<?xml version="1.0"?>

<!--

CDDL HEADER START

The contents of this file are subject to the terms of the

Common Development and Distribution License (the "License").

You may not use this file except in compliance with the License.

You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE

or http://www.opensolaris.org/os/licensing.

See the License for the specific language governing permissions

and limitations under the License.

When distributing Covered Code, include this CDDL HEADER in each

file and include the License file at usr/src/OPENSOLARIS.LICENSE.

If applicable, add the following below this CDDL HEADER, with the

fields enclosed by brackets "[]" replaced with your own identifying

information: Portions Copyright [yyyy] [name of copyright owner]

CDDL HEADER END

-->

<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">

<!--

Copyright (c) 2004, 2016, Oracle and/or its affiliates. All rights reserved.

-->

<!-- Portions Copyright 2007 Vedran Bender -->

<service_bundle type='manifest' name='SUNWbindr:dns-server'>

<service

  name='network/dns/server'

  type='service'

  version='1'>

    <dependency

      name='filesystem_minimal'

      grouping='require_all'

      restart_on='none'

      type='service'>

      <service_fmri value='svc:/system/filesystem/local' />

    </dependency>

    <dependency

      name='loopback'

      grouping='require_any'

      restart_on='error'

      type='service'>

      <service_fmri value='svc:/network/loopback' />

    </dependency>

    <dependency

      name='network'

      grouping='optional_all'

      restart_on='error'

      type='service'>

      <service_fmri value='svc:/milestone/network' />

    </dependency>

    <exec_method

      type='method'

      name='stop'

      exec=':kill'

      timeout_seconds='60' />

    <!--

	In order to run multiple named(8) processes with their own

	configuration file or properties each must have a unique

	instance.

    -->

    <instance name='default' enabled='false' >

      <exec_method

	type='method'

	name='start'

	exec='/lib/svc/method/dns-server %m %i'

	timeout_seconds='60' >

	<method_context>

	  <!--

	      privileges: (see privileges(5) and /etc/security/priv_names)

	      file_dac_read, file_dac_search:

			Necessary for reading the configuration file

			even if it is restricted by the file

			permission.

	      net_privaddr:

			Allow Binding to privileged port-number/proto.

			*Port* | *Protocol* | *Comment*

			~~~~~~~|~~~~~~~~~~~~|~~~~~~~~~~~~~~~~~~~~~~~~~~

			53     | TCP/UDP    | Domain Queries

			80     | TCP        | Statistics channel

			921    | UDP        | Lightweight resolver

			953    | TCP        | Remote diagnostic control

		sys_resource:

			Permit the setting of resource limits

			(eg. stack size).

		proc_chroot:

			Permit use of chroot(2).

	  -->

	  <method_credential

	    user='root'

	    group='root'

	    privileges='basic,!proc_session,!proc_info,!file_link_any,{net_privaddr}:53/*,{net_privaddr}:80/tcp,{net_privaddr}:921/udp,{net_privaddr}:953/tcp,file_dac_read,file_dac_search,sys_resource,proc_chroot'

	    />

	</method_context>

      </exec_method>

      <!--

	  SIGHUP causes named to reread its configuration file, but not any

	  of the properties below.

      -->

      <exec_method

	type='method'

	name='refresh'

	exec=':kill -HUP'

	timeout_seconds='60'>

	<method_context/>

      </exec_method>

      <property_group name='general' type='framework'>

	<!-- manage DNS server state -->

	<propval name='action_authorization' type='astring'

	  value='solaris.smf.manage.bind' />

	<propval name='value_authorization' type='astring'

	  value='solaris.smf.manage.bind' />

      </property_group>

      <!-- Default property settings for named(8) instance. -->

      <property_group name='options' type='application'>

	<!--

		server: specifies an alternative server command.  If

		not specified the default /usr/sbin/named is used.

	-->

	<propval name='server' type='astring' value='' />

	<!--

		configuration_file: specifies an alternative

		configuration file to be used. The property is similar

		to named(8) command line option '-c'

	-->

	<propval name='configuration_file' type='astring' value='' />

	<!--

		ip_interfaces: specifies which IP transport BIND will

		transmit on. Possible values are 'IPv4' or 'IPv6'. Any

		other setting assumes 'all', the default.

		Equivalent command line option '-4' or '-6'.

	-->

	<propval name='ip_interfaces' type='astring' value='all' />

	<!--

		listen_on_port: Specifies the default UDP and TCP port

		which will be used to listen for DNS requests.

		Equivalent command line option '-p <integer>'.

	-->

	<propval name='listen_on_port' type='integer' value='0' />

	<!--

		debug_level: Specifies the default debug level.  The

		default is 0; no debugging. The Higher the number the

		more verbose debug information becomes.

		Equivalent command line option '-d <integer>'.

	-->

	<propval name='debug_level' type='integer' value='0' />

	<!--

		threads: Specifies the number of cpu worker threads to

		create.  The default of 0 causes named to try and

		determine the number of CPUs present and create one

		thread per CPU.

		Equivalent command line option '-n <integer>'.

	-->

	<propval name='threads' type='integer' value='0' />

	<!--

		chroot_dir: Change the root directory using chroot(2)

		to directory after processing the command line

		arguments, but before reading the configuration file.

		Equivalent command line option '-t <pathname>'.

	-->

	<propval name='chroot_dir' type='astring' value='' />

	<!--

		listener_threads: Specifies the number of listener

		worker threads to listen for incoming UDP packets on

		each address.  If not specified, named will calculate

		a default value based on the number of detected CPUs:

		1 for 1 CPU, 2 for 2-4 CPUs, and the number of

		detected CPUs divided by 2 for values higher than

		4. If 'threads' has been set to a higher value than

		the number of detected CPUs, then 'listener_threads'

		may be increased as high as that value, but no higher.

		Equivalent command line option '-U <integer>'.

	-->

	<propval name='listener_threads' type='integer' value='0' />

	<!--

		crypto_engine: Specify an alternative OpenSSL engine

		for crypto operations.

		Equivalent command line option '-E <engine-name>'.

	-->

	<propval name='crypto_engine' type='astring' value='' />

      </property_group>

	</instance>

	<stability value='Unstable' />

	<template>

		<common_name>

			<loctext xml:lang='C'>

				BIND DNS server

			</loctext>

		</common_name>

		<documentation>

			<manpage title='dns-server' section='8s'

			    manpath='/usr/man' />

		</documentation>

	</template>

</service>

</service_bundle>