Date: Wed, 6 Oct 2004 16:48:28 -0700 From: Peter Wemm <peter@wemm.org> To: Doug Barton <DougB@FreeBSD.org> Cc: cvs-src@freebsd.org Subject: Re: cvs commit: src/etc Makefile Message-ID: <200410061648.28445.peter@wemm.org> In-Reply-To: <20041005164914.U3095@bo.vpnaa.bet> References: <200410051303.i95D38Nl047864@repoman.freebsd.org> <20041005230204.5401f0be@dev.lan.Awfulhak.org> <20041005164914.U3095@bo.vpnaa.bet>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tuesday 05 October 2004 04:57 pm, Doug Barton wrote:
> On Tue, 5 Oct 2004, Brian Somers wrote:
> > On Tue, 5 Oct 2004 20:20:56 +0300, Ruslan Ermilov <ru@freebsd.org>
wrote:
> >>> Shouldn't this be:
> >>>
> >>> ln -fhs ../var/named/etc/namedb ${DESTDIR}/etc/namedb
> >>
> >> No.
> >
> > If I mount an alternate filesystem hierarchy somewhere, isn't it a
> > bit useless/dangerous for symlinks to point outside of it?
>
> The attached patch combines the best of the various ideas that have
> been disucssed on this topic.
>
> 1. Incorporates Ruslan's improvements to where things are done
> related to the symlink in src/etc/Makefile.
>
> 2. Incorporates Brian's suggestion to make the link relative. This is
> the best way I can see to make it work as expected in all cases,
> including complete alternate filesystems. It should also solve the
> release engineering problem.
>
> 3. Add a new knob, NO_BIND_MTREE, as suggested by the folks who
> already have stuff in /var/named that they don't want me to mess
> with. :)
>
> 4. Updates make.conf(5) with the new stuff, and corrects a few paths
> that have changed since I last updated it.
>
> If everyone finds this acceptable, I will commit it, and then ask re@
> for permission to MFC it, hopefully before 5-RC1.
>
> Thanks to everyone who contributed to this train of thought.
>
> Doug
I still hate the whole thing. Why can't we have a 'BIND_NO_CHROOT' flag
or something like that which puts things in the original place? I
tinkered around with it before, it wasn't hard to do. As a bonus, it
stops mergemaster from trying to destroy a working setup and makes it
update things in the usual place. I was also intending to experiment
with having the BIND_NO_CHROOT flag propagate to defaults/rc.conf so
that it only needs to be set in a single place.
BTW: the reason I hate this is because I mount /var rw,noexec,nodev on
my gateway boxes, and everything else readonly after boot.
--
Peter Wemm - peter@wemm.org; peter@FreeBSD.org; peter@yahoo-inc.com
"All of this is for nothing if we don't go to the stars" - JMS/B5
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200410061648.28445.peter>