I'm not sure what stage he's at, but espie has been doing some work on
dynamic uid for ports where the actual numeric uid doesn't matter.
On 2024/11/02 07:54, Theo de Raadt wrote:
> Eventally there will be no reserved ports available in the 512-1023 space,
> because they've all been allocated by chicken-shit.
>
> Klemens Nanni <kn@openbsd.org> wrote:
>
> > yggdrasil can drop from root to an unprivileged user, so I'd like to do that in our port.
> >
> > For that I'd like to recycle the oldest commented-out ID we have.
> >
> > Feedback? OK?
> >
> > Index: user.list
> > ===================================================================
> > RCS file: /cvs/ports/infrastructure/db/user.list,v
> > diff -u -p -r1.450 user.list
> > --- user.list 28 Aug 2024 23:11:36 -0000 1.450
> > +++ user.list 2 Nov 2024 12:56:47 -0000
> > @@ -101,7 +101,7 @@ id user group port
> > 590 _smsd _smsd comms/smstools
> > 591 _bacula _bacula sysutils/bacula
> > 592 _imapproxy _imapproxy mail/imapproxy
> > -#593 _nginx _nginx www/nginx
> > +593 _yggdrasil _yggdrasil net/yggdrasil-go
> > #594 _ejabberd _ejabberd net/ejabberd
> > 595 _poppassd _poppassd sysutils/openpoppassd
> > #596 _heartbeat _heartbeat sysutils/heartbeat
> >
>
No comments:
Post a Comment