landry 1b7362e4df Update to memcached 1.4.39.
Fixes CVE-2017-9951.

Create var/run/memcached with correct perms/ownership in rc_pre, and
document in README how to make it listen on a unix socket instead of
localhost/network.

ok giovanni@ (maintainer)
2017-07-17 08:35:08 +00:00
..
2017-07-17 08:35:08 +00:00
2017-07-17 08:35:08 +00:00

$OpenBSD: README,v 1.2 2017/07/17 08:35:08 landry Exp $

+-----------------------------------------------------------------------
| Running ${FULLPKGNAME} on OpenBSD
+-----------------------------------------------------------------------

Memcached relies on SASL as authentication mechanisms, if you could not
use it, it should be firewalled accordingly. You may wish
to add a rule such as the following to /etc/pf.conf:

  block on $ext_if proto tcp to ($ext_if) port 11211

An alternative is to listen on a unix socket in /var/run/memcached/sock,
granting write permissions to users in group _memcached.

#rcctl set memcached flags '-u _memcached -s /var/run/memcached/sock -a 0660'