,0 @@
|
||||
t0 {
|
||||
TargetAddress = 192.168.10.10
|
||||
TargetName = iqn.nas.ahlawat.com:f13
|
||||
AuthMethod = CHAP
|
||||
chapIName = user
|
||||
chapSecret = secretsecret
|
||||
}
|
||||
@ -1,7 +0,0 @@
|
||||
t0 {
|
||||
TargetAddress = 192.168.10.10
|
||||
TargetName = iqn.nas.ahlawat.com:f13p
|
||||
AuthMethod = CHAP
|
||||
chapIName = user
|
||||
chapSecret = secretsecret
|
||||
}
|
||||
@ -1,21 +0,0 @@
|
||||
#!/bin/sh
|
||||
#
|
||||
# $FreeBSD: releng/12.1/libexec/rc/rc.d/iscsid 298514 2016-04-23 16:10:54Z lme $
|
||||
#
|
||||
|
||||
# PROVIDE: iscsid
|
||||
# REQUIRE: NETWORK lockd
|
||||
# BEFORE: DAEMON
|
||||
# KEYWORD: nojail
|
||||
|
||||
. /etc/rc.subr
|
||||
|
||||
name="iscsid"
|
||||
desc="iSCSI initiator daemon"
|
||||
rcvar="iscsid_enable"
|
||||
pidfile="/var/run/${name}.pid"
|
||||
command="/usr/sbin/${name}"
|
||||
required_modules="iscsi"
|
||||
|
||||
load_rc_config $name
|
||||
run_rc_command "$1"
|
||||
@ -1 +0,0 @@
|
||||
if_bnxt_load="YES"
|
||||
@ -1,26 +0,0 @@
|
||||
cloned_interfaces_sticky="YES"
|
||||
cloned_interfaces="bridge1 bridge2 bridge11 bridge12"
|
||||
ifconfig_bridge1="ether random addm bge0 up"
|
||||
ifconfig_bridge2="ether random addm bge1 up"
|
||||
ifconfig_bridge11="ether random addm bnxt0 up"
|
||||
#ifconfig_bridge12="ether random addm bnxt1 up"
|
||||
ifconfig_bnxt0="up"
|
||||
ifconfig_bnxt1="up"
|
||||
#
|
||||
#on lab17:
|
||||
#ifconfig_bnxt0="inet 10.0.11.17/24 up"
|
||||
#ifconfig_bnxt1="inet 10.0.12.17/24 up"
|
||||
#
|
||||
#on lab18:
|
||||
#ifconfig_bnxt0="inet 10.0.11.18/24 up"
|
||||
#ifconfig_bnxt1="inet 10.0.12.18/24 up"
|
||||
|
||||
rpcbind_enable="YES"
|
||||
rpc_lockd_enable="YES"
|
||||
rpc_statd_enable="YES"
|
||||
|
||||
sshd_enable="YES"
|
||||
|
||||
iscsid_enable="YES"
|
||||
iscsictl_enable="YES"
|
||||
iscsictl_flags="-Aa"
