Date: Sun, 2 Dec 2012 15:43:22 +0000 From: "Robert N. M. Watson" <rwatson@freebsd.org> To: Ryan Stone <rysto32@gmail.com> Cc: FreeBSD Current <freebsd-current@freebsd.org>, "O. Hartmann" <ohartman@zedat.fu-berlin.de>, Brooks Davis <brooks@freebsd.org> Subject: Re: Distributed audit daemon committed (was: svn commit: r243752 - in head: etc etc/defaults etc/mail etc/mtree etc/rc.d share/man/man4 usr.sbin usr.sbin/auditdistd (fwd)) Message-ID: <0857C6CA-31DF-441D-B30E-F7DB2492C213@freebsd.org> In-Reply-To: <CAFMmRNzu==GZ0-EPdB9Wz5MSnu=cvJUtd4_-wsPSxqykxTFySw@mail.gmail.com> References: <alpine.BSF.2.00.1212011512410.34256@fledge.watson.org> <50BA7158.1040302@fgznet.ch> <CADLo83-SJMdu7jagH-Ac_Ooc-LahDtL%2BEF-cRHiWsS9u64sxsA@mail.gmail.com> <50BB136F.4040509@zedat.fu-berlin.de> <alpine.BSF.2.00.1212021302390.55169@fledge.watson.org> <CAFMmRNzu==GZ0-EPdB9Wz5MSnu=cvJUtd4_-wsPSxqykxTFySw@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On 2 Dec 2012, at 15:34, Ryan Stone wrote: > On Sun, Dec 2, 2012 at 8:05 AM, Robert Watson <rwatson@freebsd.org> = wrote: >=20 > Just to follow up on this thread, since the question has come up a = number of times. "mergemaser -p" should be run prior to installworld = always, but most of the time will do very little. One of its = responsibilities is to add any necessary accounts and groups depended on = by base system components -- e.g., that will be referenced during = installworld as part of setting file ownership and groups. >=20 > I often use "make installworld installkernel distribution DESTDIR=3D..."= to create bootable images (e.g. for a USB stick). What's the = recommendation for that case? Manually create the auditdistd user on = the build host? Yes, that's probably the best short-term bet. In the longer term, it would be nice of installworld could not only = generate an mtree on the side rather than directly chmod/chowning the = files (Brooks Davis has patches for this), but also use UIDs/GIDs from a = user database directly rather than assuming that the host where you are = constructing the image has the same notion of users and groups. This is = especially important if we want to support cross-building embedded = images from Linux, Mac OS X, etc, in the future. Robert=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?0857C6CA-31DF-441D-B30E-F7DB2492C213>