From owner-freebsd-arch@FreeBSD.ORG  Mon Oct  3 11:24:56 2005
Return-Path: <owner-freebsd-arch@FreeBSD.ORG>
X-Original-To: freebsd-arch@FreeBSD.org
Delivered-To: freebsd-arch@FreeBSD.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 9358616A41F;
	Mon,  3 Oct 2005 11:24:56 +0000 (GMT)
	(envelope-from ume@mahoroba.org)
Received: from ameno.mahoroba.org (gw4.mahoroba.org [218.45.22.175])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0307143D48;
	Mon,  3 Oct 2005 11:24:53 +0000 (GMT)
	(envelope-from ume@mahoroba.org)
Received: from kasuga.mahoroba.org
	(IDENT:yOjf9xyGwCSRXhYjqbKoJegWENNcnpfqgl4UMtCC4P8aAG5LDxbUv8ctqKxR53Bt@kasuga-iwi.mahoroba.org
	[IPv6:3ffe:501:185b:8010:212:f0ff:fe52:6ac])
	(user=ume mech=CRAM-MD5 bits=0)
	by ameno.mahoroba.org (8.13.4/8.13.4) with ESMTP/inet6 id
	j93BOTLF088293
	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
	Mon, 3 Oct 2005 20:24:31 +0900 (JST) (envelope-from ume@mahoroba.org)
Date: Mon, 03 Oct 2005 20:24:28 +0900
Message-ID: <ygell1azvv7.wl%ume@mahoroba.org>
From: Hajimu UMEMOTO <ume@FreeBSD.org>
To: Pawel Jakub Dawidek <pjd@FreeBSD.org>
In-Reply-To: <20051003100440.GB3794@garage.freebsd.pl>
References: <20051003100440.GB3794@garage.freebsd.pl>
User-Agent: xcite1.38> Wanderlust/2.14.0 (Africa) SEMI/1.14.6 (Maruoka)
	FLIM/1.14.7 (=?ISO-8859-4?Q?Sanj=F2?=) APEL/10.6 Emacs/22.0.50
	(i386-unknown-freebsd6.0) MULE/5.0 (SAKAKI)
X-Operating-System: FreeBSD 6.0-BETA5
X-PGP-Key: http://www.imasy.or.jp/~ume/publickey.asc
X-PGP-Fingerprint: 1F00 0B9E 2164 70FC 6DC5  BF5F 04E9 F086 BF90 71FE
Organization: Internet Mutual Aid Society, YOKOHAMA
MIME-Version: 1.0 (generated by SEMI 1.14.6 - "Maruoka")
Content-Type: text/plain; charset=US-ASCII
X-Greylist: Sender succeeded SMTP AUTH authentication, not delayed by
	milter-greylist-2.0 (ameno.mahoroba.org
	[IPv6:3ffe:501:185b:8010::1]);
	Mon, 03 Oct 2005 20:24:35 +0900 (JST)
X-Virus-Scanned: by amavisd-new
X-Virus-Status: Clean
X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham 
	version=3.1.0
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on ameno.mahoroba.org
Cc: Tomasz =?ISO-8859-2?Q?Pi=B3at?= <tomasz.pilat@axelspringer.pl>,
	freebsd-arch@FreeBSD.org
Subject: Re: Moving /usr/sbin/setkey to /sbin/setkey.
X-BeenThere: freebsd-arch@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Discussion related to FreeBSD architecture <freebsd-arch.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-arch>
List-Post: <mailto:freebsd-arch@freebsd.org>
List-Help: <mailto:freebsd-arch-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-arch>,
	<mailto:freebsd-arch-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 03 Oct 2005 11:24:56 -0000

Hi,

>>>>> On Mon, 3 Oct 2005 12:04:41 +0200
>>>>> Pawel Jakub Dawidek <pjd@FreeBSD.org> said:

pjd> I'd like to move setkey from /usr/sbin/ to /sbin/.

pjd> Currently, rc.d/mountcritremote is called before rc.d/ipsec, because
pjd> someone which want to use setkey(8) can have /usr/ NFS-mounted.
pjd> Because of this, one cannot protect NFS mounts with IPsec.

pjd> Moving setkey(8) (like NetBSD did, AFAIK) to /sbin/ and changing the
pjd> order of rc.d/mountcritremote and rc.d/setkey should solve this
pjd> chicken-and-egg problem.

pjd> Any objections?

pjd> PRs:	conf/58832 conf/72135

Yes, it should be done.

Sincerely,

--
Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
ume@mahoroba.org  ume@{,jp.}FreeBSD.org
http://www.imasy.org/~ume/