From owner-freebsd-net@FreeBSD.ORG Tue Feb 14 21:52:34 2006 Return-Path: X-Original-To: freebsd-net@freebsd.org Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9EDA216A420; Tue, 14 Feb 2006 21:52:34 +0000 (GMT) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (Odin.AC.HMC.Edu [134.173.32.75]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2E0DC43D48; Tue, 14 Feb 2006 21:52:34 +0000 (GMT) (envelope-from brdavis@odin.ac.hmc.edu) Received: from odin.ac.hmc.edu (localhost.localdomain [127.0.0.1]) by odin.ac.hmc.edu (8.13.0/8.13.0) with ESMTP id k1ELqXE6023836; Tue, 14 Feb 2006 13:52:33 -0800 Received: (from brdavis@localhost) by odin.ac.hmc.edu (8.13.0/8.13.0/Submit) id k1ELqX2D023835; Tue, 14 Feb 2006 13:52:33 -0800 Date: Tue, 14 Feb 2006 13:52:33 -0800 From: Brooks Davis To: Doug Barton Message-ID: <20060214215233.GA23444@odin.ac.hmc.edu> References: <20060213173008.GA14643@totem.fix.no> <20060214090531.X5083@beagle.kn.op.dlr.de> <20060214083010.GB41864@totem.fix.no> <20060214093513.F5083@beagle.kn.op.dlr.de> <20060214084459.GL86448@cell.sick.ru> <20060214103723.GA45138@totem.fix.no> <20060214103901.GB68308@cell.sick.ru> <20060214105821.GA47035@totem.fix.no> <20060214154833.I5083@beagle.kn.op.dlr.de> <43F24880.3040208@FreeBSD.org> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="wac7ysb48OaltWcw" Content-Disposition: inline In-Reply-To: <43F24880.3040208@FreeBSD.org> User-Agent: Mutt/1.4.1i X-Virus-Scanned: by amavisd-new X-Spam-Status: No, hits=0.0 required=8.0 tests=none autolearn=no version=2.63 X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on odin.ac.hmc.edu Cc: Anders Nordby , Harti Brandt , kuriyama@freebsd.org, freebsd-net@freebsd.org, demon@freebsd.org Subject: Re: bsnmpd X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 14 Feb 2006 21:52:34 -0000 --wac7ysb48OaltWcw Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Feb 14, 2006 at 01:15:44PM -0800, Doug Barton wrote: > Harti Brandt wrote: > > On Tue, 14 Feb 2006, Anders Nordby wrote: >=20 > > AN>- Ability to chroot itself (yes please, for security). > >=20 > > I don't have enough rc-foo for this. Perhaps someone can jump in here? >=20 > This actually isn't all that hard. Basically you set $name_chroot to the > directory it should chroot too. It's also a good idea to include that > directory in required_dirs. If the bsnmpd binary has it's own chroot comm= and > line option, take a look at how rc.d/named does it in HEAD. Otherwise, th= ere > are notes in /etc/rc.subr and, the freebsd-rc@ list stands ready to help.= :) and don't follow the example in /etc/rc.d/ntpd since it can't work with modern versions of devfs. -- Brooks --=20 Any statement of the form "X is the one, true Y" is FALSE. PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4 --wac7ysb48OaltWcw Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.1 (GNU/Linux) iD8DBQFD8lEgXY6L6fI4GtQRAs1aAJ9MeEWWAogEjbU/QC+wjjhwNziWJgCeMosP Y2b4pvQYJTkEDRzUL+hyboo= =heZp -----END PGP SIGNATURE----- --wac7ysb48OaltWcw--