[Midnightbsd-cvs] [MidnightBSD/src] 2f634d: prowld.8: document trust requirements for scanned ...

[Lucas Holt]

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 2f634dc2fa4e287ed6f91172e6e0711859a5e392
      https://github.com/MidnightBSD/src/commit/2f634dc2fa4e287ed6f91172e6e0711859a5e392
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-04-19 (Sun, 19 Apr 2026)

  Changed paths:
    M sbin/prowld/prowld.8

  Log Message:
  -----------
  prowld.8: document trust requirements for scanned rc.d scripts

The BACKWARD COMPATIBILITY section described rc.d script discovery but
said nothing about trust.  Add a "Trust requirements for rc.d scripts"
paragraph explaining that the same ownership and writability checks
applied to native unit files are also applied to scanned rc.d scripts:
the entry must be a regular file (symlinks rejected), owned by root,
and not world-writable.  Violations are logged at LOG_WARNING and the
script is skipped.  Note the administrator responsibility for the
parent directories as well.

AI-Assisted-by: Claude Sonnet 4.6



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications