0a54defb08
thing, but we're ready to move on. 2. Remove the -g default argument in named_flags. It doesn't actually do what most users think it does, and what most users want it to do is already accomplished with a proper default group for the bind user, which we have. Also, the -g knob does something entirely different in BIND 9, which leads to a lot of needless confusion/aggravation. 3. In the rc.d script, don't bogusly override $command, or $rc_flags. Both are adequately handled in rc.conf[.local]. 4. DO properly override $rc_flags if user has named_chrootdir set. This may need to be revisited, but should be ok for now. 5. Protect all chrootdir-related bits under that variable, instead of named_rcng. There is more work to be done here, especially in the area of BIND 9 compatibility, but this is a start at least. Prompted in part by (legitmate) grousing from: kuriyama, Randy Bush
83 lines
2.2 KiB
Bash
Executable File
83 lines
2.2 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# $NetBSD: named,v 1.10 2002/03/22 04:33:59 thorpej Exp $
|
|
# $FreeBSD$
|
|
#
|
|
|
|
# PROVIDE: named
|
|
# REQUIRE: SERVERS
|
|
# BEFORE: DAEMON
|
|
# KEYWORD: FreeBSD
|
|
|
|
. /etc/rc.subr
|
|
|
|
name="named"
|
|
rcvar=`set_rcvar`
|
|
start_precmd="named_precmd"
|
|
required_dirs="$named_chrootdir" # if it is set, it must exist
|
|
extra_commands="reload"
|
|
|
|
# If running in a chroot cage, ensure that the appropriate files
|
|
# exist inside the cage, as well as helper symlinks into the cage
|
|
# from outside.
|
|
#
|
|
# As this is called after the is_running and required_dir checks
|
|
# are made in run_rc_command(), we can safely assume ${named_chrootdir}
|
|
# exists and named isn't running at this point (unless forcestart
|
|
# is used).
|
|
#
|
|
chroot_autoupdate()
|
|
{
|
|
# If the named-xfer in the system is newer than the one in the
|
|
# chroot directory or if it (in the chrootdir) doesn't exist
|
|
# copy it over
|
|
#
|
|
if [ ! -x "${named_chrootdir}/usr/libexec/named-xfer" -o \
|
|
"${named_chrootdir}/usr/libexec/named-xfer" -ot \
|
|
/usr/libexec/named-xfer ]; then
|
|
rm -f "${named_chrootdir}/usr/libexec/named-xfer"
|
|
cp -p /usr/libexec/named-xfer "${named_chrootdir}/usr/libexec"
|
|
fi
|
|
|
|
# Copy /dev/null over, if neccessary. Preserve everything (perms,
|
|
# ownership, mod times).
|
|
#
|
|
if [ ! -c "${named_chrootdir}/dev/null" ]; then
|
|
rm -f "${named_chrootdir}/dev/null"
|
|
( cd /dev ; /bin/pax -rw -pe null "${named_chrootdir}/dev" )
|
|
fi
|
|
|
|
# Copy local timezone information if it's not up-to-date.
|
|
#
|
|
if [ -f /etc/localtime ]; then
|
|
cmp -s /etc/localtime "${named_chrootdir}/etc/localtime" || \
|
|
cp -p /etc/localtime "${named_chrootdir}/etc/localtime"
|
|
fi
|
|
}
|
|
|
|
# Make symlinks to the correct pid and ndc socket files
|
|
#
|
|
make_symlinks()
|
|
{
|
|
ln -fs "${named_chrootdir}${named_pidfile}" ${named_pidfile}
|
|
ln -fs "${named_chrootdir}/var/run/ndc" /var/run/ndc
|
|
}
|
|
|
|
named_precmd()
|
|
{
|
|
# Is the user using a sandbox?
|
|
if [ -n "$named_chrootdir" ]; then
|
|
rc_flags="$rc_flags -t $named_chrootdir"
|
|
checkyesno named_chroot_autoupdate && chroot_autoupdate
|
|
checkyesno named_symlink_enable && make_symlinks
|
|
fi
|
|
}
|
|
|
|
load_rc_config $name
|
|
# The following variable requires that rc.conf be loaded first
|
|
#
|
|
required_dirs="$named_chrootdir" # if it is set, it must exist
|
|
pidfile="${named_pidfile:-/var/run/${name}/pid}"
|
|
|
|
run_rc_command "$1"
|