opnsense-src/libexec/rc/rc.d/securelevel
Cy Schubert 51da4b19be When booting a system with WITHOUT_IPFILTER the following errors
are encountered at boot time:

rcorder: requirement `ipfs' in file `/etc/rc.d/netif' has no providers.
rcorder: requirement `ipfilter' in file `/etc/rc.d/netif' has no
providers.
rcorder: requirement `ipfilter' in file `/etc/rc.d/netwait' has no
providers.
rcorder: requirement `ipfilter' in file `/etc/rc.d/net_watchdog' has no
providers.
rcorder: requirement `ipfilter' in file `/etc/rc.d/securelevel' has no
providers.

Listing its own requrements in BEFORE rather than use REQUIRE of
non-optional scripts resolves this issue.

The issue was discovered and patched by glebius at Netflix.

Submitted by:	glebius
Reported by:	glebius
MFC after:	1 week
2020-08-11 23:36:38 +00:00

30 lines
519 B
Bash
Executable file

#!/bin/sh
#
# $FreeBSD$
#
# PROVIDE: securelevel
# REQUIRE: adjkerntz ipfw pf
. /etc/rc.subr
name="securelevel"
desc="Securelevel configuration"
rcvar='kern_securelevel_enable'
start_cmd="securelevel_start"
stop_cmd=":"
# Last chance to set sysctl variables that failed the first time.
#
/etc/rc.d/sysctl lastload
securelevel_start()
{
if [ ${kern_securelevel} -ge 0 ]; then
echo 'Raising kernel security level: '
${SYSCTL} kern.securelevel=${kern_securelevel}
fi
}
load_rc_config $name
run_rc_command "$1"