summaryrefslogtreecommitdiff
path: root/security/stunnel/patches/patch-stunnel.conf-sample.in
diff options
context:
space:
mode:
Diffstat (limited to 'security/stunnel/patches/patch-stunnel.conf-sample.in')
-rw-r--r--security/stunnel/patches/patch-stunnel.conf-sample.in22
1 files changed, 22 insertions, 0 deletions
diff --git a/security/stunnel/patches/patch-stunnel.conf-sample.in b/security/stunnel/patches/patch-stunnel.conf-sample.in
new file mode 100644
index 00000000000..4ff7446f011
--- /dev/null
+++ b/security/stunnel/patches/patch-stunnel.conf-sample.in
@@ -0,0 +1,22 @@
+$NetBSD: patch-stunnel.conf-sample.in,v 1.1.2.2 2016/09/03 18:13:39 bsiegert Exp $
+
+--- tools/stunnel.conf-sample.in.orig 2016-07-05 21:27:57.000000000 +0000
++++ tools/stunnel.conf-sample.in
+@@ -8,11 +8,14 @@
+ ; **************************************************************************
+
+ ; It is recommended to drop root privileges if stunnel is started by root
+-;setuid = nobody
+-;setgid = @DEFAULT_GROUP@
++setuid = @STUNNEL_USER@
++setgid = @STUNNEL_GROUP@
++
++; Default chroot path
++chroot = @localstatedir@/chroot/stunnel/
+
+ ; PID file is created inside the chroot jail (if enabled)
+-;pid = @localstatedir@/run/stunnel.pid
++pid = /pid/stunnel.pid
+
+ ; Debugging stuff (may be useful for troubleshooting)
+ ;foreground = yes