Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-28 Thread Cy Schubert
In message <20220828130107.1a76d54a.gre...@freebsd.org>, Michael Gmelin writes: > > > > On Sun, 28 Aug 2022 03:21:24 -0700 > Cy Schubert wrote: > > > In message <16b4-76a1-4e46-b7c3-60492d379...@freebsd.org>, > > Michael Gmelin w > > rites: > > > > > > > > > > > > > On 28. Aug 2022, at 10

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-28 Thread Michael Gmelin
On Sun, 28 Aug 2022 03:21:24 -0700 Cy Schubert wrote: > In message <16b4-76a1-4e46-b7c3-60492d379...@freebsd.org>, > Michael Gmelin w > rites: > > > > > > > > > On 28. Aug 2022, at 10:42, free...@oldach.net wrote: > > >=20 > > > =EF=BB=BFCy Schubert wrote on Sat, 27 Aug 2022 17:26:38 +0

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-28 Thread Cy Schubert
In message <16b4-76a1-4e46-b7c3-60492d379...@freebsd.org>, Michael Gmelin w rites: > > > > > On 28. Aug 2022, at 10:42, free...@oldach.net wrote: > >=20 > > =EF=BB=BFCy Schubert wrote on Sat, 27 Aug 2022 17:26:38 +0200 (CEST): > >> As stated before in this thread, replacing /var/run with tmpf

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-28 Thread Cy Schubert
In message <202208280842.27s8gdxn055...@nuc.oldach.net>, Helge Oldach writes: > Cy Schubert wrote on Sat, 27 Aug 2022 17:26:38 +0200 (CEST): > > As stated before in this thread, replacing /var/run with tmpfs is not a > > supported configuration. > > Not supported? What is the purpose of /etc/rc.d/

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-28 Thread Michael Gmelin
> On 28. Aug 2022, at 10:42, free...@oldach.net wrote: > > Cy Schubert wrote on Sat, 27 Aug 2022 17:26:38 +0200 (CEST): >> As stated before in this thread, replacing /var/run with tmpfs is not a >> supported configuration. > > Not supported? What is the purpose of /etc/rc.d/var then? That cre

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread Cy Schubert
In message <20220827082638.57901a72@slippy>, Cy Schubert writes: > On Sat, 27 Aug 2022 15:38:44 +0200 > Juraj Lutter wrote: > > > > On 27 Aug 2022, at 15:27, Michael Gmelin wrote: > > >=20 > > >=20 > > > =20 > > >> On 27. Aug 2022, at 15:18, free...@oldach.net wrote: > > >>=20 > > >> =EF=BB=BFMi

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread Cy Schubert
On Sat, 27 Aug 2022 15:38:44 +0200 Juraj Lutter wrote: > > On 27 Aug 2022, at 15:27, Michael Gmelin wrote: > > > > > > > >> On 27. Aug 2022, at 15:18, free...@oldach.net wrote: > >> > >> Michael Gmelin wrote on Sat, 27 Aug 2022 15:02:04 +0200 (CEST): > >>> (you're removing /var/run, whi

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread Jamie Landeg-Jones
Michael Gmelin wrote: > I like the idea of having something like tmpfiles.d, it would also help port > maintainers (could also be done as a port). I use tmpfs for /var/run and already have such a script for this very reason (although not clamav) I would have thought each port startup script sh

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread Juraj Lutter
> On 27 Aug 2022, at 15:27, Michael Gmelin wrote: > > > >> On 27. Aug 2022, at 15:18, free...@oldach.net wrote: >> >> Michael Gmelin wrote on Sat, 27 Aug 2022 15:02:04 +0200 (CEST): >>> (you're removing /var/run, which shouldn't be removed >> >> Not quite. It's actually not uncommon to boo

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread Michael Gmelin
> On 27. Aug 2022, at 15:18, free...@oldach.net wrote: > > Michael Gmelin wrote on Sat, 27 Aug 2022 15:02:04 +0200 (CEST): >> (you're removing /var/run, which shouldn't be removed > > Not quite. It's actually not uncommon to boot with an empty /var. Please see > /etc/rc.d/var and related. T

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread Michael Gmelin
> On 27. Aug 2022, at 12:54, FreeBSD User wrote: > > Am Sat, 27 Aug 2022 11:21:40 +0200 > Michael Gmelin schrieb: > On 27. Aug 2022, at 08:31, FreeBSD User wrote: >>> >>> Hello, >>> >>> I'm referencing to Bug 259699 [2] and Bug 259585 [1]. >>> >>> Port security/clamav is without d

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread tuexen
> On 27. Aug 2022, at 08:30, FreeBSD User wrote: > > Hello, > > I'm referencing to Bug 259699 [2] and Bug 259585 [1]. > > Port security/clamav is without doubt for many of FreeBSD users an important > piece of security > software so I assume a widespread usage. > > It is also a not uncommon u

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread FreeBSD User
Am Sat, 27 Aug 2022 11:21:40 +0200 Michael Gmelin schrieb: > > On 27. Aug 2022, at 08:31, FreeBSD User wrote: > > > > Hello, > > > > I'm referencing to Bug 259699 [2] and Bug 259585 [1]. > > > > Port security/clamav is without doubt for many of FreeBSD users an > > important piece of > > se

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread Gleb Popov
This another example of a port that suffers from tmpfiles.d absence in FreeBSD. We need a service in the base system that will create some directories based on configuration files during system start.

Re: security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-27 Thread Michael Gmelin
> On 27. Aug 2022, at 08:31, FreeBSD User wrote: > > Hello, > > I'm referencing to Bug 259699 [2] and Bug 259585 [1]. > > Port security/clamav is without doubt for many of FreeBSD users an important > piece of security > software so I assume a widespread usage. > > It is also a not uncomm

security/clamav: /ar/run on TMPFS renders the port broken by design

2022-08-26 Thread FreeBSD User
Hello, I'm referencing to Bug 259699 [2] and Bug 259585 [1]. Port security/clamav is without doubt for many of FreeBSD users an important piece of security software so I assume a widespread usage. It is also a not uncommon use case to use NanoBSD or any kind of low-memory-footprint installatio