From 047befef9b8ef074d34b05e294d753f6c2751987 Mon Sep 17 00:00:00 2001 From: Laurent Bercot Date: Wed, 23 Sep 2015 19:13:22 +0000 Subject: No need for -a in s6-rc -u invocation; remove -X from dryrun print --- doc/s6-rc-compile.html | 25 +++++++++++++++---------- 1 file changed, 15 insertions(+), 10 deletions(-) (limited to 'doc/s6-rc-compile.html') diff --git a/doc/s6-rc-compile.html b/doc/s6-rc-compile.html index 8e4b279..51396b3 100644 --- a/doc/s6-rc-compile.html +++ b/doc/s6-rc-compile.html @@ -90,8 +90,9 @@ to operate the database. If neither option is used, then root It is important to only use the -u or -g options when the user owning the supervision tree is not root. The internal s6-rc mechanisms allow uids and gids specified by those -options to run any program as the user owning the supervision tree; -if that user is root, this becomes an easy avenue for unwanted +options to run any oneshot in the compiled service database as the +user owning the supervision tree; +if that user is root, this becomes an avenue for unwanted privilege gain. Only specify users that have the right to operate the supervision tree!

@@ -201,7 +202,8 @@ compiled database in an internal form. up will be run when the service is started, and down will be executed when the service is stopped. up is mandatory, but down is optional; if no down file is provided in the source definition directory, -then s6-rc will consider that the down transition for this service +then it is treated as the empty script. If a script is empty, +then s6-rc will consider that the corresponding transition for this service does nothing and always succeeds. @@ -302,10 +304,14 @@ use relative paths, not absolute ones.

- Note that you cannot create a down file in a generated service + Note that you cannot create a ./down file for +s6-supervise +in a generated service directory. Even if such a file exists in the definition directory, it will -be ignored. This is intentional: -s6-rc internally uses down files to mark longrun +be ignored - it will not be replicated in the service directory. +This is intentional: +s6-rc internally uses ./down files in +the service directories it manages, to mark longrun services that are down.

@@ -338,9 +344,7 @@ indefinite number of longrun services this way.
  • The first producer may declare a name for the whole pipeline, in its pipeline-name file. If it does so, then a bundle is automatically created with -the given name, and it contains all the services in the pipeline (plus the -automatically generated supporting services that open and store the -pipes).
  • +the given name, and it contains all the services in the pipeline.

    @@ -357,7 +361,8 @@ detect and reject cycles as well as collisions.

    - The pipe linking a producer and a consumer is created and stored at run-time in a + The pipe linking a producer with a consumer is created and stored at +run-time in a s6-fdholder-daemon instance managed by an automatically generated longrun service named s6rc-fdholder. -- cgit v1.2.3