* [gentoo-commits] repo/gentoo:master commit in: net-irc/quassel/files/
@ 2017-07-18 23:10 Michael Orlitzky
0 siblings, 0 replies; 2+ messages in thread
From: Michael Orlitzky @ 2017-07-18 23:10 UTC (permalink / raw
To: gentoo-commits
commit: dcb995f7f08b66528487fe4e0a16a16bda502572
Author: Michael Orlitzky <mjo <AT> gentoo <DOT> org>
AuthorDate: Tue Jul 18 23:07:19 2017 +0000
Commit: Michael Orlitzky <mjo <AT> gentoo <DOT> org>
CommitDate: Tue Jul 18 23:09:38 2017 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=dcb995f7
net-irc/quassel: new init script revision to prevent privilege escalation.
This commits adds two new files,
* quasselcore.init-r1
* quasselcore.conf-r1
that are as yet unused. The init script has been entirely rewritten to
use modern features of OpenRC, and uses the default start/stop
implementations, so it is greatly simplified.
To avoid the "chown" problem in bug 603414, the new init script and
conf file do not allow changing the quassel user on the fly. Instead,
the "quassel" user created by the ebuild is used unconditionally. As a
result, there is no need to fix permissions when the daemon is
started, and thus no need to change ownership of anything. A further
permissions-related simplification logs to syslog instead of a file by
default. Since the daemon runs as a restricted user, that avoids
another set of permissions (on the log file) that would need to be
mangled.
Gentoo-Bug: 423145
Gentoo-Bug: 603414
Package-Manager: Portage-2.3.6, Repoman-2.3.1
net-irc/quassel/files/quasselcore.conf-r1 | 11 +++++++++++
net-irc/quassel/files/quasselcore.init-r1 | 22 ++++++++++++++++++++++
2 files changed, 33 insertions(+)
diff --git a/net-irc/quassel/files/quasselcore.conf-r1 b/net-irc/quassel/files/quasselcore.conf-r1
new file mode 100644
index 00000000000..29e14467a8f
--- /dev/null
+++ b/net-irc/quassel/files/quasselcore.conf-r1
@@ -0,0 +1,11 @@
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+# Loglevel Debug|Info|Warning|Error. Default is: Info
+#LOGLEVEL="Info"
+
+# The address(es) quasselcore will listen on. Default is 0.0.0.0
+#LISTEN="0.0.0.0"
+
+# The port quasselcore will listen at. Default is: 4242
+#PORT="4242"
diff --git a/net-irc/quassel/files/quasselcore.init-r1 b/net-irc/quassel/files/quasselcore.init-r1
new file mode 100644
index 00000000000..5976235aafa
--- /dev/null
+++ b/net-irc/quassel/files/quasselcore.init-r1
@@ -0,0 +1,22 @@
+#!/sbin/openrc-run
+# Copyright 1999-2017 Gentoo Foundation
+# Distributed under the terms of the GNU General Public License v2
+
+depend() {
+ after logger postgres
+}
+
+LISTEN=${LISTEN:-"0.0.0.0"}
+LOGLEVEL=${LOGLEVEL:-"Info"}
+PORT=${PORT:="4242"}
+
+command="/usr/bin/quasselcore"
+command_args="--configdir=/var/lib/quassel
+ --listen=${LISTEN}
+ --loglevel=${LOGLEVEL}
+ --port=${PORT}
+ --syslog"
+command_background="yes"
+command_user="quassel"
+description="Quassel Core"
+pidfile="/run/quassel.pid"
^ permalink raw reply related [flat|nested] 2+ messages in thread
* [gentoo-commits] repo/gentoo:master commit in: net-irc/quassel/files/
@ 2018-03-05 14:23 Aaron Swenson
0 siblings, 0 replies; 2+ messages in thread
From: Aaron Swenson @ 2018-03-05 14:23 UTC (permalink / raw
To: gentoo-commits
commit: 2d318e40c44970048bee910f78e35b07e6bd7906
Author: Aaron W. Swenson <titanofold <AT> gentoo <DOT> org>
AuthorDate: Mon Mar 5 14:23:18 2018 +0000
Commit: Aaron Swenson <titanofold <AT> gentoo <DOT> org>
CommitDate: Mon Mar 5 14:23:18 2018 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=2d318e40
net-irc/quassel: Spelling fix in intscript depend
dev-db/postgresql initscripts provide “postgresql”, not “postgres”.
Closes: https://bugs.gentoo.org/639920
Package-Manager: Portage-2.3.19, Repoman-2.3.6
net-irc/quassel/files/quasselcore.init | 4 ++--
net-irc/quassel/files/quasselcore.init-r1 | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/net-irc/quassel/files/quasselcore.init b/net-irc/quassel/files/quasselcore.init
index 468c24ec299..8e66dff8ca3 100644
--- a/net-irc/quassel/files/quasselcore.init
+++ b/net-irc/quassel/files/quasselcore.init
@@ -1,10 +1,10 @@
#!/sbin/openrc-run
-# Copyright 1999-2011 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
depend() {
need localmount net
- after bootmisc postgres
+ after bootmisc postgresql
}
CORE="$(which quasselcore)"
diff --git a/net-irc/quassel/files/quasselcore.init-r1 b/net-irc/quassel/files/quasselcore.init-r1
index 5976235aafa..cfcb5dbb901 100644
--- a/net-irc/quassel/files/quasselcore.init-r1
+++ b/net-irc/quassel/files/quasselcore.init-r1
@@ -1,9 +1,9 @@
#!/sbin/openrc-run
-# Copyright 1999-2017 Gentoo Foundation
+# Copyright 1999-2018 Gentoo Foundation
# Distributed under the terms of the GNU General Public License v2
depend() {
- after logger postgres
+ after logger postgresql
}
LISTEN=${LISTEN:-"0.0.0.0"}
^ permalink raw reply related [flat|nested] 2+ messages in thread
end of thread, other threads:[~2018-03-05 14:23 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2018-03-05 14:23 [gentoo-commits] repo/gentoo:master commit in: net-irc/quassel/files/ Aaron Swenson
-- strict thread matches above, loose matches on Subject: below --
2017-07-18 23:10 Michael Orlitzky
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox