git: 9125bc0727db - main - rc.subr: svcj - add a setaudit option

From: Alexander Leidinger <netchild_at_FreeBSD.org>
Date: Sun, 30 Aug 2026 17:43:52 UTC
The branch main has been updated by netchild:

URL: https://cgit.FreeBSD.org/src/commit/?id=9125bc0727dbbf82b1c6a5f7c380f7b8c27b74dd

commit 9125bc0727dbbf82b1c6a5f7c380f7b8c27b74dd
Author:     Alexander Leidinger <netchild@FreeBSD.org>
AuthorDate: 2026-08-30 09:44:59 +0000
Commit:     Alexander Leidinger <netchild@FreeBSD.org>
CommitDate: 2026-08-30 17:43:17 +0000

    rc.subr: svcj - add a setaudit option
    
    setaudit(8) is prefixed to the command inside the jail when
    ${name}_audit_user is set, and needs allow.setaudit.
    
    This is not added automatically when ${name}_audit_user is set, this
    needs an administrative setting of the options on purpose.
    
    MFC after:      1 week
    MFC to:         stable/15
---
 libexec/rc/rc.subr       | 3 +++
 share/man/man5/rc.conf.5 | 6 +++++-
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/libexec/rc/rc.subr b/libexec/rc/rc.subr
index 68d5ab308d0a..336477f6f174 100644
--- a/libexec/rc/rc.subr
+++ b/libexec/rc/rc.subr
@@ -1300,6 +1300,9 @@ run_rc_command()
 			routing)
 				_opts="allow.routing"
 				;;
+			setaudit)
+				_opts="allow.setaudit"
+				;;
 			settime)
 				_opts="allow.settime"
 				;;
diff --git a/share/man/man5/rc.conf.5 b/share/man/man5/rc.conf.5
index f8a3f4f87ce6..9a76f25d7c5c 100644
--- a/share/man/man5/rc.conf.5
+++ b/share/man/man5/rc.conf.5
@@ -22,7 +22,7 @@
 .\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
 .\" SUCH DAMAGE.
 .\"
-.Dd April 2, 2026
+.Dd August 30, 2026
 .Dt RC.CONF 5
 .Os
 .Sh NAME
@@ -5059,6 +5059,10 @@ have not had jail functionality added to them.
 Allows to run nfsd and affiliated daemons.
 .It routing
 Allows to modify the system routing table.
+.It setaudit
+Allows to set the audit properties of the service, which
+.Ao Ar name Ac Ns Va _audit_user
+needs.
 .It settime
 Allows to set and slew the system time.
 .It sysvipc