sync/ports
1
0
Fork 0
mirror of https://git.freebsd.org/ports.git synced 2025-05-25 07:26:29 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

security/vault: add vault user to daemon class

Browse source 
This allows use of mlock() when vault is started via rc script.

Submitted by:	dch
Reviewed by:	jrm
Differential Revision:	https://reviews.freebsd.org/D20025
This commit is contained in:
Steve Wills 2019-04-25 21:00:52 +00:00
parent 85d4c8dddb
commit 1a9ac8c93a
Notes: svn2git 2021-03-31 03:12:20 +00:00 
svn path=/head/; revision=500070
3 changed files with 22 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
UIDs
View file

@ -416,7 +416,7 @@ netmon:*:467:467::0:0:Network monitor account:/var/netmon:/usr/sbin/nologin
slurm:*:468:468::0:0:SLURM Daemon:/nonexistent:/usr/sbin/nologin
consul:*:469:469::0:0:Consul Daemon:/var/tmp/consul:/usr/sbin/nologin
serf:*:470:470::0:0:Serf Daemon:/nonexistent:/usr/sbin/nologin
vault:*:471:471::0:0:Vault Daemon:/nonexistent:/usr/sbin/nologin
vault:*:471:471:daemon:0:0:Vault Daemon:/nonexistent:/usr/sbin/nologin
nomad:*:472:472::0:0:Nomad Daemon:/var/tmp/nomad:/usr/sbin/nologin
minio:*:473:473::0:0:Minio Daemon:/var/tmp/minio:/usr/sbin/nologin
gitlab-runner:*:474:474::0:0:GitLab Runner Daemon:/var/tmp/gitlab_runner:/usr/sbin/nologin

2
security/vault/Makefile
View file

@ -2,6 +2,7 @@
PORTNAME= vault
PORTVERSION= 1.1.2
PORTREVISION= 1
DISTVERSIONPREFIX= v
CATEGORIES= security
@ -26,6 +27,7 @@ USERS= vault
GROUPS= vault
PLIST_FILES= bin/${PORTNAME}
SUB_FILES= pkg-message
post-patch:
@${CP} ${WRKDIR}/vaultui-${PORTVERSION}/http/bindata_assetfs.go ${WRKDIR}/vault-${PORTVERSION}/http/bindata_assetfs.go

19
security/vault/files/pkg-message.in Normal file
View file

@ -0,0 +1,19 @@
The vault user created by the vault package is now a member of the daemon
class, which will allow it to use mlock() when started by the rc script. This
will not be reflected in systems where the user already exists. Please add the
vault user to the daemon class manually by running:
pw usermod -L daemon -n vault
or delete the user and reinstall the package.
You may also need to increase memorylocked for the daemon class in
/etc/login.conf to 256M or more and run:
cap_mkdb /etc/login.conf
Or to disable mlock, add:
disable_mlock = 1
to %%PREFIX%%/etc/vault.hcl