schg flags from installworld

Gareth de Vaux bsd at
Wed Sep 19 13:01:07 UTC 2012

On Tue 2012-09-18 (23:31), Gareth de Vaux wrote:
> Looking at /usr/src/share/mk/ and /usr/src/share/mk/ -
> bins and libs get installed with schg if PRECIOUSPROG and PRECIOUSLIB are
> set respectively in their makefiles, both of which can be overridden by
> setting NO_FSCHG, presumably in /etc/make.conf.
> Without this doing jail maintenance/upgrades is a nightmare on a host with
> a securelevel of 1 but I haven't seen this mentioned anywhere.

For the record the override works, except with /usr/bin/passwd. There seems
to be a missing 'if !defined(NO_FSCHG)' condition around the afterinstall
in /usr/src/usr.bin/passwd/Makefile.

More information about the freebsd-questions mailing list