Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 2 Mar 2005 08:35:48 -0800
From:      Brooks Davis <brooks@one-eyed-alien.net>
To:        Ruslan Ermilov <ru@FreeBSD.org>
Cc:        cvs-all@FreeBSD.org
Subject:   Re: cvs commit: src/etc Makefile
Message-ID:  <20050302163548.GB30001@odin.ac.hmc.edu>
In-Reply-To: <20050302072224.GB45034@ip.net.ua>
References:  <200503020044.j220idvx011665@repoman.freebsd.org> <20050302072224.GB45034@ip.net.ua>

next in thread | previous in thread | raw e-mail | index | archive | help

--i9LlY+UWpKt15+FH
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Wed, Mar 02, 2005 at 09:22:24AM +0200, Ruslan Ermilov wrote:
> Hi Brooks,
>=20
> On Wed, Mar 02, 2005 at 12:44:39AM +0000, Brooks Davis wrote:
> > brooks      2005-03-02 00:44:39 UTC
> >=20
> >   FreeBSD src repository
> >=20
> >   Modified files:
> >     etc                  Makefile=20
> >   Log:
> >   Remove a number of entries from the distribution target that are
> >   automaticly created at boot.  There's no need to maintain a list of
> >   files and permissions in multiple places.  This also means binary
> >   updates won't stomp on log files.
> >  =20
> >   For the record, utmp is created in etc/rc.d/cleanvar, wtmp and lastlog
> >   in etc/rc.d/var, and the reset via etc/rc.d/newsyslog.
> >  =20
> >   Revision  Changes    Path
> >   1.341     +0 -26     src/etc/Makefile
> >=20
> Has setting up jail(8) been considered (as per manpage)?

In truth, I didn't think about it much.  That said, it looks like we're
mostly OK because var isn't marked nojail so it will be run and these
files will be created.  It looks like there might be an issue for jails
that run a single application directly rather then running etc/rc, but
only if they use these files (certantly the syslog logs won't be used).
Someone more familiar with the jail(8) manpage might want add some notes
to this effect.  I don't want to add them to the main scriptlet because
they aren't necessicary if running a full blown system so I'm not sure
where in the flow they belong.  Basicly what needs to be done to restore
the previous state is after the "cd $D" do:

logs=3D"var/run/utmp var/log/wtmp var/log/lastlog"
touch $logs
chmod 644 $logs
newsyslog -d $D -f etc/newsyslog.conf -CN

-- Brooks

--=20
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

--i9LlY+UWpKt15+FH
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iD8DBQFCJetjXY6L6fI4GtQRAoe+AKDIQwmH3l8GPSRsJJ/Rmi5LuRtY1wCgyHct
EjvWoykRnoyhphRarfEC8BA=
=RcsK
-----END PGP SIGNATURE-----

--i9LlY+UWpKt15+FH--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050302163548.GB30001>