OpenPKG Specs: mico/rc.mico@0ba300bdf30a

Change unfortunate but partly useful overreaching security tradeoff.
The principle of allocating each running process an individual system
user and group can have security benefits, however maintining a plethora
of users, groups, processes, file modes, file permissions, and even
nonportable file ACLs on a host serving from a hundred processes has
some security disadvantages. This tradeoff is even worse for systems
like OpenPKG which benefit from administration transparency through the
use of minimal system intrusion and only three usage privilege levels.

     1 #!@l_prefix@/bin/openpkg rc

     2 ##

     3 ##  rc.mico -- Run-Commands

     4 ##

     6 %config

     7     mico_enable="$openpkg_rc_def"

     8     mico_micod="no"

     9     mico_nsd="no"

    10     mico_ip_micod="127.0.0.1"

    11     mico_ip_nsd="127.0.0.1"

    12     mico_micod_args="-ORBGIOPVersion 1.2 -ORBIIOPVersion 1.2 -ORBIIOPAddr inet:${mico_ip_micod}:8912"

    13     mico_nsd_args="-ORBGIOPVersion 1.2 -ORBIIOPVersion 1.2 -ORBIIOPAddr inet:${mico_ip_nsd}:8914"

    15 %common

    16     mico_micod_pidfile="@l_prefix@/var/mico/micod.pid"

    17     mico_nsd_pidfile="@l_prefix@/var/mico/nsd.pid"

    18     mico_signal () {

    19         local rc_micod=0

    20         local rc_nsd=0

    21         if rcVarIsYes mico_micod; then

    22             [ -f $mico_micod_pidfile ] \

    23             && kill -$1 `cat $mico_micod_pidfile`

    24             rc_micod=$?

    25         fi

    26         if rcVarIsYes mico_nsd; then

    27             [ -f $mico_nsd_pidfile ] \

    28             && kill -$1 `cat $mico_nsd_pidfile`

    29             rc_nsd=$?

    30         fi

    31         [ $rc_micod -eq 0 -a $rc_nsd -eq 0 ]

    32     }

    34 %status -u @l_rusr@ -o

    35     mico_usable="unknown"

    36     mico_active="no"

    37     rcService mico enable yes && \

    38         ( rcVarIsYes mico_micod || rcVarIsYes mico_nsd ) && \

    39         mico_signal 0 && mico_active="yes"

    40     echo "mico_enable=\"$mico_enable\""

    41     echo "mico_usable=\"$mico_usable\""

    42     echo "mico_active=\"$mico_active\""

    44 %start -u @l_rusr@

    45     rcService mico enable yes || exit 0

    46     rcService mico active yes && exit 0

    47     #   run the object adapter daemon for dynamic object activation

    48     if rcVarIsYes mico_micod; then

    49         @l_prefix@/bin/micod ${mico_micod_args} &

    50         echo $! >$mico_micod_pidfile

    51     fi

    52     #   run the name service daemon for flexible object indexing

    53     if rcVarIsYes mico_nsd; then

    54         @l_prefix@/bin/nsd ${mico_nsd_args} &

    55         echo $! >$mico_nsd_pidfile

    56     fi

    58 %stop -u @l_rusr@

    59     rcService mico enable yes || exit 0

    60     rcService mico active no && exit 0

    61     mico_signal TERM

    62     rm -f $mico_micod_pidfile 2>/dev/null || true

    63     rm -f $mico_nsd_pidfile 2>/dev/null || true

    65 %restart -u @l_rusr@

    66     rcService mico enable yes || exit 0

    67     rcService mico active no && exit 0

    68     rc mico stop

    69     sleep 2

    70     rc mico start

OpenPKG Specs / file revision

mico/rc.mico@0ba300bdf30a

mico/rc.mico