2001-06-16 07:16:14 +00:00
|
|
|
#!/bin/sh
|
|
|
|
#
|
2002-06-13 22:14:37 +00:00
|
|
|
# $NetBSD: named,v 1.10 2002/03/22 04:33:59 thorpej Exp $
|
|
|
|
# $FreeBSD$
|
2001-06-16 07:16:14 +00:00
|
|
|
#
|
|
|
|
|
|
|
|
# PROVIDE: named
|
|
|
|
# REQUIRE: SERVERS
|
2002-06-13 22:14:37 +00:00
|
|
|
# BEFORE: DAEMON
|
2004-01-17 10:16:38 +00:00
|
|
|
# KEYWORD: FreeBSD
|
2001-06-16 07:16:14 +00:00
|
|
|
|
|
|
|
. /etc/rc.subr
|
|
|
|
|
|
|
|
name="named"
|
2002-06-13 22:14:37 +00:00
|
|
|
rcvar=`set_rcvar`
|
|
|
|
start_precmd="named_precmd"
|
2004-09-24 04:53:18 +00:00
|
|
|
start_postcmd="make_symlinks"
|
2002-06-13 22:14:37 +00:00
|
|
|
required_dirs="$named_chrootdir" # if it is set, it must exist
|
2001-06-16 07:16:14 +00:00
|
|
|
extra_commands="reload"
|
2002-06-13 22:14:37 +00:00
|
|
|
|
|
|
|
# If running in a chroot cage, ensure that the appropriate files
|
|
|
|
# exist inside the cage, as well as helper symlinks into the cage
|
|
|
|
# from outside.
|
|
|
|
#
|
|
|
|
# As this is called after the is_running and required_dir checks
|
|
|
|
# are made in run_rc_command(), we can safely assume ${named_chrootdir}
|
|
|
|
# exists and named isn't running at this point (unless forcestart
|
|
|
|
# is used).
|
|
|
|
#
|
|
|
|
chroot_autoupdate()
|
|
|
|
{
|
2004-09-28 09:46:00 +00:00
|
|
|
# Create (or update) the chroot directory structure
|
2002-10-12 10:31:31 +00:00
|
|
|
#
|
2004-09-28 09:46:00 +00:00
|
|
|
if [ -f /etc/mtree/BIND.chroot.dist ]; then
|
|
|
|
mtree -deU -f /etc/mtree/BIND.chroot.dist \
|
|
|
|
-p ${named_chrootdir}
|
|
|
|
else
|
|
|
|
warn "/etc/mtree/BIND.chroot.dist missing,"
|
|
|
|
warn "chroot directory structure not updated"
|
|
|
|
fi
|
|
|
|
|
|
|
|
# Create /etc/namedb symlink
|
|
|
|
#
|
|
|
|
if [ ! -L /etc/namedb ]; then
|
|
|
|
if [ -d /etc/namedb ]; then
|
|
|
|
warn "named chroot: /etc/namedb is a directory!"
|
|
|
|
elif [ -e /etc/namedb ]; then
|
|
|
|
warn "named chroot: /etc/namedb exists!"
