From owner-cvs-ports  Thu Apr 25 00:13:18 1996
Return-Path: owner-cvs-ports
Received: (from root@localhost)
          by freefall.freebsd.org (8.7.3/8.7.3) id AAA21933
          for cvs-ports-outgoing; Thu, 25 Apr 1996 00:13:18 -0700 (PDT)
Received: from GndRsh.aac.dev.com (GndRsh.aac.dev.com [198.145.92.241])
          by freefall.freebsd.org (8.7.3/8.7.3) with SMTP id AAA21926
          Thu, 25 Apr 1996 00:13:12 -0700 (PDT)
Received: (from rgrimes@localhost) by GndRsh.aac.dev.com (8.6.12/8.6.12) id AAA07136; Thu, 25 Apr 1996 00:12:05 -0700
From: "Rodney W. Grimes" <rgrimes@GndRsh.aac.dev.com>
Message-Id: <199604250712.AAA07136@GndRsh.aac.dev.com>
Subject: Re: cvs commit: ports/net/socks5 Makefile
To: peter@jhome.DIALix.COM (Peter Wemm)
Date: Thu, 25 Apr 1996 00:12:05 -0700 (PDT)
Cc: pst@freefall.freebsd.org, CVS-committers@freefall.freebsd.org,
        cvs-all@freefall.freebsd.org, cvs-ports@freefall.freebsd.org
In-Reply-To: <199604250334.LAA00412@jhome.DIALix.COM> from Peter Wemm at "Apr 25, 96 11:34:57 am"
X-Mailer: ELM [version 2.4ME+ PL11 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-cvs-ports@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> >> pst         96/04/24 11:31:24
> >> 
> >>   Modified:    net/socks5  Makefile
> >>   Log:
> >>   Incorporate Doug's port changes
> >
> >If this includes moving the config files from /usr/local/etc to /etc
> >it violates the porting requirements layed out for FreeBSD ports collections.
> 
> >-- 
> >Rod Grimes                                      rgrimes@gndrsh.aac.dev.com
> >Accurate Automation Company                 Reliable computers for FreeBSD
> 
> Incidently, I'm not happy with this part of the porting rules.
> 
> Everything under /usr is supposed to be able to be network shared, and some
> ports put stuff in /usr/local/etc which cannot be shared under any
> circumstances (eg: ssh).

I fully appreciate your point that /usr/local/etc is not shareable under
some conditions, but I don't remeber any contraint any place that says
``everything under /usr is supposed to be sharable'', perhaps /usr/share,
but not /usr as a whole.

> I think it would be better to have a twiddle-able knob somewhere that makes
> security sensative and/or implicitly "per-host" stuff go to /etc somewhere
> rather than /usr/local/etc.

mv /usr/local/etc /usr/local/etc.shareable; ln -s /var/etc /usr/local/etc

After all, /usr/local is a per site policy administration place, and above
is just how I would solve your concerns about the shareability of
/usr/local/etc.

Same way I basically handle a shared / and /etc, and /usr/X11R6 with
symlinks through /var.

> 
> Note that I'm not asking for this to be the default (like NOMANCOMPRESS,
> this would make packaging a nightmare), what I'm suggesting is
> something like a /etc/make.conf variable which defaults something like:
> PORTS_LOCALETCDIR=$(PREFIX)/etc
> .. and have things like ssh, socks5, tcp_wrappers, etc use that.  Then
> people like me who want to be able to share /usr and/or /usr/local can
> simply set it to: PORTS_LOCALETCDIR=/etc  (or /etc/ports, whatever).

The knob already exists, links are your god send for solving this type
of stuff.  Now if I could ever find time to go implement variant symbolic
links ala Apollo Aegis and protected environment variables from the same
OS I could show you some really slick things.... like tri universes that
don't create a royal mess of file system hierarchies and still work correctly.

> Of course, the variable names are just for the illustration, I'm sure
> there are better names.

Whats in a name anyway... 

> Heresy?
> 
> Cheers,
> -Peter
> 


-- 
Rod Grimes                                      rgrimes@gndrsh.aac.dev.com
Accurate Automation Company                 Reliable computers for FreeBSD