Date: Wed, 19 Sep 2012 15:00:47 +0200 From: Gareth de Vaux <bsd@lordcow.org> To: questions@freebsd.org Cc: stable@freebsd.org Subject: Re: schg flags from installworld Message-ID: <20120919130047.GA61682@lordcow.org> In-Reply-To: <20120918213128.GA43131@lordcow.org> References: <20120918093057.GA20095@lordcow.org> <20120918213128.GA43131@lordcow.org>
next in thread | previous in thread | raw e-mail | index | archive | help
On Tue 2012-09-18 (23:31), Gareth de Vaux wrote: > Looking at /usr/src/share/mk/bsd.prog.mk and /usr/src/share/mk/bsd.lib.mk - > bins and libs get installed with schg if PRECIOUSPROG and PRECIOUSLIB are > set respectively in their makefiles, both of which can be overridden by > setting NO_FSCHG, presumably in /etc/make.conf. > > Without this doing jail maintenance/upgrades is a nightmare on a host with > a securelevel of 1 but I haven't seen this mentioned anywhere. For the record the override works, except with /usr/bin/passwd. There seems to be a missing 'if !defined(NO_FSCHG)' condition around the afterinstall in /usr/src/usr.bin/passwd/Makefile.
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20120919130047.GA61682>