dhcpcd now uses pledge(), there are some articles with findings from the process that may be of interest to readers: https://roy.marples.name/blog/capsicum_vs_pledge.html https://roy.marples.name/blog/capsicum_vs_pledge_part2.html port change: move the homedir for the @newuser to /var/empty now that dhcpcd no longer requires files inside the chroot directory.
38 lines
1.4 KiB
Plaintext
38 lines
1.4 KiB
Plaintext
@comment $OpenBSD: PLIST,v 1.14 2020/06/04 13:45:11 sthen Exp $
|
|
@newgroup _dhcpcd:846
|
|
@newuser _dhcpcd:846:_dhcpcd:daemon:dhcpcd user:/var/empty:/sbin/nologin
|
|
@owner root
|
|
@group wheel
|
|
@sample /var/dhcpcd/
|
|
@owner
|
|
@group
|
|
@rcscript ${RCDIR}/dhcpcd
|
|
libexec/dhcpcd-hooks/
|
|
libexec/dhcpcd-hooks/01-test
|
|
libexec/dhcpcd-hooks/20-resolv.conf
|
|
libexec/dhcpcd-hooks/30-hostname
|
|
libexec/dhcpcd-hooks/50-ntp.conf
|
|
libexec/dhcpcd-run-hooks
|
|
@man man/man5/dhcpcd.conf.5
|
|
@man man/man8/dhcpcd-run-hooks.8
|
|
@man man/man8/dhcpcd.8
|
|
@bin sbin/dhcpcd
|
|
share/dhcpcd/
|
|
share/dhcpcd/hooks/
|
|
share/dhcpcd/hooks/10-wpa_supplicant
|
|
share/dhcpcd/hooks/15-timezone
|
|
share/dhcpcd/hooks/29-lookup-hostname
|
|
share/dhcpcd/hooks/50-ypbind
|
|
share/doc/pkg-readmes/${PKGSTEM}
|
|
share/examples/dhcpcd/
|
|
share/examples/dhcpcd/dhcpcd.conf
|
|
@sample ${SYSCONFDIR}/dhcpcd.conf
|
|
@owner _dhcpcd
|
|
@group _dhcpcd
|
|
@sample ${LOCALSTATEDIR}/db/dhcpcd/
|
|
@comment handle DUID file move for a smoother transition to 7.0
|
|
@exec-update [[ ! -f ${LOCALSTATEDIR}/db/dhcpcd/duid ]] && [[ -r ${SYSCONFDIR}/dhcpcd.duid ]] && cp ${SYSCONFDIR}/dhcpcd.duid ${LOCALSTATEDIR}/db/dhcpcd/duid; true
|
|
@comment fix dir ownership for upgrades from before privsep was added in 9.0
|
|
@exec-update [[ -d ${LOCALSTATEDIR}/db/dhcpcd ]] && chown -R _dhcpcd:_dhcpcd ${LOCALSTATEDIR}/db/dhcpcd
|
|
@exec-update getent passwd _dhcpcd | grep -q /var/dhcpcd && usermod -d /var/empty _dhcpcd || true
|