Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 Aug 2005 12:21:05 -0600
From:      Scott Long <scottl@samsco.org>
To:        obrien@FreeBSD.org
Cc:        John-Mark Gurney <gurney_j@resnet.uoregon.edu>, src-committers@FreeBSD.org, Pawel Jakub Dawidek <pjd@FreeBSD.org>, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org, Robert Watson <rwatson@FreeBSD.org>
Subject:   Re: cvs commit: src/lib/libutil Makefile libutil.h pidfile.3 pidfile.c
Message-ID:  <430F5D91.30701@samsco.org>
In-Reply-To: <20050826181815.GA56936@dragon.NUXI.org>
References:  <200508241721.j7OHLcNP061118@repoman.freebsd.org> <20050825060448.Q11335@fledge.watson.org> <20050825154354.GE30465@funkthat.com> <20050826181815.GA56936@dragon.NUXI.org>

next in thread | previous in thread | raw e-mail | index | archive | help
David O'Brien wrote:
> On Thu, Aug 25, 2005 at 08:43:54AM -0700, John-Mark Gurney wrote:
> 
>>Robert Watson wrote this message on Thu, Aug 25, 2005 at 06:05 +0100:
>>
>>>On Wed, 24 Aug 2005, Pawel Jakub Dawidek wrote:
>>>
>>>
>>>>pjd         2005-08-24 17:21:38 UTC
>>>>
>>>>FreeBSD src repository
>>>>
>>>>Modified files:
>>>>  lib/libutil          Makefile libutil.h
>>>>Added files:
>>>>  lib/libutil          pidfile.3 pidfile.c
>>>>Log:
>>>>Add a family of functions for reliable pidfiles handling.
>>>>
>>>>Idea from:      jmg
>>>>Discussed on:   arch@
>>>
>>>Something I'd very much like to see is for daemon pid files to start being 
>>>placed in /var/run/<daemon>/<daemon>.pid, as opposed to directly in 
>>>/var/run.  This will allow us to set specific ownership on the parent 
>>>directory for a pid file, so that privilege is not required to write out a 
>>>pid file in a safe place.
> 
> 
> Yuck!  Directory hell to find information.
>  
> 
>>why not add an rc.subr option to precreate the file with the correct
>>user?  I was running up conserver, and I decided to run it as a seperate
>>user, and since I created it as owned by the conserver user, conserver
>>just opened and wrote to the file..
>>just a thought...
> 
> 
> I like this thought better and feel its more along traditional ways.
> 

I think that Robert is thinking beyond the traditional user:group 
protection model of Unix and towards the much more powerful and flexible
MAC protection model.

Scott



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?430F5D91.30701>