components/proftpd/ftp.xml
author Tomas Klacko <tomas.klacko@oracle.com>
Mon, 06 Oct 2014 02:23:02 -0700
changeset 2133 7a084dcdb9e2
parent 1365 449992904128
permissions -rw-r--r--
19265012 Manifest for ftp service needs to specify ADMIN_HIGH clearance

<?xml version="1.0"?>
<!--
 Copyright (c) 2011, 2014, Oracle and/or its affiliates. All rights reserved.

 CDDL HEADER START

 The contents of this file are subject to the terms of the
 Common Development and Distribution License (the "License").
 You may not use this file except in compliance with the License.

 You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
 or http://www.opensolaris.org/os/licensing.
 See the License for the specific language governing permissions
 and limitations under the License.

 When distributing Covered Code, include this CDDL HEADER in each
 file and include the License file at usr/src/OPENSOLARIS.LICENSE.
 If applicable, add the following below this CDDL HEADER, with the
 fields enclosed by brackets "[]" replaced with your own identifying
 information: Portions Copyright [yyyy] [name of copyright owner]

 CDDL HEADER END

 NOTE:  This service manifest is not editable; its contents will
 be overwritten by package or patch operations, including
 operating system upgrade.  Make customizations in a different
 file.
-->

<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">

<service_bundle type='manifest' name='network/ftp'>
<service name='network/ftp' type='service' version='1'>
	<create_default_instance enabled='false' />

	<single_instance/>

	<dependency name='net-service' grouping='require_all'
			restart_on='none' type='service'>
		<service_fmri value='svc:/network/service'/>
	</dependency>

	<dependency name='network' grouping='require_all'
			restart_on='none' type='service'>
		<service_fmri value='svc:/milestone/network'/>
	</dependency>

	<dependency name='filesystem-local' grouping='require_all'
			restart_on='none' type='service'>
		<service_fmri value='svc:/system/filesystem/local' />
	</dependency>

	<dependency name='name-services' grouping='require_all'
			restart_on='none' type='service'>
		<service_fmri value='svc:/milestone/name-services' />
	</dependency>

	<method_context>
		<method_credential user='root' clearance='ADMIN_HIGH' />
	</method_context>

	<exec_method
		type='method'
		name='start'
		exec='/usr/lib/inet/proftpd'
		timeout_seconds='60'>
		<method_context>
			<method_credential user='root' group='root' />
		</method_context>
	</exec_method>

	<exec_method type='method'
		name='stop'
		exec=':kill'
		timeout_seconds='60'>
	</exec_method>

	<property_group name='general' type='framework'>
		<!-- manage FTP server state -->
		<propval name='action_authorization' type='astring'
		    value='solaris.smf.manage.ftp' />
		<propval name='value_authorization' type='astring'
		    value='solaris.smf.manage.ftp' />
	</property_group>

	<property_group name='startd' type='framework'>
        	<propval name='duration' type='astring' value='contract'/>
		<!-- sub-process core dumps shouldn't restart session -->
		<propval name='ignore_error'
		    type='astring' value='core,signal' />
	</property_group>

	<property_group name='firewall_context' type='com.sun,fw_definition'>
		<propval name='ipf_method' type='astring'
		    value='/lib/svc/method/svc-ftp ipfilter' />
	</property_group>

	<property_group name='firewall_config' type='com.sun,fw_configuration'>
		<propval name='policy' type='astring' value='use_global' />
		<propval name='apply_to' type='astring' value='' />
		<propval name='exceptions' type='astring' value='' />
		<propval name='value_authorization' type='astring'
		    value='solaris.smf.value.firewall.config' />
	</property_group>

	<template>
		<common_name>
			<loctext xml:lang='C'>
			FTP server
			</loctext>      
		</common_name>
		<documentation>
			<manpage title='proftpd' section='1M'
			    manpath='/usr/share/man' />
			<doc_link name='proftpd'
			    uri='file://usr/share/doc/proftpd/' />
		</documentation>
	</template>
</service>

</service_bundle>