Date: Thu, 25 Aug 2005 09:55:01 -0700 From: Brooks Davis <brooks@one-eyed-alien.net> To: Robert Watson <rwatson@FreeBSD.org> Cc: cvs-src@FreeBSD.org, John-Mark Gurney <gurney_j@resnet.uoregon.edu>, src-committers@FreeBSD.org, Pawel Jakub Dawidek <pjd@FreeBSD.org>, cvs-all@FreeBSD.org Subject: Re: cvs commit: src/lib/libutil Makefile libutil.h pidfile.3 pidfile.c Message-ID: <20050825165501.GB29549@odin.ac.hmc.edu> In-Reply-To: <20050825171046.X72462@fledge.watson.org> References: <200508241721.j7OHLcNP061118@repoman.freebsd.org> <20050825060448.Q11335@fledge.watson.org> <20050825154354.GE30465@funkthat.com> <20050825171046.X72462@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --]
On Thu, Aug 25, 2005 at 05:12:04PM +0100, Robert Watson wrote:
>
> On Thu, 25 Aug 2005, John-Mark Gurney wrote:
>
> >>Something I'd very much like to see is for daemon pid files to start
> >>being placed in /var/run/<daemon>/<daemon>.pid, as opposed to directly
> >>in /var/run. This will allow us to set specific ownership on the
> >>parent directory for a pid file, so that privilege is not required to
> >>write out a pid file in a safe place.
> >
> >why not add an rc.subr option to precreate the file with the correct
> >user? I was running up conserver, and I decided to run it as a seperate
> >user, and since I created it as owned by the conserver user, conserver
> >just opened and wrote to the file..
>
> We already actually run bind with a pid file in /var/run/named. I'm not
> sure we need a whole lot of magic, other than having mtree create the
> directories for base system components, and packages/ports create them for
> third party components.
Ports and packages have to do this in their startup scripts because they
must assume /var contains nothing more then they get from:
b_populate_var()
{
/usr/sbin/mtree -deU -f /etc/mtree/BSD.var.dist -p /var > /dev/null
case ${sendmail_enable} in
[Nn][Oo][Nn][Ee])
;;
*)
/usr/sbin/mtree -deU -f /etc/mtree/BSD.sendmail.dist -p / > /dev/null
;;
esac
}
This is probably a good idea for system daemons, but I'm not sure
there's much point in encouraging it for ports.
-- Brooks
--
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529 9BF0 5D8E 8BE9 F238 1AD4
[-- Attachment #2 --]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQFDDfflXY6L6fI4GtQRAlbJAJ4oUgTZwVN8YiCnS6BO+JeXuRbZUgCgvuM9
leAfvajTVWKzDoJsbabLPQQ=
=gT3O
-----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050825165501.GB29549>