diff options
Diffstat (limited to 'doc')
-rw-r--r-- | doc/doc.RPKI.RP | 12 | ||||
-rw-r--r-- | doc/doc.RPKI.RP.rcynic | 6 | ||||
-rw-r--r-- | doc/manual.pdf | bin | 483352 -> 483540 bytes |
3 files changed, 12 insertions, 6 deletions
diff --git a/doc/doc.RPKI.RP b/doc/doc.RPKI.RP index 19592222..daf4c23d 100644 --- a/doc/doc.RPKI.RP +++ b/doc/doc.RPKI.RP @@ -104,16 +104,22 @@ This assumes that you have done mkdir /var/rpki-rtr chown rcynic /var/rpki-rtr -On Linux, the script might look like this: +On GNU/Linux systems, the script might look like this if you use the chrootuid +program: #!/bin/sh - - /usr/sbin/chroot --userspec rcynic:rcynic /var/rcynic /bin/rcynic -c /etc/ - rcynic.conf || exit + /usr/bin/chrootuid /var/rcynic rcynic /bin/rcynic -c /etc/rcynic.conf || exit /var/rcynic/bin/rcynic-html /var/rcynic/data/rcynic.xml /var/www/rcynic cd /var/rpki-rtr /usr/bin/su -m rcynic -c '/usr/local/bin/rtr-origin --cronjob /var/rcynic/ data/authenticated' +If you use the chroot program instead of chrootuid, change the line that +invokes rcynic to: + + /usr/sbin/chroot --userspec rcynic:rcynic /var/rcynic /bin/rcynic -c /etc/ + rcynic.conf || exit + ***** Running a hierarchical rsync configuration ***** Having every relying party on the Internet contact every publication service is diff --git a/doc/doc.RPKI.RP.rcynic b/doc/doc.RPKI.RP.rcynic index 240c0e83..7278835e 100644 --- a/doc/doc.RPKI.RP.rcynic +++ b/doc/doc.RPKI.RP.rcynic @@ -567,9 +567,9 @@ chrootuid1.3.tar.gz. Warning:: - The chroot program included in at least some Linux distributions is - not adaquate to this task, you need a wrapper that knows how to drop - privileges after performing the chroot() operation itself. If in + The chroot program included in at least some GNU/Linux distributions + is not adaquate to this task. You need a wrapper that knows how to + drop privileges after performing the chroot() operation itself. If in doubt, use chrootuid. Unfortunately, the precise details of setting up a proper chroot jail vary diff --git a/doc/manual.pdf b/doc/manual.pdf Binary files differindex 0c8cab57..12d56417 100644 --- a/doc/manual.pdf +++ b/doc/manual.pdf |