svn commit: r551735 - in branches/2020Q4: . net/py-wsdd net/py-wsdd/files
Dimitry Andric
dim at FreeBSD.org
Thu Oct 8 21:34:57 UTC 2020
Author: dim (src committer)
Date: Thu Oct 8 21:34:55 2020
New Revision: 551735
URL: https://svnweb.freebsd.org/changeset/ports/551735
Log:
MFH: r551655
Create dedicated sandbox user for wsdd service
This changes the account the wsdd service runs under from the generic
'daemon' user to its own dedicated '_wsdd' user.
Approved by: ports-secteam (joneum)
PR: 250159
Modified:
branches/2020Q4/GIDs
branches/2020Q4/UIDs
branches/2020Q4/net/py-wsdd/Makefile
branches/2020Q4/net/py-wsdd/files/patch-etc_rc.d_wsdd
Directory Properties:
branches/2020Q4/ (props changed)
Modified: branches/2020Q4/GIDs
==============================================================================
--- branches/2020Q4/GIDs Thu Oct 8 21:16:38 2020 (r551734)
+++ branches/2020Q4/GIDs Thu Oct 8 21:34:55 2020 (r551735)
@@ -310,7 +310,7 @@ httptunnel:*:361:
# free: 367
# free: 368
# free: 369
-# free: 370
+_wsdd:*:370:
# free: 371
# free: 372
# free: 373
Modified: branches/2020Q4/UIDs
==============================================================================
--- branches/2020Q4/UIDs Thu Oct 8 21:16:38 2020 (r551734)
+++ branches/2020Q4/UIDs Thu Oct 8 21:34:55 2020 (r551735)
@@ -315,7 +315,7 @@ httptunnel:*:361:361::0:0:httptunnel Daemon:/nonexiste
# free: 367
# free: 368
# free: 369
-# free: 370
+_wsdd:*:370:370::0:0:Web Service Discovery Daemon:/nonexistent:/usr/sbin/nologin
# free: 371
# free: 372
# free: 373
Modified: branches/2020Q4/net/py-wsdd/Makefile
==============================================================================
--- branches/2020Q4/net/py-wsdd/Makefile Thu Oct 8 21:16:38 2020 (r551734)
+++ branches/2020Q4/net/py-wsdd/Makefile Thu Oct 8 21:34:55 2020 (r551735)
@@ -3,7 +3,7 @@
PORTNAME= wsdd
DISTVERSIONPREFIX= v
DISTVERSION= 0.6.1
-PORTREVISION= 1
+PORTREVISION= 2
CATEGORIES= net python
PKGNAMEPREFIX= ${PYTHON_PKGNAMEPREFIX}
@@ -19,6 +19,9 @@ GH_ACCOUNT= christgau
SHEBANG_FILES= src/${PORTNAME}.py
NO_ARCH= yes
NO_BUILD= yes
+
+USERS= _wsdd
+GROUPS= _wsdd
PLIST_FILES= bin/${PORTNAME} \
etc/rc.d/${PORTNAME} \
Modified: branches/2020Q4/net/py-wsdd/files/patch-etc_rc.d_wsdd
==============================================================================
--- branches/2020Q4/net/py-wsdd/files/patch-etc_rc.d_wsdd Thu Oct 8 21:16:38 2020 (r551734)
+++ branches/2020Q4/net/py-wsdd/files/patch-etc_rc.d_wsdd Thu Oct 8 21:34:55 2020 (r551735)
@@ -68,7 +68,7 @@
+wsdd_start()
+{
+ echo -n "Starting ${name}."
-+ /usr/sbin/daemon -u daemon -S -p ${pidfile} ${command} ${wsdd_opts}
++ /usr/sbin/daemon -u _wsdd -S -p ${pidfile} ${command} ${wsdd_opts}
+}
+
run_rc_command "$1"
More information about the svn-ports-branches
mailing list