Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 23 May 2019 08:24:03 +0300
From:      Andriy Gapon <avg@FreeBSD.org>
To:        Ian Lepore <ian@freebsd.org>, src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org
Subject:   Re: svn commit: r336547 - in head/etc: defaults rc.d
Message-ID:  <123a85ed-8eff-a841-bec5-9af8e01b4b67@FreeBSD.org>
In-Reply-To: <64935b6f3beef7bde7a32b359187d998a480f258.camel@freebsd.org>
References:  <201807201359.w6KDxT1p087000@repo.freebsd.org> <6b966875-23f5-28cf-9e65-7c30974eef05@FreeBSD.org> <64935b6f3beef7bde7a32b359187d998a480f258.camel@freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On 23/05/2019 04:45, Ian Lepore wrote:
> Doh!  I use that pattern-removal technique all the time at $work, I
> wonder how many times I've committed this mistake and just haven't been
> burned by it yet?
> 
> Good catch, should be fixed by r348141.

Thank you!

> I'm curious though... it can only hit this condition if can_run_nonroot
> returns false, and it shouldn't do so on a freshly-installed system. 
> The idea was to make it run non-priv out of the box and only run as
> root if the admin had done something non-standard.  Does it make sense
> to you that it was running as root on your system?  Like have you
> customized ntp.conf to add some file-related commands?

I think that it could be because of a customer kernel without MAC.
I'll consider adding it.

-- 
Andriy Gapon



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?123a85ed-8eff-a841-bec5-9af8e01b4b67>