[Bug 250966] databases/postgresql11-server: rc.d file incorrectly uses 'REQUIRE: sshd'

bugzilla-noreply at freebsd.org bugzilla-noreply at freebsd.org
Sun Nov 8 19:58:24 UTC 2020


https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=250966

            Bug ID: 250966
           Summary: databases/postgresql11-server: rc.d file incorrectly
                    uses 'REQUIRE: sshd'
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Only Me
          Priority: ---
         Component: Individual Port(s)
          Assignee: pgsql at FreeBSD.org
          Reporter: antiduh at csh.rit.edu
          Assignee: pgsql at FreeBSD.org
             Flags: maintainer-feedback?(pgsql at FreeBSD.org)

This affects all postgres server ports.

The rc.d file lists the base sshd service as the predecessor for rcorder:

# $FreeBSD: head/databases/postgresql11-server/files/postgresql.in 501149
2019-05-09 22:32:11Z girgen $
#
# PROVIDE: postgresql
# REQUIRE: sshd
# KEYWORD: shutdown

If sshd is not part of base and thus sshd is not PROVIDE'd anywhere, then
rcorder handles this by putting postgres at the absolute top of the list,
before any useful machine init has happened:

masheen(~) # rcorder /etc/rc.d/* /usr/local/etc/rc.d/*
/usr/local/etc/rc.d/postgresql
/etc/rc.d/rctl
/etc/rc.d/dhclient
/etc/rc.d/natd
/usr/local/etc/rc.d/htcacheclean
/etc/rc.d/growfs
...



A more sensible REQUIRE line would be:

# REQUIRE: LOGIN FILESYSTEMS

...

To anticipate questions why sshd would not be present:

sshd might be not installed on machines that have removed it from base, such as
one can do with pkg-base, or by recompiling world without the built-in sshd (by
setting WITHOUT_OPENSSH=YES).

One might choose to strip out base sshd and replace it with ports'
security/openssh-portable because it's easier to update and maintain a port
than it is to recompile base when openssh has updates (at least, until pkg-base
is released).

-- 
You are receiving this mail because:
You are the assignee for the bug.


More information about the freebsd-ports-bugs mailing list