On Wed, Feb 10, 2016, at 11:28, Matteo Riondato wrote: > > > On Feb 10, 2016, at 12:04 PM, Ronald Klop <ronald-li...@klop.ws> wrote: > > > > On Wed, 10 Feb 2016 17:13:59 +0100, Mark Felder <f...@freebsd.org> wrote: > > > >> Author: feld (ports committer) > >> Date: Wed Feb 10 16:13:59 2016 > >> New Revision: 295471 > >> URL: https://svnweb.freebsd.org/changeset/base/295471 > >> > >> Log: > >> Add new rc.conf parameter "jail_reverse_stop" > >> When a user defines "jail_list" in rc.conf the jails are started in the > >> order defined. Currently the jails are not are stopped in reverse order > >> which may break dependencies between jails/services and prevent a clean > >> shutdown. The new parameter "jail_reverse_stop" will shutdown jails in > >> "jail_list" in reverse order when set to "YES". > >> Please note that this does not affect manual invocation of the jail rc > >> script. If a user runs the command > >> # service jail stop jail1 jail2 jail3 > >> the jails will be stopped in exactly the order specified regardless of > >> jail_reverse_stop being defined in rc.conf. > >> PR: 196152 > > > > Good feature. I know POLA is always very important in FreeBSD development, > > but having this setting on by default seems very reasonable to me. > > +1, perhaps with a note in UPDATING and, when MFC’ed, having the default > to off. >
I also agree it's probably fine to be enabled by default in CURRENT, but the last thing I wanted to do was throw an unexpected wrench into the next cluster refresh and make Pete even more Evil. -- Mark Felder ports-secteam member f...@freebsd.org _______________________________________________ svn-src-all@freebsd.org mailing list https://lists.freebsd.org/mailman/listinfo/svn-src-all To unsubscribe, send any mail to "svn-src-all-unsubscr...@freebsd.org"
