Re: ifupdown writes to /etc... a bug?
Russell Coker <russell@coker.com.au> writes:
> On Fri, 28 Mar 2003 01:29, Goswin Brederlow wrote:
> > > smpasswd is more like /etc/passwd.
> > >
> > > It could perhaps be argued that maybe it should go under /var/lib.
>
> Same goes for /etc/passwd.
>
> > > In any case, smbpasswd isn't a requirement for using a samba server,
> > > I believe you can use network based authentication...
>
> True, but we want full functionality.
Want but not require. As long as nothing breaks too much thats fine. I
can live with a static passwd on a router for example. Shouldn't realy
have user accounts and i don't want someone who gained root hange the
passwd.
If there is some documentation what gets restricted and how one can
circumvent that (e.g. create /mem fs and link /etc/mtab there) that
would be a great help already.
Then when more people use it ideas will come up on how to fix the
remaining things that anoy but don't break the system.
> > > Why does hotplug need to be changed?
> >
> > Does that handle network cards and thus needs to write /etc/resolv.conf?
>
> If it does then my SE policy for it is incomplete. I have not seen it touch
> /etc/resolv.conf. It writes to /etc/nohotplug at least.
What does that do? Same as /etc/nologin?
> > > /etc/ntp.drift and/or /etc/adjtime might be a problem, I gather not only
> > > to they need to be writable at boot time, but the state needs to be
> > > preserved across boots.
> >
> > A ntpd without network is pretty useless and as soon as network is
> > setup all filesystems can be mounted before ntpd is run. Also a
>
> I agree. /var is a good place for ntp.drift. adjtime is another issue
> however, don't we want to read that before starting daemons in the case of a
> machine that has been powered down for a while?
/etc/adjtime is used by hwclock upon boot and nothing else (during
boot), right?
/etc/rcS.d/S18hwclockfirst.sh specifically does no write access to /etc
and doesn't use adjtime. If it did it runs after S10checkroot.sh which
would mount /mem.
/etc/rcS.d/S50hwclock.sh uses /etc/adjtime but thats way after all
filesystems have been mounted.
I don't think /etc/adjtime is a problem. hwclock and adjtimex should
be checked that they work with a syxmlink for /etc/adjtime or patched
to use /var directly.
MfG
Goswin
PS: even with a RO / I never had problems with /etc/ajdtime. If it
can't be written the system can drift a little. No big problem, it
does anyway even with a correct /etc/adjtime.
Reply to: