Re: Installing dnscache with runit, without other djb utils

[Charlie Brady <charlieb-supervision@budge.apana.org.au>]

On Thu, 28 Sep 2006, Roy Lanek wrote:

> ** Sorry for answering late

And sorry for following up very late - but there's an error here worth 
highlighting given the "recently discovered" issues with DNS query port 
randomisation.

> #!/bin/sh
> exec 2>&1
> cd '/etc/dnscache' || exit 1
>
> # -- seed:
> umask 077
> /bin/rm -f seed
> /bin/dd if=/dev/urandom bs=128 count=1 > seed 2> /dev/null
>    # -- "Linux has a good source of random data, use 128
>    # -- bytes of it to pass it to 'dns_random_init' (via
>    # -- 'seed')."^1
>
> exec chpst -U yyy -e ./env -o 250 -d "$DATALIMIT" \
>        /usr/bin/dnscache

There's something important missing here. You need to do:

exec<seed

or

exec chpst -U yyy -e ./env -o 250 -d "$DATALIMIT" \
         /usr/bin/dnscache <seed