dhcpcd-discuss

dhcpcd-9 plans

Roy Marples

Wed Nov 13 11:19:47 2019

Hi List

There has been interest in some camps for importing dhcpcd into their base system, but a lack of priviledge separation is currently a show stopper.

I've been working on this for a month now and have a basic working model, but only for master mode opertaions. I aim to make it work for all modes before pushing my changes - although it may not work on Solaris initially.

As part of the dhcpcd-8.1.2 release I also including some minor refactoring of the code to reduce the diff between privsep and master.

My current plan is to finish my privsep work, push the required changes for it into master and then fork off a dhcpcd-8 branch. So consider this an annoncement that no new features will be added to dhcpcd-8 and it will only get serious issues fixed from this point on.

As part of the privsep work, the RUNDIR needs changing from /var/run to /var/run/dhcpcd so that the unprivledged main process can exit cleanly. Other than that, the privsep code is *optional* so you don't have to compile it in. But if you do, it will always run in privsep mode and a user will be required to be added to the system - default _dhcpcd but can be changed.

Roy

Follow-Ups:
Re: dhcpcd-9 plansRoy Marples
Re: dhcpcd-9 plansTim Tassonis
Archive administrator: postmaster@marples.name