|
||||
@ -1,7 +0,0 @@
|
||||
# Generated by resolvconf
|
||||
search diyit.org
|
||||
nameserver 192.168.10.5
|
||||
nameserver fd01::5
|
||||
nameserver fd02::5
|
||||
nameserver fd05::5
|
||||
nameserver fd09::5
|
||||
@ -1,121 +0,0 @@
|
||||
# $OpenBSD: sshd_config,v 1.103 2018/04/09 20:41:22 tj Exp $
|
||||
# $FreeBSD: head/crypto/openssh/sshd_config 357926 2020-02-14 19:06:59Z emaste $
|
||||
|
||||
# This is the sshd server system-wide configuration file. See
|
||||
# sshd_config(5) for more information.
|
||||
|
||||
# This sshd was compiled with PATH=/usr/bin:/bin:/usr/sbin:/sbin
|
||||
|
||||
# The strategy used for options in the default sshd_config shipped with
|
||||
# OpenSSH is to specify options with their default value where
|
||||
# possible, but leave them commented. Uncommented options override the
|
||||
# default value.
|
||||
|
||||
# Note that some of FreeBSD's defaults differ from OpenBSD's, and
|
||||
# FreeBSD has a few additional options.
|
||||
|
||||
#Port 22
|
||||
#AddressFamily any
|
||||
#ListenAddress 0.0.0.0
|
||||
#ListenAddress ::
