Re: Distributed audit daemon committed (was: svn commit: r243752 - in head: etc etc/defaults etc/mail etc/mtree etc/rc.d share/man/man4 usr.sbin usr.sbin/auditdistd (fwd))

From: Robert N. M. Watson <rwatson_at_freebsd.org>
Date: Sun, 2 Dec 2012 15:43:22 +0000
On 2 Dec 2012, at 15:34, Ryan Stone wrote:

> On Sun, Dec 2, 2012 at 8:05 AM, Robert Watson <rwatson_at_freebsd.org> wrote:
> 
> Just to follow up on this thread, since the question has come up a number of times.  "mergemaser -p" should be run prior to installworld always, but most of the time will do very little.  One of its responsibilities is to add any necessary accounts and groups depended on by base system components -- e.g., that will be referenced during installworld as part of setting file ownership and groups.
> 
> I often use "make installworld installkernel distribution DESTDIR=..." to create bootable images (e.g. for a USB stick).  What's the recommendation for that case?  Manually create the auditdistd user on the build host?

Yes, that's probably the best short-term bet.

In the longer term, it would be nice of installworld could not only generate an mtree on the side rather than directly chmod/chowning the files (Brooks Davis has patches for this), but also use UIDs/GIDs from a user database directly rather than assuming that the host where you are constructing the image has the same notion of users and groups. This is especially important if we want to support cross-building embedded images from Linux, Mac OS X, etc, in the future.

Robert
Received on Sun Dec 02 2012 - 14:43:27 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:32 UTC