Date: Sun, 16 Nov 2003 17:24:54 +0900 From: Hajimu UMEMOTO <ume@mahoroba.org> To: Terry Lambert <tlambert2@mindspring.com> Cc: freebsd-current@freebsd.org Subject: Re: /etc/rc.d/ipsec starts not in time Message-ID: <ygeekw8pvop.wl%ume@mahoroba.org> In-Reply-To: <3FB6B4FE.4C1AF03C@mindspring.com> References: <E1AGIbn-0001Ux-7o@cub.org.ua> <ygefzgpq508.wl%ume@mahoroba.org> <3FB6B4FE.4C1AF03C@mindspring.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi, >>>>> On Sat, 15 Nov 2003 15:21:34 -0800 >>>>> Terry Lambert <tlambert2@mindspring.com> said: > It is not sufficient. There is setkey(8) in /usr/sbin. It means that > we cannot protect NFS exported /usr by IPsec. If there is no > objection, I wish to move setkey(8) into /sbin like NetBSD did. tlambert2> This type of order inversion is common. tlambert2> Can we simply delay exportation until later in the boot process? tlambert2> Wouldn't this have the same effect? Oops, I should explain the situation clearly. The client which mounts /usr by NFS cannot use IPsec due to lack of setkey(8). Sincerely, -- Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan ume@mahoroba.org ume@bisd.hitachi.co.jp ume@{,jp.}FreeBSD.org http://www.imasy.org/~ume/
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ygeekw8pvop.wl%ume>