Bug 136970 – net-firewall/ipsec-tools-0.6.5 - racoon init script problem

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description László Zrubecz 2006-06-16 03:05:22 UTC]

Racoon has a feautre when it's start an unprivileged process in a chroot directory.

In this case the pid file created under the chroot dir, and the init script has a 'static' variable holding the pid file path.

The worst is if I made a simlink for the pid file, the init script kills only the unprivileged process not the parent... 

So if you use the chroot + 'unprivileged user' feature, the only way to stop the racoon daemon is: `killall racoon`

[Comment 1 Jakub Moc (RETIRED) 2006-06-16 03:18:18 UTC]

Reopen with ebuild name and version... Not going to ponder which apps installs this.

[Comment 2 László Zrubecz 2006-06-16 03:25:31 UTC]

Sorry about this...

package: 
net-firewall/ipsec-tools-0.6.5

The init script: 
/etc/init.d/racoon

And the relevant config section (from /etc/racoon/racoon.conf)

privsep
{
        user "racoon";
        group "racoon";
        chroot "/var/jail/racoon";
}

[Comment 3 László Zrubecz 2006-06-16 03:43:40 UTC]

Created attachment 89295 [details, diff]
racoon init script patch

The simplest solution :)

[Comment 4 Jakub Moc (RETIRED) 2006-06-16 03:47:35 UTC]

Thanks.

[Comment 5 Flophouse Joe 2007-03-03 20:52:57 UTC]

For the record, I had this same problem with racoon running chrooted.  Using the resolution in this bug and switching to "killall racoon" in the initscript resolved the problem for me.

I propose that this change be put into portage, as I don't currently see it there.

[Comment 6 Daniel Black (RETIRED) 2007-04-21 11:42:12 UTC]

better fix is hopefully in bug #151375