Date: Wed, 19 Dec 2012 23:43:45 +0000 From: "Robert N. M. Watson" <rwatson@FreeBSD.org> To: Bryan Drewery <bryan-lists@shatow.net> Cc: stable@FreeBSD.org Subject: Re: MFC: Distributed audit daemon committed (was: svn commit: r243752 - in head: etc etc/defaults etc/mail etc/mtree etc/rc.d share/man/man4 usr.sbin usr.sbin/auditdistd (fwd)) (fwd) Message-ID: <5416F71C-303F-4904-B87D-79F538573683@FreeBSD.org> In-Reply-To: <50D0B813.5030100@shatow.net> References: <alpine.BSF.2.00.1212181516250.99201@fledge.watson.org> <50D0B813.5030100@shatow.net>
index | next in thread | previous in thread | raw e-mail
On 18 Dec 2012, at 18:38, Bryan Drewery wrote: >> Just an FYI that the new distributed audit daemon has been MFC'd to >> 9-STABLE. >> >> As noted in UPDATING, you will need to run "mergemaster -p" before using >> installkernel or installworld targets in order to add the new >> "auditdistd" system user. This should be part of the regular update >> cycle anyway, but after the experience of adding auditdistd in >> 10-CURRENT, we've discovered that many people are skipping that step in >> the update cycle, so I figured it best to point out here. >> >> (Technically, only installworld requires the user, but the user-check >> guards in the system Makefiles are enforced for both targets.) > > Have you seen misc/174405? Apparently installkernel is requiring the > user as well. The documented process in UPDATING does not mention > running mergemaster -p before [install]kernel. Hi Bryan: I was not aware of the PR. However, yes, that was the point I was making in my e-mail -- that the Makefile seems to put the user check on installkernel and not just installworld. While I did MFC the change to add the 'auditdistd' user to the requirements list, I didn't originate that change, and agree that it's a "false positive". I hadn't originally planned to add an UPDATING entry, or Makefile dependency, as mergemaster -p is part of our standard upgrade procedure before installworld; however, I got a lot of complaints :-). I did also add an explicit URL pointing at the upgrade procedure in the handbook as part of UPDATING as a result. It would be useful if someone would make the necessary changes to the Makefile infrastructure to allow kernel vs. userspace install-time dependencies on users (and groups) separate. Roberthelp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5416F71C-303F-4904-B87D-79F538573683>