Martin Bley(martin.b...@bvl.bund.de) on 2012.05.03 08:49:41 +0200: > Hi, > > Am 28.03.2012 13:30, schrieb Stuart Henderson: > > Looks like this probably got broken in the proc.c privsep reorganization. > > Try 'cvs up -D 2011/05/08" in src/usr.sbin/relayd and relayctl and > rebuilding. > > > > Date: 2011/05/09 13:08:47 > > Author: reyk > > Branch: HEAD > > Tag: (none) > > Log: > > Reorganize the relayd code to use the proc.c privsep API/commodity > > functions that are based on work for iked and smtpd. This simplifies > > the setup of privsep processes and moves some redundant and repeated > > code to a single place - which is always good from a quality and > > security point of view. The relayd version of proc.c is different to > > the current version in iked because it uses 1:N communications between > > processes, eg. a single parent process is talking to many forked relay > > children while iked only needs 1:1 communications. > > I think this is still broken in 5.1?
Yes, 5.1 was already finished at the end of march. I also dont think anything changed in -current since then. > Any hints how to fix this in an 5.1 upgraded installation? Did you try to revert the relayd change as shown above? /Benno
