sync/ports
1
0
Fork 0
mirror of https://git.freebsd.org/ports.git synced 2025-05-24 23:16:33 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

security/vault: add vault user to daemon class

Browse source 
This allows use of mlock() when vault is started via rc script.

Submitted by:	dch
Reviewed by:	jrm
Differential Revision:	https://reviews.freebsd.org/D20025
This commit is contained in:
Steve Wills 2019-04-25 21:00:52 +00:00
parent 85d4c8dddb
commit 1a9ac8c93a
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=500070
3 changed files with 22 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
UIDs
View file

@ -416,7 +416,7 @@ netmon:*:467:467::0:0:Network monitor account:/var/netmon:/usr/sbin/nologin
slurm:*:468:468::0:0:SLURM Daemon:/nonexistent:/usr/sbin/nologin slurm:*:468:468::0:0:SLURM Daemon:/nonexistent:/usr/sbin/nologin
consul:*:469:469::0:0:Consul Daemon:/var/tmp/consul:/usr/sbin/nologin consul:*:469:469::0:0:Consul Daemon:/var/tmp/consul:/usr/sbin/nologin
serf:*:470:470::0:0:Serf Daemon:/nonexistent:/usr/sbin/nologin serf:*:470:470::0:0:Serf Daemon:/nonexistent:/usr/sbin/nologin
vault:*:471:471::0:0:Vault Daemon:/nonexistent:/usr/sbin/nologin vault:*:471:471:daemon:0:0:Vault Daemon:/nonexistent:/usr/sbin/nologin
nomad:*:472:472::0:0:Nomad Daemon:/var/tmp/nomad:/usr/sbin/nologin nomad:*:472:472::0:0:Nomad Daemon:/var/tmp/nomad:/usr/sbin/nologin
minio:*:473:473::0:0:Minio Daemon:/var/tmp/minio:/usr/sbin/nologin minio:*:473:473::0:0:Minio Daemon:/var/tmp/minio:/usr/sbin/nologin
gitlab-runner:*:474:474::0:0:GitLab Runner Daemon:/var/tmp/gitlab_runner:/usr/sbin/nologin gitlab-runner:*:474:474::0:0:GitLab Runner Daemon:/var/tmp/gitlab_runner:/usr/sbin/nologin

2
security/vault/Makefile
View file

@ -2,6 +2,7 @@
PORTNAME= vault PORTNAME= vault
PORTVERSION= 1.1.2 PORTVERSION= 1.1.2
PORTREVISION= 1
DISTVERSIONPREFIX= v DISTVERSIONPREFIX= v
CATEGORIES= security CATEGORIES= security
@ -26,6 +27,7 @@ USERS= vault
GROUPS= vault GROUPS= vault
PLIST_FILES= bin/${PORTNAME} PLIST_FILES= bin/${PORTNAME}
SUB_FILES= pkg-message
post-patch: post-patch:
@${CP} ${WRKDIR}/vaultui-${PORTVERSION}/http/bindata_assetfs.go ${WRKDIR}/vault-${PORTVERSION}/http/bindata_assetfs.go @${CP} ${WRKDIR}/vaultui-${PORTVERSION}/http/bindata_assetfs.go ${WRKDIR}/vault-${PORTVERSION}/http/bindata_assetfs.go

19
security/vault/files/pkg-message.in Normal file
View file

@ -0,0 +1,19 @@
The vault user created by the vault package is now a member of the daemon
class, which will allow it to use mlock() when started by the rc script. This
will not be reflected in systems where the user already exists. Please add the
vault user to the daemon class manually by running:
pw usermod -L daemon -n vault
or delete the user and reinstall the package.
You may also need to increase memorylocked for the daemon class in
/etc/login.conf to 256M or more and run:
cap_mkdb /etc/login.conf
Or to disable mlock, add:
disable_mlock = 1
to %%PREFIX%%/etc/vault.hcl