d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Record dependency on the newly introduced pfsync.

Browse Source 
Start before routing for better system protection.
(pf used to start late during system boot, after
many a network daemon have started already, which
sucked from security POV.)

Remark: For maximum security, pf should start before
netif, but it would create a dependency loop because
pfsync has to start after netif, yet before pf.

Discussed with: mlaier on -pf
MFC after:	5 days
This commit is contained in:
Yaroslav Tykhiy 2005-10-02 19:12:42 +00:00
parent c8a0dfab83
commit b3470f8c82
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=150836
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
etc/rc.d/pf
View File

@ -4,8 +4,8 @@
#
# PROVIDE: pf
# REQUIRE: root mountcritlocal netif pflog
# BEFORE: DAEMON LOGIN
# REQUIRE: root mountcritlocal netif pflog pfsync
# BEFORE: routing
# KEYWORD: nojail
. /etc/rc.subr