start it as root (normally just add symon to pkg_scripts in
rc.conf.local, assuming your OS is up to date).

it drops privileges *after* opening /dev/pf, _symon is and should
be unprivileged.

On 2011-11-04, f5b <f...@163.com> wrote:
> symon monitor pf?
>
> http://wpd.home.xs4all.nl/symon/documentation.html
>
> Installation notes
>==================
>
> Privileges
>==========
> symux needs read and write access to its rrdfiles.
>
> symon needs to interface with your kernel. Depending on your host system this
> leads to different privilege requirements:
>
> OpenBSD:  - no privs: cpu, debug, df, if, io, mbuf, mem, proc, sensor
>           - rw on /dev/pf for pf
>
> now I want to monitor pf, so we must grant user(_symon) rw Privileges to 
> /dev/pf?
> why need write Privilege? only read Privilege may work?
>
> Will you suggest a workaround?

Reply via email to