diff options
author | Lewis Cook <lcook@FreeBSD.org> | 2021-06-08 15:09:48 +0000 |
---|---|---|
committer | Lewis Cook <lcook@FreeBSD.org> | 2021-06-08 15:17:27 +0000 |
commit | 621d9c9f594a0f7d049cb44dab25efed81c35c91 (patch) | |
tree | d35195606b425346723f150bdc7a6aab2b38e9d8 /japanese/uim-anthy | |
parent | 477cf4fa257aa5ca0cc1c9a3d7f552e8170ac27f (diff) | |
download | ports-621d9c9f594a0f7d049cb44dab25efed81c35c91.tar.gz ports-621d9c9f594a0f7d049cb44dab25efed81c35c91.zip |
sysutils/zrepl: /var/run/zrepl should not be world-readable
This partially reverts commit 2a866a1, and instead installs
the pidfile to /var/run/zrepl.pid fixing the problem seen in
PR 255981.
As taken from the zrepl documentation[1]:
[....]
The zrepl daemon needs to open various UNIX sockets in a runtime directory:
a control socket that the CLI commands use to interact with the daemon
the ssh+stdinserver Transport listener opens one socket per configured
client, named after client_identity parameter
There is no authentication on these sockets except the UNIX permissions.
The zrepl daemon will refuse to bind any of the above sockets in a
directory that is world-accessible.
[....]
[1] https://zrepl.github.io/configuration/misc.html#runtime-directories-unix-sockets
PR: 256472
Reported by: Raúl <raul.munoz@custos.es>
Diffstat (limited to 'japanese/uim-anthy')
0 files changed, 0 insertions, 0 deletions