[Bug 280137] security/bacula15-server: fix filename of the rc scripts to comply to the rc scripting recommendations + service jails options
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 280137] sysutils/bacula15-server: fix filename of the rc scripts to comply to the rc scripting recommendations + service jails options"
- Reply: bugzilla-noreply_a_freebsd.org: "[Bug 280137] sysutils/bacula15-server: fix filename of the rc scripts to comply to the rc scripting recommendations + service jails options"
- Go to: [ bottom of page ] [ top of archives ] [ this month ]
Date: Fri, 05 Jul 2024 09:00:16 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=280137 Bug ID: 280137 Summary: security/bacula15-server: fix filename of the rc scripts to comply to the rc scripting recommendations + service jails options Product: Ports & Packages Version: Latest Hardware: Any OS: Any Status: New Severity: Affects Some People Priority: --- Component: Individual Port(s) Assignee: ports-bugs@FreeBSD.org Reporter: netchild@FreeBSD.org Created attachment 251879 --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=251879&action=edit rename rc scripts to comply to recommendations Hi, The attached patch fixes some issues with the rc script. A generic discussion about the rc scripts in the ports collection which contains a lot more background information about the "why" of this patch is at https://lists.freebsd.org/archives/freebsd-ports/2024-July/006342.html Short: - the filename shall be the same as the content of the name variable inside the script - (already OK) PROVIDE shall be the same as the content of the name variable inside the script - this fixes the use of the script with service jails (new feature in -current) Additionally to what is discussed there and fixed in the patch, I made the following additional changes: - add an UPATING entry (date needs to be adapted, this may conflict at the time when you apply/commit) - add service jails options to the scripts to enable the use in service jails (new feature in -current) the svcj_options allow the use of the host-network, if you want to allow sysvipc you need to replace "net_basic" with "net_basic sysvipc" (inherits/shares the sysv stuff, "sysipcnew" if the sysvipc parts shall be uniq to the specific service) if no network access is required for a service, you can set it hard to empty (bacula_XXX_svcj_options="") The service jails part will not cause issues when service jails are not enabled. If bacula works inside a jail, it will work inside service jails too, the only question is which kind of jail permissions need to be enabled for the services. The handbook has more info about service jails: https://docs.freebsd.org/en/books/handbook/jails/#service-jails https://docs.freebsd.org/en/articles/rc-scripting/#rcng-service-jails You may want to run the following before applying the patch: for d in sysutils/bacula*-server/files; do git mv $d/bacula-dir.in $d/bacula_dir.in git mv $d/bacula-sd.in $d/bacula_sd.in done Bye, Alexander. -- You are receiving this mail because: You are the assignee for the bug.