The use of 'REQUIRE:*LOGIN' is usually needed so that nis/ldap/pam/other remote auth for services that need to chuser. snortsam has not need for a user other than root, and having this run BEFORE LOGIN, can cause delays in bootup, more specifically, since snortsam loads lots of 'dontblock' ip's by reading a large 'root server' dns list, it can appear to lock up the system, until it is done. By removing the 'LOGIN' from 'REQUIRE', the cli (console) login can be presented while snortsam is starting. PLEASE NOTE: snort itself isn't even running yet (it does not REQUIRE LOGIN), so there is no real need to risk the delays. Fix: This patch ______________________________________________________________________ This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.spammertrap.com/ ______________________________________________________________________--iXyl6zd6Yt3gA0ycUNDRoIfFtUp0ygZlMFde8bHeTECiSmv4 Content-Type: text/plain; name="snortsam.patch" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="snortsam.patch" Index: files/snortsam.sh.in =================================================================== RCS file: /home/pcvs/ports/security/snortsam/files/snortsam.sh.in,v retrieving revision 1.5 diff -u -r1.5 snortsam.sh.in --- files/snortsam.sh.in 14 Jan 2012 08:56:52 -0000 1.5 +++ files/snortsam.sh.in 28 Jun 2012 15:54:57 -0000 @@ -3,7 +3,6 @@ # PROVIDE: snortsam # REQUIRE: DAEMON -# BEFORE: LOGIN # KEYWORD: shutdown # How-To-Repeat: break dns and reboot system, try to obtain console login.. it could take a timeout of 5 mins per dontblock entry.
Responsible Changed From-To: freebsd-ports-bugs->scheidell Submitter has GNATS access (via the GNATS Auto Assign Tool)
Maintainer of security/snortsam, Please note that PR ports/169524 has just been submitted. If it contains a patch for an upgrade, an enhancement or a bug fix you agree on, reply to this email stating that you approve the patch and a committer will take care of it. The full text of the PR can be found at: http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/169524 -- Edwin Groothuis via the GNATS Auto Assign Tool edwin@FreeBSD.org
State Changed From-To: open->feedback Awaiting maintainers feedback (via the GNATS Auto Assign Tool)
scheidell 2012-07-12 19:51:43 UTC FreeBSD ports repository Modified files: security/snortsam/files snortsam.sh.in Log: - remove rcscript REQUIRE: LOGIN PR: ports/169524 Approved by: maintainer (timeout, 14 days) Revision Changes Path 1.6 +1 -2 ports/security/snortsam/files/snortsam.sh.in _______________________________________________ cvs-all@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/cvs-all To unsubscribe, send any mail to "cvs-all-unsubscribe@freebsd.org"
State Changed From-To: feedback->closed Committed.