Add systrace(1) support to rc.subr. Most services (eg, ${name} is

inetd) started from rc can now be run under systrace by setting
${name}_systrace to a set of flags to be passed to systrace.  Note
that policies need to generated before you do this.
This commit is contained in:
atatat 2002-07-08 16:14:55 +00:00
parent 165a2e8904
commit 28d021bcf5
1 changed files with 13 additions and 1 deletions

View File

@ -1,4 +1,4 @@
.\" $NetBSD: rc.subr.8,v 1.8 2002/04/18 11:14:33 lukem Exp $ .\" $NetBSD: rc.subr.8,v 1.9 2002/07/08 16:14:55 atatat Exp $
.\" .\"
.\" Copyright (c) 2002 The NetBSD Foundation, Inc. .\" Copyright (c) 2002 The NetBSD Foundation, Inc.
.\" All rights reserved. .\" All rights reserved.
@ -418,6 +418,18 @@ as.
Comma separated list of supplementary groups to run the chrooted Comma separated list of supplementary groups to run the chrooted
.Sy command .Sy command
with. with.
.It Sy ${name}_systrace
Flags passed to
.Xr systrace 1 ,
if it is used.
Setting this variable enables systracing
of the given program. The use of
.Sq -a
is
recommended so that the boot process is not
stalled. In order to pass no flags to
systrace, set this variable to
.Sq -- .
.It Ar argument Ns Sy _cmd .It Ar argument Ns Sy _cmd
Shell commands which override the default method for Shell commands which override the default method for
.Ar argument . .Ar argument .