|
|
|
|
else
|
|
|
|
ln -s ${named_chrootdir}/etc/namedb /etc/namedb
|
|
|
|
fi
|
2002-10-12 10:31:31 +00:00
|
|
|
fi
|
2004-09-28 09:46:00 +00:00
|
|
|
|
|
|
|
# Mount a devfs in the chroot directory if needed
|
|
|
|
#
|
|
|
|
if [ ! -c ${named_chrootdir}/dev/random -o \
|
|
|
|
! -c ${named_chrootdir}/dev/null ]; then
|
|
|
|
umount ${named_chrootdir}/dev 2>/dev/null
|
|
|
|
mount_devfs devfs ${named_chrootdir}/dev
|
2004-09-24 04:53:18 +00:00
|
|
|
fi
|
2002-06-13 22:14:37 +00:00
|
|
|
|
2004-09-28 09:46:00 +00:00
|
|
|
# Copy local timezone information if it is not up to date.
|
2002-10-12 10:31:31 +00:00
|
|
|
#
|
|
|
|
if [ -f /etc/localtime ]; then
|
|
|
|
cmp -s /etc/localtime "${named_chrootdir}/etc/localtime" || \
|
2002-06-13 22:14:37 +00:00
|
|
|
cp -p /etc/localtime "${named_chrootdir}/etc/localtime"
|
|
|
|
fi
|
|
|
|
}
|
|
|
|
|
2004-09-24 04:53:18 +00:00
|
|
|
# Make symlinks to the correct pid file
|
2002-06-13 22:14:37 +00:00
|
|
|
#
|
|
|
|
make_symlinks()
|
|
|
|
{
|
2004-09-24 04:53:18 +00:00
|
|
|
checkyesno named_symlink_enable &&
|
|
|
|
ln -fs "${named_chrootdir}${pidfile}" ${pidfile}
|
2002-06-13 22:14:37 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
named_precmd()
|
|
|
|
{
|
2004-09-24 04:53:18 +00:00
|
|
|
local confgen_chroot
|
|
|
|
|
2004-01-17 10:59:43 +00:00
|
|
|
# Is the user using a sandbox?
|
2004-09-28 09:46:00 +00:00
|
|
|
#
|
1. Remove the named_rcng variable. Mike's caution in this area was a good
thing, but we're ready to move on.
2. Remove the -g default argument in named_flags. It doesn't actually do
what most users think it does, and what most users want it to do is already
accomplished with a proper default group for the bind user, which we have.
Also, the -g knob does something entirely different in BIND 9, which leads
to a lot of needless confusion/aggravation.
3. In the rc.d script, don't bogusly override $command, or $rc_flags. Both
are adequately handled in rc.conf[.local].
4. DO properly override $rc_flags if user has named_chrootdir set.
This may need to be revisited, but should be ok for now.
5. Protect all chrootdir-related bits under that variable, instead of
named_rcng.
There is more work to be done here, especially in the area of BIND 9
compatibility, but this is a start at least.
Prompted in part by (legitmate) grousing from: kuriyama, Randy Bush
2004-03-14 19:10:06 +00:00
|
|
|
if [ -n "$named_chrootdir" ]; then
|
|
|
|
rc_flags="$rc_flags -t $named_chrootdir"
|
2004-09-28 09:46:00 +00:00
|
|
|
confgen_chroot="-t${named_chrootdir} -u bind"
|
1. Remove the named_rcng variable. Mike's caution in this area was a good
thing, but we're ready to move on.
2. Remove the -g default argument in named_flags. It doesn't actually do
what most users think it does, and what most users want it to do is already
accomplished with a proper default group for the bind user, which we have.
Also, the -g knob does something entirely different in BIND 9, which leads
to a lot of needless confusion/aggravation.
3. In the rc.d script, don't bogusly override $command, or $rc_flags. Both
are adequately handled in rc.conf[.local].
4. DO properly override $rc_flags if user has named_chrootdir set.
This may need to be revisited, but should be ok for now.
5. Protect all chrootdir-related bits under that variable, instead of
named_rcng.
There is more work to be done here, especially in the area of BIND 9
compatibility, but this is a start at least.
Prompted in part by (legitmate) grousing from: kuriyama, Randy Bush
2004-03-14 19:10:06 +00:00
|
|
|
checkyesno named_chroot_autoupdate && chroot_autoupdate
|
2004-09-24 23:49:38 +00:00
|
|
|
else
|
|
|
|
named_symlink_enable=NO
|
2004-09-24 04:53:18 +00:00
|
|
|
fi
|
|
|
|
|
|
|
|
# Create an rndc.key file for the user if none exists
|
2004-09-28 09:46:00 +00:00
|
|
|
#
|
2004-09-26 07:01:56 +00:00
|
|
|
if [ ! -f "${named_chrootdir}/etc/namedb/rndc.key" -a \
|
|
|
|
! -f "${named_chrootdir}/etc/namedb/rndc.conf" ]; then
|
2004-09-24 23:49:38 +00:00
|
|
|
rndc-confgen -a -b256 ${confgen_chroot}
|
2004-01-17 10:59:43 +00:00
|
|
|
fi
|
2002-06-13 22:14:37 +00:00
|
|
|
}
|
|
|
|
|
2001-06-16 07:16:14 +00:00
|
|
|
load_rc_config $name
|
2002-06-13 22:14:37 +00:00
|
|
|
# The following variable requires that rc.conf be loaded first
|
|
|
|
#
|
|
|
|
required_dirs="$named_chrootdir" # if it is set, it must exist
|
2003-01-12 04:53:54 +00:00
|
|
|
pidfile="${named_pidfile:-/var/run/${name}/pid}"
|
2002-06-13 22:14:37 +00:00
|
|
|
|
2001-06-16 07:16:14 +00:00
|
|
|
run_rc_command "$1"
|