mirror of
https://git.hardenedbsd.org/hardenedbsd/HardenedBSD.git
synced 2024-11-27 11:20:58 +01:00
1e106575d2
already set (e.g. a failed/skipped mergemaster run during an upgrade). Without this, if script_name_sep was not set in the rc.conf files, local scripts will not be executed on startup or shutdown. PR: misc/32687 Submitted by: Nicholas Paufler <echofox@discordia.ca> (the problem) Sheldon Hearn (the idea behind the fix) Reviewed by: sheldonh MFC after: 1 week
145 lines
3.7 KiB
Bash
145 lines
3.7 KiB
Bash
#!/bin/sh
|
|
#
|
|
# Copyright (c) 1997 Ollivier Robert
|
|
# All rights reserved.
|
|
#
|
|
# Redistribution and use in source and binary forms, with or without
|
|
# modification, are permitted provided that the following conditions
|
|
# are met:
|
|
# 1. Redistributions of source code must retain the above copyright
|
|
# notice, this list of conditions and the following disclaimer.
|
|
# 2. Redistributions in binary form must reproduce the above copyright
|
|
# notice, this list of conditions and the following disclaimer in the
|
|
# documentation and/or other materials provided with the distribution.
|
|
#
|
|
# THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
|
|
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
|
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
|
# ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
|
|
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
|
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
|
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
|
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
|
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
|
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
|
# SUCH DAMAGE.
|
|
#
|
|
# $FreeBSD$
|
|
#
|
|
|
|
# Site-specific closing actions for daemons run by init on shutdown,
|
|
# or before going single-user from multi-user.
|
|
# Output and errors are directed to console by init, and the
|
|
# console is the controlling terminal.
|
|
|
|
stty status '^T'
|
|
|
|
# Set shell to ignore SIGINT (2), but not children;
|
|
# shell catches SIGQUIT (3) and returns to single user after fsck.
|
|
trap : 2
|
|
trap : 3 # shouldn't be needed
|
|
|
|
HOME=/
|
|
PATH=/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/sbin
|
|
export HOME PATH
|
|
|
|
# If there is a global system configuration file, suck it in.
|
|
#
|
|
if [ -r /etc/defaults/rc.conf ]; then
|
|
. /etc/defaults/rc.conf
|
|
source_rc_confs
|
|
elif [ -r /etc/rc.conf ]; then
|
|
. /etc/rc.conf
|
|
fi
|
|
|
|
# Write some entropy so the rebooting /dev/random can reseed
|
|
#
|
|
case ${entropy_file} in
|
|
[Nn][Oo] | '')
|
|
;;
|
|
*)
|
|
echo -n 'Writing entropy file:'
|
|
rm -f ${entropy_file}
|
|
oumask=`umask`
|
|
umask 077
|
|
if touch ${entropy_file} ; then
|
|
entropy_file_confirmed="${entropy_file}"
|
|
else
|
|
# Try this as a reasonable alternative for read-only
|
|
# roots, diskless workstations, etc.
|
|
rm -f /var/db/entropy
|
|
if touch /var/db/entropy ; then
|
|
entropy_file_confirmed=/var/db/entropy
|
|
fi
|
|
fi
|
|
case ${entropy_file_confirmed} in
|
|
'')
|
|
echo ' ERROR - entropy file write failed'
|
|
;;
|
|
*)
|
|
dd if=/dev/random of=${entropy_file_confirmed} \
|
|
bs=4096 count=1 2> /dev/null
|
|
echo '.'
|
|
;;
|
|
esac
|
|
umask ${oumask}
|
|
;;
|
|
esac
|
|
|
|
# Check if /var/db/mounttab is clean.
|
|
case $1 in
|
|
reboot)
|
|
if [ -f /var/db/mounttab ]; then
|
|
rpc.umntall
|
|
fi
|
|
;;
|
|
esac
|
|
|
|
echo -n 'Shutting down daemon processes:'
|
|
|
|
# for each valid dir in $local_startup, search for init scripts matching *.sh
|
|
case ${local_startup} in
|
|
[Nn][Oo] | '')
|
|
;;
|
|
*)
|
|
slist=""
|
|
if [ -z "${script_name_sep}" ]; then
|
|
script_name_sep=" "
|
|
fi
|
|
for dir in ${local_startup}; do
|
|
if [ -d "${dir}" ]; then
|
|
for script in ${dir}/*.sh; do
|
|
slist="${script}${script_name_sep}${slist}"
|
|
done
|
|
fi
|
|
done
|
|
script_save_sep="$IFS"
|
|
IFS="${script_name_sep}"
|
|
for script in ${slist}; do
|
|
if [ -x "${script}" ]; then
|
|
(set -T
|
|
trap 'exit 1' 2
|
|
${script} stop)
|
|
fi
|
|
done
|
|
IFS="${script_save_sep}"
|
|
echo '.'
|
|
;;
|
|
esac
|
|
|
|
# Insert other shutdown procedures here
|
|
|
|
# Saving firewall state tables should be done last
|
|
echo -n 'Saving firewall state tables:'
|
|
|
|
# Save IP-filter state tables
|
|
case ${ipfs_enable} in
|
|
[Yy][Ee][Ss])
|
|
echo -n ' ipfs'
|
|
${ipfs_program:-/sbin/ipfs} -W ${ipfs_flags}
|
|
;;
|
|
esac
|
|
|
|
echo '.'
|
|
exit 0
|