master
the master with comments in it is not that much of a good idea - if you enable amd in /etc/netstart by accident it will get very confused about all those comments - i removed it and put a sample master files there
regen
fix comment header for "Building ports with DPB uses raised limits" on amd64, in alignment with other sections in this file and all other archs
www/mozilla-firefox now needs more than 8GB of RAM to link libxul.so on arm64
mips64: Bump build datasize for LLVM 19
introduce a new build class to be used by the build user
Bump datasize of build user to 2000M on sparc64.
Use the new syntax, listen for accounting, and use file module.
allocate a uid/gid for lldpd to run with as an _lldpd user
add directory for gbm backends, used by newer Mesa
more missing rcs ids
bpflogd
root.mail: bump year, we're apparently in 2025
Add AS26597 to LACNIC allowlist
7.9 packages key
Use tset -I for all terminals, not just xterm.
Increase the default count of /dev/videoX from 2 to 4
Mention that the special files are created in the current working directory. Suggested by Scott Cheloha.
MAKEDEV.8 improvement pack: - refer to the section 4 manual page for every device target, whenever possible - repair a few minor quoting errors - repair a few sorting errors - fix a few device descriptions (ideally they would be synched with the .Nd line of their manpages, but we are not there... yet) - minor mdoc fixes
extra spaces
indentation whitespace nits (saves a few bytes even)
wire bpflogd in
whitespace found during review
back out addition of /etc/mail/secrets
document the flags field, and combine flags in the rpki example; ok deraadt
Support setting the new variable PASSWDSKIP in /etc/daily.local to prevent security(8) from complaining about specific accounts that have no password, typically used for services like anoncvs and gotd.
better description
do not use an old tty name; from graichen@axp5.physik.fu-berlin.de
No need to keep a manually maintained list of system daemons here, ftpd can disallow them itself. ok deraadt@ millert@, gsoares@ and aja@ like it too. ("nobody" still needs to be listed).
Almost all terminals now support hardware tabs so default to OXTABS off.
Remove default ls -C alias.
s/updatedb(8)/locate.updatedb(8)/ in comment
Now that makemap(8)/newaliases(8) are merged into smtpctl(8), update the paths.
install a /var/crash/minfree, of 4096, as suggested by david@city.ac.uk
Import regenerated moduli.
remove EOL whitespace
new motd
Revert previous as it doesn't create additional lo(4) anymore
increase lifetime of wtmp, since it is annoyingly short discussed with millert
Switch nsd control socket from localhost to a unix domain socket. OK sthen
Perform contraint validation against 9.9.9.9 and 2620:fe::fe also (which avoids DNS lookups entirely, but yes this https is correctly validated) long discussions with otto, florian, and the quad9 crew.
Disallow the _pbuild user from making TCP/UDP connections in the default PF ruleset. This is not a complete block on _pbuild being able to communicate (e.g. non-TCP/UDP protocols don't have a PCB with userid, so PF can't restrict in those cases) but avoids some cases, and in particular makes it more obvious when a port does things like download extra distfiles or dependencies as part of the build process. Slight tweak from a diff by espie@.
update pf.os for larger wscale by default
remove dup line; from j@bitminer
it's a tedu miracle! this file is just descriptions, so resurrect sprayd
Add jetdirect 9100/tcp to protect this from allocation because it will land in net.inet.tcp.baddynamic ok sthen
ftpd(8) allows users to connect when listed in /etc/ftpchroot too; this change has been suggested by form@ as a part of a larger issue we are looking at right now.
Change syslog.conf comments relating to network logging to focus on client setup which is configured in the file itself, rather than talking partly about client (set in the file), command-line flags used for servers which are better suited to the syslogd(8) manual, and ISDN.
use /bin/sh instead of /bin/ksh and add cvs id.
Remove commented-out edns-buffer-size section from the default unbound.conf.
do not propagate TMPDIR and override value from /etc/locate.rc in weekly effectively reverting r1.9 to follow principal of least surprise