| Newsgroups |
gmane.os.openbsd.ports |
| Message-ID |
<[email protected]> |
Le Mon, Aug 17, 2026 at 05:35:39PM +0200, [email protected] a écrit :
> Le Thu, Jul 23, 2026 at 06:27:37PM +0200, Lydia Sobot a écrit :
> > On July 1, 2026 12:18:27 GMT+02:00, [email protected] wrote:
> > >Made my Rust port into a patch that adds the dedicated reaction user.
> > >
> > >The rc.d uglyness is now gone, but requires a patch to the Rust code
> > >to set the correct permissions on the socket. Would prefer to have
> > >this patch in upstream first if commited.
> > >
> > >The pkg/MESSAGE is updated to notify of the daemon user changes and
> > >point to the very crucial pkg/README for setup.
> > >
> > >files/authlog.jsonnet has some new regexes to match that were taken
> > >from the reaction documentation.
> > >
> > >Added Lydia as maintainer since I have no objection.
> > Looks pretty good to me actually, could this get merged? The patch will
> > be in the next release but no ETA on when so I say we go for this for now
>
> i've left this mail unread (as "to reply someday") for too long, but the
> README bits about giving access to authlog bother me. changing group
> ownership or perms on authlog won't fly on the long term, as newsyslog
> will reset those at its next run, so in that case /etc/newsyslog.conf
> also needs tweaking. putting the _reaction user in wheel group is
> awkward too.
looking more and after feedback from others, changing perms will trip
security(8) mails, so that's a no-go. you have the option to duplicate
auth.info in syslog.conf to another file, but meh.
another option would be to have the default config run doas tail -f
/var/log/authlog, and adjust the doas.conf lines in README, but at that
point.. *shrug*.
or reaction has always been meant to run as root, and we should live with that ?