en Copyright 2015 Java http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipnat#f99f0ee14e3af81c23150a6a340259ca8a33d01a rc.d: add a service jails config to all base system servicesThis gives more permissions to services (e.g. network access toservices which require this) when they are started as an automaticservice jail.The sshd patch is important for the sshd-related functionality asdescribed in the man-page in the service jails part.The location of the added env vars is supposed to allow overriding themin rc.conf, and to hard-disable the use of svcj for some parts where itdoesn't make sense or will not work.Only a subset of all of the services are fully tested (I'm running thissince more than a year with various services started as service jails).The untested parts should be most of the time ok, in some edge-casesmore permissions are needed inside the service jail.Differential Revision: https://reviews.freebsd.org/D40371 List of files: /freebsd/libexec/rc/rc.d/ipnat Wed, 22 May 2024 15:31:47 +0200 Alexander Leidinger <netchild@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipnat#d0b2dbfa0ecf2bbc9709efc5e20baf8e4b44bbbf Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd/libexec/rc/rc.d/ipnat Wed, 16 Aug 2023 19:55:03 +0200 Warner Losh <imp@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipnat#de6fc2e39bc1d88511b62ed3a6834a6f0cd6b3a4 Merge ^/head r364082 through r364250. List of files: /freebsd/libexec/rc/rc.d/ipnat Sat, 15 Aug 2020 13:49:31 +0200 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipnat#440cec3faf778469b36b998bb52aab7fbc43eae3 MFHSponsored by: Rubicon Communications, LLC (netgate.com) List of files: /freebsd/libexec/rc/rc.d/ipnat Wed, 12 Aug 2020 19:16:26 +0200 Glen Barber <gjb@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipnat#51da4b19be15e6c1862e40565d7a3b310c566679 When booting a system with WITHOUT_IPFILTER the following errorsare encountered at boot time:rcorder: requirement `ipfs' in file `/etc/rc.d/netif' has no providers.rcorder: requirement `ipfilter' in file `/etc/rc.d/netif' has noproviders.rcorder: requirement `ipfilter' in file `/etc/rc.d/netwait' has noproviders.rcorder: requirement `ipfilter' in file `/etc/rc.d/net_watchdog' has noproviders.rcorder: requirement `ipfilter' in file `/etc/rc.d/securelevel' has noproviders.Listing its own requrements in BEFORE rather than use REQUIRE ofnon-optional scripts resolves this issue.The issue was discovered and patched by glebius at Netflix.Submitted by: glebiusReported by: glebiusMFC after: 1 week List of files: /freebsd/libexec/rc/rc.d/ipnat Wed, 12 Aug 2020 01:36:38 +0200 Cy Schubert <cy@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipnat#c7aa572cacdeca83c35c12a378909d0b659300a9 MFHSponsored by: Rubicon Communications, LLC (netgate.com) List of files: /freebsd/libexec/rc/rc.d/ipnat Fri, 31 Jul 2020 21:37:45 +0200 Glen Barber <gjb@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipnat#795be686d8c4cbacd2c78a773b1bf2a98dfa61f3 Load ipfilter, ipnat, and ippool rules, and start ipmon in a vnet jail.PR: 248109Reported by: joeb1@a1poweruser.comMFC after: 2 weeks List of files: /freebsd/libexec/rc/rc.d/ipnat Thu, 23 Jul 2020 19:39:45 +0200 Cy Schubert <cy@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipnat#c6879c6c14eedbd060ba588a3129a6c60ebbe783 Merge ^/head r339015 through r339669. List of files: /freebsd/libexec/rc/rc.d/ipnat Tue, 23 Oct 2018 23:09:37 +0200 Dimitry Andric <dim@FreeBSD.org> http://kernelsources.org:8080/source/history/freebsd/libexec/rc/rc.d/ipnat#0696600c41600d80bcd993bfd8e675d0ae6951fe Move the rc framework out of sbin/init into libexec/rc.The reasons for this are forward looking to pkgbase: * /sbin/init is a special binary; try not to replace it with every package update because an rc script was touched. (a follow-up commit will make init its own package) * having rc in its own place will allow more easy replacement of the rc framework with alternatives, such as openrc.Discussed with: brd (during BSDCam), kmooreRequested by: cem, bzPR: 231522Approved by: re (gjb) List of files: /freebsd/libexec/rc/rc.d/ipnat Wed, 17 Oct 2018 18:49:11 +0200 Bjoern A. Zeeb <bz@FreeBSD.org>