mailman/rc.mailman

Mon, 20 Apr 2009 19:22:00 +0200

author
Michael Schloh von Bennewitz <michael@schloh.com>
date
Mon, 20 Apr 2009 19:22:00 +0200
changeset 178
0ba300bdf30a
parent 9
871621b80702
permissions
-rw-r--r--

Change unfortunate but partly useful overreaching security tradeoff.
The principle of allocating each running process an individual system
user and group can have security benefits, however maintining a plethora
of users, groups, processes, file modes, file permissions, and even
nonportable file ACLs on a host serving from a hundred processes has
some security disadvantages. This tradeoff is even worse for systems
like OpenPKG which benefit from administration transparency through the
use of minimal system intrusion and only three usage privilege levels.

     1 #!@l_prefix@/bin/openpkg rc
     2 ##
     3 ##  rc.mailman -- Run-Commands
     4 ##
     6 %config
     7     mailman_enable="$openpkg_rc_def"
     9 %common
    10     mailman_ctl="@l_prefix@/libexec/mailman/bin/mailmanctl"
    11     qrunner_pidfile="@l_prefix@/var/mailman/data/master-qrunner.pid"
    12     qrunner_signal () {
    13         [ -f $qrunner_pidfile ] && kill -$1 `cat $qrunner_pidfile`
    14     }
    16 %status -u @l_susr@ -o
    17     mailman_usable="unknown"
    18     mailman_active="no"
    19     rcService mailman enable yes && \
    20         qrunner_signal 0 && mailman_active="yes"
    21     echo "mailman_enable=\"$mailman_enable\""
    22     echo "mailman_usable=\"$mailman_usable\""
    23     echo "mailman_active=\"$mailman_active\""
    25 %start -u @l_susr@
    26     rcService mailman enable yes || exit 0
    27     rcService mailman active yes && exit 0
    28     @l_prefix@/bin/python ${mailman_ctl} -s -q start
    30 %stop -u @l_susr@
    31     rcService mailman enable yes || exit 0
    32     rcService mailman active no  && exit 0
    33     @l_prefix@/bin/python ${mailman_ctl} -q stop
    34     sleep 2
    36 %restart -u @l_susr@
    37     rcService mailman enable yes || exit 0
    38     rcService mailman active no  && exit 0
    39     @l_prefix@/bin/python ${mailman_ctl} -q restart
    40     sleep 2
    42 %quarterly -u @l_susr@
    43     rcService mailman enable yes || exit 0
    44     @l_prefix@/bin/python -S @l_prefix@/libexec/mailman/cron/gate_news
    46 %daily -u @l_nusr@
    47     rcService mailman enable yes || exit 0
    48     @l_prefix@/bin/python -S @l_prefix@/libexec/mailman/cron/checkdbs
    49     @l_prefix@/bin/python -S @l_prefix@/libexec/mailman/cron/disabled
    50     @l_prefix@/bin/python -S @l_prefix@/libexec/mailman/cron/senddigests
    51     @l_prefix@/bin/python -S @l_prefix@/libexec/mailman/cron/nightly_gzip
    53 %monthly -u @l_susr@
    54     rcService mailman enable yes || exit 0
    55     @l_prefix@/bin/python -S @l_prefix@/libexec/mailman/cron/mailpasswds

mercurial