|
||||
|
||||
#HostKey /etc/ssh/ssh_host_rsa_key
|
||||
#HostKey /etc/ssh/ssh_host_ecdsa_key
|
||||
#HostKey /etc/ssh/ssh_host_ed25519_key
|
||||
|
||||
# Ciphers and keying
|
||||
#RekeyLimit default none
|
||||
|
||||
# Logging
|
||||
#SyslogFacility AUTH
|
||||
#LogLevel INFO
|
||||
|
||||
# Authentication:
|
||||
|
||||
#LoginGraceTime 2m
|
||||
PermitRootLogin yes
|
||||
#StrictModes yes
|
||||
#MaxAuthTries 6
|
||||
#MaxSessions 10
|
||||
|
||||
#PubkeyAuthentication yes
|
||||
|
||||
# The default is to check both .ssh/authorized_keys and .ssh/authorized_keys2
|
||||
# but this is overridden so installations will only check .ssh/authorized_keys
|
||||
AuthorizedKeysFile .ssh/authorized_keys
|
||||
|
||||
#AuthorizedPrincipalsFile none
|
||||
|
||||
#AuthorizedKeysCommand none
|
||||
#AuthorizedKeysCommandUser nobody
|
||||
|
||||
# For this to work you will also need host keys in /etc/ssh/ssh_known_hosts
|
||||
#HostbasedAuthentication no
|
||||
# Change to yes if you don't trust ~/.ssh/known_hosts for
|
||||
# HostbasedAuthentication
|
||||
#IgnoreUserKnownHosts no
|
||||
# Don't read the user's ~/.rhosts and ~/.shosts files
|
||||
#IgnoreRhosts yes
|
||||
|
||||
# Change to yes to enable built-in password authentication.
|
||||
#PasswordAuthentication no
|
||||
#PermitEmptyPasswords no
|
||||
|
||||
# Change to no to disable PAM authentication
|
||||
#ChallengeResponseAuthentication yes
|
||||
|
||||
# Kerberos options
|
||||
#KerberosAuthentication no
|
||||
#KerberosOrLocalPasswd yes
|
||||
#KerberosTicketCleanup yes
|
||||
#KerberosGetAFSToken no
|
||||
|
||||
# GSSAPI options
|
||||
#GSSAPIAuthentication no
|
||||
#GSSAPICleanupCredentials yes
|
||||
|
||||
# Set this to 'no' to disable PAM authentication, account processing,
|
||||
# and session processing. If this is enabled, PAM authentication will
|
||||
# be allowed through the ChallengeResponseAuthentication and
|
||||
# PasswordAuthentication. Depending on your PAM configuration,
|
||||
# PAM authentication via ChallengeResponseAuthentication may bypass
|
||||
# the setting of "PermitRootLogin without-password".
|
||||
# If you just want the PAM account and session checks to run without
|
||||
# PAM authentication, then enable this but set PasswordAuthentication
|
||||
# and ChallengeResponseAuthentication to 'no'.
|
||||
#UsePAM yes
|
||||
|
||||
#AllowAgentForwarding yes
|
||||
#AllowTcpForwarding yes
|
||||
#GatewayPorts no
|
||||
#X11Forwarding yes
|
||||
#X11DisplayOffset 10
|
||||
#X11UseLocalhost yes
|
||||
#PermitTTY yes
|
||||
#PrintMotd yes
|
||||
#PrintLastLog yes
|
||||
#TCPKeepAlive yes
|
||||
#PermitUserEnvironment no
|
||||
#Compression delayed
|
||||
#ClientAliveInterval 0
|
||||
#ClientAliveCountMax 3
|
||||
#UseDNS yes
|
||||
#PidFile /var/run/sshd.pid
|
||||
#MaxStartups 10:30:100
|
||||
#PermitTunnel no
|
||||
#ChrootDirectory none
|
||||
#UseBlacklist no
|
||||
#VersionAddendum FreeBSD-20200214
|
||||
|
||||
# no default banner path
|
||||
#Banner none
|
||||
|
||||
# override default of no subsystems
|
||||
Subsystem sftp /usr/libexec/sftp-server
|
||||
|
||||
# Example of overriding settings on a per-user basis
|
||||
#Match User anoncvs
|
||||
# X11Forwarding no
|
||||
# AllowTcpForwarding no
|
||||
# PermitTTY no
|
||||
# ForceCommand cvs server
|
||||
@ -1,13 +0,0 @@
|
||||
# $FreeBSD: head/sbin/sysctl/sysctl.conf 337624 2018-08-11 13:28:03Z brd $
|
||||
#
|
||||
# This file is read when going to multi-user and its contents piped thru
|
||||
# ``sysctl'' to adjust kernel values. ``man 5 sysctl.conf'' for details.
|
||||
#
|
||||
|
||||
# Uncomment this to prevent users from seeing information about processes that
|
||||
# are being run under another UID.
|
||||
#security.bsd.see_other_uids=0
|
||||
|
||||
net.link.bridge.pfil_bridge=0
|
||||
net.link.bridge.pfil_member=0
|
||||
net.link.bridge.pfil_onlyip=0
|
||||
@ -119,6 +119,6 @@
|
||||
# the -h option and/or read the driver's documentation.
|
||||
[ups]
|
||||
driver = usbhid-ups
|
||||
port = /dev/ugen0.6
|
||||
port = /dev/ugen0.7
|
||||
desc = ""
|
||||
pollonly
|
||||
|
||||
@ -1,30 +0,0 @@
|
||||
#############################################################################
|
||||
# Copyright (c) 2010-2014 Balabit
|
||||
#
|
||||
# This program is free software; you can redistribute it and/or modify it
|
||||
# under the terms of the GNU General Public License version 2 as published
|
||||
# by the Free Software Foundation, or (at your option) any later version.
|
||||
#
|
||||
# This program is distributed in the hope that it will be useful,
|
||||
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
# GNU General Public License for more details.
|
||||
#
|
||||
# You should have received a copy of the GNU General Public License
|
||||
# along with this program; if not, write to the Free Software
|
||||
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
|
||||
#
|
||||
# As an additional exemption you are allowed to compile & link against the
|
||||
# OpenSSL libraries as published by the OpenSSL project. See the file
|
||||
# COPYING for details.
|
||||
#
|
||||
#############################################################################
|
||||
#
|
||||
# This file is placed into /etc/syslog-ng in order to make it trivial to
|
||||
# include in user written syslog-ng.conf files. It sets up 'scl-root' and
|
||||
# `include-path`, then includes all SCL supplied plugins.
|
||||
#
|
||||
|
||||
@include 'scl/*/*.conf'
|
||||
|
||||
@define java-module-dir "`module-install-dir`/java-modules"
|
||||
@ -1,185 +0,0 @@
|
||||
@version:3.25
|
||||
@include "scl.conf"
