Add systrace(1) support to rc.subr. Most services (eg, ${name} is
inetd) started from rc can now be run under systrace by setting ${name}_systrace to a set of flags to be passed to systrace. Note that policies need to generated before you do this.
This commit is contained in:
parent
165a2e8904
commit
28d021bcf5
|
@ -1,4 +1,4 @@
|
||||||
.\" $NetBSD: rc.subr.8,v 1.8 2002/04/18 11:14:33 lukem Exp $
|
.\" $NetBSD: rc.subr.8,v 1.9 2002/07/08 16:14:55 atatat Exp $
|
||||||
.\"
|
.\"
|
||||||
.\" Copyright (c) 2002 The NetBSD Foundation, Inc.
|
.\" Copyright (c) 2002 The NetBSD Foundation, Inc.
|
||||||
.\" All rights reserved.
|
.\" All rights reserved.
|
||||||
|
@ -418,6 +418,18 @@ as.
|
||||||
Comma separated list of supplementary groups to run the chrooted
|
Comma separated list of supplementary groups to run the chrooted
|
||||||
.Sy command
|
.Sy command
|
||||||
with.
|
with.
|
||||||
|
.It Sy ${name}_systrace
|
||||||
|
Flags passed to
|
||||||
|
.Xr systrace 1 ,
|
||||||
|
if it is used.
|
||||||
|
Setting this variable enables systracing
|
||||||
|
of the given program. The use of
|
||||||
|
.Sq -a
|
||||||
|
is
|
||||||
|
recommended so that the boot process is not
|
||||||
|
stalled. In order to pass no flags to
|
||||||
|
systrace, set this variable to
|
||||||
|
.Sq -- .
|
||||||
.It Ar argument Ns Sy _cmd
|
.It Ar argument Ns Sy _cmd
|
||||||
Shell commands which override the default method for
|
Shell commands which override the default method for
|
||||||
.Ar argument .
|
.Ar argument .
|
||||||
|
|
Loading…
Reference in New Issue