From owner-freebsd-stable@freebsd.org  Wed Sep 23 18:57:19 2015
Return-Path: <owner-freebsd-stable@freebsd.org>
Delivered-To: freebsd-stable@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 78912A070BC
 for <freebsd-stable@mailman.ysv.freebsd.org>;
 Wed, 23 Sep 2015 18:57:19 +0000 (UTC) (envelope-from bc979@lafn.org)
Received: from mailman.ysv.freebsd.org (mailman.ysv.freebsd.org
 [IPv6:2001:1900:2254:206a::50:5])
 by mx1.freebsd.org (Postfix) with ESMTP id 6285D1AF5
 for <freebsd-stable@freebsd.org>; Wed, 23 Sep 2015 18:57:19 +0000 (UTC)
 (envelope-from bc979@lafn.org)
Received: by mailman.ysv.freebsd.org (Postfix)
 id 5EE2DA070BB; Wed, 23 Sep 2015 18:57:19 +0000 (UTC)
Delivered-To: stable@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 5E736A070B9
 for <stable@mailman.ysv.freebsd.org>; Wed, 23 Sep 2015 18:57:19 +0000 (UTC)
 (envelope-from bc979@lafn.org)
Received: from zoom.lafn.org (zoom.lafn.org [108.92.93.123])
 by mx1.freebsd.org (Postfix) with ESMTP id 3C5941AF4
 for <stable@freebsd.org>; Wed, 23 Sep 2015 18:57:19 +0000 (UTC)
 (envelope-from bc979@lafn.org)
Received: from [10.0.1.12] (static-71-177-216-148.lsanca.fios.verizon.net
 [71.177.216.148]) (authenticated bits=0)
 by zoom.lafn.org (8.14.7/8.14.9) with ESMTP id t8NIvF7K012444
 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
 Wed, 23 Sep 2015 11:57:17 -0700 (PDT) (envelope-from bc979@lafn.org)
Content-Type: text/plain; charset=utf-8
Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\))
Subject: Re: when the sshd hits the fan
From: Doug Hardie <bc979@lafn.org>
In-Reply-To: <20150923104454.GG36682@home.opsec.eu>
Date: Wed, 23 Sep 2015 11:57:14 -0700
Cc: FreeBSD Stable ML <stable@freebsd.org>
Content-Transfer-Encoding: quoted-printable
Message-Id: <90575EE7-D525-4BCF-9914-CCDBB43CC5D4@lafn.org>
References: <56026686.8030308@norma.perm.ru>
 <8CC54339-0028-4CE4-9AAD-2248CD4E2FC9@lafn.org>
 <20150923104454.GG36682@home.opsec.eu>
To: Kurt Jaeger <lists@opsec.eu>
X-Mailer: Apple Mail (2.2104)
X-Virus-Scanned: clamav-milter 0.98 at zoom.lafn.org
X-Virus-Status: Clean
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: Production branch of FreeBSD source code <freebsd-stable.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-stable>, 
 <mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable/>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
 <mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 23 Sep 2015 18:57:19 -0000


> On 23 September 2015, at 03:44, Kurt Jaeger <lists@opsec.eu> wrote:
>=20
> Hi!
>=20
>>> I'm trying to understand why the sshd still starts after local =
daemons,
>>> out-of-the-box, and what it takes to make this extremely vital =
service
>>> to start before non-system (local) ones. I bet I'm not the first one =
to
>>> ask, so why isn't this already done ? Seems quite easy for me.
>>=20
>> The fix is quite simple:  Add
>>=20
>> # BEFORE: mail
>>=20
>> to /etc/rc.d/sshd
>>=20
>> I tried to submit a PR on that about a year ago, but it never
>> seemed to make it into the PR system.
>=20
> It did enter the PR system.
>=20
> https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D190447
>=20
> I'll have a look at it, it annoys me as well 8-}

Thanks.  I never could find that PR in the database.  Guess I don=E2=80=99=
t quite understand how to successfully search it ;-)