|
||||
|
||||
#
|
||||
# This sample configuration file is essentially equilivent to the stock
|
||||
# FreeBSD /etc/syslog.conf file.
|
||||
#
|
||||
# $FreeBSD: head/sysutils/syslog-ng/files/syslog-ng.conf.sample 340872 2014-01-24 00:14:07Z mat $
|
||||
#
|
||||
|
||||
#
|
||||
# options
|
||||
#
|
||||
options { chain_hostnames(off); flush_lines(0); threaded(yes); };
|
||||
|
||||
#
|
||||
# sources
|
||||
#
|
||||
source src { system();
|
||||
udp(); internal(); };
|
||||
|
||||
#
|
||||
# destinations
|
||||
#
|
||||
destination messages { file("/var/log/messages"); };
|
||||
destination security { file("/var/log/security"); };
|
||||
destination authlog { file("/var/log/auth.log"); };
|
||||
destination maillog { file("/var/log/maillog"); };
|
||||
destination lpd-errs { file("/var/log/lpd-errs"); };
|
||||
destination xferlog { file("/var/log/xferlog"); };
|
||||
destination cron { file("/var/log/cron"); };
|
||||
destination debuglog { file("/var/log/debug.log"); };
|
||||
destination consolelog { file("/var/log/console.log"); };
|
||||
destination all { file("/var/log/all.log"); };
|
||||
destination newscrit { file("/var/log/news/news.crit"); };
|
||||
destination newserr { file("/var/log/news/news.err"); };
|
||||
destination newsnotice { file("/var/log/news/news.notice"); };
|
||||
destination slip { file("/var/log/slip.log"); };
|
||||
destination ppp { file("/var/log/ppp.log"); };
|
||||
destination console { file("/dev/console"); };
|
||||
destination allusers { usertty("*"); };
|
||||
#destination loghost { udp("loghost" port(514)); };
|
||||
|
||||
#
|
||||
# log facility filters
|
||||
#
|
||||
filter f_auth { facility(auth); };
|
||||
filter f_authpriv { facility(authpriv); };
|
||||
filter f_not_authpriv { not facility(authpriv); };
|
||||
#filter f_console { facility(console); };
|
||||
filter f_cron { facility(cron); };
|
||||
filter f_daemon { facility(daemon); };
|
||||
filter f_ftp { facility(ftp); };
|
||||
filter f_kern { facility(kern); };
|
||||
filter f_lpr { facility(lpr); };
|
||||
filter f_mail { facility(mail); };
|
||||
filter f_news { facility(news); };
|
||||
filter f_security { facility(security); };
|
||||
filter f_user { facility(user); };
|
||||
filter f_uucp { facility(uucp); };
|
||||
filter f_local0 { facility(local0); };
|
||||
filter f_local1 { facility(local1); };
|
||||
filter f_local2 { facility(local2); };
|
||||
filter f_local3 { facility(local3); };
|
||||
filter f_local4 { facility(local4); };
|
||||
filter f_local5 { facility(local5); };
|
||||
filter f_local6 { facility(local6); };
|
||||
filter f_local7 { facility(local7); };
|
||||
|
||||
#
|
||||
# log level filters
|
||||
#
|
||||
filter f_emerg { level(emerg); };
|
||||
filter f_alert { level(alert..emerg); };
|
||||
filter f_crit { level(crit..emerg); };
|
||||
filter f_err { level(err..emerg); };
|
||||
filter f_warning { level(warning..emerg); };
|
||||
filter f_notice { level(notice..emerg); };
|
||||
filter f_info { level(info..emerg); };
|
||||
filter f_debug { level(debug..emerg); };
|
||||
filter f_is_debug { level(debug); };
|
||||
|
||||
#
|
||||
# program filters
|
||||
#
|
||||
filter f_ppp { program("ppp"); };
|
||||
filter f_slip { program("startslip"); };
|
||||
|
||||
#
|
||||
# *.err;kern.warning;auth.notice;mail.crit /dev/console
|
||||
#
|
||||
log { source(src); filter(f_err); destination(console); };
|
||||
