Re: Distributed audit daemon committed (was: svn commit: r243752 - in head: etc etc/defaults etc/mail etc/mtree etc/rc.d share/man/man4 usr.sbin usr.sbin/auditdistd (fwd))

From: Brooks Davis <brooks_at_freebsd.org>
Date: Thu, 13 Dec 2012 10:00:38 -0600
On Sun, Dec 02, 2012 at 03:43:22PM +0000, Robert N. M. Watson wrote:
> 
> On 2 Dec 2012, at 15:34, Ryan Stone wrote:
> 
> > On Sun, Dec 2, 2012 at 8:05 AM, Robert Watson <rwatson_at_freebsd.org> wrote:
> > 
> > Just to follow up on this thread, since the question has come up a number of times.  "mergemaser -p" should be run prior to installworld always, but most of the time will do very little.  One of its responsibilities is to add any necessary accounts and groups depended on by base system components -- e.g., that will be referenced during installworld as part of setting file ownership and groups.
> > 
> > I often use "make installworld installkernel distribution DESTDIR=..." to create bootable images (e.g. for a USB stick).  What's the recommendation for that case?  Manually create the auditdistd user on the build host?
> 
> Yes, that's probably the best short-term bet.
> 
> In the longer term, it would be nice of installworld could not only generate an mtree on the side rather than directly chmod/chowning the files (Brooks Davis has patches for this), but also use UIDs/GIDs from a user database directly rather than assuming that the host where you are constructing the image has the same notion of users and groups. This is especially important if we want to support cross-building embedded images from Linux, Mac OS X, etc, in the future.
> 

One useful feature of NetBSD's install is that we can use passwd and
group databases other than the one in /.  You would obviously use this
when doing an unprivileged install, but you might also want to do it
for a privileged install as well which would fix this bootstrapping
problem.

-- Brooks

Received on Thu Dec 13 2012 - 15:00:48 UTC

This archive was generated by hypermail 2.4.0 : Wed May 19 2021 - 11:40:33 UTC