Record dependency on the newly introduced pfsync.
Start before routing for better system protection. (pf used to start late during system boot, after many a network daemon have started already, which sucked from security POV.) Remark: For maximum security, pf should start before netif, but it would create a dependency loop because pfsync has to start after netif, yet before pf. Discussed with: mlaier on -pf MFC after: 5 days
This commit is contained in:
parent
c8a0dfab83
commit
b3470f8c82
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/head/; revision=150836
@ -4,8 +4,8 @@
|
||||
#
|
||||
|
||||
# PROVIDE: pf
|
||||
# REQUIRE: root mountcritlocal netif pflog
|
||||
# BEFORE: DAEMON LOGIN
|
||||
# REQUIRE: root mountcritlocal netif pflog pfsync
|
||||
# BEFORE: routing
|
||||
# KEYWORD: nojail
|
||||
|
||||
. /etc/rc.subr
|
||||
|
Loading…
Reference in New Issue
Block a user