log { source(src); filter(f_kern); filter(f_warning); destination(console); };
|
||||
log { source(src); filter(f_auth); filter(f_notice); destination(console); };
|
||||
log { source(src); filter(f_mail); filter(f_crit); destination(console); };
|
||||
|
||||
#
|
||||
# *.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err /var/log/messages
|
||||
#
|
||||
log { source(src); filter(f_notice); filter(f_not_authpriv); destination(messages); };
|
||||
log { source(src); filter(f_kern); filter(f_debug); destination(messages); };
|
||||
log { source(src); filter(f_lpr); filter(f_info); destination(messages); };
|
||||
log { source(src); filter(f_mail); filter(f_crit); destination(messages); };
|
||||
log { source(src); filter(f_news); filter(f_err); destination(messages); };
|
||||
|
||||
#
|
||||
# security.* /var/log/security
|
||||
#
|
||||
log { source(src); filter(f_security); destination(security); };
|
||||
|
||||
#
|
||||
# auth.info;authpriv.info /var/log/auth.log
|
||||
log { source(src); filter(f_auth); filter(f_info); destination(authlog); };
|
||||
log { source(src); filter(f_authpriv); filter(f_info); destination(authlog); };
|
||||
|
||||
#
|
||||
# mail.info /var/log/maillog
|
||||
#
|
||||
log { source(src); filter(f_mail); filter(f_info); destination(maillog); };
|
||||
|
||||
#
|
||||
# lpr.info /var/log/lpd-errs
|
||||
#
|
||||
log { source(src); filter(f_lpr); filter(f_info); destination(lpd-errs); };
|
||||
|
||||
#
|
||||
# ftp.info /var/log/xferlog
|
||||
#
|
||||
log { source(src); filter(f_ftp); filter(f_info); destination(xferlog); };
|
||||
|
||||
#
|
||||
# cron.* /var/log/cron
|
||||
#
|
||||
log { source(src); filter(f_cron); destination(cron); };
|
||||
|
||||
#
|
||||
# *.=debug /var/log/debug.log
|
||||
#
|
||||
log { source(src); filter(f_is_debug); destination(debuglog); };
|
||||
|
||||
#
|
||||
# *.emerg *
|
||||
#
|
||||
log { source(src); filter(f_emerg); destination(allusers); };
|
||||
|
||||
#
|
||||
# uncomment this to log all writes to /dev/console to /var/log/console.log
|
||||
# console.info /var/log/console.log
|
||||
#
|
||||
#log { source(src); filter(f_console); filter(f_info); destination(consolelog); };
|
||||
|
||||
#
|
||||
# uncomment this to enable logging of all log messages to /var/log/all.log
|
||||
# touch /var/log/all.log and chmod it to mode 600 before it will work
|
||||
# *.* /var/log/all.log
|
||||
#
|
||||
#log { source(src); destination(all); };
|
||||
|
||||
#
|
||||
# uncomment this to enable logging to a remote loghost named loghost
|
||||
# *.* @loghost
|
||||
#
|
||||
#log { source(src); destination(loghost); };
|
||||
|
||||
#
|
||||
# uncomment these if you're running inn
|
||||
# news.crit /var/log/news/news.crit
|
||||
# news.err /var/log/news/news.err
|
||||
# news.notice /var/log/news/news.notice
|
||||
#
|
||||
#log { source(src); filter(f_news); filter(f_crit); destination(newscrit); };
|
||||
#log { source(src); filter(f_news); filter(f_err); destination(newserr); };
|
||||
#log { source(src); filter(f_news); filter(f_notice); destination(newsnotice); };
|
||||
|
||||
#
|
||||
# !startslip
|
||||
# *.* /var/log/slip.log
|
||||
#
|
||||
log { source(src); filter(f_slip); destination(slip); };
|
||||
|
||||
#
|
||||
# !ppp
|
||||
# *.* /var/log/ppp.log
|
||||
#
|
||||
log { source(src); filter(f_ppp); destination(ppp); };
|
||||
Reference in New Issue
Block a user