Re: Bug#258725: Location of net.agent

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Mon, Jul 12, 2004 at 09:02:27AM +0200, Thomas Hood wrote:

> The reason for using net.agent is precisely to delay the processing
> of hotplug network-interface events until such time as the system is
> ready to bring up network interfaces.

 ah ha :)

> We don't want to switch off the hotplug system prior to this because
> then we would miss the events.

 switch off?

 surely you mean switch on?

> Is it really the case that it would be preferable, for SELinux reasons,
> to put net.agent into a subdirectory of /etc/hotplug/ ?

 the alternative is to make a special case for every single
 file that could possibly, now and in the future, write into
 the directory /etc/hotplug.  as you might imagine, that gets
 quite messy quite quickly.

 by recommending a subdirectory, it is possible to do the
 selinux-equivalent of setgid, such that any file in that
 subdirectory will be made writeable to the hotplug scripts.

 (and incidentally, not by anything else _other_ than the hotplug
  scripts, but that's another story)

 it would also then be possible for distributions that guarantee
 the existence of /var on a local filesystem that will have
 been mounted by /etc/init.d/mountall.sh, to symlink /etc/hotplug/run
 to /var/run/hotplug.

 or /etc/hotplug/state to /var/state/hotplug.

 whichever people who have more experience of FHS than i deem to be
 more appropriate.

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.