Commit Graph

27 Commits

Author SHA1 Message Date
christos d80018d9b8 handle copying of plugins to the chroot 2021-03-31 04:57:25 +00:00
skrll 08ffba536b Trailing whitespace 2020-07-04 06:24:53 +00:00
tls 916085404d Make named and the rest of BIND seed their RNG from /dev/urandom, not /dev/random. Better would be to rip the enormous gonkulating RNG machinery out of libisc entirely. Later. 2014-07-13 22:06:56 +00:00
spz 46ee6da10e create /etc/rndc.key on start if it doesn't already exist 2014-07-08 07:04:07 +00:00
christos d60db5e056 PR/47024: Taylor R Campbell: handle "keys" directory and directory
permissions in general
2012-10-01 18:46:43 +00:00
perry b3d763cf9b ntpdate can't work without named because a modern ntp.conf has dns
names in it. We therefore now depend on it.

However, this would have then created a circular dependency because named
depended on "SERVERS", and racoon was before SERVERS and required kdc,
and kdc needs the time to be right and thus depended on ntp.

Instead, have named depend on NETWORKING (so that there is a network
there), mountcritremote (so we know that named has a directory to work
from) and syslogd (so that named has some place to spew information).

I'm not sure this is perfect, but it is certainly a big improvement
over constantly failing ntpdate runs during boot.
2009-08-03 17:45:48 +00:00
christos 923c91a5d0 handle new directory structure. 2009-04-25 15:46:19 +00:00
christos 61af394aa4 PR/41273: Martin Mersberger: missing '/' in /etc/rc.d/named in section
named_migrate
2009-04-24 14:26:02 +00:00
christos ad38869bc4 Adjust for new default location of the pid file. 2009-04-22 18:27:03 +00:00
christos 6491f15ca3 fix migration problems:
1. missing slash created namedb127 files in the dest dir.
2. /etc/named.conf was not getting migrated.
2005-11-29 21:07:25 +00:00
christos 0e7146df89 Improve on the migration bit. Check if files are different, and if not,
remove the source and leave a symlink behind. Otherwise, let the user know.
2005-07-17 21:28:45 +00:00
christos a2663103c5 Copy and link files to allow a chrooted named to start-up automatically. 2005-07-17 16:30:57 +00:00
tron 878fa2f707 Replace hardcoded "/var/run/named.pid" with ${pidfile}. 2005-03-17 18:44:09 +00:00
mycroft 7d2e1537c5 Add an _rc_subr_loaded variable, set to ":" by rc.subr. Scripts can use this
for a speedup by doing:
$_rc_subr_loaded . /etc/rc.subr
2004-08-13 18:08:03 +00:00
christos 367e1200da create /dev/random when chrooted. 2004-05-21 15:40:22 +00:00
christos 501d4710c0 prepare for bind 9. 2003-12-18 18:30:18 +00:00
lukem da820a3387 Build the list of names to check for $XXX_chrootdir support from
`rcorder -k chrootdir` rather than hardcoding "named ntpd".
Based on [misc/16884] from Jarle Greipsland <jarle@uninett.no>
2002-06-18 14:35:38 +00:00
thorpej 96776149fc Correct the "direction" of the barrier dependencies (DAEMON, LOGIN,
NETWORKING, and SERVERS) by specifying that certain things should
come BEFORE a given barrier, rather than having the barrier REQUIRE
a service.  This allows scripts to be removed without having to
edit the barrier dependencies.

As discussed on tech-userlevel, and approved by Luke.
2002-03-22 04:33:57 +00:00
lukem 1a286b1407 - Rename a bunch of "internal" run_rc_command() variables and officially
make them "externally" available:
	Previous	Current		Purpose
	--------	-------		-------
	_arg		rc_arg		Argument to command, after fast/force
					processing performed (and prefix
					removed)

	_flags		rc_flags	Flags to start the default command
					with.  Defaults to ${name}_flags,
					unless overridden by $flags from the
					environment.  This variable may be
					changed by the precmd method.

	_pid		rc_pid		PID of command (if appropriate).

	_rc_run_fast	rc_fast		Not empty is "fast" was provided.

	_rc_run_force	rc_force	Not empty is "force" was provided.

- Use rc_flags instead of _flags or ${name}_flags in various rc.d scripts,
  so that $flags from the environment overrides ${name}_flags from rc.conf(5).
  Fixes [bin/15800].
2002-03-22 04:16:38 +00:00
lukem f28a27bd16 if named_chrootdir is set, always repoint the /var/run/named.pid and
/var/run/ndc symlinks, because named_chrootdir might change between
restarts and the symlinks weren't getting updated correctly in the old code.
2001-10-11 07:10:08 +00:00
lukem 6ddd47cd37 if $named_chrootdir != "", ensure that the following files, devices,
and links exist:
	${named_chrootdir}/usr/libexec/named-xfer
	${named_chrootdir}/dev/null
	${named_chrootdir}/etc/localtime
	/var/run/named.pid -> ${named_chrootdir}/var/run/named.pid
	/var/run/ndc -> ${named_chrootdir}/var/run/ndc
and then start named with the appropriate options to run chroot(2)ed
under $named_chrootdir as user named group named.

to take advantage of this, an admin should copy /etc/namedb ->
${named_chrootdir}/etc/namedb, and set named_chrootdir in /etc/rc.conf.

[dev/null & etc/localtime setup inspired by openbsd. i already had the rest]
2001-03-12 16:08:38 +00:00
lukem bd11504cb2 - only perform the checkyesno on the variable named in $rcvar (rather than
implicitly using $name if $rcvar isn't set), and always perform this check,
  even when using start_cmd (et al).
  this check is performed before the pidcmd
  is run, speeding up scripts that weren't going to be run anyway.
  this should speed up booting slow systems.

- take advantage of the above and remove
	start_precmd="checkyesno foo"
  in scripts that use start_cmd.

- explicitly set rcvar=foo in the rc.d/foo scripts which have an equivalent
  rc.conf entry

- fix `rcvar' and `restart' when $rcvar isn't set.
  these above changes fix PR [bin/11027].

- when doing `force*', ignore the return value of *_precmd.
  this fixes PR [bin/10781].

- rename what sysdb provides from `databases' to `sysdb', to reflect
  the name of the script.

- improve the comments in rc.subr
2000-09-19 13:04:38 +00:00
lukem 5c1b0ec207 Use load_rc_config() (from rc.subr) instead of sourcing /etc/rc.conf.
This allows us or a user to change the configuration file method in
one place - rc.subr - without having to edit all of the rc.d/* files.
2000-05-13 08:45:06 +00:00
lukem d934c3b536 only support reload as an extra command; there's too much special case
code that needs to be implemented to make this script totally replicate
what /usr/sbin/ndc does.
2000-05-13 03:46:42 +00:00
lukem 0a610ebbd3 use extra_commands= instead of using 2nd argument to run_rc_command 2000-04-30 13:23:04 +00:00
lukem 0059d641e5 * replace daemon, login, servers with DAEMON, LOGIN, SERVERS
* remove sshd (it was from my private system)
2000-03-13 04:03:52 +00:00
lukem c53094a738 rc.d scripts derived from /etc/rc 2000-03-10 11:53:23 +00:00