Date: Mon, 03 Oct 2005 20:24:28 +0900 From: Hajimu UMEMOTO <ume@FreeBSD.org> To: Pawel Jakub Dawidek <pjd@FreeBSD.org> Cc: Tomasz =?ISO-8859-2?Q?Pi=B3at?= <tomasz.pilat@axelspringer.pl>, freebsd-arch@FreeBSD.org Subject: Re: Moving /usr/sbin/setkey to /sbin/setkey. Message-ID: <ygell1azvv7.wl%ume@mahoroba.org> In-Reply-To: <20051003100440.GB3794@garage.freebsd.pl> References: <20051003100440.GB3794@garage.freebsd.pl>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
>>>>> On Mon, 3 Oct 2005 12:04:41 +0200
>>>>> Pawel Jakub Dawidek <pjd@FreeBSD.org> said:
pjd> I'd like to move setkey from /usr/sbin/ to /sbin/.
pjd> Currently, rc.d/mountcritremote is called before rc.d/ipsec, because
pjd> someone which want to use setkey(8) can have /usr/ NFS-mounted.
pjd> Because of this, one cannot protect NFS mounts with IPsec.
pjd> Moving setkey(8) (like NetBSD did, AFAIK) to /sbin/ and changing the
pjd> order of rc.d/mountcritremote and rc.d/setkey should solve this
pjd> chicken-and-egg problem.
pjd> Any objections?
pjd> PRs: conf/58832 conf/72135
Yes, it should be done.
Sincerely,
--
Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
ume@mahoroba.org ume@{,jp.}FreeBSD.org
http://www.imasy.org/~ume/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ygell1azvv7.wl%ume>