aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
-rw-r--r--doc/doc.RPKI.RP12
-rw-r--r--doc/doc.RPKI.RP.rcynic6
-rw-r--r--doc/manual.pdfbin483352 -> 483540 bytes
3 files changed, 12 insertions, 6 deletions
diff --git a/doc/doc.RPKI.RP b/doc/doc.RPKI.RP
index 19592222..daf4c23d 100644
--- a/doc/doc.RPKI.RP
+++ b/doc/doc.RPKI.RP
@@ -104,16 +104,22 @@ This assumes that you have done
mkdir /var/rpki-rtr
chown rcynic /var/rpki-rtr
-On Linux, the script might look like this:
+On GNU/Linux systems, the script might look like this if you use the chrootuid
+program:
#!/bin/sh -
- /usr/sbin/chroot --userspec rcynic:rcynic /var/rcynic /bin/rcynic -c /etc/
- rcynic.conf || exit
+ /usr/bin/chrootuid /var/rcynic rcynic /bin/rcynic -c /etc/rcynic.conf || exit
/var/rcynic/bin/rcynic-html /var/rcynic/data/rcynic.xml /var/www/rcynic
cd /var/rpki-rtr
/usr/bin/su -m rcynic -c '/usr/local/bin/rtr-origin --cronjob /var/rcynic/
data/authenticated'
+If you use the chroot program instead of chrootuid, change the line that
+invokes rcynic to:
+
+ /usr/sbin/chroot --userspec rcynic:rcynic /var/rcynic /bin/rcynic -c /etc/
+ rcynic.conf || exit
+
***** Running a hierarchical rsync configuration *****
Having every relying party on the Internet contact every publication service is
diff --git a/doc/doc.RPKI.RP.rcynic b/doc/doc.RPKI.RP.rcynic
index 240c0e83..7278835e 100644
--- a/doc/doc.RPKI.RP.rcynic
+++ b/doc/doc.RPKI.RP.rcynic
@@ -567,9 +567,9 @@ chrootuid1.3.tar.gz.
Warning::
- The chroot program included in at least some Linux distributions is
- not adaquate to this task, you need a wrapper that knows how to drop
- privileges after performing the chroot() operation itself. If in
+ The chroot program included in at least some GNU/Linux distributions
+ is not adaquate to this task. You need a wrapper that knows how to
+ drop privileges after performing the chroot() operation itself. If in
doubt, use chrootuid.
Unfortunately, the precise details of setting up a proper chroot jail vary
diff --git a/doc/manual.pdf b/doc/manual.pdf
index 0c8cab57..12d56417 100644
--- a/doc/manual.pdf
+++ b/doc/manual.pdf
Binary files differ