blob: b86c9b81e16bac498cd99b2f9ccd4527a00bee2b (
plain) (
blame)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
|
#!/bin/sh -
#
# $Id$
#
# PROVIDE: rcynic
# REQUIRE: DAEMON
# KEYWORD: nojail
. /etc/rc.subr
name="rcynic"
start_cmd="rcynic_start"
stop_cmd="rcynic_stop"
: ${rcynic_jaildir="/var/rcynic"}
: ${rcynic_user="rcynic"}
: ${rcynic_group="rcynic"}
rcynic_start()
{
/bin/test -d "${rcynic_jaildir}" || /bin/mkdir "${rcynic_jaildir}"
/sbin/umount "${rcynic_jaildir}/dev" 2>/dev/null
/usr/sbin/mtree -deU -p "${rcynic_jaildir}" <<EOF
/set type=dir uname=root gname=wheel mode=0555
.
bin
..
dev
..
etc
trust-anchors
..
..
var
run
..
..
data uname=${rcynic_user} gname=${rcynic_group} mode=0755
..
..
EOF
/bin/chmod -R a-w "${rcynic_jaildir}/bin" "${rcynic_jaildir}/etc"
/usr/sbin/chown -R root:wheel "${rcynic_jaildir}/bin" "${rcynic_jaildir}/etc"
if ! /sbin/mount -t devfs dev "${rcynic_jaildir}/dev"; then
echo "Mounting devfs on ${rcynic_jaildir}/dev failed..."
exit 1
fi
/sbin/devfs -m "${rcynic_jaildir}/dev" rule apply hide
/sbin/devfs -m "${rcynic_jaildir}/dev" rule apply path null unhide
/sbin/devfs -m "${rcynic_jaildir}/dev" rule apply path random unhide
for i in /etc/localtime /etc/resolv.conf; do
j="${rcynic_jaildir}${i}"
if /bin/test -r "$i" && ! /usr/bin/cmp -s "$i" "$j"; then
/usr/bin/install -m 444 -o root -g wheel -p "$i" "$j"
fi
done
}
rcynic_stop()
{
/sbin/umount "${rcynic_jaildir}/dev" 2>/dev/null
}
load_rc_config $name
run_rc_command "$1"
|
