6ddd47cd37
and links exist:
${named_chrootdir}/usr/libexec/named-xfer
${named_chrootdir}/dev/null
${named_chrootdir}/etc/localtime
/var/run/named.pid -> ${named_chrootdir}/var/run/named.pid
/var/run/ndc -> ${named_chrootdir}/var/run/ndc
and then start named with the appropriate options to run chroot(2)ed
under $named_chrootdir as user named group named.
to take advantage of this, an admin should copy /etc/namedb ->
${named_chrootdir}/etc/namedb, and set named_chrootdir in /etc/rc.conf.
[dev/null & etc/localtime setup inspired by openbsd. i already had the rest]
66 lines
1.8 KiB
Bash
Executable File
66 lines
1.8 KiB
Bash
Executable File
#!/bin/sh
|
|
#
|
|
# $NetBSD: named,v 1.7 2001/03/12 16:08:38 lukem Exp $
|
|
#
|
|
|
|
# PROVIDE: named
|
|
# REQUIRE: SERVERS
|
|
|
|
. /etc/rc.subr
|
|
|
|
name="named"
|
|
rcvar=$name
|
|
command="/usr/sbin/${name}"
|
|
pidfile="/var/run/${name}.pid"
|
|
start_precmd="named_precmd"
|
|
extra_commands="reload"
|
|
required_dirs="$named_chrootdir" # if it is set, it must exist
|
|
|
|
named_precmd()
|
|
{
|
|
if [ -z "$named_chrootdir" ]; then
|
|
return 0;
|
|
fi
|
|
|
|
# If running in a chroot cage, ensure that the appropriate files
|
|
# exist inside the cage, as well as helper symlinks into the cage
|
|
# from outside.
|
|
#
|
|
# As this is called after the is_running and required_dir checks
|
|
# are made in run_rc_command(), we can safely assume ${named_chrootdir}
|
|
# exists and named isn't running at this point (unless forcestart
|
|
# is used).
|
|
#
|
|
|
|
if [ ! -x "${named_chrootdir}/usr/libexec/named-xfer" -o \
|
|
"${named_chrootdir}/usr/libexec/named-xfer" -ot \
|
|
/usr/libexec/named-xfer ]; then
|
|
rm -f "${named_chrootdir}/usr/libexec/named-xfer"
|
|
cp -p /usr/libexec/named-xfer "${named_chrootdir}/usr/libexec"
|
|
fi
|
|
if [ ! -c "${named_chrootdir}/dev/null" ]; then
|
|
rm -f "${named_chrootdir}/dev/null"
|
|
( cd /dev ; /bin/pax -rw -pe null "${named_chrootdir}/dev" )
|
|
fi
|
|
if [ -f /etc/localtime ]; then
|
|
cmp -s /etc/localtime "${named_chrootdir}/etc/localtime" || \
|
|
cp -p /etc/localtime "${named_chrootdir}/etc/localtime"
|
|
fi
|
|
if [ ! -h /var/run/named.pid ]; then
|
|
rm -f /var/run/named.pid
|
|
ln -s '../../'"${named_chrootdir}/var/run/named.pid" \
|
|
/var/run/named.pid
|
|
fi
|
|
if [ ! -h /var/run/ndc ]; then
|
|
rm -f /var/run/ndc
|
|
ln -s '../../'"${named_chrootdir}/var/run/ndc" /var/run/ndc
|
|
fi
|
|
|
|
# Change run_rc_commands()'s internal copy of $named_flags
|
|
#
|
|
_flags="-u named -g named -t ${named_chrootdir} $_flags"
|
|
}
|
|
|
|
load_rc_config $name
|
|
run_rc_command "$1"
|