<?xml version="1.0"?>

<!--

CDDL HEADER START

The contents of this file are subject to the terms of the

Common Development and Distribution License (the "License").

You may not use this file except in compliance with the License.

You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

or http://www.opensolaris.org/os/licensing.

See the License for the specific language governing permissions

and limitations under the License.

When distributing Covered Code, include this CDDL HEADER in each

file and include the License file at usr/src/OPENSOLARIS.LICENSE.

If applicable, add the following below this CDDL HEADER, with the

fields enclosed by brackets "[]" replaced with your own identifying

information: Portions Copyright [yyyy] [name of copyright owner]

CDDL HEADER END

-->

<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">

<!--

Copyright (c) 2004, 2011, Oracle and/or its affiliates. All rights reserved.

-->

<!-- Portions Copyright 2007 Vedran Bender -->

<service_bundle type='manifest' name='SUNWbindr:dns-server'>

<service

  name='network/dns/server'

  type='service'

  version='1'>

    <dependency

      name='filesystem_minimal'

      grouping='require_all'

      restart_on='none'

      type='service'>

      <service_fmri value='svc:/system/filesystem/local' />

    </dependency>

    <dependency

      name='loopback'

      grouping='require_any'

      restart_on='error'

      type='service'>

      <service_fmri value='svc:/network/loopback' />

    </dependency>

    <dependency

      name='network'

      grouping='optional_all'

      restart_on='error'

      type='service'>

      <service_fmri value='svc:/milestone/network' />

    </dependency>

    <exec_method

      type='method'

      name='stop'

      exec=':kill'

      timeout_seconds='60' />

    <!--

      	In order to run multiple named(1M) processes with their own

      	configuration file or properties each must have a unique

      	instance.

    -->

    <instance name='default' enabled='false' >

      <exec_method

	type='method'

	name='start'

	exec='/lib/svc/method/dns-server %m %i'

	timeout_seconds='60' >

	<method_context>

	  <!--

	  	privileges: (see privileges(5) and /etc/security/priv_names)

		file_dac_read, file_dac_search:

	  		Necessary for reading the configuration file

			even it is restricted by the file permission.

	  	net_privaddr:

	  		Bind to a privileged port number.

  		sys_resource:

	  		Permit the setting of resource limits (eg. stack

	  		size).

		proc_chroot:

	  		Permit use of chroot(2).

	  -->

	  <method_credential

	    user='root'

	    group='root'

	    privileges='basic,!proc_session,!proc_info,!file_link_any,net_privaddr,file_dac_read,file_dac_search,sys_resource,proc_chroot' />

	</method_context>

      </exec_method>

      <!--

	      SIGHUP causes named to reread its configuration file, but not any

	      of the properties below.

      -->

      <exec_method

	type='method'

	name='refresh'

	exec=':kill -HUP'

	timeout_seconds='60'>

	<method_context/>

      </exec_method>

      <property_group name='general' type='framework'>

	<!-- manage DNS server state -->

	<propval name='action_authorization' type='astring'

	  value='solaris.smf.manage.bind' />

	<propval name='value_authorization' type='astring'

	  value='solaris.smf.manage.bind' />

      </property_group>

      <!-- Default property settings for named(1M) instance. -->

      <property_group name='options' type='application'>

	<!--

		server: specifies an alternative server command.  If

		not specified the default /usr/sbin/named is used.

	-->

	<propval name='server' type='astring' value='' />

	<!--

		configuration_file: specifies an alternative

		configuration file to be used. The property is similar

		to named(1M) command line option '-c'

	-->

	<propval name='configuration_file' type='astring' value='' />

	<!--

		ip_interfaces: specifies which IP transport BIND will

		transmit on. Possible values are 'IPv4' or 'IPv6'. Any

		other setting assumes 'all', the default.

		Equivalent command line option '-4' or '-6'.

	-->

	<propval name='ip_interfaces' type='astring' value='all' />

	<!--

		listen_on_port: Specifies the default UDP and TCP port

		which will be used to listen for DNS requests.

		Equivalent command line option '-p <integer>'.

	-->

	<propval name='listen_on_port' type='integer' value='0' />

	<!--

		debug_level: Specifies the default debug level.  The

		default is 0; no debugging. The Higher the number the

		more verbose debug information becomes.

		Equivalent command line option '-d <integer>'.

	-->

	<propval name='debug_level' type='integer' value='0' />

	<!--

		threads: Specifies the number of cpu worker threads to

		create.  The default of 0 causes named to try and

		determine the number of CPUs present and create one

		thread per CPU.

		Equivalent command line option '-n <integer>'.

	-->

	<propval name='threads' type='integer' value='0' />

	<!--

		chroot_dir: Change the root directory using chroot(2)

		to directory after processing the command line

		arguments, but before reading the configuration file.

		Equivalent command line option '-t <pathname>'.

	-->

	<propval name='chroot_dir' type='astring' value='' />

      </property_group>

	</instance>

	<stability value='Unstable' />

	<template>

		<common_name>

			<loctext xml:lang='C'>

				BIND DNS server

			</loctext>

		</common_name>

		<documentation>

			<manpage title='named' section='1M'

			    manpath='/usr/man' />

		</documentation>

	</template>

</service>

</service_bundle>