On Thu, Jan 20, 2022 at 10:07:13AM +0100, Omar Polo wrote: > Hello ports, > > Please find attached a diff to update net/gophernicus to the latest > version. > > The changelog for 3.1.0 is quite interesting, as they added pledge(2) > and unveil(2) support and changed the build system (among other things.) > 3.1.1 is just some bugfixes on the build system. > > Unfortunately the pledge/unveil support is disabled by default and a few > command line switches are needed to enable it: gophernicus uses shared > memory and allows exec'ing arbitrary scripts from gophermaps, so one > needs at least -nm and -nx to respectively disable them to run under > pledge and unveil. -nu disables serving from users home directory and > seems tightens it a bit more. That's why I've changed the pkg/README to > suggest running with those flags. > > Some installed files (such as TODO) are not available anymore, and since > I was there I've also removed INSTALL.md as I don't see any reason to > install it too. > > This still keeps gophernicus installed as libexec/in.gophernicus to > avoid breaking existing setups. > > As I've only tested it on localhost, some real world usage is much > appreciated :) > >
Do you think the pkg_readme could be improved by pointing users to rcctl enable inetd and rcctl start/restart inetd? Just an idea. I'm not sure what we do for other ports that have these kind of daemon requirements. -- Tracey Emery
