On 2020/06/11 19:49, Nam Nguyen wrote: > This is an update for net/dnscrypt-proxy 2.0.44, released June 11, 2020. > > Changelogs: > https://github.com/DNSCrypt/dnscrypt-proxy/blob/2.0.44/ChangeLog > https://github.com/DNSCrypt/dnscrypt-proxy/blob/2.0.43/ChangeLog > > A config breaking change is that the `tls_client_auth' section was > renamed to `doh_client_x509_auth', but it errors out to notify the user > if this is a problem. > > - "cache files are now downloaded as the user the daemon will be running > as. This fixes permission issues at startup time."
The existing files need to have their ownership changed don't they? That could be done with @exec-update or in the rc script. > Larry Hynes reported this bug, and it was fixed by upstream (Frank Denis). > https://github.com/DNSCrypt/dnscrypt-proxy/commit/6f2dcb900af01954a424e0d38bf0d16d9c599607 > > Port-wise to support downloading cache files, PLIST is manually changed > to have @mode 775 and @owner/@group to _dnscrypt-proxy for > /var/dnscrypt-proxy. Does 775 seem fine? 775 seems ok, I would have it owned by root:_dnscrypt-proxy though, even if only to avoid blowing out the columns in ls -l /var quite so much..
